Sujet Précédent Sujet Suivant

Mon net est lent et j'ai des fichier bizarre

ruday -  
 ruday -
Bonjour, mon pc est infecter par des fichier bizzare. C'est a dire qu'ils sont un peu transaparent et leurs titres sont ecrit en bleu.. c'est a peu pres tous les meme et ils se créent un peu pdans tout mes fichiers. De plus je sais pa si cela affecte mon net mais depuis peu j'ai des ralentissemnt et parfois de grosse panne pendant des heures. J'ai norton internet security et protection center mais l'analyse ne releve rien. j'ai aussi essayer spybot reshearch and destroye et sa ne change pas pour autant. Donc j'aimerai savoir si quelqu'un connaitrai la source de mon probleme et si possible m'aide. Merci d'avance.
A voir également:

14 réponses

Réponse 1 / 14
Utilisateur anonyme
 
salut :

télécharge GenProc http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip sur ton bureau
Pour Vista : Désactive l'UAC jusqu'à la résolution du problème http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/desactiver-controle-utilisateurs-sujet_198996_1.htm
dézippe le dossier, double-clique sur GenProc.bat

attends le rapport et poste
0
Réponse 2 / 14
ruday
 
Voila le rapport

Rapport GenProc 2.351 [1] - 31/01/2009 - Windows XP

# Etape 1/ Télécharge :

- CCleaner https://www.ccleaner.com/ccleaner/download (FileHippo)
Ce logiciel va permettre de supprimer tous les fichiers temporaires.
Lance-le et clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
Par la suite, laisse-le avec ses réglages par défaut. Ferme le programme.

- Lop S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 (Eric 71 & Angeldark) sur ton Bureau.

- MSNFix http://sosvirus.changelog.fr/MSNFix.zip (!aur3n7) et décompresse-le sur le Bureau.

Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ ; pour retrouver le rapport, clique sur le raccourci "GenProc" sur ton bureau. Choisis ta session courante *** Rudy ***

# Etape 2/

Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
- Exécute l'option R.
- Si l'infection est détectée, exécute l'option N.
- Sauvegarde ce rapport sur ton bureau.

# Etape 3/

Double-clique sur Lop S&D pour lancer l'installation, séléctionne la langue souhaitée, puis choisis l'Option 2 - Suppression - et patiente jusqu'à ce qu'il ait terminé.

# Etape 4/

Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

# Etape 5/

Redémarre normalement et poste, dans la même réponse :

- Le contenu du rapport MSNfix situé sur le Bureau ;
- Le contenu du rapport C:\lopR.txt ;
- Un nouveau rapport HijackThis http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm ;

Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

____________________________________________________________________________________________________________

Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
0
Réponse 3 / 14
Utilisateur anonyme
 
tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
0
Réponse 4 / 14
ruday
 
voila le rapport

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Rudy ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
Firewall : Norton Internet Security 2007 (Activated)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:136 Go)
D:\ (USB)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 31/01/2009|12:23 )

--------------------\\ Listing des dossiers dans APPLIC~1

[07/10/2008|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[18/11/2008|08:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[08/11/2007|09:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[25/12/2007|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/01/2009|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[17/09/2007|23:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
[30/01/2009|23:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
[15/01/2008|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[16/09/2008|00:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Codemasters
[21/08/2007|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/12/2007|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[23/05/2008|11:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Funcom
[21/11/2008|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[30/01/2009|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/05/2008|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[02/09/2007|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/12/2008|13:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[25/10/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[18/08/2007|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[02/04/2008|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[23/09/2007|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[01/11/2008|15:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[31/01/2009|02:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[27/08/2007|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/03/2008|15:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[26/12/2007|18:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[02/08/2007|14:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/08/2007|14:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[01/02/2008|16:44] C:\DOCUME~1\Johann\APPLIC~1\Adobe
[19/01/2009|18:09] C:\DOCUME~1\Johann\APPLIC~1\Apple Computer
[18/08/2007|18:38] C:\DOCUME~1\Johann\APPLIC~1\Identities
[03/04/2008|22:16] C:\DOCUME~1\Johann\APPLIC~1\ItsLabel
[18/08/2007|18:41] C:\DOCUME~1\Johann\APPLIC~1\Macromedia
[19/12/2008|12:28] C:\DOCUME~1\Johann\APPLIC~1\Microsoft
[08/01/2009|12:11] C:\DOCUME~1\Johann\APPLIC~1\Mozilla
[08/01/2009|16:21] C:\DOCUME~1\Johann\APPLIC~1\OpenOffice.org
[21/10/2008|21:03] C:\DOCUME~1\Johann\APPLIC~1\Real
[08/12/2007|14:02] C:\DOCUME~1\Johann\APPLIC~1\Samsung
[02/08/2007|14:18] C:\DOCUME~1\Johann\APPLIC~1\Sun
[18/08/2007|18:39] C:\DOCUME~1\Johann\APPLIC~1\Talkback

[01/01/2008|02:47] C:\DOCUME~1\JOL~1\APPLIC~1\Adobe
[23/01/2008|04:04] C:\DOCUME~1\JOL~1\APPLIC~1\Apple Computer
[25/04/2008|08:59] C:\DOCUME~1\JOL~1\APPLIC~1\Help
[17/09/2007|23:18] C:\DOCUME~1\JOL~1\APPLIC~1\Identities
[17/09/2008|13:35] C:\DOCUME~1\JOL~1\APPLIC~1\InterVideo
[04/04/2008|01:48] C:\DOCUME~1\JOL~1\APPLIC~1\ItsLabel
[17/09/2007|23:18] C:\DOCUME~1\JOL~1\APPLIC~1\Macromedia
[01/01/2009|21:17] C:\DOCUME~1\JOL~1\APPLIC~1\Microsoft
[02/12/2008|00:54] C:\DOCUME~1\JOL~1\APPLIC~1\Mozilla
[10/10/2008|01:01] C:\DOCUME~1\JOL~1\APPLIC~1\Real
[02/08/2007|14:18] C:\DOCUME~1\JOL~1\APPLIC~1\Sun
[18/09/2007|00:24] C:\DOCUME~1\JOL~1\APPLIC~1\Talkback

