Infecté par I-worm/brontok.C

Résolu/Fermé
bertha - 15 nov. 2006 à 22:41
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 - 22 sept. 2007 à 20:19
Hello Green Day et merci bcp pour ton aide. J'ai téléchargé a partir d'un autre PC AVAST, ya que ça qui fonctionnait, et je l'ai executé au démarrage du portable via une clef USB. Et ben je crois que ça a fonctionné. Sauf si je me trompe l'antivirus n'a pas pu supprimé les fichiers infectés par win32 : BRONTOK I, mais les a mis en 40ene
, ce sont tous des fichiers local setting sauf qq fichiers .exe comme C:\windows\kesenjangansosial.exe. A chaque démarrage, il me le réclame . Ca sert à quoi ce fichier ? Est ce qu'il faut supprimer les fichiers qui sont en 40ene ? J'ai fait un scan avec hijack this, dont voici le résultat, ça dit quoi ? En tout cas merci pour ton aide précieuse je vais éviter le formatage je crois !

Logfile of HijackThis v1.99.1
Scan saved at 22:03:31, on 15/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\BERTHOU Claire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe"
O1 - Hosts: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
O1 - Hosts: "http://www.w3.org/TR/html4/loose.dtd">
O1 - Hosts: <html>
O1 - Hosts: <head>
O1 - Hosts: <script LANGUAGE="JavaScript">
O1 - Hosts: <!--
O1 - Hosts: if (window != top)
O1 - Hosts: top.location.href = location.href;
O1 - Hosts: // -->
O1 - Hosts: </script>
O1 - Hosts: <title>Site Unavailable</title>
O1 - Hosts: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
O1 - Hosts: <style type="text/css">
O1 - Hosts: body{text-align:center;}
O1 - Hosts: .geohead {font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px;width:750px;margin:10px 0 10px 0;height:35px;}
O1 - Hosts: .geohead #geologo {width:270px;display:block; float:left; }
O1 - Hosts: .geohead #rightside {width:480px;display:block; float:right;border-bottom:1px solid #999999; height:27px;}
O1 - Hosts: .geohead #rightside #welcome {width:50%;display:block; float:left; text-align:left;}
O1 - Hosts: .geohead #rightside #wlinks {width:50%;display:block; float:right; text-align:right;}
O1 - Hosts: .ftr { margin:0px; color:#404040; font:x-small Arial,sans-serif; text-align:center; width:750px;}
O1 - Hosts: .bodywrap{display:block;height:470px;}
O1 - Hosts: .bodycnt{width:510px; display:block; float:left; background-color:#EEE9F5; height:auto; text-align:left; font-family:Arial, Helvetica, sans-serif;font-size:13px; color:#000000; padding:20px 20px 35px 20px;}
O1 - Hosts: .title { font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:24px; color:#7C56A9}
O1 - Hosts: .adcnt{width:172px; display:block; float:right; text-align:left;cursor:pointer;cursor:hand;}
O1 - Hosts: .adcnt td {text-align:left;}
O1 - Hosts: .adsubt{font-size:10px; font-family:verdana; font-weight:bold; color:#b4b4b4; cursor:default;margin-top:5px;}
O1 - Hosts: .ybadge { font-family: Verdana, Arial, Helvetica, sans-serif; font-size:10px; color: #666666; margin-top:10px;}
O1 - Hosts: .ybadge img {margin-top:6px;}
O1 - Hosts: .adtable {font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px;border: 1px solid #d6dbe7; background-color:#eff7ff; padding:3px; margin-bottom:10px; width:172px;}
O1 - Hosts: .adttl{font-weight:bold;margin-bottom:3px;}
O1 - Hosts: .addescr{color:#6b6b6b; margin-bottom:3px;}
O1 - Hosts: .adlink a {color:#008200; text-decoration:none;}
O1 - Hosts: </style>
O1 - Hosts: </head>
O1 - Hosts: <body>
O1 - Hosts: <!-- following code added by server. PLEASE REMOVE -->
O1 - Hosts: <!-- preceding code added by server. PLEASE REMOVE -->
O1 - Hosts: <div id="maincnt">
O1 - Hosts: <div class="geohead"><div id="geologo"><a href="https://smallbusiness.yahoo.com/"><img height=33 alt="Yahoo! GeoCities" src="http://us.i1.yimg.com/us.yimg.com/i/us/nt/ma/ma_geo_1.gif" width=259 border=0></a></div>
O1 - Hosts: <div id="rightside"><div id="wlinks"><a href="https://smallbusiness.yahoo.com/">GeoCities Home</a> - <a href="https://fr.yahoo.com/?p=us">Yahoo!</a> - <a href="https://help.yahoo.com/kb/account">Help</a></div>
O1 - Hosts: </div></div>
O1 - Hosts: <div class="bodywrap">
O1 - Hosts: <div class="bodycnt">
O1 - Hosts: <div class="title">Sorry, this GeoCities site is currently unavailable.</div>
O1 - Hosts: <p>The GeoCities web site you were trying to view has temporarily exceeded its data transfer limit. Please try again later. </p>
O1 - Hosts: <p>Are you the site owner?
O1 - Hosts: Avoid service interruptions in the future by increasing your data transfer limit!
O1 - Hosts: <a href="https://help.yahoo.com/kb/account" target="_blank">Find out how.</a> </p>
O1 - Hosts: <p><a href="https://help.yahoo.com/kb/account" target="_blank">Learn more about data transfer.</a></p>
O1 - Hosts: </div>
O1 - Hosts: <div class="adcnt">
O1 - Hosts: <a target="_top" href="https://smallbusiness.yahoo.com/"><img src="http://us.i1.yimg.com/us.yimg.com/i/us/smbiz/b/geo_mast_small2.gif" alt="Yahoo! GeoCities" border="0" height="15" hspace="0" vspace="0" width="141"></a>
