Problème WIN32.brontok.A

Résolu
dom -  
Bonjour à tous,
pas d'antivirus sur le micro mais un super virus (vers) brontok.A
j'ai lu et relu de nombreux messages et essayé de multiples manipulations sur différents forums.
je suis allée sur SECURISER pour scanner disque en ligne :
résultats virus sur 148 fichiers IMPOSSIBLE A NETTOYER selon SECURISER
j'ai essayé en vain de télécharger avast, bidefender, ccleaner etc... enfin tous les conseils que j'ai trouvé mais impossible puisque le virus s'attaque automatiquement aux fichiers .exe et dès que je dézippe pour exécuter il me ferme le micro.
impossible avec ce virus d'aller dans la base de registres (regedit) rien rien rien...
à part jeter le micro, je fais quoi à votre avis ?

je vous remercie par avance de m'apporter une solution.
Configuration: Windows XP
Internet Explorer 6.0

13 réponses

Résumé de la discussion

Un utilisateur sur Windows XP signale une infection par un vers de type Brontok, sans antivirus, et décrit que le malware cible les fichiers .exe et bloque l'accès au registre. Plusieurs réponses proposent des manipulations et des outils variés, notamment des scans en ligne et des rapports à coller (MRT.exe, rapports antivirus), tout en soulignant l'impossibilité d'exécuter certaines actions. Des liens vers des solutions en ligne comme ESET Online Scanner et la collecte de rapports s'enchaînent, avec des échanges sur l'emplacement des logs et les fichiers à transmettre pour diagnostic. D'autres échanges reflètent un manque de consensus et une absence de résolution claire, mais la discussion porte sur les étapes de désinfection et la validation des rapports pour avancer.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    mais colle moi le moi le rapport !!
    1. dom
      ok j'arrive je te le colle dans dix minutes je n'ai plus les icones sur le bureau et impossible faire raccourci
    2. dom
      comment faire fin du scan pas de virus trouvé
      où est le rapport stp ????
    3. dom
      j'espère ne pas t'avoir fait perdre trop de temps et je te remercie de ton aide.
      pour l'instant tout fonctionne les fichiers ont été mis en quarantaine par avast.
      encore merci
      dom
  2. dom
    j'ai re-scanner avec eset c'est bon j'ai plus de virus
    j'essaie de redémarrer
    je te tiens au courant
    1. Utilisateur anonyme
      mais fait un scan la ou je tes demandé

      => 'http://www.secuser.com'
      2008/09/15 15:14:30:703 59CB008::OnCreate() Found 'www.secuser.com' in server list
      2008/09/15 15:14:30:718 m_strClientIP=192.168.1.10

      je tes jamais di secuser !!!

      fait un scan en ligne avec internet explore, si tu as firefox fait:
      démarrer -> executer -> tape : iexplore (puis valide)

      BRANCHE TA OU TES CLE USB / LECTEUR EXTERNE ...

      (coche toutes les cases à chaque fois) :
      https://www.eset.com/

      à la fin colle le rapport : C:\Program Files\EsetOnlineScanner\log.txt

      si ta besoin d'aide tu as un tutoriel ici : http://bibou0007.com/tutos-et-lexique-f45/tutorial-nod32-online-scanner-t128.htm
      4. dom
        c'est la copie du résultat du scan (trop longue) plante si je mets tout en meme temps
        1. Utilisateur anonyme
          de quoi plante le scan en ligne ?
          1. dom
            2008/09/15 15:16:39:156 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\English_eSettingsDT.lpk
            2008/09/15 15:16:39:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\eSettingsD_mouseDown.bmp
            2008/09/15 15:16:39:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:250 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\eSettingsD_mouseOver.bmp
            2008/09/15 15:16:39:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:250 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\eSettingsD_w.bmp
            2008/09/15 15:16:39:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:250 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\French_eSettingsDT.lpk
            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:343 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:343 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:343 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\German_eSettingsDT.lpk
            2008/09/15 15:16:39:359 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:359 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\Italian_eSettingsDT.lpk
            2008/09/15 15:16:39:437 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:437 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\Portuguese_eSettingsDT.lpk
            2008/09/15 15:16:39:515 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:515 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0
          2. dom
            2008/09/15 15:16:39:156 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\English_eSettingsDT.lpk
            2008/09/15 15:16:39:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:218 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:234 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\eSettingsD_mouseDown.bmp
            2008/09/15 15:16:39:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:250 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\eSettingsD_mouseOver.bmp
            2008/09/15 15:16:39:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:250 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\eSettingsD_w.bmp
            2008/09/15 15:16:39:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:250 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\French_eSettingsDT.lpk
            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:281 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:343 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:343 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:343 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\German_eSettingsDT.lpk
            2008/09/15 15:16:39:359 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:359 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:421 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\Italian_eSettingsDT.lpk
            2008/09/15 15:16:39:437 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:437 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:453 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:500 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\Portuguese_eSettingsDT.lpk
            2008/09/15 15:16:39:515 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:515 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:546 Dump_Virus:pfcb->pfcb_status=0
        2. Utilisateur anonyme
          colle le rapport : C:\Program Files\EsetOnlineScanner\log.txt
          pas virustotal !!!
          1. dom
            j'essaie cela fait trois fois que cela plante
          2. dom
            2008/09/15 15:14:30:671 HTML parameter

