analyse log hijackthis

Bonjour,

mes connaissance informatique sont nulles ... je me permets donc de poster un log en esperanr que quelqu'un puisse m'aider ... merci

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\PROGRA~1\NORTON~1\NORTON~4\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Money\System\reminder.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\lotus\register\remind32.exe
C:\Program Files\lotus\organize\easyclip.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\PowerDesk\PDEXPLO.EXE
C:\Tampon\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [QD FastAndSafe] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Reminder] C:\Program Files\Microsoft Money\System\reminder.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Enregistrement de Lotus SmartSuite version 9.lnk = C:\Program Files\lotus\register\remind32.exe
O4 - Startup: La Solution Associations CIEL.lnk = C:\CIEL\STARTER.EXE
O4 - Startup: Lotus Organizer EasyClip.lnk = C:\Program Files\lotus\organize\easyclip.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: 50 FREE MP3s! - {686C970F-1D7D-4469-85D1-4B35763B56CC} - http://www.emusic.com?fref=149133 (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads [...] nicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?li [...] lcid=0x409
O17 - HKLM\System\CCS\Services\Tcpip\..\{0CEC9B54-A18E-442C-8988-EEB96AB6A974}: NameServer = 213.36.80.1 213.36.80.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0CEC9B54-A18E-442C-8988-EEB96AB6A974}: NameServer = 213.36.80.1 213.36.80.1
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~4\GHOSTS~2.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

salut,

merci pour cette reponse quelque peu rassurante .. mais
en fait norton me trouvce le virus W32.licum

j'ai lancer spybot ... il ne trouve rien, ae-ware m'a virer quelques trucs mais sans importance

l'analyse avec bitdefender à supprimer un grand nombre de fichiers infectés (la pluspart était en quarantaine "norton" )

mais apparamment W32.Licum est tjs présent ...
comprends plus rien lol ...

peut tu nous dire les fichier infecter par le virus

supprime tout les fichier signaler comme infecter manuellement en mode sans echec

c est pour sa que je te demende de me faire la liste des fichier infecter

tu sais quoi je sais que tu l a acheter mais norton ne vaut rie et est une passoire alors que tu pourrais te telecharger avast en gratuit le meilleur antivirus gratuitet tu pourrais beneficier de la liscence en t enregistrant sur le site officiel

je te conseil de desinstaller norton

sinom tu peut supprimer

Source \Mes Documents\AUDIOVIS\Arcade-Clip\ppt.exe
Source \Mes Documents\AUDIOVIS\Arcade-Clip\AG2000\maire.exe
Source \Mes Documents\AUDIOVIS\Arcade-Clip\AG2000\1an2.exe
Source \Mes Documents\AUDIOVIS\Arcade-Clip\AG2000\1an1.exe

mais a tu un logiciel appeller arcade clip?

a mon avis si tu veut mon avis norton pete une quille

esseye de le desinstaller et prend avast ou si tu veut vraiment pas

fait un scan en lignes sur kaspersky et poste le rapport

Bon je poste le rapport mais apparament il y en a un paquet ...
certains trouvés dans la mise en quarantaine de norton ... pas grave normalement ... comme il y en a une liste tres longue je ne te les mets pas pour eviter d'avoir un message 100 fois trop long !

(un exemple) : C:\Program Files\Norton SystemWorks\Norton Antivirus\Quarantine\000C0F38/[From nora_1_1_3@hotmail.com][Date Fri, 4 Feb 2005 11:17:35 +0100]/message9269.pif Infected: Email-Worm.Win32.NetSky.r
-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Tuesday, October 25, 2005 14:00:44
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 25/10/2005
Kaspersky Anti-Virus database records: 146721
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 159052
Number of viruses found: 40
Number of infected objects: 5243
Number of suspicious objects: 692
Duration of the scan process: 5029 sec

