Problème de système avec fixnavi+highjack

Salut et merci pour ton outil,cela a bien règlé mon problème.J'ai pu apres installer une version originale avec succès.
.....mais je comprend pas,mon défragmenteur ne fontionne tjrs pas et ni mes update car internet explorer n'est pas capable d'afficher aucune pages.....??...Je pense que le problème est dans Iexplorer,mais je trouve pas ou!!

Et merci encore pour ton aide!!

Salut Destrio5,

-désole,j'ai assayé ton lien,mais il ne fonctionnne pas...je ne trouve pas le rsit tool que tu me demande de téléchargé..j'en avais trouvé un,mais je l'ai scanné avec avira antivir avant,qui m'a trouvé une infection,donc je ne l'ai pas installé.

Est ce que tu pourrais m'indiquer un endroit ou le trouver,j'ai chercher sur Comment Ca Marche,mais il ne l'a pas je pense bien!!!

merci beaucoup de m'aider avec ce probleme.

Salut Destrio5,

dsl,mais ton lien ne fonctionnais vraiment pas chez moi avec mon firefox.J'ai quand même pu le faire downloader par quelqu'un qui me l'a envoyé pas msn...


-Voilà les logs que tu me demandais:


#1

Logfile of random's system information tool 1.05 (written by random/random)
Run by j-f at 2009-01-04 15:20:15
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 4 GB (20%) free of 19 GB
Total RAM: 759 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:21:08, on 2009-01-04
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Documents and Settings\j-f\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\j-f.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {E5AF0624-F539-47D9-BA37-D8B339E858F4} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

Quand je clique sur le setup,le prossessus demarre,mais il ne se passe rien?? Que ce que je fait???

Je ne comprend plus rien,je sais pas pourquoi,mais on dirais que firefox ne veux me donner acces au pages que tu m'envoi,mais j'ai acces a comment ca marche,mon couriel et d'autre site.J'ai aussi été obligé de downloader mbam sur un autre ordinateur.....je ne sais pas ce qui se passe,en temps normal,je devrais y avoir acces??

et bien,ca marché,mais apres avoir desactivé mon anti virus,combofix a trouver un rootkit et m'a demandé de redemarrer,apres mon anti virus c'est mis a capoter pis detecter tout plein d'affaire,surement a cause de combofix

voici quand même mon fix


ComboFix 09-01-02.01 - j-f 2009-01-04 21:16:37.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.759.500 [GMT -5:00]
Lancé depuis: C:\Documents and Settings\j-f\Bureau\CF-xpoint.exe
* Resident AV is active

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\drivers\TDSSxxou.sys
C:\WINDOWS\system32\dumphive.exe
C:\WINDOWS\system32\IEDFix.exe
C:\WINDOWS\system32\Process.exe
C:\WINDOWS\system32\SrchSTS.exe
C:\WINDOWS\system32\TDSSehys.log
C:\WINDOWS\system32\TDSSirxy.dll
C:\WINDOWS\system32\TDSSktpo.dll
C:\WINDOWS\system32\TDSSnmxh.log
C:\WINDOWS\system32\TDSSocun.dll
C:\WINDOWS\system32\TDSSqqon.dll
C:\WINDOWS\system32\TDSSravu.dll
C:\WINDOWS\system32\TDSSsahc.dll
C:\WINDOWS\system32\TDSSwghd.log
C:\WINDOWS\system32\TDSSwupe.dat
C:\WINDOWS\system32\VACFix.exe
C:\WINDOWS\system32\VCCLSID.exe
C:\WINDOWS\system32\WS2Fix.exe

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_TDSSserv.sys
-------\Legacy_TDSSserv.sys


((((((((((((((((((((((((((((( Fichiers créés du 2008-12-05 au 2009-01-05 ))))))))))))))))))))))))))))))))))))
.

2009-01-04 15:20 . 2009-01-04 15:21 <REP> d----c--- C:\rsit
2009-01-02 23:19 . 2009-01-02 23:19 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2009-01-02 14:33 . 2009-01-02 14:33 <REP> d-------- C:\Documents and Settings\j-f\Application Data\Ahead
2009-01-02 14:30 . 2009-01-02 14:30 <REP> d-------- C:\Program Files\Nero
2008-12-30 14:57 . 2008-12-30 14:57 232 --ah-c--- C:\sqmdata00.sqm
2008-12-30 14:57 . 2008-12-30 14:57 172 --ah-c--- C:\sqmnoopt00.sqm
2008-12-30 14:29 . 2004-03-03 18:05 1,839,104 --a------ C:\WINDOWS\system32\NCTAudioFile2.dll
2008-12-30 14:29 . 2003-02-11 14:36 1,703,936 --a------ C:\WINDOWS\system32\NCTAudioFile.dll
2008-12-30 14:29 . 2003-02-11 14:38 892,928 --a------ C:\WINDOWS\system32\NCTAudioInformation.dll
2008-12-30 14:29 . 2003-02-11 14:39 647,168 --a------ C:\WINDOWS\system32\NCTAudioLibrary.dll
2008-12-30 14:29 . 2004-05-20 13:07 335,872 --a------ C:\WINDOWS\system32\NCTAudioVisualization2.dll
2008-12-30 14:29 . 2003-02-11 14:37 327,680 --a------ C:\WINDOWS\system32\NCTAudioGrabber.dll
2008-12-30 14:29 . 2004-03-02 19:07 315,392 --a------ C:\WINDOWS\system32\NCTAudioPlayer2.dll
2008-12-30 14:29 . 2004-03-02 19:14 307,200 --a------ C:\WINDOWS\system32\NCTAudioRecord2.dll
2008-12-30 14:29 . 2001-03-26 04:41 245,760 --a------ C:\WINDOWS\system32\mp4sds32.ax
2008-12-30 14:29 . 2004-05-20 14:24 196,608 --a------ C:\WINDOWS\system32\NCTWMAFile2.dll
2008-12-30 14:29 . 1999-05-06 23:00 140,288 --a------ C:\WINDOWS\system32\comdlg32.ocx
2008-12-30 14:24 . 2008-12-30 14:27 <REP> d-------- C:\Program Files\MP3 CD Converter
2008-12-28 22:21 . 2008-12-28 22:21 <REP> d-------- C:\Program Files\Fichiers communs\xing shared
2008-12-13 00:57 . 2008-12-29 02:02 <REP> d-------- C:\Program Files\CCleaner
2008-12-10 22:27 . 2008-12-10 22:26 410,984 --a------ C:\WINDOWS\system32\deploytk.dll
2008-12-07 15:38 . 2008-10-16 14:08 27,672 --a------ C:\WINDOWS\system32\wuapi.dll.mui

