PC de plus en plus lent sans raison apparente

Question

Bonjour, voila mon pc n'est pas vraiment très récent donc pas performant au possible, mais depuis 2mois il rencontre plusieurs problèmes:
-Lors du démarrage, le ventilateur s'accélère un grand coup, plus le pc s'éteint pour se relancer tout de suite après, puis se rééteint....et ainsi de suite.
-Les applications deviennent floues au moment de les fermer. (ralentissement évident)
-2  applications simultannées suffisent à le stoper pendant 10min. ( Mon pc gérait parfaitement ça il ya 2mois )
-Mon clavier et ma souris se blockent en même temps, impossible de faire quoi que ce soit. Ils se réactivent 1heure plus tard sans avoir fait quelquechose pour.

Je voulais avoir votre avis, si c'est un virus ou un trojan, ou si je dois chnger de matériel.
Je m'y connait pas vraiment en pc.

HP pavillon 1207.fr
AMD sempron 1790MHz 3000+
Ati Radeon Xpress 200
958Mo DDR  de mémoire physique

Merci

Utilisateur anonyme · Answer

bonjour essaie ceci , on va regarder 

telecharge hijackthis https://forums.cnetfrance.fr

instale et accepte le contrat d'accord

=Double-clic dessus
= Clic Do a scan system and save the log
= copie et coller le rapport dans ta prochaine reponse

si problème voir l'aide
[http://perso.orange.fr/rginformatique/section%20virus/demoh­i­jack.htm

psychopath66 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:37:20, on 28/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Cegetel\C-BOX\Wizard\Agent_WiFi.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\divxsm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Lavalys\EVEREST Home Edition\everest.bin
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Répertoire temporaire 3 pour hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.gamesload.fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [regcmdcons] c:\hp\bin\cloaker.exe c:\hp\bin\cmdcons.cmd
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Cegetel\C-BOX\Wizard\Agent_WiFi.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Utilisateur anonyme · Answer

parfait on va commencer comme celas


---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

psychopath66 · Answer

-----------\  ToolBar S&D 1.2.4   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : HP_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 081027-1] 4.8.1229 (Activated)
   Firewall  : ZoneAlarm Firewall 7.0.483.000 (Activated)
   C:\ (Local Disk) - NTFS - Total:143 Go (Free:28 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
   E:\ (CD or DVD)
   F:\ (CD or DVD)
   G:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go)

   "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
   Option : [1] ( 28/10/2008|18:53 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\mct2FF.tmp
   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
sa22A.tmp
   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
sq22B.tmp

   -----------\  Extensions

   (HP_Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (HP_Propri‚taire) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://www.ustart.org"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://actus.sfr.fr"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="http://www.ustart.org"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX00.593\Crack
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX00.593\Crack\YoutubeGet.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.234\Crack
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.234\Crack\YoutubeGet.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crack
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crack\battlefrontII.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crackld-swbf2kg.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crack
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crack\battlefrontII.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crackld-swbf2kg.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX07.937\Crack
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX07.937\Crack\YoutubeGet.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crack
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crack\battlefrontII.exe
   C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crackld-swbf2kg.exe
   C:\DOCUME~1\HP_PRO~1\Mes documents\Ma musique\Pixies - 10 Albums (4AD)\1989 - Doolittle	he_pixies-09-crackity_jones.mp3
   C:\DOCUME~1\HP_PRO~1\Mes documents\Ma musique\Pixies - 10 Albums (4AD)\Death to Pixies\cd2\pixies-14-crackity_jones.mp3

Utilisateur anonyme · Answer

ok relance toolbar sd selectione le language ensuite selection supprimer 

copie et colle le rapport genere dans ta prochaine reponse , je prepare la suite

Utilisateur anonyme · Answer

tu dois te separer de tes cracks ils sont infectés



télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

Citation :


C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX00.593\Crack
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX00.593\Crack\YoutubeGet.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.234\Crack
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.234\Crack\YoutubeGet.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crack
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crack\battlefrontII.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crackld-swbf2kg.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crack
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crack\battlefrontII.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crackld-swbf2kg.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX07.937\Crack
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX07.937\Crack\YoutubeGet.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crack
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crack\battlefrontII.exe
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crackld-swbf2kg.exe
C:\DOCUME~1\HP_PRO~1\Mes documents\Ma musique\Pixies - 10 Albums (4AD)\1989 - Doolittle	he_pixies-09-crackity_jones.mp3
C:\DOCUME~1\HP_PRO~1\Mes documents\Ma musique\Pixies - 10 Albums (4AD)\Death to Pixies\cd2\pixies-14-crackity_jones.mp3



clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
copie et colle le rapport ici
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