O1 - Hosts: <div class="adsubt">SPONSORED LINKS</div>
O1 - Hosts: <!--<table width="172" border="0" bgcolor="#FFFFFF" class="adtable"><tr><td align=left>-->
O1 - Hosts: <div class="adtable">
O1 - Hosts: <div class="adttl" title="Reliable plans include domain & 24x7 support."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=27166/*https://smallbusiness.yahoo.com/hosting" target="_blank">Yahoo! Web Hosting<br>
O1 - Hosts: $25 Setup Waived</a></div>
O1 - Hosts: <div class="addescr" title="Reliable plans include domain & 24x7 support.">Reliable plans include domain & 24x7 support.</div>
O1 - Hosts: <div class="adlink" title="Reliable plans include domain & 24x7 support."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=27166/*https://smallbusiness.yahoo.com/hosting" target="_blank">webhosting.yahoo.com</a></div>
O1 - Hosts: </div>
O1 - Hosts: <div class="adtable">
O1 - Hosts: <div class="adttl" title="Reliable plans include domain & 24x7 support."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=27176/*https://smallbusiness.yahoo.com/domains" target="_blank">Domain Names from Yahoo! only $9.95/yr</a></div>
O1 - Hosts: <div class="addescr" title="Includes starter web page, email & domain forwarding, 24x7 support.">Includes starter web page, email & domain forwarding, 24x7 support.</div>
O1 - Hosts: <div class="adlink" title="Includes starter web page, email & domain forwarding, 24x7 support."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=27176/*https://smallbusiness.yahoo.com/domains" target="_blank">domains.yahoo.com</a></div>
O1 - Hosts: </div>
O1 - Hosts: <div class="adtable">
O1 - Hosts: <div class="adttl" title="Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=27184/*https://smallbusiness.yahoo.com/mail" target="_blank">Yahoo! Business Email<br> Domain Included</a></div>
O1 - Hosts: <div class="addescr" title="Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.">Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.</div>
O1 - Hosts: <div class="adlink" title="Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=27184/*https://smallbusiness.yahoo.com/mail" target="_blank">smallbusiness.yahoo.com</a></div>
O1 - Hosts: </div>
O1 - Hosts: <div class="adtable">
O1 - Hosts: <div class="adttl" title="$50 setup fee waived. A reliable ecommerce plan, 24x7 support."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=/27190/*https://smallbusiness.yahoo.com/stores" target="_blank">Ecommerce from Yahoo!<br> 1 Month Free</a></div>
O1 - Hosts: <div class="addescr" title="$50 setup fee waived. A reliable ecommerce plan, 24x7 support.">$50 setup fee waived. A reliable ecommerce plan, 24x7 support.</div>
O1 - Hosts: <div class="adlink" title="$50 setup fee waived. A reliable ecommerce plan, 24x7 support."><a href="https://fr.yahoo.com/?p=us*http://us.rd.yahoo.com/evt=/27190/*https://smallbusiness.yahoo.com/stores" target="_blank">smallbusiness.yahoo.com</a></div>
O1 - Hosts: </div>
O1 - Hosts: <div class="ybadge">
O1 - Hosts: Get your own web site at <br><a target="_top" href="https://smallbusiness.yahoo.com/">Yahoo! GeoCities</a>
O1 - Hosts: <a href="https://smallbusiness.yahoo.com/hosting" target="_top"><img src="http://us.i1.yimg.com/us.yimg.com/i/us/wh/gr/badge_hostedby_purp_2.gif" alt="Hosted by Yahoo! Web Hosting" align="middle" border="0" height="31" width="88"></a>
O1 - Hosts: </div>
O1 - Hosts: </div>
O1 - Hosts: </div>
O1 - Hosts: <div class=ftr>
O1 - Hosts: <hr size=1 width=100%>
O1 - Hosts: Copyright ©
O1 - Hosts: 2005 Yahoo! Inc. All rights reserved<br>
O1 - Hosts: <a href="https://www.verizonmedia.com/policies/">Privacy Policy</a>
O1 - Hosts: - <a href="https://fr.yahoo.com/?p=us">Copyright Policy</a>
O1 - Hosts: - <a href="https://fr.yahoo.com/?p=us">Guidelines</a>
O1 - Hosts: - <a href="https://fr.yahoo.com/?p=us">Terms of Service</a>
O1 - Hosts: - <a href="https://help.yahoo.com/kb/account">Help</a>
O1 - Hosts: </div>
O1 - Hosts: </div>
O1 - Hosts: </body>
O1 - Hosts: </html>
O1 - Hosts: <!-- text below generated by server. PLEASE REMOVE --></object></layer></div></span></style></noscript></table></script></applet>
O1 - Hosts: <IMG SRC="http://geo.yahoo.com/serv?s=19190039&t=1163319699&f=us-w91" ALT=1 WIDTH=1 HEIGHT=1>
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\RakyatKelaparan.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Tok-Cirrhatus-5226] "C:\Documents and Settings\BERTHOU Claire\Local Settings\Application Data\smss.exe"
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?12cff11c25674581b0100b75f2b36f09
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?12cff11c25674581b0100b75f2b36f09
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by123w.bay123.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC41BF28-EA0B-4E11-80C5-6062DF9688A7}: NameServer = 213.154.95.126 213.154.64.13
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
A voir également:

