Cid !?!?!?! Au secours

Fermé
liysa - 11 févr. 2009 à 01:07
 liysa - 17 févr. 2009 à 01:45
Bonjour,

Au secours ... Je me retrouve depuis quelques jours avec de nombreuses pubs CID qui envahissent mon ecran chaque jour ... Etant vraiment novice avec l'outil informatique je n'arrive pas a les supprimer .
Quelqu'un pour venir a mon aide ????


Rapport lopxpMH2 version 2.0 fait à 0:56:34.28 le Wed 02/11/2009
C:\Documents and Settings\LARGE ERIC\Local Settings\Temporary Internet Files\Content.IE5\5EOBBB7Q\lopxpMH2[1]\lopxpMH2

******************************************
## Répertoires Application Data

Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\All Users\Application Data

08/17/2004 06:19 AM <DIR> .
08/17/2004 06:19 AM <DIR> ..
04/07/2006 06:29 AM <DIR> Adobe
04/30/2006 09:45 AM <DIR> Brother
04/07/2006 06:31 AM <DIR> InstallShield
04/07/2006 06:24 AM <DIR> Intel
08/17/2004 06:19 AM <DIR> Microsoft
04/30/2006 06:43 AM <DIR> Motive
04/30/2006 06:30 AM <DIR> MotiveSysIDs
08/17/2004 06:36 AM <DIR> SBSI
05/04/2006 06:16 AM <DIR> WinAntiVirus Pro 2006
04/30/2006 07:50 AM <DIR> Windows Genuine Advantage
08/17/2004 06:19 AM 62 desktop.ini
04/07/2006 06:27 AM 4 QSLLPSVCShare
2 File(s) 66 bytes
12 Dir(s) 40,690,929,664 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\All Users.WINDOWS\Application Data

05/28/2006 03:14 PM <DIR> .
05/28/2006 03:14 PM <DIR> ..
06/09/2006 12:23 PM <DIR> Adobe
05/06/2008 06:22 AM <DIR> AntiVir PersonalEdition Classic
05/21/2007 11:01 PM <DIR> Apple Computer
05/28/2006 07:21 AM <DIR> Brother
12/28/2006 09:18 PM <DIR> eXPert PDF
12/28/2006 09:19 PM <DIR> eXPert PDF 4
12/28/2006 09:18 PM <DIR> eXPert PDF Jobs
09/15/2006 11:23 PM <DIR> Google
05/28/2006 06:50 AM <DIR> Intel
10/28/2008 07:42 PM <DIR> live 64 math does
10/28/2008 07:50 PM <DIR> Messenger Plus!
05/28/2006 03:14 PM <DIR> Microsoft
08/04/2006 09:38 AM <DIR> MSN Search Toolbar
01/25/2007 02:04 AM <DIR> program extra intra type
03/26/2008 10:26 AM <DIR> Skype
07/30/2007 10:41 AM <DIR> Sony Corporation
01/30/2007 05:39 AM <DIR> Windows Genuine Advantage
01/30/2007 07:38 AM <DIR> Windows Live Toolbar
08/07/2007 06:12 AM <DIR> WindowsLiveInstaller
08/07/2007 06:12 AM <DIR> WLInstaller
06/09/2006 12:28 PM <DIR> Yahoo! Companion
05/28/2006 03:14 PM 62 desktop.ini
03/26/2008 10:33 AM 32 ezsid.dat
07/25/2007 12:21 AM 51 Installer.log
07/31/2006 11:00 AM 0 ISx116.tmp
07/31/2006 11:03 AM 0 ISx117.tmp
07/31/2006 11:06 AM 0 ISx118.tmp
02/03/2007 12:21 AM 0 ISx1CE.tmp
03/12/2007 07:40 AM 0 ISx21C.tmp
03/12/2007 07:42 AM 0 ISx21D.tmp
03/12/2007 07:42 AM 0 ISx21E.tmp
03/12/2007 07:43 AM 0 ISx21F.tmp
03/12/2007 07:45 AM 0 ISx220.tmp
04/14/2007 05:08 AM 0 ISx272.tmp
04/14/2007 05:09 AM 0 ISx273.tmp
04/14/2007 05:11 AM 0 ISx274.tmp
07/21/2006 12:22 PM 0 ISx35.tmp
11/20/2007 08:02 AM 0 ISx500.tmp
06/30/2006 09:31 AM 0 ISxC6.tmp
05/21/2007 11:14 PM 1,755 QTSBandwidthCache
19 File(s) 1,900 bytes
23 Dir(s) 40,690,929,664 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\Default User\Application Data