[27/08/2007|22:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[24/12/2008|20:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire

[14/10/2008|15:37] C:\DOCUME~1\mss\APPLIC~1\.#
[01/01/2008|13:19] C:\DOCUME~1\mss\APPLIC~1\Adobe
[25/03/2008|15:45] C:\DOCUME~1\mss\APPLIC~1\Apple Computer
[09/01/2008|20:33] C:\DOCUME~1\mss\APPLIC~1\City eggs data
[21/03/2008|11:38] C:\DOCUME~1\mss\APPLIC~1\FotoWire
[15/01/2008|18:48] C:\DOCUME~1\mss\APPLIC~1\Help
[02/08/2007|14:21] C:\DOCUME~1\mss\APPLIC~1\Identities
[03/08/2007|06:55] C:\DOCUME~1\mss\APPLIC~1\InterVideo
[02/04/2008|19:15] C:\DOCUME~1\mss\APPLIC~1\ItsLabel
[24/07/2008|01:57] C:\DOCUME~1\mss\APPLIC~1\LimeWire
[20/08/2007|17:17] C:\DOCUME~1\mss\APPLIC~1\Macromedia
[17/12/2008|14:47] C:\DOCUME~1\mss\APPLIC~1\Microsoft
[25/11/2008|23:20] C:\DOCUME~1\mss\APPLIC~1\Mozilla
[02/08/2008|08:24] C:\DOCUME~1\mss\APPLIC~1\Nosibay
[14/01/2009|12:06] C:\DOCUME~1\mss\APPLIC~1\OpenOffice.org
[17/01/2009|04:22] C:\DOCUME~1\mss\APPLIC~1\Real
[14/06/2008|20:20] C:\DOCUME~1\mss\APPLIC~1\Samsung
[15/11/2007|22:34] C:\DOCUME~1\mss\APPLIC~1\Skype
[02/08/2007|14:18] C:\DOCUME~1\mss\APPLIC~1\Sun
[20/08/2007|17:15] C:\DOCUME~1\mss\APPLIC~1\Talkback
[16/06/2008|23:43] C:\DOCUME~1\mss\APPLIC~1\TaoUSign
[03/11/2008|11:50] C:\DOCUME~1\mss\APPLIC~1\teamspeak2
[01/10/2007|08:57] C:\DOCUME~1\mss\APPLIC~1\vlc
[18/01/2009|02:18] C:\DOCUME~1\mss\APPLIC~1\Xfire

[02/12/2007|15:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[24/12/2008|20:44] C:\DOCUME~1\NETWOR~1\APPLIC~1\Xfire

[06/01/2008|18:52] C:\DOCUME~1\Rudy\APPLIC~1\Adobe
[25/12/2007|12:25] C:\DOCUME~1\Rudy\APPLIC~1\Apple Computer
[04/09/2008|06:25] C:\DOCUME~1\Rudy\APPLIC~1\DNA
[02/04/2008|14:51] C:\DOCUME~1\Rudy\APPLIC~1\EoRezo
[20/08/2008|18:11] C:\DOCUME~1\Rudy\APPLIC~1\GetRightToGo
[03/11/2007|09:56] C:\DOCUME~1\Rudy\APPLIC~1\Help
[18/08/2007|13:07] C:\DOCUME~1\Rudy\APPLIC~1\Identities
[25/10/2008|22:04] C:\DOCUME~1\Rudy\APPLIC~1\IGN_DLM
[25/10/2008|19:12] C:\DOCUME~1\Rudy\APPLIC~1\InstallShield
[21/08/2007|16:11] C:\DOCUME~1\Rudy\APPLIC~1\InterVideo
[02/04/2008|14:47] C:\DOCUME~1\Rudy\APPLIC~1\ItsLabel
[11/01/2009|01:26] C:\DOCUME~1\Rudy\APPLIC~1\LimeWire
[18/08/2007|13:37] C:\DOCUME~1\Rudy\APPLIC~1\Macromedia
[20/12/2008|01:00] C:\DOCUME~1\Rudy\APPLIC~1\Microsoft
[08/12/2007|23:46] C:\DOCUME~1\Rudy\APPLIC~1\Momindum
[21/11/2008|15:47] C:\DOCUME~1\Rudy\APPLIC~1\Mozilla
[23/10/2008|22:42] C:\DOCUME~1\Rudy\APPLIC~1\OpenOffice.org
[17/10/2008|12:06] C:\DOCUME~1\Rudy\APPLIC~1\Real
[08/12/2007|14:01] C:\DOCUME~1\Rudy\APPLIC~1\Samsung
[14/11/2008|00:16] C:\DOCUME~1\Rudy\APPLIC~1\Skype
[14/11/2008|00:09] C:\DOCUME~1\Rudy\APPLIC~1\skypePM
[02/08/2007|14:18] C:\DOCUME~1\Rudy\APPLIC~1\Sun
[18/08/2007|13:34] C:\DOCUME~1\Rudy\APPLIC~1\Talkback
[15/03/2008|17:48] C:\DOCUME~1\Rudy\APPLIC~1\teamspeak2
[02/10/2007|07:14] C:\DOCUME~1\Rudy\APPLIC~1\vlc
[23/12/2008|17:18] C:\DOCUME~1\Rudy\APPLIC~1\Xfire