psychopath66 · Answer

C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX00.593\Crack moved successfully.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX00.593\Crack\YoutubeGet.exe not found.
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.234\Crack moved successfully.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.234\Crack\YoutubeGet.exe not found.
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crack moved successfully.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crack\battlefrontII.exe not found.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX01.578\Crackld-swbf2kg.exe not found.
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crack moved successfully.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crack\battlefrontII.exe not found.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX05.750\Crackld-swbf2kg.exe not found.
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX07.937\Crack moved successfully.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX07.937\Crack\YoutubeGet.exe not found.
C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crack moved successfully.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crack\battlefrontII.exe not found.
File/Folder C:\DOCUME~1\HP_PRO~1\Local Settings\Temp\Rar$EX27.360\Crackld-swbf2kg.exe not found.
C:\DOCUME~1\HP_PRO~1\Mes documents\Ma musique\Pixies - 10 Albums (4AD)\1989 - Doolittle	he_pixies-09-crackity_jones.mp3 moved successfully.
C:\DOCUME~1\HP_PRO~1\Mes documents\Ma musique\Pixies - 10 Albums (4AD)\Death to Pixies\cd2\pixies-14-crackity_jones.mp3 moved successfully.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 10282008_191526

Utilisateur anonyme · Answer

parfait , mais tu as sauté cette etape

poste n° 5

http://www.commentcamarche.net/forum/affich 9115609 pc de plus en plus lent sans raison apparente?#5

psychopath66 · Answer

Arf, j'ai zapé quoi ?
-J'ai téléchargé OTMoveIt
-J'ai collé la citation et suprimeé, le résultat est apparut dans results.
-J'ai quitté
-J'ai copier le rapport présent dans C:\_OTMoveIt\MovedFiles. 
-Il ne m'a pas demandé de redémarrer mais je l'ai quand même fait.

C'est aps le bon rapport ?

psychopath66 · Answer

a nan j'avais aps vu en effet escuse moi, ba jle fait de suite

psychopath66 · Answer

-----------\  ToolBar S&D 1.2.4   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : HP_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 081028-0] 4.8.1229 (Activated)
   Firewall  : ZoneAlarm Firewall 7.0.483.000 (Activated)
   C:\ (Local Disk) - NTFS - Total:143 Go (Free:28 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
   E:\ (CD or DVD)
   F:\ (CD or DVD)
   G:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go)

   "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
   Option : [2] ( 28/10/2008|19:46 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\mct2FF.tmp
   Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
sa22A.tmp
   Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
sq22B.tmp

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (HP_Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (HP_Propri‚taire) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://www.ustart.org"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://actus.sfr.fr"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 28/10/2008|18:56 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 28/10/2008|19:50 - Option : [2]

   -----------\  Fin du rapport a 19:50:18,01

Utilisateur anonyme · Answer

bien joué maintenant effectue un scan avec malwarebytes



1) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton bureau à partir de ce lien :

https://www.malwarebytes.com/

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter une analyse complete" est bien coché et clique sur le bouton ensuite selectionne tout les lecteurs Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Ferme le bloc-note. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAM en cliquant sur Quitter.

psychopath66 · Answer

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1333
Windows 5.1.2600 Service Pack 3

28/10/2008 23:04:01
mbam-log-2008-10-28 (23-04-01).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|)
Eléments examinés: 186690
Temps écoulé: 1 hour(s), 51 minute(s), 54 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\AVS (Rogue.AntiVirusSentry) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\youtubex.dll (Trojan.Agent) -> Quarantined and deleted successfully.

Utilisateur anonyme · Answer

bonjour je vois que ca avance bien !! ;-))

poste stp un nouveau rapport hijackthis stp

psychopath66 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:26:44, on 29/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Cegetel\C-BOX\Wizard\Agent_WiFi.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.gamesload.fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [regcmdcons] c:\hp\bin\cloaker.exe c:\hp\bin\cmdcons.cmd
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Cegetel\C-BOX\Wizard\Agent_WiFi.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Utilisateur anonyme · Answer

bon ok on va aller voir plus profond



Télécharges ComboFix à partir d'un de ces liens :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
https://forospyware.com
http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/

Et important, enregistre le sur le bureau.

Avant d'utiliser ComboFix :

&#9658; Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

&#9658; Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.


Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

&#9658; Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

&#9658; Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

psychopath66 · Answer

Euh, j'ai reçu un message: Vous ne possédez pas "WINDOWS RECOVERY CONSOLE" il est préférable dans votre propre intéret de posséder ce logiciel. Pour l'obtenir vous devez avoir une conexion internet. Là j'ai OUI ou NON

Je fais quoi ? :/

Utilisateur anonyme · Answer

continu oui

psychopath66 · Answer

sans prendre windows recovery console ok

Utilisateur anonyme · Answer

oui continu sans , execute l'outil comme citée dans les instructions postes 16

Utilisateur anonyme · Answer

bonjour , oui il faut tout recommencer;-)

Utilisateur anonyme · Answer

# Télécharger la dernière version de Lop S&D sur le Bureau,

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

# Double-cliquer sur Lop S&D.exe pour lancer l'installation,

# Puis double-cliquer sur le raccourci Lop S&D présent sur le Bureau,

Attention Désactivez les protections résidentes : Antivirus, antispywares, controleurs d'intégrité, etc... pour que l'outil puisse s'exécuter correctement.

# Séléctionner la langue souhaitée , puis choisir l'Option 1 (Recherche)

# Le scan prend moins d'une minute,

# A l'issue du scan, le bloc notes va s'ouvrir avec le résultat de la recherche,

# Enregistrer le rapport LopR.txt sur le Bureau ou dans "Mes Documents" pour le retrouver facilement, sinon il sauvegardé automatiquement à la racine de la partition système : C:\LopR.txt

psychopath66 · Answer

--------------------\  Lop S&D 4.2.4-9c   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : HP_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 081103-0] 4.8.1229 (Not Activated)
   Firewall  : ZoneAlarm Firewall 7.0.483.000 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:143 Go (Free:23 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
   E:\ (CD or DVD)
   F:\ (CD or DVD)
   G:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
   Option : [1] ( 04/11/2008|17:42 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [03/09/2008|12:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [07/06/2007|17:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
   [29/11/2006|21:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [23/01/2008|01:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
   [08/04/2007|10:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [14/01/2008|08:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exetender
   [13/09/2006|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [02/01/2005|23:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [31/05/2008|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
   [02/01/2005|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [30/09/2007|22:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
   [28/10/2008|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [21/05/2006|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
   [03/03/2006|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [07/06/2007|17:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [09/10/2006|15:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [03/12/2007|00:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OrbNetworks
   [05/01/2007|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
   [09/05/2006|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [02/01/2005|23:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [11/06/2006|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [02/01/2005|23:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [30/04/2006|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
   [26/05/2006|23:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [22/10/2006|10:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [01/03/2006|20:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [02/01/2005|23:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [25/11/2004|04:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [03/01/2005|00:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [02/01/2005|23:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [03/01/2005|00:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec



   [31/08/2008|16:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [04/09/2008|17:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [30/11/2006|21:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [04/11/2008|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus
   [08/04/2007|10:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CyberLink
   [24/07/2007|13:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
   [29/03/2008|12:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\dvdcss
   [13/09/2006|16:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [04/11/2008|17:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Hamachi
   [02/03/2006|21:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [31/01/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
   [25/01/2006|19:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
   [25/11/2004|04:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [15/01/2006|22:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
   [04/02/2008|02:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Kptic
   [02/03/2006|21:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [22/03/2006|13:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [28/10/2008|21:06] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
   [26/10/2006|16:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Media Player Classic
   [26/10/2008|21:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [03/03/2007|15:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MoyeaFLV2Video
   [07/07/2008|04:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [09/10/2006|15:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
   [06/06/2008|01:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nokia
   [14/10/2007|15:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Notepad++
   [19/10/2008|19:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
   [03/09/2008|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Opera
   [05/01/2007|20:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Suite
   [07/08/2008|22:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
   [02/01/2005|23:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [09/04/2006|22:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SecuROM
   [04/11/2008|16:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
   [02/03/2006|21:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [30/04/2006|20:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sony Corporation
   [23/03/2006|22:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [16/01/2006|21:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
   [02/04/2007|17:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
   [28/01/2007|01:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
   [05/12/2007|16:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Winamp

