Sujet Précédent Sujet Suivant

Pub cid

larouge40 Messages postés 1 Statut Membre -  
 larouge40 -
Bonjour,
qui peut m'aider voici le rapport:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Phenom(tm) 9550 Quad-Core Processor )
BIOS : Default System BIOS
USER : Utilisateur ( Administrator )
BOOT : Normal boot
Antivirus : Norman Security Suite ver. 7.00 7.00 (Activated)
Firewall : AntiVirus Firewall 7.03 7.03 (Activated)
C:\ (Local Disk) - NTFS - Total:97 Go (Free:1 Go)
D:\ (Local Disk) - NTFS - Total:191 Go (Free:191 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 22/12/2008|13:46 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[15/09/2008|21:55] C:\Users\UTILIS~1\AppData\Local\Adobe
[12/09/2008|22:15] C:\Users\UTILIS~1\AppData\Local\Ahead
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Application Data
[12/09/2008|14:33] C:\Users\UTILIS~1\AppData\Local\ATI
[22/12/2008|08:58] C:\Users\UTILIS~1\AppData\Local\d3d9caps.dat
[12/12/2008|22:36] C:\Users\UTILIS~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|17:08] C:\Users\UTILIS~1\AppData\Local\eMule
[18/11/2008|12:18] C:\Users\UTILIS~1\AppData\Local\GDIPFONTCACHEV1.DAT
[12/09/2008|15:51] C:\Users\UTILIS~1\AppData\Local\Google
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Historique
[22/12/2008|09:09] C:\Users\UTILIS~1\AppData\Local\IconCache.db
[13/09/2008|10:10] C:\Users\UTILIS~1\AppData\Local\Logitech-LS
[18/11/2008|12:18] C:\Users\UTILIS~1\AppData\Local\Micro Application
[25/11/2008|18:25] C:\Users\UTILIS~1\AppData\Local\Microsoft
[25/10/2008|14:59] C:\Users\UTILIS~1\AppData\Local\Microsoft Games
[29/09/2008|16:43] C:\Users\UTILIS~1\AppData\Local\Microsoft Help
[12/09/2008|21:23] C:\Users\UTILIS~1\AppData\Local\Mozilla
[04/12/2008|10:13] C:\Users\UTILIS~1\AppData\Local\OD2
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Seven Zip
[22/12/2008|13:45] C:\Users\UTILIS~1\AppData\Local\Temp
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Temporary Internet Files
[17/09/2008|15:18] C:\Users\UTILIS~1\AppData\Local\TomTom
[13/09/2008|09:02] C:\Users\UTILIS~1\AppData\Local\VirtualStore
[30/11/2008|16:35] C:\Users\UTILIS~1\AppData\Local\Yahoo

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[22/12/2008 09:17][--a------] C:\Windows\tasks\Scheduled scanning task.job
[22/12/2008 13:35][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{FFEBC8C9-A0D5-4E4C-8CFD-BCAF747AB979}.job
[22/12/2008 09:16][--ah-----] C:\Windows\tasks\SA.DAT
[18/12/2008 22:38][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[12/09/2008|14:32] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[07/11/2008|22:05] C:\ProgramData\Adobe
[18/11/2008|12:16] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[01/08/2008|11:18] C:\ProgramData\ATI
[12/09/2008|14:24] C:\ProgramData\Bureau
[22/12/2008|09:11] C:\ProgramData\byte loud style cool
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[29/11/2008|11:38] C:\ProgramData\Downloaded Installations
[14/09/2008|17:08] C:\ProgramData\eMule
[13/09/2008|12:04] C:\ProgramData\ezsidmv.dat
[12/09/2008|14:24] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[12/09/2008|14:31] C:\ProgramData\fsc-reg
[15/12/2008|08:48] C:\ProgramData\F-Secure
[15/12/2008|08:47] C:\ProgramData\fssg
[12/09/2008|14:29] C:\ProgramData\Google
[30/10/2008|13:15] C:\ProgramData\Logishrd
[14/09/2008|13:53] C:\ProgramData\Logitech
[19/09/2008|15:53] C:\ProgramData\ma-config.com
[12/09/2008|14:24] C:\ProgramData\Menu D‚marrer
[19/12/2008|07:47] C:\ProgramData\Messenger Plus!
[27/11/2008|22:04] C:\ProgramData\Microsoft
[11/12/2008|22:51] C:\ProgramData\Microsoft Help
[12/09/2008|14:24] C:\ProgramData\ModŠles
[01/08/2008|11:25] C:\ProgramData\Nero
[08/12/2008|07:39] C:\ProgramData\Rule Meet Debug.k6ghya9
[15/12/2008|09:36] C:\ProgramData\settingssendtwo
[13/09/2008|12:03] C:\ProgramData\Skype
[16/12/2008|17:45] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|14:02] C:\ProgramData\Start Menu
[08/12/2008|07:39] C:\ProgramData\Start pile pile.pnubtlp
[30/11/2008|15:19] C:\ProgramData\Start pile pile.q2f5v0x
[08/12/2008|07:39] C:\ProgramData\Start pile pile.r7z1p8d
[16/12/2008|18:07] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[17/09/2008|20:02] C:\ProgramData\TomTom
[18/12/2008|13:11] C:\ProgramData\WLInstaller
[30/11/2008|16:35] C:\ProgramData\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files