C:\Mes Documents\INTERN~1\PLUGINS\INTERN~1\MAIL\BOÎTED~2.MBX/[From "Afrique" <arcade.seigle-ferrand@wanadoo.fr>][Date Thu, 2 Apr 1998 00:32:49 +0200]/UNNAMED/Méthode.doc Infected: Virus.MSWord.Niceday.x
C:\Mes Documents\INTERN~1\PLUGINS\INTERN~1\MAIL\BOÎTED~2.MBX/[From "Afrique" <arcade.seigle-ferrand@wanadoo.fr>][Date Thu, 2 Apr 1998 00:32:49 +0200]/UNNAMED Infected: Virus.MSWord.Niceday.x
C:\Mes Documents\INTERN~1\PLUGINS\INTERN~1\MAIL\BOÎTED~2.MBX Infected: Virus.MSWord.Niceday.x
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082635.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082636.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082637.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082638.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082639.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082640.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082641.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082642.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082643.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082644.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082645.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082646.exe Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082647.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082648.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082649.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082650.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082651.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082652.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082653.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082654.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082655.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082656.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082657.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082658.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082659.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082660.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082661.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082662.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082663.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082664.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082665.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082666.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082667.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082668.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082669.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082670.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082671.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082672.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082673.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082674.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082675.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082676.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082677.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082678.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082679.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082680.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082681.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082682.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082683.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082684.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082685.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082686.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082687.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082688.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082689.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082690.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082691.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082692.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082693.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082694.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082695.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082696.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082697.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082698.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082699.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082700.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082701.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082702.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082703.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082704.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082705.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082706.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082707.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082708.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082709.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082710.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082711.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082712.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082713.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082714.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082715.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082716.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082717.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082718.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082719.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082720.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082721.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082722.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082723.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082724.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082725.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082726.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082727.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082728.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082729.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082730.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082731.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082732.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082733.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082734.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082735.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082736.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082737.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082738.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082739.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082740.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082741.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082742.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082743.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082744.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082745.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082746.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082747.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082748.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082749.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082750.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082751.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082752.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082753.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082754.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082755.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082756.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082757.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082758.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082759.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082760.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082761.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082762.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082763.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082764.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082765.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082766.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082767.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082768.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082769.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082770.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082771.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082772.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082773.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082774.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082775.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082776.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082777.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082778.EXE Infected: Virus.Win32.Tenga.a
C:\System Volume Information\_restore{A476D165-4801-4A30-B0F6-B630D2C9F4A9}\RP313\A0082779.EXE Infected: Virus.Win32.Tenga.a
F:\Mes Documents\INTERN~1\PLUGINS\INTERN~1\MAIL\BOÎTED~2.MBX/[From "Afrique" <arcade.seigle-ferrand@wanadoo.fr>][Date Thu, 2 Apr 1998 00:32:49 +0200]/UNNAMED/Méthode.doc Infected: Virus.MSWord.Niceday.x
F:\Mes Documents\INTERN~1\PLUGINS\INTERN~1\MAIL\BOÎTED~2.MBX/[From "Afrique" <arcade.seigle-ferrand@wanadoo.fr>][Date Thu, 2 Apr 1998 00:32:49 +0200]/UNNAMED Infected: Virus.MSWord.Niceday.x
F:\Mes Documents\INTERN~1\PLUGINS\INTERN~1\MAIL\BOÎTED~2.MBX Infected: Virus.MSWord.Niceday.x

Scan process completed.

bonjour, je suis moi aussi un novice donc je ne connais pas rgand chose, c'est pourquoi je demande votre aide pour résoudre les problèmes de mon pc : il redémarre tout seul ou plante tout seul voici le log :
Logfile of HijackThis v1.99.1
Scan saved at 15:19:02, on 25/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Robin\Bureau\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ [...] loader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcSandraSrv.exe

merci de me répondre sur mon adresse msn michalak59800@hotmail.fr

tu aurais du poster un nouveau sujet ;-)
c plus lisible pour les membres de ce forum qui file un bon coup de pouce aux novices comme nous

ya pas de mal ;-)

Tu pourras pas.

Les virus localisés dans C:\System Volume Information\_restore{...
sont dans les points de restauration du système donc :
Désactive la restauration du système pour supprimer ces points de restauration (clic droit sur poste de travail/propriétés/restauration du système/cocher la case : désactiver la restauration du système)
puis réactive-la

voilà c'est fait ... merci esteban ...

penses-tu qu'il y ait encore d'autres choses à faire ...
à part desinstaller norton ;-)