23 réponses

green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
15 nov. 2006 à 23:35
Oups ! je viens juste de le voir :)

faut rester sur le même poste stp !

sinon, on va se perdre ;)

Ouvre le fichier "C:\WINDOWS\system32\drivers\etc\hosts" avec le bloc note, effaces tout son contenu et colles à la place le texte suivant (en gras) :


# Copyright (c) 1993-1999 Microsoft Corp.
#
# Ceci est un exemple de fichier HOSTS utilisé par Microsoft TCP/IP
# pour Windows.
#
# Ce fichier contient les correspondances des adresses IP aux noms d'hôtes.
# Chaque entrée doit être sur une ligne propre. L'adresse IP doit être placée
# dans la première colonne, suivie par le nom d'hôte correspondant. L'adresse
# IP et le nom d'hôte doivent être séparés par au moins un espace.
#
# De plus, des commentaires (tels que celui-ci) peuvent être insérés sur des
# lignes propres ou après le nom d'ordinateur. Ils sont indiqué par le
# symbole '#'.
#
# Par exemple :
#
# 102.54.94.97 rhino.acme.com # serveur source
# 38.25.63.10 x.acme.com # hôte client x

127.0.0.1 localhost



fais "fichier" > "enregistrer", fermes tout et redémarres ton pc
refais un "hijackthis" et postes le nv rapport avec le résultat pour ton pb initial

ensuite, esseye de télécharge avg, et lance le scan en mode sans echec

tiens nous au courant, bon courage,@+


**En vérité, le chemin importe peu, la volonté d'arriver suffit à tout ( A.Camus ) **
1
did71 Messages postés 2187 Date d'inscription vendredi 24 mars 2006 Statut Contributeur sécurité Dernière intervention 30 janvier 2010 36
16 nov. 2006 à 00:00
re green,

hoster va restaurer tout ça!

a+
1
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
16 nov. 2006 à 00:03
vu ;-)

@+
0
Bonsoir, J'ai fait ce que vous aviez dit tous les 2, voilà ce que ça donne
C'est mieux ?
J'ai toujours mon fichier kesenjangan au démarrage.
Bon je vais scanner avec AVG pour voir. En tout cas merci encore et salut du Sénégal où il fait une chaleur terrible !
Bertha

Logfile of HijackThis v1.99.1
Scan saved at 00:31:06, on 16/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\BERTHOU Claire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe"
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\RakyatKelaparan.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Tok-Cirrhatus-5226] "C:\Documents and Settings\BERTHOU Claire\Local Settings\Application Data\smss.exe"
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?12cff11c25674581b0100b75f2b36f09
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?12cff11c25674581b0100b75f2b36f09
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by123w.bay123.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: F-Secure BackWeb (BackWeb Client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
0
did71 Messages postés 2187 Date d'inscription vendredi 24 mars 2006 Statut Contributeur sécurité Dernière intervention 30 janvier 2010 36
16 nov. 2006 à 00:44
re,

oui c'est mieux!

il reste des infections!

green va les virer!

a+
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
16 nov. 2006 à 11:44
Salut à vous

rhoo Did ! t'aurais pu continuer quand même ;-P

Bretha :

C:\windows\kesenjangansosial.exe. A chaque démarrage, il me le réclame . Ca sert à quoi ce fichier ?

pour repondre à ta question, oui c'est une salté ! et il faut supprimer ce fichier en gras !

fais le 1/ et le 2/ de ce lien stp :

virus methode preliminaire de desinfection version fr

@+
0
Re
Hello Green D,
Voici l'analyse d'AVG, je vais faire le scan avec Bit Defender now
Merci

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 15:59:36 16/11/2006

+ Résultat de l'analyse:



C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@com[1].txt -> TrackingCookie.Com : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\BERTHOU Claire\Cookies\berthou claire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\DIAGNE Mody\Cookies\diagne mody@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP48\A0006805.exe -> Worm.Brontok.q : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP48\A0006806.exe -> Worm.Brontok.q : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP48\A0006807.scr -> Worm.Brontok.q : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP48\A0006808.exe -> Worm.Brontok.q : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP48\A0006809.scr -> Worm.Brontok.q : Nettoyé et sauvegardé (mise en quarantaine).


