CID problème Pop Up fenetre

Question

Bonjour,

3 h que je cherche une solution, je suis très débutante j ai desinstallé puis reinstaller msn plus sans le sponsort je telecharge plein d anti virus spyware etc pour résoudre ce problème desagreable, je comprends pas du tout les manips a faire avec les "rapports" à poster.. je suis poméee et ca m'enerve ces fenetres de sites ou de pubs qui pop comme ca dès que je surf

gil le fantom · Answer

Bonjour

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Va dans démarrer puis panneau de configuration 
- Double Clique sur l'icône "Comptes d'utilisateurs" 
- Clique ensuite sur désactiver et valide.

http://www.laboratoire-microsoft.org/tips-23933-desactiver-uac-vista.html


Tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 

* Double-clique dessus pour lancer l'installation 
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau 
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche) 
* Patiente jusqu'à la fin du scan 
* Poste le rapport généré (C:\lopR.txt)

Cora · Answer

Voici mon rapport ( je suis toute fière d'avoir été jusqu'à cette étape lol )



--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU     T7500  @ 2.20GHz )
   BIOS : Phoenix TrustedCore(tm) NB Service Pack 3B Version 0.00  06AB
   USER : cora ( Administrator )
   BOOT : Normal boot
   Antivirus : Steganos Internet Security 8.0 (Activated)
   Firewall  : Steganos Firewall 8.0 (Activated)
   C:\ (Local Disk) - NTFS - Total:88 Go (Free:27 Go)
   D:\ (Local Disk) - NTFS - Total:87 Go (Free:73 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 09/02/2009|16:05 )

   [ UAC => 0 ]
 