08/17/2004 06:19 AM <DIR> .
08/17/2004 06:19 AM <DIR> ..
04/30/2006 06:20 AM <DIR> Identities
04/30/2006 06:20 AM <DIR> Intel
08/17/2004 06:19 AM <DIR> Microsoft
04/30/2006 06:20 AM <DIR> Sun
08/17/2004 06:19 AM 62 desktop.ini
1 File(s) 62 bytes
6 Dir(s) 40,690,925,568 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\Default User\Local Settings\Application Data

08/17/2004 06:19 AM <DIR> .
08/17/2004 06:19 AM <DIR> ..
04/30/2006 06:20 AM <DIR> {7148F0A6-6813-11D6-A77B-00B0D0142030}
04/30/2006 06:20 AM <DIR> ApplicationHistory
04/30/2006 06:20 AM <DIR> BVRP Software
08/17/2004 06:26 AM <DIR> Microsoft
04/30/2006 06:20 AM 128 fusioncache.dat
04/30/2006 06:20 AM 2,698,302 IconCache.db
2 File(s) 2,698,430 bytes
6 Dir(s) 40,690,925,568 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\Default User.WINDOWS\Application Data

05/28/2006 03:14 PM <DIR> .
05/28/2006 03:14 PM <DIR> ..
05/28/2006 03:14 PM <DIR> Microsoft
05/28/2006 03:14 PM 62 desktop.ini
1 File(s) 62 bytes
3 Dir(s) 40,690,925,568 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data

05/28/2006 03:14 PM <DIR> .
05/28/2006 03:14 PM <DIR> ..
05/28/2006 06:29 AM <DIR> Microsoft
0 File(s) 0 bytes
3 Dir(s) 40,690,925,568 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LARGE ERIC\Application Data

05/28/2006 06:37 AM <DIR> .
05/28/2006 06:37 AM <DIR> ..
06/09/2006 12:09 PM <DIR> Adobe
06/09/2006 12:26 PM <DIR> AdobeAUM
06/09/2006 12:26 PM <DIR> AdobeUM
09/22/2007 04:18 AM <DIR> AlertInfo
05/21/2007 11:04 PM <DIR> Apple Computer
02/05/2009 08:02 PM <DIR> Blender Foundation
05/28/2006 08:18 AM <DIR> Brother
05/31/2006 07:39 AM <DIR> dvdcss
12/28/2006 09:19 PM <DIR> eXPert PDF Editor
05/28/2006 11:51 PM <DIR> Google
10/28/2008 07:41 PM <DIR> gridbasedog
11/03/2007 01:10 AM <DIR> gtk-2.0
06/04/2006 08:57 PM <DIR> Help
05/28/2006 06:37 AM <DIR> Identities
05/28/2006 06:51 AM <DIR> Intel
06/09/2006 01:17 PM <DIR> Leadertech
05/28/2006 07:39 AM <DIR> Macromedia
05/02/2008 01:29 PM <DIR> MessengerSkinner
05/28/2006 06:37 AM <DIR> Microsoft
08/04/2006 09:40 AM <DIR> MSN Search Toolbar
05/28/2006 11:17 AM <DIR> MSNInstaller
05/22/2007 12:32 AM <DIR> MusicIP
04/15/2007 09:30 AM <DIR> OpenOffice.org2
03/26/2008 10:28 AM <DIR> Skype
03/26/2008 10:33 AM <DIR> skypePM
07/30/2007 10:40 AM <DIR> Sony Corporation
05/28/2006 11:51 PM <DIR> Sun
07/05/2008 07:18 PM <DIR> U3
05/31/2006 07:39 AM <DIR> vlc
10/29/2007 06:23 AM <DIR> Windows Desktop Search
11/04/2008 08:17 AM <DIR> Windows Live Writer
11/10/2008 10:14 PM <DIR> Yahoo!
06/09/2006 12:09 PM 700 AdobeDLM.log
05/28/2006 06:37 AM 62 desktop.ini
06/09/2006 12:09 PM 0 dm.ini
3 File(s) 762 bytes
34 Dir(s) 40,690,925,568 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LARGE ERIC\Local Settings\Application Data

