Bonsoir !

Peut tu suivre à la lettre la procédure ici
http://www.commentcamarche.net/faq/sujet-3174-methode-prelim­inaire-de-desinfection

A plus !

Bonsoir voila pour le raport de bitdefender mai pour celui de ewido je croi avoir fai une boulette g directemen efacer tou se ki été ds la quarantaine et kelke seconde plu tar g u droi a lécran bleu avc le message d'éreur.



BitDefender Online Scanner







Scan report generated at: Tue, Apr 11, 2006 - 22:03:12









Scan path: A:\;C:\;















Statistics

Time


03:34:39

Files


338821

Folders


5242

Boot Sectors


3

Archives


7223

Packed Files


33033







Results

Identified Viruses


10

Infected Files


89

Suspect Files


0

Warnings


0

Disinfected


0

Deleted Files


89







Engines Info

Virus Definitions


369525

Engine build


AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)

Scan plugins


13

Archive plugins


39

Unpack plugins


4

E-mail plugins


6

System plugins


1







Scan Settings

First Action


Disinfect

Second Action


Delete

Heuristics


Yes

Enable Warnings


Yes

Scanned Extensions


*;

Exclude Extensions




Scan Emails


Yes

Scan Archives


Yes

Scan Packed


Yes

Scan Files


Yes

Scan Boot


Yes








Scanned File


Status

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Browse Peak.exe


Infected with: Trojan.Swizzor.BR

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Browse Peak.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Browse Peak.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\DRAWSTORE.exe


Infected with: Trojan.Swizzor.CN

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\DRAWSTORE.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\DRAWSTORE.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\five help.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\five help.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\five help.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Flawdart.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Flawdart.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\mapiidol.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\mapiidol.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\mapiidol.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Once Tick.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Once Tick.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Peak Fast.exe


Infected with: Trojan.Swizzor.CN

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Peak Fast.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Peak Fast.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\RectHtm.exe


Infected with: Trojan.Swizzor.AX

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\RectHtm.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\RectHtm.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\roadelse.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\roadelse.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\roadelse.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\that part.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\that part.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\that part.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Upload Amen.exe


Infected with: Trojan.Swizzor.CK

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Upload Amen.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Upload Amen.exe


Deleted

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Userteam.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Userteam.exe


Disinfection failed

C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Userteam.exe


Deleted

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\bqxcczpb.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\bqxcczpb.exe


Disinfection failed

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\bqxcczpb.exe


Deleted

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\chgrregr.exe


Infected with: Trojan.Swizzor.CN

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\chgrregr.exe


Disinfection failed

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\chgrregr.exe


Deleted

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\czjetbpi.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\czjetbpi.exe


Disinfection failed

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\czjetbpi.exe


Deleted

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\ipaufwrs.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\ipaufwrs.exe


Disinfection failed

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\ipaufwrs.exe


Deleted

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\pwesjopc.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\pwesjopc.exe


Disinfection failed

C:\Documents and Settings\Grégory\Application Data\Bits64Copy\pwesjopc.exe


Deleted

C:\Documents and Settings\Michel\Application Data\Bits64Copy\kdgaojng.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\Documents and Settings\Michel\Application Data\Bits64Copy\kdgaojng.exe


Deleted

C:\Documents and Settings\Michel\Application Data\Bits64Copy\web bolt time.exe


Infected with: Trojan.Lopad.G

C:\Documents and Settings\Michel\Application Data\Bits64Copy\web bolt time.exe


Disinfection failed

C:\Documents and Settings\Michel\Application Data\Bits64Copy\web bolt time.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\cqjyuqtu.exe


Infected with: Trojan.Swizzor.CK

C:\Documents and Settings\user\Application Data\Bits64Copy\cqjyuqtu.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\cqjyuqtu.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\mfwdplxo.exe


Infected with: Trojan.Swizzor.BR

C:\Documents and Settings\user\Application Data\Bits64Copy\mfwdplxo.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\mfwdplxo.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\ouudqomy.exe


Infected with: Trojan.Swizzor.AX

C:\Documents and Settings\user\Application Data\Bits64Copy\ouudqomy.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\ouudqomy.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\Ping Live Iso.exe