   --------------------\  Listing des dossiers dans Local

   [04/03/2008|09:55] C:\Users\cora\AppData\Local\Application Data 
   [23/12/2008|14:52] C:\Users\cora\AppData\Local\CurseClient
   [03/06/2008|19:04] C:\Users\cora\AppData\Local\d3d9caps.dat
   [02/02/2009|23:26] C:\Users\cora\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [16/09/2008|20:17] C:\Users\cora\AppData\Local\Downloaded Installations
   [06/03/2008|21:58] C:\Users\cora\AppData\Local\eMule
   [29/05/2008|17:24] C:\Users\cora\AppData\Local\Funcom
   [07/10/2008|19:15] C:\Users\cora\AppData\Local\GDIPFONTCACHEV1.DAT
   [08/02/2009|14:52] C:\Users\cora\AppData\Local\Google
   [04/03/2008|09:55] C:\Users\cora\AppData\Local\Historique 
   [25/12/2008|20:57] C:\Users\cora\AppData\Local\HP
   [09/02/2009|15:58] C:\Users\cora\AppData\Local\IconCache.db
   [15/01/2009|22:11] C:\Users\cora\AppData\Local\Microsoft
   [04/03/2008|15:44] C:\Users\cora\AppData\Local\Microsoft Games
   [03/01/2009|17:40] C:\Users\cora\AppData\Local\Microsoft Help
   [04/03/2008|23:09] C:\Users\cora\AppData\Local\Mozilla
   [30/04/2008|12:02] C:\Users\cora\AppData\Local\Oblivion
   [09/02/2009|16:04] C:\Users\cora\AppData\Local\Temp
   [04/03/2008|09:55] C:\Users\cora\AppData\Local\Temporary Internet Files 
   [04/03/2008|15:25] C:\Users\cora\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [09/02/2009 15:59][--ah-----] C:\Windows	asks\SupBackGroundTask.job
   [09/02/2009 13:53][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{D66734E0-7AC0-47E6-A99A-2446BC023AE0}.job
   [06/02/2009 16:37][--a------] C:\Windows	asks\Norton Security Scan.job
   [09/02/2009 15:59][--ah-----] C:\Windows	asks\SA.DAT
   [09/02/2009 15:58][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [07/09/2007|21:27] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
   [20/11/2008|14:43] C:\ProgramData\Adobe
   [02/11/2006|14:02] C:\ProgramData\Application Data 
   [22/08/2008|14:17] C:\ProgramData\avg8
   [04/03/2008|23:29] C:\ProgramData\Azureus
   [04/03/2008|09:51] C:\ProgramData\Bureau 
   [02/11/2006|14:02] C:\ProgramData\Desktop 
   [02/11/2006|14:02] C:\ProgramData\Documents 
   [16/09/2008|20:17] C:\ProgramData\Electronic Arts
   [06/03/2008|22:14] C:\ProgramData\eMule
   [01/02/2009|15:10] C:\ProgramData\Encownsowns.8es85qi
   [01/02/2009|15:10] C:\ProgramData\Encownsowns.ghv9g
   [01/02/2009|19:16] C:\ProgramData\Encownsowns.x6vla46
   [04/03/2008|09:51] C:\ProgramData\Favoris 
   [02/11/2006|14:02] C:\ProgramData\Favorites 
   [14/09/2008|17:27] C:\ProgramData\FLEXnet
   [29/05/2008|16:18] C:\ProgramData\Funcom
   [08/02/2009|14:52] C:\ProgramData\Google
   [09/02/2009|10:35] C:\ProgramData\Google Updater
   [08/03/2008|03:45] C:\ProgramData\Hewlett-Packard
   [11/10/2008|11:48] C:\ProgramData\HP
   [10/09/2008|19:40] C:\ProgramData\HP Product Assistant
   [31/05/2008|10:23] C:\ProgramData\hpzinstall.log
   [01/02/2009|15:10] C:\ProgramData\IDOL UPLOAD LOCKS GRID
   [04/03/2008|09:56] C:\ProgramData\IMSSyncData
   [08/10/2008|22:05] C:\ProgramData\Intel
   [01/02/2009|15:10] C:\ProgramData\Jugs Soap Peak.nralc4k
   [02/04/2008|23:21] C:\ProgramData\Kodak
   [20/01/2009|20:05] C:\ProgramData\LauncherAccess.dt
   [08/10/2008|22:22] C:\ProgramData\LogiShrd
   [08/10/2008|22:01] C:\ProgramData\ma-config.com
   [22/08/2008|14:12] C:\ProgramData\McAfee
   [04/03/2008|09:51] C:\ProgramData\Menu D‚marrer 
   [09/02/2009|15:59] C:\ProgramData\Messenger Plus!
   [01/02/2009|14:14] C:\ProgramData\Microsoft
   [15/01/2009|03:03] C:\ProgramData\Microsoft Help
   [04/03/2008|09:51] C:\ProgramData\ModŠles 
   [04/03/2008|18:20] C:\ProgramData\Mozilla
   [08/02/2009|14:02] C:\ProgramData
tuser.pol
   [04/03/2008|18:16] C:\ProgramData\OrbNetworks
   [08/10/2008|22:07] C:\ProgramData\Roaming
   [01/02/2009|15:10] C:\ProgramData\Size Third Sixth
   [02/11/2006|14:02] C:\ProgramData\Start Menu 
   [07/03/2008|15:11] C:\ProgramData\Symantec
   [04/02/2009|21:50] C:\ProgramData\TEMP
   [02/11/2006|14:02] C:\ProgramData\Templates 
   [08/03/2008|03:48] C:\ProgramData\WEBREG
   [17/12/2008|17:18] C:\ProgramData\WLInstaller
   [08/02/2009|14:00] C:\ProgramData\Yahoo! Companion

