win32/Skintrim.gen!C - Sécurité, virus et assimilés::Trojan et spywares

Passionné(e) d'internet, de logiciels, de forums ? 01net recrute...

Auteur

Message

Moune-be

Posté le 25/06/2008 20:58:59

Bonjour je suis infestée par le virus : win32/Skintrim.gen!C
J'ai formaté mon ordi et il est toujours en place, quelqu'un pourrais-t-il me dire que faire ? Merci

lien rag

Posté le 25/06/2008 21:03:03

Télécharge HijackThis

Tuto réalisé par Bruce Lee : http://cybersecurite.xooit.com/t138-HijackThis-2-0-2.htm

Clique alors sur "Do a system scan and save a logfile"
Le scan se fait très rapidement, puis un bloc-note apparaît
(le "logfile")
Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
le texte est alors séléctionné, retourne dans "Edition" toujours
en laissant le texte séléctionné, et clique sur copier.
Colle le contenu ici dans ta prochaine réponse

Moune-be

Posté le 25/06/2008 21:40:21

Bonsoir j'ai fait comme tu as dit voici le résultat :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:29, on 25/06/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\o2flash.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wpabaln.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9563.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O2Micro Flash Memory (O2Flash) - Unknown owner - C:\WINDOWS\System32\o2flash.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

--
End of file - 6092 bytes

papé30

Posté le 25/06/2008 22:18:31

bonjour,
cela prouve bien ce que j'ai il n'y a pas mal de temps, un formatage n'efface pas toujours un virus.
S'il est incrusté dans la base de donnée de Windows, durdur.
Mets ton disque d'installation Windows, appuie sur la touche F11, tu choisis un formatage lent, aprés avoir viré tous ce que Windows te proposes de conserver.
Tu reinstalles Windows, et tu restes bien devant ton PC. A la moindre erreur d'installation, tu arrètes et tu recommances,c'est comme ça que je me suis débarassé d'un virus incrusté dan les données de Windows. Et un conseil, si ça marche, arrète les mise à jour. (panneau de configuration-Mises à jour-désactiver les mises à jour.)
A+++

lle

-------
Quiconque cesse d'apprendre est vieux.Qu'il est 20 ans ou 80 ans, quiconque continue à apprendre, reste jeune.
(Henry Fonda)

bibou0007

team sécurité
:-)

Posté le 25/06/2008 23:38:49

[color=red]EDITION MODERATEUR :

papé30 arrête de dire des ânerie de plus Moune-be a été pris en charge par un helper qu il sais ce qu il fait !!!
nous conseillons pas de formater sauf si il n 'y a aucun recours de sauver le pc et ces données!!
Et arrêter les mises a jours met en péril ton système car il pas les dernières mise a jour de faille de sécurité!

alors papé30 je te demanderais de t abstenir plutôt que donné des conseils pareil que tu n'applique pas a toi même car tu demande de l aide toi aussi!

-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!

lien rag

Posté le 26/06/2008 20:02:21

tout d'abord je vais te conseiller de changer Avast pour Avira tu vas ainsi gagner en efficacité

Desinstallation de Avast

http://www.malekal.com//tutorial_antivir_security_suite.php

ensuite fais un scan complet avec Avira et post nous le rapport géneré stp

Moune-be

Posté le 26/06/2008 22:38:30

J'ai eu énormément de mal à le faire car je ne connais pas l'anglais, j'espère que ce rapport est celui que tu attendais. Merci

Avira AntiVir Personal
Report file date: jeudi 26 juin 2008 22:29

Scanning for 1165085 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: Correy Monique
Computer name: MONIQUE