05/28/2006 06:37 AM <DIR> .
05/28/2006 06:37 AM <DIR> ..
06/09/2006 12:27 PM <DIR> Adobe
08/22/2006 10:23 AM <DIR> Ahead
05/21/2007 11:04 PM <DIR> Apple Computer
05/28/2006 11:51 PM <DIR> Google
06/04/2006 08:57 PM <DIR> Help
05/28/2006 12:56 PM <DIR> Identities
05/29/2006 10:35 AM <DIR> Logitech-LS
05/28/2006 06:37 AM <DIR> Microsoft
08/24/2008 06:58 PM <DIR> Neuf
08/08/2007 10:11 PM <DIR> PCHealth
11/04/2008 08:16 AM <DIR> Windows Live Writer
08/25/2006 01:12 AM <DIR> WMTools Downloaded Files
06/30/2006 09:32 AM 217,088 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
05/28/2006 06:37 AM 22,936 GDIPFONTCACHEV1.DAT
01/25/2009 05:55 PM 2,913 guayi.dat
01/25/2009 05:55 PM 244,224 guayi.exe
01/25/2009 05:55 PM 335,064 guayi_nav.dat
01/25/2009 05:55 PM 1,895 guayi_navps.dat
05/28/2006 06:44 AM 4,839,812 IconCache.db
11/15/2008 06:56 PM 330,240 mgceoia.exe
01/26/2009 08:15 AM 2,913 qmcwa.dat
01/26/2009 08:14 AM 258,048 qmcwa.exe
01/26/2009 08:15 AM 328,966 qmcwa_nav.dat
01/26/2009 08:15 AM 320 qmcwa_navps.dat
01/29/2009 07:21 AM 2,915 sceceqm.dat
01/29/2009 07:20 AM 270,336 sceceqm.exe
01/29/2009 07:21 AM 335,064 sceceqm_nav.dat
01/29/2009 07:21 AM 631 sceceqm_navps.dat
01/23/2009 09:39 PM 2,915 uaowmuo.dat
01/23/2009 09:38 PM 251,392 uaowmuo.exe
01/23/2009 09:39 PM 335,064 uaowmuo_nav.dat
01/23/2009 09:39 PM 1,023 uaowmuo_navps.dat
01/21/2009 11:05 AM 2,905 weicgso.dat
01/21/2009 11:05 AM 225,280 weicgso.exe
01/21/2009 11:05 AM 335,064 weicgso_nav.dat
01/21/2009 11:05 AM 452 weicgso_navps.dat
24 File(s) 8,347,460 bytes
14 Dir(s) 40,690,921,472 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\large_eric\Application Data

04/30/2006 06:21 AM <DIR> .
04/30/2006 06:21 AM <DIR> ..
04/30/2006 11:22 AM <DIR> Adobe
04/30/2006 12:42 PM <DIR> CyberLink
04/30/2006 07:19 AM <DIR> Google
04/30/2006 06:21 AM <DIR> Identities
04/30/2006 06:21 AM <DIR> Intel
04/30/2006 06:30 AM <DIR> Macromedia
04/30/2006 06:21 AM <DIR> Microsoft
04/30/2006 08:56 AM <DIR> Netscape
05/24/2006 11:52 AM <DIR> Real
04/30/2006 06:21 AM <DIR> Sun
05/04/2006 06:16 AM <DIR> WinAntiVirus Pro 2006
04/30/2006 06:21 AM 62 desktop.ini
1 File(s) 62 bytes
13 Dir(s) 40,690,921,472 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\large_eric\Local Settings\Application Data

04/30/2006 06:21 AM <DIR> .
04/30/2006 06:21 AM <DIR> ..
04/30/2006 06:21 AM <DIR> {7148F0A6-6813-11D6-A77B-00B0D0142030}
04/30/2006 11:22 AM <DIR> Adobe
04/30/2006 06:21 AM <DIR> ApplicationHistory
04/30/2006 06:21 AM <DIR> BVRP Software
04/30/2006 08:41 AM <DIR> Google
04/30/2006 06:46 AM <DIR> Identities
05/07/2006 10:26 AM <DIR> Logitech-LS
04/30/2006 06:21 AM <DIR> Microsoft
04/30/2006 12:42 PM <DIR> PowerDVD
04/30/2006 06:21 AM 133 fusioncache.dat
04/30/2006 07:05 AM 25,488 GDIPFONTCACHEV1.DAT
04/30/2006 06:21 AM 4,829,174 IconCache.db
3 File(s) 4,854,795 bytes
11 Dir(s) 40,690,921,472 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LISIANA MANDER\Application Data