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[31/01/2009 12:00][--ah-----] C:\WINDOWS\tasks\AF40D85591874B31.job
[26/01/2009 20:00][--a------] C:\WINDOWS\tasks\Norton Internet Security - Analyse systŠme complŠte - mss.job
[31/01/2009 01:00][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( AF40D85591874B31.job )=( c:\docume~1\mss\applic~1\cityeg~1\StylePokeLogo.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[15/01/2008|18:53] C:\Program Files\ABBYY FineReader 5.0 Sprint
[15/01/2008|18:52] C:\Program Files\ABBYY FineReader 6.0
[18/08/2007|20:12] C:\Program Files\Acclaim
[18/11/2008|08:23] C:\Program Files\Adobe
[03/08/2007|06:52] C:\Program Files\Ahead
[25/09/2007|22:35] C:\Program Files\All2Txt
[07/07/2008|22:01] C:\Program Files\ASIO4ALL v2
[30/01/2009|23:07] C:\Program Files\Avira
[31/01/2009|12:17] C:\Program Files\BitSpirit
[07/10/2008|14:07] C:\Program Files\Bonjour
[12/12/2008|12:36] C:\Program Files\Bytescout XLS Viewer
[25/09/2007|22:44] C:\Program Files\CDex_150
[31/01/2008|02:09] C:\Program Files\Circle Developement
[25/12/2007|17:28] C:\Program Files\City eggs data
[29/09/2008|08:58] C:\Program Files\Common Files
[02/08/2007|14:13] C:\Program Files\ComPlus Applications
[14/10/2008|12:43] C:\Program Files\Curse
[21/03/2008|11:42] C:\Program Files\directx
[07/07/2008|23:13] C:\Program Files\DivX
[03/09/2008|19:38] C:\Program Files\DNA
[21/08/2007|16:07] C:\Program Files\DVD Shrink
[02/04/2008|14:51] C:\Program Files\EoRezo
[07/07/2008|23:13] C:\Program Files\FaxTools
[17/12/2008|12:49] C:\Program Files\Fichiers communs
[16/01/2009|00:14] C:\Program Files\FlashGet
[05/09/2008|22:53] C:\Program Files\Full Tilt Poker
[29/09/2008|08:54] C:\Program Files\GameTribe
[31/01/2009|01:09] C:\Program Files\Garena
[18/08/2007|13:32] C:\Program Files\Google
[16/01/2009|11:28] C:\Program Files\gPotato.eu
[19/10/2008|08:48] C:\Program Files\Granado espada
[07/07/2008|23:13] C:\Program Files\HD Tune
[12/03/2008|09:48] C:\Program Files\id Software
[08/07/2008|19:42] C:\Program Files\Image-Line
[26/01/2009|13:44] C:\Program Files\InstallShield Installation Information
[24/12/2008|19:53] C:\Program Files\Internet Explorer
[03/08/2007|06:48] C:\Program Files\InterVideo
[07/10/2008|14:09] C:\Program Files\iPod
[07/10/2008|14:09] C:\Program Files\iTunes
[19/03/2008|09:57] C:\Program Files\Java
[23/10/2008|18:27] C:\Program Files\Lexmark X1100 Series
[18/10/2008|13:16] C:\Program Files\LimeWire
[21/03/2008|11:38] C:\Program Files\Logitech
[06/09/2008|13:16] C:\Program Files\Messenger
[01/09/2008|21:02] C:\Program Files\Messenger Plus! Live
[18/06/2008|19:55] C:\Program Files\Micro Application
[17/12/2008|13:11] C:\Program Files\Microsoft
[07/03/2008|02:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/08/2007|14:18] C:\Program Files\microsoft frontpage
[17/12/2008|13:15] C:\Program Files\Microsoft Silverlight
[17/12/2008|13:13] C:\Program Files\Microsoft SQL Server Compact Edition
[17/12/2008|13:14] C:\Program Files\Microsoft Sync Framework
[01/09/2007|23:58] C:\Program Files\mIRC
[06/09/2008|13:12] C:\Program Files\Movie Maker
[31/01/2009|12:03] C:\Program Files\Mozilla Firefox
[18/08/2007|19:39] C:\Program Files\MSN
[02/08/2007|14:13] C:\Program Files\MSN Gaming Zone
[09/12/2007|10:22] C:\Program Files\MSXML 4.0
[10/12/2007|10:53] C:\Program Files\MSXML 6.0
[06/09/2008|13:09] C:\Program Files\NetMeeting
[30/09/2008|14:11] C:\Program Files\Norton Internet Security
[02/08/2008|08:24] C:\Program Files\Nosibay
[02/08/2007|14:13] C:\Program Files\Online Services
[17/07/2008|18:23] C:\Program Files\OpenAL
[23/10/2008|18:53] C:\Program Files\OpenOffice.org 3
[06/09/2008|13:09] C:\Program Files\Outlook Express
[07/07/2008|22:00] C:\Program Files\Outsim
[20/08/2008|19:16] C:\Program Files\Perfect World Entertainment
[07/10/2008|14:06] C:\Program Files\QuickTime
[21/03/2008|11:37] C:\Program Files\Real
[24/05/2008|15:04] C:\Program Files\RegCleaner
[06/08/2008|23:17] C:\Program Files\Safari
[08/12/2007|13:41] C:\Program Files\Samsung
[02/08/2007|14:15] C:\Program Files\Services en ligne
[11/07/2008|13:41] C:\Program Files\Skype
[17/12/2008|22:39] C:\Program Files\Spybot - Search & Destroy
[19/01/2009|16:40] C:\Program Files\Steam
[18/12/2007|11:30] C:\Program Files\SuperCopier
[23/08/2007|20:34] C:\Program Files\SuperCopier2
[26/01/2009|13:42] C:\Program Files\Sword of The New World
[23/06/2008|08:27] C:\Program Files\Symantec
[26/08/2007|14:09] C:\Program Files\Teamspeak2_RC2
[23/12/2008|07:04] C:\Program Files\THQ
[02/08/2007|14:21] C:\Program Files\Uninstall Information
[24/11/2007|00:08] C:\Program Files\Veoh Networks
[01/10/2007|08:32] C:\Program Files\VideoLAN
[08/07/2008|19:41] C:\Program Files\VstPlugins
[17/01/2009|13:33] C:\Program Files\Wakfu
[30/01/2009|22:06] C:\Program Files\Warcraft III
[26/09/2007|21:45] C:\Program Files\Webteh
[17/12/2008|13:14] C:\Program Files\Windows Live
[17/12/2008|13:10] C:\Program Files\Windows Live SkyDrive
[21/03/2008|11:37] C:\Program Files\Windows Media Components
[07/07/2008|23:13] C:\Program Files\Windows Media Connect 2
[06/09/2008|13:09] C:\Program Files\Windows Media Player
[06/09/2008|13:09] C:\Program Files\Windows NT
[02/08/2007|14:15] C:\Program Files\WindowsUpdate
[03/11/2007|09:56] C:\Program Files\WinRAR
[02/08/2007|14:18] C:\Program Files\xerox
[15/01/2009|23:46] C:\Program Files\Xfire