   [29/11/2006|17:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [08/10/2006|20:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [17/07/2006|00:59] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [04/11/2008 17:42][--a------] C:\WINDOWS	asks\Symantec NetDetect.job
   [26/10/2008 23:07][--a------] C:\WINDOWS	asks\HPCeeSchedule.job
   [04/11/2008 15:53][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 19:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [07/06/2007|18:08] C:\Program Files\Adobe
   [08/04/2007|10:37] C:\Program Files\Ahead
   [21/10/2006|23:49] C:\Program Files\Alwil Software
   [02/01/2005|23:26] C:\Program Files\ATI Technologies
   [13/01/2007|19:46] C:\Program Files\Audacity
   [31/10/2008|00:37] C:\Program Files\AVIConverter
   [02/07/2008|16:33] C:\Program Files\Azureus
   [16/01/2006|20:50] C:\Program Files\Cegetel
   [26/10/2006|16:08] C:\Program Files\Combined Community Codec Pack
   [24/11/2004|02:37] C:\Program Files\ComPlus Applications
   [13/02/2006|15:51] C:\Program Files\Creative
   [08/04/2007|10:16] C:\Program Files\CyberLink
   [08/04/2007|22:17] C:\Program Files\CyberLink DVD Solution
   [16/12/2007|04:47] C:\Program Files\DAEMON Tools
   [06/04/2007|19:51] C:\Program Files\DaemonTools_WhenUSave_Installer
   [04/11/2008|00:16] C:\Program Files\Diablo II
   [07/07/2008|04:12] C:\Program Files\DIFX
   [31/07/2008|00:34] C:\Program Files\DivX
   [03/07/2006|15:42] C:\Program Files\Easy Internet signup
   [16/01/2008|16:14] C:\Program Files\EPSON
   [04/11/2008|02:09] C:\Program Files\Fichiers communs
   [07/07/2008|04:13] C:\Program Files\GameSpy Arcade
   [15/03/2007|23:49] C:\Program Files\Google
   [13/01/2007|17:10] C:\Program Files\Guitar Pro 5
   [04/11/2008|01:59] C:\Program Files\GuitarFX 3
   [04/11/2008|15:35] C:\Program Files\Hamachi
   [02/01/2005|23:45] C:\Program Files\Hewlett-Packard
   [02/01/2005|23:33] C:\Program Files\HP
   [04/11/2008|15:57] C:\Program Files\InstallShield Installation Information
   [04/11/2008|02:01] C:\Program Files\Internet Explorer
   [02/01/2005|23:46] C:\Program Files\InterVideo
   [29/11/2006|21:47] C:\Program Files\iPod
   [29/11/2006|21:47] C:\Program Files\iTunes
   [02/01/2005|23:19] C:\Program Files\Java
   [09/10/2006|19:04] C:\Program Files\KYE
   [04/04/2007|21:19] C:\Program Files\Lavalys
   [04/11/2008|01:59] C:\Program Files\Malwarebytes' Anti-Malware
   [04/11/2008|02:03] C:\Program Files\Messenger
   [07/07/2008|04:14] C:\Program Files\Messenger Plus! Live
   [30/08/2006|11:46] C:\Program Files\MessengerPlus! 3
   [25/11/2004|04:27] C:\Program Files\microsoft frontpage
   [07/07/2008|04:14] C:\Program Files\Microsoft Games
   [13/03/2008|23:21] C:\Program Files\Microsoft Office
   [03/07/2006|15:42] C:\Program Files\Microsoft Works
   [04/11/2008|02:04] C:\Program Files\Movie Maker
   [04/11/2008|17:09] C:\Program Files\Mozilla Firefox
   [13/03/2008|23:20] C:\Program Files\MSECache
   [21/10/2006|22:11] C:\Program Files\MSN
   [16/01/2006|21:44] C:\Program Files\MSN Apps
   [24/01/2007|15:39] C:\Program Files\MSN Gaming Zone
   [04/11/2008|02:02] C:\Program Files\MSN Messenger
   [15/11/2006|23:11] C:\Program Files\MSXML 4.0
   [02/01/2005|23:52] C:\Program Files\muvee Technologies
   [14/01/2008|23:25] C:\Program Files\Neonumeric
   [04/11/2008|02:04] C:\Program Files\NetMeeting
   [07/07/2008|04:12] C:\Program Files\Nokia
   [14/10/2007|15:10] C:\Program Files\Notepad++
   [25/11/2004|04:27] C:\Program Files\Online Services
   [01/07/2007|22:45] C:\Program Files\OpenOffice.org 2.2
   [26/02/2008|13:57] C:\Program Files\Outils de Guitare-Online
   [04/11/2008|02:04] C:\Program Files\Outlook Express
   [07/07/2008|04:12] C:\Program Files\PC Connectivity Solution
   [03/07/2006|15:42] C:\Program Files\PC-Doctor 5 for Windows
   [19/02/2008|23:06] C:\Program Files\Player Metaboli
   [21/04/2006|18:35] C:\Program Files\Psygnosis
   [29/11/2006|21:46] C:\Program Files\QuickTime
   [31/01/2006|18:33] C:\Program Files\Real
   [03/01/2005|00:02] C:\Program Files\Services en ligne
   [11/06/2006|12:04] C:\Program Files\Skype
   [02/01/2005|23:44] C:\Program Files\Sonic
   [30/04/2006|20:41] C:\Program Files\Sony
   [08/06/2007|00:37] C:\Program Files\SpeedSim
   [04/11/2008|02:08] C:\Program Files\Spybot - Search & Destroy
   [03/07/2006|15:38] C:\Program Files\Stardock
   [01/11/2008|08:56] C:\Program Files\StuffPlug3
   [21/10/2006|23:48] C:\Program Files\Symantec
   [23/01/2008|11:56] C:\Program Files\TryMedia
   [04/11/2008|00:50] C:\Program Files\Ubisoft
   [04/11/2008|01:59] C:\Program Files\Ultrawave Guitar Multi Fx
   [07/05/2007|22:12] C:\Program Files\Uninstall Information
   [19/02/2008|20:58] C:\Program Files\Veoh Networks
   [28/01/2007|01:15] C:\Program Files\VideoLAN
   [02/12/2007|15:43] C:\Program Files\Winamp
   [12/05/2008|11:04] C:\Program Files\Winamp Remote
   [11/05/2006|20:26] C:\Program Files\Windows Journal Viewer
   [04/06/2007|16:30] C:\Program Files\Windows Live
   [29/11/2006|17:38] C:\Program Files\Windows Media Connect 2
   [04/11/2008|02:04] C:\Program Files\Windows Media Player
   [04/11/2008|02:04] C:\Program Files\Windows NT
   [24/11/2004|02:37] C:\Program Files\WindowsUpdate
   [26/10/2006|21:58] C:\Program Files\WinRAR
   [29/08/2006|20:29] C:\Program Files\Wizards of the Coast
   [07/07/2008|04:13] C:\Program Files\Wolfenstein - Enemy Territory
   [25/11/2004|04:28] C:\Program Files\xerox
   [30/09/2007|22:32] C:\Program Files\Zone Labs