            ScanAllDrives = 0
            Cleanable = 1
            AutoClean = 0
            ZipClean = 1
            SpecialTSC = 0
            EnableTSC = 1
            AdUrl =
            VirusAction = 0
            ScanFileExtensOnly =
            RenameToFileExtens = .VIR
            MoveToPath = C:\HouseCallQuarantine
            ShowErrorInAction = 0
            TrendUserId =
            TrendScanCompletedURL =
            ScanReportUrl = http://wtc.trendmicro.com/HcBin/HcAddLog.exe
            ScanMemoryVirus = 1
            ScanBootVirus = 1
            ActiveUpdateUrl = http://housecall-p.activeupdate.trendmicro.com/activeupdate/
            HouseCallBaseUrl = http://wtc.trendmicro.com:8000/hcms/

            2008/09/15 15:14:30:703 59CB008::OnCreate()
            2008/09/15 15:14:30:703 59CB008::COleControl::OnCreate() Pass!
            2008/09/15 15:14:30:703 59CB008::XP platform.
            2008/09/15 15:14:30:703 59CB008::Mutex = 520
            2008/09/15 15:14:30:703 59CB008::OnCreate() Web server List checking ...
            2008/09/15 15:14:30:703 59CB008::OnCreate() Get AddressBarText => 'http://www.secuser.com'
            2008/09/15 15:14:30:703 59CB008::OnCreate() Parsing hostname form AddressBarText => 'http://www.secuser.com'
            2008/09/15 15:14:30:703 59CB008::OnCreate() Found 'www.secuser.com' in server list
            2008/09/15 15:14:30:718 m_strClientIP=192.168.1.10

            2008/09/15 15:14:31:390 59CB008::OnCreate() Pass!
            2008/09/15 15:14:31:406 59CB008::ActveUpdateGetNewestPatternEngine() begin
            2008/09/15 15:14:46:437 (Xscan):nCurPatVer=0

            2008/09/15 15:14:46:437 (Xscan):HouseCallWorkDir = C:\WINDOWS
            2008/09/15 15:14:46:437 (Xscan):szDll = C:\WINDOWS\TmUpdate.dll
            2008/09/15 15:14:46:468 (Xscan):vscinfo.vi_Version=
            2008/09/15 15:14:46:468 (Xscan):version.build=0
            2008/09/15 15:14:46:468 server.ini path = C:\WINDOWS\AU_Temp\server.ini
            2008/09/15 15:14:46:484 HC client's product version 0 in uint32_t is 0x0, Build no is 0
            2008/09/15 15:14:46:484 (Xscan):nNewPatVer=0

            2008/09/15 15:14:46:484 (Xscan):HouseCallWorkDir=C:\WINDOWS

            2008/09/15 15:15:17:046 (Xscan):MoveFile(C:\WINDOWS\LPT$VPN.541,C:\WINDOWS\VPTNFILE.541)

            2008/09/15 15:15:17:078 59CB008::ActveUpdateGetNewestPatternEngine() end
            2008/09/15 15:15:17:218 59CB008::OnSafeStateToFireEvent()
            2008/09/15 15:15:58:125 (Xscan) : DuplicatePatternForTSC() :copy from C:\WINDOWS\VPTNFILE.541 to C:\WINDOWS\LPT$VPN.541

            2008/09/15 15:15:58:125 (Xscan):AddTail path(C:\)
            2008/09/15 15:15:58:125 (Xscan):AddTail path(D:\)
            2008/09/15 15:15:58:140 59CB008::VScanDlg.Create(619C8CA0)
            2008/09/15 15:15:58:218 try to FormatSysInfoString()....

