Bonjour,
Je viens de scanner ma machine avec panda car mcaffee ne l’avait pas trouvé.
Il m’a trouvé winbutler et d’autres. Je suis allée dans le registre pour supprimer le dossier winbutler dans le 04 HKCU…
Sur le disque dur, c/ documents and settins / etc… il ne veut pas me supprimer le dossier ???
Après un nouveau scan il y est encore là et d’autres.
Est-ce qu’un homme ayant plus de connaissances en informatique peut m’aider SVP ?
A bientôt.
Voilà ce que PANDA VIRUS m’indique :
Menaces avec désinfection gratuite (1)
Niveau de risque moyen (1)
Trj/Rebooter.J Virus Latent(e) Masquer
+Infos
1. C:\Program Files\Navilog1\reboot.exe
Seulement pour les utilisateurs enregistrés.
Enregistrez-moi gratuitement - Je suis enregistré
Menaces désinfectées avec la version payante (22)
Niveau de risque élevé (1)
Adware/WinButl… Adware (logiciel publicitaire) Actif/Active Masquer
+Infos
1. C:\DOCUMENTS AND SETTINGS\HP_PROPRIÉTAIRE\APP...CATION DATA\WINBUTLER\WINBUTLER.EXE
Niveau de risque moyen (1)
Adware/NaviPro… Adware (logiciel publicitaire) Latent(e) Afficher
+Infos
Niveau de risque faible (20)
Cookie/Xiti Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@xiti[1].txt
- C:\Documents and Settings\HP_Propriétaire\App…2gu.default\cookies.txt[.xiti.com/]
- C:\Documents and Settings\administrateur enfa…m4h.default\cookies.txt[.xiti.com/]
Application/Pr… Application de surveillance Latent(e) Masquer
+Infos
1. C:\System Volume Information\_restore{5864E19...55-3BCEB0D80CFD}\RP222\A0044501.exe
Cookie/Serving… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...t\cookies.txt[.bs.serving-sys.com/]
Application/Ki… Application de surveillance Latent(e) Masquer
+Infos
1. C:\hp\bin\KillIt.exe
Cookie/Adtech Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...4h.default\cookies.txt[.adtech.de/]
Cookie/Smartad… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\HP_Propriétaire\App...lt\cookies.txt[.smartadserver.com/]
- C:\Documents and Settings\administrateur enfa…lt\cookies.txt[.smartadserver.com/]
Cookie/Serving… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...ault\cookies.txt[.serving-sys.com/]
Cookie/Weboram… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa....default\cookies.txt[.weborama.fr/]
- C:\Documents and Settings\HP_Propriétaire\App…default\cookies.txt[.weborama.fr/]
Cookie/Tradedo… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...ult\cookies.txt[.tradedoubler.com/]
Cookie/Adviva Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...h.default\cookies.txt[.adviva.net/]
Cookie/Tribalf… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...ult\cookies.txt[.tribalfusion.com/]
Cookie/Adverti… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...ault\cookies.txt[.advertising.com/]
Cookie/RealMed… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...ult\cookies.txt[.247realmedia.com/]
Cookie/Atlas D… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...4h.default\cookies.txt[.atdmt.com/]
Cookie/fe.lea… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...fault\cookies.txt[fe.lea.lycos.fr/]
Application/My… Application de surveillance Actif/Active Masquer
+Infos
1. C:\PROGRAM FILES\ASKTBAR\SRCHASTT\1.BIN\A5SRCHAS.DLL
Cookie/did-it Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\HP_Propriétaire\App...u.default\cookies.txt[.did-it.com/]
Cookie/Doublec… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...ault\cookies.txt[.doubleclick.net/]
Cookie/Bluestr… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\administrateur enfa...fault\cookies.txt[.bluestreak.com/]
Cookie/Mysearc… Cookie de surveillance Latent(e) Masquer
+Infos
1. C:\Documents and Settings\HP_Propriétaire\Coo...ies\hp_propriétaire@mysearch[1].txt
J'ai ensuite fait HJACKTHIS :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:28:45, on 09/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Pack Securite\Common\FCH32.EXE
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\fnacVOD\fnacVOD.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Neuf\Media Center\MediaCenter.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Nosibay\Ma Fnac Music\launcher.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Documents and Settings\HP_Propriétaire\Application Data\WinButler\WinButler.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Orange\Logiciel de Synchronisation Orange\Voxsync.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Program Files\Orange\Logiciel de Synchronisation Orange\SyncManager.exe
C:\Program Files\Neuf\Media Center\httpd\httpd.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Nosibay\Ma Fnac Music\Ma Fnac Music.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Neuf\Media Center\httpd\httpd.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Documents and Settings\HP_Propriétaire\Bureau\L2008promonetPandaFrancia_FR.exe
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\WZSE0.TMP\setup.exe
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\WZSE0.TMP\setup.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = ie.redirect.hp.com…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = recherche.neuf.fr…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = recherche.neuf.fr…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = mystart.incredimail.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = recherche.neuf.fr…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Aide pour le lien d’Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O4 - HKLM…\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe”
O4 - HKLM…\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM…\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM…\Run: [HPHUPD06] c:\Program Files\HP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM…\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM…\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM…\Run: [ISUSScheduler] “C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe” -start