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [03/09/2008|12:47] C:\Program Files\Fichiers communs\Adobe
   [07/06/2007|17:37] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [08/04/2007|10:37] C:\Program Files\Fichiers communs\Ahead
   [28/04/2007|09:24] C:\Program Files\Fichiers communs\Blizzard Entertainment
   [06/11/2006|21:17] C:\Program Files\Fichiers communs\DirectX
   [02/01/2005|23:39] C:\Program Files\Fichiers communs\Hewlett-Packard
   [02/01/2005|23:36] C:\Program Files\Fichiers communs\HP
   [02/01/2005|23:52] C:\Program Files\Fichiers communs\InstallShield
   [02/01/2005|23:19] C:\Program Files\Fichiers communs\Java
   [13/03/2008|23:21] C:\Program Files\Fichiers communs\Microsoft Shared
   [25/11/2004|04:26] C:\Program Files\Fichiers communs\MSSoap
   [02/01/2005|23:52] C:\Program Files\Fichiers communs\muvee Technologies
   [25/11/2004|04:26] C:\Program Files\Fichiers communs\ODBC
   [04/11/2008|02:09] C:\Program Files\Fichiers communs\Real
   [01/02/2005|08:58] C:\Program Files\Fichiers communs\Services
   [02/01/2005|23:43] C:\Program Files\Fichiers communs\Sonic Shared
   [30/04/2006|20:39] C:\Program Files\Fichiers communs\Sony Shared
   [25/11/2004|04:26] C:\Program Files\Fichiers communs\SpeechEngines
   [08/07/2006|11:28] C:\Program Files\Fichiers communs\Stardock
   [02/01/2005|23:43] C:\Program Files\Fichiers communs\SureThing Shared
   [22/10/2006|10:41] C:\Program Files\Fichiers communs\Symantec Shared
   [04/11/2008|02:04] C:\Program Files\Fichiers communs\System
   [02/01/2005|23:44] C:\Program Files\Fichiers communs\TiVo Shared
   [04/11/2008|02:09] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 52 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_3357.tmp
   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_abfa.tmp
   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_c5c7.tmp
   C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_e9b8.tmp
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adserver.advertstream[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertstream[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adultfriendfinder[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@bigpoint[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@fr1.darkorbit.bigpoint[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[2].txt
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-11-04 17:45:43
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 422
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:5001][D:229]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:307][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:2570][D:7]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 04/11/2008|17:50 - Option : [1]

   --------------------\  Fin du rapport a 17:50:00
voila voila

Utilisateur anonyme · Answer

ok relance lop sd et selectionne cette fois ci l'option 2 l'outil va travailler 

laisse faire et suis les directives
copie et colle le rapport qui seras genere  dans ta prochaine reponse

Utilisateur anonyme · Answer

parfait ,poste stp un nouveau rapport hijackthis stp

Utilisateur anonyme · Answer

bonjour fait ceci


* Fais un scan antivirus en ligne ICI :

https://www.bitdefender.fr/

et copie colle le résultat ici
* En bas, à gauche de la fenêtre, clique sur "BitDefender SCAN ONLINE"
* Dans la nouvelle fenêtre, clique sur "I agree"
* La fenêtre change encore, clique sur "Click here to scan"
* Les signatures se chargent, etc.

