Pubs Contextual ads by Snappyads

Résolu
Louli42 Messages postés 34 Statut Membre -  
Louli42 Messages postés 34 Statut Membre -
Bonjour,
Et tout d'abord merci à ceux qui se pencheront sur mon problème.
Depuis quelques jours, j'ai ainsi très souvent des publicités intempestives "Contextual ads by Snappyads" qui s'ouvrent sur mon ordinateur.
En parcourant un peu le forum (je suis nouvelle ici), j'ai pu voir qu'il était nécessaire pour ce genre de problème de poster le rapport Hijackthis, de ce fait le voici :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:00, on 20/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\BR040286.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Users\Louli\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\regsvr32.exe
C:\Users\Louli\AppData\Local\hlidedlp\hlidedlp.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\rundll32.exe
C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\sdclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: snappyads browser enhancer - {12FF14D7-FDB9-A78B-6D2E-F613F421A4F8} - C:\Windows\system32\sxbulagyumx.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: TBSB05288 - {6714ADBD-C6C1-42A8-BD84-9C9339059421} - C:\Program Files\IEToolbar\ECO Bar\ecobar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: mysidesearch search enhancer - {AF86FCAD-776A-01D8-D7E2-BFE86916B726} - C:\Windows\system32\vlavmimkejshanp.dll
O2 - BHO: snappyads - {bd94866a-e717-8e87-0359-59759f4b2579} - C:\Windows\system32\nseE459.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O3 - Toolbar: ECO Bar - {10000000-1000-1000-1000-100000000000} - C:\Program Files\IEToolbar\ECO Bar\ecobar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BisonInst0402] C:\Windows\BR040286.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [frwzqmjksq] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\sxbulagyumx.dll"
O4 - HKLM\..\Run: [hlidedlp] "C:\Users\Louli\AppData\Local\hlidedlp\hlidedlp.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Startup: runit_32.lnk = C:\Program Files\runit\runit_32.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{939D50ED-7C0C-4B95-9429-5A842E93DF60}: NameServer = 194.117.200.10,194.117.200.15
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Voilà en vous remerciant grandement par avance de l'aide que vous pourrez m'apporter.

Bonne soirée à tous !
A voir également:

43 réponses

Louli42 Messages postés 34 Statut Membre 1
 
Désolée mais c'est très ennuyeux, impossible de lire et ainsi d'avoir accès aux derniers messages postés sur le topic, je ne vois les messages que jusqu'à celui de 10h58 (le 17ème)... et ce même de mon autre ordinateur ! Est-ce un problème du au forum ?
0
gil le fantom Messages postés 2809 Statut Membre 25
 
ça beug cher moi avec CCm je ne vois plus les messages après le 17
0
Louli42 Messages postés 34 Statut Membre 1
 
Chez moi aussi ça beuguait mais c'est bon j'arrive à relire les messages apparemment.
Voici le nouveau rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:00, on 20/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\BR040286.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Users\Louli\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\regsvr32.exe
C:\Users\Louli\AppData\Local\hlidedlp\hlidedlp.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\rundll32.exe
C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\sdclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: snappyads browser enhancer - {12FF14D7-FDB9-A78B-6D2E-F613F421A4F8} - C:\Windows\system32\sxbulagyumx.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: TBSB05288 - {6714ADBD-C6C1-42A8-BD84-9C9339059421} - C:\Program Files\IEToolbar\ECO Bar\ecobar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: mysidesearch search enhancer - {AF86FCAD-776A-01D8-D7E2-BFE86916B726} - C:\Windows\system32\vlavmimkejshanp.dll
O2 - BHO: snappyads - {bd94866a-e717-8e87-0359-59759f4b2579} - C:\Windows\system32\nseE459.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O3 - Toolbar: ECO Bar - {10000000-1000-1000-1000-100000000000} - C:\Program Files\IEToolbar\ECO Bar\ecobar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BisonInst0402] C:\Windows\BR040286.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [frwzqmjksq] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\sxbulagyumx.dll"
O4 - HKLM\..\Run: [hlidedlp] "C:\Users\Louli\AppData\Local\hlidedlp\hlidedlp.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Startup: runit_32.lnk = C:\Program Files\runit\runit_32.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{939D50ED-7C0C-4B95-9429-5A842E93DF60}: NameServer = 194.117.200.10,194.117.200.15
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
0
Utilisateur anonyme
 