            2008/09/15 15:15:58:218 FormatSysInfoString : 5:1:2600:VER_PLATFORM_WIN32_NT:Service Pack 2

            2008/09/15 15:16:05:140 Internal Pattern Version = 5.541.00

            2008/09/15 15:16:05:906 Start Scanning ************************
            2008/09/15 15:16:05:921 (Xscan) : TSCKL.ini path=C:\WINDOWS\TSC.INI

            2008/09/15 15:16:05:937 (Xscan) : TSCKL.ini : write

            2008/09/15 15:16:05:937 (Xscan) : TSCKL.ini : write HouseCall has found and cleaned a malware.

            2008/09/15 15:16:05:937 (Xscan) : TSCKL.ini : write HouseCall did not find any Trojans. Press the OK button to scan for other types of malware.

            2008/09/15 15:16:05:937 (Xscan) : TSCKL.ini : write Please reboot your computer to completely clean the Trojan.

            2008/09/15 15:16:05:937 (Xscan) : TSCKL.ini : write Please reboot your computer and run HouseCall Control again.

            2008/09/15 15:16:05:937 (Xscan) : TSCKL.ini : write Allocate memory error

            2008/09/15 15:16:05:937 (Xscan): CallTSCToScanVirus

            2008/09/15 15:16:05:953 CXscanCtrl::CallTSCToScanVirus() : TSC pattern number = 978
            2008/09/15 15:16:05:953 (Xscan): CreateProcess(CmdLine=C:\WINDOWS\TSC.EXE /mv,szHouseCallWorkDir=C:\WINDOWS)

            2008/09/15 15:16:31:312 (Xscan) : MsgWaitForMultipleObjects return 0,GetLastError()=0

            2008/09/15 15:16:31:312 (Xscan) : CallTSCToScanVirus() : TSC exit(0)
            2008/09/15 15:16:31:312 (Xscan) : DealWithTSCExitCode(0)

