J'aimerais que vous m'aidiez à enlever ce fichu virus!!!
Merci de votre aide!!!

voilà le scan!!!!!

Logfile of HijackThis v1.99.1
Scan saved at 17:01:41, on 04/07/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Crystal Clear\YzShadow\YzShadow.exe
C:\Program Files\Crystal Clear\YzToolbar\YzToolBar.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CPub Object - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - c:\program files\mcafee\mps\mcpopup.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - Startup: Y'z Shadow.lnk = C:\Program Files\Crystal Clear\YzShadow\YzShadow.exe
O4 - Startup: Y'z Toolbar.lnk = C:\Program Files\Crystal Clear\YzToolbar\YzToolBar.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O15 - Trusted Zone: http://mamanbohneur.bbactif.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/ [...] insctl.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://cdn.scan.onecare.live.com/r [...] se8300.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 3303360256
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/ [...] cgdmgr.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: system32 - {08C685E3-1076-4BF5-B0E9-3E894B53F1B2} - sysprinters.dll (file missing)
O23 - Service: McAfee Application Installer Cleanup (0264391183550901) (0264391183550901mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP\026439~1.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\System32\lxcgcoms.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe

SDFix: Version 1.89

Run by G‚r“me on 04/07/2007 at 20:02

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:






Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Below files will be copied to Backups folder then removed:

C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\CONTENT.IE5\NPTUSF8H\CA7EHUYX.HTM - Deleted
C:\WINDOWS\myalbum2007.zip - Deleted
C:\WINDOWS\system32\sysprinters.dll - Deleted



Removing Temp Files...

ADS Check:

Checking C:\WINDOWS
C:\WINDOWS
No streams found.

Checking C:\WINDOWS\system32
C:\WINDOWS\system32
No streams found.

Checking C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.

Checking C:\WINDOWS\system32\ntoskrnl.exe
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------

Backups Folder: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Program Files\Picasa2\setup.exe
C:\WINDOWS\LastGood.Tmp\INF\oem3.inf
C:\WINDOWS\LastGood.Tmp\INF\oem3.PNF
C:\WINDOWS\LastGood.Tmp\INF\oem4.inf
C:\WINDOWS\LastGood.Tmp\INF\oem4.PNF
C:\WINDOWS\SoftwareDistribution\Download\f092643004fe50cceed65d55dd41fd7d\BIT3CE.tmp
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\6de0759720c7d5f6249a35ca9247df09\BIT160.tmp
C:\WINDOWS\system32\config\default.tmp.LOG
C:\WINDOWS\system32\config\software.tmp.LOG
C:\WINDOWS\system32\config\system.tmp.LOG

Finished

merci !!!

Logfile of HijackThis v1.99.1
Scan saved at 22:58:04, on 04/07/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Crystal Clear\YzShadow\YzShadow.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Crystal Clear\YzToolbar\YzToolBar.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CPub Object - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - c:\program files\mcafee\mps\mcpopup.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - Startup: Y'z Shadow.lnk = C:\Program Files\Crystal Clear\YzShadow\YzShadow.exe
O4 - Startup: Y'z Toolbar.lnk = C:\Program Files\Crystal Clear\YzToolbar\YzToolBar.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O15 - Trusted Zone: http://mamanbohneur.bbactif.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/ [...] insctl.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://cdn.scan.onecare.live.com/r [...] se8300.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 3303360256
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/ [...] cgdmgr.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\System32\lxcgcoms.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe

J'espère que c'est bien ça le nouveau.

Merci!!!!

J'ai fait la première partie.
Est-ce réussi?
Par contre, je n'arrive pas à faire l'analyse de l'antivirus.
J'accepte, mais rien ne se passe.
Peux-tu m'en dire plus, stp?
Merci!!!

Bonjour


Il faut passer par Internet explorer pour le scan.

Si tu n'y arrives toujours pas, on change. Panda
http://www.pandasoftware.com/activ [...] ncipal.htm

coucou je viens de recommencer avec Panda.
Voilà le rapport!!

PC infected

* 31 examples of less dangerous malicious software.

* We have not detected any antivirus installed.