Ton rapport date d'hier 20h16

Ol faut un nouveau rapport fait maintenant.
0
Louli42 Messages postés 34 Statut Membre 1
 
Ça re-beug... toujours pas accès aux messages après le 17...
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Louli42 Messages postés 34 Statut Membre 1
 
Désolée, j'avais pas fait attention qu'il me ressortait l'ancien rapport !
Voici le nouveau :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:51:49, on 21/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\BR040286.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Users\Louli\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Users\Louli\AppData\Local\hlidedlp\hlidedlp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Windows\System32\rundll32.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BisonInst0402] C:\Windows\BR040286.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [hlidedlp] "C:\Users\Louli\AppData\Local\hlidedlp\hlidedlp.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Louli\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{939D50ED-7C0C-4B95-9429-5A842E93DF60}: NameServer = 194.117.200.10,194.117.200.15
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
0
Utilisateur anonyme
 
Ha, c'est mieux, on avance malgrè les soucis du site

======================== SDFIX ========================

• Télécharger SDFix sur le bureau
• Double-Click sur le fichier SDFix.EXE et se laisser guider pour l'installation
• Le programme s'installe dans le répertoire C:\SDFix

Il est indispensable d'effectuer le nettoyage avec SDFix en mode sans échec.
------
• Redémarrer en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
• Attention, pas d’accès à internet dans ce mode. Enregistrer ou imprimer les consignes.

• Relancer le Pc et tapoter la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
• Avec les touches « flèches », sélectionner Mode sans échec ==> entrée ==>nom utilisateur habituel
-------
• Une fois en mode sans échec, cliquer sur le menu Démarrer puis Exécuter et coller la commande suivant : C:\SDFix\RunThis.bat
• Taper Y puis appuyer sur la touche Entrée du clavier, afin de lancer le nettoyage !
SDFix va procéder au nettoyage, patience...cela peut durer une trentaine de minutes
• Une fenêtre indique que SDFix doit redémarrer l'ordinateur afin de terminer le nettoyage.
-------
• Appuyer sur une touche du clavier pour redémarrer le PC.
• Au redémarrage du PC, SDFix indique que le nettoyage est terminé.
• Appuyer sur une touche du clavier afin d'ouvrir le rapport créé par SDFix.
• Il peut être enregistré si besoin, par exemple si on demande de le poster sur un forum (menu Edition / Enregistrer sous).
• Sans quoi le rapport sera quand même sauvegardé dans le fichier suivant : Report.txt
dans le dossier SDFix (ex : C:\SDFix\Report.txt).

Et à la suite, un nouveau rapport HijackThis
0
Louli42 Messages postés 34 Statut Membre 1
 
Je viens de passer sur mon autre PC pour poser une petite question.
J'ai bien redémarrer mon ordi en mode sans échec, j'ai cliqué sur le menu démarrer puis Exécuter et coller la commande C:\SDFix\RunThisbat, mais ce que j'aimerais savoir c'est si il faut taper Y avant ou après avoir lancé le "programme exécuter". Le problème est que j'ai essayer les 2 solutions, et que dans les 2 cas, aucune fenêtre SDfix ne s'ouvre où je peux suivre l'avancement de l'analyse. Est-ce normal ?
0
Louli42 Messages postés 34 Statut Membre 1
 
Encore quelques beugs sur le forum... mais qui semblent se résoudre quand on poste un nouveau message
0
Louli42 Messages postés 34 Statut Membre 1
 
...
0
gil le fantom Messages postés 2809 Statut Membre 25
 
J'arrive enfin a lire les messages

Laisse tomber SDfix ca marche que avec du XP
0
Utilisateur anonyme
 
Hé oui, tu as raison, en plus c'est écris en gros sur mon canned. Merci de m'avoir repris sur ce sujet.