Infected with: Trojan.Swizzor.DH

C:\Documents and Settings\user\Application Data\Bits64Copy\Ping Live Iso.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\Ping Live Iso.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\pzavbsfp.exe


Infected with: Trojan.Swizzor.DH

C:\Documents and Settings\user\Application Data\Bits64Copy\pzavbsfp.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\pzavbsfp.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\support burn vc amen.exe


Infected with: Trojan.Swizzor.DH

C:\Documents and Settings\user\Application Data\Bits64Copy\support burn vc amen.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\support burn vc amen.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\vdkbwazq.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\Documents and Settings\user\Application Data\Bits64Copy\vdkbwazq.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\xfgoxrmx.exe


Infected with: Trojan.Swizzor.BA

C:\Documents and Settings\user\Application Data\Bits64Copy\xfgoxrmx.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\xfgoxrmx.exe


Deleted

C:\Documents and Settings\user\Application Data\Bits64Copy\zatudjiy.exe


Infected with: Trojan.Swizzor.CN

C:\Documents and Settings\user\Application Data\Bits64Copy\zatudjiy.exe


Disinfection failed

C:\Documents and Settings\user\Application Data\Bits64Copy\zatudjiy.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000289.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000289.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000289.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000637.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000637.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000637.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000751.exe


Infected with: Trojan.Swizzor.BR

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000751.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000751.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000752.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000752.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000752.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000753.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000753.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000753.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000754.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000754.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000755.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000755.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000755.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000756.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000756.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000757.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000757.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000757.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000758.exe


Infected with: Trojan.Swizzor.AX

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000758.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000758.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000759.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000759.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000759.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000760.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000760.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000760.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000762.exe


Infected with: Trojan.Swizzor.CK

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000762.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000762.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000763.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000763.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0000763.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0001608.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0001608.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P1\A0001608.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0002102.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0002102.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0002102.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003321.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003321.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003321.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003463.exe


Infected with: Trojan.Swizzor.BR

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003463.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003463.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003464.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003464.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003464.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003465.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003465.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003465.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003466.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003466.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003467.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003467.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003467.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003468.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003468.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003469.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003469.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003469.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003470.exe


Infected with: Trojan.Swizzor.AX

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003470.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003470.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003471.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003471.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003471.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003472.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003472.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003472.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003474.exe


Infected with: Trojan.Swizzor.CK

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003474.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003474.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003475.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003475.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003475.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003491.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003491.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003491.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003492.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003492.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003492.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003785.exe


Infected with: Trojan.Lopad.K

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003785.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0003785.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006569.exe


Infected with: Trojan.Swizzor.BR

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006569.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006569.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006570.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006570.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006570.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006571.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006571.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006571.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006572.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006572.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006573.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006573.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006573.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006574.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006574.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006575.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006575.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006575.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006576.exe


Infected with: Trojan.Swizzor.AX

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006576.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006576.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006577.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006577.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006577.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006578.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006578.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006578.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006580.exe


Infected with: Trojan.Swizzor.CK

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006580.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006580.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006581.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006581.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006581.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006589.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006589.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006589.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006590.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006590.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006590.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006591.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006591.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006591.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006592.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006592.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006592.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006593.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006593.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006593.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006643.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006643.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006644.exe


Infected with: Trojan.Lopad.G

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006644.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006644.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006648.exe


Infected with: Trojan.Swizzor.CK

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006648.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006648.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006649.exe


Infected with: Trojan.Swizzor.BR

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006649.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006649.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006651.exe


Infected with: Trojan.Swizzor.AX

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006651.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006651.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006652.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006652.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006652.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006653.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006653.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006653.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006654.exe


Infected with: Trojan.Swizzor.DH

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006654.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006654.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006655.exe


Infected with: Trojan.Downloader.Swizzor.DV

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006655.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006656.exe


Infected with: Trojan.Swizzor.BA

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006656.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006656.exe


Deleted

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006657.exe


Infected with: Trojan.Swizzor.CN

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006657.exe


Disinfection failed

C:\System Volume Information\_restore{4EDDA3C9-A92F-4FE3-A339-58DE3B33B806}\R­P2\A0006657.exe