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 26/06/2008 20:27:23
AVSCAN.DLL : 8.1.1.0 53505 Bytes 26/06/2008 20:27:23
LUKE.DLL : 8.1.2.9 151809 Bytes 26/06/2008 20:27:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 26/06/2008 20:27:23
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 20:27:20
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 20:27:21
ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 20:27:21
ANTIVIR3.VDF : 7.0.3.68 57856 Bytes 25/03/2008 20:27:21
Engineversion : 8.1.0.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 26/06/2008 20:27:20
AESCRIPT.DLL : 8.1.0.19 229754 Bytes 26/06/2008 20:27:20
AESCN.DLL : 8.1.0.12 115060 Bytes 26/06/2008 20:27:20
AERDL.DLL : 8.1.0.19 418164 Bytes 26/06/2008 20:27:20
AEPACK.DLL : 8.1.1.0 364918 Bytes 26/06/2008 20:27:20
AEOFFICE.DLL : 8.1.0.15 192889 Bytes 26/06/2008 20:27:20
AEHEUR.DLL : 8.1.0.15 1147253 Bytes 26/06/2008 20:27:20
AEHELP.DLL : 8.1.0.11 115061 Bytes 26/06/2008 20:27:20
AEGEN.DLL : 8.1.0.15 299379 Bytes 26/06/2008 20:27:20
AEEMU.DLL : 8.1.0.5 430450 Bytes 26/06/2008 20:27:20
AECORE.DLL : 8.1.0.25 168309 Bytes 26/06/2008 20:27:20
AVWINLL.DLL : 1.0.0.7 14593 Bytes 26/06/2008 20:27:23
AVPREF.DLL : 8.0.0.1 25857 Bytes 26/06/2008 20:27:22
AVREP.DLL : 7.0.0.1 155688 Bytes 26/06/2008 20:27:22
AVREG.DLL : 8.0.0.0 30977 Bytes 26/06/2008 20:27:22
AVARKT.DLL : 1.0.0.23 307457 Bytes 26/06/2008 20:27:21
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 26/06/2008 20:27:22
SQLITE3.DLL : 3.3.17.1 339968 Bytes 26/06/2008 20:27:24
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 26/06/2008 20:27:24
NETNT.DLL : 8.0.0.1 7937 Bytes 26/06/2008 20:27:23
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 26/06/2008 20:27:20
RCTEXT.DLL : 8.0.32.0 86273 Bytes 26/06/2008 20:27:20

Configuration settings for the scan:
Jobname..........................: Windows System Directory
Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\setupprf.dat
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: jeudi 26 juin 2008 22:29

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'AdobeUpdater.exe' - '1' Module(s) have been scanned
Scan process 'wpabaln.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'hprblog.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned
Scan process 'SUPERAntiSpyware.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'InCD.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'TaskBarIcon.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
Scan process 'CnxDslTb.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'WLANCFG.EXE' - '1' Module(s) have been scanned
Scan process 'o2flash.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'incdsrv.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
38 processes with 38 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '38' files ).

Starting the file scan:

Begin scan in 'C:\WINDOWS\system32'

End of the scan: jeudi 26 juin 2008 22:31
Used time: 01:58 min

The scan has been done completely.

180 Scanning directories
5057 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
0 Files cannot be scanned
5057 Files not concerned
9 Archives were scanned
0 Warnings
0 Notes

Moune-be

Posté le 26/06/2008 23:02:28

Désolée, je crois que je me suis trompée, j'ai refait un scan le voici :

Avira AntiVir Personal
Report file date: jeudi 26 juin 2008 22:42

Scanning for 1165085 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: MONIQUE