Bon j'arrete là, il m'est impossible à cause des dysfonctionnements du site de faire quelque chose de sérieux.

On va donc attendre que cela s'améliore.
0
Louli42 Messages postés 34 Statut Membre 1
 
Ok merci !
Par contre j'ai eu le droit à l'apparition d'une pub une nouvelle fois ce matin...
0
gil le fantom Messages postés 2809 Statut Membre 25
 
Bonsoir

On dirai que tout est revenu normal, on continu.

Tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
0
Louli42 Messages postés 34 Statut Membre 1
 
Bonsoir,

Alors voilà le rapport gil le fantôme :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : Louli ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security Online 2007 (Activated)
Firewall : Norton Internet Security Online 2007 (Activated)
C:\ (Local Disk) - NTFS - Total:111 Go (Free:63 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:100 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 23/02/2009|22:07 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[19/07/2008|21:10] C:\Users\Louli\AppData\Local\Acer Arcade Deluxe
[19/07/2008|18:34] C:\Users\Louli\AppData\Local\acer eNM
[21/07/2008|18:53] C:\Users\Louli\AppData\Local\Adobe
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Application Data
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\CyberLink
[15/02/2009|19:54] C:\Users\Louli\AppData\Local\d3d9caps.dat
[17/01/2009|17:38] C:\Users\Louli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[17/02/2009|21:59] C:\Users\Louli\AppData\Local\dtsdrlnk
[18/08/2008|19:52] C:\Users\Louli\AppData\Local\GDIPFONTCACHEV1.DAT
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Historique
[17/02/2009|21:58] C:\Users\Louli\AppData\Local\hlidedlp
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\HomeMedia
[22/02/2009|22:57] C:\Users\Louli\AppData\Local\IconCache.db
[21/12/2008|21:13] C:\Users\Louli\AppData\Local\Microsoft
[12/09/2008|21:33] C:\Users\Louli\AppData\Local\Microsoft Games
[22/07/2008|19:36] C:\Users\Louli\AppData\Local\Microsoft Help
[20/07/2008|18:24] C:\Users\Louli\AppData\Local\Mozilla
[19/07/2008|18:34] C:\Users\Louli\AppData\Local\PlayMovie
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\PowerCinema
[23/02/2009|22:07] C:\Users\Louli\AppData\Local\Temp
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Temporary Internet Files
[14/02/2009|20:58] C:\Users\Louli\AppData\Local\TVU Networks
[20/07/2008|18:42] C:\Users\Louli\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[09/02/2009 21:15][--a------] C:\Windows\tasks\Norton Internet Security Online - Analyse systŠme complŠte - Louli.job
[23/02/2009 21:23][--ah-----] C:\Windows\tasks\SA.DAT
[23/02/2009 21:21][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[25/12/2007|21:00] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[25/12/2007|20:52] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[19/07/2008|18:28] C:\ProgramData\Bureau
[26/02/2008|00:46] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[19/07/2008|18:28] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[20/02/2009|21:54] C:\ProgramData\Malwarebytes
[19/07/2008|18:28] C:\ProgramData\Menu D‚marrer
[20/07/2008|19:41] C:\ProgramData\Messenger Plus!
[16/12/2008|19:11] C:\ProgramData\Microsoft
[10/12/2008|20:53] C:\ProgramData\Microsoft Help
[19/07/2008|18:28] C:\ProgramData\ModŠles
[30/08/2008|18:00] C:\ProgramData\NVIDIA
[02/11/2006|14:02] C:\ProgramData\Start Menu
[23/02/2009|21:36] C:\ProgramData\Symantec
[02/11/2006|14:02] C:\ProgramData\Templates
[14/02/2009|20:58] C:\ProgramData\TVU Networks
[09/02/2009|21:32] C:\ProgramData\WindowsSearch