Deleted

C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll


Infected with: Trojan.Downloader.3069.A

C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll


Disinfection failed

C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll


Deleted

Et voila mon nouvel hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 22:32:13, on 11/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\GRGORY~1\LOCALS~1\Temp\Rar$EX00.875\HijackThis\H­ijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {B037C41D-6348-C5D5-58BB-E9806521D25E} - C:\DOCUME~1\GRGORY~1\APPLIC~1\AXISRO~1\GplFor.exe (file missing)
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: (no name) - {EBF431BB-FE96-C18D-0E82-F266A1F44A92} - C:\DOCUME~1\user\APPLIC~1\AXISRO~1\GplFor.exe (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Part Free Grey Open] C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Start tool.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?a1c2d14046934c128cb5e32944d1baf7
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?a1c2d14046934c128cb5e32944d1baf7
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potc_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/playersd/installer2.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/fileshar...
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} - http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab27571.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game15.zylom.m6game.m6.fr/activex/zylomgamesplayer.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{110D8C88-25BE-4D49-ACDB-2F801547353D}: NameServer = 193.252.19.3,193.252.19.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{2BA06AED-1A37-4914-8226-D587E7784639}: NameServer = 205.188.146.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{110D8C88-25BE-4D49-ACDB-2F801547353D}: NameServer = 193.252.19.3,193.252.19.4
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: wbsys.dll MsgPlusLoader.dll
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: kavsvc - Kaspersky Labs - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Bonsoir !

C:\DOCUME~1\GRGORY~1\LOCALS~1\Temp\Rar$EX00.875\HijackThis\H­ijackThis.exe

Pour pouvoir utiliser les sauvegardes créées par HijackThis, il faut impérativement que le programme HijackThis soit installé dans un dossier non système, non temporaire, et qui lui est réservé.
Je te demande donc de créer un dossier (par exemple: C:\Program Files\HJT) puis d'y déplacer le fichier HijackThis.exe.
Si tu le laisses tel qu'il est actuellement, sur le bureau, pas de sauvegardes aisément exploitables (donc plus aucune possibilité de faire "marche arrière").

tu peut faire ca avant de commencer la désinfection STP ?

A plus !

Voila jpense que sa devrai fonctioné maintnan bonne nuit!!!

Logfile of HijackThis v1.99.1
Scan saved at 23:32:53, on 11/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {B037C41D-6348-C5D5-58BB-E9806521D25E} - C:\DOCUME~1\GRGORY~1\APPLIC~1\AXISRO~1\GplFor.exe (file missing)
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: (no name) - {EBF431BB-FE96-C18D-0E82-F266A1F44A92} - C:\DOCUME~1\user\APPLIC~1\AXISRO~1\GplFor.exe (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Part Free Grey Open] C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Start tool.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?a1c2d14046934c128cb5e32944d1baf7
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?a1c2d14046934c128cb5e32944d1baf7
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potc_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/playersd/installer2.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/fileshar...
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} - http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab27571.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game15.zylom.m6game.m6.fr/activex/zylomgamesplayer.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{110D8C88-25BE-4D49-ACDB-2F801547353D}: NameServer = 193.252.19.3,193.252.19.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{2BA06AED-1A37-4914-8226-D587E7784639}: NameServer = 205.188.146.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{110D8C88-25BE-4D49-ACDB-2F801547353D}: NameServer = 193.252.19.3,193.252.19.4
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: wbsys.dll MsgPlusLoader.dll
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: kavsvc - Kaspersky Labs - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Bonjour !

Analyse en cours retour dans un instant !

Re

Juste pour info je ne vois pas de parfeu sur ton rapport !
on en installera un plus tard !

-Télécharger et installer EasyCleaner de Toni Helenius (Programme faisant partie de la catégorie des nettoyeurs)
http://personal.inet.fi/business/toniarts/ecleane.htm

Démarrer Ewido avec l'icône qui se trouve sur le Bureau.
Cliquer sur mise à jour, attendre la fin de cette mise à jour, puis fermer le programme.