05/28/2006 08:37 AM <DIR> .
05/28/2006 08:37 AM <DIR> ..
08/17/2006 12:48 AM <DIR> Adobe
10/01/2006 06:18 AM <DIR> Google
05/28/2006 08:38 AM <DIR> Identities
05/28/2006 08:38 AM <DIR> Intel
06/28/2006 03:19 PM <DIR> Macromedia
05/28/2006 08:37 AM <DIR> Microsoft
08/17/2006 12:46 AM <DIR> MSN Search Toolbar
08/17/2006 12:50 AM <DIR> Sun
01/26/2008 12:05 PM <DIR> Windows Desktop Search
05/28/2006 08:37 AM 62 desktop.ini
1 File(s) 62 bytes
11 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LISIANA MANDER\Local Settings\Application Data

05/28/2006 08:37 AM <DIR> .
05/28/2006 08:37 AM <DIR> ..
06/28/2006 03:19 PM <DIR> Google
01/26/2008 12:06 PM <DIR> Identities
05/28/2006 08:37 AM <DIR> Microsoft
01/26/2008 12:06 PM 22,352 GDIPFONTCACHEV1.DAT
05/28/2006 08:40 AM 3,233,934 IconCache.db
2 File(s) 3,256,286 bytes
5 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LocalService\Application Data

08/17/2004 06:31 AM <DIR> .
08/17/2004 06:31 AM <DIR> ..
08/17/2004 06:31 AM <DIR> Microsoft
0 File(s) 0 bytes
3 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LocalService\Local Settings\Application Data

08/17/2004 06:31 AM <DIR> .
08/17/2004 06:31 AM <DIR> ..
08/17/2004 06:31 AM <DIR> Microsoft
0 File(s) 0 bytes
3 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data

05/28/2006 06:35 AM <DIR> .
05/28/2006 06:35 AM <DIR> ..
10/29/2007 08:34 AM <DIR> Adobe
05/28/2006 06:35 AM <DIR> Microsoft
0 File(s) 0 bytes
4 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data

05/28/2006 06:35 AM <DIR> .
05/28/2006 06:35 AM <DIR> ..
10/29/2007 08:34 AM <DIR> Adobe
05/28/2006 06:35 AM <DIR> Microsoft
0 File(s) 0 bytes
4 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\NetworkService\Application Data

08/17/2004 06:31 AM <DIR> .
08/17/2004 06:31 AM <DIR> ..
05/20/2006 01:11 PM <DIR> Intel
08/17/2004 06:31 AM <DIR> Microsoft
0 File(s) 0 bytes
4 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\NetworkService\Local Settings\Application Data

08/17/2004 06:31 AM <DIR> .
08/17/2004 06:31 AM <DIR> ..
08/17/2004 06:31 AM <DIR> Microsoft
0 File(s) 0 bytes
3 Dir(s) 40,690,917,376 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data

05/28/2006 06:34 AM <DIR> .
05/28/2006 06:34 AM <DIR> ..
05/28/2006 07:42 AM <DIR> Intel
05/28/2006 06:34 AM <DIR> Microsoft
0 File(s) 0 bytes
4 Dir(s) 40,690,913,280 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data

05/28/2006 06:34 AM <DIR> .
05/28/2006 06:34 AM <DIR> ..
05/28/2006 06:34 AM <DIR> Microsoft
01/14/2009 03:01 AM <DIR> PCHealth
0 File(s) 0 bytes
4 Dir(s) 40,690,913,280 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\WINDOWS\system32\config\systemprofile\Application Data

08/17/2004 06:30 AM <DIR> .
08/17/2004 06:30 AM <DIR> ..
04/30/2006 06:20 AM <DIR> Identities
04/07/2006 06:24 AM <DIR> Intel
08/17/2004 06:30 AM <DIR> Microsoft
04/30/2006 06:20 AM <DIR> Sun
05/28/2006 06:33 AM 62 desktop.ini
1 File(s) 62 bytes
6 Dir(s) 40,690,913,280 bytes free
Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

08/17/2004 06:30 AM <DIR> .
08/17/2004 06:30 AM <DIR> ..
04/30/2006 06:20 AM <DIR> {7148F0A6-6813-11D6-A77B-00B0D0142030}
04/30/2006 06:20 AM <DIR> ApplicationHistory
04/30/2006 06:20 AM <DIR> BVRP Software
08/17/2004 06:30 AM <DIR> Microsoft
10/09/2007 12:07 AM <DIR> WindowsLiveInstaller
0 File(s) 0 bytes
7 Dir(s) 40,690,913,280 bytes free

