Problème 3 antivirus !!!!

tres bien ;-)
de rien.
au revoir...

merci pour tt il é normal o revoir

bonsoir,

oui supprime tout ce qu´il y a dans ta quarantaine.

comment ce porte le pc?

@+

Bonjour,
c bon j'ai fait atf cleaner et j'ai desactivé la restauration
les fichiers que j'ai mi en quarantaine je les supprime ? que dois faire maintenant

bonjour,

c´est la restauration system

fais ceci

nettoie tes fichiers temporaires avec ceci : atf cleaner, regarde le tuto...

http://www.infosecu.fr/atf.html

et

Désactive ta restauration système:
pour cela :
Click droit sur poste de travail, dans l´arborescence sur propriétés;
dans la nouvelle fenettre click sur l´onglet restauration système;
coche la case désactiver la restauration systèm et applique.
puis redemarre le pc et click droit sur poste de travail, dans l´arborescence sur propriétés;
dans la nouvelle fenettre click sur l´onglet restauration systèm
décoche la case désactiver la restauration systèm et applique.

tiens moi au courrant

@+

bonjour,
j'ai fait le scan hier soir avec avira antivirus personal edition classic et il a detecté 2 virus : cheval de troie je vous envoye les rapport je l'ai ai mit en quarantaine

AntiVir PersonalEdition Classic
Report file date: samedi 17 novembre 2007 00:08

Scanning for 932510 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: JARMAISON

Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 16/11/2007 21:42:37
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/11/2007 21:42:37
LUKE.DLL : 7.0.5.3 147496 Bytes 16/11/2007 21:42:37
LUKERES.DLL : 7.0.6.1 10280 Bytes 16/11/2007 21:42:37
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 21:42:40
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 21:42:40
ANTIVIR2.VDF : 7.0.0.198 1206272 Bytes 11/11/2007 21:42:40
ANTIVIR3.VDF : 7.0.0.226 98304 Bytes 16/11/2007 21:42:40
AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 16/11/2007 21:42:41
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 16/11/2007 21:42:37
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 16/11/2007 21:42:41
AVREG.DLL : 7.0.1.6 30760 Bytes 16/11/2007 21:42:37
AVARKT.DLL : 1.0.0.20 278568 Bytes 16/11/2007 21:42:37
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 16/11/2007 21:42:37
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 16/11/2007 21:42:33
RCTEXT.DLL : 7.0.62.0 86056 Bytes 16/11/2007 21:42:33
SQLITE3.DLL : 3.3.17.1 339968 Bytes 16/11/2007 21:42:38

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: samedi 17 novembre 2007 00:08

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'AOSD.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'ABOARD.EXE' - '1' Module(s) have been scanned
Scan process 'PCMService.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'CLSched.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'snmp.exe' - '1' Module(s) have been scanned
Scan process 'slserv.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
Scan process 'HidService.exe' - '1' Module(s) have been scanned
Scan process 'CLMLService.exe' - '1' Module(s) have been scanned
Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '0' Module(s) have been scanned
Scan process 'AOLacsd.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
42 processes with 42 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '26' files ).

Starting the file scan:

Begin scan in 'C:\' <HDD>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP3\A0000123.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '476e365f.qua'!

End of the scan: samedi 17 novembre 2007 01:34
Used time: 1:26:29 min

The scan has been canceled!

7925 Scanning directories
252728 Files were scanned
1 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
252727 Files not concerned
4987 Archives were scanned
3 Warnings
0 Notes

AntiVir PersonalEdition Classic
Report file date: vendredi 16 novembre 2007 22:52

Scanning for 932510 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: zineb
Computer name: JARMAISON

Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 16/11/2007 21:42:37
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/11/2007 21:42:37
LUKE.DLL : 7.0.5.3 147496 Bytes 16/11/2007 21:42:37
LUKERES.DLL : 7.0.6.1 10280 Bytes 16/11/2007 21:42:37
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 21:42:40
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 21:42:40
ANTIVIR2.VDF : 7.0.0.198 1206272 Bytes 11/11/2007 21:42:40
ANTIVIR3.VDF : 7.0.0.226 98304 Bytes 16/11/2007 21:42:40
AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 16/11/2007 21:42:41
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 16/11/2007 21:42:37
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 16/11/2007 21:42:41
AVREG.DLL : 7.0.1.6 30760 Bytes 16/11/2007 21:42:37
AVARKT.DLL : 1.0.0.20 278568 Bytes 16/11/2007 21:42:37
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 16/11/2007 21:42:37
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 16/11/2007 21:42:33
RCTEXT.DLL : 7.0.62.0 86056 Bytes 16/11/2007 21:42:33
SQLITE3.DLL : 3.3.17.1 339968 Bytes 16/11/2007 21:42:38

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: vendredi 16 novembre 2007 22:52

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '30' files ).

