perte de pace sur disque dur

Depuis qq jours je perd de la place sur mon disue dur par je ne sais pas quoi
Avant hier j'avais 12 Go de libre
Hier 7 Go
Aujourd'hui 2Go ,alors que je n'ai rien installé???
Comment savoir ce qui a pris cette place??

salut
c'est peut etre un virus
fais un nttoyage de disque et un scan en ligne pour verifier

Ou faire un scan en ligne
Merci

http://forum.telecharger.01net.com/microhebdo/questions_techniques_diverses/p(...)
pas de double

comment faire un scan en ligne?
J'ai Norton et lorsue que je veux faire un Live Update (le dernier date du 27/07). J'ai un message LU1803 "Live Update a echoué lors de la récupération de vos mises à jour

Scanne en ligne : http://housecall60.trendmicro.com/en/start_corp.asp
et tu fais copier/coller du rapport sur ce Topic (dans une seule catégorie)

Ok je lance le scan et je repasse
Désolé pour la double categorie mais je ne savais dans quelle rubrique ecrire
Je ne le ferai pkus
merci

Voila ce qu'il m a trouvé

Virus Scan 0 virus cleaned, 13 viruses deleted


Results:
We have detected 14 infected file(s) with 14 virus(es) on your computer. Only 0 out of 0 infected files are displayed: - 0 virus(es) passed, 0 virus(es) no action available
- 0 virus(es) cleaned, 0 virus(es) uncleanable
- 13 virus(es) deleted, 1 virus(es) undeletable
- 0 virus(es) not found, 0 virus(es) unaccessible
Detected File Associated Virus Name Action Taken
C:\Documents and Settings\All Users\Application Data\bashwmascrlink\blehmulti.exe TROJ_SWIZZOR.EI Deletion successful
C:\Documents and Settings\Brian\Application Data\Bags Save\gridcool.exe TROJ_SWIZZOR.DQ Deletion successful
C:\Documents and Settings\MOA\Application Data\Bags Save\AboutGlue.exe TROJ_SWIZZOR.DQ Undeletable
C:\Documents and Settings\MOA\Mes documents\Mes fichiers reçus\protection\backups\backup-20050720-133850-525.dll TROJ_SWIZZOR.DQ Deletion successful
C:\Documents and Settings\MOA\Mes documents\Mes fichiers reçus\protection\backups\backup-20050819-165441-450.dll TROJ_SWIZZOR.DQ Deletion successful
C:\System Volume Information\_restore{F185B6B3-3C6C-4F26-9CB3-80E70B909CCC}\RP266\A0095960.exe TROJ_SWIZZOR.EI Deletion successful
C:\System Volume Information\_restore{F185B6B3-3C6C-4F26-9CB3-80E70B909CCC}\RP266\A0095963.exe TROJ_SWIZZOR.EA Deletion successful
C:\System Volume Information\_restore{F185B6B3-3C6C-4F26-9CB3-80E70B909CCC}\RP266\A0095966.exe TROJ_SWIZZOR.EF Deletion successful
C:\System Volume Information\_restore{F185B6B3-3C6C-4F26-9CB3-80E70B909CCC}\RP266\A0095973.exe TROJ_SWIZZOR.EI Deletion successful
C:\System Volume Information\_restore{F185B6B3-3C6C-4F26-9CB3-80E70B909CCC}\RP272\A0100386.exe TROJ_SWIZZOR.EI Deletion successful
C:\System Volume Information\_restore{F185B6B3-3C6C-4F26-9CB3-80E70B909CCC}\RP272\A0100395.exe TROJ_SWIZZOR.DQ Deletion successful
C:\TEMPO MOA\A copier sur cd\Ahead Nero Burning Rom v6.3.1.6 Ultra Edition (Packages1 2 3) Crack Francais.zip
- Ahead Nero Burning Rom v6.3.1.6\Keygen (Serial).exe TROJ_DELF.GI Deletion successful
C:\TEMPO MOA\Gravure\Ahead Nero Burning Rom v6.3.1.6\Keygen (Serial).exe TROJ_DELF.GI Deletion successful
C:\WINDOWS\Downloaded Program Files\WebInstall.dll TROJ_WEBINS.A Deletion successful




Trojan/Worm Check 0 worm/Trojan horse deleted

What we checked:
Malicious activity by a Trojan horse program. Although a Trojan seems like a harmless program, it contains malicious code and once installed can cause damage to your computer.
Results:
We have detected 0 Trojan horse program(s) and worm(s) on your computer. Only 0 out of 0 Trojan horse programs and worms are displayed: - 0 worm(s)/Trojan(s) passed, 0 worm(s)/Trojan(s) no action available
- 0 Worm(s)/Trojan(s) deleted, 0 worm(s)/Trojan(s) undeletable
Trojan/Worm Name Trojan/Worm Type Action Taken