Au vu de la longueur de la procédure, je te conseille de l'imprimer, ou d'en sélectionner toutes les lignes et de copier cette sélection dans un fichier texte sur ton PC.
Il faut exécuter toutes les étapes, dans l'ordre exact indiqué ci-dessous.
Si un élément te paraît obscur, demande des explications avant de commencer la désinfection.

Note: Ces manips doivent être effectuées en ayant ouvert une session avec les droits "Administrateur" et en ayant désactivé les protections résidentes si il y en a ! (ex:Spybot S&D, Ad-Watch, Microsoft AntiSpyware )

-Redémarrer en mode sans échec :
(En mode sans échec : seul les processus systèmes sont lancés il est donc plus facile de supprimer ce qui est infecté.)

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé,
Il y a un écran noir qui apparaît rapidement, appuyer sur la touche [F8] ou [F5] jusqu’à l'affichage du menu des options avancées de Windows. Sélectionner "Mode sans échec"et appuyer sur [Entrée].

NB:Si problème aller voir ici: http://service1.symantec.com/SUPPORT/INTER...020325143456924


-Maintenant on va modifier la base de registres pour éliminer les lignes liées a l'infection !
Lancer HijackThis, (scan only ou scanner seulement) cocher les lignes suivantes si présentes:

O2 - BHO: (no name) - {B037C41D-6348-C5D5-58BB-E9806521D25E} - C:\DOCUME~1\GRGORY~1\APPLIC~1\AXISRO~1\GplFor.exe (file missing)
O2 - BHO: (no name) - {EBF431BB-FE96-C18D-0E82-F266A1F44A92} - C:\DOCUME~1\user\APPLIC~1\AXISRO~1\GplFor.exe (file missing)
O4 - HKLM\..\Run: [Part Free Grey Open] C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\Start tool.exe
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potc_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/playersd/installer2.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/fileshar...
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} - http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab27571.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game15.zylom.m6game.m6.fr/activex/zylomgamesplayer.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab

Fermer tous les programmes et navigateur, et Cliquer sur Fix Checked

-Vérifier d'avoir accès à tous les fichiers :

Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :
Activer l'option : Afficher les fichiers et dossiers cachés
Désactiver l'option : Masquer les extensions des fichiers dont le type est connu
Désactiver l'option : Masquer les fichiers protégés du système d'exploitation
Puis cliquer sur "Appliquer à tous les dossiers"

Clique sur démarrer/executer/
Copie/colle
Rentre le chemin indiqué en rouge C:\DOCUME~1\GRGORY~1\APPLIC~1\AXISRO~1\
Le dossier va s'ouvrir
Supprime le fichier indiqué en [b]gras[/b] si présent !
[b]GplFor.exe[/b](clique droit /supprimer)

Clique sur démarrer/executer/
Copie/colle
Rentre le chemin indiqué en rouge C:\DOCUME~1\user\APPLIC~1\AXISRO~1\
Le dossier va s'ouvrir
Supprime le fichier indiqué en [b]gras[/b] si présent !
[b]GplFor.exe[/b](clique droit /supprimer)

Clique sur démarrer/executer/
Copie/colle
Rentre le chemin indiqué en rouge C:\Documents and Settings\All Users\Application Data\Debugknobpartfree\
Le dossier va s'ouvrir
Supprime le fichier indiqué en [b]gras[/b] si présent !
[b]Start tool.exe[/b](clique droit /supprimer)

Vider la poubelle !


Relancer Ewido et cliquer sur scanner puis sur scan complet du système.

Si des fichiers infectés sont trouvés, garder l'option par défaut Supprimer
(avec la ligne "Créer des copies de sauvegarde cryptées dans la quarantaine" cochée), et cocher
"Effectuer cette action avec toutes les infections".

A la fin du scan, sauvegarder le rapport (Fichier/Enregistrer sous...) sur le Bureau.