Starting the file scan:

Begin scan in 'C:\' <HDD>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\amina\irbegd.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '47a01247.qua'!

End of the scan: vendredi 16 novembre 2007 23:28
Used time: 35:45 min

The scan has been done completely.

8524 Scanning directories
302454 Files were scanned
1 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
302453 Files not concerned
8836 Archives were scanned
2 Warnings
0 Notes

oui tu peux supprimer ot_move it garde quand meme avg pour scanner de temps en temps.
bonne nuit egalement ;-)
de rien...

merci pour tout ! bonne nuit

ok
cool ,-)
tien moi au courrant...
@ demain

dois je supprimé avg et ccleaner otmoveit

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 22:16:50 16/11/2007

+ Résultat de l'analyse:

C:\Documents and Settings\invite\Mes documents\univ nancy 2\setup.exe -> Adware.180Solutions : Nettoyé.
C:\Documents and Settings\hanane\Mes documents\Mes fichiers reçus\IM-svr.exe -> Adware.2Search : Nettoyé.
HKLM\SOFTWARE\Classes\CLSID\{58CBB196-5B8B-BEB3-ABF5-21E452AB42BA} -> Adware.CoolWebSearch : Nettoyé.
C:\WINDOWS\system32\lnaccess.exe -> Dialer.InstantAccess.az : Nettoyé.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP299\A0188470.exe -> Logger.VB.qu : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Invité\Cookies\invité@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@boonty.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@divx.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@incredimailltd.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@maisondevalerie.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@palmone.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@sevenoneintermedia.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@7search[2].txt -> TrackingCookie.7search : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@aavalue[1].txt -> TrackingCookie.Aavalue : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@getmusicfree.aavalue[2].txt -> TrackingCookie.Aavalue : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@4.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Invité\Cookies\invité@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@www.casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@www.etracker[1].txt -> TrackingCookie.Etracker : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@c.goclick[2].txt -> TrackingCookie.Goclick : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-cogemag.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-idside.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-neuftelecom.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-psychologies.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-veohnetworksinc.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg-youtube.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ehg.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@ehg-neuftelecom.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@ehg-overseenet.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@ehg-telecomitalia.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@searchportal.information[1].txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@searchportal.information[1].txt -> TrackingCookie.Information : Nettoyé.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@ivwbox[2].txt -> TrackingCookie.Ivwbox : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@real[2].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@revenue[1].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@revsci[1].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Invité\Cookies\invité@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@www.vegasred[1].txt -> TrackingCookie.Vegasred : Nettoyé.
C:\Documents and Settings\Invité\Cookies\invité@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Invité\Cookies\invité@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\zineb\Cookies\zineb@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@statse.webtrendslive[3].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@yadro[2].txt -> TrackingCookie.Yadro : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\hanane\Cookies\hanane@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\invite\Cookies\invite@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\mloud\Cookies\mloud@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.

Fin du rapport

re,

as tu tout supprimé car la c´est marqué : Aucune action entreprise

puis fais ceci :

Désactive ta restauration système:
pour cela :
Click droit sur poste de travail, dans l´arborescence sur propriétés;
dans la nouvelle fenettre click sur l´onglet restauration système;
coche la case désactiver la restauration systèm et applique.
puis redemarre le pc et click droit sur poste de travail, dans l´arborescence sur propriétés;
dans la nouvelle fenettre click sur l´onglet restauration systèm
décoche la case désactiver la restauration systèm et applique.

