Sos, HEUR/CRYPTED à bord !

bonjours!
je te fais parvenir tout ça, le temps de faire une mise a jour de mon hijack.

ok Merci par avance de ton aide. je désinstalle aussi avira antivir?

Le voici :


Avira AntiVir Personal
Report file date: vendredi 14 novembre 2008 09:48

Scanning for 1369550 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: GAEL
Computer name: WTNJXT2CBND8L03

Version information:
BUILD.DAT : 8.2.0.334 16933 Bytes 16/10/2008 14:55:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:54
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:42
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:20
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:54
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 11:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 14:54:16
ANTIVIR2.VDF : 7.0.5.20 142336 Bytes 30/06/2008 06:20:54
ANTIVIR3.VDF : 7.0.5.23 17408 Bytes 30/06/2008 10:24:48
Engineversion : 8.2.0.4
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:58
AESCRIPT.DLL : 8.1.1.8 319866 Bytes 16/10/2008 12:43:36
AESCN.DLL : 8.1.1.3 123252 Bytes 14/10/2008 11:05:58
AERDL.DLL : 8.1.1.2 438644 Bytes 12/09/2008 07:06:04
AEPACK.DLL : 8.1.2.4 369014 Bytes 14/10/2008 11:05:58
AEOFFICE.DLL : 8.1.0.28 196987 Bytes 14/10/2008 11:05:58
AEHEUR.DLL : 8.1.0.59 1438071 Bytes 18/09/2008 10:07:52
AEHELP.DLL : 8.1.1.2 115062 Bytes 14/10/2008 11:05:58
AEGEN.DLL : 8.1.0.41 319861 Bytes 14/10/2008 11:05:58
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:58
AECORE.DLL : 8.1.2.6 172406 Bytes 14/10/2008 11:05:58
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:58
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:06
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:02
AVREP.DLL : 7.0.0.1 155688 Bytes 30/06/2008 15:35:22
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:42
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:24
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:50
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:04
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:42
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:12
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:08
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:38

Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, A:, E:, F:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: vendredi 14 novembre 2008 09:48

The scan of running processes will be started
Scan process 'avwsc.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'Launcher.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'SystrayApp.exe' - '1' Module(s) have been scanned
Scan process 'AlertModule.exe' - '1' Module(s) have been scanned
Scan process 'Launcher.exe' - '1' Module(s) have been scanned
Scan process 'devldr32.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'ImApp.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'airsvcu.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
Scan process 'FTRTSVC.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
38 processes with 38 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'A:\'
[INFO] In the drive 'A:\' no data medium is inserted!

Starting to scan the registry.
The registry was scanned ( '44' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\PAGEFILE.SYS
[WARNING] The file could not be opened!
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP25\A0003222.exe
[DETECTION] Contains HEUR/Crypted suspicious code
[NOTE] The file was deleted!
Begin scan in 'D:\'
Begin scan in 'A:\'
Search path A:\ could not be opened!
System error [21]: Le périphérique n'est pas prêt.
Begin scan in 'E:\'
Search path E:\ could not be opened!
System error [21]: Le périphérique n'est pas prêt.
Begin scan in 'F:\'
Search path F:\ could not be opened!
System error [21]: Le périphérique n'est pas prêt.


End of the scan: vendredi 14 novembre 2008 11:16
Used time: 1:28:24 Hour(s)

The scan has been done completely.

4658 Scanning directories
230230 Files were scanned
0 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
1 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
230227 Files not concerned
2511 Archives were scanned
2 Warnings
1 Notes

ok; Je fais ça et je te retrouve plus tard; merci.

voici le rapport, a demain et encore merci :

F --------- Logfile of AD-Remover 1.0.3.3 by C_XX ---------

START at: 14:55:30 | 15/11/2008
ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
Internet Explorer: 6.0.2900.5512
OPTION: Scan
EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
USER: GAEL | PC: WTNJXT2CBND8L03
BOOT MODE: Normal
DRIVE(S): A:\
~> Systemdrive: C:\