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[18/11/2008|08:23] C:\Program Files\Fichiers communs\Adobe
[03/08/2007|06:51] C:\Program Files\Fichiers communs\Ahead
[25/10/2008|22:00] C:\Program Files\Fichiers communs\Apple
[27/09/2008|21:42] C:\Program Files\Fichiers communs\DirectX
[21/03/2008|11:38] C:\Program Files\Fichiers communs\FotoWire
[03/05/2008|13:37] C:\Program Files\Fichiers communs\InstallShield
[02/08/2007|14:18] C:\Program Files\Fichiers communs\Java
[21/03/2008|11:41] C:\Program Files\Fichiers communs\Logitech
[09/12/2007|17:55] C:\Program Files\Fichiers communs\Macrovision Shared
[17/12/2008|13:10] C:\Program Files\Fichiers communs\Microsoft Shared
[02/08/2007|14:14] C:\Program Files\Fichiers communs\MSSoap
[03/08/2007|06:53] C:\Program Files\Fichiers communs\Nero
[02/08/2007|16:01] C:\Program Files\Fichiers communs\ODBC
[14/10/2007|22:17] C:\Program Files\Fichiers communs\PocketSoft
[05/10/2008|22:18] C:\Program Files\Fichiers communs\Real
[02/08/2007|14:14] C:\Program Files\Fichiers communs\Services
[11/07/2008|13:41] C:\Program Files\Fichiers communs\Skype
[18/08/2007|13:14] C:\Program Files\Fichiers communs\Softwin
[02/08/2007|16:01] C:\Program Files\Fichiers communs\SpeechEngines
[18/09/2008|18:43] C:\Program Files\Fichiers communs\SWF Studio
[31/01/2009|00:13] C:\Program Files\Fichiers communs\Symantec Shared
[06/09/2008|13:09] C:\Program Files\Fichiers communs\System
[17/12/2008|12:49] C:\Program Files\Fichiers communs\Windows Live
[05/03/2008|15:06] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[05/10/2008|22:18] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 42 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
C:\DOCUME~1\mss\APPLIC~1\cityeg~1
C:\Program Files\cityeg~1
C:\Program Files\Circle Developement
C:\WINDOWS\Tasks\AF40D85591874B31.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-31 12:25:15
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 74

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:189][D:17]-> C:\DOCUME~1\Rudy\LOCALS~1\Temp
[F:13][D:0]-> C:\DOCUME~1\Rudy\Cookies
[F:5051][D:49]-> C:\DOCUME~1\Rudy\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 31/01/2009|12:27 - Option : [1]

--------------------\\ Fin du rapport a 12:27:07
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 14
Utilisateur anonyme
 
Suppression + Hosts

double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option "Suppression + Hosts"
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

ensuite :

Télécharges http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe ( de Cyrildu17 / C_XX ) sur ton bureau :

/!\ Déconnectes toi et fermes toutes applications en cours

? Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
? Double clique sur l'icône Ad-removersituée sur ton bureau
? Au menu principal choisi l'option "Recherche"
? Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall)

ensuite :(si tu tournes avec Antivir)(sinon explique)

enleves les reste de norton :

ftp://ftp.symantec.com/public/francais/removal_tools/Norton_Removal_Tool.exe

ensuite :

enleves les restes de BitDefender :

suis ce tuto

http://www.bitdefender.fr/KB333-fr--Desinstaller-BitDefender%C2%AD.html
0
Réponse 6 / 14
ruday
 