[19/01/2009|21:49] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[14/12/2008|14:08] C:\Program Files\7-Zip
[26/02/2008|00:45] C:\Program Files\Acer Arcade Deluxe
[25/12/2007|21:07] C:\Program Files\Acer GameZone
[26/02/2008|00:49] C:\Program Files\Acer Inc
[25/12/2007|21:00] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[25/12/2007|20:52] C:\Program Files\Adobe
[19/07/2008|18:33] C:\Program Files\Apoint2K
[17/02/2009|22:02] C:\Program Files\CCleaner
[16/12/2008|19:11] C:\Program Files\Common Files
[25/12/2007|19:13] C:\Program Files\CONEXANT
[25/12/2007|20:45] C:\Program Files\CyberLink
[19/07/2008|18:28] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[19/07/2008|18:33] C:\Program Files\InstallShield Installation Information
[26/02/2008|00:40] C:\Program Files\Intel
[30/08/2008|18:07] C:\Program Files\Internet Explorer
[20/12/2008|23:15] C:\Program Files\Java
[26/02/2008|00:44] C:\Program Files\Launch Manager
[30/08/2008|20:16] C:\Program Files\LimeWire
[20/02/2009|21:54] C:\Program Files\Malwarebytes' Anti-Malware
[08/02/2009|19:55] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[19/07/2008|18:50] C:\Program Files\Microsoft Office
[10/09/2008|18:51] C:\Program Files\Microsoft Works
[25/12/2007|20:56] C:\Program Files\Microsoft.NET
[30/08/2008|18:08] C:\Program Files\Movie Maker
[07/02/2009|13:20] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[25/12/2007|19:51] C:\Program Files\MSXML 4.0
[25/12/2007|20:21] C:\Program Files\NewTech Infosystems
[09/08/2008|17:12] C:\Program Files\Norton Internet Security
[25/12/2007|19:05] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[06/01/2009|21:17] C:\Program Files\Symantec
[20/02/2009|20:15] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[01/11/2008|20:55] C:\Program Files\Veetle
[03/10/2008|20:07] C:\Program Files\VideoLAN
[30/08/2008|18:08] C:\Program Files\Windows Calendar
[30/08/2008|18:07] C:\Program Files\Windows Collaboration
[30/08/2008|18:07] C:\Program Files\Windows Defender
[30/08/2008|18:07] C:\Program Files\Windows Journal
[19/01/2009|21:50] C:\Program Files\Windows Live
[16/12/2008|19:19] C:\Program Files\Windows Live SkyDrive
[13/02/2009|21:39] C:\Program Files\Windows Mail
[30/08/2008|18:07] C:\Program Files\Windows Media Player
[19/07/2008|18:28] C:\Program Files\Windows NT
[30/08/2008|18:07] C:\Program Files\Windows Photo Gallery
[30/08/2008|18:08] C:\Program Files\Windows Sidebar
[22/12/2008|10:50] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[25/12/2007|20:52] C:\Program Files\Common Files\Adobe
[25/12/2007|20:56] C:\Program Files\Common Files\DESIGNER
[25/12/2007|20:45] C:\Program Files\Common Files\InstallShield
[25/07/2008|20:31] C:\Program Files\Common Files\Java
[25/12/2007|20:20] C:\Program Files\Common Files\LightScribe
[16/12/2008|19:19] C:\Program Files\Common Files\microsoft shared
[25/12/2007|20:20] C:\Program Files\Common Files\muvee Technologies
[25/12/2007|20:21] C:\Program Files\Common Files\NewTech Infosystems
[25/12/2007|21:02] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[06/01/2009|21:17] C:\Program Files\Common Files\Symantec Shared
[30/08/2008|18:07] C:\Program Files\Common Files\System
[16/12/2008|19:11] C:\Program Files\Common Files\Windows Live
[20/07/2008|18:38] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 83 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Users\Louli\AppData\Local\Temp\nsi7D4B.tmp
C:\Users\Louli\AppData\Local\Temp\nsoD26E.tmp
C:\Users\Louli\AppData\Local\Temp\nsp9DE6.tmp
C:\Users\Louli\AppData\Local\Temp\nspE3AD.tmp