Spyware Check 13 spyware programs removed

What we checked:
Whether personal information was tracked and reported by spyware. Spyware is often installed secretly with legitimate programs downloaded from the Internet.
Results:
We have detected 13 spyware(s) on your computer. Only 0 out of 0 spywares are displayed: - 0 spyware(s) passed, 0 spyware(s) no action available
- 13 spyware(s) removed, 0 spyware(s) unremovable
Spyware Name Spyware Type Action Taken
COOKIE_255 Cookie Removal successful
COOKIE_611 Cookie Removal successful
COOKIE_936 Cookie Removal successful
COOKIE_1020 Cookie Removal successful
COOKIE_1134 Cookie Removal successful
COOKIE_1727 Cookie Removal successful
COOKIE_2639 Cookie Removal successful
COOKIE_2844 Cookie Removal successful
COOKIE_2897 Cookie Removal successful
COOKIE_3081 Cookie Removal successful
COOKIE_3195 Cookie Removal successful
ADW_BADBITOR.A Adware Removal successful
ADW_SAHAGENT.A Adware Removal successful




Microsoft Vulnerability Check 15 vulnerabilities detected

What we checked:
Microsoft known security vulnerabilities. These are issues Microsoft has identified and released Critical Updates to fix.
Results:
We have detected 15 vulnerability/vulnerabilities on your computer. Only 0 out of 0 vulnerabilities are displayed.
Risk Level Issue How to Fix
Critical This security bulletin resolves the following vulnerabilities affecting Internet Explorer.; The PNG Image Rendering Memory Corruption vulnerability could allow an attacker to execute arbitrary code on the system because of a vulnerability in the way Internet Explorer handles PNG images.; The XML Redirect Information Disclosure vulnerability could allow an attacker to read XML data from another Internet Explorer domain because of a vulnerability in the way Internet Explorer handles certain requests to display XML content. MS05-025
Critical HTML Help is the standard help system for the Windows platform. Authors can use it to create online Help files for a software application or content for a multimedia title or a Web site. This vulnerability in HTML Help could allow attackers to execute arbitrary code on the affected system via a specially crafted Compiled Windows Help (CHM) file, because it does not completely validate input data. MS05-026
Critical A remote code execution vulnerability exists in the Microsofts implementation of the Server Message Block (SMB) protocol, which could allow an attacker to execute arbitrary codes to take complete control over a target system. This vulnerability could be exploited over the Internet. An attacker would have to transmit a specially crafted SMB packet to a target system to exploit it. However, failure to successfully exploit the vulnerability could only lead to a denial of service. MS05-027
Important A vulnerability exists in the way that Windows processes Web Client requests, which could allow a remote attacker to execute arbitrary code and take complete control over the affected system. MS05-028
Important A remote code execution vulnerability exists in Outlook Express when it is used as a newsgroup reader. An attacker could exploit this vulnerability by constructing a malicious newsgroup server that could that potentially allow remote code execution if a user queried the server for news. MS05-030
Moderate This vulnerability could enable an attacker to spoof trusted Internet content because security prompts can be disguised by a Microsoft Agent character. MS05-032
Moderate This vulnerability in the Microsoft Telnet client could allow an attacker to gain sensitive information about the affected system and read the session variables of users who have open connections to a malicious Telnet server. MS05-033
Critical This vulnerability could allow a remote attacker to execute arbitrary codes on the affected system via a malicious image file in a Web site or email message. This vulnerability exists because of the way Microsoft Color Management Module handles ICC profile format tag validation. MS05-036
Critical A COM object, the JView Profiler (Javaprxy.dll), contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system by hosting a malicious Web site. MS05-037
Critical This security bulletin resolves the following vulnerabilities found in Internet Explorer: (1) JPEG Image Rendering Memory Corruption vulnerability, which allows remote code execution when exploited by a remote malicious user, (2) Web Folder Behaviors Cross-Domain vulnerability, allows information disclosure or remote code execution on an affected system, and (3) COM Object Instantiation Memory Corruption vulnerability, which exists in the way Internet Explorer lists the instances of COM Objects that are not intended to be used in Internet Explorer. MS05-038
Critical An unchecked buffer in the Plug and Play service results in this vulnerability. Once successfully exploited, this vulnerability permits an attacker to have complete virtual control of an affected system. This vulnerability involves a remote code execution and local elevation of privilege. It can be exploited over the Internet. MS05-039
Important This security advisory explains a vulnerability in the Telephony Application Programming Interface (TAPI) service that could allow remote code execution. Attackers who successfully exploits the said vulnerability can take complete control of an affected system. They could then install programs, view, change, or delete data, and create new accounts with full user rights. MS05-040
Moderate A remote malicious user can use the process employed by the Remote Desktop Protocol (RDP) to validate data to cause a denial of service (DoS) attack, which stops an affected machine from responding and causing it to automatically restart. MS05-041
Moderate This security bulletin resolves the following vulnerabilities found in Microsoft Windows: (1) the Kerberos vulnerability, which is a denial of service vulnerability that allows an attacker to send a specially crafted message to a Windows domain controller, making the service that is responsible for authenticating users in an Active Directory domain to stop responding, and (2)the PKINIT vulnerability, which is an information disclosure and spoofing vulnerability that allows an attacker to manipulate certain information that is sent from a domain controller and potentially access sensitive client network communication. MS05-042
Critical A remote code execution vulnerability in the Printer Spooler service allows an attacker who successfully exploits this vulnerability to take complete control of the affected system. MS05-043

desactives la restauration systeme

Ok j'ai desactivé la restauration systeme
Et ensuite ???
est-ce que je dois supprimmer les fichiers où il t a les trojans?

Aujourd'hui je n'ai plus que 800Mo de libre...

Après avoir désactivé la restauration systeme, j'ai maintenant 14Go de libre
Dois-je la réactiver?