-Exécuter EasyCleaner (Utiliser le raccourci sur le bureau):
(Utilitaire qui va supprimer les dossiers temporaires/inutiles et nettoyer la base de registre)
Utiliser les fonctions "Inutiles" et "Registre" seulement. Ne pas toucher à la fonction "doublons".
*Remarque:
-Dans "Inutiles", coche les cases suivantes=>"Normal Types" - "Temp Directories" - "Temp Internet Files" -
"Browser Cookies" puis clique sur "Find".
Lorsque le scan est terminé,clique sur "Delete all".

-Redémarrer en mode normal :

-Poster une réponse dans le même sujet
(Cliquer sur répondre entre "flash" et "nouveau " tout en bas de page!)
-Mettre un nouveau rapport HijackThis
-Poster le rapport Ewido
-Indiquer si le Pc présente encore des dysfonctionnements

Peux-tu faire s'il te plait un scan en ligne?=>
-Faire un scan en ligne ici et coller le rapport.
http://www.pandasoftware.com/activescan/fr...n_principal.htm si tu n'y arrives pas : http://www.monaco-pro.com/cool-life/tuto/panda/tuto.htm

A plus !

Bonjour bonjour voila g fai a pe pré tout les étape a par pour la supression des 2 premier fichier dans executer (GplFor.exe) les dossier été vide voila sinon plu de problem de pub pour l'instant et pour le pare feu g just celui avc windows sp2.

---------------------------------------------------------
ewido anti-malware - Rapport de scan
---------------------------------------------------------

+ Créé le: 18:43:11, 13/04/2006
+ Somme de contrôle: BDB1FE58

+ Résultats du scan:

:mozilla.7:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.8:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.9:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
:mozilla.10:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.11:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.14:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.15:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.16:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.24:C:\Documents and Settings\Grégory\Application Data\Mozilla\Firefox\Profiles\zy8kma4j.default\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@com[1].txt -> TrackingCookie.Com : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@weborama[2].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
C:\Documents and Settings\Grégory\Cookies\grégory@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
C:\Documents and Settings\user\Cookies\user@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder
C:\Documents and Settings\user\Cookies\user@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyer et sauvegarder
C:\Documents and Settings\user\Cookies\user@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\user\Cookies\user@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyer et sauvegarder


::Fin du rapport



C 2 fichier non pa pu étre suprime par easy cleaner

Nom Taille Type Modifié Attr. Version du fichier Version du produit
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5 0 04/04/2006 14:41:56 S
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat 32768 Fichier DAT 13/04/2006 16:48:26 A


Et l'Hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 16:39:15, on 14/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?a1c2d14046934c128cb5e32944d1baf7
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?a1c2d14046934c128cb5e32944d1baf7
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{110D8C88-25BE-4D49-ACDB-2F801547353D}: NameServer = 193.252.19.3,193.252.19.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{2BA06AED-1A37-4914-8226-D587E7784639}: NameServer = 205.188.146.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{110D8C88-25BE-4D49-ACDB-2F801547353D}: NameServer = 193.252.19.3,193.252.19.4
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: wbsys.dll MsgPlusLoader.dll
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: kavsvc - Kaspersky Labs - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Voila voila merci beaucoup et bon courage a vous!!!

Bonjour,

Je pense que régis56 ne verrait pas d'inconvénients pour ceci :

Passe un coup de cleanUp en regardant bien la vidéo, cela videra les cookies

CleanUp! :
http://pageperso.aol.fr/Balltrap34/CleanUp40.exe
- Aide en image (merci à Balltrap34) :
http://pageperso.aol.fr/balltrap34/democleanup.htm

A++ La critique est aisée et l'art est difficile Les Glorieux, II,5
Es pas bèu ço qu'es bèu, es bèu ço qu'agrado Frédéric Mistral

Voila voila c fai et sinon qu'est ce que vous me conseileré com parfeu???

Ok ok , merci a tous se ki mon aidé et bonne continuation a vous!!! ;)

Bonsoir tout le monde !

Merci Marie et boulepate d'avoir pris le relais !
J'ai été absent un bout de temps ;)

Je voudrait juste demander quel est ton fournisseur d'accès car tu en as deux sur ton rapport
AOL et FRANCE telecom lequel est le tiens ?

On pourrat fixer celui que tu n'as plus !

A plus !