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-23 22:07:59
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 46

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:127][D:19]-> C:\Users\Louli\AppData\Local\Temp
[F:75][D:1]-> C:\Users\Louli\AppData\Roaming\MICROS~1\Windows\Cookies
[F:488][D:5]-> C:\Users\Louli\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:2][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 23/02/2009|22:09 - Option : [1]

--------------------\\ Fin du rapport a 22:09:38
[ UAC => 1 ]
0
gil le fantom Messages postés 2809 Statut Membre 25
 
Bonsoir

Relance Lop S&D


* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)


(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)
0
Louli42 Messages postés 34 Statut Membre 1
 
Bonsoir,

Voici le nouveau rapport Lop S&D :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : Louli ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security Online 2007 (Activated)
Firewall : Norton Internet Security Online 2007 (Activated)
C:\ (Local Disk) - NTFS - Total:111 Go (Free:63 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:100 Go)
E:\ (CD or DVD)
G:\ (USB) - FAT - Total:1009 Mo (Free:0 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 24/02/2009|21:29 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Users\Louli\AppData\Local\Temp\nsi7D4B.tmp
Supprime! - C:\Users\Louli\AppData\Local\Temp\nsoD26E.tmp
Supprime! - C:\Users\Louli\AppData\Local\Temp\nsp9DE6.tmp
Supprime! - C:\Users\Louli\AppData\Local\Temp\nspE3AD.tmp
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[19/07/2008|21:10] C:\Users\Louli\AppData\Local\Acer Arcade Deluxe
[19/07/2008|18:34] C:\Users\Louli\AppData\Local\acer eNM
[21/07/2008|18:53] C:\Users\Louli\AppData\Local\Adobe
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Application Data
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\CyberLink
[15/02/2009|19:54] C:\Users\Louli\AppData\Local\d3d9caps.dat
[17/01/2009|17:38] C:\Users\Louli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[17/02/2009|21:59] C:\Users\Louli\AppData\Local\dtsdrlnk
[18/08/2008|19:52] C:\Users\Louli\AppData\Local\GDIPFONTCACHEV1.DAT
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Historique
[17/02/2009|21:58] C:\Users\Louli\AppData\Local\hlidedlp
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\HomeMedia
[24/02/2009|20:48] C:\Users\Louli\AppData\Local\IconCache.db
[21/12/2008|21:13] C:\Users\Louli\AppData\Local\Microsoft
[12/09/2008|21:33] C:\Users\Louli\AppData\Local\Microsoft Games
[22/07/2008|19:36] C:\Users\Louli\AppData\Local\Microsoft Help
[20/07/2008|18:24] C:\Users\Louli\AppData\Local\Mozilla
[19/07/2008|18:34] C:\Users\Louli\AppData\Local\PlayMovie
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\PowerCinema
[24/02/2009|21:29] C:\Users\Louli\AppData\Local\Temp
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Temporary Internet Files
[14/02/2009|20:58] C:\Users\Louli\AppData\Local\TVU Networks
[20/07/2008|18:42] C:\Users\Louli\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[09/02/2009 21:15][--a------] C:\Windows\tasks\Norton Internet Security Online - Analyse systŠme complŠte - Louli.job
[24/02/2009 20:50][--ah-----] C:\Windows\tasks\SA.DAT
[24/02/2009 20:48][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[25/12/2007|21:00] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[25/12/2007|20:52] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[19/07/2008|18:28] C:\ProgramData\Bureau