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-05 02:13 --------- d-----w C:\Program Files\Fichiers communs\Akamai
2009-01-02 19:30 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2009-01-01 00:33 --------- d-----w C:\Program Files\Navilog1
2008-12-31 06:34 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2008-12-31 06:31 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-12-29 19:03 --------- d-----w C:\Program Files\GoldWave
2008-12-29 18:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WinZip
2008-12-29 03:21 --------- d-----w C:\Program Files\Fichiers communs\Real
2008-12-29 03:20 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
2008-12-29 03:20 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
2008-12-27 19:04 --------- d-----w C:\Program Files\Winamp
2008-12-11 04:12 --------- d-----w C:\Program Files\Java
2008-12-08 22:27 --------- d---a-w C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2008-12-06 07:58 --------- d-----w C:\Documents and Settings\j-f\Application Data\Metacafe
2008-12-06 07:58 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Metacafe
2008-11-14 04:58 --------- d-----w C:\Program Files\MSXML 4.0
2008-11-10 21:17 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-11-06 01:01 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-23 12:36 286,720 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-10-16 20:18 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-10-16 19:13 1,809,944 ----a-w C:\WINDOWS\system32\wuaueng.dll
2008-10-16 19:12 561,688 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-10-16 19:12 323,608 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-10-16 19:12 202,776 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-10-16 19:09 92,696 ----a-w C:\WINDOWS\system32\cdm.dll
2008-10-16 19:09 51,224 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-10-16 19:09 43,544 ----a-w C:\WINDOWS\system32\wups2.dll
2008-10-16 19:08 34,328 ----a-w C:\WINDOWS\system32\wups.dll
2008-10-16 19:07 208,744 ----a-w C:\WINDOWS\system32\muweb.dll
2008-10-16 19:06 268,648 ----a-w C:\WINDOWS\system32\mucltui.dll
2005-04-01 03:17 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
2003-08-18 17:21 56,513 -c--a-w C:\Program Files\UnzDll.dll
2001-07-13 02:57 0 -c--a-w C:\Program Files\EBUSetup.sem
2008-12-19 18:09 67,688 ----a-w C:\Program Files\mozilla firefox\components\jar50.dll
2008-12-19 18:09 54,368 ----a-w C:\Program Files\mozilla firefox\components\jsd3250.dll
2008-12-19 18:09 34,944 ----a-w C:\Program Files\mozilla firefox\components\myspell.dll
2008-12-19 18:09 46,712 ----a-w C:\Program Files\mozilla firefox\components\spellchk.dll
2008-12-19 18:09 172,136 ----a-w C:\Program Files\mozilla firefox\components\xpinstal.dll
2008-06-02 20:50 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008060220080603\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-10-28 16:25 94208]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 21:33 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 10:34 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-12-28 22:20 185872]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"DXM6Patch_981116"="C:\WINDOWS\p_981116.exe" [1998-11-30 17:04 497376]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-18 02:00 266497]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 01:04 39792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 21:33 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
2001-12-20 23:34 24576 C:\Program Files\AlienGUIse\fastload.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=wbsys.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"SENTINEL"= snti386.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\BitLord\\BitLord.exe"=
"C:\\Program Files\\ICQ6\\ICQ.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\WINDOWS\\system32\\dxdiag.exe"=
"C:\\Program Files\\Ares\\Ares.exe"=
"C:\\Program Files\\mIRC\\mirc.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"20143:TCP"= 20143:TCP:BitComet 20143 TCP
"20143:UDP"= 20143:UDP:BitComet 20143 UDP
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"9420:TCP"= 9420:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{E5AF0624-F539-47D9-BA37-D8B339E858F4} - (no file)


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://google.com/

O16 -: Microsoft XML Parser for Java - C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd
FF - ProfilePath - C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.blackle.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\extensions\{67fdd901-cf30-4fe2-9d24-d800bab19764}\components\FFAlert.dll
FF - component: C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\extensions\{b69a9db4-d0a1-4722-b56b-f20757a29cdf}\components\FFAlert.dll
FF - component: C:\Program Files\Mozilla Firefox\components\xpinstal.dll
FF - component: C:\Program Files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npagent.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll
.

**************************************************************************
Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet002\Services\TDSSserv.sys]
"imagepath"="\systemroot\system32\drivers\TDSSxxou.sys"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(572)
C:\Program Files\AlienGUIse\fastload.dll
.
Heure de fin: 2009-01-04 21:24:40
ComboFix-quarantined-files.txt 2009-01-05 02:24:36

Avant-CF: 4,000,575,488 octets libres
Après-CF: 4,006,113,280 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn

194 --- E O F --- 2008-09-10 01:52:43

wow'c'est magique c'est outils là,tout a bien fonctionné et voici mon log mbam:


Malwarebytes' Anti-Malware 1.32
Version de la base de données: 1618
Windows 5.1.2600 Service Pack 3

2009-01-05 12:57:17
mbam-log-2009-01-05 (12-57-17).txt

Type de recherche: Examen rapide
Eléments examinés: 62283
Temps écoulé: 8 minute(s), 58 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{48d78be5-cfb9-4b66-9ac4-96d4cf21de06} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{74d46bba-5638-473a-83b6-97e7804a7411} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{e5af0624-f539-47d9-ba37-d8b339e858f4} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Adware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\orgnavi.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\j-f\Application Data\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\j-f\Application Data\RegistrySmart\Log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\j-f\Application Data\RegistrySmart\Registry Backups (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\j-f\Application Data\RegistrySmart\Registry Backups\2008-01-14_01-25-42.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

Et voilà!


========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Unable to stop service TDSSserv .
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\system\ControlSet002\Services\TDSSserv.sys\\ not found.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_d8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01052009_133607

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_d8.dat not found!
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\XUL.mfl moved successfully.

[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\Combofix.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\j-f\Bureau\hijackthis.log: trouvé !
C:\Documents and Settings\j-f\Bureau\fixnavi.txt: trouvé !
C:\Documents and Settings\j-f\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\j-f\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\j-f\Bureau\Appz\HijackThis.lnk: trouvé !
C:\Documents and Settings\j-f\Bureau\Appz\Navilog1.lnk: trouvé !
C:\Documents and Settings\j-f\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\j-f\Mes documents\Unzipped\HijackThis: trouvé !
C:\Documents and Settings\j-f\Recent\HijackThis.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\j-f\Bureau\Appz\HijackThis.lnk: supprimé !
C:\Documents and Settings\j-f\Bureau\Appz\Navilog1.lnk: supprimé !
C:\Documents and Settings\j-f\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\Documents and Settings\j-f\Bureau\hijackthis.log: supprimé !
C:\Documents and Settings\j-f\Bureau\fixnavi.txt: supprimé !
C:\Documents and Settings\j-f\Bureau\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\j-f\Bureau\Rsit.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\_OtMoveIt: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\j-f\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Documents and Settings\j-f\Mes documents\Unzipped\HijackThis: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !



→→→→RSIT:


Logfile of random's system information tool 1.05 (written by random/random)
Run by j-f at 2009-01-05 14:12:09
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 4 GB (20%) free of 19 GB
Total RAM: 759 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:13:07, on 2009-01-05
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\j-f\Bureau\RSIT.exe
C:\Program Files\trend micro\j-f.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

→→→voici le rapport:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Processeur Intel Pentium III )
BIOS : Award Modular BIOS v6.00PG
USER : j-f ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:18 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:37 Go (Free:3 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB) - FAT - Total:1927 Mo (Free:1 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2009-01-05|17:15 )

--------------------\\ Listing des dossiers dans APPLIC~1


[2008-01-16|15:14] C:\DOCUME~1\ADMINI~1.DJ-\APPLIC~1\Microsoft
[2008-08-07|22:26] C:\DOCUME~1\ADMINI~1.DJ-\APPLIC~1\Mozilla

[2008-11-10|16:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe
[2007-11-21|01:10] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Ahead
[2008-01-21|20:18] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Avira
[2007-11-16|20:02] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bell
[2007-11-11|00:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\CyberLink
[2008-01-07|22:48] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\DFX
[2008-04-22|20:49] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Downloaded Installations
[2008-08-31|09:16] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Logishrd
[2008-08-31|08:47] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Logitech
[2009-01-05|12:37] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Malwarebytes
[2007-12-23|19:40] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus!
[2008-12-06|02:58] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Metacafe
[2008-01-22|22:04] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
[2007-11-14|17:21] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MSN6
[2008-12-31|01:34] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy
[2008-02-18|07:37] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Stupid Vc Soft Defy
[2008-12-08|17:27] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP
[2007-11-16|23:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
[2007-12-28|18:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Winferno
[2008-12-29|13:40] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WinZip
[2008-06-03|00:04] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller
[2007-11-18|02:23] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Yahoo
[2007-11-18|18:30] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Yahoo!

[2007-01-04|14:37] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2007-10-26|00:18] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

[2008-07-04|12:47] C:\DOCUME~1\j-f\APPLIC~1\Adobe
[2009-01-02|14:33] C:\DOCUME~1\j-f\APPLIC~1\Ahead
[2007-11-16|20:02] C:\DOCUME~1\j-f\APPLIC~1\Bell
[2007-12-02|02:54] C:\DOCUME~1\j-f\APPLIC~1\CyberLink
[2008-03-07|22:16] C:\DOCUME~1\j-f\APPLIC~1\Desktop3D
[2008-01-04|01:21] C:\DOCUME~1\j-f\APPLIC~1\DivX
[2007-12-09|20:59] C:\DOCUME~1\j-f\APPLIC~1\dvdcss
[2008-01-08|23:23] C:\DOCUME~1\j-f\APPLIC~1\ErrorSmart
[2007-11-04|03:56] C:\DOCUME~1\j-f\APPLIC~1\Help
[2007-11-17|22:14] C:\DOCUME~1\j-f\APPLIC~1\ICQ
[2007-12-20|15:58] C:\DOCUME~1\j-f\APPLIC~1\ICQ Toolbar
[2008-05-16|16:35] C:\DOCUME~1\j-f\APPLIC~1\Identities
[2007-11-17|21:23] C:\DOCUME~1\j-f\APPLIC~1\InstallShield
[2007-10-26|23:55] C:\DOCUME~1\j-f\APPLIC~1\InterTrust
[2008-09-21|12:38] C:\DOCUME~1\j-f\APPLIC~1\LimeWire
[2007-11-14|18:41] C:\DOCUME~1\j-f\APPLIC~1\Macromedia
[2009-01-05|12:37] C:\DOCUME~1\j-f\APPLIC~1\Malwarebytes
[2008-12-06|02:58] C:\DOCUME~1\j-f\APPLIC~1\Metacafe
[2009-01-05|01:27] C:\DOCUME~1\j-f\APPLIC~1\Microsoft
[2008-09-04|21:31] C:\DOCUME~1\j-f\APPLIC~1\Microsoft Web Folders
[2008-09-25|23:12] C:\DOCUME~1\j-f\APPLIC~1\mIRC
[2008-01-03|21:45] C:\DOCUME~1\j-f\APPLIC~1\MoviesApp
[2008-06-18|21:50] C:\DOCUME~1\j-f\APPLIC~1\Mozilla
[2007-11-14|20:36] C:\DOCUME~1\j-f\APPLIC~1\MSN6
[2007-12-10|21:51] C:\DOCUME~1\j-f\APPLIC~1\n-Track Studio5
[2008-03-29|22:11] C:\DOCUME~1\j-f\APPLIC~1\Real
[2007-12-03|02:19] C:\DOCUME~1\j-f\APPLIC~1\Sun
[2007-11-03|18:06] C:\DOCUME~1\j-f\APPLIC~1\Syntrillium
[2007-11-14|21:19] C:\DOCUME~1\j-f\APPLIC~1\Talkback
[2008-01-30|14:50] C:\DOCUME~1\j-f\APPLIC~1\ThisBore
[2008-02-03|22:31] C:\DOCUME~1\j-f\APPLIC~1\Uniblue
[2007-11-18|23:21] C:\DOCUME~1\j-f\APPLIC~1\vlc

[2007-01-04|14:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2008-01-15|18:24] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft
[2008-01-20|20:00] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Mozilla
[2008-01-20|20:01] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Talkback
[2008-01-25|18:20] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\ThisBore