[14/09/2008|17:04] C:\Program Files\7-Zip
[12/09/2008|14:32] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[07/11/2008|22:04] C:\Program Files\Adobe
[30/11/2008|21:41] C:\Program Files\aMSN
[01/08/2008|11:17] C:\Program Files\ATI
[01/08/2008|11:18] C:\Program Files\ATI Technologies
[16/12/2008|08:43] C:\Program Files\CCleaner
[29/11/2008|10:29] C:\Program Files\Common Files
[14/09/2008|17:08] C:\Program Files\eMule
[07/11/2008|16:37] C:\Program Files\epson
[12/09/2008|14:24] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/09/2008|14:31] C:\Program Files\Fujitsu Siemens Computers
[18/09/2008|06:30] C:\Program Files\Google
[16/12/2008|18:22] C:\Program Files\InstallShield Installation Information
[18/11/2008|12:17] C:\Program Files\Internet Explorer
[07/12/2008|00:12] C:\Program Files\Java
[30/10/2008|13:15] C:\Program Files\Logitech
[19/09/2008|15:53] C:\Program Files\ma-config.com
[18/12/2008|12:21] C:\Program Files\Messenger Plus! Live
[18/11/2008|12:13] C:\Program Files\Micro Application
[18/12/2008|09:15] C:\Program Files\Microsoft
[15/09/2008|15:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[01/08/2008|11:29] C:\Program Files\Microsoft Office
[22/10/2008|08:14] C:\Program Files\Microsoft Silverlight
[12/09/2008|14:32] C:\Program Files\Microsoft Works
[01/08/2008|11:29] C:\Program Files\Microsoft.NET
[21/01/2008|03:35] C:\Program Files\Movie Maker
[16/12/2008|18:07] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[12/09/2008|15:57] C:\Program Files\MSXML 4.0
[01/08/2008|11:25] C:\Program Files\Nero
[15/12/2008|08:26] C:\Program Files\Norman
[15/12/2008|08:47] C:\Program Files\Orange
[18/11/2008|12:29] C:\Program Files\PhotoFiltre
[12/09/2008|14:29] C:\Program Files\Picasa2
[24/11/2008|19:29] C:\Program Files\QuickTime
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[13/09/2008|12:03] C:\Program Files\Skype
[16/12/2008|17:46] C:\Program Files\Spybot - Search & Destroy
[25/11/2008|20:04] C:\Program Files\Steam
[30/11/2008|16:02] C:\Program Files\StuffPlug3
[17/09/2008|20:02] C:\Program Files\TomTom HOME
[17/09/2008|21:47] C:\Program Files\TomTom HOME 2
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[13/09/2008|09:06] C:\Program Files\VideoLAN
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[18/12/2008|13:11] C:\Program Files\Windows Live
[22/12/2008|09:11] C:\Program Files\Windows Live Safety Center
[18/12/2008|10:31] C:\Program Files\Windows Live SkyDrive
[11/12/2008|23:26] C:\Program Files\Windows Mail
[21/01/2008|03:35] C:\Program Files\Windows Media Player
[12/09/2008|14:24] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar
[30/11/2008|16:36] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[07/11/2008|22:05] C:\Program Files\Common Files\Adobe
[01/08/2008|11:29] C:\Program Files\Common Files\DESIGNER
[12/09/2008|14:31] C:\Program Files\Common Files\Fujitsu Siemens Computers
[18/11/2008|12:16] C:\Program Files\Common Files\InstallShield
[12/09/2008|22:41] C:\Program Files\Common Files\Java
[30/10/2008|13:15] C:\Program Files\Common Files\LogiShrd
[18/12/2008|13:12] C:\Program Files\Common Files\microsoft shared
[01/08/2008|11:25] C:\Program Files\Common Files\Nero
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[13/09/2008|12:03] C:\Program Files\Common Files\Skype
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[21/01/2008|03:35] C:\Program Files\Common Files\System
[29/11/2008|10:29] C:\Program Files\Common Files\Windows Live
[18/12/2008|10:31] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 79 Processes )