   --------------------\  Listing des dossiers dans C:\Program Files

   [07/09/2007|21:27] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [20/11/2008|14:43] C:\Program Files\Adobe
   [11/10/2008|11:23] C:\Program Files\Atmosphere Lite
   [06/03/2008|21:05] C:\Program Files\Azureus
   [08/02/2009|13:26] C:\Program Files\CCleaner
   [08/10/2008|22:05] C:\Program Files\Cisco
   [17/12/2008|08:22] C:\Program Files\Common Files
   [11/10/2008|00:47] C:\Program Files\Curse
   [07/09/2007|20:40] C:\Program Files\CyberLink
   [01/05/2008|12:15] C:\Program Files\DAEMON Tools Lite
   [03/01/2009|20:06] C:\Program Files\DivX
   [07/09/2008|16:02] C:\Program Files\Dream Aquarium
   [06/03/2008|21:58] C:\Program Files\eMule
   [04/03/2008|19:55] C:\Program Files\EoRezo
   [04/03/2008|09:51] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [03/09/2008|18:35] C:\Program Files\Gabest
   [08/02/2009|14:52] C:\Program Files\Google
   [08/03/2008|02:06] C:\Program Files\Hewlett-Packard
   [08/04/2008|15:12] C:\Program Files\HP
   [02/12/2008|23:37] C:\Program Files\InstallShield Installation Information
   [08/10/2008|22:05] C:\Program Files\Intel
   [03/06/2008|18:23] C:\Program Files\Internet Explorer
   [08/03/2008|21:22] C:\Program Files\IZArc
   [01/02/2009|19:02] C:\Program Files\Java
   [08/10/2008|22:01] C:\Program Files\ma-config.com
   [08/10/2008|22:09] C:\Program Files\Marvell
   [08/02/2009|15:10] C:\Program Files\Messenger Plus! Live
   [17/12/2008|08:37] C:\Program Files\Microsoft
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [07/09/2007|21:30] C:\Program Files\Microsoft Office
   [17/12/2008|08:37] C:\Program Files\Microsoft Office Outlook Connector
   [23/10/2008|07:13] C:\Program Files\Microsoft Silverlight
   [07/09/2007|21:31] C:\Program Files\Microsoft Small Business
   [10/07/2008|11:34] C:\Program Files\Microsoft SQL Server
   [01/02/2009|14:13] C:\Program Files\Microsoft SQL Server Compact Edition
   [01/02/2009|14:15] C:\Program Files\Microsoft Sync Framework
   [07/09/2007|21:24] C:\Program Files\Microsoft Visual Studio
   [01/05/2008|12:32] C:\Program Files\Microsoft Visual Studio 8
   [07/09/2007|21:25] C:\Program Files\Microsoft Works
   [07/09/2007|21:28] C:\Program Files\Microsoft.NET
   [03/06/2008|18:23] C:\Program Files\Movie Maker
   [07/11/2008|09:57] C:\Program Files\Mozilla Firefox
   [01/05/2008|12:36] C:\Program Files\MSBuild
   [11/04/2008|11:45] C:\Program Files\MSSOAP
   [08/02/2009|13:35] C:\Program Files\Navilog1
   [08/02/2009|14:56] C:\Program Files\Norton Security Scan
   [07/09/2007|20:33] C:\Program Files\Realtek
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [02/12/2008|23:12] C:\Program Files\Samsung
   [09/02/2009|14:04] C:\Program Files\SPAMfighter
   [10/10/2008|06:23] C:\Program Files\Spyware Doctor
   [22/08/2008|14:17] C:\Program Files\Steganos
   [31/07/2008|12:11] C:\Program Files\Sun
   [07/09/2007|20:39] C:\Program Files\Synaptics
   [09/06/2008|13:17] C:\Program Files\SystemRequirementsLab
   [13/06/2008|19:09] C:\Program Files\Teamspeak2_RC2
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [21/12/2008|19:08] C:\Program Files\Utherverse Digital Inc
   [04/03/2008|23:46] C:\Program Files\uTorrent
   [04/03/2008|18:14] C:\Program Files\VideoLAN
   [26/05/2008|07:10] C:\Program Files\Vimicro Corporation
   [07/09/2007|20:36] C:\Program Files\WIDCOMM
   [04/03/2008|18:16] C:\Program Files\Winamp
   [04/03/2008|18:16] C:\Program Files\Winamp Remote
   [03/06/2008|18:23] C:\Program Files\Windows Calendar
   [03/06/2008|18:23] C:\Program Files\Windows Collaboration
   [03/06/2008|18:23] C:\Program Files\Windows Defender
   [03/06/2008|18:23] C:\Program Files\Windows Journal
   [01/02/2009|14:16] C:\Program Files\Windows Live
   [17/12/2008|08:32] C:\Program Files\Windows Live SkyDrive
   [15/01/2009|03:03] C:\Program Files\Windows Mail
   [03/06/2008|18:23] C:\Program Files\Windows Media Player
   [04/03/2008|09:51] C:\Program Files\Windows NT
   [03/06/2008|18:23] C:\Program Files\Windows Photo Gallery
   [03/06/2008|18:23] C:\Program Files\Windows Sidebar
   [03/09/2008|18:28] C:\Program Files\WinRAR