El texto que corresponda en cada momento
After a quick scan of your PC, we have not detected any ACTIVE or LATENT malicious software.

Become a TotalScan Pro member
Includes disinfection!
Scan details
High danger level (0)
Medium danger level (2)
Adware/IST.IST... Adware
Latent
Show + Info
C:\aolhwb.exe
C:\ebifgm.exe
C:\erblbt.exe
C:\mhfgzg.exe
C:\nlvdjw.exe
C:\pinqkk.exe
C:\tjzqcy.exe
C:\yqhper.exe
Adware/IST.IST... Adware
Latent
Show + Info
C:\aolhwb.exe[ghost.exe]
C:\ebifgm.exe[ghost.exe]
C:\erblbt.exe[ghost.exe]
C:\mhfgzg.exe[ghost.exe]
C:\nlvdjw.exe[ghost.exe]
C:\pinqkk.exe[ghost.exe]
C:\tjzqcy.exe[ghost.exe]
C:\yqhper.exe[ghost.exe]
Low danger level (29)
Cookie/Casalem... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
dialer.ags Dialer
Latent
Show + Info
c:\program files\montorgueil
hkey_current_user\software\montorgueil
Cookie/Bluestr... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...ies.txt[.bluestreak.com/]
Cookie/Doublec... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...es.txt[.doubleclick.net/]
Cookie/WUpd Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...ookies.txt[.revenue.net/]
Cookie/Comclic... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...t[fl01.ct2.comclick.com/]
C:\Documents and Settings...t[fl01.ct2.comclick.com/]
C:\Documents and Settings...t[fl01.ct2.comclick.com/]
Cookie/Atlas D... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...\cookies.txt[.atdmt.com/]
Cookie/RealMed... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...s.txt[.247realmedia.com/]
C:\Documents and Settings...s.txt[.247realmedia.com/]
C:\Documents and Settings...s.txt[.247realmedia.com/]
Cookie/Com.com Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...lt\cookies.txt[.com.com/]
Cookie/FastCli... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...kies.txt[.fastclick.net/]
C:\Documents and Settings...kies.txt[.fastclick.net/]
Cookie/Adverti... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...es.txt[.advertising.com/]
C:\Documents and Settings...es.txt[.advertising.com/]
C:\Documents and Settings...es.txt[.advertising.com/]
C:\Documents and Settings...es.txt[.advertising.com/]
Cookie/2o7 Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...lt\cookies.txt[.2o7.net/]
C:\Documents and Settings...lt\cookies.txt[.2o7.net/]
Cookie/Tradedo... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...s.txt[.tradedoubler.com/]
C:\Documents and Settings...s.txt[.tradedoubler.com/]
C:\Documents and Settings...s.txt[.tradedoubler.com/]
C:\Documents and Settings...s.txt[.tradedoubler.com/]
Cookie/Questio... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
Cookie/Overtur... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...okies.txt[.overture.com/]
C:\Documents and Settings...okies.txt[.overture.com/]
Cookie/Weboram... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...ookies.txt[.weborama.fr/]
C:\Documents and Settings...ookies.txt[.weborama.fr/]
C:\Documents and Settings...ookies.txt[.weborama.fr/]
adware/statbla... Adware
Latent
Show + Info
hkey_classes_root\clsid\{...9-4ddc-b661-c1afb9f5ae53}
HKEY_LOCAL_MACHINE\softwa...9-4ddc-b661-c1afb9f5ae53}
Adware/Yazzle Adware
Latent
Show + Info
C:\gfxfjm.exe
C:\glowpt.exe
C:\lwoipt.exe
C:\owlenj.exe
C:\qrwwgs.exe
C:\tfmrtr.exe
C:\yokhrd.exe
Cookie/Serving... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
Cookie/YieldMa... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
Cookie/Searchp... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...hportal.information.com/]
Cookie/Adtech Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...\cookies.txt[.adtech.de/]
C:\Documents and Settings...\cookies.txt[.adtech.de/]
Cookie/Statcou... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...es.txt[.statcounter.com/]
C:\Documents and Settings...es.txt[.statcounter.com/]
Cookie/Serving... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...txt[.bs.serving-sys.com/]
Cookie/Mediapl... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...kies.txt[.mediaplex.com/]
Cookie/Webtren... Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...tatse.webtrendslive.com/]
Cookie/Apmebf Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...cookies.txt[.apmebf.com/]
Cookie/Xiti Tracking Cookie
Latent
Show + Info
C:\Documents and Settings...t\cookies.txt[.xiti.com/]
adware/sbsoft Adware
Latent
Show + Info
HKEY_CLASSES_ROOT\Interfa...4-465b-8368-5ed9b732e22d}
HKEY_CLASSES_ROOT\Interfa...C-435F-BF31-2C4497373C41}