que veut tu dire par déconnecte toi?
0
Réponse 7 / 14
ruday
 
voila le rapport

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Rudy ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
Firewall : Norton Internet Security 2007 (Activated)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:135 Go)
I:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 31/01/2009|16:02 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\WINDOWS\Tasks\AF40D85591874B31.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
Supprime! - C:\DOCUME~1\mss\APPLIC~1\cityeg~1
Supprime! - C:\Program Files\cityeg~1
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[07/10/2008|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[18/11/2008|08:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[08/11/2007|09:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[25/12/2007|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/01/2009|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[17/09/2007|23:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
[15/01/2008|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[16/09/2008|00:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Codemasters
[21/08/2007|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/12/2007|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[23/05/2008|11:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Funcom
[21/11/2008|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[30/01/2009|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/05/2008|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[02/09/2007|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/12/2008|13:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[25/10/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[18/08/2007|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[02/04/2008|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[23/09/2007|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[01/11/2008|15:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[31/01/2009|02:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[27/08/2007|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/03/2008|15:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[26/12/2007|18:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[02/08/2007|14:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/08/2007|14:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[01/02/2008|16:44] C:\DOCUME~1\Johann\APPLIC~1\Adobe
[19/01/2009|18:09] C:\DOCUME~1\Johann\APPLIC~1\Apple Computer
[18/08/2007|18:38] C:\DOCUME~1\Johann\APPLIC~1\Identities
[03/04/2008|22:16] C:\DOCUME~1\Johann\APPLIC~1\ItsLabel
[18/08/2007|18:41] C:\DOCUME~1\Johann\APPLIC~1\Macromedia
[19/12/2008|12:28] C:\DOCUME~1\Johann\APPLIC~1\Microsoft
[08/01/2009|12:11] C:\DOCUME~1\Johann\APPLIC~1\Mozilla
[08/01/2009|16:21] C:\DOCUME~1\Johann\APPLIC~1\OpenOffice.org
[21/10/2008|21:03] C:\DOCUME~1\Johann\APPLIC~1\Real
[08/12/2007|14:02] C:\DOCUME~1\Johann\APPLIC~1\Samsung
[02/08/2007|14:18] C:\DOCUME~1\Johann\APPLIC~1\Sun
[18/08/2007|18:39] C:\DOCUME~1\Johann\APPLIC~1\Talkback

[01/01/2008|02:47] C:\DOCUME~1\JOL~1\APPLIC~1\Adobe
[23/01/2008|04:04] C:\DOCUME~1\JOL~1\APPLIC~1\Apple Computer
[25/04/2008|08:59] C:\DOCUME~1\JOL~1\APPLIC~1\Help
[17/09/2007|23:18] C:\DOCUME~1\JOL~1\APPLIC~1\Identities
[17/09/2008|13:35] C:\DOCUME~1\JOL~1\APPLIC~1\InterVideo
[04/04/2008|01:48] C:\DOCUME~1\JOL~1\APPLIC~1\ItsLabel
[17/09/2007|23:18] C:\DOCUME~1\JOL~1\APPLIC~1\Macromedia
[01/01/2009|21:17] C:\DOCUME~1\JOL~1\APPLIC~1\Microsoft
[02/12/2008|00:54] C:\DOCUME~1\JOL~1\APPLIC~1\Mozilla
[10/10/2008|01:01] C:\DOCUME~1\JOL~1\APPLIC~1\Real
[02/08/2007|14:18] C:\DOCUME~1\JOL~1\APPLIC~1\Sun
[18/09/2007|00:24] C:\DOCUME~1\JOL~1\APPLIC~1\Talkback

[27/08/2007|22:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[24/12/2008|20:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire

[14/10/2008|15:37] C:\DOCUME~1\mss\APPLIC~1\.#
[01/01/2008|13:19] C:\DOCUME~1\mss\APPLIC~1\Adobe
[25/03/2008|15:45] C:\DOCUME~1\mss\APPLIC~1\Apple Computer
[21/03/2008|11:38] C:\DOCUME~1\mss\APPLIC~1\FotoWire
[15/01/2008|18:48] C:\DOCUME~1\mss\APPLIC~1\Help
[02/08/2007|14:21] C:\DOCUME~1\mss\APPLIC~1\Identities
[03/08/2007|06:55] C:\DOCUME~1\mss\APPLIC~1\InterVideo
[02/04/2008|19:15] C:\DOCUME~1\mss\APPLIC~1\ItsLabel
[24/07/2008|01:57] C:\DOCUME~1\mss\APPLIC~1\LimeWire
[20/08/2007|17:17] C:\DOCUME~1\mss\APPLIC~1\Macromedia
[17/12/2008|14:47] C:\DOCUME~1\mss\APPLIC~1\Microsoft
[25/11/2008|23:20] C:\DOCUME~1\mss\APPLIC~1\Mozilla
[02/08/2008|08:24] C:\DOCUME~1\mss\APPLIC~1\Nosibay
[14/01/2009|12:06] C:\DOCUME~1\mss\APPLIC~1\OpenOffice.org
[17/01/2009|04:22] C:\DOCUME~1\mss\APPLIC~1\Real
[14/06/2008|20:20] C:\DOCUME~1\mss\APPLIC~1\Samsung
[15/11/2007|22:34] C:\DOCUME~1\mss\APPLIC~1\Skype
[02/08/2007|14:18] C:\DOCUME~1\mss\APPLIC~1\Sun
[20/08/2007|17:15] C:\DOCUME~1\mss\APPLIC~1\Talkback
[16/06/2008|23:43] C:\DOCUME~1\mss\APPLIC~1\TaoUSign
[03/11/2008|11:50] C:\DOCUME~1\mss\APPLIC~1\teamspeak2
[01/10/2007|08:57] C:\DOCUME~1\mss\APPLIC~1\vlc
[18/01/2009|02:18] C:\DOCUME~1\mss\APPLIC~1\Xfire

[02/12/2007|15:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[24/12/2008|20:44] C:\DOCUME~1\NETWOR~1\APPLIC~1\Xfire