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks


C:\WINDOWS\Tasks\ACC21AF492318384.job
 àýåq_’ËAº¤¢=G±Y&F Þ <
s  "€!Ù  . 6 c : \ d o c u m e ~ 1 \ l a r g e e ~ 1 \ a p p l i c ~ 1 \ g r i d b a ~ 1 \ C o p y C a m p 0 1 . e x e L A R G E E R I C   0 Ì


C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
 ÉDnYC¤½ƒâ¯× F ê <
s  €!Ù     : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e  - T a s k  S Y S T E M   0 ×     

C:\WINDOWS\Tasks\Vérifier
Vérifier inexploitable

******************************************
## Répertoires de C:\Program Files

Volume in drive C has no label.
Volume Serial Number is 5027-90EC

Directory of C:\Program Files

02/05/2009 08:08 PM <DIR> .
02/05/2009 08:08 PM <DIR> ..
09/15/2008 10:47 PM <DIR> A L'AISE BREIZH
01/05/2009 12:17 PM <DIR> Adobe
08/22/2006 10:08 AM <DIR> Ahead
09/22/2007 04:17 AM <DIR> AlertInfo
01/29/2009 07:31 AM <DIR> Antipub
08/23/2008 07:17 AM <DIR> AntiVir PersonalEdition Classic
06/21/2007 11:40 PM <DIR> Apple Software Update
07/25/2007 10:43 AM <DIR> Audacity
04/30/2006 06:56 AM <DIR> BB Security
02/05/2009 08:02 PM <DIR> Blender Foundation
05/28/2006 06:49 AM <DIR> Broadcom
05/28/2006 07:58 AM <DIR> Brother
06/11/2006 09:51 AM <DIR> bsb
03/26/2008 10:00 AM <DIR> BUFFALO
11/10/2008 10:20 PM <DIR> CA Yahoo! Anti-Spy
05/22/2007 02:14 AM <DIR> CCleaner
10/28/2008 07:41 PM <DIR> Circle Developement
01/14/2009 07:34 AM <DIR> Common Files
08/17/2004 06:25 AM <DIR> ComPlus Applications
04/07/2006 06:25 AM <DIR> CONEXANT
04/07/2006 06:28 AM <DIR> CyberLink
04/07/2006 06:29 AM <DIR> Dell
05/28/2006 06:47 AM <DIR> DIFX
04/07/2006 06:28 AM <DIR> Digital Line Detect
02/06/2009 05:09 PM <DIR> eMule
05/30/2006 11:53 AM <DIR> fohlen
01/18/2009 10:24 PM <DIR> Fun Web Products
01/18/2009 06:56 PM <DIR> FunWebProducts
01/19/2009 07:05 PM <DIR> Google
02/02/2009 01:28 PM <DIR> gridbasedog
04/07/2006 06:24 AM <DIR> Intel
04/07/2006 06:24 AM <DIR> Intel, Inc
01/16/2009 10:11 PM <DIR> Internet Explorer
06/21/2007 11:49 PM <DIR> iPod
06/21/2007 11:50 PM <DIR> iTunes
04/11/2008 02:43 AM <DIR> Java
01/12/2009 11:26 AM <DIR> JCA2000
12/26/2007 10:07 AM <DIR> JRA
11/14/2008 11:35 PM <DIR> listac
09/10/2007 02:06 AM <DIR> Logitech
08/24/2008 02:05 AM <DIR> Messenger
11/09/2008 06:19 PM <DIR> Messenger Plus! Live
05/02/2008 01:29 PM <DIR> MessengerSkinner
01/23/2009 09:24 PM <DIR> Microsoft
05/10/2007 08:35 PM <DIR> Microsoft CAPICOM 2.1.0.2
08/17/2004 06:27 AM <DIR> microsoft frontpage
11/27/2006 08:34 AM <DIR> Microsoft Office
10/29/2007 06:06 AM <DIR> Microsoft SQL Server Compact Edition
05/22/2006 04:28 AM <DIR> Modem Helper
05/28/2006 06:26 AM <DIR> Movie Maker
05/28/2006 07:01 AM <DIR> MSN
08/17/2004 06:24 AM <DIR> MSN Gaming Zone
02/20/2008 07:18 AM <DIR> MSN Messenger
01/30/2007 07:37 AM <DIR> MSN Toolbar Suite
11/17/2006 07:02 PM <DIR> MSXML 4.0
04/07/2006 06:33 AM <DIR> MyWaySA
06/13/2006 07:58 AM <DIR> MyWebSearch
05/28/2006 06:27 AM <DIR> NetMeeting
04/30/2006 08:53 AM <DIR> Netscape
04/07/2006 06:28 AM <DIR> NetWaiting
08/24/2008 06:56 PM <DIR> Neuf
05/28/2006 06:28 AM <DIR> Online Services
04/15/2007 09:26 AM <DIR> OpenOffice.org 2.2
06/13/2007 07:04 PM <DIR> Outlook Express
11/23/2006 02:26 AM <DIR> PhotoFiltre
05/21/2007 11:03 PM <DIR> QuickTime
08/03/2007 10:49 AM <DIR> RawFlow
04/07/2006 06:25 AM <DIR> Sigmatel
05/20/2008 01:31 PM <DIR> Skype
04/07/2006 06:31 AM <DIR> Sonic
07/30/2007 10:42 AM <DIR> Sony
05/28/2006 06:02 AM <DIR> SpySpotter3
02/05/2009 08:08 PM <DIR> Sweet Home 3D
04/07/2006 06:28 AM <DIR> Synaptics
04/07/2006 06:31 AM <DIR> Trend Micro
05/31/2006 07:38 AM <DIR> VideoLAN
08/23/2008 06:46 PM <DIR> Virtualis
12/28/2006 09:18 PM <DIR> Visagesoft
06/11/2006 10:01 AM <DIR> website
10/29/2007 06:08 AM <DIR> Windows Desktop Search
01/23/2009 09:32 PM <DIR> Windows Live
11/09/2007 03:57 AM <DIR> Windows Live Favorites
01/23/2009 09:22 PM <DIR> Windows Live SkyDrive
10/31/2007 07:02 PM <DIR> Windows Live Toolbar
05/22/2007 12:31 AM <DIR> Windows Media Player
05/28/2006 06:24 AM <DIR> Windows NT
07/30/2007 01:27 PM <DIR> WinZip
08/17/2004 06:27 AM <DIR> xerox
11/10/2008 10:14 PM <DIR> Yahoo!
04/30/2006 06:52 AM <DIR> Yahoo_BB
0 File(s) 0 bytes
92 Dir(s) 40,690,909,184 bytes free