[2007-02-23|19:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[2007-01-04|14:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[2008-01-11|18:29] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-01-05 13:38][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2006-09-25 13:06][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-08-11|22:59] C:\Program Files\1024 Ti‰sto screensaver
[2007-08-20|14:22] C:\Program Files\AC3Filter
[2008-11-10|16:17] C:\Program Files\Adobe
[2007-11-23|23:30] C:\Program Files\AIDA32 - Enterprise System Information
[2008-05-19|02:43] C:\Program Files\AlienGUIse
[2008-05-19|02:19] C:\Program Files\AML Products
[2008-02-12|16:56] C:\Program Files\AnfyTeam
[2007-11-29|22:19] C:\Program Files\Ares
[2007-03-12|11:13] C:\Program Files\AVIcodec
[2008-01-21|20:18] C:\Program Files\Avira
[2008-01-04|17:59] C:\Program Files\BitLord
[2008-12-29|02:02] C:\Program Files\CCleaner
[2008-01-21|20:56] C:\Program Files\Common Files
[2007-01-04|22:42] C:\Program Files\CyberLink
[2007-11-11|00:40] C:\Program Files\CyberLink DVD Solution
[2007-08-20|13:39] C:\Program Files\directx
[2008-06-05|22:52] C:\Program Files\DivX
[2007-08-15|10:47] C:\Program Files\DivXCodec
[2007-11-15|17:14] C:\Program Files\Drug Lord 2
[2007-06-22|18:08] C:\Program Files\DVD Decrypter
[2007-06-22|18:06] C:\Program Files\DVD Shrink
[2007-08-25|13:02] C:\Program Files\DVDFab HD Decrypter 3
[2007-11-09|22:02] C:\Program Files\Efficient Networks
[2007-01-07|18:03] C:\Program Files\Elaborate Bytes
[2009-01-05|12:24] C:\Program Files\Fichiers communs
[2008-12-29|14:03] C:\Program Files\GoldWave
[2008-09-17|19:01] C:\Program Files\HighGrow
[2009-01-05|01:27] C:\Program Files\HP
[2008-03-01|21:53] C:\Program Files\ICQ6
[2008-08-05|00:39] C:\Program Files\ICQToolbar
[2008-08-13|19:53] C:\Program Files\Image-Line
[2007-10-05|22:04] C:\Program Files\Infogrames Interactive
[2008-11-05|20:01] C:\Program Files\InstallShield Installation Information
[2008-12-13|01:58] C:\Program Files\Internet Explorer
[2008-12-10|23:12] C:\Program Files\Java
[2008-02-16|20:39] C:\Program Files\KellySoftware
[2007-08-20|14:19] C:\Program Files\K-Lite Codec Pack
[2007-10-05|20:38] C:\Program Files\LG Electronics
[2008-02-04|16:55] C:\Program Files\LGGSM
[2008-09-21|12:01] C:\Program Files\LimeWire
[2008-08-31|17:36] C:\Program Files\Logitech
[2008-03-07|22:48] C:\Program Files\Macrogaming
[2009-01-05|12:40] C:\Program Files\Malwarebytes' Anti-Malware
[2008-08-14|01:18] C:\Program Files\Messenger
[2008-06-02|20:29] C:\Program Files\Messenger Plus! Live
[2008-07-14|00:11] C:\Program Files\Metacafe
[2007-12-16|21:37] C:\Program Files\M‚t‚oM‚dia
[2007-10-08|12:11] C:\Program Files\Microprose
[2007-11-18|14:17] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2008-09-04|21:31] C:\Program Files\microsoft frontpage
[2008-09-04|21:31] C:\Program Files\Microsoft Office
[2007-11-18|00:46] C:\Program Files\Microsoft SQL Server Compact Edition
[2007-04-08|13:51] C:\Program Files\Microsoft Visual Studio
[2007-04-08|13:52] C:\Program Files\Microsoft Works
[2007-04-08|13:53] C:\Program Files\Microsoft.NET
[2008-09-25|17:37] C:\Program Files\mIRC
[2008-06-02|15:41] C:\Program Files\Movie Maker
[2009-01-05|16:47] C:\Program Files\Mozilla Firefox
[2008-12-30|14:27] C:\Program Files\MP3 CD Converter
[2008-06-02|15:42] C:\Program Files\msn
[2007-10-15|21:53] C:\Program Files\msn gaming zone
[2008-11-13|23:58] C:\Program Files\MSXML 4.0
[2007-10-08|21:11] C:\Program Files\MyXOFT
[2009-01-02|14:30] C:\Program Files\Nero
[2007-11-13|20:16] C:\Program Files\NetAssistant
[2008-08-09|01:12] C:\Program Files\Netlog 24
[2008-06-02|15:35] C:\Program Files\NetMeeting
[2008-06-02|15:34] C:\Program Files\Outlook Express
[2008-04-11|00:12] C:\Program Files\PowerISO
[2007-08-25|12:51] C:\Program Files\QuickTime
[2008-05-15|20:18] C:\Program Files\RCA
[2007-11-10|23:59] C:\Program Files\Real
[2008-08-31|17:36] C:\Program Files\Reality Fusion
[2008-10-18|10:43] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[2008-01-25|16:10] C:\Program Files\Security Process Explorer
[2007-10-26|00:13] C:\Program Files\Services en ligne
[2008-06-30|22:06] C:\Program Files\Sierra On-Line
[2007-12-02|22:03] C:\Program Files\SmartClose
[2008-12-31|01:31] C:\Program Files\Spybot - Search & Destroy
[2007-10-10|20:33] C:\Program Files\Starcraft
[2008-08-25|22:47] C:\Program Files\StepMania
[2007-06-22|18:07] C:\Program Files\Super DVD Ripper
[2008-10-18|10:43] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[2007-10-05|20:42] C:\Program Files\Thomson
[2007-10-12|16:11] C:\Program Files\TopThemesXP
[2009-01-05|14:13] C:\Program Files\Trend Micro
[2007-01-04|14:46] C:\Program Files\Uninstall Information
[2008-08-03|20:08] C:\Program Files\VIA
[2007-08-20|13:07] C:\Program Files\VIA Technologies, Inc
[2007-07-03|11:31] C:\Program Files\Video mp3 Extractor
[2007-11-18|21:44] C:\Program Files\VideoLAN
[2008-04-15|23:38] C:\Program Files\VirtualDJ
[2008-12-27|14:04] C:\Program Files\Winamp
[2008-08-13|21:47] C:\Program Files\Windows Live
[2008-06-03|20:03] C:\Program Files\Windows Media Connect 2
[2008-08-31|17:38] C:\Program Files\Windows Media Player
[2008-01-14|23:53] C:\Program Files\Windows NT
[2007-11-16|22:35] C:\Program Files\WindowsUpdate
[2007-05-30|08:46] C:\Program Files\WinRAR
[2008-12-29|13:40] C:\Program Files\WinZip
[2007-10-25|23:29] C:\Program Files\WMV9_VCM
[2007-01-04|14:38] C:\Program Files\xerox
[2008-01-08|07:30] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-11-10|16:17] C:\Program Files\Fichiers communs\Adobe
[2009-01-02|14:30] C:\Program Files\Fichiers communs\Ahead
[2009-01-05|16:39] C:\Program Files\Fichiers communs\Akamai
[2007-07-01|13:16] C:\Program Files\Fichiers communs\AVSMedia
[2007-04-08|13:52] C:\Program Files\Fichiers communs\DESIGNER
[2008-08-03|23:21] C:\Program Files\Fichiers communs\InstallShield
[2007-03-21|14:06] C:\Program Files\Fichiers communs\Logitech
[2008-09-04|21:33] C:\Program Files\Fichiers communs\Microsoft Shared
[2007-10-25|23:02] C:\Program Files\Fichiers communs\Motive
[2007-01-04|14:35] C:\Program Files\Fichiers communs\MSSoap
[2007-09-27|18:11] C:\Program Files\Fichiers communs\Nikon
[2007-12-10|23:07] C:\Program Files\Fichiers communs\NSV
[2007-01-04|08:21] C:\Program Files\Fichiers communs\ODBC
[2008-12-28|22:21] C:\Program Files\Fichiers communs\Real
[2007-01-04|14:35] C:\Program Files\Fichiers communs\Services
[2007-01-04|08:21] C:\Program Files\Fichiers communs\SpeechEngines
[2007-01-14|15:13] C:\Program Files\Fichiers communs\Stardock
[2008-04-25|18:45] C:\Program Files\Fichiers communs\Symantec Shared
[2008-09-04|21:33] C:\Program Files\Fichiers communs\System
[2007-07-01|13:16] C:\Program Files\Fichiers communs\Thraex Software
[2007-12-09|20:42] C:\Program Files\Fichiers communs\Totem Shared
[2007-11-18|00:10] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2008-12-28|22:21] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 32 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Stupid Vc Soft Defy