Tuto (merci Morgane)

http://pageperso.aol.fr/loraline60/bitdefender_scan.htm

le rapport de scan se trouve ici

C:\windows\bdoscan8\scanres.txt ou scanres.html

Utilisateur anonyme · Answer

bon on va essayer chez eset


https://www.eset.com/

Utilisateur anonyme · Answer

bonjour



telecharge le desinstalateur d'avast

http://www.commentcamarche.net/telecharger/telechargement 34055246 utilitaire de desinstallation de avast

telecharge antivir

anti virus : antivir

https://www.malekal.com/avira-free-security-antivirus-gratuit/

http://mickael.barroux.free.fr/securite/antivir.php <- tutoriel + complet



ensuite hors connection internet execute l'outil de desinstalation de avast 

apres redemarrage instal l'antivirus antivir free qui est bien plus performant



une fois antivir instalé et configuré effectu un scan complet de ton pc , copie et colle le rapport de scan dans ta prochaine reponse

psychopath66 · Answer

Bonjour, excuse moi pour mes conexions plus qu'aléatoires.... Avira AntiVir Personal Report file date: jeudi 13 novembre 2008 20:52 Scanning for 1032172 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Boot mode: Normally booted Username: HP_Propriétaire Computer name: ENER Version information: BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00 AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:53 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 22:29:14 ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 00:58:28 ANTIVIR2.VDF : 7.1.0.57 2048 Bytes 09/11/2008 00:58:29 ANTIVIR3.VDF : 7.1.0.76 161280 Bytes 12/11/2008 23:32:10 Engineversion : 8.2.0.31 AEVDF.DLL : 8.1.0.6 102772 Bytes 06/11/2008 22:29:35 AESCRIPT.DLL : 8.1.1.15 332156 Bytes 11/11/2008 23:31:48 AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 22:27:18 AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 22:29:31 AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 23:31:47 AEOFFICE.DLL : 8.1.0.30 196986 Bytes 07/11/2008 22:27:17 AEHEUR.DLL : 8.1.0.71 1487222 Bytes 07/11/2008 22:27:16 AEHELP.DLL : 8.1.1.3 119157 Bytes 07/11/2008 22:27:13 AEGEN.DLL : 8.1.1.0 319859 Bytes 07/11/2008 22:27:12 AEEMU.DLL : 8.1.0.9 393588 Bytes 06/11/2008 22:29:21 AECORE.DLL : 8.1.4.1 172405 Bytes 07/11/2008 22:27:01 AEBB.DLL : 8.1.0.3 53618 Bytes 06/11/2008 22:29:19 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 06/11/2008 22:29:19 AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, D:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: jeudi 13 novembre 2008 20:52 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'usnsvc.exe' - '1' Module(s) have been scanned Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned Scan process 'Agent_WiFi.exe' - '1' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'QuickAccess.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'InCD.exe' - '1' Module(s) have been scanned Scan process 'issch.exe' - '1' Module(s) have been scanned Scan process 'kbd.exe' - '1' Module(s) have been scanned Scan process 'SSAAD.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'qttask.exe' - '1' Module(s) have been scanned Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned Scan process 'ALCXMNTR.EXE' - '1' Module(s) have been scanned Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned Scan process 'hpsysdrv.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'wscntfy.exe' - '1' Module(s) have been scanned Scan process 'UAService7.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'InCDsrv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 45 processes with 45 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '72' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\HP_Propriétaire\Bureau\(pc games) Star Wars Galactic Battlegrounds.zip [0] Archive type: ZIP SFX (self extracting) --> Stwars_Galactic_Battlegrounds/swbg.ace [1] Archive type: ACE --> Game\Avi\logo1.avi [WARNING] No further files can be extracted from this archive. The archive will be closed C:\Documents and Settings\HP_Propriétaire\Bureau\(pc games) Star Wars Galactic Battlegrounds\Stwars_Galactic_Battlegrounds\swbg.ace [0] Archive type: ACE --> Game\Avi\logo1.avi [WARNING] No further files can be extracted from this archive. The archive will be closed C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\GSZKR156\OnlineScanner[1].cab [0] Archive type: CAB (Microsoft) --> OnlineScannerLang.dll [WARNING] No further files can be extracted from this archive. The archive will be closed C:\WINDOWS\system32\drivers\sptd.sys [WARNING] The file could not be opened! Begin scan in 'D:\' End of the scan: jeudi 13 novembre 2008 22:51 Used time: 1:58:42 Hour(s) The scan has been done completely. 10945 Scanning directories 463691 Files were scanned 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were renamed 2 Files cannot be scanned 463688 Files not concerned 14229 Archives were scanned 5 Warnings 1 Notes