iexplore.exe ~ [PID:2784]
iexplore.exe ~ [PID:4972]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\Rule Meet Debug.k6ghya9
C:\ProgramData\Start pile pile.pnubtlp
C:\ProgramData\Start pile pile.q2f5v0x
C:\ProgramData\Start pile pile.r7z1p8d

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\byte loud style cool
C:\ProgramData\byte loud style cool\test creative.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"style cool 2 city"="\"C:\\ProgramData\\Rule Meet Debug.k6ghya9\""
"README THAT"="\"C:\\ProgramData\\Start pile pile.r7z1p8d\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-22 13:47:19
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 107

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:1824][D:33]-> C:\Users\UTILIS~1\AppData\Local\Temp
[F:112][D:1]-> C:\Users\UTILIS~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:756][D:8]-> C:\Users\UTILIS~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:4][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 22/12/2008|13:48 - Option : [1]

--------------------\\ Fin du rapport a 13:48:46
[ UAC => 1 ]
A voir également:

5 réponses

Réponse 1 / 5
anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
 
Bonjour larouge40,

Fais un clic-droit sur le raccourci de Lop S&D et choisis "Exécuter en temps qu'administrateur"
Choisis cette fois-ci l'option 2 (Suppression)

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré (C:\lopR.txt)

0
larouge40
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:15:36, on 23/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\conime.exe
C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&rlz=1T4FUJE_frFR292FR292&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RtHDVCpl] "C:\Windows\RtHDVCpl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [Google EULA Launcher] "c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe" IE PA
O4 - HKLM\..\Run: [Skytel] "C:\Windows\Skytel.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] "C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" /F "C:\Windows\TEMP\E_SA551.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.serviceshub.microsoft.com/supportforbusiness/create
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resource/download/scanner/fr-fr/wlscctrl2.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: F-Secure BlackLight Sensor - F-Secure Corporation - C:\Windows\TEMP\F-Secure\Anti-Virus\fsblsrv.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
0
Réponse 2 / 5
larouge40
 
voici mon rapport merci --------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Phenom(tm) 9550 Quad-Core Processor )
BIOS : Default System BIOS
USER : Utilisateur ( Administrator )
BOOT : Normal boot
Antivirus : Norman Security Suite ver. 7.00 7.00 (Activated)
Firewall : AntiVirus Firewall 7.03 7.03 (Activated)
C:\ (Local Disk) - NTFS - Total:97 Go (Free:1 Go)
D:\ (Local Disk) - NTFS - Total:191 Go (Free:191 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 22/12/2008|19:48 )

[ UAC => 1 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\ProgramData\byte loud style cool\test creative.exe
Supprime! - C:\ProgramData\Rule Meet Debug.k6ghya9
Supprime! - C:\ProgramData\Start pile pile.pnubtlp
Supprime! - C:\ProgramData\Start pile pile.q2f5v0x
Supprime! - C:\ProgramData\Start pile pile.r7z1p8d
Supprime! - C:\ProgramData\byte loud style cool
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans Local

[15/09/2008|21:55] C:\Users\UTILIS~1\AppData\Local\Adobe
[12/09/2008|22:15] C:\Users\UTILIS~1\AppData\Local\Ahead
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Application Data
[12/09/2008|14:33] C:\Users\UTILIS~1\AppData\Local\ATI
[22/12/2008|08:58] C:\Users\UTILIS~1\AppData\Local\d3d9caps.dat
[12/12/2008|22:36] C:\Users\UTILIS~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|17:08] C:\Users\UTILIS~1\AppData\Local\eMule
[18/11/2008|12:18] C:\Users\UTILIS~1\AppData\Local\GDIPFONTCACHEV1.DAT
[12/09/2008|15:51] C:\Users\UTILIS~1\AppData\Local\Google
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Historique
[22/12/2008|15:04] C:\Users\UTILIS~1\AppData\Local\IconCache.db
[13/09/2008|10:10] C:\Users\UTILIS~1\AppData\Local\Logitech-LS
[18/11/2008|12:18] C:\Users\UTILIS~1\AppData\Local\Micro Application
[25/11/2008|18:25] C:\Users\UTILIS~1\AppData\Local\Microsoft
[25/10/2008|14:59] C:\Users\UTILIS~1\AppData\Local\Microsoft Games
[29/09/2008|16:43] C:\Users\UTILIS~1\AppData\Local\Microsoft Help
[12/09/2008|21:23] C:\Users\UTILIS~1\AppData\Local\Mozilla
[04/12/2008|10:13] C:\Users\UTILIS~1\AppData\Local\OD2
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Seven Zip
[22/12/2008|19:48] C:\Users\UTILIS~1\AppData\Local\Temp
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Temporary Internet Files
[17/09/2008|15:18] C:\Users\UTILIS~1\AppData\Local\TomTom
[13/09/2008|09:02] C:\Users\UTILIS~1\AppData\Local\VirtualStore
[30/11/2008|16:35] C:\Users\UTILIS~1\AppData\Local\Yahoo