* <<
* 1
* 2
* 3
* 4
* 5
* >>

Re


Bizarre ce rapport.


Télécharge OTMoveIt (de Old_Timer) sur ton Bureau.
http://download.bleepingcomputer.c [...] MoveIt.exe
Double-clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve ci-dessous, et colle-la dans le cadre de gauche de OTMoveIt aste List of Files/Folders to be moved.


C:\aolhwb.exe
C:\ebifgm.exe
C:\erblbt.exe
C:\mhfgzg.exe
C:\nlvdjw.exe
C:\pinqkk.exe
C:\tjzqcy.exe
C:\yqhper.exe
c:\program files\montorgueil
C:\gfxfjm.exe
C:\glowpt.exe
C:\lwoipt.exe
C:\owlenj.exe
C:\qrwwgs.exe
C:\tfmrtr.exe
C:\yokhrd.exe

Clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre Results.
Clique sur Exit pour fermer.

Il te sera peut-être demander de redémarrer le PC pour achever la suppression. Si c'est le cas accepte par Yes.


Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

Bonjour orely3113

Il faut créer ton propre post.
Clique sur Nouveau Sujet en haut

coucou naounature

merci a toi pour ta reponse, et la premiere fois que je l'ai reçcu, je l'ai ouvert et j'ai repondu, cela me le renvoyer à la suite!!!

Ben wéé je vais l'inscrire dans un nouveau sujet!!! en esperant que j'y arrive!!!
Mais au faite tu as reussi a l'enlever?

Mercii c'est gentil!!

orely3113 non , on cherche.
bon courage à toi.
Je sais que c'est rageant cet album!!

Me revoilà, toujours bredouille.
J'ai beau chercher, je ne trouve pas de rapport!!
Voilà comment je procède, ce n'est peut-être pas comme-ça qu'il faut faire.

Je vais dans poste de travail
disque local (C
OT MoveIt
MovedFiles
program files
montorgueil
Femme_collant

et ensuite, plus rien. C'est comme s'il y avait une photo.
un genre d'oval jaune dans un carré noir. PS : je n'ai pas eu besoin de redémarrer le pc???!!!!!!!!!

Bonjour


C'est normal que ton antivirus trouve ce dossier infecté, c'est la quarantaine d'OTMoveIt.


Télécharge Combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Double clique combofix.exe et suis les invites.
Lorsque le scan sera complété, un rapport apparaîtra.

Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.

Regarde au dessus.
Poste le rapport de Combofix.

Re

Double-clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve ci-dessous, et colle-la dans le cadre de gauche de OTMoveIt aste List of Files/Folders to be moved.

C:\pjvoin.exe

Clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre Results.
Clique sur Exit pour fermer.

Il te sera peut-être demander de redémarrer le PC pour achever la suppression. Si c'est le cas accepte par Yes.


Télécharge DiagHelp.zip (de Malekal_Morte) sur ton bureau
http://www.malekal.com/download/DiagHelp.zip
- Fais un clic droit sur le fichier et extraire tout
- Un nouveau dossier chercher va être créé DiagHelp
- Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
- Une fenêtre va s'ouvrir, choisis l'option 1
- L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande

ATTENTION : pendant l'analyse, après le rapport catchme, il te sera demandé d'appuyer sur une touche afin de poursuivre le scan, suis bien les instructions à l'écran !