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [20/11/2008|14:43] C:\Program Files\Common Files\Adobe
   [04/03/2008|18:22] C:\Program Files\Common Files\Ankiro
   [04/03/2008|18:21] C:\Program Files\Common Files\Application
   [07/09/2007|21:24] C:\Program Files\Common Files\DESIGNER
   [08/03/2008|02:05] C:\Program Files\Common Files\Hewlett-Packard
   [08/03/2008|02:07] C:\Program Files\Common Files\HP
   [07/09/2007|20:42] C:\Program Files\Common Files\InstallShield
   [08/10/2008|22:05] C:\Program Files\Common Files\Intel
   [06/03/2008|21:16] C:\Program Files\Common Files\Java
   [11/10/2008|11:35] C:\Program Files\Common Files\Logishrd
   [17/12/2008|08:32] C:\Program Files\Common Files\microsoft shared
   [07/09/2007|20:43] C:\Program Files\Common Files\MSSoap
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [08/02/2009|14:59] C:\Program Files\Common Files\Symantec Shared
   [17/12/2008|08:37] C:\Program Files\Common Files\System
   [17/12/2008|08:22] C:\Program Files\Common Files\Windows Live
   [04/03/2008|11:20] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 89 Processes )

   iexplore.exe ~ [PID:4556]
   iexplore.exe ~ [PID:4912]
   iexplore.exe ~ [PID:5128]
   IEXPLORE.EXE ~ [PID:1308]

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\Encownsowns.ghv9g
   C:\ProgramData\Encownsowns.8es85qi
   C:\ProgramData\Encownsowns.x6vla46
   C:\ProgramData\Jugs Soap Peak.nralc4k
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "eachheart"="\"C:\ProgramData\Encownsowns.x6vla46\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-09 16:05:22
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 338
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:25][D:8]-> C:\Users\cora\AppData\Local\Temp
   [F:211][D:1]-> C:\Users\cora\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:159][D:6]-> C:\Users\cora\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:8][D:7]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 09/02/2009|16:07 - Option : [1]

   --------------------\  Fin du rapport a 16:07:17
   [ UAC => 1 ]

gil le fantom · Answer

Relance Lop S&D 


* Choisis cette fois ci l'Option 2 (Suppression) 
* Ne ferme pas la fenêtre lors de la suppression ! 
* Poste le rapport généré (C:\lopR.txt) 


(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

Cora · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU     T7500  @ 2.20GHz )
   BIOS : Phoenix TrustedCore(tm) NB Service Pack 3B Version 0.00  06AB
   USER : cora ( Administrator )
   BOOT : Normal boot
   Antivirus : Steganos Internet Security 8.0 (Activated)
   Firewall  : Steganos Firewall 8.0 (Activated)
   C:\ (Local Disk) - NTFS - Total:88 Go (Free:26 Go)
   D:\ (Local Disk) - NTFS - Total:87 Go (Free:73 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 09/02/2009|18:34 )

   [ UAC => 1 ]


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\ProgramData\Encownsowns.ghv9g
   Supprime! - C:\ProgramData\Encownsowns.8es85qi
   Supprime! - C:\ProgramData\Encownsowns.x6vla46
   Supprime! - C:\ProgramData\Jugs Soap Peak.nralc4k
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans Local

