Rapport USB fix

bonjour

● Relance UsbFix

● Dans le menu principale cette fois choisit l'option2

Le menu démarrer et les icônes vont à nouveau disparaître.. c'est normal.

Si un message te demande de redémarrer l'ordinateur fais le ...

● Au redémarrage, le fix se relance... laisses l'opération s'effectuer.

● Le bloc note s'ouvre avec un rapport, envoies le dans la prochaine réponse


UsbFix peut te demander d'uploader un dossier compressé à cette adresse : http://chiquitine.changelog.fr/Sample/Upload.php

Il est enregistré sur ton bureau.

Merci de l'envoyer à l'adresse indiquée afin d'aider l'auteur de UsbFix dans ses recherches.

Merci

..................

ensuite

• Télécharge Random's System Information Tool (RSIT) de Random/Random.

http://images.malwareremoval.com/random/RSIT.exe

• Enregistre le sur ton Bureau.

• Double clique sur RSIT.exe pour lancer l'outil.

• Clique sur "Continue" à l'écran Disclaimer.

• Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande)

et tu devras accepter la licence.

• Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp

Les rapports se trouvent à cet endroit:
C:\rsit\info.txt
C:\rsit\log.txt

ok, merci de la réponse, je fais la démarche et je poste le prochain rapport.

voilà j'ai fini la démarche 2 voici le nouveau rapport :



ntel(R) Core(TM)2 CPU T5500 @ 1.66GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall Status : Disabled
AV : Norton AntiVirus 15.5.0.23 [ Enabled | Updated ]
FW : Norton AntiVirus[ Enabled ]15.5.0.23

C:\ -> Disque fixe local # 111,78 Go (48,17 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 7,52 Go (1,75 Go free) [PHILIPS UFD] # FAT32
G:\ -> Disque amovible # 3,85 Go (350,54 Mo free) [KINGSTON] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 1220
C:\WINDOWS\system32\csrss.exe 1288
C:\WINDOWS\system32\winlogon.exe 1324
C:\WINDOWS\system32\services.exe 1368
C:\WINDOWS\system32\lsass.exe 1380
C:\WINDOWS\system32\svchost.exe 1528
C:\WINDOWS\system32\svchost.exe 1616
C:\WINDOWS\System32\svchost.exe 1676
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 1920
C:\WINDOWS\system32\svchost.exe 1964
C:\WINDOWS\system32\svchost.exe 1996
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe 308
C:\WINDOWS\system32\spoolsv.exe 1012
C:\WINDOWS\system32\svchost.exe 1116
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1448
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe 1384
C:\Program Files\Bonjour\mDNSResponder.exe 1748
C:\WINDOWS\eHome\ehRecvr.exe 1896
C:\WINDOWS\eHome\ehSched.exe 1952
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 192
C:\Program Files\Google\Update\GoogleUpdate.exe 712
C:\WINDOWS\Explorer.EXE 776
C:\Program Files\Google\Update\GoogleUpdate.exe 788
C:\Program Files\Java\jre6\bin\jqs.exe 944
C:\WINDOWS\system32\nvsvc32.exe 2120
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 2140
C:\Program Files\SolidWorks\COSMOSFloWorks\FloWorks\binCFW\StandAloneSlv.exe 2152
C:\Program Files\Dell Support Center\bin\sprtsvc.exe 2216
C:\WINDOWS\system32\svchost.exe 2304
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe 2344
C:\WINDOWS\system32\svchost.exe 2428
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe 2464
C:\WINDOWS\ehome\mcrdsvc.exe 2512
C:\WINDOWS\system32\wuauclt.exe 2960
C:\WINDOWS\system32\dllhost.exe 3192
C:\WINDOWS\system32\wbem\wmiprvse.exe 3400
C:\WINDOWS\System32\alg.exe 3492
C:\WINDOWS\system32\wbem\wmiapsrv.exe 3604
C:\WINDOWS\system32\wbem\wmiprvse.exe 3632

################## | Elements infectieux |

Supprimé ! C:\Recycler\S-1-5-21-117609710-1580436667-839522115-1003
Supprimé ! F:\e9naq.exe

