Mon ordinateur est infecté !!
Résolu
pcd
-
pcd -
pcd -
Bonjour,
Mon ordinateur de fonctionne plus très bien et je pense être infecté par plusieurs virus. J'ai du les attraper en télechargeant... L'ordinateur va très doucement et dans mon gestionnaire de tâche, l'Uc est souvent utilisée a 100% ce que je trouve bizarre en particulier quand je ne fais rien.... Certains programmes ne s'ouvrent plus...
J'utilise l'antivirus Avast mais il n'en detecte pas beaucoup. J'ai voulu faire une analyse en ligne avec F-secuser mais elle n'aboutit jamais . Durant cette analyse, il y a une vingtaine de virus trouvé mais je ne peux jamais les supprimer.
Merci de votre aide :)
Mon ordinateur de fonctionne plus très bien et je pense être infecté par plusieurs virus. J'ai du les attraper en télechargeant... L'ordinateur va très doucement et dans mon gestionnaire de tâche, l'Uc est souvent utilisée a 100% ce que je trouve bizarre en particulier quand je ne fais rien.... Certains programmes ne s'ouvrent plus...
J'utilise l'antivirus Avast mais il n'en detecte pas beaucoup. J'ai voulu faire une analyse en ligne avec F-secuser mais elle n'aboutit jamais . Durant cette analyse, il y a une vingtaine de virus trouvé mais je ne peux jamais les supprimer.
Merci de votre aide :)
A voir également:
- Soui dummy wnd
- Mon ordinateur rame - Guide
- Réinitialiser ordinateur - Guide
- Clavier de l'ordinateur - Guide
- Parametres de mon ordinateur - Guide
- Qu'est ce qui se lance au démarrage de l'ordinateur - Guide
86 réponses
Bonsoir,
▶ Télécharge hijackthis
▶ Tout est expliqué sur mon site web pour l'installer et l'utiliser correctement.
▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.
Comment copier/coller le rapport :
▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".
▶ ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.
▶ Télécharge hijackthis
▶ Tout est expliqué sur mon site web pour l'installer et l'utiliser correctement.
▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.
Comment copier/coller le rapport :
▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".
▶ ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.
Merci, voici mon rapport ... j'espère que j'ai bien suivi vos instructions ...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:57:37, on 18/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\ZSSnp211.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: mysidesearch search enhancer - {5610abfa-5f0b-de2d-5025-f161c36bb4a8} - C:\Windows\system32\udnjogdzmkzqnc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll,C:\Windows\System32\cabview32.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:57:37, on 18/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\ZSSnp211.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: mysidesearch search enhancer - {5610abfa-5f0b-de2d-5025-f161c36bb4a8} - C:\Windows\system32\udnjogdzmkzqnc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll,C:\Windows\System32\cabview32.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
je vois que tu as 3 antivirus : avast, antivir et AVG... Que fais-tu avec 3 antivirus ?? Et lequel utilises-tu ??
Commence par faire ceci stp :
Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):
▶ Va dans démarrer puis panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.
▶ Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau
▶ Lance l'installation du programme en exécutant le fichier téléchargé.
▶ Double-clique maintenant sur le raccourci de Toolbar-S&D.
▶ Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
▶ Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
▶ Poste le rapport généré. (C:\TB.txt)
Commence par faire ceci stp :
Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):
▶ Va dans démarrer puis panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.
▶ Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau
▶ Lance l'installation du programme en exécutant le fichier téléchargé.
▶ Double-clique maintenant sur le raccourci de Toolbar-S&D.
▶ Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
▶ Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
▶ Poste le rapport généré. (C:\TB.txt)
Euh je ne sais pas pourquoi j'ai pris 3 antivirus je pensais que comme ça je trouverais 2 fois plus de virus mais bon je crois que c'est deconseillé. Donc je pense que je vais garder avast.
Voici le rapport:
-----------\\ ToolBar S&D 1.2.2 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Charlène ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081220-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total : 364 Go Free : 211 Go
D:\ (Local Disk) - NTFS - Total : 7 Go Free : 1 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
Option : [1] ( 18/01/2009|22:17 )
[ UAC => 0 ]
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page Restore"="https://www.google.fr/?gws_rd=ssl"
"Url"="https://www.msn.com/fr-fr/actualite/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\spyware-doctor-2009-keygen_ltr[1].gif
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen-spyware-doctor[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\82109-spyware-doctor-2009-keygen[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.289\crack.nfo
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.904\keygen.nfo
C:\Users\CHARLN~1\AppData\Roaming\Microsoft\Windows\Recent\crack.txt.lnk
C:\Users\CHARLN~1\Desktop\a suppr\crack+keygen.exe
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\crack.txt
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\Photoshop.exe
C:\Users\CHARLN~1\Desktop\nous 3\crack+keygen.exe
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-118459-spyware doctor crack incl license keys.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-128455-spyware doctor crack setup incl serial.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-81459-spyware doctor crack keymaker by RoR.zip
C:\Users\CHARLN~1\Favorites\serials nero 9 driver detective avast nero office 2007 spyware doctor nero 8 ad kaspersky internet download manager keygen.name.url
[ UAC => 1 ]
1 - "C:\ToolBar SD\TB_1.txt" - 05/10/2008|22:25 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 18/01/2009|22:18 - Option : [1]
-----------\\ Fin du rapport a 22:18:28,82
Voici le rapport:
-----------\\ ToolBar S&D 1.2.2 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Charlène ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081220-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total : 364 Go Free : 211 Go
D:\ (Local Disk) - NTFS - Total : 7 Go Free : 1 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
Option : [1] ( 18/01/2009|22:17 )
[ UAC => 0 ]
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page Restore"="https://www.google.fr/?gws_rd=ssl"
"Url"="https://www.msn.com/fr-fr/actualite/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\spyware-doctor-2009-keygen_ltr[1].gif
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen-spyware-doctor[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\82109-spyware-doctor-2009-keygen[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.289\crack.nfo
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.904\keygen.nfo
C:\Users\CHARLN~1\AppData\Roaming\Microsoft\Windows\Recent\crack.txt.lnk
C:\Users\CHARLN~1\Desktop\a suppr\crack+keygen.exe
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\crack.txt
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\Photoshop.exe
C:\Users\CHARLN~1\Desktop\nous 3\crack+keygen.exe
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-118459-spyware doctor crack incl license keys.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-128455-spyware doctor crack setup incl serial.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-81459-spyware doctor crack keymaker by RoR.zip
C:\Users\CHARLN~1\Favorites\serials nero 9 driver detective avast nero office 2007 spyware doctor nero 8 ad kaspersky internet download manager keygen.name.url
[ UAC => 1 ]
1 - "C:\ToolBar SD\TB_1.txt" - 05/10/2008|22:25 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 18/01/2009|22:18 - Option : [1]
-----------\\ Fin du rapport a 22:18:28,82
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Non ça ne sert à rien d'avoir plusieurs antivirus, cela ne fera que ralentir 2X plus ton PC et il pourrait y avoir des conflits entre les deux... Tu veux garder Avast mais personnellement je te conseillerai Antivir qui est beaucoup plus performant :
avast vs antivir vs AVG
Je vois que tu as aussi beaucoup de cracks :
le danger des cracks
Après cette petite lecture de prévention, fais ceci stp :
▶ Télécharge malwarebyte's anti-malware
▶ Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.
▶ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
▶ Lance une analyse complète en cliquant sur "Exécuter un examen complet"
▶ Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"
▶ L'analyse peut durer un bon moment.....
▶ Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"
▶ Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"
▶ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum
* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée
avast vs antivir vs AVG
Je vois que tu as aussi beaucoup de cracks :
le danger des cracks
Après cette petite lecture de prévention, fais ceci stp :
▶ Télécharge malwarebyte's anti-malware
▶ Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.
▶ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
▶ Lance une analyse complète en cliquant sur "Exécuter un examen complet"
▶ Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"
▶ L'analyse peut durer un bon moment.....
▶ Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"
▶ Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"
▶ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum
* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée
Depuis hier soir je fais des analyses mais au bout d'une heure ça bloque... L'analyse n'aboutit jamais !!
Je ne sais pas quoi faire...
Je ne sais pas quoi faire...
Voilà,
Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1668
Windows 6.0.6001 Service Pack 1
19/01/2009 21:28:30
mbam-log-2009-01-19 (21-28-26).txt
Type de recherche: Examen rapide
Eléments examinés: 52596
Temps écoulé: 4 minute(s), 7 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 18
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b4a78d29-52b1-4a7b-bac0-1471bedf9836} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adzgaloregames (Adware.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> No action taken.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> No action taken.
Dossier(s) infecté(s):
C:\Program Files\Adzgalore Games Collection (Adware.Agent) -> No action taken.
C:\Users\Charlène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload (Trojan.Lop) -> No action taken.
Fichier(s) infecté(s):
C:\WINDOWS\System32\adzgalore-remove.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\BattlesOfHelicopters.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\BobAndBill.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\CrazyBlocks.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\Lines.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\uninstall.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\VideoPool.exe (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Bob and Bill adventures - Wild Hunting.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Crazy Blocks.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Lines.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\The Battles Of Helicopters.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Video Pool.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Downloads.lnk (Trojan.Lop) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Uninstall.lnk (Trojan.Lop) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload.lnk (Trojan.Lop) -> No action taken.
C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> No action taken.
C:\ProgramData\svhost.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\System32\udnjogdzmkzqnc.dll (Adware.BHO) -> No action taken.
Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1668
Windows 6.0.6001 Service Pack 1
19/01/2009 21:28:30
mbam-log-2009-01-19 (21-28-26).txt
Type de recherche: Examen rapide
Eléments examinés: 52596
Temps écoulé: 4 minute(s), 7 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 18
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b4a78d29-52b1-4a7b-bac0-1471bedf9836} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adzgaloregames (Adware.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> No action taken.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> No action taken.
Dossier(s) infecté(s):
C:\Program Files\Adzgalore Games Collection (Adware.Agent) -> No action taken.
C:\Users\Charlène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload (Trojan.Lop) -> No action taken.
Fichier(s) infecté(s):
C:\WINDOWS\System32\adzgalore-remove.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\BattlesOfHelicopters.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\BobAndBill.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\CrazyBlocks.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\Lines.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\uninstall.exe (Adware.Agent) -> No action taken.
C:\Program Files\Adzgalore Games Collection\VideoPool.exe (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Bob and Bill adventures - Wild Hunting.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Crazy Blocks.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Lines.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\The Battles Of Helicopters.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Video Pool.lnk (Adware.Agent) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Downloads.lnk (Trojan.Lop) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Uninstall.lnk (Trojan.Lop) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload.lnk (Trojan.Lop) -> No action taken.
C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> No action taken.
C:\ProgramData\svhost.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\System32\udnjogdzmkzqnc.dll (Adware.BHO) -> No action taken.
c'est le rapport avant la suppression que tu me donne là...
As-tu affiché les résultats et cliqué sur supprimer la sélection après avoir envoyé ce rapport ??
As-tu affiché les résultats et cliqué sur supprimer la sélection après avoir envoyé ce rapport ??
C'est pas ça ?
Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1668
Windows 6.0.6001 Service Pack 1
19/01/2009 21:28:35
mbam-log-2009-01-19 (21-28-35).txt
Type de recherche: Examen rapide
Eléments examinés: 52596
Temps écoulé: 4 minute(s), 7 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 18
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b4a78d29-52b1-4a7b-bac0-1471bedf9836} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adzgaloregames (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\Adzgalore Games Collection (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\Charlène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\WINDOWS\System32\adzgalore-remove.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\BattlesOfHelicopters.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\BobAndBill.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\CrazyBlocks.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\Lines.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\uninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\VideoPool.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Bob and Bill adventures - Wild Hunting.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Crazy Blocks.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Lines.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\The Battles Of Helicopters.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Video Pool.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Downloads.lnk (Trojan.Lop) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Uninstall.lnk (Trojan.Lop) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload.lnk (Trojan.Lop) -> Quarantined and deleted successfully.
C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\svhost.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\System32\udnjogdzmkzqnc.dll (Adware.BHO) -> Quarantined and deleted successfully.
Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1668
Windows 6.0.6001 Service Pack 1
19/01/2009 21:28:35
mbam-log-2009-01-19 (21-28-35).txt
Type de recherche: Examen rapide
Eléments examinés: 52596
Temps écoulé: 4 minute(s), 7 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 18
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b4a78d29-52b1-4a7b-bac0-1471bedf9836} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adzgaloregames (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5610abfa-5f0b-de2d-5025-f161c36bb4a8} (Adware.BHO) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\Adzgalore Games Collection (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\Charlène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\WINDOWS\System32\adzgalore-remove.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\BattlesOfHelicopters.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\BobAndBill.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\CrazyBlocks.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\Lines.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\uninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Adzgalore Games Collection\VideoPool.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Bob and Bill adventures - Wild Hunting.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Crazy Blocks.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Lines.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\The Battles Of Helicopters.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adzgalore Games Collection\Video Pool.lnk (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Downloads.lnk (Trojan.Lop) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload Uninstall.lnk (Trojan.Lop) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDownload\BitDownload.lnk (Trojan.Lop) -> Quarantined and deleted successfully.
C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\svhost.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\System32\udnjogdzmkzqnc.dll (Adware.BHO) -> Quarantined and deleted successfully.
Oui c'est bien ça ;-)
Maintenant fais ceci pour vérifier stp :
Veille à ce que le contrôle des comptes soit toujours désactivé !!
▶ Télécharger et enregistrer lopSD sur le Bureau
▶ Double-clic Lop S&D
▶ Faire l'installation
▶ Fermer toutes les applications
▶ Le lancer par un double-clic sur le raccourci qui est sur le bureau
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
▶ Taper F pour français , puis presser entrée
▶ Taper 1
▶ Presser Entrée
▶ Le PC va redémarrer
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
▶ Attendre l'apparition du rapport
▶ Copier le rapport et le coller dans la réponse
le rapport se trouve aussi à C:\lopR
Maintenant fais ceci pour vérifier stp :
Veille à ce que le contrôle des comptes soit toujours désactivé !!
▶ Télécharger et enregistrer lopSD sur le Bureau
▶ Double-clic Lop S&D
▶ Faire l'installation
▶ Fermer toutes les applications
▶ Le lancer par un double-clic sur le raccourci qui est sur le bureau
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
▶ Taper F pour français , puis presser entrée
▶ Taper 1
▶ Presser Entrée
▶ Le PC va redémarrer
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
▶ Attendre l'apparition du rapport
▶ Copier le rapport et le coller dans la réponse
le rapport se trouve aussi à C:\lopR
Mon ordi n'a pas redemarré mais le rapport c'est ouvert .
Le voici :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Charlène ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081220-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:364 Go (Free:209 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 19/01/2009|22:12 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[04/01/2009|17:58] C:\Users\CHARLN~1\AppData\Local\Adobe
[10/02/2008|16:02] C:\Users\CHARLN~1\AppData\Local\Apple
[10/02/2008|16:14] C:\Users\CHARLN~1\AppData\Local\Apple Computer
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Application Data
[03/05/2008|14:50] C:\Users\CHARLN~1\AppData\Local\d3d9caps.dat
[17/01/2009|20:46] C:\Users\CHARLN~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/01/2009|21:57] C:\Users\CHARLN~1\AppData\Local\eMule
[19/10/2008|17:37] C:\Users\CHARLN~1\AppData\Local\GDIPFONTCACHEV1.DAT
[07/06/2008|21:15] C:\Users\CHARLN~1\AppData\Local\Google
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Historique
[19/01/2009|21:14] C:\Users\CHARLN~1\AppData\Local\IconCache.db
[02/01/2009|18:13] C:\Users\CHARLN~1\AppData\Local\Microsoft
[08/10/2008|17:59] C:\Users\CHARLN~1\AppData\Local\Microsoft Help
[10/02/2008|00:19] C:\Users\CHARLN~1\AppData\Local\Mozilla
[07/01/2009|16:56] C:\Users\CHARLN~1\AppData\Local\Shareaza
[19/01/2009|22:11] C:\Users\CHARLN~1\AppData\Local\Temp
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Temporary Internet Files
[06/10/2008|19:16] C:\Users\CHARLN~1\AppData\Local\VirtualStore
[13/12/2008|23:46] C:\Users\CHARLN~1\AppData\Local\Winamp Toolbar
[18/11/2008|21:33] C:\Users\CHARLN~1\AppData\Local\Zattoo
[08/11/2008|20:35] C:\Users\CHARLN~1\AppData\Local\ZattooPlayer
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[19/01/2009 19:56][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{5842DB62-545A-41C4-B777-99A22648A95F}.job
[26/12/2008 19:47][--a------] C:\Windows\tasks\Norton Security Scan.job
[19/01/2009 21:30][--ah-----] C:\Windows\tasks\SA.DAT
[19/01/2009 21:30][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[24/12/2008|23:16] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[16/01/2008|14:52] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[11/01/2009|17:06] C:\ProgramData\Adobe
[10/02/2008|16:01] C:\ProgramData\Apple
[24/12/2008|23:16] C:\ProgramData\Apple Computer
[08/02/2008|19:25] C:\ProgramData\Application Data
[02/01/2009|18:15] C:\ProgramData\avg8
[18/10/2008|11:02] C:\ProgramData\Avira
[29/05/2008|21:19] C:\ProgramData\BM67319e41.txt
[11/06/2008|20:23] C:\ProgramData\BM67319e41.xml
[08/02/2008|19:25] C:\ProgramData\Bureau
[08/02/2008|19:25] C:\ProgramData\Documents
[14/01/2009|21:58] C:\ProgramData\eMule
[08/02/2008|19:25] C:\ProgramData\Favoris
[27/12/2008|00:30] C:\ProgramData\FLEXnet
[16/01/2008|14:57] C:\ProgramData\Google
[07/10/2008|18:38] C:\ProgramData\Google Updater
[23/12/2008|21:56] C:\ProgramData\Grisoft
[16/01/2008|15:07] C:\ProgramData\Hewlett-Packard
[16/01/2008|14:37] C:\ProgramData\HP
[16/01/2008|14:37] C:\ProgramData\hpzinstall.log
[28/08/2008|17:03] C:\ProgramData\LauncherAccess.dt
[27/05/2008|19:05] C:\ProgramData\Lavasoft
[11/06/2008|20:38] C:\ProgramData\LUUnInstall.LiveUpdate
[11/06/2008|20:31] C:\ProgramData\Malwarebytes
[08/02/2008|19:25] C:\ProgramData\Menu D‚marrer
[03/05/2008|18:19] C:\ProgramData\Messenger Plus!
[17/10/2008|22:24] C:\ProgramData\Microsoft
[15/01/2009|21:22] C:\ProgramData\Microsoft Help
[08/02/2008|19:25] C:\ProgramData\ModŠles
[16/01/2008|14:46] C:\ProgramData\muvee Technologies
[24/09/2008|16:13] C:\ProgramData\NVIDIA
[18/01/2009|22:14] C:\ProgramData\OrbNetworks
[16/01/2008|14:54] C:\ProgramData\PC-Doctor
[11/06/2008|20:22] C:\ProgramData\pskt.ini
[16/01/2008|14:42] C:\ProgramData\Roxio
[07/06/2008|23:30] C:\ProgramData\Skype
[20/06/2008|22:18] C:\ProgramData\Sonic
[02/01/2009|20:20] C:\ProgramData\Spybot - Search & Destroy
[11/06/2008|21:21] C:\ProgramData\Symantec
[19/01/2009|21:51] C:\ProgramData\TEMP
[02/09/2008|16:20] C:\ProgramData\UDL
[13/12/2008|23:39] C:\ProgramData\Winamp Toolbar
[10/02/2008|00:05] C:\ProgramData\WLInstaller
--------------------\\ Listing des dossiers dans C:\Program Files
[16/01/2008|14:52] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[18/01/2009|18:29] C:\Program Files\Adobe
[13/04/2008|14:05] C:\Program Files\Alwil Software
[21/12/2008|23:38] C:\Program Files\Apple Software Update
[02/01/2009|18:15] C:\Program Files\AVG
[18/10/2008|11:02] C:\Program Files\Avira
[26/10/2008|12:25] C:\Program Files\AviSynth 2.5
[21/12/2008|23:46] C:\Program Files\Bonjour
[09/06/2008|21:40] C:\Program Files\CCleaner
[10/02/2008|00:20] C:\Program Files\Circle Developement
[16/01/2009|22:08] C:\Program Files\Common Files
[22/02/2007|17:37] C:\Program Files\EasyBits
[14/01/2009|21:57] C:\Program Files\eMule
[02/09/2008|16:19] C:\Program Files\epson
[26/10/2008|12:24] C:\Program Files\eRightSoft
[08/02/2008|19:25] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/06/2008|18:51] C:\Program Files\Google
[23/12/2008|21:56] C:\Program Files\Grisoft
[16/01/2008|14:55] C:\Program Files\Hewlett-Packard
[16/01/2008|14:48] C:\Program Files\HP
[02/09/2008|16:30] C:\Program Files\InstallShield Installation Information
[18/10/2008|11:02] C:\Program Files\Internet Explorer
[24/12/2008|23:16] C:\Program Files\iPod
[24/12/2008|23:16] C:\Program Files\iTunes
[08/10/2008|18:05] C:\Program Files\Java
[25/05/2008|19:53] C:\Program Files\K-Lite Codec Pack
[27/05/2008|19:02] C:\Program Files\Lavasoft
[25/10/2008|18:14] C:\Program Files\LimeWire
[19/01/2009|19:52] C:\Program Files\Malwarebytes' Anti-Malware
[26/10/2008|13:05] C:\Program Files\MediaCoder
[31/08/2008|16:05] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[08/10/2008|18:06] C:\Program Files\Microsoft Office
[23/11/2008|14:15] C:\Program Files\Microsoft Silverlight
[17/10/2008|22:36] C:\Program Files\Microsoft SQL Server Compact Edition
[08/10/2008|18:06] C:\Program Files\Microsoft Visual Studio
[08/10/2008|18:00] C:\Program Files\Microsoft Visual Studio 8
[08/10/2008|18:07] C:\Program Files\Microsoft Works
[08/10/2008|18:05] C:\Program Files\Microsoft.NET
[24/09/2008|15:53] C:\Program Files\Movie Maker
[28/12/2008|18:50] C:\Program Files\Mozilla Firefox
[08/10/2008|18:07] C:\Program Files\MSBuild
[17/10/2008|23:00] C:\Program Files\MSN Messenger
[10/02/2008|14:20] C:\Program Files\MSXML 4.0
[16/01/2008|14:46] C:\Program Files\muvee Technologies
[26/12/2008|15:00] C:\Program Files\Norton Security Scan
[09/09/2008|21:55] C:\Program Files\OpenOffice.org 2.4
[08/02/2008|19:33] C:\Program Files\Orange
[26/12/2008|13:50] C:\Program Files\Panda Security
[16/01/2008|15:07] C:\Program Files\PC-Doctor 5 for Windows
[26/09/2008|22:11] C:\Program Files\PhotoFiltre Studio
[30/09/2008|18:29] C:\Program Files\Picasa2
[21/12/2008|23:45] C:\Program Files\QuickTime
[26/10/2008|12:55] C:\Program Files\RADVideo
[16/01/2008|14:45] C:\Program Files\Real
[29/03/2008|00:28] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[11/06/2008|14:34] C:\Program Files\Registry Mechanic
[16/01/2008|14:44] C:\Program Files\Roxio
[09/02/2008|23:04] C:\Program Files\SAGEM
[16/05/2008|22:58] C:\Program Files\Samsung
[16/01/2008|14:57] C:\Program Files\Services en ligne
[07/01/2009|17:01] C:\Program Files\Shareaza
[07/06/2008|23:30] C:\Program Files\Skype
[02/01/2009|18:27] C:\Program Files\Spybot - Search & Destroy
[19/01/2009|20:09] C:\Program Files\Spyware Doctor
[11/06/2008|20:37] C:\Program Files\Symantec
[05/10/2008|19:25] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[25/05/2008|19:04] C:\Program Files\VideoLAN
[13/12/2008|23:39] C:\Program Files\Winamp
[13/12/2008|23:39] C:\Program Files\Winamp Remote
[13/12/2008|23:39] C:\Program Files\Winamp Toolbar
[24/09/2008|15:53] C:\Program Files\Windows Calendar
[24/09/2008|15:53] C:\Program Files\Windows Collaboration
[24/09/2008|15:53] C:\Program Files\Windows Defender
[24/09/2008|15:53] C:\Program Files\Windows Journal
[18/10/2008|11:02] C:\Program Files\Windows Live
[27/12/2008|00:10] C:\Program Files\Windows Live Safety Center
[15/01/2009|21:22] C:\Program Files\Windows Mail
[24/09/2008|15:53] C:\Program Files\Windows Media Player
[08/02/2008|19:25] C:\Program Files\Windows NT
[24/09/2008|15:53] C:\Program Files\Windows Photo Gallery
[24/09/2008|15:53] C:\Program Files\Windows Sidebar
[11/06/2008|15:10] C:\Program Files\WinRAR
[26/09/2008|22:27] C:\Program Files\Wyzo
[08/11/2008|20:32] C:\Program Files\Zattoo
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[18/01/2009|18:32] C:\Program Files\Common Files\Adobe
[24/12/2008|23:16] C:\Program Files\Common Files\Apple
[08/10/2008|18:06] C:\Program Files\Common Files\DESIGNER
[16/01/2008|14:37] C:\Program Files\Common Files\HP
[02/09/2008|16:01] C:\Program Files\Common Files\InstallShield
[25/05/2008|18:39] C:\Program Files\Common Files\Java
[16/01/2008|14:45] C:\Program Files\Common Files\LightScribe
[16/01/2008|14:45] C:\Program Files\Common Files\LS Getting Started
[11/10/2008|19:18] C:\Program Files\Common Files\Macrovision Shared
[02/01/2009|18:14] C:\Program Files\Common Files\microsoft shared
[16/01/2008|14:46] C:\Program Files\Common Files\muvee Technologies
[16/01/2008|14:43] C:\Program Files\Common Files\PX Storage Engine
[27/09/2008|22:12] C:\Program Files\Common Files\Real
[16/01/2008|14:43] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[07/06/2008|23:29] C:\Program Files\Common Files\Skype
[16/01/2008|14:44] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[16/01/2008|14:44] C:\Program Files\Common Files\SureThing Shared
[26/12/2008|15:05] C:\Program Files\Common Files\Symantec Shared
[17/10/2008|22:38] C:\Program Files\Common Files\System
[17/10/2008|22:26] C:\Program Files\Common Files\Windows Live
[10/02/2008|00:10] C:\Program Files\Common Files\WindowsLiveInstaller
[27/05/2008|19:00] C:\Program Files\Common Files\Wise Installation Wizard
[27/09/2008|22:12] C:\Program Files\Common Files\xing shared
--------------------\\ Process
( 59 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\CHARLN~1\AppData\Local\Temp\nshE767.tmp
C:\Program Files\Circle Developement
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertstream[1].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertising[2].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@adopt.euroclick[2].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-19 22:13:11
Windows 6.0.6001 Service Pack 1 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 638
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\crack_danger[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\spyware-doctor-2009-keygen_ltr[1].gif
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen-spyware-doctor[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\82109-spyware-doctor-2009-keygen[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger3[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger4[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger0[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger2[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.289\crack.nfo
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.904\keygen.nfo
C:\Users\CHARLN~1\AppData\Roaming\Microsoft\Windows\Recent\crack.txt.lnk
C:\Users\CHARLN~1\Desktop\a suppr\crack+keygen.exe
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\crack.txt
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\Photoshop.exe
C:\Users\CHARLN~1\Desktop\nous 3\crack+keygen.exe
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-118459-spyware doctor crack incl license keys.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-128455-spyware doctor crack setup incl serial.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-81459-spyware doctor crack keymaker by RoR.zip
C:\Users\CHARLN~1\Favorites\serials nero 9 driver detective avast nero office 2007 spyware doctor nero 8 ad kaspersky internet download manager keygen.name.url
[F:2204][D:61]-> C:\Users\CHARLN~1\AppData\Local\Temp
[F:365][D:1]-> C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:5971][D:7]-> C:\Users\CHARLN~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 19/01/2009|22:15 - Option : [1]
--------------------\\ Fin du rapport a 22:15:56
[ UAC => 1 ]
Le voici :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Charlène ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081220-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:364 Go (Free:209 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 19/01/2009|22:12 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[04/01/2009|17:58] C:\Users\CHARLN~1\AppData\Local\Adobe
[10/02/2008|16:02] C:\Users\CHARLN~1\AppData\Local\Apple
[10/02/2008|16:14] C:\Users\CHARLN~1\AppData\Local\Apple Computer
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Application Data
[03/05/2008|14:50] C:\Users\CHARLN~1\AppData\Local\d3d9caps.dat
[17/01/2009|20:46] C:\Users\CHARLN~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/01/2009|21:57] C:\Users\CHARLN~1\AppData\Local\eMule
[19/10/2008|17:37] C:\Users\CHARLN~1\AppData\Local\GDIPFONTCACHEV1.DAT
[07/06/2008|21:15] C:\Users\CHARLN~1\AppData\Local\Google
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Historique
[19/01/2009|21:14] C:\Users\CHARLN~1\AppData\Local\IconCache.db
[02/01/2009|18:13] C:\Users\CHARLN~1\AppData\Local\Microsoft
[08/10/2008|17:59] C:\Users\CHARLN~1\AppData\Local\Microsoft Help
[10/02/2008|00:19] C:\Users\CHARLN~1\AppData\Local\Mozilla
[07/01/2009|16:56] C:\Users\CHARLN~1\AppData\Local\Shareaza
[19/01/2009|22:11] C:\Users\CHARLN~1\AppData\Local\Temp
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Temporary Internet Files
[06/10/2008|19:16] C:\Users\CHARLN~1\AppData\Local\VirtualStore
[13/12/2008|23:46] C:\Users\CHARLN~1\AppData\Local\Winamp Toolbar
[18/11/2008|21:33] C:\Users\CHARLN~1\AppData\Local\Zattoo
[08/11/2008|20:35] C:\Users\CHARLN~1\AppData\Local\ZattooPlayer
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[19/01/2009 19:56][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{5842DB62-545A-41C4-B777-99A22648A95F}.job
[26/12/2008 19:47][--a------] C:\Windows\tasks\Norton Security Scan.job
[19/01/2009 21:30][--ah-----] C:\Windows\tasks\SA.DAT
[19/01/2009 21:30][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[24/12/2008|23:16] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[16/01/2008|14:52] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[11/01/2009|17:06] C:\ProgramData\Adobe
[10/02/2008|16:01] C:\ProgramData\Apple
[24/12/2008|23:16] C:\ProgramData\Apple Computer
[08/02/2008|19:25] C:\ProgramData\Application Data
[02/01/2009|18:15] C:\ProgramData\avg8
[18/10/2008|11:02] C:\ProgramData\Avira
[29/05/2008|21:19] C:\ProgramData\BM67319e41.txt
[11/06/2008|20:23] C:\ProgramData\BM67319e41.xml
[08/02/2008|19:25] C:\ProgramData\Bureau
[08/02/2008|19:25] C:\ProgramData\Documents
[14/01/2009|21:58] C:\ProgramData\eMule
[08/02/2008|19:25] C:\ProgramData\Favoris
[27/12/2008|00:30] C:\ProgramData\FLEXnet
[16/01/2008|14:57] C:\ProgramData\Google
[07/10/2008|18:38] C:\ProgramData\Google Updater
[23/12/2008|21:56] C:\ProgramData\Grisoft
[16/01/2008|15:07] C:\ProgramData\Hewlett-Packard
[16/01/2008|14:37] C:\ProgramData\HP
[16/01/2008|14:37] C:\ProgramData\hpzinstall.log
[28/08/2008|17:03] C:\ProgramData\LauncherAccess.dt
[27/05/2008|19:05] C:\ProgramData\Lavasoft
[11/06/2008|20:38] C:\ProgramData\LUUnInstall.LiveUpdate
[11/06/2008|20:31] C:\ProgramData\Malwarebytes
[08/02/2008|19:25] C:\ProgramData\Menu D‚marrer
[03/05/2008|18:19] C:\ProgramData\Messenger Plus!
[17/10/2008|22:24] C:\ProgramData\Microsoft
[15/01/2009|21:22] C:\ProgramData\Microsoft Help
[08/02/2008|19:25] C:\ProgramData\ModŠles
[16/01/2008|14:46] C:\ProgramData\muvee Technologies
[24/09/2008|16:13] C:\ProgramData\NVIDIA
[18/01/2009|22:14] C:\ProgramData\OrbNetworks
[16/01/2008|14:54] C:\ProgramData\PC-Doctor
[11/06/2008|20:22] C:\ProgramData\pskt.ini
[16/01/2008|14:42] C:\ProgramData\Roxio
[07/06/2008|23:30] C:\ProgramData\Skype
[20/06/2008|22:18] C:\ProgramData\Sonic
[02/01/2009|20:20] C:\ProgramData\Spybot - Search & Destroy
[11/06/2008|21:21] C:\ProgramData\Symantec
[19/01/2009|21:51] C:\ProgramData\TEMP
[02/09/2008|16:20] C:\ProgramData\UDL
[13/12/2008|23:39] C:\ProgramData\Winamp Toolbar
[10/02/2008|00:05] C:\ProgramData\WLInstaller
--------------------\\ Listing des dossiers dans C:\Program Files
[16/01/2008|14:52] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[18/01/2009|18:29] C:\Program Files\Adobe
[13/04/2008|14:05] C:\Program Files\Alwil Software
[21/12/2008|23:38] C:\Program Files\Apple Software Update
[02/01/2009|18:15] C:\Program Files\AVG
[18/10/2008|11:02] C:\Program Files\Avira
[26/10/2008|12:25] C:\Program Files\AviSynth 2.5
[21/12/2008|23:46] C:\Program Files\Bonjour
[09/06/2008|21:40] C:\Program Files\CCleaner
[10/02/2008|00:20] C:\Program Files\Circle Developement
[16/01/2009|22:08] C:\Program Files\Common Files
[22/02/2007|17:37] C:\Program Files\EasyBits
[14/01/2009|21:57] C:\Program Files\eMule
[02/09/2008|16:19] C:\Program Files\epson
[26/10/2008|12:24] C:\Program Files\eRightSoft
[08/02/2008|19:25] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/06/2008|18:51] C:\Program Files\Google
[23/12/2008|21:56] C:\Program Files\Grisoft
[16/01/2008|14:55] C:\Program Files\Hewlett-Packard
[16/01/2008|14:48] C:\Program Files\HP
[02/09/2008|16:30] C:\Program Files\InstallShield Installation Information
[18/10/2008|11:02] C:\Program Files\Internet Explorer
[24/12/2008|23:16] C:\Program Files\iPod
[24/12/2008|23:16] C:\Program Files\iTunes
[08/10/2008|18:05] C:\Program Files\Java
[25/05/2008|19:53] C:\Program Files\K-Lite Codec Pack
[27/05/2008|19:02] C:\Program Files\Lavasoft
[25/10/2008|18:14] C:\Program Files\LimeWire
[19/01/2009|19:52] C:\Program Files\Malwarebytes' Anti-Malware
[26/10/2008|13:05] C:\Program Files\MediaCoder
[31/08/2008|16:05] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[08/10/2008|18:06] C:\Program Files\Microsoft Office
[23/11/2008|14:15] C:\Program Files\Microsoft Silverlight
[17/10/2008|22:36] C:\Program Files\Microsoft SQL Server Compact Edition
[08/10/2008|18:06] C:\Program Files\Microsoft Visual Studio
[08/10/2008|18:00] C:\Program Files\Microsoft Visual Studio 8
[08/10/2008|18:07] C:\Program Files\Microsoft Works
[08/10/2008|18:05] C:\Program Files\Microsoft.NET
[24/09/2008|15:53] C:\Program Files\Movie Maker
[28/12/2008|18:50] C:\Program Files\Mozilla Firefox
[08/10/2008|18:07] C:\Program Files\MSBuild
[17/10/2008|23:00] C:\Program Files\MSN Messenger
[10/02/2008|14:20] C:\Program Files\MSXML 4.0
[16/01/2008|14:46] C:\Program Files\muvee Technologies
[26/12/2008|15:00] C:\Program Files\Norton Security Scan
[09/09/2008|21:55] C:\Program Files\OpenOffice.org 2.4
[08/02/2008|19:33] C:\Program Files\Orange
[26/12/2008|13:50] C:\Program Files\Panda Security
[16/01/2008|15:07] C:\Program Files\PC-Doctor 5 for Windows
[26/09/2008|22:11] C:\Program Files\PhotoFiltre Studio
[30/09/2008|18:29] C:\Program Files\Picasa2
[21/12/2008|23:45] C:\Program Files\QuickTime
[26/10/2008|12:55] C:\Program Files\RADVideo
[16/01/2008|14:45] C:\Program Files\Real
[29/03/2008|00:28] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[11/06/2008|14:34] C:\Program Files\Registry Mechanic
[16/01/2008|14:44] C:\Program Files\Roxio
[09/02/2008|23:04] C:\Program Files\SAGEM
[16/05/2008|22:58] C:\Program Files\Samsung
[16/01/2008|14:57] C:\Program Files\Services en ligne
[07/01/2009|17:01] C:\Program Files\Shareaza
[07/06/2008|23:30] C:\Program Files\Skype
[02/01/2009|18:27] C:\Program Files\Spybot - Search & Destroy
[19/01/2009|20:09] C:\Program Files\Spyware Doctor
[11/06/2008|20:37] C:\Program Files\Symantec
[05/10/2008|19:25] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[25/05/2008|19:04] C:\Program Files\VideoLAN
[13/12/2008|23:39] C:\Program Files\Winamp
[13/12/2008|23:39] C:\Program Files\Winamp Remote
[13/12/2008|23:39] C:\Program Files\Winamp Toolbar
[24/09/2008|15:53] C:\Program Files\Windows Calendar
[24/09/2008|15:53] C:\Program Files\Windows Collaboration
[24/09/2008|15:53] C:\Program Files\Windows Defender
[24/09/2008|15:53] C:\Program Files\Windows Journal
[18/10/2008|11:02] C:\Program Files\Windows Live
[27/12/2008|00:10] C:\Program Files\Windows Live Safety Center
[15/01/2009|21:22] C:\Program Files\Windows Mail
[24/09/2008|15:53] C:\Program Files\Windows Media Player
[08/02/2008|19:25] C:\Program Files\Windows NT
[24/09/2008|15:53] C:\Program Files\Windows Photo Gallery
[24/09/2008|15:53] C:\Program Files\Windows Sidebar
[11/06/2008|15:10] C:\Program Files\WinRAR
[26/09/2008|22:27] C:\Program Files\Wyzo
[08/11/2008|20:32] C:\Program Files\Zattoo
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[18/01/2009|18:32] C:\Program Files\Common Files\Adobe
[24/12/2008|23:16] C:\Program Files\Common Files\Apple
[08/10/2008|18:06] C:\Program Files\Common Files\DESIGNER
[16/01/2008|14:37] C:\Program Files\Common Files\HP
[02/09/2008|16:01] C:\Program Files\Common Files\InstallShield
[25/05/2008|18:39] C:\Program Files\Common Files\Java
[16/01/2008|14:45] C:\Program Files\Common Files\LightScribe
[16/01/2008|14:45] C:\Program Files\Common Files\LS Getting Started
[11/10/2008|19:18] C:\Program Files\Common Files\Macrovision Shared
[02/01/2009|18:14] C:\Program Files\Common Files\microsoft shared
[16/01/2008|14:46] C:\Program Files\Common Files\muvee Technologies
[16/01/2008|14:43] C:\Program Files\Common Files\PX Storage Engine
[27/09/2008|22:12] C:\Program Files\Common Files\Real
[16/01/2008|14:43] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[07/06/2008|23:29] C:\Program Files\Common Files\Skype
[16/01/2008|14:44] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[16/01/2008|14:44] C:\Program Files\Common Files\SureThing Shared
[26/12/2008|15:05] C:\Program Files\Common Files\Symantec Shared
[17/10/2008|22:38] C:\Program Files\Common Files\System
[17/10/2008|22:26] C:\Program Files\Common Files\Windows Live
[10/02/2008|00:10] C:\Program Files\Common Files\WindowsLiveInstaller
[27/05/2008|19:00] C:\Program Files\Common Files\Wise Installation Wizard
[27/09/2008|22:12] C:\Program Files\Common Files\xing shared
--------------------\\ Process
( 59 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\CHARLN~1\AppData\Local\Temp\nshE767.tmp
C:\Program Files\Circle Developement
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertstream[1].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertising[2].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@adopt.euroclick[2].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-19 22:13:11
Windows 6.0.6001 Service Pack 1 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 638
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\crack_danger[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\spyware-doctor-2009-keygen_ltr[1].gif
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen-spyware-doctor[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\82109-spyware-doctor-2009-keygen[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger3[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger4[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger0[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger2[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.289\crack.nfo
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.904\keygen.nfo
C:\Users\CHARLN~1\AppData\Roaming\Microsoft\Windows\Recent\crack.txt.lnk
C:\Users\CHARLN~1\Desktop\a suppr\crack+keygen.exe
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\crack.txt
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\Photoshop.exe
C:\Users\CHARLN~1\Desktop\nous 3\crack+keygen.exe
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-118459-spyware doctor crack incl license keys.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-128455-spyware doctor crack setup incl serial.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-81459-spyware doctor crack keymaker by RoR.zip
C:\Users\CHARLN~1\Favorites\serials nero 9 driver detective avast nero office 2007 spyware doctor nero 8 ad kaspersky internet download manager keygen.name.url
[F:2204][D:61]-> C:\Users\CHARLN~1\AppData\Local\Temp
[F:365][D:1]-> C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:5971][D:7]-> C:\Users\CHARLN~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 19/01/2009|22:15 - Option : [1]
--------------------\\ Fin du rapport a 22:15:56
[ UAC => 1 ]
▶ Relance Lop S&D
▶ Choisis cette fois-ci l'option 2 (Suppression)
▶ Ne ferme pas la fenêtre lors de la suppression !
▶ Poste le rapport généré (C:\lopR.txt)
* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
et ensuite refais un nouveau rapport hijackthis stp
▶ Choisis cette fois-ci l'option 2 (Suppression)
▶ Ne ferme pas la fenêtre lors de la suppression !
▶ Poste le rapport généré (C:\lopR.txt)
* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
et ensuite refais un nouveau rapport hijackthis stp
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Charlène ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081220-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:364 Go (Free:209 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 19/01/2009|22:23 )
[ UAC => 1 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\CHARLN~1\AppData\Local\Temp\nshE767.tmp
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[04/01/2009|17:58] C:\Users\CHARLN~1\AppData\Local\Adobe
[10/02/2008|16:02] C:\Users\CHARLN~1\AppData\Local\Apple
[10/02/2008|16:14] C:\Users\CHARLN~1\AppData\Local\Apple Computer
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Application Data
[03/05/2008|14:50] C:\Users\CHARLN~1\AppData\Local\d3d9caps.dat
[17/01/2009|20:46] C:\Users\CHARLN~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/01/2009|21:57] C:\Users\CHARLN~1\AppData\Local\eMule
[19/10/2008|17:37] C:\Users\CHARLN~1\AppData\Local\GDIPFONTCACHEV1.DAT
[07/06/2008|21:15] C:\Users\CHARLN~1\AppData\Local\Google
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Historique
[19/01/2009|21:14] C:\Users\CHARLN~1\AppData\Local\IconCache.db
[02/01/2009|18:13] C:\Users\CHARLN~1\AppData\Local\Microsoft
[08/10/2008|17:59] C:\Users\CHARLN~1\AppData\Local\Microsoft Help
[10/02/2008|00:19] C:\Users\CHARLN~1\AppData\Local\Mozilla
[07/01/2009|16:56] C:\Users\CHARLN~1\AppData\Local\Shareaza
[19/01/2009|22:23] C:\Users\CHARLN~1\AppData\Local\Temp
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Temporary Internet Files
[06/10/2008|19:16] C:\Users\CHARLN~1\AppData\Local\VirtualStore
[13/12/2008|23:46] C:\Users\CHARLN~1\AppData\Local\Winamp Toolbar
[18/11/2008|21:33] C:\Users\CHARLN~1\AppData\Local\Zattoo
[08/11/2008|20:35] C:\Users\CHARLN~1\AppData\Local\ZattooPlayer
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[19/01/2009 19:56][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{5842DB62-545A-41C4-B777-99A22648A95F}.job
[26/12/2008 19:47][--a------] C:\Windows\tasks\Norton Security Scan.job
[19/01/2009 21:30][--ah-----] C:\Windows\tasks\SA.DAT
[19/01/2009 21:30][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[24/12/2008|23:16] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[16/01/2008|14:52] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[11/01/2009|17:06] C:\ProgramData\Adobe
[10/02/2008|16:01] C:\ProgramData\Apple
[24/12/2008|23:16] C:\ProgramData\Apple Computer
[08/02/2008|19:25] C:\ProgramData\Application Data
[02/01/2009|18:15] C:\ProgramData\avg8
[18/10/2008|11:02] C:\ProgramData\Avira
[29/05/2008|21:19] C:\ProgramData\BM67319e41.txt
[11/06/2008|20:23] C:\ProgramData\BM67319e41.xml
[08/02/2008|19:25] C:\ProgramData\Bureau
[08/02/2008|19:25] C:\ProgramData\Documents
[14/01/2009|21:58] C:\ProgramData\eMule
[08/02/2008|19:25] C:\ProgramData\Favoris
[27/12/2008|00:30] C:\ProgramData\FLEXnet
[16/01/2008|14:57] C:\ProgramData\Google
[07/10/2008|18:38] C:\ProgramData\Google Updater
[23/12/2008|21:56] C:\ProgramData\Grisoft
[16/01/2008|15:07] C:\ProgramData\Hewlett-Packard
[16/01/2008|14:37] C:\ProgramData\HP
[16/01/2008|14:37] C:\ProgramData\hpzinstall.log
[28/08/2008|17:03] C:\ProgramData\LauncherAccess.dt
[27/05/2008|19:05] C:\ProgramData\Lavasoft
[11/06/2008|20:38] C:\ProgramData\LUUnInstall.LiveUpdate
[11/06/2008|20:31] C:\ProgramData\Malwarebytes
[08/02/2008|19:25] C:\ProgramData\Menu D‚marrer
[03/05/2008|18:19] C:\ProgramData\Messenger Plus!
[17/10/2008|22:24] C:\ProgramData\Microsoft
[15/01/2009|21:22] C:\ProgramData\Microsoft Help
[08/02/2008|19:25] C:\ProgramData\ModŠles
[16/01/2008|14:46] C:\ProgramData\muvee Technologies
[24/09/2008|16:13] C:\ProgramData\NVIDIA
[18/01/2009|22:14] C:\ProgramData\OrbNetworks
[16/01/2008|14:54] C:\ProgramData\PC-Doctor
[11/06/2008|20:22] C:\ProgramData\pskt.ini
[16/01/2008|14:42] C:\ProgramData\Roxio
[07/06/2008|23:30] C:\ProgramData\Skype
[20/06/2008|22:18] C:\ProgramData\Sonic
[02/01/2009|20:20] C:\ProgramData\Spybot - Search & Destroy
[11/06/2008|21:21] C:\ProgramData\Symantec
[19/01/2009|21:51] C:\ProgramData\TEMP
[02/09/2008|16:20] C:\ProgramData\UDL
[13/12/2008|23:39] C:\ProgramData\Winamp Toolbar
[10/02/2008|00:05] C:\ProgramData\WLInstaller
--------------------\\ Listing des dossiers dans C:\Program Files
[16/01/2008|14:52] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[18/01/2009|18:29] C:\Program Files\Adobe
[13/04/2008|14:05] C:\Program Files\Alwil Software
[21/12/2008|23:38] C:\Program Files\Apple Software Update
[02/01/2009|18:15] C:\Program Files\AVG
[18/10/2008|11:02] C:\Program Files\Avira
[26/10/2008|12:25] C:\Program Files\AviSynth 2.5
[21/12/2008|23:46] C:\Program Files\Bonjour
[09/06/2008|21:40] C:\Program Files\CCleaner
[16/01/2009|22:08] C:\Program Files\Common Files
[22/02/2007|17:37] C:\Program Files\EasyBits
[14/01/2009|21:57] C:\Program Files\eMule
[02/09/2008|16:19] C:\Program Files\epson
[26/10/2008|12:24] C:\Program Files\eRightSoft
[08/02/2008|19:25] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/06/2008|18:51] C:\Program Files\Google
[23/12/2008|21:56] C:\Program Files\Grisoft
[16/01/2008|14:55] C:\Program Files\Hewlett-Packard
[16/01/2008|14:48] C:\Program Files\HP
[02/09/2008|16:30] C:\Program Files\InstallShield Installation Information
[18/10/2008|11:02] C:\Program Files\Internet Explorer
[24/12/2008|23:16] C:\Program Files\iPod
[24/12/2008|23:16] C:\Program Files\iTunes
[08/10/2008|18:05] C:\Program Files\Java
[25/05/2008|19:53] C:\Program Files\K-Lite Codec Pack
[27/05/2008|19:02] C:\Program Files\Lavasoft
[25/10/2008|18:14] C:\Program Files\LimeWire
[19/01/2009|19:52] C:\Program Files\Malwarebytes' Anti-Malware
[26/10/2008|13:05] C:\Program Files\MediaCoder
[31/08/2008|16:05] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[08/10/2008|18:06] C:\Program Files\Microsoft Office
[23/11/2008|14:15] C:\Program Files\Microsoft Silverlight
[17/10/2008|22:36] C:\Program Files\Microsoft SQL Server Compact Edition
[08/10/2008|18:06] C:\Program Files\Microsoft Visual Studio
[08/10/2008|18:00] C:\Program Files\Microsoft Visual Studio 8
[08/10/2008|18:07] C:\Program Files\Microsoft Works
[08/10/2008|18:05] C:\Program Files\Microsoft.NET
[24/09/2008|15:53] C:\Program Files\Movie Maker
[28/12/2008|18:50] C:\Program Files\Mozilla Firefox
[08/10/2008|18:07] C:\Program Files\MSBuild
[17/10/2008|23:00] C:\Program Files\MSN Messenger
[10/02/2008|14:20] C:\Program Files\MSXML 4.0
[16/01/2008|14:46] C:\Program Files\muvee Technologies
[26/12/2008|15:00] C:\Program Files\Norton Security Scan
[09/09/2008|21:55] C:\Program Files\OpenOffice.org 2.4
[08/02/2008|19:33] C:\Program Files\Orange
[26/12/2008|13:50] C:\Program Files\Panda Security
[16/01/2008|15:07] C:\Program Files\PC-Doctor 5 for Windows
[26/09/2008|22:11] C:\Program Files\PhotoFiltre Studio
[30/09/2008|18:29] C:\Program Files\Picasa2
[21/12/2008|23:45] C:\Program Files\QuickTime
[26/10/2008|12:55] C:\Program Files\RADVideo
[16/01/2008|14:45] C:\Program Files\Real
[29/03/2008|00:28] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[11/06/2008|14:34] C:\Program Files\Registry Mechanic
[16/01/2008|14:44] C:\Program Files\Roxio
[09/02/2008|23:04] C:\Program Files\SAGEM
[16/05/2008|22:58] C:\Program Files\Samsung
[16/01/2008|14:57] C:\Program Files\Services en ligne
[07/01/2009|17:01] C:\Program Files\Shareaza
[07/06/2008|23:30] C:\Program Files\Skype
[02/01/2009|18:27] C:\Program Files\Spybot - Search & Destroy
[19/01/2009|20:09] C:\Program Files\Spyware Doctor
[11/06/2008|20:37] C:\Program Files\Symantec
[05/10/2008|19:25] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[25/05/2008|19:04] C:\Program Files\VideoLAN
[13/12/2008|23:39] C:\Program Files\Winamp
[13/12/2008|23:39] C:\Program Files\Winamp Remote
[13/12/2008|23:39] C:\Program Files\Winamp Toolbar
[24/09/2008|15:53] C:\Program Files\Windows Calendar
[24/09/2008|15:53] C:\Program Files\Windows Collaboration
[24/09/2008|15:53] C:\Program Files\Windows Defender
[24/09/2008|15:53] C:\Program Files\Windows Journal
[18/10/2008|11:02] C:\Program Files\Windows Live
[27/12/2008|00:10] C:\Program Files\Windows Live Safety Center
[15/01/2009|21:22] C:\Program Files\Windows Mail
[24/09/2008|15:53] C:\Program Files\Windows Media Player
[08/02/2008|19:25] C:\Program Files\Windows NT
[24/09/2008|15:53] C:\Program Files\Windows Photo Gallery
[24/09/2008|15:53] C:\Program Files\Windows Sidebar
[11/06/2008|15:10] C:\Program Files\WinRAR
[26/09/2008|22:27] C:\Program Files\Wyzo
[08/11/2008|20:32] C:\Program Files\Zattoo
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[18/01/2009|18:32] C:\Program Files\Common Files\Adobe
[24/12/2008|23:16] C:\Program Files\Common Files\Apple
[08/10/2008|18:06] C:\Program Files\Common Files\DESIGNER
[16/01/2008|14:37] C:\Program Files\Common Files\HP
[02/09/2008|16:01] C:\Program Files\Common Files\InstallShield
[25/05/2008|18:39] C:\Program Files\Common Files\Java
[16/01/2008|14:45] C:\Program Files\Common Files\LightScribe
[16/01/2008|14:45] C:\Program Files\Common Files\LS Getting Started
[11/10/2008|19:18] C:\Program Files\Common Files\Macrovision Shared
[02/01/2009|18:14] C:\Program Files\Common Files\microsoft shared
[16/01/2008|14:46] C:\Program Files\Common Files\muvee Technologies
[16/01/2008|14:43] C:\Program Files\Common Files\PX Storage Engine
[27/09/2008|22:12] C:\Program Files\Common Files\Real
[16/01/2008|14:43] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[07/06/2008|23:29] C:\Program Files\Common Files\Skype
[16/01/2008|14:44] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[16/01/2008|14:44] C:\Program Files\Common Files\SureThing Shared
[26/12/2008|15:05] C:\Program Files\Common Files\Symantec Shared
[17/10/2008|22:38] C:\Program Files\Common Files\System
[17/10/2008|22:26] C:\Program Files\Common Files\Windows Live
[10/02/2008|00:10] C:\Program Files\Common Files\WindowsLiveInstaller
[27/05/2008|19:00] C:\Program Files\Common Files\Wise Installation Wizard
[27/09/2008|22:12] C:\Program Files\Common Files\xing shared
--------------------\\ Process
( 58 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertstream[1].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertising[2].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@adopt.euroclick[2].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-19 22:23:57
Windows 6.0.6001 Service Pack 1 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 638
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\crack_danger[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\spyware-doctor-2009-keygen_ltr[1].gif
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen-spyware-doctor[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\82109-spyware-doctor-2009-keygen[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger3[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger4[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger0[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger2[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.289\crack.nfo
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.904\keygen.nfo
C:\Users\CHARLN~1\AppData\Roaming\Microsoft\Windows\Recent\crack.txt.lnk
C:\Users\CHARLN~1\Desktop\a suppr\crack+keygen.exe
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\crack.txt
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\Photoshop.exe
C:\Users\CHARLN~1\Desktop\nous 3\crack+keygen.exe
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-118459-spyware doctor crack incl license keys.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-128455-spyware doctor crack setup incl serial.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-81459-spyware doctor crack keymaker by RoR.zip
C:\Users\CHARLN~1\Favorites\serials nero 9 driver detective avast nero office 2007 spyware doctor nero 8 ad kaspersky internet download manager keygen.name.url
[F:2204][D:61]-> C:\Users\CHARLN~1\AppData\Local\Temp
[F:365][D:1]-> C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:6010][D:7]-> C:\Users\CHARLN~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 19/01/2009|22:15 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 19/01/2009|22:26 - Option : [2]
--------------------\\ Fin du rapport a 22:26:34
[ UAC => 1 ]
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Charlène ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081220-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total:364 Go (Free:209 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 19/01/2009|22:23 )
[ UAC => 1 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\CHARLN~1\AppData\Local\Temp\nshE767.tmp
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[04/01/2009|17:58] C:\Users\CHARLN~1\AppData\Local\Adobe
[10/02/2008|16:02] C:\Users\CHARLN~1\AppData\Local\Apple
[10/02/2008|16:14] C:\Users\CHARLN~1\AppData\Local\Apple Computer
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Application Data
[03/05/2008|14:50] C:\Users\CHARLN~1\AppData\Local\d3d9caps.dat
[17/01/2009|20:46] C:\Users\CHARLN~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/01/2009|21:57] C:\Users\CHARLN~1\AppData\Local\eMule
[19/10/2008|17:37] C:\Users\CHARLN~1\AppData\Local\GDIPFONTCACHEV1.DAT
[07/06/2008|21:15] C:\Users\CHARLN~1\AppData\Local\Google
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Historique
[19/01/2009|21:14] C:\Users\CHARLN~1\AppData\Local\IconCache.db
[02/01/2009|18:13] C:\Users\CHARLN~1\AppData\Local\Microsoft
[08/10/2008|17:59] C:\Users\CHARLN~1\AppData\Local\Microsoft Help
[10/02/2008|00:19] C:\Users\CHARLN~1\AppData\Local\Mozilla
[07/01/2009|16:56] C:\Users\CHARLN~1\AppData\Local\Shareaza
[19/01/2009|22:23] C:\Users\CHARLN~1\AppData\Local\Temp
[08/02/2008|19:28] C:\Users\CHARLN~1\AppData\Local\Temporary Internet Files
[06/10/2008|19:16] C:\Users\CHARLN~1\AppData\Local\VirtualStore
[13/12/2008|23:46] C:\Users\CHARLN~1\AppData\Local\Winamp Toolbar
[18/11/2008|21:33] C:\Users\CHARLN~1\AppData\Local\Zattoo
[08/11/2008|20:35] C:\Users\CHARLN~1\AppData\Local\ZattooPlayer
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[19/01/2009 19:56][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{5842DB62-545A-41C4-B777-99A22648A95F}.job
[26/12/2008 19:47][--a------] C:\Windows\tasks\Norton Security Scan.job
[19/01/2009 21:30][--ah-----] C:\Windows\tasks\SA.DAT
[19/01/2009 21:30][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[24/12/2008|23:16] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[16/01/2008|14:52] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[11/01/2009|17:06] C:\ProgramData\Adobe
[10/02/2008|16:01] C:\ProgramData\Apple
[24/12/2008|23:16] C:\ProgramData\Apple Computer
[08/02/2008|19:25] C:\ProgramData\Application Data
[02/01/2009|18:15] C:\ProgramData\avg8
[18/10/2008|11:02] C:\ProgramData\Avira
[29/05/2008|21:19] C:\ProgramData\BM67319e41.txt
[11/06/2008|20:23] C:\ProgramData\BM67319e41.xml
[08/02/2008|19:25] C:\ProgramData\Bureau
[08/02/2008|19:25] C:\ProgramData\Documents
[14/01/2009|21:58] C:\ProgramData\eMule
[08/02/2008|19:25] C:\ProgramData\Favoris
[27/12/2008|00:30] C:\ProgramData\FLEXnet
[16/01/2008|14:57] C:\ProgramData\Google
[07/10/2008|18:38] C:\ProgramData\Google Updater
[23/12/2008|21:56] C:\ProgramData\Grisoft
[16/01/2008|15:07] C:\ProgramData\Hewlett-Packard
[16/01/2008|14:37] C:\ProgramData\HP
[16/01/2008|14:37] C:\ProgramData\hpzinstall.log
[28/08/2008|17:03] C:\ProgramData\LauncherAccess.dt
[27/05/2008|19:05] C:\ProgramData\Lavasoft
[11/06/2008|20:38] C:\ProgramData\LUUnInstall.LiveUpdate
[11/06/2008|20:31] C:\ProgramData\Malwarebytes
[08/02/2008|19:25] C:\ProgramData\Menu D‚marrer
[03/05/2008|18:19] C:\ProgramData\Messenger Plus!
[17/10/2008|22:24] C:\ProgramData\Microsoft
[15/01/2009|21:22] C:\ProgramData\Microsoft Help
[08/02/2008|19:25] C:\ProgramData\ModŠles
[16/01/2008|14:46] C:\ProgramData\muvee Technologies
[24/09/2008|16:13] C:\ProgramData\NVIDIA
[18/01/2009|22:14] C:\ProgramData\OrbNetworks
[16/01/2008|14:54] C:\ProgramData\PC-Doctor
[11/06/2008|20:22] C:\ProgramData\pskt.ini
[16/01/2008|14:42] C:\ProgramData\Roxio
[07/06/2008|23:30] C:\ProgramData\Skype
[20/06/2008|22:18] C:\ProgramData\Sonic
[02/01/2009|20:20] C:\ProgramData\Spybot - Search & Destroy
[11/06/2008|21:21] C:\ProgramData\Symantec
[19/01/2009|21:51] C:\ProgramData\TEMP
[02/09/2008|16:20] C:\ProgramData\UDL
[13/12/2008|23:39] C:\ProgramData\Winamp Toolbar
[10/02/2008|00:05] C:\ProgramData\WLInstaller
--------------------\\ Listing des dossiers dans C:\Program Files
[16/01/2008|14:52] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[18/01/2009|18:29] C:\Program Files\Adobe
[13/04/2008|14:05] C:\Program Files\Alwil Software
[21/12/2008|23:38] C:\Program Files\Apple Software Update
[02/01/2009|18:15] C:\Program Files\AVG
[18/10/2008|11:02] C:\Program Files\Avira
[26/10/2008|12:25] C:\Program Files\AviSynth 2.5
[21/12/2008|23:46] C:\Program Files\Bonjour
[09/06/2008|21:40] C:\Program Files\CCleaner
[16/01/2009|22:08] C:\Program Files\Common Files
[22/02/2007|17:37] C:\Program Files\EasyBits
[14/01/2009|21:57] C:\Program Files\eMule
[02/09/2008|16:19] C:\Program Files\epson
[26/10/2008|12:24] C:\Program Files\eRightSoft
[08/02/2008|19:25] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/06/2008|18:51] C:\Program Files\Google
[23/12/2008|21:56] C:\Program Files\Grisoft
[16/01/2008|14:55] C:\Program Files\Hewlett-Packard
[16/01/2008|14:48] C:\Program Files\HP
[02/09/2008|16:30] C:\Program Files\InstallShield Installation Information
[18/10/2008|11:02] C:\Program Files\Internet Explorer
[24/12/2008|23:16] C:\Program Files\iPod
[24/12/2008|23:16] C:\Program Files\iTunes
[08/10/2008|18:05] C:\Program Files\Java
[25/05/2008|19:53] C:\Program Files\K-Lite Codec Pack
[27/05/2008|19:02] C:\Program Files\Lavasoft
[25/10/2008|18:14] C:\Program Files\LimeWire
[19/01/2009|19:52] C:\Program Files\Malwarebytes' Anti-Malware
[26/10/2008|13:05] C:\Program Files\MediaCoder
[31/08/2008|16:05] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[08/10/2008|18:06] C:\Program Files\Microsoft Office
[23/11/2008|14:15] C:\Program Files\Microsoft Silverlight
[17/10/2008|22:36] C:\Program Files\Microsoft SQL Server Compact Edition
[08/10/2008|18:06] C:\Program Files\Microsoft Visual Studio
[08/10/2008|18:00] C:\Program Files\Microsoft Visual Studio 8
[08/10/2008|18:07] C:\Program Files\Microsoft Works
[08/10/2008|18:05] C:\Program Files\Microsoft.NET
[24/09/2008|15:53] C:\Program Files\Movie Maker
[28/12/2008|18:50] C:\Program Files\Mozilla Firefox
[08/10/2008|18:07] C:\Program Files\MSBuild
[17/10/2008|23:00] C:\Program Files\MSN Messenger
[10/02/2008|14:20] C:\Program Files\MSXML 4.0
[16/01/2008|14:46] C:\Program Files\muvee Technologies
[26/12/2008|15:00] C:\Program Files\Norton Security Scan
[09/09/2008|21:55] C:\Program Files\OpenOffice.org 2.4
[08/02/2008|19:33] C:\Program Files\Orange
[26/12/2008|13:50] C:\Program Files\Panda Security
[16/01/2008|15:07] C:\Program Files\PC-Doctor 5 for Windows
[26/09/2008|22:11] C:\Program Files\PhotoFiltre Studio
[30/09/2008|18:29] C:\Program Files\Picasa2
[21/12/2008|23:45] C:\Program Files\QuickTime
[26/10/2008|12:55] C:\Program Files\RADVideo
[16/01/2008|14:45] C:\Program Files\Real
[29/03/2008|00:28] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[11/06/2008|14:34] C:\Program Files\Registry Mechanic
[16/01/2008|14:44] C:\Program Files\Roxio
[09/02/2008|23:04] C:\Program Files\SAGEM
[16/05/2008|22:58] C:\Program Files\Samsung
[16/01/2008|14:57] C:\Program Files\Services en ligne
[07/01/2009|17:01] C:\Program Files\Shareaza
[07/06/2008|23:30] C:\Program Files\Skype
[02/01/2009|18:27] C:\Program Files\Spybot - Search & Destroy
[19/01/2009|20:09] C:\Program Files\Spyware Doctor
[11/06/2008|20:37] C:\Program Files\Symantec
[05/10/2008|19:25] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[25/05/2008|19:04] C:\Program Files\VideoLAN
[13/12/2008|23:39] C:\Program Files\Winamp
[13/12/2008|23:39] C:\Program Files\Winamp Remote
[13/12/2008|23:39] C:\Program Files\Winamp Toolbar
[24/09/2008|15:53] C:\Program Files\Windows Calendar
[24/09/2008|15:53] C:\Program Files\Windows Collaboration
[24/09/2008|15:53] C:\Program Files\Windows Defender
[24/09/2008|15:53] C:\Program Files\Windows Journal
[18/10/2008|11:02] C:\Program Files\Windows Live
[27/12/2008|00:10] C:\Program Files\Windows Live Safety Center
[15/01/2009|21:22] C:\Program Files\Windows Mail
[24/09/2008|15:53] C:\Program Files\Windows Media Player
[08/02/2008|19:25] C:\Program Files\Windows NT
[24/09/2008|15:53] C:\Program Files\Windows Photo Gallery
[24/09/2008|15:53] C:\Program Files\Windows Sidebar
[11/06/2008|15:10] C:\Program Files\WinRAR
[26/09/2008|22:27] C:\Program Files\Wyzo
[08/11/2008|20:32] C:\Program Files\Zattoo
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[18/01/2009|18:32] C:\Program Files\Common Files\Adobe
[24/12/2008|23:16] C:\Program Files\Common Files\Apple
[08/10/2008|18:06] C:\Program Files\Common Files\DESIGNER
[16/01/2008|14:37] C:\Program Files\Common Files\HP
[02/09/2008|16:01] C:\Program Files\Common Files\InstallShield
[25/05/2008|18:39] C:\Program Files\Common Files\Java
[16/01/2008|14:45] C:\Program Files\Common Files\LightScribe
[16/01/2008|14:45] C:\Program Files\Common Files\LS Getting Started
[11/10/2008|19:18] C:\Program Files\Common Files\Macrovision Shared
[02/01/2009|18:14] C:\Program Files\Common Files\microsoft shared
[16/01/2008|14:46] C:\Program Files\Common Files\muvee Technologies
[16/01/2008|14:43] C:\Program Files\Common Files\PX Storage Engine
[27/09/2008|22:12] C:\Program Files\Common Files\Real
[16/01/2008|14:43] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[07/06/2008|23:29] C:\Program Files\Common Files\Skype
[16/01/2008|14:44] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[16/01/2008|14:44] C:\Program Files\Common Files\SureThing Shared
[26/12/2008|15:05] C:\Program Files\Common Files\Symantec Shared
[17/10/2008|22:38] C:\Program Files\Common Files\System
[17/10/2008|22:26] C:\Program Files\Common Files\Windows Live
[10/02/2008|00:10] C:\Program Files\Common Files\WindowsLiveInstaller
[27/05/2008|19:00] C:\Program Files\Common Files\Wise Installation Wizard
[27/09/2008|22:12] C:\Program Files\Common Files\xing shared
--------------------\\ Process
( 58 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertstream[1].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@advertising[2].txt
C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies\charlene@adopt.euroclick[2].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-19 22:23:57
Windows 6.0.6001 Service Pack 1 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 638
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\crack_danger[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5ME35F7K\spyware-doctor-2009-keygen_ltr[1].gif
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen-spyware-doctor[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N5YZSX29\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\82109-spyware-doctor-2009-keygen[1].htm
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger3[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WVU1RMGM\crack_danger4[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger0[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\crack_danger2[1].jpg
C:\Users\CHARLN~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X6BDOXFF\keygen_name[1].htm
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.289\crack.nfo
C:\Users\CHARLN~1\AppData\Local\Temp\Rar$EX00.904\keygen.nfo
C:\Users\CHARLN~1\AppData\Roaming\Microsoft\Windows\Recent\crack.txt.lnk
C:\Users\CHARLN~1\Desktop\a suppr\crack+keygen.exe
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\crack.txt
C:\Users\CHARLN~1\Desktop\a suppr\Nouveau dossier\Adobe PhotoShop CS4\Crack\Photoshop.exe
C:\Users\CHARLN~1\Desktop\nous 3\crack+keygen.exe
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-118459-spyware doctor crack incl license keys.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-128455-spyware doctor crack setup incl serial.zip
C:\Users\CHARLN~1\Documents\LimeWire\Incomplete\T-81459-spyware doctor crack keymaker by RoR.zip
C:\Users\CHARLN~1\Favorites\serials nero 9 driver detective avast nero office 2007 spyware doctor nero 8 ad kaspersky internet download manager keygen.name.url
[F:2204][D:61]-> C:\Users\CHARLN~1\AppData\Local\Temp
[F:365][D:1]-> C:\Users\CHARLN~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:6010][D:7]-> C:\Users\CHARLN~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 19/01/2009|22:15 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 19/01/2009|22:26 - Option : [2]
--------------------\\ Fin du rapport a 22:26:34
[ UAC => 1 ]
Voilà :-)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:31:17, on 19/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\ZSSnp211.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll,C:\Windows\System32\cabview32.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:31:17, on 19/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\ZSSnp211.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll,C:\Windows\System32\cabview32.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Ok maintenant fais ceci pour vérifier stp :
Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):
▶ Va dans démarrer puis panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.
ensuite :
Option 1 - Recherche :
▶ télécharge smitfraudfix et enregistre le sur le bureau
▶ Ensuite double clique sur smitfraudfix puis exécuter
▶ Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.
(attention : N utilises pas l option 2 si je ne te l ai pas demandé !!)
▶ copier/coller le rapport dans la réponse.
Voici un tutoriel sonore et animé en cas de problème d'utilisation
(Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool".
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains,
cet utilitaire pourrait arrêter des logiciels de sécurité.)
Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):
▶ Va dans démarrer puis panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.
ensuite :
Option 1 - Recherche :
▶ télécharge smitfraudfix et enregistre le sur le bureau
▶ Ensuite double clique sur smitfraudfix puis exécuter
▶ Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.
(attention : N utilises pas l option 2 si je ne te l ai pas demandé !!)
▶ copier/coller le rapport dans la réponse.
Voici un tutoriel sonore et animé en cas de problème d'utilisation
(Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool".
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains,
cet utilitaire pourrait arrêter des logiciels de sécurité.)