   [04/03/2008|09:55] C:\Users\cora\AppData\Local\Application Data 
   [23/12/2008|14:52] C:\Users\cora\AppData\Local\CurseClient
   [03/06/2008|19:04] C:\Users\cora\AppData\Local\d3d9caps.dat
   [02/02/2009|23:26] C:\Users\cora\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [16/09/2008|20:17] C:\Users\cora\AppData\Local\Downloaded Installations
   [06/03/2008|21:58] C:\Users\cora\AppData\Local\eMule
   [29/05/2008|17:24] C:\Users\cora\AppData\Local\Funcom
   [07/10/2008|19:15] C:\Users\cora\AppData\Local\GDIPFONTCACHEV1.DAT
   [08/02/2009|14:52] C:\Users\cora\AppData\Local\Google
   [04/03/2008|09:55] C:\Users\cora\AppData\Local\Historique 
   [25/12/2008|20:57] C:\Users\cora\AppData\Local\HP
   [09/02/2009|15:58] C:\Users\cora\AppData\Local\IconCache.db
   [15/01/2009|22:11] C:\Users\cora\AppData\Local\Microsoft
   [04/03/2008|15:44] C:\Users\cora\AppData\Local\Microsoft Games
   [03/01/2009|17:40] C:\Users\cora\AppData\Local\Microsoft Help
   [04/03/2008|23:09] C:\Users\cora\AppData\Local\Mozilla
   [30/04/2008|12:02] C:\Users\cora\AppData\Local\Oblivion
   [09/02/2009|18:34] C:\Users\cora\AppData\Local\Temp
   [04/03/2008|09:55] C:\Users\cora\AppData\Local\Temporary Internet Files 
   [04/03/2008|15:25] C:\Users\cora\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [09/02/2009 16:10][--ah-----] C:\Windows	asks\SupBackGroundTask.job
   [09/02/2009 13:53][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{D66734E0-7AC0-47E6-A99A-2446BC023AE0}.job
   [06/02/2009 16:37][--a------] C:\Windows	asks\Norton Security Scan.job
   [09/02/2009 15:59][--ah-----] C:\Windows	asks\SA.DAT
   [09/02/2009 15:58][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [07/09/2007|21:27] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
   [20/11/2008|14:43] C:\ProgramData\Adobe
   [02/11/2006|14:02] C:\ProgramData\Application Data 
   [22/08/2008|14:17] C:\ProgramData\avg8
   [04/03/2008|23:29] C:\ProgramData\Azureus
   [04/03/2008|09:51] C:\ProgramData\Bureau 
   [02/11/2006|14:02] C:\ProgramData\Desktop 
   [02/11/2006|14:02] C:\ProgramData\Documents 
   [16/09/2008|20:17] C:\ProgramData\Electronic Arts
   [06/03/2008|22:14] C:\ProgramData\eMule
   [04/03/2008|09:51] C:\ProgramData\Favoris 
   [02/11/2006|14:02] C:\ProgramData\Favorites 
   [14/09/2008|17:27] C:\ProgramData\FLEXnet
   [29/05/2008|16:18] C:\ProgramData\Funcom
   [08/02/2009|14:52] C:\ProgramData\Google
   [09/02/2009|10:35] C:\ProgramData\Google Updater
   [08/03/2008|03:45] C:\ProgramData\Hewlett-Packard
   [11/10/2008|11:48] C:\ProgramData\HP
   [10/09/2008|19:40] C:\ProgramData\HP Product Assistant
   [31/05/2008|10:23] C:\ProgramData\hpzinstall.log
   [01/02/2009|15:10] C:\ProgramData\IDOL UPLOAD LOCKS GRID
   [04/03/2008|09:56] C:\ProgramData\IMSSyncData
   [08/10/2008|22:05] C:\ProgramData\Intel
   [02/04/2008|23:21] C:\ProgramData\Kodak
   [20/01/2009|20:05] C:\ProgramData\LauncherAccess.dt
   [08/10/2008|22:22] C:\ProgramData\LogiShrd
   [08/10/2008|22:01] C:\ProgramData\ma-config.com
   [22/08/2008|14:12] C:\ProgramData\McAfee
   [04/03/2008|09:51] C:\ProgramData\Menu D‚marrer 
   [09/02/2009|15:59] C:\ProgramData\Messenger Plus!
   [01/02/2009|14:14] C:\ProgramData\Microsoft
   [15/01/2009|03:03] C:\ProgramData\Microsoft Help
   [04/03/2008|09:51] C:\ProgramData\ModŠles 
   [04/03/2008|18:20] C:\ProgramData\Mozilla
   [08/02/2009|14:02] C:\ProgramData
tuser.pol
   [04/03/2008|18:16] C:\ProgramData\OrbNetworks
   [08/10/2008|22:07] C:\ProgramData\Roaming
   [01/02/2009|15:10] C:\ProgramData\Size Third Sixth
   [02/11/2006|14:02] C:\ProgramData\Start Menu 
   [07/03/2008|15:11] C:\ProgramData\Symantec
   [04/02/2009|21:50] C:\ProgramData\TEMP
   [02/11/2006|14:02] C:\ProgramData\Templates 
   [08/03/2008|03:48] C:\ProgramData\WEBREG
   [17/12/2008|17:18] C:\ProgramData\WLInstaller
   [08/02/2009|14:00] C:\ProgramData\Yahoo! Companion