            2008/09/15 15:16:31:312 (Xscan) : TSCKL.EXE returned successfully

            2008/09/15 15:16:31:312 CTSCProgress::GetNoInfectFromIni(int& nNoInfect )
            2008/09/15 15:16:37:531 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Dutch_ePerformance.lpk
            2008/09/15 15:16:37:625 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:625 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:625 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:625 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:625 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\English_ePerformance.lpk
            2008/09/15 15:16:37:671 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:671 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:671 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:671 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:671 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\ePerformance_mouseDown.bmp
            2008/09/15 15:16:37:687 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:703 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\ePerformance_mouseOver.bmp
            2008/09/15 15:16:37:703 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:703 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\ePerformance_w.bmp
            2008/09/15 15:16:37:703 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:703 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\French_ePerformance.lpk
            2008/09/15 15:16:37:718 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:718 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:718 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:718 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:718 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\German_ePerformance.lpk
            2008/09/15 15:16:37:734 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:734 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:734 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:734 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:734 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Italian_ePerformance.lpk
            2008/09/15 15:16:37:750 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:750 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:750 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:750 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:750 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Portuguese_ePerformance.lpk
            2008/09/15 15:16:37:765 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:765 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:765 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:765 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:765 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Simplified_ePerformance.lpk
            2008/09/15 15:16:37:781 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:781 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:796 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:796 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:796 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Spanish_ePerformance.lpk
            2008/09/15 15:16:37:812 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:812 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:812 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:812 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:812 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Swedish_ePerformance.lpk
            2008/09/15 15:16:37:828 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:828 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:828 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:828 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:828 ScanFile C:\\Acer\Empowering Technology\ePerformance\Resources\Traditional_ePerformance.lpk
            2008/09/15 15:16:37:843 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:843 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:843 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:843 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:37:843 ScanFile C:\\Acer\Empowering Technology\ePerformance\ePerformance.exe
            2008/09/15 15:16:38:031 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:031 ScanFile C:\\Acer\Empowering Technology\ePerformance\InstHelp.dll
            2008/09/15 15:16:38:078 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:078 ScanFile C:\\Acer\Empowering Technology\ePerformance\msgbox.skn
            2008/09/15 15:16:38:093 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:093 ScanFile C:\\Acer\Empowering Technology\ePerformance\preaction.exe
            2008/09/15 15:16:38:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:125 ScanFile C:\\Acer\Empowering Technology\ePerformance\ServiceControl.dll
            2008/09/15 15:16:38:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:140 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_DE.CHM
            2008/09/15 15:16:38:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:140 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_EN.CHM
            2008/09/15 15:16:38:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:156 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_ES.CHM
            2008/09/15 15:16:38:156 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:156 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_FR.CHM
            2008/09/15 15:16:38:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:171 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_IT.CHM
            2008/09/15 15:16:38:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:171 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_JA.CHM
            2008/09/15 15:16:38:171 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:171 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_NL.CHM
            2008/09/15 15:16:38:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:187 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_PT.CHM
            2008/09/15 15:16:38:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:187 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_SC.CHM
            2008/09/15 15:16:38:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:187 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_SV.chm
            2008/09/15 15:16:38:187 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:187 ScanFile C:\\Acer\Empowering Technology\eRecovery\HelpFiles\ERECOVERY_TC.CHM
            2008/09/15 15:16:38:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:203 ScanFile C:\\Acer\Empowering Technology\eRecovery\AboutNTISDK.dll
            2008/09/15 15:16:38:203 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:203 ScanFile C:\\Acer\Empowering Technology\eRecovery\catply.exe
            2008/09/15 15:16:38:234 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:234 ScanFile C:\\Acer\Empowering Technology\eRecovery\CdrMmc32.dll
            2008/09/15 15:16:38:250 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:250 ScanFile C:\\Acer\Empowering Technology\eRecovery\Cdrw32.bdb
            2008/09/15 15:16:38:265 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:265 ScanFile C:\\Acer\Empowering Technology\eRecovery\Cdrw32.dll
            2008/09/15 15:16:38:296 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:296 ScanFile C:\\Acer\Empowering Technology\eRecovery\CdrwEx32.dll
            2008/09/15 15:16:38:312 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:312 ScanFile C:\\Acer\Empowering Technology\eRecovery\Data32.dll
            2008/09/15 15:16:38:328 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:328 ScanFile C:\\Acer\Empowering Technology\eRecovery\DataEx32.dll
            2008/09/15 15:16:38:343 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:343 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery.cab
            2008/09/15 15:16:38:359 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:375 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:390 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:406 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:421 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:421 Dump_Virus:pfcb->pfcb_status=0
          3. dom
            2008/09/15 15:16:38:421 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery.exe
            2008/09/15 15:16:38:468 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:468 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_EN.ini
            2008/09/15 15:16:38:484 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:484 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_FR.ini
            2008/09/15 15:16:38:500 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:500 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_mouseDown.bmp
            2008/09/15 15:16:38:515 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:515 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_mouseDown_DT.bmp
            2008/09/15 15:16:38:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:531 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_mouseOver.bmp
            2008/09/15 15:16:38:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:531 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_mouseOver_DT.bmp
            2008/09/15 15:16:38:531 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:531 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_w.bmp
            2008/09/15 15:16:38:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:546 ScanFile C:\\Acer\Empowering Technology\eRecovery\eRecovery_w_DT.bmp
            2008/09/15 15:16:38:546 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:546 ScanFile C:\\Acer\Empowering Technology\eRecovery\ETFSBOOT.COM
            2008/09/15 15:16:38:562 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:562 ScanFile C:\\Acer\Empowering Technology\eRecovery\extResource.dll
            2008/09/15 15:16:38:578 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:578 ScanFile C:\\Acer\Empowering Technology\eRecovery\ImagFile.dll
            2008/09/15 15:16:38:593 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:593 ScanFile C:\\Acer\Empowering Technology\eRecovery\int15.sys
            2008/09/15 15:16:38:640 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:640 ScanFile C:\\Acer\Empowering Technology\eRecovery\int15_x32.sys
            2008/09/15 15:16:38:687 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:687 ScanFile C:\\Acer\Empowering Technology\eRecovery\int15_x64.sys
            2008/09/15 15:16:38:687 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:687 ScanFile C:\\Acer\Empowering Technology\eRecovery\LogFile.dll
            2008/09/15 15:16:38:703 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:703 ScanFile C:\\Acer\Empowering Technology\eRecovery\MBRwrWin.exe
            2008/09/15 15:16:38:734 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:734 ScanFile C:\\Acer\Empowering Technology\eRecovery\MFC71.dll
            2008/09/15 15:16:38:781 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:781 ScanFile C:\\Acer\Empowering Technology\eRecovery\MFC71u.dll
            2008/09/15 15:16:38:843 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:843 ScanFile C:\\Acer\Empowering Technology\eRecovery\Monitor.exe
            2008/09/15 15:16:38:843 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:859 ScanFile C:\\Acer\Empowering Technology\eRecovery\Mpeg2Dec.dll
            2008/09/15 15:16:38:859 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:859 ScanFile C:\\Acer\Empowering Technology\eRecovery\mscoree.dll
            2008/09/15 15:16:38:875 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:875 ScanFile C:\\Acer\Empowering Technology\eRecovery\msvcp71.dll
            2008/09/15 15:16:38:921 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:921 ScanFile C:\\Acer\Empowering Technology\eRecovery\msvcr71.dll
            2008/09/15 15:16:38:953 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:953 ScanFile C:\\Acer\Empowering Technology\eRecovery\NtiAspi.dll
            2008/09/15 15:16:38:953 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:953 ScanFile C:\\Acer\Empowering Technology\eRecovery\OSCDIMG.EXE
            2008/09/15 15:16:38:984 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:38:984 ScanFile C:\\Acer\Empowering Technology\eRecovery\SysInfo.dll
            2008/09/15 15:16:39:015 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:015 ScanFile C:\\Acer\Empowering Technology\eRecovery\Video32.dll
            2008/09/15 15:16:39:015 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:062 ScanFile C:\\Acer\Empowering Technology\eSettings\Resources\Dutch_eSettingsDT.lpk
            2008/09/15 15:16:39:093 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:093 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:093 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:109 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:125 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:140 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:156 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:156 Dump_Virus:pfcb->pfcb_status=0