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[22/12/2008 15:05][--a------] C:\Windows\tasks\Scheduled scanning task.job
[22/12/2008 19:03][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{FFEBC8C9-A0D5-4E4C-8CFD-BCAF747AB979}.job
[22/12/2008 15:05][--ah-----] C:\Windows\tasks\SA.DAT
[22/12/2008 15:04][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[12/09/2008|14:32] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[07/11/2008|22:05] C:\ProgramData\Adobe
[18/11/2008|12:16] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[01/08/2008|11:18] C:\ProgramData\ATI
[12/09/2008|14:24] C:\ProgramData\Bureau
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[29/11/2008|11:38] C:\ProgramData\Downloaded Installations
[14/09/2008|17:08] C:\ProgramData\eMule
[13/09/2008|12:04] C:\ProgramData\ezsidmv.dat
[12/09/2008|14:24] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[12/09/2008|14:31] C:\ProgramData\fsc-reg
[15/12/2008|08:48] C:\ProgramData\F-Secure
[15/12/2008|08:47] C:\ProgramData\fssg
[12/09/2008|14:29] C:\ProgramData\Google
[30/10/2008|13:15] C:\ProgramData\Logishrd
[14/09/2008|13:53] C:\ProgramData\Logitech
[19/09/2008|15:53] C:\ProgramData\ma-config.com
[12/09/2008|14:24] C:\ProgramData\Menu D‚marrer
[27/11/2008|22:04] C:\ProgramData\Microsoft
[11/12/2008|22:51] C:\ProgramData\Microsoft Help
[12/09/2008|14:24] C:\ProgramData\ModŠles
[01/08/2008|11:25] C:\ProgramData\Nero
[15/12/2008|09:36] C:\ProgramData\settingssendtwo
[13/09/2008|12:03] C:\ProgramData\Skype
[22/12/2008|19:41] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|14:02] C:\ProgramData\Start Menu
[16/12/2008|18:07] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[17/09/2008|20:02] C:\ProgramData\TomTom
[18/12/2008|13:11] C:\ProgramData\WLInstaller
[30/11/2008|16:35] C:\ProgramData\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files