--------- [ PROCESSES ] ---------

\SystemRoot\System32\smss.exe [476]
\??\C:\WINDOWS\system32\csrss.exe [556]
\??\C:\WINDOWS\system32\winlogon.exe [580]
C:\WINDOWS\system32\services.exe [624]
C:\WINDOWS\system32\lsass.exe [636]
C:\WINDOWS\system32\svchost.exe [796]
C:\WINDOWS\system32\svchost.exe [840]
C:\WINDOWS\System32\svchost.exe [908]
C:\WINDOWS\System32\svchost.exe [1044]
C:\WINDOWS\System32\svchost.exe [1124]
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [1176]
C:\Program Files\Alwil Software\Avast4\ashServ.exe [1272]
C:\WINDOWS\system32\spoolsv.exe [1620]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [1672]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [1824]
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [1856]
C:\Program Files\Fichiers communs\Microsoft Shared\Media Manager\airsvcu.exe [1892]
C:\WINDOWS\System32\svchost.exe [1964]
C:\WINDOWS\Explorer.EXE [540]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008]
C:\Program Files\MSN Messenger\MsnMsgr.Exe [2096]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2112]
C:\Program Files\OpenOffice.org 3\program\soffice.exe [2292]
C:\Program Files\OpenOffice.org 3\program\soffice.bin [2344]
C:\Program Files\IncrediMail\bin\IMApp.exe [2380]
C:\WINDOWS\system32\devldr32.exe [2832]
C:\WINDOWS\System32\alg.exe [3028]
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe [4044]
C:\Program Files\Orange\systray\systrayapp.exe [4084]

---------------------------- [~> 29]


+---------------------------------------------------------------------------+
+------------------------------- SERVICES FOUND
+---------------------------------------------------------------------------+


+---------------------------------------------------------------------------+
+------------------------------- REGISTRY ELEMENTS FOUND
+---------------------------------------------------------------------------+

"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho.1"

+---------------------------------------------------------------------------+
+------------------------------- FILES\FOLDERS FOUND
+---------------------------------------------------------------------------+

[23/04/2008 19:24|d--------] C:\Documents and Settings\GAEL\Application Data\EoRezo

+---------- Added scan ...

+-----[HKLM\...\Run]

Synchronization Manager REG_EXPAND_SZ %SystemRoot%\system32\mobsync.exe /logon
avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

+-----[HKCU\...\Run]

MsnMsgr REG_SZ "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

+-----[HKLM\...\Internet Explorer\MAIN]

Start Page : hxxp://ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9

+-----[HKCU\...\Internet Explorer\MAIN]

Start Page : hxxp://www.msn.fr/

+---------------------------------------------------------------------------+
+------------------------------- [ EOF - 72 lines ]
+---------------------------------------------------------------------------+

[ END at: 14:57:03 | 15/11/2008 ] - [ Time elapsed: 92.9 seconds ]


P.S. :je vois sur le rapport qu'il me reste des trace d'eorezo. Je pensais pourtant avoir supprimer tout ce qui concernait ce site de m... (par l'intermediaire duquel j'avais déja été infecté par le passé). Si tu peux aussi m'aider à me débarrasser définitivement de ça ? (j'en demande peut etre beaucoup...)

voici les 2 rapports :

F --------- Logfile of AD-Remover 1.0.3.3 by C_XX ---------

START at: 14:55:30 | 15/11/2008
ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
Internet Explorer: 6.0.2900.5512
OPTION: Scan
EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
USER: GAEL | PC: WTNJXT2CBND8L03
BOOT MODE: Normal
DRIVE(S): A:\
~> Systemdrive: C:\