Utilisateur anonyme · Answer

bonjour execute ceci 

tu n'a activer la recherche de rootkit de antivir ,

Search for rootkits..............: off 


cherche dans sa configuration et active ce module !



ensuite 



Désactiver les fichiers cachés :
- Panneau Config > Apparences & Thèmes > Options des Dossiers (onglet Affichage)
- Cocher « Afficher Fichiers & Dossiers cachés ».
- Décocher « masquer les extensions de fichiers dont le type est connu ».
- Décocher « masquer les Fichiers protégés du Système d’Exploitation ».




ensuite va faire analyser ces dossiers sur virus total


Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ces fichiers ( tu ne peu analyser qu'un seul fichier a la fois ) :



C:\Documents and Settings\HP_Propriétaire\Bureau\(pc games) Star Wars Galactic Battlegrounds.zip 

C:\Documents and Settings\HP_Propriétaire\Bureau\(pc games) Star Wars Galactic Battlegrounds\Stwars_Galactic_Battlegrounds\swbg.ace 

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\GSZKR156\OnlineScanner[1].cab 

C:\WINDOWS\system32\drivers\sptd.sys 


Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse.

Utilisateur anonyme · Answer

bonjour , si antivir te demande de mettre en quarentaine , fait le il n'y a pas de risque  

je regarde tes rapprorts et te tiens informé

psychopath66 · Answer

Okay merci, ba voilà le nouveau rapport antivir: Avira AntiVir Personal Report file date: vendredi 14 novembre 2008 19:54 Scanning for 1034249 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Boot mode: Normally booted Username: HP_Propriétaire Computer name: ENER Version information: BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00 AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:53 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 22:29:14 ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 00:58:28 ANTIVIR2.VDF : 7.1.0.57 2048 Bytes 09/11/2008 00:58:29 ANTIVIR3.VDF : 7.1.0.83 190976 Bytes 13/11/2008 23:33:05 Engineversion : 8.2.0.31 AEVDF.DLL : 8.1.0.6 102772 Bytes 06/11/2008 22:29:35 AESCRIPT.DLL : 8.1.1.15 332156 Bytes 11/11/2008 23:31:48 AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 22:27:18 AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 22:29:31 AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 23:31:47 AEOFFICE.DLL : 8.1.0.30 196986 Bytes 07/11/2008 22:27:17 AEHEUR.DLL : 8.1.0.71 1487222 Bytes 07/11/2008 22:27:16 AEHELP.DLL : 8.1.1.3 119157 Bytes 07/11/2008 22:27:13 AEGEN.DLL : 8.1.1.0 319859 Bytes 07/11/2008 22:27:12 AEEMU.DLL : 8.1.0.9 393588 Bytes 06/11/2008 22:29:21 AECORE.DLL : 8.1.4.1 172405 Bytes 07/11/2008 22:27:01 AEBB.DLL : 8.1.0.3 53618 Bytes 06/11/2008 22:29:19 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 06/11/2008 22:29:19 AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, D:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: on Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: vendredi 14 novembre 2008 19:54 Starting search for hidden objects. '94446' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'DivXsm.exe' - '1' Module(s) have been scanned Scan process 'wmplayer.exe' - '1' Module(s) have been scanned Scan process 'TuneUpDefragService.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'usnsvc.exe' - '1' Module(s) have been scanned Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned Scan process 'Agent_WiFi.exe' - '1' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'QuickAccess.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'InCD.exe' - '1' Module(s) have been scanned Scan process 'issch.exe' - '1' Module(s) have been scanned Scan process 'kbd.exe' - '1' Module(s) have been scanned Scan process 'SSAAD.exe' - '1' Module(s) have been scanned Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned Scan process 'ALCXMNTR.EXE' - '1' Module(s) have been scanned Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned Scan process 'hpsysdrv.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'wscntfy.exe' - '1' Module(s) have been scanned Scan process 'UAService7.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'InCDsrv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 47 processes with 47 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '72' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\HP_Propriétaire\Bureau\(pc games) Star Wars Galactic Battlegrounds.zip [0] Archive type: ZIP SFX (self extracting) --> Stwars_Galactic_Battlegrounds/swbg.ace [1] Archive type: ACE --> Game\Avi\logo1.avi [WARNING] No further files can be extracted from this archive. The archive will be closed C:\Documents and Settings\HP_Propriétaire\Bureau\(pc games) Star Wars Galactic Battlegrounds\Stwars_Galactic_Battlegrounds\swbg.ace [0] Archive type: ACE --> Game\Avi\logo1.avi [WARNING] No further files can be extracted from this archive. The archive will be closed C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\GSZKR156\OnlineScanner[1].cab [0] Archive type: CAB (Microsoft) --> OnlineScannerLang.dll [WARNING] No further files can be extracted from this archive. The archive will be closed C:\Program Files\Nokia\Connectivity Cable Driver\nmwcdcj.sys [DETECTION] Is the TR/Drop.SFC Trojan [NOTE] The file was moved to '4994e42e.qua'! C:\Program Files\Nokia\Connectivity Cable Driver\nmwcdcm.sys [DETECTION] Is the TR/Drop.SFC Trojan [NOTE] The file was moved to '4994e432.qua'! C:\WINDOWS\system32\drivers\nmwcdcj.sys [DETECTION] Is the TR/Drop.SFC Trojan [WARNING] The file was ignored! C:\WINDOWS\system32\drivers\nmwcdcm.sys [DETECTION] Is the TR/Drop.SFC Trojan [WARNING] The file was ignored! C:\WINDOWS\system32\drivers\sptd.sys [WARNING] The file could not be opened! C:\WINDOWS\system32\DRVSTORE\nmwcdcj_F3FA2468AF360A65811B287DD7A88CB715CF7275\nmwcdcj.sys [DETECTION] Is the TR/Drop.SFC Trojan [WARNING] The file was ignored! C:\WINDOWS\system32\DRVSTORE\nmwcdm2k_F3FA2468AF360A65811B287DD7A88CB715CF7275\nmwcdcm.sys [DETECTION] Is the TR/Drop.SFC Trojan [NOTE] The file was moved to '4995c5d0.qua'! Begin scan in 'D:\' End of the scan: samedi 15 novembre 2008 13:58 Used time: 18:04:48 Hour(s) The scan has been done completely. 10942 Scanning directories 463838 Files were scanned 6 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 3 files were moved to quarantine 0 files were renamed 2 Files cannot be scanned 463830 Files not concerned 14181 Archives were scanned 8 Warnings 3 Notes 94446 Objects were scanned with rootkit scan 0 Hidden objects were found