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\more comp about]
"DisplayName"="CiD Help"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 10038 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-05 17:18:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 411

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\j-f\Application Data\Microsoft\Office\R‚cents\Nero_latest_Keygen_by_Betamaster.lnk
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\Keygen.exe
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\RA PATCH
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\RA PATCH\r_lnch.dll
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\RA PATCH\r_lnch.exe
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\Old\ReflexiveGamesUniversalKeygen.exe


[F:6][D:4]-> C:\DOCUME~1\j-f\LOCALS~1\Temp
[F:4][D:0]-> C:\DOCUME~1\j-f\Cookies
[F:10][D:4]-> C:\DOCUME~1\j-f\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-01-05|17:20 - Option : [1]

--------------------\\ Fin du rapport a 17:20:50

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Processeur Intel Pentium III )
BIOS : Award Modular BIOS v6.00PG
USER : j-f ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:18 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:37 Go (Free:3 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB) - FAT - Total:1927 Mo (Free:1 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 2009-01-05|17:42 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Stupid Vc Soft Defy
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1


[2008-01-16|15:14] C:\DOCUME~1\ADMINI~1.DJ-\APPLIC~1\Microsoft
[2008-08-07|22:26] C:\DOCUME~1\ADMINI~1.DJ-\APPLIC~1\Mozilla

[2008-11-10|16:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe
[2007-11-21|01:10] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Ahead
[2008-01-21|20:18] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Avira
[2007-11-16|20:02] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bell
[2007-11-11|00:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\CyberLink
[2008-01-07|22:48] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\DFX
[2008-04-22|20:49] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Downloaded Installations
[2008-08-31|09:16] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Logishrd
[2008-08-31|08:47] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Logitech
[2009-01-05|12:37] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Malwarebytes
[2007-12-23|19:40] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus!
[2008-12-06|02:58] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Metacafe
[2008-01-22|22:04] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
[2007-11-14|17:21] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MSN6
[2008-12-31|01:34] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy
[2008-12-08|17:27] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP
[2007-11-16|23:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
[2007-12-28|18:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Winferno
[2008-12-29|13:40] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WinZip
[2008-06-03|00:04] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller
[2007-11-18|02:23] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Yahoo
[2007-11-18|18:30] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Yahoo!

[2007-01-04|14:37] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2007-10-26|00:18] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

[2008-07-04|12:47] C:\DOCUME~1\j-f\APPLIC~1\Adobe
[2009-01-02|14:33] C:\DOCUME~1\j-f\APPLIC~1\Ahead
[2007-11-16|20:02] C:\DOCUME~1\j-f\APPLIC~1\Bell
[2007-12-02|02:54] C:\DOCUME~1\j-f\APPLIC~1\CyberLink
[2008-03-07|22:16] C:\DOCUME~1\j-f\APPLIC~1\Desktop3D
[2008-01-04|01:21] C:\DOCUME~1\j-f\APPLIC~1\DivX
[2007-12-09|20:59] C:\DOCUME~1\j-f\APPLIC~1\dvdcss
[2008-01-08|23:23] C:\DOCUME~1\j-f\APPLIC~1\ErrorSmart
[2007-11-04|03:56] C:\DOCUME~1\j-f\APPLIC~1\Help
[2007-11-17|22:14] C:\DOCUME~1\j-f\APPLIC~1\ICQ
[2007-12-20|15:58] C:\DOCUME~1\j-f\APPLIC~1\ICQ Toolbar
[2008-05-16|16:35] C:\DOCUME~1\j-f\APPLIC~1\Identities
[2007-11-17|21:23] C:\DOCUME~1\j-f\APPLIC~1\InstallShield
[2007-10-26|23:55] C:\DOCUME~1\j-f\APPLIC~1\InterTrust
[2008-09-21|12:38] C:\DOCUME~1\j-f\APPLIC~1\LimeWire
[2007-11-14|18:41] C:\DOCUME~1\j-f\APPLIC~1\Macromedia
[2009-01-05|12:37] C:\DOCUME~1\j-f\APPLIC~1\Malwarebytes
[2008-12-06|02:58] C:\DOCUME~1\j-f\APPLIC~1\Metacafe
[2009-01-05|01:27] C:\DOCUME~1\j-f\APPLIC~1\Microsoft
[2008-09-04|21:31] C:\DOCUME~1\j-f\APPLIC~1\Microsoft Web Folders
[2008-09-25|23:12] C:\DOCUME~1\j-f\APPLIC~1\mIRC
[2008-01-03|21:45] C:\DOCUME~1\j-f\APPLIC~1\MoviesApp
[2008-06-18|21:50] C:\DOCUME~1\j-f\APPLIC~1\Mozilla
[2007-11-14|20:36] C:\DOCUME~1\j-f\APPLIC~1\MSN6
[2007-12-10|21:51] C:\DOCUME~1\j-f\APPLIC~1\n-Track Studio5
[2008-03-29|22:11] C:\DOCUME~1\j-f\APPLIC~1\Real
[2007-12-03|02:19] C:\DOCUME~1\j-f\APPLIC~1\Sun
[2007-11-03|18:06] C:\DOCUME~1\j-f\APPLIC~1\Syntrillium
[2007-11-14|21:19] C:\DOCUME~1\j-f\APPLIC~1\Talkback
[2008-01-30|14:50] C:\DOCUME~1\j-f\APPLIC~1\ThisBore
[2008-02-03|22:31] C:\DOCUME~1\j-f\APPLIC~1\Uniblue
[2007-11-18|23:21] C:\DOCUME~1\j-f\APPLIC~1\vlc