Fin du rapport
0
Hello green day,
voici pour finir le rapport de bitdefender !!!!!! OUPS j'avais encore tout ça la dans ou bien il a scanné ce que j'avais mis en 40ene ?

BitDefender Online Scanner



Scan report generated at: Thu, Nov 16, 2006 - 17:48:52





Scan path: C:\;D:\;E:\;







Statistics

Time
00:54:40

Files
515563

Folders
5176

Boot Sectors
4

Archives
8662

Packed Files
63672




Results

Identified Viruses
1

Infected Files
155

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
310




Engines Info

Virus Definitions
316345

Engine build
AVCORE v1.0 (build 2355) (i386) (Sep 25 2006 13:46:24)

Scan plugins
13

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\actualités.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\actualités.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\actualités.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\administratif.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\administratif.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\administratif.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\art et objet.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\art et objet.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\art et objet.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\ARTS PLASTIQUES.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\ARTS PLASTIQUES.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\ARTS PLASTIQUES.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\assoc humanitaire.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\assoc humanitaire.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\assoc humanitaire.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\billets d'avion.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\billets d'avion.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\billets d'avion.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\boulot claire.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\boulot claire.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\boulot claire.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Brengkolang.com.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Brengkolang.com.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Brengkolang.com.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cartes de voeux.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cartes de voeux.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cartes de voeux.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\CEEXE~1.BAC=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\CEEXE~1.BAC=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\CEEXE~1.BAC=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cola.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cola.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cola.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\csrss.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\csrss.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\csrss.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cuisine bretonne.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cuisine bretonne.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cuisine bretonne.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cuisine.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cuisine.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\cuisine.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\CV et Emploi.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\CV et Emploi.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\CV et Emploi.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\divers claire.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\divers claire.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\divers claire.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\DOCUME~1.BAC=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\DOCUME~1.BAC=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\DOCUME~1.BAC=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\E P S.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\E P S.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\E P S.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\education enfant.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\education enfant.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\education enfant.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\education mody.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\education mody.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\education mody.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Emploi du temps ce2.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Emploi du temps ce2.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Emploi du temps ce2.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Empty.pif.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Empty.pif.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Empty.pif.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\EVENEMENTS A FETER.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\EVENEMENTS A FETER.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\EVENEMENTS A FETER.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Films.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Films.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Films.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\formation claire.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\formation claire.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\formation claire.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Géométrie.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Géométrie.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Géométrie.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\INETIN~1.BAC=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\INETIN~1.BAC=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\INETIN~1.BAC=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\informatique a lecole.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\informatique a lecole.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\informatique a lecole.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\logiciels pedagogiques.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\logiciels pedagogiques.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\logiciels pedagogiques.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\lsass.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\lsass.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\lsass.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Musique, paroles.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Musique, paroles.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Musique, paroles.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Problémes de Ce2.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Problémes de Ce2.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Problémes de Ce2.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Programmations.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Programmations.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Programmations.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Projets pedagogiques.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Projets pedagogiques.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Projets pedagogiques.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Romans CE2.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Romans CE2.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Romans CE2.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Résolution de problemes.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Résolution de problemes.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Résolution de problemes.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\services.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\services.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\services.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Sites pour instits.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Sites pour instits.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Sites pour instits.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\smss.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\smss.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\smss.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\SYNDICAT ENSEIGNANT.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\SYNDICAT ENSEIGNANT.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\SYNDICAT ENSEIGNANT.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\THEATRE.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\THEATRE.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\THEATRE.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Théatre.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Théatre.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Théatre.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\WPOURA~1.BAC=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\WPOURA~1.BAC=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\WPOURA~1.BAC=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Wbcam.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Wbcam.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\Wbcam.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\WINAMP.exe.bac_a00460=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\WINAMP.exe.bac_a00460=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\BERTHOU Claire\.housecall6.6\Quarantine\WINAMP.exe.bac_a00460=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\actualités.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\actualités.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\actualités.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\administratif.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\administratif.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\administratif.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\anglais - new live 6°.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\anglais - new live 6°.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\anglais - new live 6°.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\ANNUAIRE.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\ANNUAIRE.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\ANNUAIRE.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\art et objet.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\art et objet.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\art et objet.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\ARTS PLASTIQUES.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\ARTS PLASTIQUES.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\ARTS PLASTIQUES.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\billets d'avion.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\billets d'avion.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\billets d'avion.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\BIO.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\BIO.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\BIO.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Blog Mody.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Blog Mody.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Blog Mody.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\BLOG.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\BLOG.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\BLOG.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\boulot claire.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\boulot claire.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\boulot claire.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Brengkolang.com.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Brengkolang.com.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Brengkolang.com.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Bretagne.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Bretagne.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Bretagne.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CAMION.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CAMION.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CAMION.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Carnaval.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Carnaval.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Carnaval.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cartes de voeux.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cartes de voeux.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cartes de voeux.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CE2.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CE2.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CE2.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\chants Noël.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\chants Noël.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\chants Noël.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\csrss.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\csrss.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\csrss.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cuisine bretonne.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cuisine bretonne.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cuisine bretonne.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cuisine.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cuisine.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\cuisine.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CV et Emploi.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CV et Emploi.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\CV et Emploi.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\divers claire.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\divers claire.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\divers claire.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Divers.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Divers.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Divers.