O4 - HKLM…\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM…\Run: [VTTimer] VTTimer.exe
O4 - HKLM…\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM…\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM…\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM…\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM…\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM…\Run: [Reminder] “C:\Windows\Creator\Remind_XP.exe”
O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
O4 - HKLM…\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,BluetoothAuthenticationAgent
O4 - HKLM…\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM…\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM…\Run: [F-Secure Manager] “C:\Program Files\Pack Securite\Common\FSM32.EXE” /splash
O4 - HKLM…\Run: [F-Secure TNB] “C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe” /CHECKALL /WAITFORSW
O4 - HKLM…\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM…\Run: [fnacVOD] C:\Program Files\fnacVOD\fnacVOD.exe
O4 - HKLM…\Run: [NBKeyScan] “C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe”
O4 - HKLM…\Run: [!AVG Anti-Spyware] “C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe” /minimized
O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe”
O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”
O4 - HKLM…\Run: [TkBellExe] “C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe” -osboot
O4 - HKLM…\Run: [CrocPopup+ ] C:\PROGRA~1\CROCPO~1\CROCPO~1.exe
O4 - HKCU…\Run: [ccleaner] “C:\Program Files\CCleaner\ccleaner.exe” /AUTO
O4 - HKCU…\Run: [Neuf Media Center] “C:\Program Files\Neuf\Media Center\MediaCenter.exe”
O4 - HKCU…\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU…\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU…\Run: [DelayShred] “C:\Program Files\McAfee\MSHR\ShrCL.EXE” /P7 /q C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\H9WSZRLA\APPLIC~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\9B608DEF\VIEWVO~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\9B608DEF\HIST0_~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\T8TSVSN4\PC_1_~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\H9WSZRLA\LOADIN~2.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\H9WSZRLA\BOOTST~2.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Word8.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\SXH4ICQ8\VIEWVO~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\YFZEMYMO\PC_1_~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\MEXZU2E5\VIEWVO~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\S8FDPHHU\PC_1_~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\09L7O97O\VIEWVO~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\ZSROLC4O\PC_1_~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~
O4 - HKCU…\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU…\Run: [Ma Fnac Music] “C:\Program Files\Nosibay\Ma Fnac Music\launcher.exe”
O4 - HKCU…\Run: [BitTorrent] “C:\Program Files\BitTorrent\bittorrent.exe” --force_start_minimized
O4 - HKCU…\Run: [TomTomHOME.exe] “C:\Program Files\TomTom HOME 2\HOMERunner.exe”
O4 - HKCU…\Run: [WinButler] C:\Documents and Settings\HP_Propriétaire\Application Data\WinButler\WinButler.exe
O4 - HKCU…\Run: [AlcoholAutomount] “C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe” /automount
O4 - HKCU…\Run: [Widget Neuf] “C:\Program Files\Neuf\Widget Neuf\9widget.exe”
O4 - HKCU…\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU…\RunOnce: [DelayShred] “c:\program files\mcafee\mshr\ShrCL.EXE” /P7 /q C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\Q3X2TVKS\PUSH_Z~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\Q3X2TVKS\USER_Z~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\71ZC1UUM\AD_ZON~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\1XA5KJI9\STARTC~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\HSPERF~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\QOKT57UJ\PUSH_Z~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\QOKT57UJ\USER_Z~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\1OVX83W2\AD_ZON~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\61DRZZSU\STARTC~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\LSBURN~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\hpodvd09.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\TLYBJ2NU\PUSH_Z~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\TLYBJ2NU\USER_Z~1.SH! C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\Content.IE5\AT8QRDKF\AD_ZON~
O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE RÉSEAU’)
O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)
O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: Y’z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logiciel de Synchronisation Orange.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\Program Files\IncrediMail\bin\resources\WebMenuImg.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Parental… - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra ‘Tools’ menuitem: Parental… - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - download.mcafee.com…
O23 - Service: McAfee Application Installer Cleanup (0240091209087605) (0240091209087605mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP\024009~1.EXE (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
–
End of file - 17500 bytes
Bonjour,
pour pouvoir le supprimer il faut d’abord arrêter le service. Alt + Ctrl + Suppr, onglet “processus”. Tu cherche un truc qui doit s’appeler Winbuler.exe et tu clique sur arrêter le processus. Ensuite tu pourra de dé-installer par le panneau de configuration “ajout suppression de programmes”. Car il semble que ça soit un logiciel.
Si ça ne marche pas, essaye en mode sans échec (touche F8 après le chargement du bios)