[2007-01-04|14:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2008-01-15|18:24] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft
[2008-01-20|20:00] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Mozilla
[2008-01-20|20:01] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Talkback
[2008-01-25|18:20] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\ThisBore

[2007-02-23|19:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[2007-01-04|14:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[2008-01-11|18:29] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-01-05 13:38][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2006-09-25 13:06][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-08-11|22:59] C:\Program Files\1024 Ti‰sto screensaver
[2007-08-20|14:22] C:\Program Files\AC3Filter
[2008-11-10|16:17] C:\Program Files\Adobe
[2007-11-23|23:30] C:\Program Files\AIDA32 - Enterprise System Information
[2008-05-19|02:43] C:\Program Files\AlienGUIse
[2008-05-19|02:19] C:\Program Files\AML Products
[2008-02-12|16:56] C:\Program Files\AnfyTeam
[2007-11-29|22:19] C:\Program Files\Ares
[2007-03-12|11:13] C:\Program Files\AVIcodec
[2008-01-21|20:18] C:\Program Files\Avira
[2008-01-04|17:59] C:\Program Files\BitLord
[2008-12-29|02:02] C:\Program Files\CCleaner
[2008-01-21|20:56] C:\Program Files\Common Files
[2007-01-04|22:42] C:\Program Files\CyberLink
[2007-11-11|00:40] C:\Program Files\CyberLink DVD Solution
[2007-08-20|13:39] C:\Program Files\directx
[2008-06-05|22:52] C:\Program Files\DivX
[2007-08-15|10:47] C:\Program Files\DivXCodec
[2007-11-15|17:14] C:\Program Files\Drug Lord 2
[2007-06-22|18:08] C:\Program Files\DVD Decrypter
[2007-06-22|18:06] C:\Program Files\DVD Shrink
[2007-08-25|13:02] C:\Program Files\DVDFab HD Decrypter 3
[2007-11-09|22:02] C:\Program Files\Efficient Networks
[2007-01-07|18:03] C:\Program Files\Elaborate Bytes
[2009-01-05|12:24] C:\Program Files\Fichiers communs
[2008-12-29|14:03] C:\Program Files\GoldWave
[2008-09-17|19:01] C:\Program Files\HighGrow
[2009-01-05|01:27] C:\Program Files\HP
[2008-03-01|21:53] C:\Program Files\ICQ6
[2008-08-05|00:39] C:\Program Files\ICQToolbar
[2008-08-13|19:53] C:\Program Files\Image-Line
[2007-10-05|22:04] C:\Program Files\Infogrames Interactive
[2008-11-05|20:01] C:\Program Files\InstallShield Installation Information
[2008-12-13|01:58] C:\Program Files\Internet Explorer
[2008-12-10|23:12] C:\Program Files\Java
[2008-02-16|20:39] C:\Program Files\KellySoftware
[2007-08-20|14:19] C:\Program Files\K-Lite Codec Pack
[2007-10-05|20:38] C:\Program Files\LG Electronics
[2008-02-04|16:55] C:\Program Files\LGGSM
[2008-09-21|12:01] C:\Program Files\LimeWire
[2008-08-31|17:36] C:\Program Files\Logitech
[2008-03-07|22:48] C:\Program Files\Macrogaming
[2009-01-05|12:40] C:\Program Files\Malwarebytes' Anti-Malware
[2008-08-14|01:18] C:\Program Files\Messenger
[2008-06-02|20:29] C:\Program Files\Messenger Plus! Live
[2008-07-14|00:11] C:\Program Files\Metacafe
[2007-12-16|21:37] C:\Program Files\M‚t‚oM‚dia
[2007-10-08|12:11] C:\Program Files\Microprose
[2007-11-18|14:17] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2008-09-04|21:31] C:\Program Files\microsoft frontpage
[2008-09-04|21:31] C:\Program Files\Microsoft Office
[2007-11-18|00:46] C:\Program Files\Microsoft SQL Server Compact Edition
[2007-04-08|13:51] C:\Program Files\Microsoft Visual Studio
[2007-04-08|13:52] C:\Program Files\Microsoft Works
[2007-04-08|13:53] C:\Program Files\Microsoft.NET
[2008-09-25|17:37] C:\Program Files\mIRC
[2008-06-02|15:41] C:\Program Files\Movie Maker
[2009-01-05|17:27] C:\Program Files\Mozilla Firefox
[2008-12-30|14:27] C:\Program Files\MP3 CD Converter
[2008-06-02|15:42] C:\Program Files\msn
[2007-10-15|21:53] C:\Program Files\msn gaming zone
[2008-11-13|23:58] C:\Program Files\MSXML 4.0
[2007-10-08|21:11] C:\Program Files\MyXOFT
[2009-01-02|14:30] C:\Program Files\Nero
[2007-11-13|20:16] C:\Program Files\NetAssistant
[2008-08-09|01:12] C:\Program Files\Netlog 24
[2008-06-02|15:35] C:\Program Files\NetMeeting
[2008-06-02|15:34] C:\Program Files\Outlook Express
[2008-04-11|00:12] C:\Program Files\PowerISO
[2007-08-25|12:51] C:\Program Files\QuickTime
[2008-05-15|20:18] C:\Program Files\RCA
[2007-11-10|23:59] C:\Program Files\Real
[2008-08-31|17:36] C:\Program Files\Reality Fusion
[2008-10-18|10:43] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[2008-01-25|16:10] C:\Program Files\Security Process Explorer
[2007-10-26|00:13] C:\Program Files\Services en ligne
[2008-06-30|22:06] C:\Program Files\Sierra On-Line
[2007-12-02|22:03] C:\Program Files\SmartClose
[2008-12-31|01:31] C:\Program Files\Spybot - Search & Destroy
[2007-10-10|20:33] C:\Program Files\Starcraft
[2008-08-25|22:47] C:\Program Files\StepMania
[2007-06-22|18:07] C:\Program Files\Super DVD Ripper
[2008-10-18|10:43] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[2007-10-05|20:42] C:\Program Files\Thomson
[2007-10-12|16:11] C:\Program Files\TopThemesXP
[2009-01-05|14:13] C:\Program Files\Trend Micro
[2007-01-04|14:46] C:\Program Files\Uninstall Information
[2008-08-03|20:08] C:\Program Files\VIA
[2007-08-20|13:07] C:\Program Files\VIA Technologies, Inc
[2007-07-03|11:31] C:\Program Files\Video mp3 Extractor
[2007-11-18|21:44] C:\Program Files\VideoLAN
[2008-04-15|23:38] C:\Program Files\VirtualDJ
[2008-12-27|14:04] C:\Program Files\Winamp
[2008-08-13|21:47] C:\Program Files\Windows Live
[2008-06-03|20:03] C:\Program Files\Windows Media Connect 2
[2008-08-31|17:38] C:\Program Files\Windows Media Player
[2008-01-14|23:53] C:\Program Files\Windows NT
[2007-11-16|22:35] C:\Program Files\WindowsUpdate
[2007-05-30|08:46] C:\Program Files\WinRAR
[2008-12-29|13:40] C:\Program Files\WinZip
[2007-10-25|23:29] C:\Program Files\WMV9_VCM
[2007-01-04|14:38] C:\Program Files\xerox
[2008-01-08|07:30] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-11-10|16:17] C:\Program Files\Fichiers communs\Adobe
[2009-01-02|14:30] C:\Program Files\Fichiers communs\Ahead
[2009-01-05|17:39] C:\Program Files\Fichiers communs\Akamai
[2007-07-01|13:16] C:\Program Files\Fichiers communs\AVSMedia
[2007-04-08|13:52] C:\Program Files\Fichiers communs\DESIGNER
[2008-08-03|23:21] C:\Program Files\Fichiers communs\InstallShield
[2007-03-21|14:06] C:\Program Files\Fichiers communs\Logitech
[2008-09-04|21:33] C:\Program Files\Fichiers communs\Microsoft Shared
[2007-10-25|23:02] C:\Program Files\Fichiers communs\Motive
[2007-01-04|14:35] C:\Program Files\Fichiers communs\MSSoap
[2007-09-27|18:11] C:\Program Files\Fichiers communs\Nikon
[2007-12-10|23:07] C:\Program Files\Fichiers communs\NSV
[2007-01-04|08:21] C:\Program Files\Fichiers communs\ODBC
[2008-12-28|22:21] C:\Program Files\Fichiers communs\Real
[2007-01-04|14:35] C:\Program Files\Fichiers communs\Services
[2007-01-04|08:21] C:\Program Files\Fichiers communs\SpeechEngines
[2007-01-14|15:13] C:\Program Files\Fichiers communs\Stardock
[2008-04-25|18:45] C:\Program Files\Fichiers communs\Symantec Shared
[2008-09-04|21:33] C:\Program Files\Fichiers communs\System
[2007-07-01|13:16] C:\Program Files\Fichiers communs\Thraex Software
[2007-12-09|20:42] C:\Program Files\Fichiers communs\Totem Shared
[2007-11-18|00:10] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2008-12-28|22:21] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 31 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-05 17:45:08
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 411