--------- [ PROCESSES ] ---------

\SystemRoot\System32\smss.exe [476]
\??\C:\WINDOWS\system32\csrss.exe [556]
\??\C:\WINDOWS\system32\winlogon.exe [580]
C:\WINDOWS\system32\services.exe [624]
C:\WINDOWS\system32\lsass.exe [636]
C:\WINDOWS\system32\svchost.exe [796]
C:\WINDOWS\system32\svchost.exe [840]
C:\WINDOWS\System32\svchost.exe [908]
C:\WINDOWS\System32\svchost.exe [1044]
C:\WINDOWS\System32\svchost.exe [1124]
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [1176]
C:\Program Files\Alwil Software\Avast4\ashServ.exe [1272]
C:\WINDOWS\system32\spoolsv.exe [1620]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [1672]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [1824]
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [1856]
C:\Program Files\Fichiers communs\Microsoft Shared\Media Manager\airsvcu.exe [1892]
C:\WINDOWS\System32\svchost.exe [1964]
C:\WINDOWS\Explorer.EXE [540]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008]
C:\Program Files\MSN Messenger\MsnMsgr.Exe [2096]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2112]
C:\Program Files\OpenOffice.org 3\program\soffice.exe [2292]
C:\Program Files\OpenOffice.org 3\program\soffice.bin [2344]
C:\Program Files\IncrediMail\bin\IMApp.exe [2380]
C:\WINDOWS\system32\devldr32.exe [2832]
C:\WINDOWS\System32\alg.exe [3028]
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe [4044]
C:\Program Files\Orange\systray\systrayapp.exe [4084]

---------------------------- [~> 29]


+---------------------------------------------------------------------------+
+------------------------------- SERVICES FOUND
+---------------------------------------------------------------------------+


+---------------------------------------------------------------------------+
+------------------------------- REGISTRY ELEMENTS FOUND
+---------------------------------------------------------------------------+

"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho.1"

+---------------------------------------------------------------------------+
+------------------------------- FILES\FOLDERS FOUND
+---------------------------------------------------------------------------+

[23/04/2008 19:24|d--------] C:\Documents and Settings\GAEL\Application Data\EoRezo

+---------- Added scan ...

+-----[HKLM\...\Run]

Synchronization Manager REG_EXPAND_SZ %SystemRoot%\system32\mobsync.exe /logon
avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

+-----[HKCU\...\Run]

MsnMsgr REG_SZ "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

+-----[HKLM\...\Internet Explorer\MAIN]

Start Page : hxxp://ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9

+-----[HKCU\...\Internet Explorer\MAIN]

Start Page : hxxp://www.msn.fr/

+---------------------------------------------------------------------------+
+------------------------------- [ EOF - 72 lines ]
+---------------------------------------------------------------------------+

[ END at: 14:57:03 | 15/11/2008 ] - [ Time elapsed: 92.9 seconds ]

___________________________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:50:12, on 16/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Media Manager\airsvcu.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\system32\devldr32.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\systray\systrayapp.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\GAEL\Mes documents\Mes vidéos\HiJackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - https://login.orange.fr/captcha?return_url=https%3A%2F%2Fmescontacts.orange.fr
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/5.0.15.0/ImageUploader5.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

re
j'execute successivement les 2 programmes indiqués?

j'ai pas trop compris : je décompresse le process de beyondlogic ou pas?

ok je regarde ça et je te retrouve dans 10 min

désolé mais sur une echelle de 1 à 20, mon niveau en informatique ne passe pas les 6. Qu'entends tu par fixer?

je pense que j'ai bien fixé (lol). Défragmentation en cours, mais ça risque de prendre du temps : j'ai plus que 6% de place dispo sur C. Je crois que je vais devoir passer quelques trucs sur D... Sinon tant que je te tiens, je pensais à l'avenir virer internet explorer et le remplacer par mozilla ou firefox qui parait- il sont plus sûrs. Qu'en penses-tu? Si en plus tu connait un anti virus pas trop cher et performant...A moins peut être qu'AVG8 ou antivir fassent l'affaire? Je vais pas sur des sites pornos, je fais généralement gaffe à ce que j'ouvre, mais je télécharge un peu de zic et ma femme est fan de MSN...
Quoiqu'il en soit encore merci pour ton aide!!!!