   --------------------\  Listing des dossiers dans C:\Program Files

   [07/09/2007|21:27] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [20/11/2008|14:43] C:\Program Files\Adobe
   [11/10/2008|11:23] C:\Program Files\Atmosphere Lite
   [06/03/2008|21:05] C:\Program Files\Azureus
   [08/02/2009|13:26] C:\Program Files\CCleaner
   [08/10/2008|22:05] C:\Program Files\Cisco
   [17/12/2008|08:22] C:\Program Files\Common Files
   [11/10/2008|00:47] C:\Program Files\Curse
   [07/09/2007|20:40] C:\Program Files\CyberLink
   [01/05/2008|12:15] C:\Program Files\DAEMON Tools Lite
   [03/01/2009|20:06] C:\Program Files\DivX
   [07/09/2008|16:02] C:\Program Files\Dream Aquarium
   [06/03/2008|21:58] C:\Program Files\eMule
   [04/03/2008|19:55] C:\Program Files\EoRezo
   [04/03/2008|09:51] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [03/09/2008|18:35] C:\Program Files\Gabest
   [08/02/2009|14:52] C:\Program Files\Google
   [08/03/2008|02:06] C:\Program Files\Hewlett-Packard
   [08/04/2008|15:12] C:\Program Files\HP
   [02/12/2008|23:37] C:\Program Files\InstallShield Installation Information
   [08/10/2008|22:05] C:\Program Files\Intel
   [03/06/2008|18:23] C:\Program Files\Internet Explorer
   [08/03/2008|21:22] C:\Program Files\IZArc
   [01/02/2009|19:02] C:\Program Files\Java
   [08/10/2008|22:01] C:\Program Files\ma-config.com
   [08/10/2008|22:09] C:\Program Files\Marvell
   [08/02/2009|15:10] C:\Program Files\Messenger Plus! Live
   [17/12/2008|08:37] C:\Program Files\Microsoft
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [07/09/2007|21:30] C:\Program Files\Microsoft Office
   [17/12/2008|08:37] C:\Program Files\Microsoft Office Outlook Connector
   [23/10/2008|07:13] C:\Program Files\Microsoft Silverlight
   [07/09/2007|21:31] C:\Program Files\Microsoft Small Business
   [10/07/2008|11:34] C:\Program Files\Microsoft SQL Server
   [01/02/2009|14:13] C:\Program Files\Microsoft SQL Server Compact Edition
   [01/02/2009|14:15] C:\Program Files\Microsoft Sync Framework
   [07/09/2007|21:24] C:\Program Files\Microsoft Visual Studio
   [01/05/2008|12:32] C:\Program Files\Microsoft Visual Studio 8
   [07/09/2007|21:25] C:\Program Files\Microsoft Works
   [07/09/2007|21:28] C:\Program Files\Microsoft.NET
   [03/06/2008|18:23] C:\Program Files\Movie Maker
   [07/11/2008|09:57] C:\Program Files\Mozilla Firefox
   [01/05/2008|12:36] C:\Program Files\MSBuild
   [11/04/2008|11:45] C:\Program Files\MSSOAP
   [08/02/2009|13:35] C:\Program Files\Navilog1
   [08/02/2009|14:56] C:\Program Files\Norton Security Scan
   [07/09/2007|20:33] C:\Program Files\Realtek
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [02/12/2008|23:12] C:\Program Files\Samsung
   [09/02/2009|14:04] C:\Program Files\SPAMfighter
   [10/10/2008|06:23] C:\Program Files\Spyware Doctor
   [22/08/2008|14:17] C:\Program Files\Steganos
   [31/07/2008|12:11] C:\Program Files\Sun
   [07/09/2007|20:39] C:\Program Files\Synaptics
   [09/06/2008|13:17] C:\Program Files\SystemRequirementsLab
   [13/06/2008|19:09] C:\Program Files\Teamspeak2_RC2
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [21/12/2008|19:08] C:\Program Files\Utherverse Digital Inc
   [04/03/2008|23:46] C:\Program Files\uTorrent
   [04/03/2008|18:14] C:\Program Files\VideoLAN
   [26/05/2008|07:10] C:\Program Files\Vimicro Corporation
   [07/09/2007|20:36] C:\Program Files\WIDCOMM
   [04/03/2008|18:16] C:\Program Files\Winamp
   [04/03/2008|18:16] C:\Program Files\Winamp Remote
   [03/06/2008|18:23] C:\Program Files\Windows Calendar
   [03/06/2008|18:23] C:\Program Files\Windows Collaboration
   [03/06/2008|18:23] C:\Program Files\Windows Defender
   [03/06/2008|18:23] C:\Program Files\Windows Journal
   [01/02/2009|14:16] C:\Program Files\Windows Live
   [17/12/2008|08:32] C:\Program Files\Windows Live SkyDrive
   [15/01/2009|03:03] C:\Program Files\Windows Mail
   [03/06/2008|18:23] C:\Program Files\Windows Media Player
   [04/03/2008|09:51] C:\Program Files\Windows NT
   [03/06/2008|18:23] C:\Program Files\Windows Photo Gallery
   [03/06/2008|18:23] C:\Program Files\Windows Sidebar
   [03/09/2008|18:28] C:\Program Files\WinRAR