Utilisateur anonyme · Answer

Télécharge OTMoveIt3 de OldTimer sur ton Bureau en cliquant sur ce lien :

http://oldtimer.geekstogo.com/OTMoveIt3.exe

Double-clique sur OTMoveIt3.exe pour le lancer.

Vérifie que la case devant "Unregister Dll's and Ocx's est bien cochée.

Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans le cadre de gauche de OTMoveIt : "Paste instructions for item to be moved".


:Processes
explorer.exe

:Services

:Reg

:Files
C:\WINDOWS\system32\DRVSTORE
mwcdcj_F3FA2468AF360A65811B287DD7A88CB715CF7275
mwcdcj.sys 
C:\WINDOWS\system32\DRVSTORE
mwcdm2k_F3FA2468AF360A65811B287DD7A88CB715CF7275
mwcdcm.sys 
C:\WINDOWS\system32\drivers
mwcdcm.sys 
C:\Program Files\Nokia\Connectivity Cable Driver
mwcdcm.sys
C:\Program Files\Nokia\Connectivity Cable Driver
mwcdcj.sys 
C:\WINDOWS\system32\drivers
mwcdcj.sys 

:Commands
[start explorer]

[emptytemp]

[Reboot]


Clique sur "MoveIt!" pour lancer la suppression.

Le résultat apparaitra dans le cadre "Results".

Clique sur "Exit" pour fermer.

Poste le rapport situé dans C:\_OTMoveIt\MovedFiles sous le nom xxxxxx_xxxxxxxxxx.log .

Il te sera peut-être demander de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

Utilisateur anonyme · Answer

pardon lol




:Processes
explorer.exe

:Services

:Reg

:Files
C:\WINDOWS\system32\DRVSTORE
mwcdcj_F3FA2468AF360A65811B287DD7A88CB715CF7275
mwcdcj.sys
C:\WINDOWS\system32\DRVSTORE
mwcdm2k_F3FA2468AF360A65811B287DD7A88CB715CF7275
mwcdcm.sys
C:\WINDOWS\system32\drivers
mwcdcm.sys
C:\Program Files\Nokia\Connectivity Cable Driver
mwcdcm.sys
C:\Program Files\Nokia\Connectivity Cable Driver
mwcdcj.sys
C:\WINDOWS\system32\drivers
mwcdcj.sys

:Commands
[start explorer]

[emptytemp]

[Reboot]

Utilisateur anonyme · Answer

bonjour effectue la mise a jours d'antivir et redemarre en mode sans echecs puis effectue un scan complet du pc 


https://www.malekal.com/demarrer-windows-mode-sans-echec/

Utilisateur anonyme · Answer

bonjour poste stp un nouveau rapport hijackthis stp

PC de plus en plus lent sans raison apparente

36 réponses

Newsletters