bonjour!
merci pour les conseils concernant mozilla et antivir ; sinon après avoir transféré ma zic sur D: et une nouvelle défragmentation, il me reste maintenant 48% d'espace libre sur C:
Ca rame beaucoup moins, mais l'ordi est toujours un peu lent au démarrage.
Au sujet de la défragmentation, l'assistant me prévient que certains fichiers n'ont pas pu etre défragmentés, notamment tous les fichiers C:/volume/restore. Comme tu m'avais parlé d'1 point de restauration infecté je préfère te poster le rapport de défragmentation.Dis moi ce que tu en penses.
merci, à+
Volume (C:)
Taille du volume = 37,27 Go
Taille de cluster = 32 Ko
Espace utilisé = 19,22 Go
Espace libre = 18,05 Go
Pourcentage d'espace libre = 48 %

Fragmentation du volume
Fragmentation totale = 11 %
Fragmentation de fichiers = 23 %
Fragmentation de l'espace libre = 0 %

Fragmentation de fichiers
Total de fichiers = 44 261
Taille moyenne de fichier = 408 Ko
Total de fichiers fragmentés = 0
Total de fragments en trop = 4 982
Nombre moyen de fragments par fichier = 1,11

Fragmentation du fichier paginé
Taille du fichier paginé = 576 Mo
Total de fragments = 3

Fragmentation de dossier
Total de dossiers = 4 563
Dossiers fragmentés = 16
Fragments de dossiers en trop = 30

--------------------------------------------------------------------------------
Fragments Taille du fichierFichiers qui ne peuvent pas être défragmentés
70 63 Mo \Documents and Settings\PIERRE\Mes documents\Ma musique\Balavoine - Best Of - CD1.mp3
33 89 Mo \Documents and Settings\PIERRE\Mes documents\Ma musique\Albw - Louise Attaque - Louise Attaque (Album Complet).mp3
44 63 Mo \Documents and Settings\PIERRE\Mes documents\Ma musique\Yannick Noah - Metisse - Yannik Noah Album.mp3
561 693 Mo \Documents and Settings\GAEL\Mes documents\La Tour Monparnasse Infernale Eric Et Ramzi.avi
33 34 Mo \Documents and Settings\GAEL\Mes documents\Mes images\mag&gael oct 07\MOV02843.MPG
126 13 Mo \Documents and Settings\GAEL\Mes documents\Mes images\mag&gael oct 07\MOV02845.MPG
147 55 Mo \Documents and Settings\GAEL\Mes documents\Ma musique\Louise Attaque (2005).rar
181 49 Mo \Documents and Settings\GAEL\Mes documents\Ma musique\Collectif\ZIC DE ZINC 2\18 Le bal des trépassés - Roméo sans Juliette.wav
269 46 Mo \Documents and Settings\GAEL\Mes documents\Ma musique\Collectif\ZIC DE ZINC 2\19 beautés vulgaires - le con d'en face.wav
603 700 Mo \Documents and Settings\GAEL\Mes documents\Mes vidéos\Neuf semaines et demi-Kim Basinger-Fr-1986-Drame Erotique.avi
42 4 Mo \Documents and Settings\GAEL\Bureau\Mes images\a trier 094.avi
60 4 Mo \Documents and Settings\GAEL\Bureau\Mes images\a trier 095.avi
53 16 Mo \Documents and Settings\GAEL\Bureau\Mes images\Annif Mag\a trier 138.asf
37 2 Mo \Program Files\Microsoft Office\Office12\PPTVIEW.EXE
362 16 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP30\A0003433.RBF
60 5 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP30\A0003491.EXE
41 8 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP30\SNAPSHOT\Repository\FS\OBJECTS.DATA
237 14 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP33\SNAPSHOT\_REGISTRY_MACHINE_SOFTWARE
63 5 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP55\SNAPSHOT\_REGISTRY_MACHINE_SYSTEM
33 2 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP63\A0005528.PNF
64 14 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP67\SNAPSHOT\_REGISTRY_MACHINE_SOFTWARE
30 5 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP67\SNAPSHOT\_REGISTRY_MACHINE_SYSTEM
47 14 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP71\SNAPSHOT\_REGISTRY_MACHINE_SOFTWARE
37 8 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP71\SNAPSHOT\Repository\FS\OBJECTS.DATA
34 1 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP73\A0006380.DLL
45 3 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP75\SNAPSHOT\_REGISTRY_USER_NTUSER_S-1-5-21-1482476501-842925246-1060284298-1003
90 14 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP77\SNAPSHOT\_REGISTRY_MACHINE_SOFTWARE
40 5 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP77\SNAPSHOT\_REGISTRY_MACHINE_SYSTEM
65 8 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP77\SNAPSHOT\Repository\FS\OBJECTS.DATA
97 8 Mo \System Volume Information\_restore{FBAAECDB-3843-4B2A-AA31-2EBDEF22C2CC}\RP78\SNAPSHOT\Repository\FS\OBJECTS.DATA