- A la fin de l'analyse, il te sera peut-être demandé de redémarrer l'ordinateur... Une fois l'ordinateur redémarré le rapport va apparaître sur le bloc-note.. Ce dernier se trouve sur C:\resultat.txt
- Copie/colle le contenu du bloc-note qui s'ouvre, pour cela :
-- Dans le bloc-note, cliquez sur le menu Edition / Selectionner tout
-- A nouveau menu Edition / copier
-- Dans un nouveau message ici, faire un clic droit / coller

je n'ai plus de réponse de votre part.
Peut-être ne travaillez-vous pas le week end?!

J'aimerais savoir si c'est teminé, savoir si j'ai encore le virus ou non?!
Savoir s'il y a d'autres démarches à effectuer.

Merci de votre répose et de votre aide!!!

j'ai beau essayer et réessayer, je clique sur le lien,
puis, j'accepte et j'attends. Mais rien ne se passe.

Je me suis aidée de ce lien et c'était bien parti.
mais ça a échoué car il marque qu'il faut que mon niveau de sécurité soit moyen. ce qui est le cas, donc je ne comprends pas.

Désolée pour être aussi longue!!

This action will cancel the scan
Are you sure you want to cancel the scan?

Español | English Sign in | Sign up | My account | Sign out Home| What is TotalScan?| We love feedback!| FAQ Quick scan: Searching for malicious software
Scanning
Searching 1,159,184 viruses, spyware, Trojans and other threats. It also uses heuristic technologies to detect unknown viruses.

100%


Item in progress:
Items scanned:
3509

Items with viruses, spyware, Trojans... detected:
62

Suspicious files detected:
0

Results
PC infected
27 examples of less dangerous malicious software.
We have not detected any antivirus installed.
El texto que corresponda en cada momento
After a quick scan of your PC, we have not detected any ACTIVE or LATENT malicious software.
Become a TotalScan Pro member
Includes disinfection!

Scan details
High danger level (0)

Medium danger level (0)