[06/01/2008|18:52] C:\DOCUME~1\Rudy\APPLIC~1\Adobe
[25/12/2007|12:25] C:\DOCUME~1\Rudy\APPLIC~1\Apple Computer
[04/09/2008|06:25] C:\DOCUME~1\Rudy\APPLIC~1\DNA
[02/04/2008|14:51] C:\DOCUME~1\Rudy\APPLIC~1\EoRezo
[20/08/2008|18:11] C:\DOCUME~1\Rudy\APPLIC~1\GetRightToGo
[03/11/2007|09:56] C:\DOCUME~1\Rudy\APPLIC~1\Help
[18/08/2007|13:07] C:\DOCUME~1\Rudy\APPLIC~1\Identities
[25/10/2008|22:04] C:\DOCUME~1\Rudy\APPLIC~1\IGN_DLM
[25/10/2008|19:12] C:\DOCUME~1\Rudy\APPLIC~1\InstallShield
[21/08/2007|16:11] C:\DOCUME~1\Rudy\APPLIC~1\InterVideo
[02/04/2008|14:47] C:\DOCUME~1\Rudy\APPLIC~1\ItsLabel
[11/01/2009|01:26] C:\DOCUME~1\Rudy\APPLIC~1\LimeWire
[18/08/2007|13:37] C:\DOCUME~1\Rudy\APPLIC~1\Macromedia
[20/12/2008|01:00] C:\DOCUME~1\Rudy\APPLIC~1\Microsoft
[08/12/2007|23:46] C:\DOCUME~1\Rudy\APPLIC~1\Momindum
[21/11/2008|15:47] C:\DOCUME~1\Rudy\APPLIC~1\Mozilla
[23/10/2008|22:42] C:\DOCUME~1\Rudy\APPLIC~1\OpenOffice.org
[17/10/2008|12:06] C:\DOCUME~1\Rudy\APPLIC~1\Real
[08/12/2007|14:01] C:\DOCUME~1\Rudy\APPLIC~1\Samsung
[14/11/2008|00:16] C:\DOCUME~1\Rudy\APPLIC~1\Skype
[14/11/2008|00:09] C:\DOCUME~1\Rudy\APPLIC~1\skypePM
[02/08/2007|14:18] C:\DOCUME~1\Rudy\APPLIC~1\Sun
[18/08/2007|13:34] C:\DOCUME~1\Rudy\APPLIC~1\Talkback
[15/03/2008|17:48] C:\DOCUME~1\Rudy\APPLIC~1\teamspeak2
[02/10/2007|07:14] C:\DOCUME~1\Rudy\APPLIC~1\vlc
[23/12/2008|17:18] C:\DOCUME~1\Rudy\APPLIC~1\Xfire

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[26/01/2009 20:00][--a------] C:\WINDOWS\tasks\Norton Internet Security - Analyse systŠme complŠte - mss.job
[31/01/2009 01:00][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[15/01/2008|18:53] C:\Program Files\ABBYY FineReader 5.0 Sprint
[15/01/2008|18:52] C:\Program Files\ABBYY FineReader 6.0
[18/08/2007|20:12] C:\Program Files\Acclaim
[18/11/2008|08:23] C:\Program Files\Adobe
[03/08/2007|06:52] C:\Program Files\Ahead
[25/09/2007|22:35] C:\Program Files\All2Txt
[07/07/2008|22:01] C:\Program Files\ASIO4ALL v2
[30/01/2009|23:07] C:\Program Files\Avira
[31/01/2009|15:35] C:\Program Files\BitSpirit
[07/10/2008|14:07] C:\Program Files\Bonjour
[12/12/2008|12:36] C:\Program Files\Bytescout XLS Viewer
[25/09/2007|22:44] C:\Program Files\CDex_150
[29/09/2008|08:58] C:\Program Files\Common Files
[02/08/2007|14:13] C:\Program Files\ComPlus Applications
[14/10/2008|12:43] C:\Program Files\Curse
[21/03/2008|11:42] C:\Program Files\directx
[07/07/2008|23:13] C:\Program Files\DivX
[03/09/2008|19:38] C:\Program Files\DNA
[21/08/2007|16:07] C:\Program Files\DVD Shrink
[02/04/2008|14:51] C:\Program Files\EoRezo
[07/07/2008|23:13] C:\Program Files\FaxTools
[17/12/2008|12:49] C:\Program Files\Fichiers communs
[16/01/2009|00:14] C:\Program Files\FlashGet
[05/09/2008|22:53] C:\Program Files\Full Tilt Poker
[29/09/2008|08:54] C:\Program Files\GameTribe
[31/01/2009|12:33] C:\Program Files\Garena
[18/08/2007|13:32] C:\Program Files\Google
[16/01/2009|11:28] C:\Program Files\gPotato.eu
[19/10/2008|08:48] C:\Program Files\Granado espada
[07/07/2008|23:13] C:\Program Files\HD Tune
[12/03/2008|09:48] C:\Program Files\id Software
[08/07/2008|19:42] C:\Program Files\Image-Line
[26/01/2009|13:44] C:\Program Files\InstallShield Installation Information
[24/12/2008|19:53] C:\Program Files\Internet Explorer
[03/08/2007|06:48] C:\Program Files\InterVideo
[07/10/2008|14:09] C:\Program Files\iPod
[07/10/2008|14:09] C:\Program Files\iTunes
[19/03/2008|09:57] C:\Program Files\Java
[23/10/2008|18:27] C:\Program Files\Lexmark X1100 Series
[18/10/2008|13:16] C:\Program Files\LimeWire
[21/03/2008|11:38] C:\Program Files\Logitech
[06/09/2008|13:16] C:\Program Files\Messenger
[01/09/2008|21:02] C:\Program Files\Messenger Plus! Live
[18/06/2008|19:55] C:\Program Files\Micro Application
[17/12/2008|13:11] C:\Program Files\Microsoft
[07/03/2008|02:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/08/2007|14:18] C:\Program Files\microsoft frontpage
[17/12/2008|13:15] C:\Program Files\Microsoft Silverlight
[17/12/2008|13:13] C:\Program Files\Microsoft SQL Server Compact Edition
[17/12/2008|13:14] C:\Program Files\Microsoft Sync Framework
[01/09/2007|23:58] C:\Program Files\mIRC
[06/09/2008|13:12] C:\Program Files\Movie Maker
[31/01/2009|15:31] C:\Program Files\Mozilla Firefox
[18/08/2007|19:39] C:\Program Files\MSN
[02/08/2007|14:13] C:\Program Files\MSN Gaming Zone
[09/12/2007|10:22] C:\Program Files\MSXML 4.0
[10/12/2007|10:53] C:\Program Files\MSXML 6.0
[06/09/2008|13:09] C:\Program Files\NetMeeting
[30/09/2008|14:11] C:\Program Files\Norton Internet Security
[02/08/2008|08:24] C:\Program Files\Nosibay
[02/08/2007|14:13] C:\Program Files\Online Services
[17/07/2008|18:23] C:\Program Files\OpenAL
[23/10/2008|18:53] C:\Program Files\OpenOffice.org 3
[06/09/2008|13:09] C:\Program Files\Outlook Express
[07/07/2008|22:00] C:\Program Files\Outsim
[20/08/2008|19:16] C:\Program Files\Perfect World Entertainment
[07/10/2008|14:06] C:\Program Files\QuickTime
[21/03/2008|11:37] C:\Program Files\Real
[24/05/2008|15:04] C:\Program Files\RegCleaner
[06/08/2008|23:17] C:\Program Files\Safari
[08/12/2007|13:41] C:\Program Files\Samsung
[02/08/2007|14:15] C:\Program Files\Services en ligne
[11/07/2008|13:41] C:\Program Files\Skype
[17/12/2008|22:39] C:\Program Files\Spybot - Search & Destroy
[19/01/2009|16:40] C:\Program Files\Steam
[18/12/2007|11:30] C:\Program Files\SuperCopier
[23/08/2007|20:34] C:\Program Files\SuperCopier2
[26/01/2009|13:42] C:\Program Files\Sword of The New World
[23/06/2008|08:27] C:\Program Files\Symantec
[26/08/2007|14:09] C:\Program Files\Teamspeak2_RC2
[23/12/2008|07:04] C:\Program Files\THQ
[02/08/2007|14:21] C:\Program Files\Uninstall Information
[24/11/2007|00:08] C:\Program Files\Veoh Networks
[01/10/2007|08:32] C:\Program Files\VideoLAN
[08/07/2008|19:41] C:\Program Files\VstPlugins
[17/01/2009|13:33] C:\Program Files\Wakfu
[31/01/2009|13:18] C:\Program Files\Warcraft III
[26/09/2007|21:45] C:\Program Files\Webteh
[17/12/2008|13:14] C:\Program Files\Windows Live
[17/12/2008|13:10] C:\Program Files\Windows Live SkyDrive
[21/03/2008|11:37] C:\Program Files\Windows Media Components
[07/07/2008|23:13] C:\Program Files\Windows Media Connect 2
[06/09/2008|13:09] C:\Program Files\Windows Media Player
[06/09/2008|13:09] C:\Program Files\Windows NT
[02/08/2007|14:15] C:\Program Files\WindowsUpdate
[03/11/2007|09:56] C:\Program Files\WinRAR
[02/08/2007|14:18] C:\Program Files\xerox
[15/01/2009|23:46] C:\Program Files\Xfire