            2008/09/15 15:16:39:156 Dump_Virus:pfcb->pfcb_status=0
        3. Utilisateur anonyme
          colle le rapport : C:\Program Files\EsetOnlineScanner\log.txt
          1. dom
            Antivirus Version Dernière mise à jour Résultat
            AhnLab-V3 2008.9.13.0 2008.09.16 -
            AntiVir 7.8.1.28 2008.09.16 -
            Authentium 5.1.0.4 2008.09.15 -
            Avast 4.8.1195.0 2008.09.15 -
            AVG 8.0.0.161 2008.09.15 -
            BitDefender 7.2 2008.09.16 -
            CAT-QuickHeal 9.50 2008.09.16 -
            ClamAV 0.93.1 2008.09.16 -
            DrWeb 4.44.0.09170 2008.09.16 -
            eSafe 7.0.17.0 2008.09.15 -
            eTrust-Vet 31.6.6090 2008.09.15 -
            Ewido 4.0 2008.09.15 -
            F-Prot 4.4.4.56 2008.09.14 -
            F-Secure 8.0.14332.0 2008.09.16 -
            Fortinet 3.113.0.0 2008.09.16 -
            GData 19 2008.09.16 -
            Ikarus T3.1.1.34.0 2008.09.16 -
            K7AntiVirus 7.10.457 2008.09.15 -
            Kaspersky 7.0.0.125 2008.09.16 -
            McAfee 5384 2008.09.16 -
            Microsoft 1.3903 2008.09.16 -
            NOD32v2 3444 2008.09.16 -
            Norman 5.80.02 2008.09.15 -
            Panda 9.0.0.4 2008.09.16 -
            PCTools 4.4.2.0 2008.09.15 -
            Prevx1 V2 2008.09.16 -
            Rising 20.62.12.00 2008.09.16 -
            Sophos 4.33.0 2008.09.16 -
            Sunbelt 3.1.1633.1 2008.09.13 -
            Symantec 10 2008.09.16 -
            TheHacker 6.3.0.9.084 2008.09.15 -
            TrendMicro 8.700.0.1004 2008.09.16 -
            VBA32 3.12.8.5 2008.09.15 -
            ViRobot 2008.9.16.1377 2008.09.16 -
            VirusBuster 4.5.11.0 2008.09.15 -
            Webwasher-Gateway 6.6.2 2008.09.16 -
            Information additionnelle
            File size: 25069 bytes
            MD5...: 620afb77a6953265509900328262dbe9
            SHA1..: 198564917c15a7c4090cd983ce746644f873def9
            SHA256: 713f9548a67dd2c1fc8200a0d7f3a5c9d5c6877a3448801eaefafca3ae8d67d6
            SHA512: 539d97726bf319698e6c3964fd7819850c755d9cb9004a921847d1ea55dc2a51
            4255a2c4524e1ccd754f6d2accbfaf803be364fd34bc31944f6fff7ea17c6c92
            PEiD..: -
            TrID..: File type identification
            Unknown!
            PEInfo: -
        4. Utilisateur anonyme
          choche les cases et fait fix checked :
          O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

          puis vas sur : htp://www.virustotal.com
          et colle :
          C:\WINDOWS\system32\MRT.exe

          ensuite met le rapport ici.
          1. dom
            Fichier MRT.exe reçu le 2008.09.11 13:34:07 (CET)
            Situation actuelle: terminé