******************************************
## Popups autorisées

* Internet Explorer

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
www.rtl.fr REG_BINARY
msn.eurosport.fr REG_BINARY
chat5.x-echo.com REG_BINARY
*.vitalic.citizen-records.com REG_BINARY
www.francegalop.com REG_BINARY
www.mood.fr REG_BINARY
cache.yacast.fr/ REG_BINARY
webmessenger.msn.com/ REG_BINARY
entertainment.msn.com/radio REG_BINARY
my.msn.com/video REG_BINARY
betavideo.my.msn.com REG_BINARY
my.msn.com REG_BINARY
launchcast.launch.yahoo.com/radio REG_BINARY
stream1.adsertion.com/radio REG_BINARY
www.wlsam.com REG_BINARY
www.streamaudio.com REG_BINARY
windowsmedia.com REG_BINARY
www.kentucky.com/mld/kentucky REG_BINARY
player.nrj.fr REG_BINARY
tchat.orange.fr REG_BINARY
195.200.119.11 REG_BINARY
www.windowslive.fr REG_BINARY

* Mozilla Firefox (1 autorisé 2 interdit)

******************************************
## Registre

* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ https://actus.sfr.fr

* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
MATH DOES FIRST MODE REG_SZ C:\Documents and Settings\All Users.WINDOWS\Application Data\live 64 math does\FLAW SUPPORT.exe

* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
yyqgusm REG_SZ "c:\documents and settings\large eric\local settings\application data\yyqgusm.exe" yyqgusm
Plus Hold REG_SZ C:\DOCUME~1\LARGEE~1\APPLIC~1\GRIDBA~1\sendbuild.exe
weicgso REG_SZ "c:\documents and settings\large eric\local settings\application data\weicgso.exe" weicgso
uaowmuo REG_SZ "c:\documents and settings\large eric\local settings\application data\uaowmuo.exe" uaowmuo
guayi REG_SZ "c:\documents and settings\large eric\local settings\application data\guayi.exe" guayi
qmcwa REG_SZ "c:\documents and settings\large eric\local settings\application data\qmcwa.exe" qmcwa
sceceqm REG_SZ "c:\documents and settings\large eric\local settings\application data\sceceqm.exe" sceceqm

******************************************
## Zones de sécurité

* HKCU Domains (4)