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [20/11/2008|14:43] C:\Program Files\Common Files\Adobe
   [04/03/2008|18:22] C:\Program Files\Common Files\Ankiro
   [04/03/2008|18:21] C:\Program Files\Common Files\Application
   [07/09/2007|21:24] C:\Program Files\Common Files\DESIGNER
   [08/03/2008|02:05] C:\Program Files\Common Files\Hewlett-Packard
   [08/03/2008|02:07] C:\Program Files\Common Files\HP
   [07/09/2007|20:42] C:\Program Files\Common Files\InstallShield
   [08/10/2008|22:05] C:\Program Files\Common Files\Intel
   [06/03/2008|21:16] C:\Program Files\Common Files\Java
   [11/10/2008|11:35] C:\Program Files\Common Files\Logishrd
   [17/12/2008|08:32] C:\Program Files\Common Files\microsoft shared
   [07/09/2007|20:43] C:\Program Files\Common Files\MSSoap
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [08/02/2009|14:59] C:\Program Files\Common Files\Symantec Shared
   [17/12/2008|08:37] C:\Program Files\Common Files\System
   [17/12/2008|08:22] C:\Program Files\Common Files\Windows Live
   [04/03/2008|11:20] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 82 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Users\cora\AppData\Roaming\MICROS~1\Windows\Cookies\cora@advertising[1].txt
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-09 18:34:42
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 338
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:38][D:8]-> C:\Users\cora\AppData\Local\Temp
   [F:226][D:1]-> C:\Users\cora\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:677][D:6]-> C:\Users\cora\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:8][D:7]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 09/02/2009|16:07 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 09/02/2009|18:36 - Option : [2]

   --------------------\  Fin du rapport a 18:36:23
   [ UAC => 1 ]

gil le fantom · Answer

Tu télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

tu clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

tu suis les indications et tu n'apporte aucune modication aux réglages par défaut et en fin d'installation,vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

tu fais "Exécuter un examen complet"

Si des malwares ont été détectés, leur liste s'affiche.
tu clique sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

tu me poste le rapport

Cora · Answer

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1741
Windows 6.0.6001 Service Pack 1

09/02/2009 20:36:09
mbam-log-2009-02-09 (20-36-09).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 134796
Temps écoulé: 1 hour(s), 37 minute(s), 5 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{df1c8e21-4045-4d67-b528-335f1a4f0de9} (Adware.Navipromo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\EoRezo (Rogue.Eorezo) -> Delete on reboot.

gil le fantom · Answer

Bonjour

Télécharges AD-Remover sur ton bureau : 


/!\ Déconnectes toi et fermes toutes applications en cours 

? Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files ) 
? Double clique sur l'icône Ad-removersituée sur ton bureau 
? Au menu principal choisi l'option "A" 
? Postes le rapport qui apparait à la fin . 

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log ) 

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Note : 

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

CID problème Pop Up fenetre

7 réponses

Votre réponse

Discussions similaires

Newsletters