            Résultat: 0/36 (0.00%)
            Formaté Impression des résultats
            Antivirus Version Dernière mise à jour Résultat
            AhnLab-V3 2008.9.12.0 2008.09.11 -
            AntiVir 7.8.1.28 2008.09.11 -
            Authentium 5.1.0.4 2008.09.11 -
            Avast 4.8.1195.0 2008.09.10 -
            AVG 8.0.0.161 2008.09.11 -
            BitDefender 7.2 2008.09.11 -
            CAT-QuickHeal 9.50 2008.09.11 -
            ClamAV 0.93.1 2008.09.11 -
            DrWeb 4.44.0.09170 2008.09.11 -
            eSafe 7.0.17.0 2008.09.10 -
            eTrust-Vet 31.6.6084 2008.09.11 -
            Ewido 4.0 2008.09.11 -
            F-Prot 4.4.4.56 2008.09.10 -
            F-Secure 8.0.14332.0 2008.09.11 -
            Fortinet 3.113.0.0 2008.09.11 -
            GData 19 2008.09.11 -
            Ikarus T3.1.1.34.0 2008.09.11 -
            K7AntiVirus 7.10.450 2008.09.10 -
            Kaspersky 7.0.0.125 2008.09.11 -
            McAfee 5381 2008.09.10 -
            Microsoft 1.3903 2008.09.11 -
            NOD32v2 3434 2008.09.11 -
            Norman 5.80.02 2008.09.11 -
            Panda 9.0.0.4 2008.09.10 -
            PCTools 4.4.2.0 2008.09.10 -
            Prevx1 V2 2008.09.11 -
            Rising 20.61.32.00 2008.09.11 -
            Sophos 4.33.0 2008.09.11 -
            Sunbelt 3.1.1624.1 2008.09.11 -
            Symantec 10 2008.09.11 -
            TheHacker 6.3.0.9.077 2008.09.10 -
            TrendMicro 8.700.0.1004 2008.09.11 -
            VBA32 3.12.8.5 2008.09.10 -
            ViRobot 2008.9.11.1373 2008.09.11 -
            VirusBuster 4.5.11.0 2008.09.10 -
            Webwasher-Gateway 6.6.2 2008.09.11 -
            Information additionnelle
            File size: 16208504 bytes
            MD5...: f5a3e4b4bcf683ebfd3948acfdee3ed2
            SHA1..: aa618c03b10d8b3643a9bd53475538707f54d573
            SHA256: bd348be960a9da217dd0c7a279e14ebda5e08b19c40b5c4d62771d6ea771c67e
            SHA512: d886fb0fa00001c1024653c2badebee7c847b2ceb65ce2b4df02b2f20f894085
            86442e4f72604731b8edad08473f2de912268db167a963e5e71eeb217ce327a7
            PEiD..: -
            TrID..: File type identification
            Win64 Executable Generic (46.2%)
            Win32 EXE PECompact compressed (generic) (22.4%)
            Win32 Executable MS Visual C++ (generic) (20.3%)
            Win32 Executable Generic (4.6%)
            Win32 Dynamic Link Library (generic) (4.0%)
            PEInfo: PE Structure information

            ( base data )
            entrypointaddress.: 0x100e7a4
            timedatestamp.....: 0x48b4664b (Tue Aug 26 20:23:39 2008)
            machinetype.......: 0x14c (I386)

            ( 4 sections )
            name viradd virsiz rawdsiz ntrpy md5
            .text 0x1000 0x3aa46 0x3ac00 6.45 b5b48b824e9ed996bc00679e630ac500
            .data 0x3c000 0x1970 0xa00 5.90 bec1577b6f66d8a9924b3991c6025efa
            .rsrc 0x3e000 0xf2a000 0xf29e00 7.28 71ed8d77b77dd936be12f36392b9cc26
            .reloc 0xf68000 0xd4a8 0xd600 2.22 2c575d6b146d79d63ca56f265b8d2087