Low danger level (27)
Cookie/Casalem... Tracking Cookie Latent Show + Info
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
C:\Documents and Settings...es.txt[.casalemedia.com/]
dialer.ags Dialer Latent Show + Info
hkey_current_user\software\montorgueil
Cookie/Doublec... Tracking Cookie Latent Show + Info
C:\Documents and Settings...es.txt[.doubleclick.net/]
Cookie/Bluestr... Tracking Cookie Latent Show + Info
C:\Documents and Settings...ies.txt[.bluestreak.com/]
Cookie/WUpd Tracking Cookie Latent Show + Info
C:\Documents and Settings...ookies.txt[.revenue.net/]
Cookie/Comclic... Tracking Cookie Latent Show + Info
C:\Documents and Settings...t[fl01.ct2.comclick.com/]
C:\Documents and Settings...t[fl01.ct2.comclick.com/]
C:\Documents and Settings...t[fl01.ct2.comclick.com/]
Cookie/Atlas D... Tracking Cookie Latent Show + Info
C:\Documents and Settings...\cookies.txt[.atdmt.com/]
Cookie/RealMed... Tracking Cookie Latent Show + Info
C:\Documents and Settings...s.txt[.247realmedia.com/]
C:\Documents and Settings...s.txt[.247realmedia.com/]
C:\Documents and Settings...s.txt[.247realmedia.com/]
Cookie/Com.com Tracking Cookie Latent Show + Info
C:\Documents and Settings...lt\cookies.txt[.com.com/]
Cookie/FastCli... Tracking Cookie Latent Show + Info
C:\Documents and Settings...kies.txt[.fastclick.net/]
C:\Documents and Settings...kies.txt[.fastclick.net/]
Cookie/Adverti... Tracking Cookie Latent Show + Info
C:\Documents and Settings...es.txt[.advertising.com/]
C:\Documents and Settings...es.txt[.advertising.com/]
C:\Documents and Settings...es.txt[.advertising.com/]
C:\Documents and Settings...es.txt[.advertising.com/]
Cookie/2o7 Tracking Cookie Latent Show + Info
C:\Documents and Settings...lt\cookies.txt[.2o7.net/]
C:\Documents and Settings...lt\cookies.txt[.2o7.net/]
Cookie/Tradedo... Tracking Cookie Latent Show + Info
C:\Documents and Settings...s.txt[.tradedoubler.com/]
C:\Documents and Settings...s.txt[.tradedoubler.com/]
C:\Documents and Settings...s.txt[.tradedoubler.com/]
C:\Documents and Settings...s.txt[.tradedoubler.com/]
Cookie/Questio... Tracking Cookie Latent Show + Info
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
C:\Documents and Settings...txt[.questionmarket.com/]
Cookie/Weboram... Tracking Cookie Latent Show + Info
C:\Documents and Settings...ookies.txt[.weborama.fr/]
C:\Documents and Settings...ookies.txt[.weborama.fr/]
C:\Documents and Settings...ookies.txt[.weborama.fr/]
Cookie/Overtur... Tracking Cookie Latent Show + Info
C:\Documents and Settings...okies.txt[.overture.com/]
C:\Documents and Settings...okies.txt[.overture.com/]
Cookie/Serving... Tracking Cookie Latent Show + Info
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
C:\Documents and Settings...es.txt[.serving-sys.com/]
Cookie/YieldMa... Tracking Cookie Latent Show + Info
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
C:\Documents and Settings...txt[ad.yieldmanager.com/]
Cookie/Searchp... Tracking Cookie Latent Show + Info
C:\Documents and Settings...hportal.information.com/]
Cookie/Adtech Tracking Cookie Latent Show + Info
C:\Documents and Settings...\cookies.txt[.adtech.de/]
C:\Documents and Settings...\cookies.txt[.adtech.de/]
Cookie/Statcou... Tracking Cookie Latent Show + Info
C:\Documents and Settings...es.txt[.statcounter.com/]
C:\Documents and Settings...es.txt[.statcounter.com/]
Cookie/Serving... Tracking Cookie Latent Show + Info
C:\Documents and Settings...txt[.bs.serving-sys.com/]
Cookie/Mediapl... Tracking Cookie Latent Show + Info
C:\Documents and Settings...kies.txt[.mediaplex.com/]
Cookie/Webtren... Tracking Cookie Latent Show + Info
C:\Documents and Settings...tatse.webtrendslive.com/]
Cookie/Apmebf Tracking Cookie Latent Show + Info
C:\Documents and Settings...cookies.txt[.apmebf.com/]
Cookie/Xiti Tracking Cookie Latent Show + Info
C:\Documents and Settings...t\cookies.txt[.xiti.com/]
adware/sbsoft Adware Latent Show + Info
HKEY_CLASSES_ROOT\Interfa...4-465b-8368-5ed9b732e22d}
HKEY_CLASSES_ROOT\Interfa...C-435F-BF31-2C4497373C41}

<<
1
2
3
4
5
>>

Suspicious files (3)

<<
1
2
3
4
5
>>
Recommendations
Disinfect
Send suspicious files to laboratory
Install permanent protection
Enable your permanent protection

Update your permanent protection

You should periodically carry out a FULL scan of your PC with TotalScan. That way you will reduce the chances of infection.

How can I do this?


El % of other users' computers were infected and we have disinfected %
Check the Key features and the minimum requirements
Become a TotalScan member. It's FREE.
Benefits: 1. Customized scan 2. Scan history


Disinfection of this type of threat is
exclusive to TotalScan members Pro.
TotalScan Pro Members

It seems that you have registered previously and your account is still active. You cannot register again with the same account. Enter your account using your e-mail and password. Forgotten your password?

E-mail
Please enter this information


Password
Please enter this information


Repeat password
Please enter this information

Remember e-mail and password

I want to receive the latest news about NanoScan or TotalScan. I would also like to receive information on relevant promotions from Panda Software and/or its international representatives.

* Panda Software will send this information via e-mail or other equivalent form of communication (e.g. SMS).

I do not want to receive any type of information.

Have you forgotten your password?



You have not registered yet? Register now FREE
Still not a member?


Become a TotalScan Pro member and benefit from its maximum detection and disinfection capacity:



Detects over 1,100,000 viruses, spyware, Trojans and other threats.
Continuous updates: over 2,500 new viruses every day.
Includes disinfection.


Buy TotalScan Pro and become a member.


Use of TotalScan is subject to acceptance of the Terms and conditions of use
This is a Panda project

cool s'il n'y a rien de méchant.

Je n'ai pas téléchargé CCleaner car je l'avais déjà.