[14/09/2008|17:04] C:\Program Files\7-Zip
[12/09/2008|14:32] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[07/11/2008|22:04] C:\Program Files\Adobe
[30/11/2008|21:41] C:\Program Files\aMSN
[01/08/2008|11:17] C:\Program Files\ATI
[01/08/2008|11:18] C:\Program Files\ATI Technologies
[16/12/2008|08:43] C:\Program Files\CCleaner
[29/11/2008|10:29] C:\Program Files\Common Files
[14/09/2008|17:08] C:\Program Files\eMule
[07/11/2008|16:37] C:\Program Files\epson
[12/09/2008|14:24] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/09/2008|14:31] C:\Program Files\Fujitsu Siemens Computers
[18/09/2008|06:30] C:\Program Files\Google
[16/12/2008|18:22] C:\Program Files\InstallShield Installation Information
[18/11/2008|12:17] C:\Program Files\Internet Explorer
[07/12/2008|00:12] C:\Program Files\Java
[30/10/2008|13:15] C:\Program Files\Logitech
[19/09/2008|15:53] C:\Program Files\ma-config.com
[18/11/2008|12:13] C:\Program Files\Micro Application
[18/12/2008|09:15] C:\Program Files\Microsoft
[15/09/2008|15:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[01/08/2008|11:29] C:\Program Files\Microsoft Office
[22/10/2008|08:14] C:\Program Files\Microsoft Silverlight
[12/09/2008|14:32] C:\Program Files\Microsoft Works
[01/08/2008|11:29] C:\Program Files\Microsoft.NET
[21/01/2008|03:35] C:\Program Files\Movie Maker
[16/12/2008|18:07] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[12/09/2008|15:57] C:\Program Files\MSXML 4.0
[01/08/2008|11:25] C:\Program Files\Nero
[15/12/2008|08:26] C:\Program Files\Norman
[15/12/2008|08:47] C:\Program Files\Orange
[18/11/2008|12:29] C:\Program Files\PhotoFiltre
[12/09/2008|14:29] C:\Program Files\Picasa2
[24/11/2008|19:29] C:\Program Files\QuickTime
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[13/09/2008|12:03] C:\Program Files\Skype
[22/12/2008|19:43] C:\Program Files\Spybot - Search & Destroy
[25/11/2008|20:04] C:\Program Files\Steam
[30/11/2008|16:02] C:\Program Files\StuffPlug3
[17/09/2008|20:02] C:\Program Files\TomTom HOME
[17/09/2008|21:47] C:\Program Files\TomTom HOME 2
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[13/09/2008|09:06] C:\Program Files\VideoLAN
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[18/12/2008|13:11] C:\Program Files\Windows Live
[22/12/2008|09:11] C:\Program Files\Windows Live Safety Center
[18/12/2008|10:31] C:\Program Files\Windows Live SkyDrive
[11/12/2008|23:26] C:\Program Files\Windows Mail
[21/01/2008|03:35] C:\Program Files\Windows Media Player
[12/09/2008|14:24] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar
[30/11/2008|16:36] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[07/11/2008|22:05] C:\Program Files\Common Files\Adobe
[01/08/2008|11:29] C:\Program Files\Common Files\DESIGNER
[12/09/2008|14:31] C:\Program Files\Common Files\Fujitsu Siemens Computers
[18/11/2008|12:16] C:\Program Files\Common Files\InstallShield
[12/09/2008|22:41] C:\Program Files\Common Files\Java
[30/10/2008|13:15] C:\Program Files\Common Files\LogiShrd
[18/12/2008|13:12] C:\Program Files\Common Files\microsoft shared
[01/08/2008|11:25] C:\Program Files\Common Files\Nero
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[13/09/2008|12:03] C:\Program Files\Common Files\Skype
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[21/01/2008|03:35] C:\Program Files\Common Files\System
[29/11/2008|10:29] C:\Program Files\Common Files\Windows Live
[18/12/2008|10:31] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 82 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-22 19:49:17
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 107

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !
--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Phenom(tm) 9550 Quad-Core Processor )
BIOS : Default System BIOS
USER : Utilisateur ( Administrator )
BOOT : Normal boot
Antivirus : Norman Security Suite ver. 7.00 7.00 (Activated)
Firewall : AntiVirus Firewall 7.03 7.03 (Activated)
C:\ (Local Disk) - NTFS - Total:97 Go (Free:1 Go)
D:\ (Local Disk) - NTFS - Total:191 Go (Free:191 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 22/12/2008|19:48 )

[ UAC => 1 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\ProgramData\byte loud style cool\test creative.exe
Supprime! - C:\ProgramData\Rule Meet Debug.k6ghya9
Supprime! - C:\ProgramData\Start pile pile.pnubtlp
Supprime! - C:\ProgramData\Start pile pile.q2f5v0x
Supprime! - C:\ProgramData\Start pile pile.r7z1p8d
Supprime! - C:\ProgramData\byte loud style cool
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans Local