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 22:09:21 16/11/2007

+ Résultat de l'analyse:

C:\Documents and Settings\invite\Mes documents\univ nancy 2\setup.exe -> Adware.180Solutions : Aucune action entreprise.
C:\Documents and Settings\hanane\Mes documents\Mes fichiers reçus\IM-svr.exe -> Adware.2Search : Aucune action entreprise.
HKLM\SOFTWARE\Classes\CLSID\{58CBB196-5B8B-BEB3-ABF5-21E452AB42BA} -> Adware.CoolWebSearch : Aucune action entreprise.
C:\WINDOWS\system32\lnaccess.exe -> Dialer.InstantAccess.az : Aucune action entreprise.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP299\A0188470.exe -> Logger.VB.qu : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Documents and Settings\Invité\Cookies\invité@2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@boonty.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@divx.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@incredimailltd.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@maisondevalerie.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@palmone.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@sevenoneintermedia.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@7search[2].txt -> TrackingCookie.7search : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@aavalue[1].txt -> TrackingCookie.Aavalue : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@getmusicfree.aavalue[2].txt -> TrackingCookie.Aavalue : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@4.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\Invité\Cookies\invité@atdmt[1].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@casalemedia[1].txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@casalemedia[1].txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@casinotropez[1].txt -> TrackingCookie.Casinotropez : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@www.casinotropez[1].txt -> TrackingCookie.Casinotropez : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Aucune action entreprise.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@dealtime[1].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@www.etracker[1].txt -> TrackingCookie.Etracker : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@fastclick[1].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@fastclick[2].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@c.goclick[2].txt -> TrackingCookie.Goclick : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-cogemag.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-idside.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-neuftelecom.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-psychologies.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-veohnetworksinc.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg-youtube.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ehg.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@ehg-neuftelecom.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@ehg-overseenet.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@ehg-telecomitalia.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@searchportal.information[1].txt -> TrackingCookie.Information : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@searchportal.information[1].txt -> TrackingCookie.Information : Aucune action entreprise.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@ivwbox[2].txt -> TrackingCookie.Ivwbox : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@perf.overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@questionmarket[2].txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@questionmarket[2].txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@real[2].txt -> TrackingCookie.Real : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@revenue[1].txt -> TrackingCookie.Revenue : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@revsci[1].txt -> TrackingCookie.Revsci : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Invité\Cookies\invité@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\RECYCLER\S-1-5-21-3180702673-2738614190-3863723585-1008\Dc86\amina@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@www.vegasred[1].txt -> TrackingCookie.Vegasred : Aucune action entreprise.
C:\Documents and Settings\Invité\Cookies\invité@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Invité\Cookies\invité@m.webtrends[2].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@m.webtrends[2].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Documents and Settings\zineb\Cookies\zineb@m.webtrends[1].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@statse.webtrendslive[3].txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@yadro[2].txt -> TrackingCookie.Yadro : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Documents and Settings\hanane\Cookies\hanane@zedo[1].txt -> TrackingCookie.Zedo : Aucune action entreprise.
C:\Documents and Settings\invite\Cookies\invite@zedo[2].txt -> TrackingCookie.Zedo : Aucune action entreprise.
C:\Documents and Settings\mloud\Cookies\mloud@zedo[1].txt -> TrackingCookie.Zedo : Aucune action entreprise.

Fin du rapport

l´anti virus antir personnal est gratuit
oui tu dois desinstaller avast pour installer antivir
oui tu peux supprimer norton removal tool maintenant ainsi que le removal tool de bit defender
puis supprime aussi :
smitfraudfix
btfix
msnfix
comfofix
R-host
pour avg j´aimerais que tu fasse un scan avec et que tu post le rapport ici une fois terminé
je regarderais ca demain
bonne fin de soirée ;-)
@+

l'antivirus Antivir Personal Edition Classic est payant ? Je dois désinstaller avast ?
Dois-je supprimer ceux que j'ai installé de (norton removal tool à avg )

ok

A.V.G :

-> Télécharger AVG Anti-Spyware (ewido)

http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware

-> L´installer.

-> lancer AVG Anti-Spyware et clicker sur le bouton Mise à jour. Patienter...

p.s : si les mises a jours ne se font pas, elles sont telechargable ici :

http://downloads.ewido.net/avgas-signatures-full-current.exe

-> Sur la page "analyse":

choisir d´abord l'onglet "paramètres".

sous « Comment réagir » clicker sur « Actions recommandées » et dans le menu déroulant, choisir « Supprimer ».

-> Lancer le scan, (c´est long...).

-> A la fin du scan copier Et coller le rapport ici.