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\DOCUMENTS INSTITUTIONNELS.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\DOCUMENTS INSTITUTIONNELS.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\DOCUMENTS INSTITUTIONNELS.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\E P S.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\E P S.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\E P S.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\education enfant.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\education enfant.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\education enfant.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\education mody.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\education mody.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\education mody.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Elie.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Elie.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Elie.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Emploi du temps ce2.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Emploi du temps ce2.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Emploi du temps ce2.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Empty.pif.bac_a01364=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Empty.pif.bac_a01364=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Empty.pif.bac_a01364=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Empty.pif.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Empty.pif.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Empty.pif.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Evaluation.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Evaluation.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Evaluation.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\EVENEMENTS A FETER.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\EVENEMENTS A FETER.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\EVENEMENTS A FETER.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Favoris.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Favoris.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Favoris.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Films.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Films.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Films.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Finance.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Finance.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Finance.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\foot.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\foot.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\foot.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\formation claire.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\formation claire.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\formation claire.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\formation à distance.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\formation à distance.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\formation à distance.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\garage auto.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\garage auto.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\garage auto.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Graphiques.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Graphiques.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Graphiques.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Géométrie.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Géométrie.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Géométrie.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\immobilier.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\immobilier.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\immobilier.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\inetinfo.exe.bac_a01364=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\inetinfo.exe.bac_a01364=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\inetinfo.exe.bac_a01364=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\inetinfo.exe.bac_a03936=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\inetinfo.exe.bac_a03936=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\inetinfo.exe.bac_a03936=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\INETIN~2.BAC=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\INETIN~2.BAC=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\INETIN~2.BAC=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\informatique a lecole.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\informatique a lecole.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\informatique a lecole.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\informatique.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\informatique.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\informatique.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\jardin-potager.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\jardin-potager.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\jardin-potager.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Jean Diouf.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Jean Diouf.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Jean Diouf.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langue bretonne.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langue bretonne.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langue bretonne.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langue Wolof.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langue Wolof.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langue Wolof.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langues.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langues.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\langues.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Liens.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Liens.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Liens.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Links.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Links.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Links.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Litterature C 3.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Litterature C 3.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Litterature C 3.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\location voiture.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\location voiture.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\location voiture.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\logiciels pedagogiques.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\logiciels pedagogiques.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\logiciels pedagogiques.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\loisirs.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\loisirs.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\loisirs.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\lsass.exe.bac_a01364=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\lsass.exe.bac_a01364=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\lsass.exe.bac_a01364=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\lsass.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\lsass.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\lsass.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Ma musique.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Ma musique.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Ma musique.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\masques de carnaval.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\masques de carnaval.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\masques de carnaval.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Mes documents.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Mes documents.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Mes documents.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Microsoft.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Microsoft.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Microsoft.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Musique, paroles.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Musique, paroles.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Musique, paroles.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Musique.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Musique.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Musique.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\météo.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\météo.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\météo.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\NOEL.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\NOEL.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\NOEL.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Nouveaux programmes 2002.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Nouveaux programmes 2002.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Nouveaux programmes 2002.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Packard Bell.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Packard Bell.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Packard Bell.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\page d'accueil TU.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\page d'accueil TU.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\page d'accueil TU.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Planetis.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Planetis.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Planetis.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\PMU.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\PMU.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\PMU.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Poeies CE2.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Poeies CE2.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Poeies CE2.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\pour Adama.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\pour Adama.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\pour Adama.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\pr moussa.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\pr moussa.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\pr moussa.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\presse.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\presse.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\presse.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Problémes de Ce2.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Problémes de Ce2.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Problémes de Ce2.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Programmations.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Programmations.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Programmations.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Projets pedagogiques.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Projets pedagogiques.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Projets pedagogiques.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\radio blog.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\radio blog.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\radio blog.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\radios.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\radios.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\radios.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\restaurants.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\restaurants.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\restaurants.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Romans CE2.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Romans CE2.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Romans CE2.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Résolution de problemes.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Résolution de problemes.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Résolution de problemes.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\s'instruire.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\s'instruire.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\s'instruire.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\SANTE.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\SANTE.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\SANTE.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\savoirs.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\savoirs.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\savoirs.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\se divertir.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\se divertir.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\se divertir.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\senegal.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\senegal.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\senegal.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\services.exe.bac_a01364=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\services.exe.bac_a01364=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\services.exe.bac_a01364=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\services.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\services.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\services.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Sites pour instits.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Sites pour instits.exe.bac_a02680=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\Sites pour instits.exe.bac_a02680=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\smss.exe.bac_a01364=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\smss.exe.bac_a01364=>(Quarantine-4)
Disinfection failed