ok, pour le point de restauration, c'est fait. Mais comment laisser uniquement démarrer l'antivirus?
Autre chose : pour antivir, la version que je possède est la version gratuite. J'imagine que tu me conseille plutot la version payante?

ok merci.Je fais ça et je te retrouve. Sinon, il reste qlq chose à faire sur l'ordi? Tout à l'air ok!

bonjour!
ok j'essaierai ta manip si ça se reproduit, mais ce matin tout est de nouveau ok. Hier, j'ai fait un scan antivir et MBAM en mode sans echec et ils n'ont rien trouvé (antivir a detecté "dr/tool.reboot.fix.19;exe" mais je ne crois pas que ce soit un virus et j'ai ignoré).
Par contre ce matin spybot m'a detecté et supprimé 15 problemes sur browser.J'ai envie de lancer un nettoyage avec ccleaner mais je ne sais pas si je dois le faire en mode sans echec ou mode normal.Ddis moi ce que tu en penses. Merci d'avance.

je les sauvegardé, les voici :
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1401
Windows 5.1.2600 Service Pack 3

17/11/2008 22:17:16
mbam-log-2008-11-17 (22-17-16).txt

Type de recherche: Examen complet (A:\|C:\|D:\|E:\|F:\|)
Eléments examinés: 80543
Temps écoulé: 44 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

---------------------------------------------------------------------------------------------------------------------------------------------------------------


Avira AntiVir Personal
Report file date: lundi 17 novembre 2008 22:21

Scanning for 1038808 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Save mode
Username: GAEL
Computer name: WTNJXT2CBND8L03

Version information:
BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:54
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:42
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:20
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:54
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 15:03:48
ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 15:03:52
ANTIVIR2.VDF : 7.1.0.89 221184 Bytes 16/11/2008 18:44:24
ANTIVIR3.VDF : 7.1.0.97 45056 Bytes 17/11/2008 18:44:36
Engineversion : 8.2.0.31
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:58
AESCRIPT.DLL : 8.1.1.15 332156 Bytes 14/11/2008 15:04:18
AESCN.DLL : 8.1.1.5 123251 Bytes 14/11/2008 15:04:16
AERDL.DLL : 8.1.1.3 438645 Bytes 14/11/2008 15:04:14
AEPACK.DLL : 8.1.3.4 393591 Bytes 14/11/2008 15:04:12
AEOFFICE.DLL : 8.1.0.30 196986 Bytes 14/11/2008 15:04:10
AEHEUR.DLL : 8.1.0.71 1487222 Bytes 14/11/2008 15:04:08
AEHELP.DLL : 8.1.1.3 119157 Bytes 14/11/2008 15:04:04
AEGEN.DLL : 8.1.1.0 319859 Bytes 14/11/2008 15:04:02
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:58
AECORE.DLL : 8.1.4.1 172405 Bytes 14/11/2008 15:03:58
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:58
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:06
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:02
AVREP.DLL : 8.0.0.2 98344 Bytes 14/11/2008 15:03:56
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:42
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:24
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:50
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:04
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:42
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:12
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:08
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:38

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 17 novembre 2008 22:21

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avconfig.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '40' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\PAGEFILE.SYS
[WARNING] The file could not be opened!
C:\Documents and Settings\GAEL\Local Settings\Temp\Temporary Internet Files\Content.IE5\8967GFUT\SmitfraudFix[1].exe
[DETECTION] Contains recognition pattern of the DR/Tool.Reboot.F.19 dropper
[NOTE] The file was deleted!
Begin scan in 'D:\'


End of the scan: lundi 17 novembre 2008 23:42
Used time: 1:21:07 Hour(s)

The scan has been done completely.