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[18/11/2008|08:23] C:\Program Files\Fichiers communs\Adobe
[03/08/2007|06:51] C:\Program Files\Fichiers communs\Ahead
[25/10/2008|22:00] C:\Program Files\Fichiers communs\Apple
[27/09/2008|21:42] C:\Program Files\Fichiers communs\DirectX
[21/03/2008|11:38] C:\Program Files\Fichiers communs\FotoWire
[03/05/2008|13:37] C:\Program Files\Fichiers communs\InstallShield
[02/08/2007|14:18] C:\Program Files\Fichiers communs\Java
[21/03/2008|11:41] C:\Program Files\Fichiers communs\Logitech
[09/12/2007|17:55] C:\Program Files\Fichiers communs\Macrovision Shared
[17/12/2008|13:10] C:\Program Files\Fichiers communs\Microsoft Shared
[02/08/2007|14:14] C:\Program Files\Fichiers communs\MSSoap
[03/08/2007|06:53] C:\Program Files\Fichiers communs\Nero
[02/08/2007|16:01] C:\Program Files\Fichiers communs\ODBC
[14/10/2007|22:17] C:\Program Files\Fichiers communs\PocketSoft
[05/10/2008|22:18] C:\Program Files\Fichiers communs\Real
[02/08/2007|14:14] C:\Program Files\Fichiers communs\Services
[11/07/2008|13:41] C:\Program Files\Fichiers communs\Skype
[18/08/2007|13:14] C:\Program Files\Fichiers communs\Softwin
[02/08/2007|16:01] C:\Program Files\Fichiers communs\SpeechEngines
[18/09/2008|18:43] C:\Program Files\Fichiers communs\SWF Studio
[31/01/2009|00:13] C:\Program Files\Fichiers communs\Symantec Shared
[06/09/2008|13:09] C:\Program Files\Fichiers communs\System
[17/12/2008|12:49] C:\Program Files\Fichiers communs\Windows Live
[05/03/2008|15:06] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[05/10/2008|22:18] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 42 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-31 16:03:26
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 74

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:189][D:19]-> C:\DOCUME~1\Rudy\LOCALS~1\Temp
[F:17][D:0]-> C:\DOCUME~1\Rudy\Cookies
[F:5096][D:49]-> C:\DOCUME~1\Rudy\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 31/01/2009|12:27 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 31/01/2009|16:04 - Option : [2]

--------------------\\ Fin du rapport a 16:04:27
0
Réponse 8 / 14
Utilisateur anonyme
 
j'attends la suite :)
0
Réponse 9 / 14
ruday
 
bah justement jsais pas ce que tu ve dire par la... a part fermer toutes les applications
0
Réponse 10 / 14
ruday
 
j'arrive pas a lancer ad remover il me dit "backup" est manquant!
0
Utilisateur anonyme
 
Hello

Supprime ta version actuelle et re-télécharge-le.