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\smss.exe.bac_a01364=>(Quarantine-4)
Deleted

C:\Documents and Settings\DIAGNE Mody\.housecall6.6\Quarantine\smss.exe.bac_a02680=>(Quarantine-4)
Infected with: Generic.Brontok.496D42C5

C:\Documents and Settings\DIAGNE Mody\
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
16 nov. 2006 à 22:01
Salut

tout ça c'est la quarantaine

poste un nouveau hijackthis stp

++
0
Bonsoir green day, Did (je comprends fort bien ta position)

voici le dernier rapport d'Hijack this, alllllloooooors cé bon ? dites moi que cé bon !!!!

Bertha


Logfile of HijackThis v1.99.1
Scan saved at 22:58:51, on 16/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\BERTHOU Claire\Bureau\HijackThis.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe"
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\RakyatKelaparan.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Tok-Cirrhatus-5226] "C:\Documents and Settings\BERTHOU Claire\Local Settings\Application Data\smss.exe"
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?12cff11c25674581b0100b75f2b36f09
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?12cff11c25674581b0100b75f2b36f09
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by123w.bay123.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC41BF28-EA0B-4E11-80C5-6062DF9688A7}: NameServer = 213.154.95.126 213.154.64.13
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
0
did71 Messages postés 2187 Date d'inscription vendredi 24 mars 2006 Statut Contributeur sécurité Dernière intervention 30 janvier 2010 36
16 nov. 2006 à 22:06
bonsoir vous,

désolé green mais j'ai donné un coup de main pour le fichier host, ensuite je préfère laisser faire le premier helper pour ne pas embrouiller!

a+
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
17 nov. 2006 à 00:50
Bonsoir Bertha !

on y est presque :-)


1)Affiche les dossiers système et fichiers cachés :
Ouvrir le poste de travail
- Outils --> Options des dossiers
- Affichage --> zone Paramètres avancés
- Cocher : Afficher le contenu des dossiers système
- Cocher : Afficher les fichiers et dossiers cachés
- Décocher : Masquer les extensions des fichiers dont le type est connu
- Décocher : Masquer les fichiers protégés du système d'exploitation (recommandé)
répondre Oui au message
Clique sur "Appliquer à tous les dossiers"
Clique sur OK

2) Désactiver la Restauration du système

* Cliquez sur le bouton Démarrer.
* Cliquez avec le bouton droit de la souris sur Poste de travail puis cliquez sur Propriétés.
* Dans l'onglet Restauration du système, sélectionnez l'option Désactiver la Restauration du système ou Désactiver la Restauration du système sur tous les lecteurs

( tu pourras la réactivé à la fin de la manip )


3) Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :


F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe"

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\RakyatKelaparan.exe"
O4 - HKCU\..\Run: [Tok-Cirrhatus-5226] "C:\Documents and Settings\BERTHOU Claire\Local Settings\Application Data\smss.exe"

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1


O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?12cff11c25674581b0100b75f2b36f09
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live

O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by123w.bay123.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O16 - DPF: {D28C3640-A6D7-4668-A53C-07A9CF67D157} (CFnacComposantCtrl Object) - https://www.fnacmusic.com/telechargementFnacmusic/FnacComposant.cab

4) Recherche et supprime les fichiers en gras suivants : ( si present )

C:\WINDOWS\KesenjanganSosial.exe
C:\WINDOWS\ShellNew\RakyatKelaparan.exe

5) fais-ceci :

démarrer==> éxecuter==> écrire: regedit
puis en faisant clic sur les +
suivre ce chemin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_current_user... etc..
et supprimer DisableRegedit=1 en faisant clic droit dessus et supprimer

6) télécharge et execute ceci :

* CleanUp40 (qui élimine les fichiers temporaires + cookies : gratuit )
http://pageperso.aol.fr/Balltrap34/CleanUp40.exe

tuto : (merci à Balltrap) http://pageperso.aol.fr/balltrap34/democleanup.htm


* Ccleaner : Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

*Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
est cochée) puis clique sur "lancer le nettoyage"

ccleaner

tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

==> cliques sur demarrer < executer et tapes : Prefetch
et supprime tout le contenu de ce dossier !