* P3P History (5)

******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"


*************** Fin du rapport ****************

29 réponses

Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
11 févr. 2009 à 21:45
0
liysa Messages postés 29 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 18 mai 2009
11 févr. 2009 à 21:51
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:50:38 PM, on 2/11/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\BUFFALO\BSKP-U202\BSKP-U202 Skype Phone.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Trend Micro\Virus Buster 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Neuf\Media Center\MediaCenter.exe
C:\Program Files\eMule\emule.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\VIRUSB~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\VIRUSB~1\tmproxy.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Neuf\Media Center\httpd\httpd.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Neuf\Media Center\httpd\httpd.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Virus Buster 12\pccguide.exe"
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [vspdfprsrv.exe] C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe --background
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [BSKP-U202] "C:\Program Files\BUFFALO\BSKP-U202\BSKP-U202 Skype Phone.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Virus Buster 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [Neuf Media Center] "C:\Program Files\Neuf\Media Center\MediaCenter.exe"
O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Stop Pub - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\JCA2000\StopPub\StopPub.exe
O9 - Extra 'Tools' menuitem: Stop Pub - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\JCA2000\StopPub\StopPub.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD7/JSCDL/jdk/6u12-b04/jinstall-6u12-windows-i586-jc.cab?e=1234377169315&h=20d55af4f3fa498023a3771557eb86b6/&filename=jinstall-6u12-windows-i586-jc.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Unknown owner - C:\PROGRA~1\TRENDM~1\VIRUSB~1\PcCtlCom.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\VIRUSB~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\VIRUSB~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\VIRUSB~1\tmproxy.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
11 févr. 2009 à 23:56
Bien.

---> Double-clique sur l'icône d'Antivir (Parapluie) dans la barre des tâches.

---> Dans Antivir, choisis Outils puis Configuration.

---> Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.

---> Fais un scan complet et poste le rapport.
0
liysa Messages postés 29 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 18 mai 2009
12 févr. 2009 à 08:12
Je n'arrive pas a ouvrir antivir ... Un message apparait :

The application module

C:\Program Files\Antivir PersonalEdition Classir\Antivir0.vdf

cannot be found or has been modified or destroyed.
The control center cannot be started.
Please check your installation !
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
12 févr. 2009 à 16:23
Désinstalle, redémarre ton PC puis réinstalle Antivir.
0
liysa Messages postés 29 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 18 mai 2009
12 févr. 2009 à 22:25
AHHHHHHHHHHH ca fait 1h30 que je me bat avec Antivir en vain ...
J'ai bien reinstalle Antivir mais ils me disent que quelque chose est incompatible avec la nouvelle version et qu'ils vont donc redemarrer le pc ... Sauf qu'il n'y a aucun redemarrage automatique et quand je le fais moi meme evidemment rien ne se passe !!!!
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
13 févr. 2009 à 01:08
---> Désinstalle Antivir.

---> Passe un coup de cet utilitaire :
http://www.avira.com/en/documents/utils/av7_tools/en/avuninstXPeng.zip

---> Redémarre et essaie d'installer Antivir.
0
liysa Messages postés 29 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 18 mai 2009
13 févr. 2009 à 19:14
Alors n'etant pas tres douee je me suis dit je ne faisais pas la bonne manipulation ... J'ai donc attendu l'arrivee d'un ami (pas tres doue non plus mais un peu plus que moi quand meme !!!) mais il n'a pu rien faire de plus que moi.

J'ai pourtant suivis tout ce que tu m'as dit mais le resultat est le meme.

Un message me disant que mon pc va etre redemarre ... mais rien
Et quand je le redemarre moi meme ... RIEN
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
13 févr. 2009 à 23:09
---> Désinstalle Antivir.

---> Puis fais ceci :