            ( 13 imports )
            > ADVAPI32.dll: TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, LookupPrivilegeValueW, AdjustTokenPrivileges, RegOpenKeyW, RegCreateKeyExW, RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, AllocateAndInitializeSid, CheckTokenMembership, CryptGenRandom, CryptReleaseContext, CryptAcquireContextW, FreeSid, OpenProcessToken, RegCloseKey
            > KERNEL32.dll: GetSystemInfo, GetProcessHeap, HeapFree, GlobalFree, SetEndOfFile, GetSystemTime, InitializeCriticalSection, TryEnterCriticalSection, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, GetWindowsDirectoryW, WritePrivateProfileSectionW, MoveFileW, SetFilePointer, GetSystemWindowsDirectoryW, FlushFileBuffers, FileTimeToSystemTime, GetLogicalDrives, GetDriveTypeW, GetExitCodeProcess, GetPrivateProfileStringW, GetPrivateProfileIntW, WritePrivateProfileStringW, WideCharToMultiByte, MultiByteToWideChar, GetSystemDefaultLCID, GetFileSize, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, HeapDestroy, HeapReAlloc, HeapValidate, HeapSize, HeapCreate, LeaveCriticalSection, EnterCriticalSection, FindResourceW, LoadResource, LockResource, SizeofResource, GetVersionExW, CreateProcessW, ExpandEnvironmentStringsW, GetFileAttributesW, CreateDirectoryW, SetFilePointerEx, ReadFile, GetModuleFileNameW, CloseHandle, InterlockedDecrement, InterlockedIncrement, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, RtlUnwind, OutputDebugStringA, GetStartupInfoW, InterlockedCompareExchange, Sleep, InterlockedExchange, LoadLibraryW, CompareStringW, GetLastError, GetModuleHandleW, SetErrorMode, GetCommandLineW, FormatMessageW, GetTimeFormatW, SystemTimeToFileTime, GetLocalTime, FileTimeToLocalFileTime, GetSystemTimeAsFileTime, ResumeThread, SuspendThread, WaitForSingleObject, CreateThread, lstrlenW, lstrcmpW, SetLastError, MulDiv, GetDiskFreeSpaceExW, lstrlenA, WriteFile, CreateFileW, DeleteFileW, GetTempFileNameW, GetTempPathW, HeapAlloc
            > GDI32.dll: CreateSolidBrush, CreateCompatibleDC, CreateCompatibleBitmap, DeleteDC, GetTextColor, SetBkMode, SelectObject, GetTextMetricsW, SetTextColor, GetTextExtentExPointW, DeleteObject, CreateFontIndirectW, GetObjectW, GetBkColor, ExtTextOutW
            > USER32.dll: SetDlgItemTextW, SetWindowLongW, SendMessageW, PostMessageW, GetDlgItem, GetWindowLongW, GetParent, SendDlgItemMessageW, DestroyIcon, EnableWindow, GetDlgItemTextW, ShowWindow, LoadImageW, EndDialog, LoadIconW, SetWindowTextW, ExitWindowsEx, MessageBoxW, MapWindowPoints, DialogBoxParamW, UnregisterClassW, LoadCursorW, CharNextW, LoadStringW, PtInRect, GetKeyState, ReleaseDC, IntersectRect, DrawFocusRect, FrameRect, OffsetRect, SetRect, GetSysColor, GetFocus, GetDC, GetClientRect, SetCapture, InvalidateRect, SetFocus, SetCursor, UpdateWindow, IsWindowEnabled, GetWindowTextW, GetWindowTextLengthW, ReleaseCapture, EndPaint, BeginPaint, DefWindowProcW, RegisterClassExW, PostQuitMessage, RegisterClassW, DispatchMessageW, TranslateMessage, GetMessageW, CreateWindowExW
            > msvcrt.dll: __1exception@@UAE@XZ, __0exception@@QAE@ABV0@@Z, free, _CxxThrowException, malloc, __wgetmainargs, _cexit, _exit, _XcptFilter, exit, _wcmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, __1type_info@@UAE@XZ, memmove, _what@exception@@UBEPBDXZ, _terminate@@YAXXZ, _controlfp, _unlock, __dllonexit, _lock, _wcsicmp, _purecall, memcpy, wcsrchr, __0exception@@QAE@ABQBD@Z, __RTDynamicCast, _ltow, _wcsnicmp, mktime, time, strtol, _wctime, bsearch, _waccess, qsort, __0exception@@QAE@XZ, __mb_cur_max, iswctype, _onexit, calloc, isdigit, mbtowc, _vsnwprintf, memset, isleadbyte, isxdigit, localeconv, wctomb, wcstombs, realloc, wcsncmp, __CxxFrameHandler, _errno, __badioinfo, __pioinfo, _read, _fileno, ungetc, _wcslwr, _wcsupr, wcschr, _vsnprintf
            > COMCTL32.dll: CreatePropertySheetPageW, PropertySheetW, DestroyPropertySheetPage, InitCommonControlsEx
            > SHLWAPI.dll: PathRemoveFileSpecW, StrStrW, StrStrIW
            > SHELL32.dll: SHGetFolderPathW, SHGetFolderLocation, SHBrowseForFolderW, SHGetPathFromIDListW, Shell_NotifyIconW, ShellExecuteExW, CommandLineToArgvW, ShellExecuteW
            > ole32.dll: StringFromGUID2, CoTaskMemFree, CoInitialize, CoUninitialize, CoCreateGuid
            > WININET.dll: InternetOpenA, InternetConnectA, HttpOpenRequestA, HttpSendRequestA, HttpQueryInfoA, InternetCloseHandle, InternetCrackUrlA
            > RPCRT4.dll: RpcStringFreeW, UuidToStringW, UuidCreate, UuidFromStringW
            > WINHTTP.dll: WinHttpSetStatusCallback, WinHttpQueryDataAvailable, WinHttpReadData, WinHttpSendRequest, WinHttpAddRequestHeaders, WinHttpOpenRequest, WinHttpSetOption, WinHttpQueryOption, WinHttpWriteData, WinHttpQueryHeaders, WinHttpReceiveResponse, WinHttpOpen, WinHttpGetIEProxyConfigForCurrentUser, WinHttpGetProxyForUrl, WinHttpConnect, WinHttpCrackUrl, WinHttpSetTimeouts, WinHttpCloseHandle
            > urlmon.dll: IsValidURL

            est celà ???
        5. Utilisateur anonyme
          et le rapport du scan en ligne ?
          colle le pendant que je regarde le rapport du hijackthis.
          1. dom
            merci de ta réponse.
            le micro est au bureau je fais le scan selon tes indications dès demain.
            je te tiens au courant dès que possible.
            @ plus
            1. Utilisateur anonyme
              salut,

              fait un scan en ligne avec internet explore, si tu as firefox fait:
              démarrer -> executer -> tape : iexplore (puis valide)

              BRANCHE TA OU TES CLE USB / LECTEUR EXTERNE ...

              (coche toutes les cases à chaque fois) :
              https://www.eset.com/

              à la fin colle le rapport : C:\Program Files\EsetOnlineScanner\log.txt

              si ta besoin d'aide tu as un tutoriel ici : http://bibou0007.com/tutos-et-lexique-f45/tutorial-nod32-online-scanner-t128.htm

              --------------------
              Ensuite une fois fini fait un rapport hijackthis :
              hhttps://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

              tu le télécharges, tu le lances et tu cliquera sur le premier bouton en haut "Do a system scan and save a logfile"
              tu colleras le fichier texte ici ;).

              PS : Ne fermes pas le programme
              1. dom
                bonjour, voici le rapport merci

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 11:17:26, on 16/09/2008
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                Boot mode: Normal

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                C:\Program Files\Alwil Software\Avast4\ashServ.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\Acer\Empowering Technology\awServ.exe
                C:\WINDOWS\system32\HPZipm12.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\wamp\apache\Apache.exe
                C:\wamp\mysql\bin\mysqld-nt.exe
                C:\wamp\apache\Apache.exe
                C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                C:\WINDOWS\system32\taskmgr.exe
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                C:\WINDOWS\explorer.exe
                C:\Documents and Settings\ANJCL\Bureau\HiJackThis.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
                R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://localhost/phpmyadmin/
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                F2 - REG:system.ini: Shell=
                O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O4 - HKLM\..\Run: [LaunchApp] Alaunch
                O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
                O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
                O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
                O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
                O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
                O4 - HKLM\..\Run: [AdminWorks Tray] "C:\Acer\Empowering Technology\awtray.exe"
                O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                O4 - HKLM\..\Run: [MRT] "C:\WINDOWS\system32\MRT.exe" /R
                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                O4 - Startup: WampServer.lnk = C:\wamp\wampserver.exe
                O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
                O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O15 - Trusted Zone: http://www.secuser.com
                O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
                O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                O23 - Service: AdminWorks Agent X6 (AWService) - OSA Technologies Inc., An Avocent Company - C:\Acer\Empowering Technology\awServ.exe
                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                O23 - Service: wampapache - Unknown owner - C:\wamp\apache\Apache.exe
                O23 - Service: wampmysqld - Unknown owner - C:\wamp\mysql\bin\mysqld-nt.exe

            Discussions similaires

            Problème avec "PUADIManager:Win32/OfferCore
            Knaki

            3 réponses
            PUADlManager:Win32/OfferCore
            tenmalade

            2 réponses
            PUADlManager:Win32/OfferCore
            bernardarrad

            3 réponses
            Pb Windows 7, .EXE n'est pas app win32 valide
            Witeric

            15 réponses
            PUA:Win32/InstallCore detecté par windows sécurité
            thetib

            11 réponses