7) installe un parfeu :


kerio

tuto : pour configurer et comprendre Kerio
https://www.vulgarisation-informatique.com/kerio.php


8) poste un nouveau hijackthis et precise tes soucis s'il en reste

ne pas hesiter en cas de question !

bon courage, @+


**On peut aussi bâtir quelque chose de beau avec les pierres qui entravent le chemin ( J.W.VON GOETH
)**
0
Salut Green Day,
Je m'apprètais à en terminer une bonne fois pour toute avec les indactions que tu m'as données.... mais je ne comprends pas pourquoi je ne trouve pas "options des dossiers" dans outils, dans poste de travail, ou même panneaux de config à "apparence et thème". Je ne l'ai pas. Sur l'autre PC je l'ai pas de prbm. Cé peut être lié au fait que cé un XP Familial et non pro, comme je l'ai indiqué au départ ,me suis trompée c'est le PC qui est pro, alors que le portable est familial.
Ou alors je suis une grosse nulle....cé peut être ça aussi.
0
Hello green day, j'ai fait tous les points a part, le 1, le 4 et 5 parce que je ne le pouvais pas, fenêtre qui s'ouvre avec message de l'administrateur du systeme qui bloque cette manipulation, et le 7 parce que je n'ai pas encore eu le temps.

Merci GD




Logfile of HijackThis v1.99.1
Scan saved at 13:04:34, on 17/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\PROGRA~1\CleanUp!\cleanup.exe
C:\Documents and Settings\BERTHOU Claire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?12cff11c25674581b0100b75f2b36f09
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?12cff11c25674581b0100b75f2b36f09
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC41BF28-EA0B-4E11-80C5-6062DF9688A7}: NameServer = 213.154.95.126 213.154.64.13
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
17 nov. 2006 à 16:37
Salut

normalement tu dois l'avoir ! pour XP pro au famillial, c'est pareil, la difference ne pas à ce niveau là ...

fenêtre qui s'ouvre avec message de l'administrateur du systeme qui bloque cette manipulation,

as tu une session en droit administrateur ou limité ???

++

0
Salut Green Day,
Ok Ok, il fallait que j'ouvre une session en mode sans échec et ensuite que j'ouvre une session en administrateur, mais je savais pas moi !!!!

Alors j'ai tout refait....j'ai même "fix checked" avec hijackthis des lignes que j'avais supprimé avant
Est ce qu'il faut que je recoche et décoche les lignes dans options des dossiers maintenant que j'ai fini la manip ?
Merci vraiment pour ta patience et ton dévouement...J'ai appris plein de choses mais j'ai les yeux cloqués. Voici le dernier Hijackthis. Sinon j'ai mon scanne qui merde un peu depuis toutes ces manip il reconnait plus vraiment word, et me fait des symboles bizarres ala place des polices de caractère.

Logfile of HijackThis v1.99.1
Scan saved at 22:05:50, on 17/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\BERTHOU Claire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hp.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

@+
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
17 nov. 2006 à 23:01
Salut Bertha !

c'est du bon boulot ;-)

oui, tu peux recacher tes dossiers ...

le scan de avast tu veux dire ???

il plante, c'est à dire ???

poste un nouveau hijackthis en mode normal stp

++
0
Ben plutôt grace à toi le bon travail....
Non non....quand je parle du scan....je veux dire le scanner de l'imprimante.
Avec le tutorial de hijacthis tu crois que je peux réussir à comprendre ce qui va pas la dans!
Par exemple, là je crois qu'il ya des trucs de HP inutiles non ?

Logfile of HijackThis v1.99.1
Scan saved at 23:04:30, on 17/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Documents and Settings\BERTHOU Claire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www8.hp.com/fr/fr/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?12cff11c25674581b0100b75f2b36f09
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?12cff11c25674581b0100b75f2b36f09
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC41BF28-EA0B-4E11-80C5-6062DF9688A7}: NameServer = 213.154.95.126 213.154.64.13
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
17 nov. 2006 à 23:28
re

lol ok !

as tu installer le parfeu ??? attention, c'est important !!

on a pas toucher un scanner pourtant ...

c'est quoi qui va pas ???

les lignes concerant HP, vaut mieux les laisser, ce sont les mises à jour , lancement rapide ...

++

0
Salut,

Non je ne l'ai pas encore fait..mais je vais le faire. Le pare feu windows n'est pas valable ?

Non ce qui ce passe avec le scanner, c'est que quand je numérise un doc et que je l'envoie vers word par exemple ça me fait plein de symboles bizarres, mais pas sous acrobat. Je l'ai réinstalle, (le cd de l'imprimante), mais le prbm reste le même ça vient peut être de word ?
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
18 nov. 2006 à 14:57
Salut

le parfeu windows ne sert pas à grand chose :)

securite le parefeu de windows xp

je ne sais pas si ça viens de word ...

verifie ceci :

vas dans panneau de configuration<système<materiel<gestionnaire des périf et la tu regarde s'il n'y a pas de point "?" ou "!" jaune

si c'est le cas : fais un clic droit et mise à jour des pilotes


et mets à jour ton windows !


@+
0
Hello Green Day,

Ca y'est j'ai installé Kerio, thanks a lot.
Pour le disfonctionnement du scanneur avec word, ça ne vient pas de la configuration matérielle, pas de point d'exclamation jaune. Je sais pas, mais cé pas grave...je verrai après. Je pensais aussi à cette ligne qu'on avait viré : HKCU\software\Microsoft\Windows\CurrentVersion\policies\System,DisableRegedit=1
Comme cé un prbm de polices non reconnu par le scaneur...je me disais peu être, a quoi correspond donc cette ligne qu'on a viré ?