[15/09/2008|21:55] C:\Users\UTILIS~1\AppData\Local\Adobe
[12/09/2008|22:15] C:\Users\UTILIS~1\AppData\Local\Ahead
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Application Data
[12/09/2008|14:33] C:\Users\UTILIS~1\AppData\Local\ATI
[22/12/2008|08:58] C:\Users\UTILIS~1\AppData\Local\d3d9caps.dat
[12/12/2008|22:36] C:\Users\UTILIS~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|17:08] C:\Users\UTILIS~1\AppData\Local\eMule
[18/11/2008|12:18] C:\Users\UTILIS~1\AppData\Local\GDIPFONTCACHEV1.DAT
[12/09/2008|15:51] C:\Users\UTILIS~1\AppData\Local\Google
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Historique
[22/12/2008|15:04] C:\Users\UTILIS~1\AppData\Local\IconCache.db
[13/09/2008|10:10] C:\Users\UTILIS~1\AppData\Local\Logitech-LS
[18/11/2008|12:18] C:\Users\UTILIS~1\AppData\Local\Micro Application
[25/11/2008|18:25] C:\Users\UTILIS~1\AppData\Local\Microsoft
[25/10/2008|14:59] C:\Users\UTILIS~1\AppData\Local\Microsoft Games
[29/09/2008|16:43] C:\Users\UTILIS~1\AppData\Local\Microsoft Help
[12/09/2008|21:23] C:\Users\UTILIS~1\AppData\Local\Mozilla
[04/12/2008|10:13] C:\Users\UTILIS~1\AppData\Local\OD2
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Seven Zip
[22/12/2008|19:48] C:\Users\UTILIS~1\AppData\Local\Temp
[12/09/2008|14:32] C:\Users\UTILIS~1\AppData\Local\Temporary Internet Files
[17/09/2008|15:18] C:\Users\UTILIS~1\AppData\Local\TomTom
[13/09/2008|09:02] C:\Users\UTILIS~1\AppData\Local\VirtualStore
[30/11/2008|16:35] C:\Users\UTILIS~1\AppData\Local\Yahoo

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[22/12/2008 15:05][--a------] C:\Windows\tasks\Scheduled scanning task.job
[22/12/2008 19:03][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{FFEBC8C9-A0D5-4E4C-8CFD-BCAF747AB979}.job
[22/12/2008 15:05][--ah-----] C:\Windows\tasks\SA.DAT
[22/12/2008 15:04][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[12/09/2008|14:32] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[07/11/2008|22:05] C:\ProgramData\Adobe
[18/11/2008|12:16] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[01/08/2008|11:18] C:\ProgramData\ATI
[12/09/2008|14:24] C:\ProgramData\Bureau
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[29/11/2008|11:38] C:\ProgramData\Downloaded Installations
[14/09/2008|17:08] C:\ProgramData\eMule
[13/09/2008|12:04] C:\ProgramData\ezsidmv.dat
[12/09/2008|14:24] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[12/09/2008|14:31] C:\ProgramData\fsc-reg
[15/12/2008|08:48] C:\ProgramData\F-Secure
[15/12/2008|08:47] C:\ProgramData\fssg
[12/09/2008|14:29] C:\ProgramData\Google
[30/10/2008|13:15] C:\ProgramData\Logishrd
[14/09/2008|13:53] C:\ProgramData\Logitech
[19/09/2008|15:53] C:\ProgramData\ma-config.com
[12/09/2008|14:24] C:\ProgramData\Menu D‚marrer
[27/11/2008|22:04] C:\ProgramData\Microsoft
[11/12/2008|22:51] C:\ProgramData\Microsoft Help
[12/09/2008|14:24] C:\ProgramData\ModŠles
[01/08/2008|11:25] C:\ProgramData\Nero
[15/12/2008|09:36] C:\ProgramData\settingssendtwo
[13/09/2008|12:03] C:\ProgramData\Skype
[22/12/2008|19:41] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|14:02] C:\ProgramData\Start Menu
[16/12/2008|18:07] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[17/09/2008|20:02] C:\ProgramData\TomTom
[18/12/2008|13:11] C:\ProgramData\WLInstaller
[30/11/2008|16:35] C:\ProgramData\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files