-> Une aide en image au cas ou :

Tutoriel d´installation et de parametrages :

http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

puis maimtenant que la tempete est passé on retourne a ton probleme du debut > les 3 anti virus :

maintenant tu as avast, oui

regarde ceci : avast vs antivir

http://forum.malekal.com/ftopic3528.php

je ne te cache pas que je te conseil de troquer avast contre antivir

Telecharge et instal l'antivirus Antivir Personal Edition Classic :

->https://www.malekal.com/avira-free-security-antivirus-gratuit/

puis tu n´as pas de par feu = problemes

alors instale celui ci :

par feu : kerio 4.2 regarde le tutoriel tres bien fait pour l´installation et la configuration

https://kerio.probb.fr/f2-sunbelt-kerio-personal-firewall

post le rapport d´avg et dis moi ce que tu compte faire avec avast et si tu veux bien installer kerio

@+

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:17:36, on 16/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://runonce.msn.com/runonce3.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EmailChecker] C:\APPS\EmailChecker\ech.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

ok

peux tu reposter un rapport hijack this stp

ComboFix 07-11-08.1 - zineb 2007-11-16 21:01:52.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.203 [GMT 1:00]
Running from: C:\Documents and Settings\zineb\Bureau\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\amina\Bureau\internet.lnk
C:\Documents and Settings\amina\new.txt
C:\Documents and Settings\hanane\Bureau\internet.lnk
C:\Documents and Settings\hanane\new.txt
C:\Documents and Settings\invite\Application Data\macromedia\Flash Player\#SharedObjects\REGACGGY\www.broadcaster.com
C:\Documents and Settings\invite\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com
C:\Documents and Settings\invite\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol
C:\Documents and Settings\invite\new.txt
C:\Documents and Settings\mloud\Bureau\internet.lnk
C:\Documents and Settings\mloud\new.txt
C:\Program Files\instant access
C:\Program Files\instant access\Center\CrazyGirls.upd
C:\Program Files\instant access\Center\tray1.ico
C:\Program Files\Instant Messenger Names
C:\WINDOWS\dialerexe.ini
C:\WINDOWS\pack.epk
C:\WINDOWS\system32\gawxxx.dat
c:\windows\system32\gawxxx.exe
c:\WINDOWS\system32\gawxxx_nav.dat
c:\WINDOWS\system32\gawxxx_navps.dat
C:\WINDOWS\system32\nvs2.inf

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_NTNDIS
-------\LEGACY_NWSAPAGENT
-------\LEGACY_ODBCASVC
-------\ntndis
-------\NwSapAgent

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-16 to 2007-11-16 ))))))))))))))))))))))))))))))))))))
.

2007-11-16 21:01 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-16 20:23 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2007-11-16 20:10 <REP> d-------- C:\Program Files\Yahoo!
2007-11-16 20:10 <REP> d-------- C:\Program Files\CCleaner
2007-11-16 19:12 3,312 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-16 18:14 <REP> d-------- C:\Program Files\Trend Micro
2007-11-15 23:17 <REP> d-------- C:\Program Files\Microsoft ActiveSync
2007-11-15 23:07 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2007-11-13 11:37 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2007-11-13 11:37 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-11-13 11:37 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2007-11-13 11:37 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
2007-11-13 11:37 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2007-11-13 11:37 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
2007-11-13 11:37 <REP> dr------- C:\Documents and Settings\Administrateur\Bureau
2007-11-13 11:37 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\You've Got Pictures Screensaver
2007-11-13 11:37 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec
2007-11-11 14:22 <REP> d-------- C:\Program Files\Fichiers communs\BitDefender
2007-11-11 14:11 151,008 --a------ C:\WINDOWS\system32\lnaccess.exe
2007-11-04 16:03 <REP> d-------- C:\Program Files\MSN Games
2007-11-04 01:21 141,312 --a------ C:\WINDOWS\system32\MSCmCFR.dll
2007-11-04 01:21 32,768 --a------ C:\WINDOWS\system32\CmDlgFR.dll
2007-11-04 01:20 148,480 --a------ C:\WINDOWS\system32\TLBINF32.dll
2007-11-03 23:12 <REP> d-------- C:\Documents and Settings\invite\Application Data\ViquaSoft
2007-11-02 00:41 <REP> d-------- C:\Documents and Settings\invite\Application Data\FrostWire
2007-10-31 02:14 111,104 --a------ C:\WINDOWS\system32\uha.exe
2007-10-29 21:06 <REP> d--hs---- C:\found.000
2007-10-29 00:36 <REP> d-------- C:\Documents and Settings\hanane\Application Data\FrostWire
2007-10-28 01:37 <REP> d-------- C:\Documents and Settings\hanane\Shared
2007-10-28 01:37 <REP> d-------- C:\Documents and Settings\hanane\Incomplete
2007-10-28 01:37 <REP> d-------- C:\Documents and Settings\hanane\Application Data\LimeWire
2007-10-27 23:39 <REP> d-------- C:\Documents and Settings\hanane\Application Data\ViquaSoft