################## | Registre |

Supprimé ! [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "cdoosoft"

################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{53a9922c-dea8-11de-bb15-00188bac6378}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{577ff9bd-e336-11de-bb19-00188bac6378}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{577ff9c0-e336-11de-bb19-00188bac6378}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{5c93f4a8-ddb1-11de-bb11-00188bac6378}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{5c93f4a9-ddb1-11de-bb11-00188bac6378}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[04/11/2009 20:53|--a------|0] C:\AUTOEXEC.BAT
[04/11/2009 20:43|---hs----|209] C:\boot.ini
[10/08/2004 13:00|-rahs----|4952] C:\Bootfont.bin
[04/11/2009 20:53|--a------|0] C:\CONFIG.SYS
[04/11/2009 20:53|-rahs----|0] C:\IO.SYS
[04/11/2009 20:53|-rahs----|0] C:\MSDOS.SYS
[10/08/2004 13:00|-rahs----|47564] C:\NTDETECT.COM
[18/11/2009 01:19|-rahs----|252240] C:\ntldr
[?|?|?] C:\pagefile.sys
[05/01/2010 17:42|--a------|11] C:\trace.ini
[11/01/2010 21:54|--a------|4036] C:\UsbFix.txt
[30/10/2009 10:17|--a------|1011] F:\Raccourci vers 4452-1-0-310-PERRIER@0BTP-PL.lnk
[07/01/2010 00:54|--a------|270735872] F:\Comment c'est fait une tuile ( sans voix off ).avi
[07/01/2010 00:30|--a------|270735872] F:\Comment c'est fait une tuile.avi
[10/01/2010 16:17|--a------|732737536] F:\L'.Ǹtrange.Histoire.De.Benjamin.Button.Truefrench.DVDRiP.avi

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# F:\autorun.inf -> Dossier créé par UsbFix.
# G:\autorun.inf -> Dossier créé par UsbFix.

################## | Crack > Keygen > Serial |


################## | ! Fin du rapport # UsbFix V6.073 ! |

vu

tu peux enchainer sur RSIT

Mercri encore de ton aide, alors j'ai telecharger rsit et réaliser un rapport :



Logfile of random's system information tool 1.06 (written by random/random)
Run by Emile at 2010-01-11 22:50:52
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 49 GB (43%) free of 114 GB
Total RAM: 2046 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:50:55, on 11/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\SolidWorks\COSMOSFloWorks\FloWorks\binCFW\StandAloneSlv.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Fichiers communs\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\SolidWorks\SolidWorks\swScheduler\swBOEngine.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\Emile\LOCALS~1\Temp\SolidWorksLicTemp.0001
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Emile\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\Emile.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SolidWorks_CheckForUpdates] "C:\Program Files\Fichiers communs\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe" /scheduler
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Moteur du Planificateur de tâches SolidWorks.lnk = C:\Program Files\SolidWorks\SolidWorks\swScheduler\swBOEngine.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Solver for COSMOSFloWorks 2007 - Unknown owner - C:\Program Files\SolidWorks\COSMOSFloWorks\FloWorks\binCFW\StandAloneSlv.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

excuse moi, j'avais oublié de rebrancher mes clé usb voilà:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Emile at 2010-01-11 22:55:45
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 49 GB (43%) free of 114 GB
Total RAM: 2046 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:55:47, on 11/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\SolidWorks\COSMOSFloWorks\FloWorks\binCFW\StandAloneSlv.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Fichiers communs\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\SolidWorks\SolidWorks\swScheduler\swBOEngine.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\Emile\LOCALS~1\Temp\SolidWorksLicTemp.0001
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Emile\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\Emile.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SolidWorks_CheckForUpdates] "C:\Program Files\Fichiers communs\Gestionnaire d'installation SolidWorks\Scheduler\sldIMScheduler.exe" /scheduler
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Moteur du Planificateur de tâches SolidWorks.lnk = C:\Program Files\SolidWorks\SolidWorks\swScheduler\swBOEngine.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Solver for COSMOSFloWorks 2007 - Unknown owner - C:\Program Files\SolidWorks\COSMOSFloWorks\FloWorks\binCFW\StandAloneSlv.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

pour les cles, c'est réglé

en revanche il me manque celui ci C:\rsit\info.txt

il me manque celui ci C:\rsit\info.txt


Téléchargez MalwareByte's Anti-Malware

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

. Enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
. Une fois la mise à jour terminé
. Rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, clique sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. Rends toi dans l'onglet rapport/log
. Tu cliques dessus pour l'afficher, une fois affiché
. Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
. Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller


Si tu as besoin d'aide regarde ces tutoriels :
Aide: http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

OK ça marche je ne vois plus aucun problème avec mes clé usb, je vais quand même faire la manip de malwarebyte. mais pour le fichier info, c'est pas grave je ferai sans, car j'ai pas trop envie d'afficher le contenu de mon ordinateur sur le net. mais merci quand même.

ok j'attend MBAM

quant au fichier info qu'il serait bien tu postes

personne ne les comprends, pas même beaucoup d'informaticiens....

n'apparait que des renseignement liés aux applications de ton pc

bonsoir voilà le rapport de MBAM

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3549
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

12/01/2010 23:01:13
mbam-log-2010-01-12 (23-01-13).txt

Type de recherche: Examen complet (C:\|F:\|H:\|)
Eléments examinés: 346226
Temps écoulé: 2 hour(s), 34 minute(s), 53 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 83

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP44\A0007264.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP27\A0003055.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP28\A0003326.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP29\A0003336.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP29\A0003678.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP29\A0003680.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP30\A0003688.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP31\A0003715.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP32\A0003763.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP34\A0003886.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP35\A0003920.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004011.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004086.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004090.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004112.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004120.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004123.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004161.exe (Malware.Tool) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004250.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004252.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004302.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP36\A0004304.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP37\A0004308.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0004379.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0004382.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005157.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005160.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005880.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005884.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005885.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005882.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005925.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP38\A0005932.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP39\A0005953.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP39\A0005966.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP40\A0005978.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP41\A0006099.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP42\A0006107.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP43\A0006133.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP45\A0007655.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP45\A0007656.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP45\A0007659.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008566.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0007661.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008565.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008571.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008573.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008579.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008582.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008583.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP47\A0008584.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP47\A0009026.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP47\A0009028.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP47\A0009039.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP47\A0009041.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP48\A0009048.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP48\A0009069.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\F\e9naq.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\Sauvegarde\Norton antivirus 2008 15.5.0.23 license 3 years EDGE\keygen_noUPX.exe (Malware.Tool) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{6DE267CA-B8E6-4F6E-A7EA-1F63F57FA17F}\RP409\A0140948.exe (Worm.Magania) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{6DE267CA-B8E6-4F6E-A7EA-1F63F57FA17F}\RP409\A0141949.exe (Worm.Magania) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{6DE267CA-B8E6-4F6E-A7EA-1F63F57FA17F}\RP451\A0173176.exe (Worm.Magania) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{6DE267CA-B8E6-4F6E-A7EA-1F63F57FA17F}\RP451\A0173179.exe (Worm.Magania) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{6DE267CA-B8E6-4F6E-A7EA-1F63F57FA17F}\RP451\A0173180.exe (Worm.Magania) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP27\A0003057.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP28\A0003328.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP29\A0003338.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP39\A0005962.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP40\A0005980.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP41\A0006101.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP42\A0006109.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP43\A0006135.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP44\A0007266.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP45\A0007657.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0007663.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008568.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008572.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP46\A0008581.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP47\A0008586.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP58\A0014275.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP91\A0031112.dll (Trojan.Agent) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP91\A0031113.dll (Trojan.Agent) -> Quarantined and deleted successfully.
H:\System Volume Information\_restore{3BD24C2F-EBAE-49AC-8A8F-DF4574ED269D}\RP91\A0031114.dll (Trojan.Agent) -> Quarantined and deleted successfully.

ok tout va bien mais surtout pas restaurer pour l'instant ton ordi

- comment va le pc ?
- conseil: mieux vaut antivir efficace et gratuit que norton cracké

ok vides la quarantaine de MBAM si ce n'est pas déjà fait

relances RSIT et postes juste le rapport log