4366 Scanning directories
208329 Files were scanned
1 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
1 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
208327 Files not concerned
2232 Archives were scanned
1 Warnings
1 Notes

voila, c'est fait. J'ai mis en gras les lignes concernant ce truc sur le rapport :


Avira AntiVir Personal
Report file date: lundi 17 novembre 2008 22:21

Scanning for 1038808 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Save mode
Username: GAEL
Computer name: WTNJXT2CBND8L03

Version information:
BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:54
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:42
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:20
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:54
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 15:03:48
ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 15:03:52
ANTIVIR2.VDF : 7.1.0.89 221184 Bytes 16/11/2008 18:44:24
ANTIVIR3.VDF : 7.1.0.97 45056 Bytes 17/11/2008 18:44:36
Engineversion : 8.2.0.31
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:58
AESCRIPT.DLL : 8.1.1.15 332156 Bytes 14/11/2008 15:04:18
AESCN.DLL : 8.1.1.5 123251 Bytes 14/11/2008 15:04:16
AERDL.DLL : 8.1.1.3 438645 Bytes 14/11/2008 15:04:14
AEPACK.DLL : 8.1.3.4 393591 Bytes 14/11/2008 15:04:12
AEOFFICE.DLL : 8.1.0.30 196986 Bytes 14/11/2008 15:04:10
AEHEUR.DLL : 8.1.0.71 1487222 Bytes 14/11/2008 15:04:08
AEHELP.DLL : 8.1.1.3 119157 Bytes 14/11/2008 15:04:04
AEGEN.DLL : 8.1.1.0 319859 Bytes 14/11/2008 15:04:02
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:58
AECORE.DLL : 8.1.4.1 172405 Bytes 14/11/2008 15:03:58
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:58
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:06
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:02
AVREP.DLL : 8.0.0.2 98344 Bytes 14/11/2008 15:03:56
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:42
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:24
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:50
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:04
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:42
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:12
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:08
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:38

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 17 novembre 2008 22:21

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avconfig.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '40' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\PAGEFILE.SYS
[WARNING] The file could not be opened!
C:\Documents and Settings\GAEL\Local Settings\Temp\Temporary Internet Files\Content.IE5\8967GFUT\SmitfraudFix[1].exe
[DETECTION] Contains recognition pattern of the DR/Tool.Reboot.F.19 dropper
[NOTE] The file was deleted!
Begin scan in 'D:\'


End of the scan: lundi 17 novembre 2008 23:42
Used time: 1:21:07 Hour(s)

The scan has been done completely.

4366 Scanning directories
208329 Files were scanned
1 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
1 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
208327 Files not concerned
2232 Archives were scanned
1 Warnings
1 Notes

PS : je me deconnecte pour ce soir, à +, encore merci de ta patience et du temps que tu me consacre.

Aujourd'hui, aucun problême particulier, mais l'ordi rame toujours un peu. Fautdire qu'il est pas tout jeune non plus

Bonjour!
Deux petites choses ce matin :
_ j'ai eu des problemes pour me connecter a internet, mais aprés avoir redémarré le pc, tout fonctionne de nouveau très bien
_ je n'ai plus de point de restauration suite a la manip d'hier, comment puis-je en recréer un? Je pensais que l'ordi en referait un automatiquement, mais ça n'a pas l'air d'être le cas.
Merci, a+

Merci pour tout, on se recroisera sans doute sur le forum, ou au "café des membres". En attendant, je vais continuer de lire les discussions des autres et apprendre ainsi petit à petit. Ça devrait m'aider à devenir un peu plus autonome sur ma machine, et peut être même qu'un jour je pourrai à mon tour aider les autres comme j'ai été aidé.
Encore merci pour tout et à ++