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\j-f\Application Data\Microsoft\Office\R‚cents\Nero_latest_Keygen_by_Betamaster.lnk
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\Keygen.exe
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\RA PATCH
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\RA PATCH\r_lnch.dll
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\NewCrack and keygen work fine\RA PATCH\r_lnch.exe
C:\DOCUME~1\j-f\Bureau\Appz\games\Gamez\Reflexive gamez\dropzone inc\Old\ReflexiveGamesUniversalKeygen.exe


[F:6][D:5]-> C:\DOCUME~1\j-f\LOCALS~1\Temp
[F:4][D:0]-> C:\DOCUME~1\j-f\Cookies
[F:10][D:4]-> C:\DOCUME~1\j-f\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-01-05|17:20 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2009-01-05|17:46 - Option : [2]

--------------------\\ Fin du rapport a 17:46:54

Analise terninée:

KASPERSKY ON-LINE SCANNER REPORT
Tuesday, January 06, 2009 12:03:00 AM
Système d'exploitation : Microsoft Windows XP Professional, Service Pack 3 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 5/01/2009
Enregistrements dans la base antivirus Kaspersky : 1403468
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
E:\
F:\
G:\

Statistiques de l'analyse:
Total d'objets analysés: 68462
Nombre de virus trouvés: 1
Nombre d'objets infectés: 0 / 0
Nombre d'objets suspects: 2
Durée de l'analyse: 04:30:30

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ZlobDownloadervdt2.zip/uninst.exe Suspect : Password-protected-EXE ignoré
C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ZlobDownloadervdt2.zip ZIP: suspect - 1 ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\cert8.db L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\flashgot.log L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\history.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\key3.db L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\parent.lock L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\search.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\urlclassifier2.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Messenger\jeanftessier@sympatico.ca\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Messenger\jeanftessier@sympatico.ca\SharingMetadata\pending.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Messenger\jeanftessier@sympatico.ca\SharingMetadata\Working\database_7AF4_DD18_F4DC_D789\dfsr.db L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Messenger\jeanftessier@sympatico.ca\SharingMetadata\Working\database_7AF4_DD18_F4DC_D789\fsr.log L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Messenger\jeanftessier@sympatico.ca\SharingMetadata\Working\database_7AF4_DD18_F4DC_D789\fsrtmp.log L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Messenger\jeanftessier@sympatico.ca\SharingMetadata\Working\database_7AF4_DD18_F4DC_D789\tmp.edb L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Windows Live Contacts\jeanftessier@sympatico.ca\real\members.stg L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Microsoft\Windows Live Contacts\jeanftessier@sympatico.ca\shadow\members.stg L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_001_ L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_002_ L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_003_ L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Application Data\Mozilla\Firefox\Profiles\rezcupy4.default\Cache\_CACHE_MAP_ L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Historique\History.IE5\MSHist012009010520090106\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\temp\~DFB296.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\temp\~DFB2AA.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\temp\~DFC44E.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\temp\~DFD0FD.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\ntuser.dat L'objet est verrouillé ignoré
C:\Documents and Settings\j-f\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService.AUTORITE NT\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService.AUTORITE NT\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService.AUTORITE NT\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Program Files\Fichiers communs\Akamai\debug.log L'objet est verrouillé ignoré
C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
C:\System Volume Information\_restore{DCF5F8BC-EFD2-43F2-9E6F-CE9191536287}\RP3\change.log L'objet est verrouillé ignoré
C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré
C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
C:\WINDOWS\Temp\Perflib_Perfdata_d0.dat L'objet est verrouillé ignoré
C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

Analyse terminée.