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-16 18:09 --------- d-----w C:\Program Files\Fichiers communs\BOONTY Shared
2007-11-16 17:03 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2007-11-16 16:58 --------- d-----w C:\Program Files\Norton Internet Security
2007-11-15 19:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-13 11:26 967 ----a-w C:\WINDOWS\system32\drivers\fwdrv.err
2007-11-13 10:40 --------- d-----w C:\Program Files\Micro Application
2007-11-11 16:32 374 ----a-w C:\Documents and Settings\invite\Application Data\internaldb6334.dat
2007-11-10 15:13 555 ----a-w C:\Documents and Settings\invite\Application Data\internaldb8467.dat
2007-11-10 15:13 18,432 ----a-w C:\Documents and Settings\invite\Application Data\internaldb41.dat
2007-11-10 13:27 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-04 23:56 --------- d-----w C:\Program Files\Games
2007-11-04 22:40 --------- d-----w C:\Documents and Settings\amina\Application Data\EPSON
2007-10-14 20:31 --------- d-----w C:\Documents and Settings\All Users\Application Data\HipSoft
2007-10-13 11:25 --------- d-----w C:\Program Files\Java
2007-09-30 15:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Oberon Games
2007-09-29 13:41 --------- d-----w C:\Documents and Settings\amina\Application Data\Talkback
2007-09-29 13:37 --------- d-----w C:\Program Files\DivX
2007-09-26 20:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2007-09-25 07:52 --------- d-----w C:\Documents and Settings\amina\Application Data\Jane s Hotel
2007-09-23 13:14 --------- d-----w C:\Documents and Settings\amina\Application Data\Gamelab
2007-09-22 17:03 --------- d-----w C:\Documents and Settings\hanane\Application Data\PlayFirst
2007-09-22 15:55 --------- d-----w C:\Documents and Settings\hanane\Application Data\Jane s Hotel
2007-09-19 12:50 --------- d-----w C:\Program Files\QuickTime
2007-09-17 22:35 --------- d-----w C:\Program Files\Trymedia
2007-09-16 12:15 --------- d-----w C:\Program Files\AOL Games
2007-08-13 16:35 124,416 ----a-w C:\Documents and Settings\amina\irbegd.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 13:00]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-03-05 11:26]
"nwiz"="nwiz.exe" [2005-03-05 11:26 C:\WINDOWS\system32\nwiz.exe]
"SoundMan"="SOUNDMAN.EXE" [2005-05-17 17:48 C:\WINDOWS\SOUNDMAN.EXE]
"PCMService"="c:\Apps\Powercinema\PCMService.exe" [2005-05-11 12:48]
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 10:31]
"EmailChecker"="C:\APPS\EmailChecker\ech.exe" [2003-07-02 10:13]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-09-05 09:30]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-07-28 00:03]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-09-19 13:50]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-08-16 15:19]

R0 SI3112r;ATI-437A Serial ATA Controller;C:\WINDOWS\system32\DRIVERS\SI3112r.sys
S3 AR5523;3Com OfficeConnect Wireless 108Mbps 11g USB Adapter Service;C:\WINDOWS\system32\DRIVERS\ar5523.sys
S3 T5100_usb;LGE USB driver;C:\WINDOWS\system32\Drivers\T5100.sys
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe"

.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-16 21:06:32
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-16 21:07:51 - machine was rebooted
.
--- E O F ---

re,

telecharge et fais marcher r-host de s!r!

http://siri.urz.free.fr/RHosts.php

puis

Télécharge combofix.exe (par sUBs) sur ton Bureau.

-> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-> Double clique combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt