DEMMARAGE ORDI TRES LENT
mouic
-
mouic -
mouic -
Bonjour,
Je vous contacte car j'ai des soucis avec mon ordi (XP) qui est très lent au démmarage: plus de 2 min. La photo du bureau s'affiche de suite, mais l'ensemble des icones n'arrive qu'après un certain temps;
J'ai effectué un log hijackthis, si vous pouvez m'aider, merci beaucoup.
ps: à noter que je nettoie régulièrement mon ordi avec spybot, ad-aware, ccleaner et autres...
LOG:
Logfile of HijackThis v1.99.1
Scan saved at 21:52:56, on 16/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
D:\Drivers, installs\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = escamote:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {8354F0FE-550E-4E14-AFE1-E5CEF9009311} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A} (DLoader Class) - http://dl.uc.sina.com/cab/downloader.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1231687231_3177a689776010c01f27cea973be7483&GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab&BHost=javadl.sun.com
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
Je vous contacte car j'ai des soucis avec mon ordi (XP) qui est très lent au démmarage: plus de 2 min. La photo du bureau s'affiche de suite, mais l'ensemble des icones n'arrive qu'après un certain temps;
J'ai effectué un log hijackthis, si vous pouvez m'aider, merci beaucoup.
ps: à noter que je nettoie régulièrement mon ordi avec spybot, ad-aware, ccleaner et autres...
LOG:
Logfile of HijackThis v1.99.1
Scan saved at 21:52:56, on 16/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
D:\Drivers, installs\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = escamote:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {8354F0FE-550E-4E14-AFE1-E5CEF9009311} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A} (DLoader Class) - http://dl.uc.sina.com/cab/downloader.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1231687231_3177a689776010c01f27cea973be7483&GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab&BHost=javadl.sun.com
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
A voir également:
- DEMMARAGE ORDI TRES LENT
- Pc tres lent - Guide
- Comment reinitialiser un ordi - Guide
- Mon mac est lent comment le nettoyer - Guide
- Ordi scrabble - Télécharger - Jeux vidéo
- Ecran ordi a l'envers - Guide
7 réponses
Bonjour,
* Telecharges ToolBarSD sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
* Fermes tous les programmes en cours et desactive ton antivirus
*Lances l'install en executant le fichier telechargé
*Double cliques sur l'icone de ton bureau
*Selectionnes la langue et valides par " entrée"
* Choisis l'option 1 et patientes jusqu'à la fin de la recherche
* Un rapport est généré, postes le
Note : le rapport est aussi à C:\TB.txt
* Si ton bureau ne reapparait pas, presses les touches Ctrl + alt +supp
--> onglet" fichier "---> nouvelles taches et tapes explorer.exe
* Telecharges ToolBarSD sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
* Fermes tous les programmes en cours et desactive ton antivirus
*Lances l'install en executant le fichier telechargé
*Double cliques sur l'icone de ton bureau
*Selectionnes la langue et valides par " entrée"
* Choisis l'option 1 et patientes jusqu'à la fin de la recherche
* Un rapport est généré, postes le
Note : le rapport est aussi à C:\TB.txt
* Si ton bureau ne reapparait pas, presses les touches Ctrl + alt +supp
--> onglet" fichier "---> nouvelles taches et tapes explorer.exe
Re,
* Ok c'est une infection " Bagle " ---> vires tes cracks
* Telecharges FindyKill de Chiquitine29 sur ton bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
* Fermes tous tes programmes en cours
* Lances l'installation puis double cliques sur l'icone de ton bureau
* Au menu, choisis l'option1 et patientes jusqu'à la fin de la recherche
* Un rapport est généré, postes le !
Note : le rapport est aussi à C:\Findykill.txt
* Ok c'est une infection " Bagle " ---> vires tes cracks
* Telecharges FindyKill de Chiquitine29 sur ton bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
* Fermes tous tes programmes en cours
* Lances l'installation puis double cliques sur l'icone de ton bureau
* Au menu, choisis l'option1 et patientes jusqu'à la fin de la recherche
* Un rapport est généré, postes le !
Note : le rapport est aussi à C:\Findykill.txt
merci pour votre aide, voici le rapport:
###################### [ FindyKill V4.714 ]
# User : maxime - ORDI-DE-MAX
# Emplacement : C:\Program Files\FindyKill
# Outils Mis a jours le 19/01/09 par Chiquitine29
# Recherche effectuée à 18:55:29 le 20/01/2009
# Windows XP - Internet Explorer 7.0.5730.13
# [ FindyKill V4.714 - Scan ] ##############
\\\\\\\\\\\\\\\\\\\\ [ Processus actifs ] ///////////////////
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
\\\\\\\\\\\\\\\\\\ [ Fichiers/Dossiers infectieux ] ///////////////////
################## [ C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\Prefetch ]
################## [ C:\WINDOWS\system32 ]
################## [ C:\WINDOWS\system32\drivers ]
Found ! [25/05/2008 18:17] - "C:\WINDOWS\system32\drivers\downld"
################## [ C:\Documents and Settings\maxime\Application Data ]
################## [ C:\DOCUME~1\maxime\LOCALS~1\Temp ]
\\\\\\\\\\\\\\\\\\ [ Registre / Startup ] ///////////////////
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ccleaner="C:\Program Files\CCleaner\ccleaner.exe" /AUTO
msnmsgr="C:\Program Files\MSN Messenger\msnmsgr.exe" /background
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
IntelZeroConfig="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
IntelWireless="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
Autoconfigurateur WiFi Neuf="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
SigmatelSysTrayApp=stsystra.exe
Dell QuickSet=C:\Program Files\Dell\QuickSet\quickset.exe
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=
[HKEY_CURRENT_USER\software\local appwizard-generated applications\75675678894563453477545544456456456565768768768768456]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\CFP_Setup_3.0.25.378_XP_Vista_x32]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\ESApp]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Wiz Bang Client]
\\\\\\\\\\\\\\\\\\ [ Registre / Clés infectieuses ] ///////////////////
\\\\\\\\\\\\\\\\\\ [ Etat / Services ] ///////////////////
# Services : [ Auto=2 / Demande=3 / Désactivé=4 ]
/!\ Ndisuio - # Type de démarrage = 4
/!\ Ip6Fw - # Type de démarrage = 4
SharedAccess - # Type de démarrage = 2
wuauserv - # Type de démarrage = 2
wscsvc - # Type de démarrage = 2
\\\\\\\\\\\\\\\\\\ [ Recherche dans supports amovibles] ///////////////////
# Informations :
C: - Lecteur fixe
D: - Lecteur fixe
E: - Lecteur fixe
# presence des fichiers :
\\\\\\\\\\\\\\\\\\ [ Registre / Mountpoint2 ] ///////////////////
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{34c2fdf6-73da-11dc-ae6d-0015c53f9cfa}\Shell\AutoRun\command
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{63546460-65ea-11dc-ae4a-0015c53f9cfa}\Shell\AutoRun\command
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c503f690-87f9-11dc-aea4-0015c53f9cfa}\Shell\AutoRun\command
################## [ ! Fin du rapport # FindyKill V4.714 ! ]
###################### [ FindyKill V4.714 ]
# User : maxime - ORDI-DE-MAX
# Emplacement : C:\Program Files\FindyKill
# Outils Mis a jours le 19/01/09 par Chiquitine29
# Recherche effectuée à 18:55:29 le 20/01/2009
# Windows XP - Internet Explorer 7.0.5730.13
# [ FindyKill V4.714 - Scan ] ##############
\\\\\\\\\\\\\\\\\\\\ [ Processus actifs ] ///////////////////
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
\\\\\\\\\\\\\\\\\\ [ Fichiers/Dossiers infectieux ] ///////////////////
################## [ C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\Prefetch ]
################## [ C:\WINDOWS\system32 ]
################## [ C:\WINDOWS\system32\drivers ]
Found ! [25/05/2008 18:17] - "C:\WINDOWS\system32\drivers\downld"
################## [ C:\Documents and Settings\maxime\Application Data ]
################## [ C:\DOCUME~1\maxime\LOCALS~1\Temp ]
\\\\\\\\\\\\\\\\\\ [ Registre / Startup ] ///////////////////
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ccleaner="C:\Program Files\CCleaner\ccleaner.exe" /AUTO
msnmsgr="C:\Program Files\MSN Messenger\msnmsgr.exe" /background
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
IntelZeroConfig="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
IntelWireless="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
Autoconfigurateur WiFi Neuf="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
SigmatelSysTrayApp=stsystra.exe
Dell QuickSet=C:\Program Files\Dell\QuickSet\quickset.exe
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=
[HKEY_CURRENT_USER\software\local appwizard-generated applications\75675678894563453477545544456456456565768768768768456]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\CFP_Setup_3.0.25.378_XP_Vista_x32]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\ESApp]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Wiz Bang Client]
\\\\\\\\\\\\\\\\\\ [ Registre / Clés infectieuses ] ///////////////////
\\\\\\\\\\\\\\\\\\ [ Etat / Services ] ///////////////////
# Services : [ Auto=2 / Demande=3 / Désactivé=4 ]
/!\ Ndisuio - # Type de démarrage = 4
/!\ Ip6Fw - # Type de démarrage = 4
SharedAccess - # Type de démarrage = 2
wuauserv - # Type de démarrage = 2
wscsvc - # Type de démarrage = 2
\\\\\\\\\\\\\\\\\\ [ Recherche dans supports amovibles] ///////////////////
# Informations :
C: - Lecteur fixe
D: - Lecteur fixe
E: - Lecteur fixe
# presence des fichiers :
\\\\\\\\\\\\\\\\\\ [ Registre / Mountpoint2 ] ///////////////////
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{34c2fdf6-73da-11dc-ae6d-0015c53f9cfa}\Shell\AutoRun\command
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{63546460-65ea-11dc-ae4a-0015c53f9cfa}\Shell\AutoRun\command
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c503f690-87f9-11dc-aea4-0015c53f9cfa}\Shell\AutoRun\command
################## [ ! Fin du rapport # FindyKill V4.714 ! ]
Re,
* Branches tes disques amovibles ( clé USB, disque dur externe, ipod, etc...)
sans les ouvrirs
* Relances Findykill et choisis l'option2
--> laisses toi guider
* Ton bureau va disparaitre plusieurs, laisses faire le nettoyage !
* a la fin, appuies sur une touche pour obtenir le rapport,postes le !
* Branches tes disques amovibles ( clé USB, disque dur externe, ipod, etc...)
sans les ouvrirs
* Relances Findykill et choisis l'option2
--> laisses toi guider
* Ton bureau va disparaitre plusieurs, laisses faire le nettoyage !
* a la fin, appuies sur une touche pour obtenir le rapport,postes le !
voici le rapport:
###################### [ FindyKill V4.714 ]
# User : maxime - ORDI-DE-MAX
# Executed from : C:\Program Files\FindyKill
# Update on 19/01/09 by Chiquitine29
# Start at 19:43:42 the 20/01/2009
# Windows XP - Internet Explorer 7.0.5730.13
# [ FindyKill V4.714 - Deleting ] ###############
\\\\\\\\\\\\\\\\\\ [ Active Processes ] ///////////////////
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
\\\\\\\\\\\\\\\\\\ [ Infected Files / Folders ] ///////////////////
################## [ C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\Prefetch ]
Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-086F0B56.pf
################## [ C:\WINDOWS\system32 ]
################## [ C:\WINDOWS\system32\drivers ]
Deleted ! - "C:\WINDOWS\system32\drivers\downld"
################## [ C:\Documents and Settings\maxime\Application Data ]
################## [ C:\DOCUME~1\maxime\LOCALS~1\Temp ]
################## [ C:\Documents and Settings\maxime\Local Settings\Temporary Internet Files\Content.IE5 ]
\\\\\\\\\\\\\\\\\\ [ Registry / Infected keys ] ///////////////////
\\\\\\\\\\\\\\\\\\ [ States / Restarting of services ] ///////////////////
# Showing of hidden files has been repaired !
# Services : [ Auto=2 / Request=3 / Disable=4 ]
Ndisuio - # Type of startup = 3
Ip6Fw - # Type of startup = 2
SharedAccess - # Type of startup = 2
wuauserv - # Type of startup = 2
wscsvc - # Type of startup = 2
\\\\\\\\\\\\\\\\\\ [ Cleaning Removable drives ] ///////////////////
# Informations :
C: - Lecteur fixeD: - Lecteur fixeE: - Lecteur fixeL: - Lecteur amovible
# deleting files :
\\\\\\\\\\\\\\\\\\ [ Registry / Mountpoint2 ] ///////////////////
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{34c2fdf6-73da-11dc-ae6d-0015c53f9cfa}\Shell\AutoRun\command
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{63546460-65ea-11dc-ae4a-0015c53f9cfa}\Shell\AutoRun\command
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c503f690-87f9-11dc-aea4-0015c53f9cfa}\Shell\AutoRun\command
\\\\\\\\\\\\\\\\\\ [ Searching Other Infections ] ///////////////////
\\\\\\\\\\\\\\\\\\ [ Searching Cracks / Keygen ] ///////////////////
C:\Documents and Settings\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\Documents and Settings\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\Documents and Settings\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
################## [ ! End of report # FindyKill V4.714 ! ]
###################### [ FindyKill V4.714 ]
# User : maxime - ORDI-DE-MAX
# Executed from : C:\Program Files\FindyKill
# Update on 19/01/09 by Chiquitine29
# Start at 19:43:42 the 20/01/2009
# Windows XP - Internet Explorer 7.0.5730.13
# [ FindyKill V4.714 - Deleting ] ###############
\\\\\\\\\\\\\\\\\\ [ Active Processes ] ///////////////////
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
\\\\\\\\\\\\\\\\\\ [ Infected Files / Folders ] ///////////////////
################## [ C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\Prefetch ]
Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-086F0B56.pf
################## [ C:\WINDOWS\system32 ]
################## [ C:\WINDOWS\system32\drivers ]
Deleted ! - "C:\WINDOWS\system32\drivers\downld"
################## [ C:\Documents and Settings\maxime\Application Data ]
################## [ C:\DOCUME~1\maxime\LOCALS~1\Temp ]
################## [ C:\Documents and Settings\maxime\Local Settings\Temporary Internet Files\Content.IE5 ]
\\\\\\\\\\\\\\\\\\ [ Registry / Infected keys ] ///////////////////
\\\\\\\\\\\\\\\\\\ [ States / Restarting of services ] ///////////////////
# Showing of hidden files has been repaired !
# Services : [ Auto=2 / Request=3 / Disable=4 ]
Ndisuio - # Type of startup = 3
Ip6Fw - # Type of startup = 2
SharedAccess - # Type of startup = 2
wuauserv - # Type of startup = 2
wscsvc - # Type of startup = 2
\\\\\\\\\\\\\\\\\\ [ Cleaning Removable drives ] ///////////////////
# Informations :
C: - Lecteur fixeD: - Lecteur fixeE: - Lecteur fixeL: - Lecteur amovible
# deleting files :
\\\\\\\\\\\\\\\\\\ [ Registry / Mountpoint2 ] ///////////////////
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{34c2fdf6-73da-11dc-ae6d-0015c53f9cfa}\Shell\AutoRun\command
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{63546460-65ea-11dc-ae4a-0015c53f9cfa}\Shell\AutoRun\command
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c503f690-87f9-11dc-aea4-0015c53f9cfa}\Shell\AutoRun\command
\\\\\\\\\\\\\\\\\\ [ Searching Other Infections ] ///////////////////
\\\\\\\\\\\\\\\\\\ [ Searching Cracks / Keygen ] ///////////////////
C:\Documents and Settings\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\Documents and Settings\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\Documents and Settings\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
################## [ ! End of report # FindyKill V4.714 ! ]
Re,
* Desactives ton antivirus
* Relance ToolBarSD --> le 1er outil utilisé
--> mais cette fois, choisis l'option 2 ( suppression)
--> patientes pendant le scan et postes le rapport généré
* Telecharges Navilog1 sur ton bureau :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
*Desactives ton antivirus
* double-cliques sur le raccourci de ton bureau et lances l'installation
* Une fois installé, fermes tous les programmes en cours
* Double-cliques sur Navilog1.exe :
--> choisis la langue puis presses la touche " entrée "
* Double cliques sur Navilog1.bat
---> possible qu'il n'apparaisse pas et que tu n'aies que Navilog1
* Une fenetre s'ouvre --> presses 1 touche pour passer
aux etapes suivantes...
* Le menu du fix s'ouvre :
--> choiosis l'option 1 et patientes jusqu'à la fin de la recherche
* A la fin, un rapport est généré, postes le
Note : le rapport est aussi à la racine du disque C
-------/
* Desactives ton antivirus
* Relance ToolBarSD --> le 1er outil utilisé
--> mais cette fois, choisis l'option 2 ( suppression)
--> patientes pendant le scan et postes le rapport généré
* Telecharges Navilog1 sur ton bureau :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
*Desactives ton antivirus
* double-cliques sur le raccourci de ton bureau et lances l'installation
* Une fois installé, fermes tous les programmes en cours
* Double-cliques sur Navilog1.exe :
--> choisis la langue puis presses la touche " entrée "
* Double cliques sur Navilog1.bat
---> possible qu'il n'apparaisse pas et que tu n'aies que Navilog1
* Une fenetre s'ouvre --> presses 1 touche pour passer
aux etapes suivantes...
* Le menu du fix s'ouvre :
--> choiosis l'option 1 et patientes jusqu'à la fin de la recherche
* A la fin, un rapport est généré, postes le
Note : le rapport est aussi à la racine du disque C
-------/
merci beaucoup.
Voici les 2 rapports:
Bonne nuit
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 20/01/2009|21:41 )
-----------\\ SUPPRESSION
Supprime! - C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ Extensions
(maxime) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(maxime) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://home.neuf.fr/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://actus.sfr.fr"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Search Bar"="https://actus.sfr.fr"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://actus.sfr.fr"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
"SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60327"
"CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076"
--------------------\\ Recherche d'autres infections
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx.dat
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx.exe
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx_nav.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
1 - "C:\ToolBar SD\TB_1.txt" - 19/01/2009|19:07 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 20/01/2009|21:41 - Option : [2]
-----------\\ Fin du rapport a 21:41:40,14
Search Navipromo version 3.7.1 commencé le 20/01/2009 à 21:47:35,67
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
Recherche executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans "C:\WINDOWS" ***
*** Recherche dossiers dans "C:\Program Files" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***
*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\maxime\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\maxime\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\maxime\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***
*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans "C:\WINDOWS\system32" *
* Recherche dans "C:\Documents and Settings\maxime\locals~1\applic~1" *
* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!
HKEY_CURRENT_USER\Software\Lanconfig
HKEY_CURRENT_USER\Software\mc
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans "C:\WINDOWS\system32" :
* Dans "C:\Documents and Settings\maxime\locals~1\applic~1" :
wwhghx.exe trouvé !
wwhghx.dat trouvé !
wwhghx_nav.dat trouvé !
* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche autres dossiers et fichiers connus :
C:\WINDOWS\Tasks\A9604C16907FC172.job trouvé ! Infection Lop possible non traitée par cet outil !
*** Analyse terminée le 20/01/2009 à 21:53:15,90 ***
Voici les 2 rapports:
Bonne nuit
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 20/01/2009|21:41 )
-----------\\ SUPPRESSION
Supprime! - C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ Extensions
(maxime) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(maxime) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://home.neuf.fr/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://actus.sfr.fr"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Search Bar"="https://actus.sfr.fr"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://actus.sfr.fr"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
"SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60327"
"CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076"
--------------------\\ Recherche d'autres infections
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx.dat
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx.exe
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx_nav.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
1 - "C:\ToolBar SD\TB_1.txt" - 19/01/2009|19:07 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 20/01/2009|21:41 - Option : [2]
-----------\\ Fin du rapport a 21:41:40,14
Search Navipromo version 3.7.1 commencé le 20/01/2009 à 21:47:35,67
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
Recherche executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans "C:\WINDOWS" ***
*** Recherche dossiers dans "C:\Program Files" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***
*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\maxime\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\maxime\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\maxime\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***
*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans "C:\WINDOWS\system32" *
* Recherche dans "C:\Documents and Settings\maxime\locals~1\applic~1" *
* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!
HKEY_CURRENT_USER\Software\Lanconfig
HKEY_CURRENT_USER\Software\mc
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans "C:\WINDOWS\system32" :
* Dans "C:\Documents and Settings\maxime\locals~1\applic~1" :
wwhghx.exe trouvé !
wwhghx.dat trouvé !
wwhghx_nav.dat trouvé !
* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche autres dossiers et fichiers connus :
C:\WINDOWS\Tasks\A9604C16907FC172.job trouvé ! Infection Lop possible non traitée par cet outil !
*** Analyse terminée le 20/01/2009 à 21:53:15,90 ***
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Re,
* Desactives ton antivirus
* Relances Navilog1 et choisis l'option 2
Ne touche pas au pc pendant la suppression
* Si Navilog a besoin de redemarrer pour finir la desinfection
laisses faire!
* Postes le rapport généré
* Telecharges LopSD sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Lances l'installation en executant le fichier telechargé
* Desactives ton antivirus
* Double clique sur l'icone de ton bureau
--> choisis la langue et presses la touche " Entrée "
* Laisses toi guider, au menu, choisis l'option 1 et patientes
( ne touche pas au pc pendant larecherche)
* A la fin, un rapport est généré, postes le
Note : le rapport se trouve aussi à C:\LopSD.txt
* Desactives ton antivirus
* Relances Navilog1 et choisis l'option 2
Ne touche pas au pc pendant la suppression
* Si Navilog a besoin de redemarrer pour finir la desinfection
laisses faire!
* Postes le rapport généré
* Telecharges LopSD sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Lances l'installation en executant le fichier telechargé
* Desactives ton antivirus
* Double clique sur l'icone de ton bureau
--> choisis la langue et presses la touche " Entrée "
* Laisses toi guider, au menu, choisis l'option 1 et patientes
( ne touche pas au pc pendant larecherche)
* A la fin, un rapport est généré, postes le
Note : le rapport se trouve aussi à C:\LopSD.txt
suite...
encore merci
rapport navilog
Clean Navipromo version 3.7.1 commencé le 21/01/2009 à 19:17:55,21
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
Mode suppression automatique
avec prise en charge résultats Catchme et GNS
Nettoyage exécuté au redémarrage de l'ordinateur
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
*** Suppression avec sauvegardes résultats GenericNaviSearch ***
* Suppression dans "C:\WINDOWS\System32" *
* Suppression dans "C:\Documents and Settings\maxime\locals~1\applic~1" *
* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Suppression dossiers dans "C:\WINDOWS" ***
*** Suppression dossiers dans "C:\Program Files" ***
*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***
*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\maxime\applic~1" ***
*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\maxime\locals~1\applic~1" ***
*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\maxime\menudm~1\progra~1" ***
*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***
*** Suppression fichiers ***
*** Suppression fichiers temporaires ***
Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\maxime\locals~1\Temp effectué !
*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Suppression avec sauvegardes nouveaux fichiers Instant Access :
2)Recherche, création sauvegardes et suppression Heuristique :
* Dans "C:\WINDOWS\system32" *
* Dans "C:\Documents and Settings\maxime\locals~1\applic~1" *
wwhghx.exe trouvé !
Copie wwhghx.exe réalisée avec succès !
wwhghx.exe supprimé !
wwhghx.dat trouvé !
Copie wwhghx.dat réalisée avec succès !
wwhghx.dat supprimé !
wwhghx_nav.dat trouvé !
Copie wwhghx_nav.dat réalisée avec succès !
wwhghx_nav.dat supprimé !
* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
*** Certificats ***
Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !
*** Recherche autres dossiers et fichiers connus ***
C:\WINDOWS\Tasks\A9604C16907FC172.job trouvé ! Infection Lop possible non traitée par cet outil !
*** Nettoyage terminé le 21/01/2009 à 19:20:49,92 ***
RAPPORT LOPSD
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 21/01/2009|19:23 )
--------------------\\ Listing des dossiers dans APPLIC~1
[04/04/2007|18:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
[02/06/2008|08:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/12/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/11/2007|17:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[30/08/2008|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[18/09/2007|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[02/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/03/2008|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[08/07/2007|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/01/2008|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[17/11/2008|22:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
[18/09/2007|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IdleWindowFree64
[26/10/2006|09:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[27/10/2007|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[14/12/2008|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[27/11/2007|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[30/05/2008|15:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[07/01/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/08/2008|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[15/09/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[02/11/2007|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[26/10/2006|08:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless
[17/11/2006|03:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[19/07/2008|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecTaskMan
[08/11/2007|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[20/01/2009|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/09/2008|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/08/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[03/04/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[19/07/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[04/04/2007|18:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[15/09/2006|09:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[26/09/2008|06:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[04/04/2007|18:13] C:\DOCUME~1\LOCALS~1\APPLIC~1\Intel
[26/09/2008|06:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/08/2007|22:08] C:\DOCUME~1\maxime\APPLIC~1\3M
[12/04/2008|20:22] C:\DOCUME~1\maxime\APPLIC~1\Adobe
[08/11/2006|06:39] C:\DOCUME~1\maxime\APPLIC~1\AdobeUM
[02/11/2007|18:18] C:\DOCUME~1\maxime\APPLIC~1\Ahead
[30/08/2008|18:19] C:\DOCUME~1\maxime\APPLIC~1\Apple Computer
[30/11/2006|14:55] C:\DOCUME~1\maxime\APPLIC~1\ArcSoft
[15/09/2006|19:25] C:\DOCUME~1\maxime\APPLIC~1\ATI
[30/06/2007|01:34] C:\DOCUME~1\maxime\APPLIC~1\BitTorrent
[21/09/2008|19:34] C:\DOCUME~1\maxime\APPLIC~1\Comodo
[18/06/2007|18:36] C:\DOCUME~1\maxime\APPLIC~1\DarkBls
[17/11/2007|20:30] C:\DOCUME~1\maxime\APPLIC~1\dvdcss
[30/06/2008|11:39] C:\DOCUME~1\maxime\APPLIC~1\FileZilla
[26/10/2007|15:33] C:\DOCUME~1\maxime\APPLIC~1\GeoVid
[06/11/2007|16:13] C:\DOCUME~1\maxime\APPLIC~1\GetRightToGo
[06/10/2006|20:02] C:\DOCUME~1\maxime\APPLIC~1\Google
[17/11/2008|22:27] C:\DOCUME~1\maxime\APPLIC~1\GTek
[15/09/2006|22:55] C:\DOCUME~1\maxime\APPLIC~1\Help
[12/03/2008|22:54] C:\DOCUME~1\maxime\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\maxime\APPLIC~1\Intel
[15/09/2006|13:06] C:\DOCUME~1\maxime\APPLIC~1\InterVideo
[08/04/2007|09:32] C:\DOCUME~1\maxime\APPLIC~1\Lavasoft
[26/10/2006|08:31] C:\DOCUME~1\maxime\APPLIC~1\Logitech
[22/11/2007|23:01] C:\DOCUME~1\maxime\APPLIC~1\LogoMaker
[18/12/2007|13:09] C:\DOCUME~1\maxime\APPLIC~1\Macromedia
[30/05/2008|15:55] C:\DOCUME~1\maxime\APPLIC~1\Malwarebytes
[28/09/2008|21:10] C:\DOCUME~1\maxime\APPLIC~1\Microsoft
[29/08/2008|06:37] C:\DOCUME~1\maxime\APPLIC~1\Mozilla
[27/08/2007|17:44] C:\DOCUME~1\maxime\APPLIC~1\MSN6
[10/01/2009|16:16] C:\DOCUME~1\maxime\APPLIC~1\OpenOffice.org2
[07/08/2007|23:35] C:\DOCUME~1\maxime\APPLIC~1\Opera
[05/10/2008|16:04] C:\DOCUME~1\maxime\APPLIC~1\Pro Cycling Manager 2008
[16/08/2008|11:33] C:\DOCUME~1\maxime\APPLIC~1\Real
[08/11/2007|07:51] C:\DOCUME~1\maxime\APPLIC~1\Roxio
[19/12/2006|09:05] C:\DOCUME~1\maxime\APPLIC~1\SecuROM
[22/06/2007|20:29] C:\DOCUME~1\maxime\APPLIC~1\Sports Interactive
[22/09/2006|12:24] C:\DOCUME~1\maxime\APPLIC~1\Sun
[08/04/2007|10:48] C:\DOCUME~1\maxime\APPLIC~1\Talkback
[30/08/2008|20:08] C:\DOCUME~1\maxime\APPLIC~1\TVU Networks
[30/11/2007|20:52] C:\DOCUME~1\maxime\APPLIC~1\U3
[20/01/2009|07:12] C:\DOCUME~1\maxime\APPLIC~1\uTorrent
[16/09/2006|00:00] C:\DOCUME~1\maxime\APPLIC~1\vlc
[04/04/2007|18:13] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[18/09/2007|16:25] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[21/01/2009 19:00][--ah-----] C:\WINDOWS\tasks\A9604C16907FC172.job
[21/01/2009 19:19][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
( A9604C16907FC172.job )=( c:\docume~1\maxime\applic~1\start3~1\MapiHtmBone.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[27/08/2007|22:08] C:\Program Files\3M
[02/12/2008|20:08] C:\Program Files\Adobe
[26/09/2007|06:41] C:\Program Files\AGEIA Technologies
[28/10/2006|11:43] C:\Program Files\Agent
[15/09/2006|14:34] C:\Program Files\AIDA32 - Enterprise System Information
[10/04/2007|19:08] C:\Program Files\ATI Technologies
[27/03/2008|17:32] C:\Program Files\Audacity
[02/06/2008|13:20] C:\Program Files\Avira
[06/11/2007|10:17] C:\Program Files\AviSynth 2.5
[01/01/2007|10:47] C:\Program Files\AVSMedia
[19/07/2008|15:58] C:\Program Files\AxBx
[06/11/2007|18:18] C:\Program Files\BitTorrent
[26/10/2006|07:18] C:\Program Files\Broadcom
[11/01/2009|12:38] C:\Program Files\CCleaner
[15/09/2006|22:55] C:\Program Files\CleanUp!
[09/07/2007|18:31] C:\Program Files\Combined Community Codec Pack
[22/09/2008|18:05] C:\Program Files\COMODO
[15/09/2006|14:00] C:\Program Files\CONEXANT
[26/09/2006|18:19] C:\Program Files\Creative
[05/10/2008|16:07] C:\Program Files\Cyanide
[08/04/2007|13:04] C:\Program Files\DAEMON Tools
[26/10/2006|10:19] C:\Program Files\Dell
[18/11/2008|20:25] C:\Program Files\Dell Support
[27/09/2006|19:37] C:\Program Files\DIFX
[15/09/2006|13:15] C:\Program Files\directx
[24/07/2007|21:12] C:\Program Files\DivX
[30/03/2008|19:45] C:\Program Files\epson
[08/08/2007|22:43] C:\Program Files\ffdshow
[30/08/2008|19:58] C:\Program Files\Fichiers communs
[14/12/2008|12:07] C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
[20/01/2009|19:50] C:\Program Files\FindyKill
[12/11/2007|21:58] C:\Program Files\Free Audio Pack
[14/09/2008|22:38] C:\Program Files\Free Easy Burner
[30/09/2007|10:05] C:\Program Files\Google
[04/01/2009|14:53] C:\Program Files\Hitman Pro
[05/01/2009|18:36] C:\Program Files\InstallShield Installation Information
[28/09/2006|11:37] C:\Program Files\Intel
[26/09/2006|08:04] C:\Program Files\Intel Desktop Boards
[05/10/2008|14:45] C:\Program Files\Internet Explorer
[23/04/2007|21:52] C:\Program Files\InterVideo
[14/05/2008|14:54] C:\Program Files\Intuisphere
[11/01/2009|16:12] C:\Program Files\Java
[19/03/2008|13:22] C:\Program Files\JeffProd
[27/10/2007|16:36] C:\Program Files\Kodak
[14/12/2008|12:11] C:\Program Files\Lavasoft
[05/04/2007|18:33] C:\Program Files\Messenger
[15/09/2006|09:14] C:\Program Files\microsoft frontpage
[03/11/2007|10:47] C:\Program Files\Microsoft Office
[15/09/2006|09:42] C:\Program Files\Microsoft Visual Studio
[23/03/2007|20:57] C:\Program Files\Microsoft Works
[23/03/2007|20:56] C:\Program Files\Microsoft.NET
[14/12/2008|12:07] C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
[15/09/2006|09:32] C:\Program Files\Movie Maker
[21/01/2009|19:06] C:\Program Files\Mozilla Firefox
[23/03/2007|20:57] C:\Program Files\MSBuild
[15/09/2006|09:09] C:\Program Files\MSN
[15/09/2006|09:09] C:\Program Files\MSN Gaming Zone
[01/06/2008|19:57] C:\Program Files\MSN Messenger
[18/11/2006|04:07] C:\Program Files\MSXML 4.0
[21/01/2009|19:20] C:\Program Files\Navilog1
[15/09/2006|09:30] C:\Program Files\NetMeeting
[02/10/2008|20:42] C:\Program Files\Neuf
[19/02/2008|18:40] C:\Program Files\Open Workbench
[24/01/2008|00:21] C:\Program Files\OpenOffice.org 2.3
[05/04/2007|18:35] C:\Program Files\Outlook Express
[19/07/2008|16:12] C:\Program Files\Paint.NET
[07/11/2006|12:45] C:\Program Files\PLEOMAX PWC-3800
[30/08/2008|18:18] C:\Program Files\QuickTime
[16/08/2008|11:31] C:\Program Files\Real
[10/01/2008|20:56] C:\Program Files\SanDisk
[20/01/2009|21:37] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[15/09/2006|09:09] C:\Program Files\Services en ligne
[15/09/2006|17:09] C:\Program Files\SigmaTel
[15/09/2006|10:59] C:\Program Files\SLD Codec Pack
[27/11/2006|01:43] C:\Program Files\Smart Projects
[12/12/2007|20:42] C:\Program Files\SopCast
[11/01/2009|12:58] C:\Program Files\Spybot - Search & Destroy
[11/01/2009|12:45] C:\Program Files\SpywareGuard
[15/09/2006|17:06] C:\Program Files\Synaptics
[20/01/2009|21:37] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[15/11/2008|19:58] C:\Program Files\TVAnts
[30/08/2008|20:43] C:\Program Files\TVUPlayer
[15/09/2006|09:13] C:\Program Files\Uninstall Information
[21/09/2006|17:23] C:\Program Files\USB Driver-Express
[04/11/2008|23:15] C:\Program Files\uTorrent
[15/09/2006|10:59] C:\Program Files\VideoLAN
[15/09/2006|10:53] C:\Program Files\Webteh
[04/04/2007|21:38] C:\Program Files\Windows Media Connect 2
[10/02/2008|19:23] C:\Program Files\Windows Media Player
[15/09/2006|09:30] C:\Program Files\Windows NT
[15/09/2006|09:09] C:\Program Files\WindowsUpdate
[19/07/2008|16:08] C:\Program Files\WinRAR
[15/09/2006|09:14] C:\Program Files\xerox
[15/09/2006|11:00] C:\Program Files\XviD
[19/07/2008|15:22] C:\Program Files\Yahoo!
[17/08/2008|08:40] C:\Program Files\Zattoo
[24/09/2008|18:48] C:\Program Files\Zone Labs
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[02/12/2008|20:08] C:\Program Files\Fichiers communs\Adobe
[11/11/2007|16:21] C:\Program Files\Fichiers communs\Ahead
[01/01/2007|10:47] C:\Program Files\Fichiers communs\AVSMedia
[23/03/2007|20:56] C:\Program Files\Fichiers communs\DESIGNER
[22/06/2007|20:21] C:\Program Files\Fichiers communs\InstallShield
[23/04/2007|21:52] C:\Program Files\Fichiers communs\InterVideo
[22/09/2006|12:22] C:\Program Files\Fichiers communs\Java
[05/10/2008|14:43] C:\Program Files\Fichiers communs\Microsoft Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\MSSoap
[15/09/2006|10:02] C:\Program Files\Fichiers communs\ODBC
[07/11/2006|12:45] C:\Program Files\Fichiers communs\PWC3800
[16/08/2008|11:31] C:\Program Files\Fichiers communs\Real
[17/12/2007|17:36] C:\Program Files\Fichiers communs\Roxio Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\Services
[15/09/2006|10:02] C:\Program Files\Fichiers communs\SpeechEngines
[12/04/2007|23:38] C:\Program Files\Fichiers communs\Symantec Shared
[28/10/2006|11:54] C:\Program Files\Fichiers communs\Synacast
[05/04/2007|18:35] C:\Program Files\Fichiers communs\System
[14/12/2008|12:11] C:\Program Files\Fichiers communs\Wise Installation Wizard
[16/08/2008|11:31] C:\Program Files\Fichiers communs\xing shared
[26/10/2006|07:56] C:\Program Files\Fichiers communs\Zeepe Framework 7
--------------------\\ Process
( 47 Processes )
IEXPLORE.EXE ~ [PID:2824]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\WINDOWS\Tasks\A9604C16907FC172.job
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-21 19:24:33
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
[F:3][D:1]-> C:\DOCUME~1\maxime\LOCALS~1\Temp
[F:9][D:0]-> C:\DOCUME~1\maxime\Cookies
[F:59][D:4]-> C:\DOCUME~1\maxime\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 21/01/2009|19:25 - Option : [1]
--------------------\\ Fin du rapport a 19:25:23
encore merci
rapport navilog
Clean Navipromo version 3.7.1 commencé le 21/01/2009 à 19:17:55,21
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
Mode suppression automatique
avec prise en charge résultats Catchme et GNS
Nettoyage exécuté au redémarrage de l'ordinateur
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
*** Suppression avec sauvegardes résultats GenericNaviSearch ***
* Suppression dans "C:\WINDOWS\System32" *
* Suppression dans "C:\Documents and Settings\maxime\locals~1\applic~1" *
* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Suppression dossiers dans "C:\WINDOWS" ***
*** Suppression dossiers dans "C:\Program Files" ***
*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***
*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\maxime\applic~1" ***
*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\maxime\locals~1\applic~1" ***
*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***
*** Suppression dossiers dans "C:\Documents and Settings\maxime\menudm~1\progra~1" ***
*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***
*** Suppression fichiers ***
*** Suppression fichiers temporaires ***
Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\maxime\locals~1\Temp effectué !
*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Suppression avec sauvegardes nouveaux fichiers Instant Access :
2)Recherche, création sauvegardes et suppression Heuristique :
* Dans "C:\WINDOWS\system32" *
* Dans "C:\Documents and Settings\maxime\locals~1\applic~1" *
wwhghx.exe trouvé !
Copie wwhghx.exe réalisée avec succès !
wwhghx.exe supprimé !
wwhghx.dat trouvé !
Copie wwhghx.dat réalisée avec succès !
wwhghx.dat supprimé !
wwhghx_nav.dat trouvé !
Copie wwhghx_nav.dat réalisée avec succès !
wwhghx_nav.dat supprimé !
* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
*** Certificats ***
Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !
*** Recherche autres dossiers et fichiers connus ***
C:\WINDOWS\Tasks\A9604C16907FC172.job trouvé ! Infection Lop possible non traitée par cet outil !
*** Nettoyage terminé le 21/01/2009 à 19:20:49,92 ***
RAPPORT LOPSD
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 21/01/2009|19:23 )
--------------------\\ Listing des dossiers dans APPLIC~1
[04/04/2007|18:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
[02/06/2008|08:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/12/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/11/2007|17:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[30/08/2008|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[18/09/2007|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[02/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/03/2008|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[08/07/2007|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/01/2008|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[17/11/2008|22:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
[18/09/2007|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IdleWindowFree64
[26/10/2006|09:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[27/10/2007|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[14/12/2008|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[27/11/2007|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[30/05/2008|15:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[07/01/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/08/2008|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[15/09/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[02/11/2007|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[26/10/2006|08:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless
[17/11/2006|03:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[19/07/2008|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecTaskMan
[08/11/2007|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[20/01/2009|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/09/2008|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/08/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[03/04/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[19/07/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[04/04/2007|18:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[15/09/2006|09:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[26/09/2008|06:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[04/04/2007|18:13] C:\DOCUME~1\LOCALS~1\APPLIC~1\Intel
[26/09/2008|06:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/08/2007|22:08] C:\DOCUME~1\maxime\APPLIC~1\3M
[12/04/2008|20:22] C:\DOCUME~1\maxime\APPLIC~1\Adobe
[08/11/2006|06:39] C:\DOCUME~1\maxime\APPLIC~1\AdobeUM
[02/11/2007|18:18] C:\DOCUME~1\maxime\APPLIC~1\Ahead
[30/08/2008|18:19] C:\DOCUME~1\maxime\APPLIC~1\Apple Computer
[30/11/2006|14:55] C:\DOCUME~1\maxime\APPLIC~1\ArcSoft
[15/09/2006|19:25] C:\DOCUME~1\maxime\APPLIC~1\ATI
[30/06/2007|01:34] C:\DOCUME~1\maxime\APPLIC~1\BitTorrent
[21/09/2008|19:34] C:\DOCUME~1\maxime\APPLIC~1\Comodo
[18/06/2007|18:36] C:\DOCUME~1\maxime\APPLIC~1\DarkBls
[17/11/2007|20:30] C:\DOCUME~1\maxime\APPLIC~1\dvdcss
[30/06/2008|11:39] C:\DOCUME~1\maxime\APPLIC~1\FileZilla
[26/10/2007|15:33] C:\DOCUME~1\maxime\APPLIC~1\GeoVid
[06/11/2007|16:13] C:\DOCUME~1\maxime\APPLIC~1\GetRightToGo
[06/10/2006|20:02] C:\DOCUME~1\maxime\APPLIC~1\Google
[17/11/2008|22:27] C:\DOCUME~1\maxime\APPLIC~1\GTek
[15/09/2006|22:55] C:\DOCUME~1\maxime\APPLIC~1\Help
[12/03/2008|22:54] C:\DOCUME~1\maxime\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\maxime\APPLIC~1\Intel
[15/09/2006|13:06] C:\DOCUME~1\maxime\APPLIC~1\InterVideo
[08/04/2007|09:32] C:\DOCUME~1\maxime\APPLIC~1\Lavasoft
[26/10/2006|08:31] C:\DOCUME~1\maxime\APPLIC~1\Logitech
[22/11/2007|23:01] C:\DOCUME~1\maxime\APPLIC~1\LogoMaker
[18/12/2007|13:09] C:\DOCUME~1\maxime\APPLIC~1\Macromedia
[30/05/2008|15:55] C:\DOCUME~1\maxime\APPLIC~1\Malwarebytes
[28/09/2008|21:10] C:\DOCUME~1\maxime\APPLIC~1\Microsoft
[29/08/2008|06:37] C:\DOCUME~1\maxime\APPLIC~1\Mozilla
[27/08/2007|17:44] C:\DOCUME~1\maxime\APPLIC~1\MSN6
[10/01/2009|16:16] C:\DOCUME~1\maxime\APPLIC~1\OpenOffice.org2
[07/08/2007|23:35] C:\DOCUME~1\maxime\APPLIC~1\Opera
[05/10/2008|16:04] C:\DOCUME~1\maxime\APPLIC~1\Pro Cycling Manager 2008
[16/08/2008|11:33] C:\DOCUME~1\maxime\APPLIC~1\Real
[08/11/2007|07:51] C:\DOCUME~1\maxime\APPLIC~1\Roxio
[19/12/2006|09:05] C:\DOCUME~1\maxime\APPLIC~1\SecuROM
[22/06/2007|20:29] C:\DOCUME~1\maxime\APPLIC~1\Sports Interactive
[22/09/2006|12:24] C:\DOCUME~1\maxime\APPLIC~1\Sun
[08/04/2007|10:48] C:\DOCUME~1\maxime\APPLIC~1\Talkback
[30/08/2008|20:08] C:\DOCUME~1\maxime\APPLIC~1\TVU Networks
[30/11/2007|20:52] C:\DOCUME~1\maxime\APPLIC~1\U3
[20/01/2009|07:12] C:\DOCUME~1\maxime\APPLIC~1\uTorrent
[16/09/2006|00:00] C:\DOCUME~1\maxime\APPLIC~1\vlc
[04/04/2007|18:13] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[18/09/2007|16:25] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[21/01/2009 19:00][--ah-----] C:\WINDOWS\tasks\A9604C16907FC172.job
[21/01/2009 19:19][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
( A9604C16907FC172.job )=( c:\docume~1\maxime\applic~1\start3~1\MapiHtmBone.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[27/08/2007|22:08] C:\Program Files\3M
[02/12/2008|20:08] C:\Program Files\Adobe
[26/09/2007|06:41] C:\Program Files\AGEIA Technologies
[28/10/2006|11:43] C:\Program Files\Agent
[15/09/2006|14:34] C:\Program Files\AIDA32 - Enterprise System Information
[10/04/2007|19:08] C:\Program Files\ATI Technologies
[27/03/2008|17:32] C:\Program Files\Audacity
[02/06/2008|13:20] C:\Program Files\Avira
[06/11/2007|10:17] C:\Program Files\AviSynth 2.5
[01/01/2007|10:47] C:\Program Files\AVSMedia
[19/07/2008|15:58] C:\Program Files\AxBx
[06/11/2007|18:18] C:\Program Files\BitTorrent
[26/10/2006|07:18] C:\Program Files\Broadcom
[11/01/2009|12:38] C:\Program Files\CCleaner
[15/09/2006|22:55] C:\Program Files\CleanUp!
[09/07/2007|18:31] C:\Program Files\Combined Community Codec Pack
[22/09/2008|18:05] C:\Program Files\COMODO
[15/09/2006|14:00] C:\Program Files\CONEXANT
[26/09/2006|18:19] C:\Program Files\Creative
[05/10/2008|16:07] C:\Program Files\Cyanide
[08/04/2007|13:04] C:\Program Files\DAEMON Tools
[26/10/2006|10:19] C:\Program Files\Dell
[18/11/2008|20:25] C:\Program Files\Dell Support
[27/09/2006|19:37] C:\Program Files\DIFX
[15/09/2006|13:15] C:\Program Files\directx
[24/07/2007|21:12] C:\Program Files\DivX
[30/03/2008|19:45] C:\Program Files\epson
[08/08/2007|22:43] C:\Program Files\ffdshow
[30/08/2008|19:58] C:\Program Files\Fichiers communs
[14/12/2008|12:07] C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
[20/01/2009|19:50] C:\Program Files\FindyKill
[12/11/2007|21:58] C:\Program Files\Free Audio Pack
[14/09/2008|22:38] C:\Program Files\Free Easy Burner
[30/09/2007|10:05] C:\Program Files\Google
[04/01/2009|14:53] C:\Program Files\Hitman Pro
[05/01/2009|18:36] C:\Program Files\InstallShield Installation Information
[28/09/2006|11:37] C:\Program Files\Intel
[26/09/2006|08:04] C:\Program Files\Intel Desktop Boards
[05/10/2008|14:45] C:\Program Files\Internet Explorer
[23/04/2007|21:52] C:\Program Files\InterVideo
[14/05/2008|14:54] C:\Program Files\Intuisphere
[11/01/2009|16:12] C:\Program Files\Java
[19/03/2008|13:22] C:\Program Files\JeffProd
[27/10/2007|16:36] C:\Program Files\Kodak
[14/12/2008|12:11] C:\Program Files\Lavasoft
[05/04/2007|18:33] C:\Program Files\Messenger
[15/09/2006|09:14] C:\Program Files\microsoft frontpage
[03/11/2007|10:47] C:\Program Files\Microsoft Office
[15/09/2006|09:42] C:\Program Files\Microsoft Visual Studio
[23/03/2007|20:57] C:\Program Files\Microsoft Works
[23/03/2007|20:56] C:\Program Files\Microsoft.NET
[14/12/2008|12:07] C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
[15/09/2006|09:32] C:\Program Files\Movie Maker
[21/01/2009|19:06] C:\Program Files\Mozilla Firefox
[23/03/2007|20:57] C:\Program Files\MSBuild
[15/09/2006|09:09] C:\Program Files\MSN
[15/09/2006|09:09] C:\Program Files\MSN Gaming Zone
[01/06/2008|19:57] C:\Program Files\MSN Messenger
[18/11/2006|04:07] C:\Program Files\MSXML 4.0
[21/01/2009|19:20] C:\Program Files\Navilog1
[15/09/2006|09:30] C:\Program Files\NetMeeting
[02/10/2008|20:42] C:\Program Files\Neuf
[19/02/2008|18:40] C:\Program Files\Open Workbench
[24/01/2008|00:21] C:\Program Files\OpenOffice.org 2.3
[05/04/2007|18:35] C:\Program Files\Outlook Express
[19/07/2008|16:12] C:\Program Files\Paint.NET
[07/11/2006|12:45] C:\Program Files\PLEOMAX PWC-3800
[30/08/2008|18:18] C:\Program Files\QuickTime
[16/08/2008|11:31] C:\Program Files\Real
[10/01/2008|20:56] C:\Program Files\SanDisk
[20/01/2009|21:37] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[15/09/2006|09:09] C:\Program Files\Services en ligne
[15/09/2006|17:09] C:\Program Files\SigmaTel
[15/09/2006|10:59] C:\Program Files\SLD Codec Pack
[27/11/2006|01:43] C:\Program Files\Smart Projects
[12/12/2007|20:42] C:\Program Files\SopCast
[11/01/2009|12:58] C:\Program Files\Spybot - Search & Destroy
[11/01/2009|12:45] C:\Program Files\SpywareGuard
[15/09/2006|17:06] C:\Program Files\Synaptics
[20/01/2009|21:37] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[15/11/2008|19:58] C:\Program Files\TVAnts
[30/08/2008|20:43] C:\Program Files\TVUPlayer
[15/09/2006|09:13] C:\Program Files\Uninstall Information
[21/09/2006|17:23] C:\Program Files\USB Driver-Express
[04/11/2008|23:15] C:\Program Files\uTorrent
[15/09/2006|10:59] C:\Program Files\VideoLAN
[15/09/2006|10:53] C:\Program Files\Webteh
[04/04/2007|21:38] C:\Program Files\Windows Media Connect 2
[10/02/2008|19:23] C:\Program Files\Windows Media Player
[15/09/2006|09:30] C:\Program Files\Windows NT
[15/09/2006|09:09] C:\Program Files\WindowsUpdate
[19/07/2008|16:08] C:\Program Files\WinRAR
[15/09/2006|09:14] C:\Program Files\xerox
[15/09/2006|11:00] C:\Program Files\XviD
[19/07/2008|15:22] C:\Program Files\Yahoo!
[17/08/2008|08:40] C:\Program Files\Zattoo
[24/09/2008|18:48] C:\Program Files\Zone Labs
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[02/12/2008|20:08] C:\Program Files\Fichiers communs\Adobe
[11/11/2007|16:21] C:\Program Files\Fichiers communs\Ahead
[01/01/2007|10:47] C:\Program Files\Fichiers communs\AVSMedia
[23/03/2007|20:56] C:\Program Files\Fichiers communs\DESIGNER
[22/06/2007|20:21] C:\Program Files\Fichiers communs\InstallShield
[23/04/2007|21:52] C:\Program Files\Fichiers communs\InterVideo
[22/09/2006|12:22] C:\Program Files\Fichiers communs\Java
[05/10/2008|14:43] C:\Program Files\Fichiers communs\Microsoft Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\MSSoap
[15/09/2006|10:02] C:\Program Files\Fichiers communs\ODBC
[07/11/2006|12:45] C:\Program Files\Fichiers communs\PWC3800
[16/08/2008|11:31] C:\Program Files\Fichiers communs\Real
[17/12/2007|17:36] C:\Program Files\Fichiers communs\Roxio Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\Services
[15/09/2006|10:02] C:\Program Files\Fichiers communs\SpeechEngines
[12/04/2007|23:38] C:\Program Files\Fichiers communs\Symantec Shared
[28/10/2006|11:54] C:\Program Files\Fichiers communs\Synacast
[05/04/2007|18:35] C:\Program Files\Fichiers communs\System
[14/12/2008|12:11] C:\Program Files\Fichiers communs\Wise Installation Wizard
[16/08/2008|11:31] C:\Program Files\Fichiers communs\xing shared
[26/10/2006|07:56] C:\Program Files\Fichiers communs\Zeepe Framework 7
--------------------\\ Process
( 47 Processes )
IEXPLORE.EXE ~ [PID:2824]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\WINDOWS\Tasks\A9604C16907FC172.job
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-21 19:24:33
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
[F:3][D:1]-> C:\DOCUME~1\maxime\LOCALS~1\Temp
[F:9][D:0]-> C:\DOCUME~1\maxime\Cookies
[F:59][D:4]-> C:\DOCUME~1\maxime\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 21/01/2009|19:25 - Option : [1]
--------------------\\ Fin du rapport a 19:25:23
Bonsoir,
* Desactives ton antivirus et la garde de ton antispyware si tu en as un
* Relances LopSD et au menu, choisis l'option 2
--> patientes le temps de la suppression
--> si l'outil doit redemarrer pour finir la desinfection, laisses faire
* Un rapport sera généré, postes le
Note : le rapport est aussi à la racine du disque dur
* Telecharges RSIT sur ton bureau :
http://images.malwareremoval.com/random/RSIT.exe
* Double-cliques sur RSIT.exe afin de lancer le programme
* Cliques sur " Continue " à l'écran " Disclaimer "
* Si l'outil Hijackthis ( version à jour ) n'est pas présent ou non-detecté
RSIT le telechargera ---> accetes la license
* Lorsque l'analyse est terminée ----> 2 fichiers textes s'ouvrent
* Postes le contenu de log.txt et info.txt ( dans la barre des taches)
Note : le rapport est aussi à C:\Rsit.txt
* Desactives ton antivirus et la garde de ton antispyware si tu en as un
* Relances LopSD et au menu, choisis l'option 2
--> patientes le temps de la suppression
--> si l'outil doit redemarrer pour finir la desinfection, laisses faire
* Un rapport sera généré, postes le
Note : le rapport est aussi à la racine du disque dur
* Telecharges RSIT sur ton bureau :
http://images.malwareremoval.com/random/RSIT.exe
* Double-cliques sur RSIT.exe afin de lancer le programme
* Cliques sur " Continue " à l'écran " Disclaimer "
* Si l'outil Hijackthis ( version à jour ) n'est pas présent ou non-detecté
RSIT le telechargera ---> accetes la license
* Lorsque l'analyse est terminée ----> 2 fichiers textes s'ouvrent
* Postes le contenu de log.txt et info.txt ( dans la barre des taches)
Note : le rapport est aussi à C:\Rsit.txt
RAPPORT LOPSD
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 21/01/2009|20:15 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\WINDOWS\Tasks\A9604C16907FC172.job
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[04/04/2007|18:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
[02/06/2008|08:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/12/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/11/2007|17:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[30/08/2008|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[18/09/2007|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[02/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/03/2008|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[08/07/2007|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/01/2008|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[17/11/2008|22:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
[18/09/2007|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IdleWindowFree64
[26/10/2006|09:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[27/10/2007|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[14/12/2008|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[27/11/2007|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[30/05/2008|15:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[07/01/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/08/2008|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[15/09/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[02/11/2007|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[26/10/2006|08:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless
[17/11/2006|03:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[19/07/2008|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecTaskMan
[08/11/2007|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[20/01/2009|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/09/2008|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/08/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[03/04/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[19/07/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[04/04/2007|18:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[15/09/2006|09:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[26/09/2008|06:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[04/04/2007|18:13] C:\DOCUME~1\LOCALS~1\APPLIC~1\Intel
[26/09/2008|06:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/08/2007|22:08] C:\DOCUME~1\maxime\APPLIC~1\3M
[12/04/2008|20:22] C:\DOCUME~1\maxime\APPLIC~1\Adobe
[08/11/2006|06:39] C:\DOCUME~1\maxime\APPLIC~1\AdobeUM
[02/11/2007|18:18] C:\DOCUME~1\maxime\APPLIC~1\Ahead
[30/08/2008|18:19] C:\DOCUME~1\maxime\APPLIC~1\Apple Computer
[30/11/2006|14:55] C:\DOCUME~1\maxime\APPLIC~1\ArcSoft
[15/09/2006|19:25] C:\DOCUME~1\maxime\APPLIC~1\ATI
[30/06/2007|01:34] C:\DOCUME~1\maxime\APPLIC~1\BitTorrent
[21/09/2008|19:34] C:\DOCUME~1\maxime\APPLIC~1\Comodo
[18/06/2007|18:36] C:\DOCUME~1\maxime\APPLIC~1\DarkBls
[17/11/2007|20:30] C:\DOCUME~1\maxime\APPLIC~1\dvdcss
[30/06/2008|11:39] C:\DOCUME~1\maxime\APPLIC~1\FileZilla
[26/10/2007|15:33] C:\DOCUME~1\maxime\APPLIC~1\GeoVid
[06/11/2007|16:13] C:\DOCUME~1\maxime\APPLIC~1\GetRightToGo
[06/10/2006|20:02] C:\DOCUME~1\maxime\APPLIC~1\Google
[17/11/2008|22:27] C:\DOCUME~1\maxime\APPLIC~1\GTek
[15/09/2006|22:55] C:\DOCUME~1\maxime\APPLIC~1\Help
[12/03/2008|22:54] C:\DOCUME~1\maxime\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\maxime\APPLIC~1\Intel
[15/09/2006|13:06] C:\DOCUME~1\maxime\APPLIC~1\InterVideo
[08/04/2007|09:32] C:\DOCUME~1\maxime\APPLIC~1\Lavasoft
[26/10/2006|08:31] C:\DOCUME~1\maxime\APPLIC~1\Logitech
[22/11/2007|23:01] C:\DOCUME~1\maxime\APPLIC~1\LogoMaker
[18/12/2007|13:09] C:\DOCUME~1\maxime\APPLIC~1\Macromedia
[30/05/2008|15:55] C:\DOCUME~1\maxime\APPLIC~1\Malwarebytes
[28/09/2008|21:10] C:\DOCUME~1\maxime\APPLIC~1\Microsoft
[29/08/2008|06:37] C:\DOCUME~1\maxime\APPLIC~1\Mozilla
[27/08/2007|17:44] C:\DOCUME~1\maxime\APPLIC~1\MSN6
[10/01/2009|16:16] C:\DOCUME~1\maxime\APPLIC~1\OpenOffice.org2
[07/08/2007|23:35] C:\DOCUME~1\maxime\APPLIC~1\Opera
[05/10/2008|16:04] C:\DOCUME~1\maxime\APPLIC~1\Pro Cycling Manager 2008
[16/08/2008|11:33] C:\DOCUME~1\maxime\APPLIC~1\Real
[08/11/2007|07:51] C:\DOCUME~1\maxime\APPLIC~1\Roxio
[19/12/2006|09:05] C:\DOCUME~1\maxime\APPLIC~1\SecuROM
[22/06/2007|20:29] C:\DOCUME~1\maxime\APPLIC~1\Sports Interactive
[22/09/2006|12:24] C:\DOCUME~1\maxime\APPLIC~1\Sun
[08/04/2007|10:48] C:\DOCUME~1\maxime\APPLIC~1\Talkback
[30/08/2008|20:08] C:\DOCUME~1\maxime\APPLIC~1\TVU Networks
[30/11/2007|20:52] C:\DOCUME~1\maxime\APPLIC~1\U3
[20/01/2009|07:12] C:\DOCUME~1\maxime\APPLIC~1\uTorrent
[16/09/2006|00:00] C:\DOCUME~1\maxime\APPLIC~1\vlc
[04/04/2007|18:13] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[18/09/2007|16:25] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[21/01/2009 19:19][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[27/08/2007|22:08] C:\Program Files\3M
[02/12/2008|20:08] C:\Program Files\Adobe
[26/09/2007|06:41] C:\Program Files\AGEIA Technologies
[28/10/2006|11:43] C:\Program Files\Agent
[15/09/2006|14:34] C:\Program Files\AIDA32 - Enterprise System Information
[10/04/2007|19:08] C:\Program Files\ATI Technologies
[27/03/2008|17:32] C:\Program Files\Audacity
[02/06/2008|13:20] C:\Program Files\Avira
[06/11/2007|10:17] C:\Program Files\AviSynth 2.5
[01/01/2007|10:47] C:\Program Files\AVSMedia
[19/07/2008|15:58] C:\Program Files\AxBx
[06/11/2007|18:18] C:\Program Files\BitTorrent
[26/10/2006|07:18] C:\Program Files\Broadcom
[11/01/2009|12:38] C:\Program Files\CCleaner
[15/09/2006|22:55] C:\Program Files\CleanUp!
[09/07/2007|18:31] C:\Program Files\Combined Community Codec Pack
[22/09/2008|18:05] C:\Program Files\COMODO
[15/09/2006|14:00] C:\Program Files\CONEXANT
[26/09/2006|18:19] C:\Program Files\Creative
[05/10/2008|16:07] C:\Program Files\Cyanide
[08/04/2007|13:04] C:\Program Files\DAEMON Tools
[26/10/2006|10:19] C:\Program Files\Dell
[18/11/2008|20:25] C:\Program Files\Dell Support
[27/09/2006|19:37] C:\Program Files\DIFX
[15/09/2006|13:15] C:\Program Files\directx
[24/07/2007|21:12] C:\Program Files\DivX
[30/03/2008|19:45] C:\Program Files\epson
[08/08/2007|22:43] C:\Program Files\ffdshow
[30/08/2008|19:58] C:\Program Files\Fichiers communs
[14/12/2008|12:07] C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
[20/01/2009|19:50] C:\Program Files\FindyKill
[12/11/2007|21:58] C:\Program Files\Free Audio Pack
[14/09/2008|22:38] C:\Program Files\Free Easy Burner
[30/09/2007|10:05] C:\Program Files\Google
[04/01/2009|14:53] C:\Program Files\Hitman Pro
[05/01/2009|18:36] C:\Program Files\InstallShield Installation Information
[28/09/2006|11:37] C:\Program Files\Intel
[26/09/2006|08:04] C:\Program Files\Intel Desktop Boards
[05/10/2008|14:45] C:\Program Files\Internet Explorer
[23/04/2007|21:52] C:\Program Files\InterVideo
[14/05/2008|14:54] C:\Program Files\Intuisphere
[11/01/2009|16:12] C:\Program Files\Java
[19/03/2008|13:22] C:\Program Files\JeffProd
[27/10/2007|16:36] C:\Program Files\Kodak
[14/12/2008|12:11] C:\Program Files\Lavasoft
[05/04/2007|18:33] C:\Program Files\Messenger
[15/09/2006|09:14] C:\Program Files\microsoft frontpage
[03/11/2007|10:47] C:\Program Files\Microsoft Office
[15/09/2006|09:42] C:\Program Files\Microsoft Visual Studio
[23/03/2007|20:57] C:\Program Files\Microsoft Works
[23/03/2007|20:56] C:\Program Files\Microsoft.NET
[14/12/2008|12:07] C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
[15/09/2006|09:32] C:\Program Files\Movie Maker
[21/01/2009|19:34] C:\Program Files\Mozilla Firefox
[23/03/2007|20:57] C:\Program Files\MSBuild
[15/09/2006|09:09] C:\Program Files\MSN
[15/09/2006|09:09] C:\Program Files\MSN Gaming Zone
[01/06/2008|19:57] C:\Program Files\MSN Messenger
[18/11/2006|04:07] C:\Program Files\MSXML 4.0
[21/01/2009|19:20] C:\Program Files\Navilog1
[15/09/2006|09:30] C:\Program Files\NetMeeting
[02/10/2008|20:42] C:\Program Files\Neuf
[19/02/2008|18:40] C:\Program Files\Open Workbench
[24/01/2008|00:21] C:\Program Files\OpenOffice.org 2.3
[05/04/2007|18:35] C:\Program Files\Outlook Express
[19/07/2008|16:12] C:\Program Files\Paint.NET
[07/11/2006|12:45] C:\Program Files\PLEOMAX PWC-3800
[30/08/2008|18:18] C:\Program Files\QuickTime
[16/08/2008|11:31] C:\Program Files\Real
[10/01/2008|20:56] C:\Program Files\SanDisk
[20/01/2009|21:37] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[15/09/2006|09:09] C:\Program Files\Services en ligne
[15/09/2006|17:09] C:\Program Files\SigmaTel
[15/09/2006|10:59] C:\Program Files\SLD Codec Pack
[27/11/2006|01:43] C:\Program Files\Smart Projects
[12/12/2007|20:42] C:\Program Files\SopCast
[11/01/2009|12:58] C:\Program Files\Spybot - Search & Destroy
[11/01/2009|12:45] C:\Program Files\SpywareGuard
[15/09/2006|17:06] C:\Program Files\Synaptics
[20/01/2009|21:37] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[15/11/2008|19:58] C:\Program Files\TVAnts
[30/08/2008|20:43] C:\Program Files\TVUPlayer
[15/09/2006|09:13] C:\Program Files\Uninstall Information
[21/09/2006|17:23] C:\Program Files\USB Driver-Express
[04/11/2008|23:15] C:\Program Files\uTorrent
[15/09/2006|10:59] C:\Program Files\VideoLAN
[15/09/2006|10:53] C:\Program Files\Webteh
[04/04/2007|21:38] C:\Program Files\Windows Media Connect 2
[10/02/2008|19:23] C:\Program Files\Windows Media Player
[15/09/2006|09:30] C:\Program Files\Windows NT
[15/09/2006|09:09] C:\Program Files\WindowsUpdate
[19/07/2008|16:08] C:\Program Files\WinRAR
[15/09/2006|09:14] C:\Program Files\xerox
[15/09/2006|11:00] C:\Program Files\XviD
[19/07/2008|15:22] C:\Program Files\Yahoo!
[17/08/2008|08:40] C:\Program Files\Zattoo
[24/09/2008|18:48] C:\Program Files\Zone Labs
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[02/12/2008|20:08] C:\Program Files\Fichiers communs\Adobe
[11/11/2007|16:21] C:\Program Files\Fichiers communs\Ahead
[01/01/2007|10:47] C:\Program Files\Fichiers communs\AVSMedia
[23/03/2007|20:56] C:\Program Files\Fichiers communs\DESIGNER
[22/06/2007|20:21] C:\Program Files\Fichiers communs\InstallShield
[23/04/2007|21:52] C:\Program Files\Fichiers communs\InterVideo
[22/09/2006|12:22] C:\Program Files\Fichiers communs\Java
[05/10/2008|14:43] C:\Program Files\Fichiers communs\Microsoft Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\MSSoap
[15/09/2006|10:02] C:\Program Files\Fichiers communs\ODBC
[07/11/2006|12:45] C:\Program Files\Fichiers communs\PWC3800
[16/08/2008|11:31] C:\Program Files\Fichiers communs\Real
[17/12/2007|17:36] C:\Program Files\Fichiers communs\Roxio Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\Services
[15/09/2006|10:02] C:\Program Files\Fichiers communs\SpeechEngines
[12/04/2007|23:38] C:\Program Files\Fichiers communs\Symantec Shared
[28/10/2006|11:54] C:\Program Files\Fichiers communs\Synacast
[05/04/2007|18:35] C:\Program Files\Fichiers communs\System
[14/12/2008|12:11] C:\Program Files\Fichiers communs\Wise Installation Wizard
[16/08/2008|11:31] C:\Program Files\Fichiers communs\xing shared
[26/10/2006|07:56] C:\Program Files\Fichiers communs\Zeepe Framework 7
--------------------\\ Process
( 44 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-21 20:16:07
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
[F:9][D:1]-> C:\DOCUME~1\maxime\LOCALS~1\Temp
[F:12][D:0]-> C:\DOCUME~1\maxime\Cookies
[F:160][D:4]-> C:\DOCUME~1\maxime\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 21/01/2009|19:25 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 21/01/2009|20:16 - Option : [2]
--------------------\\ Fin du rapport a 20:16:51
RAPPORT LOG
Logfile of random's system information tool 1.05 (written by random/random)
Run by maxime at 2009-01-21 20:18:45
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 5 GB (35%) free of 13 GB
Total RAM: 1022 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:18:56, on 21/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\maxime\Bureau\RSIT.exe
C:\Program Files\trend micro\maxime.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = escamote:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {8354F0FE-550E-4E14-AFE1-E5CEF9009311} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A} (DLoader Class) - http://dl.uc.sina.com/cab/downloader.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1231687231_3177a689776010c01f27cea973be7483&GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab&BHost=javadl.sun.com
O20 - AppInit_DLLs:
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:10 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 21/01/2009|20:15 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\WINDOWS\Tasks\A9604C16907FC172.job
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[04/04/2007|18:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
[02/06/2008|08:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/12/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/11/2007|17:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[30/08/2008|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[18/09/2007|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[02/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/03/2008|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[08/07/2007|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/01/2008|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[17/11/2008|22:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
[18/09/2007|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IdleWindowFree64
[26/10/2006|09:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[27/10/2007|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[14/12/2008|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[27/11/2007|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[30/05/2008|15:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[07/01/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/08/2008|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[15/09/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[02/11/2007|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[26/10/2006|08:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless
[17/11/2006|03:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[19/07/2008|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecTaskMan
[08/11/2007|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[20/01/2009|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/09/2008|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/08/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[03/04/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[19/07/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[04/04/2007|18:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[15/09/2006|09:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[26/09/2008|06:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[04/04/2007|18:13] C:\DOCUME~1\LOCALS~1\APPLIC~1\Intel
[26/09/2008|06:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/08/2007|22:08] C:\DOCUME~1\maxime\APPLIC~1\3M
[12/04/2008|20:22] C:\DOCUME~1\maxime\APPLIC~1\Adobe
[08/11/2006|06:39] C:\DOCUME~1\maxime\APPLIC~1\AdobeUM
[02/11/2007|18:18] C:\DOCUME~1\maxime\APPLIC~1\Ahead
[30/08/2008|18:19] C:\DOCUME~1\maxime\APPLIC~1\Apple Computer
[30/11/2006|14:55] C:\DOCUME~1\maxime\APPLIC~1\ArcSoft
[15/09/2006|19:25] C:\DOCUME~1\maxime\APPLIC~1\ATI
[30/06/2007|01:34] C:\DOCUME~1\maxime\APPLIC~1\BitTorrent
[21/09/2008|19:34] C:\DOCUME~1\maxime\APPLIC~1\Comodo
[18/06/2007|18:36] C:\DOCUME~1\maxime\APPLIC~1\DarkBls
[17/11/2007|20:30] C:\DOCUME~1\maxime\APPLIC~1\dvdcss
[30/06/2008|11:39] C:\DOCUME~1\maxime\APPLIC~1\FileZilla
[26/10/2007|15:33] C:\DOCUME~1\maxime\APPLIC~1\GeoVid
[06/11/2007|16:13] C:\DOCUME~1\maxime\APPLIC~1\GetRightToGo
[06/10/2006|20:02] C:\DOCUME~1\maxime\APPLIC~1\Google
[17/11/2008|22:27] C:\DOCUME~1\maxime\APPLIC~1\GTek
[15/09/2006|22:55] C:\DOCUME~1\maxime\APPLIC~1\Help
[12/03/2008|22:54] C:\DOCUME~1\maxime\APPLIC~1\InstallShield
[04/04/2007|18:13] C:\DOCUME~1\maxime\APPLIC~1\Intel
[15/09/2006|13:06] C:\DOCUME~1\maxime\APPLIC~1\InterVideo
[08/04/2007|09:32] C:\DOCUME~1\maxime\APPLIC~1\Lavasoft
[26/10/2006|08:31] C:\DOCUME~1\maxime\APPLIC~1\Logitech
[22/11/2007|23:01] C:\DOCUME~1\maxime\APPLIC~1\LogoMaker
[18/12/2007|13:09] C:\DOCUME~1\maxime\APPLIC~1\Macromedia
[30/05/2008|15:55] C:\DOCUME~1\maxime\APPLIC~1\Malwarebytes
[28/09/2008|21:10] C:\DOCUME~1\maxime\APPLIC~1\Microsoft
[29/08/2008|06:37] C:\DOCUME~1\maxime\APPLIC~1\Mozilla
[27/08/2007|17:44] C:\DOCUME~1\maxime\APPLIC~1\MSN6
[10/01/2009|16:16] C:\DOCUME~1\maxime\APPLIC~1\OpenOffice.org2
[07/08/2007|23:35] C:\DOCUME~1\maxime\APPLIC~1\Opera
[05/10/2008|16:04] C:\DOCUME~1\maxime\APPLIC~1\Pro Cycling Manager 2008
[16/08/2008|11:33] C:\DOCUME~1\maxime\APPLIC~1\Real
[08/11/2007|07:51] C:\DOCUME~1\maxime\APPLIC~1\Roxio
[19/12/2006|09:05] C:\DOCUME~1\maxime\APPLIC~1\SecuROM
[22/06/2007|20:29] C:\DOCUME~1\maxime\APPLIC~1\Sports Interactive
[22/09/2006|12:24] C:\DOCUME~1\maxime\APPLIC~1\Sun
[08/04/2007|10:48] C:\DOCUME~1\maxime\APPLIC~1\Talkback
[30/08/2008|20:08] C:\DOCUME~1\maxime\APPLIC~1\TVU Networks
[30/11/2007|20:52] C:\DOCUME~1\maxime\APPLIC~1\U3
[20/01/2009|07:12] C:\DOCUME~1\maxime\APPLIC~1\uTorrent
[16/09/2006|00:00] C:\DOCUME~1\maxime\APPLIC~1\vlc
[04/04/2007|18:13] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[18/09/2007|16:25] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[21/01/2009 19:19][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[27/08/2007|22:08] C:\Program Files\3M
[02/12/2008|20:08] C:\Program Files\Adobe
[26/09/2007|06:41] C:\Program Files\AGEIA Technologies
[28/10/2006|11:43] C:\Program Files\Agent
[15/09/2006|14:34] C:\Program Files\AIDA32 - Enterprise System Information
[10/04/2007|19:08] C:\Program Files\ATI Technologies
[27/03/2008|17:32] C:\Program Files\Audacity
[02/06/2008|13:20] C:\Program Files\Avira
[06/11/2007|10:17] C:\Program Files\AviSynth 2.5
[01/01/2007|10:47] C:\Program Files\AVSMedia
[19/07/2008|15:58] C:\Program Files\AxBx
[06/11/2007|18:18] C:\Program Files\BitTorrent
[26/10/2006|07:18] C:\Program Files\Broadcom
[11/01/2009|12:38] C:\Program Files\CCleaner
[15/09/2006|22:55] C:\Program Files\CleanUp!
[09/07/2007|18:31] C:\Program Files\Combined Community Codec Pack
[22/09/2008|18:05] C:\Program Files\COMODO
[15/09/2006|14:00] C:\Program Files\CONEXANT
[26/09/2006|18:19] C:\Program Files\Creative
[05/10/2008|16:07] C:\Program Files\Cyanide
[08/04/2007|13:04] C:\Program Files\DAEMON Tools
[26/10/2006|10:19] C:\Program Files\Dell
[18/11/2008|20:25] C:\Program Files\Dell Support
[27/09/2006|19:37] C:\Program Files\DIFX
[15/09/2006|13:15] C:\Program Files\directx
[24/07/2007|21:12] C:\Program Files\DivX
[30/03/2008|19:45] C:\Program Files\epson
[08/08/2007|22:43] C:\Program Files\ffdshow
[30/08/2008|19:58] C:\Program Files\Fichiers communs
[14/12/2008|12:07] C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
[20/01/2009|19:50] C:\Program Files\FindyKill
[12/11/2007|21:58] C:\Program Files\Free Audio Pack
[14/09/2008|22:38] C:\Program Files\Free Easy Burner
[30/09/2007|10:05] C:\Program Files\Google
[04/01/2009|14:53] C:\Program Files\Hitman Pro
[05/01/2009|18:36] C:\Program Files\InstallShield Installation Information
[28/09/2006|11:37] C:\Program Files\Intel
[26/09/2006|08:04] C:\Program Files\Intel Desktop Boards
[05/10/2008|14:45] C:\Program Files\Internet Explorer
[23/04/2007|21:52] C:\Program Files\InterVideo
[14/05/2008|14:54] C:\Program Files\Intuisphere
[11/01/2009|16:12] C:\Program Files\Java
[19/03/2008|13:22] C:\Program Files\JeffProd
[27/10/2007|16:36] C:\Program Files\Kodak
[14/12/2008|12:11] C:\Program Files\Lavasoft
[05/04/2007|18:33] C:\Program Files\Messenger
[15/09/2006|09:14] C:\Program Files\microsoft frontpage
[03/11/2007|10:47] C:\Program Files\Microsoft Office
[15/09/2006|09:42] C:\Program Files\Microsoft Visual Studio
[23/03/2007|20:57] C:\Program Files\Microsoft Works
[23/03/2007|20:56] C:\Program Files\Microsoft.NET
[14/12/2008|12:07] C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
[15/09/2006|09:32] C:\Program Files\Movie Maker
[21/01/2009|19:34] C:\Program Files\Mozilla Firefox
[23/03/2007|20:57] C:\Program Files\MSBuild
[15/09/2006|09:09] C:\Program Files\MSN
[15/09/2006|09:09] C:\Program Files\MSN Gaming Zone
[01/06/2008|19:57] C:\Program Files\MSN Messenger
[18/11/2006|04:07] C:\Program Files\MSXML 4.0
[21/01/2009|19:20] C:\Program Files\Navilog1
[15/09/2006|09:30] C:\Program Files\NetMeeting
[02/10/2008|20:42] C:\Program Files\Neuf
[19/02/2008|18:40] C:\Program Files\Open Workbench
[24/01/2008|00:21] C:\Program Files\OpenOffice.org 2.3
[05/04/2007|18:35] C:\Program Files\Outlook Express
[19/07/2008|16:12] C:\Program Files\Paint.NET
[07/11/2006|12:45] C:\Program Files\PLEOMAX PWC-3800
[30/08/2008|18:18] C:\Program Files\QuickTime
[16/08/2008|11:31] C:\Program Files\Real
[10/01/2008|20:56] C:\Program Files\SanDisk
[20/01/2009|21:37] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[15/09/2006|09:09] C:\Program Files\Services en ligne
[15/09/2006|17:09] C:\Program Files\SigmaTel
[15/09/2006|10:59] C:\Program Files\SLD Codec Pack
[27/11/2006|01:43] C:\Program Files\Smart Projects
[12/12/2007|20:42] C:\Program Files\SopCast
[11/01/2009|12:58] C:\Program Files\Spybot - Search & Destroy
[11/01/2009|12:45] C:\Program Files\SpywareGuard
[15/09/2006|17:06] C:\Program Files\Synaptics
[20/01/2009|21:37] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[15/11/2008|19:58] C:\Program Files\TVAnts
[30/08/2008|20:43] C:\Program Files\TVUPlayer
[15/09/2006|09:13] C:\Program Files\Uninstall Information
[21/09/2006|17:23] C:\Program Files\USB Driver-Express
[04/11/2008|23:15] C:\Program Files\uTorrent
[15/09/2006|10:59] C:\Program Files\VideoLAN
[15/09/2006|10:53] C:\Program Files\Webteh
[04/04/2007|21:38] C:\Program Files\Windows Media Connect 2
[10/02/2008|19:23] C:\Program Files\Windows Media Player
[15/09/2006|09:30] C:\Program Files\Windows NT
[15/09/2006|09:09] C:\Program Files\WindowsUpdate
[19/07/2008|16:08] C:\Program Files\WinRAR
[15/09/2006|09:14] C:\Program Files\xerox
[15/09/2006|11:00] C:\Program Files\XviD
[19/07/2008|15:22] C:\Program Files\Yahoo!
[17/08/2008|08:40] C:\Program Files\Zattoo
[24/09/2008|18:48] C:\Program Files\Zone Labs
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[02/12/2008|20:08] C:\Program Files\Fichiers communs\Adobe
[11/11/2007|16:21] C:\Program Files\Fichiers communs\Ahead
[01/01/2007|10:47] C:\Program Files\Fichiers communs\AVSMedia
[23/03/2007|20:56] C:\Program Files\Fichiers communs\DESIGNER
[22/06/2007|20:21] C:\Program Files\Fichiers communs\InstallShield
[23/04/2007|21:52] C:\Program Files\Fichiers communs\InterVideo
[22/09/2006|12:22] C:\Program Files\Fichiers communs\Java
[05/10/2008|14:43] C:\Program Files\Fichiers communs\Microsoft Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\MSSoap
[15/09/2006|10:02] C:\Program Files\Fichiers communs\ODBC
[07/11/2006|12:45] C:\Program Files\Fichiers communs\PWC3800
[16/08/2008|11:31] C:\Program Files\Fichiers communs\Real
[17/12/2007|17:36] C:\Program Files\Fichiers communs\Roxio Shared
[15/09/2006|09:10] C:\Program Files\Fichiers communs\Services
[15/09/2006|10:02] C:\Program Files\Fichiers communs\SpeechEngines
[12/04/2007|23:38] C:\Program Files\Fichiers communs\Symantec Shared
[28/10/2006|11:54] C:\Program Files\Fichiers communs\Synacast
[05/04/2007|18:35] C:\Program Files\Fichiers communs\System
[14/12/2008|12:11] C:\Program Files\Fichiers communs\Wise Installation Wizard
[16/08/2008|11:31] C:\Program Files\Fichiers communs\xing shared
[26/10/2006|07:56] C:\Program Files\Fichiers communs\Zeepe Framework 7
--------------------\\ Process
( 44 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-21 20:16:07
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
[F:9][D:1]-> C:\DOCUME~1\maxime\LOCALS~1\Temp
[F:12][D:0]-> C:\DOCUME~1\maxime\Cookies
[F:160][D:4]-> C:\DOCUME~1\maxime\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 21/01/2009|19:25 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 21/01/2009|20:16 - Option : [2]
--------------------\\ Fin du rapport a 20:16:51
RAPPORT LOG
Logfile of random's system information tool 1.05 (written by random/random)
Run by maxime at 2009-01-21 20:18:45
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 5 GB (35%) free of 13 GB
Total RAM: 1022 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:18:56, on 21/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\maxime\Bureau\RSIT.exe
C:\Program Files\trend micro\maxime.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = escamote:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {8354F0FE-550E-4E14-AFE1-E5CEF9009311} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A} (DLoader Class) - http://dl.uc.sina.com/cab/downloader.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1231687231_3177a689776010c01f27cea973be7483&GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab&BHost=javadl.sun.com
O20 - AppInit_DLLs:
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
Re,
* je vois des traces d'avast et AVG7 --> supprimes les
si tu les as encore sur le pc...
--> c'est 1 et 1 seul antivirus sur le meme pc --> risques de conflit, bugs, ralentissement..
* Tu as une infection USB, telecharges RAV Antivirus
http://ww25.evosla.com/compteur.php?soft=rav_antivirus
* Clic-droit sur le fichier --> extraire sur le bureau
* Branches tes disques amovibles ( clés USB, disque dur externe,ipod etc...)
*Double-cliques sur RAV.exe pour lancer l'outil
---> laisses le agir ---> si il trouve des infections --> un rapport s'etablira
* Retires tes disques amovibles et redemarre le pc
* Postes le rapport généré
* Il serait aussi necessaire de faire le ménage dans tes programmes
--> il y en a peu qui sont à jour!
-----------/
* je vois des traces d'avast et AVG7 --> supprimes les
si tu les as encore sur le pc...
--> c'est 1 et 1 seul antivirus sur le meme pc --> risques de conflit, bugs, ralentissement..
* Tu as une infection USB, telecharges RAV Antivirus
http://ww25.evosla.com/compteur.php?soft=rav_antivirus
* Clic-droit sur le fichier --> extraire sur le bureau
* Branches tes disques amovibles ( clés USB, disque dur externe,ipod etc...)
*Double-cliques sur RAV.exe pour lancer l'outil
---> laisses le agir ---> si il trouve des infections --> un rapport s'etablira
* Retires tes disques amovibles et redemarre le pc
* Postes le rapport généré
* Il serait aussi necessaire de faire le ménage dans tes programmes
--> il y en a peu qui sont à jour!
-----------/
je ne comprends pas pourquoi j'ai encore des traces d'avast et AVG7...
comment effacer ces traces selon vous ?
ET de quel ménage parlez vous ? Quels programmes en particulier je dois mettre à jour ?
Car j'effectue une mise à jour régulière des programmes de protection.
Merci
Je m'occupe de la manip' que vous m'avez indiqué et je poste le rapport
comment effacer ces traces selon vous ?
ET de quel ménage parlez vous ? Quels programmes en particulier je dois mettre à jour ?
Car j'effectue une mise à jour régulière des programmes de protection.
Merci
Je m'occupe de la manip' que vous m'avez indiqué et je poste le rapport
voivi le rapport de ToolbarSD:
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2500 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : maxime ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080602-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:12 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:78 Go (Free:15 Go)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:9 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 19/01/2009|19:06 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
-----------\\ Extensions
(maxime) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(maxime) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://home.neuf.fr/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://actus.sfr.fr"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Search Bar"="https://actus.sfr.fr"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://actus.sfr.fr"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60327"
"CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076"
--------------------\\ Recherche d'autres infections
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx.dat
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx.exe
C:\DOCUME~1\maxime\LOCALS~1\APPLIC~1\wwhghx_nav.dat
[b]==> EGDACCESS <==/b
C:\WINDOWS\system32\drivers\downld
[b]==> BAGLE <==/b
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\maxime\Application Data\uTorrent\Call_Of_Duty_4_Crackfix_And_Keygen-Razor1911.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Look N Stop 2.05 + Crack [FR].rar.torrent
C:\DOCUME~1\maxime\Application Data\uTorrent\Sam and Max Season 2 COMPLETE ep.1-5 install + crack NO RAR.torrent
1 - "C:\ToolBar SD\TB_1.txt" - 19/01/2009|19:07 - Option : [1]
-----------\\ Fin du rapport a 19:07:32,92
J'attends de vos nouvelles.
Merci