J'ai donc lancé le nettoyage.

Aucun dysfonctionnement visible.

Merci!!!!

voici la colonne de droite

File/Folder C:\avenger.zip not found.
File/Folder C:\Avenger not found.
File/Folder C:\avenger.txt not found.
File/Folder C:\bfu.zip not found.
File/Folder C:\BFU not found.
File/Folder C:\combofix.exe not found.
File/Folder C:\QooBox not found.
C:\ComboFix*.txt moved successfully.
C:\ComboFix*.txt moved successfully.
File move failed. C:\Documents and Settings\Gérôme\Desktop\ComboFix*.txt scheduled to be moved on reboot.
C:\WINDOWS\ComboFix*.txt moved successfully.
C:\WINDOWS\system32\ComboFix*.txt moved successfully.
C:\WINDOWS\system32\drivers\ComboFix*.txt moved successfully.
File/Folder C:\catchme.exe not found.
File/Folder C:\nircmd.exe not found.
File/Folder C:\swreg.exe not found.
File/Folder C:\Swxcacls.exe not found.
File/Folder C:\Swsc.exe not found.
File/Folder C:\dss.exe not found.
File/Folder C:\Deckard not found.
File/Folder C:\FindAWF.exe not found.
File/Folder C:\AWF.txt not found.
File/Folder C:\fixwareout.exe not found.
File/Folder C:\fixwareout not found.
File/Folder C:\fsbl.exe not found.
C:\fsbl*.log moved successfully.
C:\fsbl*.log moved successfully.
File move failed. C:\Documents and Settings\Gérôme\Desktop\fsbl*.log scheduled to be moved on reboot.
C:\WINDOWS\fsbl*.log moved successfully.
C:\WINDOWS\system32\fsbl*.log moved successfully.
C:\WINDOWS\system32\drivers\fsbl*.log moved successfully.
File/Folder C:\gmer.exe not found.
File/Folder C:\gmer.dll not found.
File/Folder C:\gmer.ini not found.
File/Folder C:\gmer.log not found.
File/Folder C:\gmer_uninstall.cmd not found.
File/Folder C:\gmer.sys not found.
Unable to delete service gmer.
File/Folder C:\haxfix.exe not found.
File/Folder C:\haxfix.txt not found.
File/Folder C:\killbox.exe not found.
File/Folder C:\!Killbox not found.
File/Folder C:\OTMoveIt.exe not found.
File/Folder C:\_OTMoveIt not found.
File/Folder C:\rustbfix.exe not found.
File/Folder C:\Rustbfix not found.
File/Folder C:\sdfix.exe not found.
File/Folder C:\SDFix not found.
File/Folder C:\SmitfraudFix.exe not found.
File/Folder C:\SmitfraudFix not found.
File/Folder C:\rapport.txt not found.
File/Folder C:\SysInsite not found.
File/Folder C:\VundoFix.exe not found.
File/Folder C:\VundoFix Backups not found.
File/Folder C:\vundofix.txt not found.
File/Folder C:\win32delfkil.exe not found.
File/Folder C:\_backupD not found.
File/Folder C:\windelf.txt not found.
File/Folder C:\winpfind.exe not found.
File/Folder C:\WinPfind not found.
File/Folder C:\winpfind3u.exe not found.
File/Folder C:\WinPFind3u not found.
C:\cleanup.txt moved successfully.
File move failed. C:\Documents and Settings\Gérôme\Bureau\OTMoveIt.exe scheduled to be moved on reboot.


Par contre je ne comprends pas très bien ta dernière phrase...
Résolu je le mets où?

Désolée vraiment!!

Merci!!!!!!!!!

Désolée mais je n'ai rien concernant des icônes
et l'heure.
quand j'accepte le nettoyage, ma colonne de droite se remplit
puis c'est tout.
Donc c'est écrit à gauche et à droite et c'est tout...
pas d'heure et pas de titre.

Désolée vraiment!!

[] [/] en effet, on ne parlait pas de la même chose...

Si j'ai bien compris, nous avons terminé ?!

Je n'ai plus le virus?

MERCI BEAUCOUP !!!!!!!!!!!!!!!!