[14/09/2008|17:04] C:\Program Files\7-Zip
[12/09/2008|14:32] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[07/11/2008|22:04] C:\Program Files\Adobe
[30/11/2008|21:41] C:\Program Files\aMSN
[01/08/2008|11:17] C:\Program Files\ATI
[01/08/2008|11:18] C:\Program Files\ATI Technologies
[16/12/2008|08:43] C:\Program Files\CCleaner
[29/11/2008|10:29] C:\Program Files\Common Files
[14/09/2008|17:08] C:\Program Files\eMule
[07/11/2008|16:37] C:\Program Files\epson
[12/09/2008|14:24] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/09/2008|14:31] C:\Program Files\Fujitsu Siemens Computers
[18/09/2008|06:30] C:\Program Files\Google
[16/12/2008|18:22] C:\Program Files\InstallShield Installation Information
[18/11/2008|12:17] C:\Program Files\Internet Explorer
[07/12/2008|00:12] C:\Program Files\Java
[30/10/2008|13:15] C:\Program Files\Logitech
[19/09/2008|15:53] C:\Program Files\ma-config.com
[18/11/2008|12:13] C:\Program Files\Micro Application
[18/12/2008|09:15] C:\Program Files\Microsoft
[15/09/2008|15:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[01/08/2008|11:29] C:\Program Files\Microsoft Office
[22/10/2008|08:14] C:\Program Files\Microsoft Silverlight
[12/09/2008|14:32] C:\Program Files\Microsoft Works
[01/08/2008|11:29] C:\Program Files\Microsoft.NET
[21/01/2008|03:35] C:\Program Files\Movie Maker
[16/12/2008|18:07] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[12/09/2008|15:57] C:\Program Files\MSXML 4.0
[01/08/2008|11:25] C:\Program Files\Nero
[15/12/2008|08:26] C:\Program Files\Norman
[15/12/2008|08:47] C:\Program Files\Orange
[18/11/2008|12:29] C:\Program Files\PhotoFiltre
[12/09/2008|14:29] C:\Program Files\Picasa2
[24/11/2008|19:29] C:\Program Files\QuickTime
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[13/09/2008|12:03] C:\Program Files\Skype
[22/12/2008|19:43] C:\Program Files\Spybot - Search & Destroy
[25/11/2008|20:04] C:\Program Files\Steam
[30/11/2008|16:02] C:\Program Files\StuffPlug3
[17/09/2008|20:02] C:\Program Files\TomTom HOME
[17/09/2008|21:47] C:\Program Files\TomTom HOME 2
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[13/09/2008|09:06] C:\Program Files\VideoLAN
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[18/12/2008|13:11] C:\Program Files\Windows Live
[22/12/2008|09:11] C:\Program Files\Windows Live Safety Center
[18/12/2008|10:31] C:\Program Files\Windows Live SkyDrive
[11/12/2008|23:26] C:\Program Files\Windows Mail
[21/01/2008|03:35] C:\Program Files\Windows Media Player
[12/09/2008|14:24] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar
[30/11/2008|16:36] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[07/11/2008|22:05] C:\Program Files\Common Files\Adobe
[01/08/2008|11:29] C:\Program Files\Common Files\DESIGNER
[12/09/2008|14:31] C:\Program Files\Common Files\Fujitsu Siemens Computers
[18/11/2008|12:16] C:\Program Files\Common Files\InstallShield
[12/09/2008|22:41] C:\Program Files\Common Files\Java
[30/10/2008|13:15] C:\Program Files\Common Files\LogiShrd
[18/12/2008|13:12] C:\Program Files\Common Files\microsoft shared
[01/08/2008|11:25] C:\Program Files\Common Files\Nero
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[13/09/2008|12:03] C:\Program Files\Common Files\Skype
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[21/01/2008|03:35] C:\Program Files\Common Files\System
[29/11/2008|10:29] C:\Program Files\Common Files\Windows Live
[18/12/2008|10:31] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 82 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-22 19:49:17
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 107

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:8][D:5]-> C:\Users\UTILIS~1\AppData\Local\Temp
[F:31][D:1]-> C:\Users\UTILIS~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:20][D:4]-> C:\Users\UTILIS~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:4][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 22/12/2008|13:48 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 22/12/2008|19:50 - Option : [2]

--------------------\\ Fin du rapport a 19:50:07
[ UAC => 1 ]

[F:8][D:5]-> C:\Users\UTILIS~1\AppData\Local\Temp
[F:31][D:1]-> C:\Users\UTILIS~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:20][D:4]-> C:\Users\UTILIS~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:4][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 22/12/2008|13:48 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 22/12/2008|19:50 - Option : [2]

--------------------\\ Fin du rapport a 19:50:07
[ UAC => 1
0
Réponse 3 / 5
anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
 
Re,

Très bien, tu ne devrais plus avoir de pubs cid

Pour vérifier qu'il n'y a pas d'autres infections :

Télécharge hijackthis (logiciel de diagnostique) sur ton bureau :
HijackThis

Installe le, lance le et clique sur "Do a system scan and save a logfile".
Fais un copier-coller du rapport entier sur le forum

0
larouge40
 
je te remerci voici l'autre rappport:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:15:36, on 23/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\conime.exe
C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&rlz=1T4FUJE_frFR292FR292&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RtHDVCpl] "C:\Windows\RtHDVCpl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [Google EULA Launcher] "c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe" IE PA
O4 - HKLM\..\Run: [Skytel] "C:\Windows\Skytel.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] "C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" /F "C:\Windows\TEMP\E_SA551.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.serviceshub.microsoft.com/supportforbusiness/create
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resource/download/scanner/fr-fr/wlscctrl2.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: F-Secure BlackLight Sensor - F-Secure Corporation - C:\Windows\TEMP\F-Secure\Anti-Virus\fsblsrv.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
0
Réponse 4 / 5
anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
 
Très bien, ton ordinateur n'est plus infecté !