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.
0
liysa Messages postés 29 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 18 mai 2009
13 févr. 2009 à 23:27
Logfile of random's system information tool 1.05 (written by random/random)
Run by LARGE ERIC at 2009-02-13 23:23:54
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 39 GB (43%) free of 91 GB
Total RAM: 502 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:24:17 PM, on 2/13/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\lvcomsx.exe
C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\BUFFALO\BSKP-U202\BSKP-U202 Skype Phone.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\VIRUSB~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\VIRUSB~1\tmproxy.exe
C:\Program Files\Trend Micro\Virus Buster 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Neuf\Media Center\MediaCenter.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Neuf\Media Center\httpd\httpd.exe
C:\Program Files\Neuf\Media Center\httpd\httpd.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\LARGE ERIC\Local Settings\Temporary Internet Files\Content.IE5\95B838AD\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\LARGE ERIC.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Virus Buster 12\pccguide.exe"
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [vspdfprsrv.exe] C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe --background
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [BSKP-U202] "C:\Program Files\BUFFALO\BSKP-U202\BSKP-U202 Skype Phone.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Virus Buster 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [Neuf Media Center] "C:\Program Files\Neuf\Media Center\MediaCenter.exe"
O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKCU\..\RunOnce: [AVSetup] C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\AVSETUP_49953598\basic\setup.exe /CLEANUPSRCFILES /NOTEMPCLEANUP
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Stop Pub - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\JCA2000\StopPub\StopPub.exe
O9 - Extra 'Tools' menuitem: Stop Pub - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\JCA2000\StopPub\StopPub.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD7/JSCDL/jdk/6u12-b04/jinstall-6u12-windows-i586-jc.cab?e=1234377169315&h=20d55af4f3fa498023a3771557eb86b6/&filename=jinstall-6u12-windows-i586-jc.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Unknown owner - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Unknown owner - C:\PROGRA~1\TRENDM~1\VIRUSB~1\PcCtlCom.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\VIRUSB~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\VIRUSB~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\VIRUSB~1\tmproxy.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
13 févr. 2009 à 23:31
---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau.

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :





:processes
explorer.exe

:services
AntiVirScheduler
AntiVirService

:files
C:\Program Files\AntiVir PersonalEdition Classic

:commands
[purity]
[emptytemp]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
0
liysa Messages postés 29 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 18 mai 2009
13 févr. 2009 à 23:33
mais je ne le trouve plus Antivir dans mon bureau ?!??!?!?!
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
13 févr. 2009 à 23:40
Fais quand même la procédure avec OTMoveIt.
0
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service AntiVirScheduler stopped successfully.
Service AntiVirScheduler deleted successfully.
Service AntiVirService stopped successfully.
Service AntiVirService deleted successfully.
========== FILES ==========
File/Folder C:\Program Files\AntiVir PersonalEdition Classic not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\Bq+oLbwPpGlypTukACC5QJMSH9I= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\DJ2FdVKXzi2FBECUv5C6ytoooi3NE= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\iu2hhI8ECKooGCUjOyC+PMHu7m8= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\lQYJ7mL2FGu3ofGBZdHFxwwI0qvo= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\MtWErtDoHN5+OfdZF9YBBXjj4xg= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\NeHG5YKPyWmsE7b4eJnZL6pqUOQ= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\S929xAkH8Mg3BAMVmasmZfq3Lok= scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\ima5.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\ima6.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\~DF2D70.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\~DF3538.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_510.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02132009_234244

Files moved on Reboot...
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\Bq+oLbwPpGlypTukACC5QJMSH9I= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\DJ2FdVKXzi2FBECUv5C6ytoooi3NE= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\iu2hhI8ECKooGCUjOyC+PMHu7m8= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\lQYJ7mL2FGu3ofGBZdHFxwwI0qvo= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\MtWErtDoHN5+OfdZF9YBBXjj4xg= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\NeHG5YKPyWmsE7b4eJnZL6pqUOQ= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\MessengerCache\S929xAkH8Mg3BAMVmasmZfq3Lok= moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\ima5.tmp moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\ima6.tmp moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\~DF2D70.tmp moved successfully.
C:\DOCUME~1\LARGEE~1\LOCALS~1\Temp\~DF3538.tmp moved successfully.
File C:\WINDOWS\temp\Perflib_Perfdata_510.dat not found!
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
16 févr. 2009 à 12:43
Tu peux réinstaller Antivir ?
0
Toujours le meme message suite au telechargement :

"Un produit de Avira GmbH est deja unstalle sur le systeme. Ce produit n'est pas compatible avel le produit que vous souhaitez installer. Vous pouvez desinstaller le produit installe automatiquement et le remplacer par le nouveau bureau. Cette procedure peut prendre quelques minutes et necessite le redemarrage de votre ordinateur. Souhaitez vous le faire maintenant ? "

Mais toujours rien ... aucun redemarrage automatiquement et lorsque je le fais moi meme toujours rien

Peut etre qu'il faut attendre beaucoup plus longtemps ?!?!?!?
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 291
16 févr. 2009 à 23:34
Je ne sais pas, il faudrait demander sur le site d'Avira.
0
OK, je vais aller voir sur le site Avira
0