Je l'ai eu l'instant que je me rendre compte que c'étais de la cochonerie....
Je l'ai supprimé et nettoyé et je croiyais bien qu'il n'y en avais plus de trace....mais ca fait longtemps,genre quand j'ai eu mon pc.....ca devais faire 10 ans j'avais pas eu d'ordi chez moi,alors le temps de me remettre dedans.....

Il n'étais pas a moi avant,c'est un bon amis qui me l'a vendu,que nous avons formater et réinstallé pour que j'aies un ordi clean.

Merci,bonne nuit toi aussi!!

Désolé pour le délais de mes réponses,j'ai recommencé l'école profesionnelle hier,alors voilà mon log:

À demain surement!!lol




------- Logfile of AD-Remover 1.0.8.5 by C_XX | ONLY XP/VISTA -------

# START at: 0:51:53 | Mer 2009-01-07 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: DJ-VUYBC2S73NGX | USER: j-f ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- G:\ (File System: FAT)
# Internet Explorer v7.0.5730.13

# RUNNING PROCESSES: 30

+-----------------------| Boonty/Boonty Games Elements found :

.
.

+-----------------------| Eorezo Elements found :

.
.

+-----------------------| Everest Poker Elements found :

.
.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.
.

+-----------------------| It's TV Elements found :

.

+-----------------------| Sweetim Elements found :

.
HKCU\SOFTWARE\SWEETIE
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\SOFTWARE\Macrogaming
HKLM\~\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.
C:\Program Files\Macrogaming
C:\Program Files\Macrogaming\SweetIM
C:\Program Files\Macrogaming\SweetIM\conf
C:\Program Files\Macrogaming\SweetIM\data
C:\Program Files\Macrogaming\SweetIM\conf\users
C:\Program Files\Macrogaming\SweetIM\conf\users\jeanftessier@sympatico.ca
C:\Program Files\Macrogaming\SweetIM\conf\users\main_user_config.xml
C:\Program Files\Macrogaming\SweetIM\conf\users\jeanftessier@sympatico.ca\emoticons_shortcut.xml
C:\Program Files\Macrogaming\SweetIM\conf\users\jeanftessier@sympatico.ca\user_config.xml
C:\Program Files\Macrogaming\SweetIM\data\contentdb
C:\Program Files\Macrogaming\SweetIM\data\contentdb\cache_indx.dat

+-----------------------| ADDED SCAN :


+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

..\rezcupy4.default\prefs.js :

~~~~ Mozilla FireFox version 2.0.0.20 ~~~~

* Browser Search Default Engine: "ICQ Search"
* Browser Search Selected Engine: "ICQ Search"
* Browser Startup HomePage: "http://www.blackle.com/"

.

+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://google.com/

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

+---------------------------------------------------------------------------+

[~2667 bytes] - "C:\AD-report-Scan-20.9-.1-07.log"

# END at: 0:52:47 | 2009-01-07 - Time elapsed: 53.4 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 59 lines ]
+---------------------------------------------------------------------------+

Bonjour,

je suis tres heureux que tu m'aies débarrassé de tout ces trucs et tout c'est déroulé comme prévu à la suppression..........je crois!!



------- Logfile of AD-Remover 1.0.8.5 by C_XX | ONLY XP/VISTA -------

*** Limited to ***

Boonty/BoontyGames
Eorezo
Everest Poker
Funwebproduct/MyWay/MyWebsearch
It's TV
Sweetim

******************

# START at: 23:06:20 | Mer 2009-01-07 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Clean | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: DJ-VUYBC2S73NGX | USER: j-f ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- G:\ (File System: FAT)
# Internet Explorer v7.0.5730.13

# RUNNING PROCESSES: 30

(!) ---- IE start pages reset

+-----------------------| Boonty/Boonty Games Elements Deleted :

.
.

+-----------------------| Eorezo Elements Deleted :

.
.

+-----------------------| Everest Poker Elements Deleted :

.
.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

.
.

+-----------------------| It's TV Elements Deleted :

.

+-----------------------| Sweetim Elements Deleted :

.
HKLM\~\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
HKCU\SOFTWARE\SWEETIE
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\SOFTWARE\Macrogaming
.
C:\Program Files\Macrogaming

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.


+-----------------------| ADDED SCAN :


+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

..\rezcupy4.default\prefs.js :

~~~~ Mozilla FireFox version 2.0.0.20 ~~~~

* Browser Search Default Engine: "ICQ Search"
* Browser Search Selected Engine: "ICQ Search"
* Browser Startup HomePage: "http://www.blackle.com/"

.

+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://fr.msn.com/

+---------------------------------------------------------------------------+

[~2325 bytes] - "C:\AD-report-Clean-20.9-.1-07.log"
[~3001 bytes] - "C:\AD-report-Scan-20.9-.1-07.log"

# END at: 23:09:04 | 2009-01-07 - Time elapsed: 2 minutes, 43 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 60 lines ]
+---------------------------------------------------------------------------+

Bonjour,

j'ai bien déinstallé Ad-remover et oui je connais bitlord,je l'utilise quelques fois pour downloader des films ou autres en torrents....je l'ai dans mon ordi depuis que je l'ai eu,voilà maintenant presque 2 ans!!

Est ce que bitlord est une menace pour moi puisque les utilisateur peuvent voir mon adresse IP???

Personellement,je crois pas parce que mon IP change parfois au redémarrage de mon ordi.....p etre peut tu m'éclaircir a ce sujet!!

Bonne nuit!!...il est 23h05 chez moi et je dort debout!!!

Bonsoir,



========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\DOCUME~1\j-f\APPLIC~1\ErrorSmart\Log moved successfully.
C:\DOCUME~1\j-f\APPLIC~1\ErrorSmart moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_b8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01092009_124906

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_b8.dat not found!

Et bien,je vois une accélération de quelques dixièmes de secondes dans la reponse d'éxécution de mes programmes,à part de cela ilreste à voir si msn,firefox et wuauclt.exe arrête de planter.

C'est plutôt windows live messenger qui plante le plus souvent,au moin une fois par jour en moyenne!!

En tout cas,j'ai hâte de voir......