Avant de retourner surfer sur internet, il y a quelques petites choses que tu dois faire pour finir le nettoyage et améliorer sensiblement la sécurité de ton ordinateur, ça t'évitera peut-être de devoir revenir ici avec une nouvelle infection dans le futur ;) Mais sache qu'aucun logiciel de sécurité ne te protègera à 100%, ce qui fait la différence, c'est ta vigilance lorsque tu télécharges ou installes quelque chose : pour en savoir plus, je t'invite à bien lire la page indiquée tout en bas de ce message (6).

1) Les barres d'outils

Souvent installées avec d'autres logiciels sans que l'utilisateur y fasse attention, les barres d'outils se multiplient sur les ordinateurs et ont deux résultats : ralentir les ordinateurs et provoquer des bugs des navigateurs.
Si tu n'utilises pas la tienne (barre d'outil Google), n'hésite pas à la désinstaller. Sinon passe à la suite ;)

2) Sécurise ton ordinateur

• Pour naviguer sur internet plus en sécurité et à l’abri des publicités, je te conseille d’installer et d'utiliser le navigateur Firefox 3 avec l’extension « AdBlockPlus ». Tu peux trouver des explications ici

• Adobe Reader n’est pas à jour, c’est une faille de sécurité. Désinstalle le en allant dans menu démarrer --> panneau de configuration --> ajout/suppression de programmes. Puis télécharge et installe la nouvelle version.

3) Relance Hijackthis (pour la dernière fois), fais "scan system only" et coche ces lignes (pas dangereuses mains inutiles) :

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: EoBho - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')

Si tu as bien mis à jour Adobe Reader comme je te l'ai recommandé, cette ligne devrait apparaitre, tu peux la cocher : O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

Coche également toutes les lignes commençant par 016

Ensuite, clique sur "Fix checked"

4) Télécharge ToolsCleaner sur ton Bureau pour nettoyer l'ordi de tous les outils qu'on a utilisé : ToolsCleaner
Lance le, clique sur Recherche et laisse le scan se finir, puis clique sur Suppression pour nettoyer.
Tu peux aussi supprimer les fichiers temporaires.
Ensuite, supprime manuellement ToolsCleaner (mets le à la corbeille).
S'il ne supprime pas tout, supprime manuellement ce qui reste.

5) Télécharge et installe CCleaner (si ce n’est déjà fait) : https://www.ccleaner.com/ccleaner/download

Lance CCleaner
Option --> avancé --> décoche « effacer uniquement les fichiers plus vieux que 48h »
Puis nettoyeur --> Analyse > Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche.
Enfin, registre --> corrige toutes les erreurs, et recommence jusqu'à ce qu'il ne trouve plus d'erreurs.

(Tu peux garder ce logiciel et l'utiliser régulièrement).

6) Pour finir le nettoyage, il faut désactiver puis réactiver la restauration système (pour créer un nouveau point de restauration sain et éviter le retour de l'infection).

• Menu démarrer --> clic droit sur ordinateur --> propriétés --> protection du système
• Désactive la restauration du système sur tous les lecteurs
• Clique sur OK.

Puis refais la manipulation inverse pour réactiver la restauration système.

7) Je t'invite enfin à visiter cette page qui t'apportera des informations de prévention et de protection contre les infections (environ 15 minutes de lecture très instructive et utile):
Prévention et sécurité sur internet

Bonne lecture, bon courage, et n'hésite pas à poser des questions en cas de besoin ;)
Pour finir, je te souhaite de joyeuses fêtes de fin d'année !
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 5
larouge40
 
je te remerci,ton aide ma était bien précieuse.bonnes fêtes de fin d'année.
0

Discussions similaires

Ouvrir un fichier .pub sans Publisher
baissaoui -
baissaoui -

0 réponse
Ouvrir document Publisher sans Publisher
Curtis Hayes -
Curtis Hayes -

7 réponses
lire un fichier .pub
xycoco -
Valou -

38 réponses
Lire, afficher, exécuter un fichier *.pub sans Publisher
jeannoellaurenti -
informatique_fujitsu -

1 réponse
Recherche nom acteur Pub
Visu -
Lorenzo -

4 réponses