Je te remercie grandement pour ton aide !
Mais tu as fait des études la dans ? cé ton métier ou une passion ?
Euh cé peut être déplacé comme question mais c'est la curiosité ..
Bonne journée a toi et à la prochaine
Bertha
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
18 nov. 2006 à 18:39
re-Salut :-)

pour la 07 : l'accès au Registre était interdit : blocage de l'exécution de Regedit via une modification d'une clé dans le Registre, en la fixant et en suppriment la valeur dans la base de registre, on annule cette restriction, je ne pense pas qu'il y est de rapport avec word ...

Mais tu as fait des études la dans ? cé ton métier ou une passion ?
Euh cé peut être déplacé comme question mais c'est la curiosité ..


Ce n'est pas mon métier, ni mon domaine d'étude, une simple passion ;-)))

ce n'est pas une question deplacée non plus lol

un peu de lecture au passage :

securite proteger un ordinateur contre les malwares d internet

au plaisir, bon surf !

@+

0
Salut Green Day,

Je crois que je vais encore avoir besoin de tes services, juste un petit peu et ce coup ci c'est pas trop grave. Voilà c'est au niveau de l'affichage, je n'arrive plus a avoir l'affiche de windows XP. Quand je vais dans "affichage", "propriétés de l'affichage", "apparences", "fenêtres et boutons". Je n'ai pas la possibilité de choisir Windows XP, mais seulement windows classique. Ce qui fait que j'ai un portable Windows XP mais avec un affichage windows classque et ça depuis mon infection virusienne... Est ce que tu vois d'où ça peu venir ?

Sinon pour une simple passion..... tu as quand dû te prendre la tête souvent....ou alors tu es d'une logique implacable.

Bon dimanche @ +
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
19 nov. 2006 à 17:39
Salut

avec un peu d'experience, on voit apparâitre une logique ;-))

# Télécharge ceci: (merci a S!RI pour ce petit programme).

http://siri.urz.free.fr/Fix/SmitfraudFix.zip

Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1,
voila a quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
il va générer un rapport : copie/colle le sur le poste stp.

++
0
Salut Green Day....toujours présent ...
voici le rapport :


SmitFraudFix v2.122

Rapport fait à 18:05:25,60, 19/11/2006
Executé à partir de C:\Documents and Settings\BERTHOU Claire\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\BERTHOU Claire


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\BERTHOU Claire\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\BERTHO~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
19 nov. 2006 à 18:28
re

toujours presente oui :-)

Redémarres le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) et tu choisis le mode sans échec)

- Ouvre le dossier "SmitfraudFix" et double clic sur "Smitfraudfix.cmd", choisit l 'option 2 et tu réponds oui à tout.

Enregistre le rapport puis Copie/colle le rapport sur le forum stp.


@+
0
re,
Comme quoi cé bête l'idée qu'on peut se faire du passionné d'informatique : jeune mec lunetteux et boutonneux.......

Voici le rapport :


SmitFraudFix v2.122

Rapport fait à 19:03:02,20, 19/11/2006
Executé à partir de C:\Documents and Settings\BERTHOU Claire\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
19 nov. 2006 à 19:44
re

MDR !!! l'informatique n'est pas un domaine resérvé qu'aux hommes ! nan mé lol
( ou alors, ça l'est de moin en moin ... )

regarde maintenant si tu as retrouvé le style d'XP

++
0
Ben non malheureusement...
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
19 nov. 2006 à 20:53
re

ok,

télécharge ceci et décompresse le
http://pageperso.aol.fr/Balltrap34/luna.zip

ensuite met le dans C:\WINDOWS\Resources\Themes\Luna
et double clic dessus

Ensuite réessaye de remettre le style xp

++
0
FANTASTIQUE !!!

ça marche, ADMIRATION !

Tu sais tu peux venir ouvrir une boite ici à Dakar ça marchera du tonnerre. Tout le monde a un virus dans sa bécane en ce moment !! Est ce que tu penses que le FAI est responsable de qq chose dans cette déferlante de virus ici ?

MERCI BEAUCOUP.

Bertha @ +
In Africa peut être !
0
green day Messages postés 26371 Date d'inscription vendredi 30 septembre 2005 Statut Modérateur, Contributeur sécurité Dernière intervention 27 décembre 2019 2 162
19 nov. 2006 à 21:33
je suis vraiement ravie pour toi ;-)))

Dakar : ça doit être sympa ^^

les FAI ne sont pas responsables des cette avalanche de saltés non, ce sont des personnes comme toi est moi qui s'amuse à créer ces programmes ou bout de programmes dans le seul but de nous pourrir la vie et de violer notre vie privée ...

par contre, je pesne que les FAI pourrait faire un effort concernant la prevention et les risque de saltés ...

une idée de ce qui existe déjà :

differents types de malveillants

un peu de lecture encore :

https://sebsauvage.net/safehex.html

securite proteger un ordinateur contre les malwares d internet

bon surf !

@+

0