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 26/06/2008 20:27:23
AVSCAN.DLL : 8.1.1.0 53505 Bytes 26/06/2008 20:27:23
LUKE.DLL : 8.1.2.9 151809 Bytes 26/06/2008 20:27:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 26/06/2008 20:27:23
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 20:27:20
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 20:27:21
ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 20:27:21
ANTIVIR3.VDF : 7.0.3.68 57856 Bytes 25/03/2008 20:27:21
Engineversion : 8.1.0.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 26/06/2008 20:27:20
AESCRIPT.DLL : 8.1.0.19 229754 Bytes 26/06/2008 20:27:20
AESCN.DLL : 8.1.0.12 115060 Bytes 26/06/2008 20:27:20
AERDL.DLL : 8.1.0.19 418164 Bytes 26/06/2008 20:27:20
AEPACK.DLL : 8.1.1.0 364918 Bytes 26/06/2008 20:27:20
AEOFFICE.DLL : 8.1.0.15 192889 Bytes 26/06/2008 20:27:20
AEHEUR.DLL : 8.1.0.15 1147253 Bytes 26/06/2008 20:27:20
AEHELP.DLL : 8.1.0.11 115061 Bytes 26/06/2008 20:27:20
AEGEN.DLL : 8.1.0.15 299379 Bytes 26/06/2008 20:27:20
AEEMU.DLL : 8.1.0.5 430450 Bytes 26/06/2008 20:27:20
AECORE.DLL : 8.1.0.25 168309 Bytes 26/06/2008 20:27:20
AVWINLL.DLL : 1.0.0.7 14593 Bytes 26/06/2008 20:27:23
AVPREF.DLL : 8.0.0.1 25857 Bytes 26/06/2008 20:27:22
AVREP.DLL : 7.0.0.1 155688 Bytes 26/06/2008 20:27:22
AVREG.DLL : 8.0.0.0 30977 Bytes 26/06/2008 20:27:22
AVARKT.DLL : 1.0.0.23 307457 Bytes 26/06/2008 20:27:21
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 26/06/2008 20:27:22
SQLITE3.DLL : 3.3.17.1 339968 Bytes 26/06/2008 20:27:24
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 26/06/2008 20:27:24
NETNT.DLL : 8.0.0.1 7937 Bytes 26/06/2008 20:27:23
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 26/06/2008 20:27:20
RCTEXT.DLL : 8.0.32.0 86273 Bytes 26/06/2008 20:27:20

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: jeudi 26 juin 2008 22:42

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'msiexec.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'WINWORD.EXE' - '1' Module(s) have been scanned
Scan process 'notepad.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'wpabaln.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'hprblog.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned
Scan process 'SUPERAntiSpyware.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'InCD.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'TaskBarIcon.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
Scan process 'CnxDslTb.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'WLANCFG.EXE' - '1' Module(s) have been scanned
Scan process 'o2flash.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'incdsrv.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '30' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\'

End of the scan: jeudi 26 juin 2008 23:00
Used time: 17:46 min

The scan has been done completely.

1661 Scanning directories
199542 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
199542 Files not concerned
2088 Archives were scanned
1 Warnings
0 Notes

lien rag

Posté le 26/06/2008 23:21:56

c'est Ok monique le probleme semble reglé

Moune-be

Posté le 27/06/2008 09:12:49

Je te remercies sincèrement car je me voyais mal reformater mon ordi, je l'ai fait moi-même sans aucun CD de réinstallation et j'ai drôlement galéré. Du coup je me permet deux petites questions : 1ère: est-ce que je garde Avira ? et 2ème : est-ce que je peut faire un CD de sauvegarde de windows et ses pilotes. Merci encore :super:

Moune-be

Posté le 27/06/2008 14:24:37

Désolée, je me suis réjoui trop vite, je suis toujours infestée, j'ai analysé avec Windows Live OneCare et il est toujours là et aussi les fenêtres intempestives :sweat:

lien rag

Posté le 28/06/2008 11:36:45

Post moi un visuel des fenetres de Pubs en question

pour cela fais un screenshot :

qd la pub apparait press la touche Impr écran syst de ton clavier
ensuite ouvre Paint et dans le menu Edition selectionne coller
ensuite enregistre ta prise d'image collé sous Paint au format Jpg
Fais heberger sur ce site : http://mabul.org/ , puis colle le lien sur ta prochaine réponse

[usines] Dell chercherait à vendre des usines

[fai] Free ne verrouille pas assez ses programmes classés X

[transports] Air France teste la carte d'embarquement électronique sur mobile

[alerte] 440 000 ultraportables de Sony suspectés de surchauffe

[enchères] Les brocanteurs assignent eBay en justice

[pc portables] Dell entre dans l'arène des Eee PC sans tambour ni trompette

[politique] Matignon dit oui à l'extension du bonus-malus écologique

[console] Microsoft baisse le prix de sa Xbox 360 au Japon et aux Etats-Unis