++
0
Réponse 11 / 14
Utilisateur anonyme
 
merci C_XX :)
0
Réponse 12 / 14
ruday
 
Voila le rapport de Ad-remover

------- LOGFILE OF AD-REMOVER 1.1.0.1 | ONLY XP/VISTA -------

Updated by C_XX on 30/01/2009 at 15:30

Start at: 23:29:52 | Sam 31/01/2009 | Microsoft® Windows XP™ SP3 (V5.1.2600)
Boot mode: Normal
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: MSS-24B8EE3605B | User: Rudy ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 37

+--------------------| Boonty/Boonty Games Elements Found:

.
.

+--------------------| Eorezo Elements Found:

HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\SOFTWARE\EoRezo
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\EoRezo
HKLM\SOFTWARE\Classes\EoRezoBHO.EoBho
HKLM\SOFTWARE\Classes\EoRezoBHO.EoBho.1
HKLM\SOFTWARE\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKLM\SOFTWARE\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
.
C:\Program Files\EoRezo
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoAdv\tmp
C:\Documents and Settings\Rudy\Application Data\EoRezo
C:\Documents and Settings\Rudy\Application Data\EoRezo\db
C:\Documents and Settings\Rudy\Application Data\EoRezo\eoDesktop
C:\Documents and Settings\Rudy\Application Data\EoRezo\EoWeather
C:\Documents and Settings\Rudy\Application Data\EoRezo\EoWeather\images
C:\Documents and Settings\Rudy\Application Data\EoRezo\EoWeather\images_classic
C:\Documents and Settings\Rudy\Application Data\EoRezo\EoWeather\images_station_meteo

+--------------------| Infected Poker Softwares Elements Found:

.

+--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Found:

.
.

+--------------------| It's TV Elements Found:

HKCU\SOFTWARE\ItsLabel
HKLM\SOFTWARE\ItsLabel
"HKU\S-1-5-21-436374069-1958367476-725345543-1006\Software\ItsLabel"
.
C:\Documents and Settings\Rudy\Application Data\ItsLabel
C:\Documents and Settings\Rudy\Application Data\ItsLabel\ItsTV

+--------------------| Sweetim Elements Found:

.

+--------------------| Added Scan:

---- Mozilla FireFox Version 3.0.5 ----

ProfilePath: cdguc0lo.default
.
Prefs.js: Browser.Search.DefaultEngineName: "Google"
Prefs.js: Browser.Search.DefaultUrl: "https://www.google.com/webhp?lr=&ie=UTF-8&oe=UTF-8&gws_rd=ssl"
Prefs.js: Browser.Startup.HomePage: "http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9"
.
(Prefs.js) FOUND: user_pref("browser.startup.homepage", "http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9");
.
.
.
.

---- Internet Explorer Version 7.0.5730.13 ----

+--[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search bar: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

[~3660 Bytes] - "C:\Ad-Report-Scan-31.01.2009.log"

End at: 23:30:42 | 31/01/2009
.
+--------------------| E.O.F - 78 Lines
.
0
Réponse 13 / 14
Utilisateur anonyme
 
/!\ Déconnecte-toi et ferme toutes applications en cours /!\

Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B.

Choisis A

Puis choisis S, le programme va travailler.

Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report.log)

/!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...)

0
Réponse 14 / 14
ruday
 
voila le rapport

------- LOGFILE OF AD-REMOVER 1.1.0.1 | ONLY XP/VISTA -------

Updated by C_XX on 30/01/2009 at 15:30

*** LIMITED TO ***

Boonty/BoontyGames
Eorezo
Infected Poker Softwares
FunWebProduct/MyWay/MyWebSearch
It's TV
Sweetim

******************

Start at: 11:11:03 | Dim 01/02/2009 | Microsoft® Windows XP™ SP3 (V5.1.2600)
Boot mode: Normal
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: MSS-24B8EE3605B | User: Rudy ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 35

(!) ---- IE start pages reset

+--------------------| Boonty/Boonty Games Elements Deleted :

.
.

+--------------------| Eorezo Elements Deleted :

.
C:\Program Files\EoRezo
C:\Documents and Settings\Rudy\Application Data\EoRezo

+--------------------| Infected Poker Softwares Elements Deleted :

.

+--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

.
.

+--------------------| It's TV Elements Deleted :

.
C:\Documents and Settings\Rudy\Application Data\ItsLabel

+--------------------| Sweetim Elements Deleted :

.

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

+--------------------| Added Scan :

---- Mozilla FireFox Version 3.0.5 ----

ProfilePath: cdguc0lo.default
.
Prefs.js: Browser.Search.DefaultEngineName: "Google"
Prefs.js: Browser.Search.DefaultUrl: "https://www.google.com/webhp?lr=&ie=UTF-8&oe=UTF-8&gws_rd=ssl"
Prefs.js: Browser.Startup.HomePage: "http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9"
.
(Prefs.js) REMOVED: user_pref("browser.startup.homepage", "http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9");
.
.
.
.

---- Internet Explorer Version 7.0.5730.13 ----

+--[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

[~2915 Bytes] - "C:\Ad-Report-Clean-01.02.2009.log"
[~3792 Bytes] - "C:\Ad-Report-Scan-31.01.2009.log"

End at: 11:15:23 | 01/02/2009
.
+--------------------| E.O.F - 69 Lines
.
0

Discussions similaires

Chemin Logo du site de la Cité de l'espace
Keiios -
blux -

11 réponses