[26/02/2008|00:46] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[19/07/2008|18:28] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[20/02/2009|21:54] C:\ProgramData\Malwarebytes
[19/07/2008|18:28] C:\ProgramData\Menu D‚marrer
[20/07/2008|19:41] C:\ProgramData\Messenger Plus!
[16/12/2008|19:11] C:\ProgramData\Microsoft
[10/12/2008|20:53] C:\ProgramData\Microsoft Help
[19/07/2008|18:28] C:\ProgramData\ModŠles
[30/08/2008|18:00] C:\ProgramData\NVIDIA
[02/11/2006|14:02] C:\ProgramData\Start Menu
[24/02/2009|21:01] C:\ProgramData\Symantec
[02/11/2006|14:02] C:\ProgramData\Templates
[14/02/2009|20:58] C:\ProgramData\TVU Networks
[09/02/2009|21:32] C:\ProgramData\WindowsSearch
[19/01/2009|21:49] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[14/12/2008|14:08] C:\Program Files\7-Zip
[26/02/2008|00:45] C:\Program Files\Acer Arcade Deluxe
[25/12/2007|21:07] C:\Program Files\Acer GameZone
[26/02/2008|00:49] C:\Program Files\Acer Inc
[25/12/2007|21:00] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[25/12/2007|20:52] C:\Program Files\Adobe
[19/07/2008|18:33] C:\Program Files\Apoint2K
[17/02/2009|22:02] C:\Program Files\CCleaner
[16/12/2008|19:11] C:\Program Files\Common Files
[25/12/2007|19:13] C:\Program Files\CONEXANT
[25/12/2007|20:45] C:\Program Files\CyberLink
[19/07/2008|18:28] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[19/07/2008|18:33] C:\Program Files\InstallShield Installation Information
[26/02/2008|00:40] C:\Program Files\Intel
[30/08/2008|18:07] C:\Program Files\Internet Explorer
[20/12/2008|23:15] C:\Program Files\Java
[26/02/2008|00:44] C:\Program Files\Launch Manager
[30/08/2008|20:16] C:\Program Files\LimeWire
[20/02/2009|21:54] C:\Program Files\Malwarebytes' Anti-Malware
[08/02/2009|19:55] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[19/07/2008|18:50] C:\Program Files\Microsoft Office
[10/09/2008|18:51] C:\Program Files\Microsoft Works
[25/12/2007|20:56] C:\Program Files\Microsoft.NET
[30/08/2008|18:08] C:\Program Files\Movie Maker
[07/02/2009|13:20] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[25/12/2007|19:51] C:\Program Files\MSXML 4.0
[25/12/2007|20:21] C:\Program Files\NewTech Infosystems
[09/08/2008|17:12] C:\Program Files\Norton Internet Security
[25/12/2007|19:05] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[06/01/2009|21:17] C:\Program Files\Symantec
[20/02/2009|20:15] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[01/11/2008|20:55] C:\Program Files\Veetle
[03/10/2008|20:07] C:\Program Files\VideoLAN
[30/08/2008|18:08] C:\Program Files\Windows Calendar
[30/08/2008|18:07] C:\Program Files\Windows Collaboration
[30/08/2008|18:07] C:\Program Files\Windows Defender
[30/08/2008|18:07] C:\Program Files\Windows Journal
[19/01/2009|21:50] C:\Program Files\Windows Live
[16/12/2008|19:19] C:\Program Files\Windows Live SkyDrive
[13/02/2009|21:39] C:\Program Files\Windows Mail
[30/08/2008|18:07] C:\Program Files\Windows Media Player
[19/07/2008|18:28] C:\Program Files\Windows NT
[30/08/2008|18:07] C:\Program Files\Windows Photo Gallery
[30/08/2008|18:08] C:\Program Files\Windows Sidebar
[22/12/2008|10:50] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[25/12/2007|20:52] C:\Program Files\Common Files\Adobe
[25/12/2007|20:56] C:\Program Files\Common Files\DESIGNER
[25/12/2007|20:45] C:\Program Files\Common Files\InstallShield
[25/07/2008|20:31] C:\Program Files\Common Files\Java
[25/12/2007|20:20] C:\Program Files\Common Files\LightScribe
[16/12/2008|19:19] C:\Program Files\Common Files\microsoft shared
[25/12/2007|20:20] C:\Program Files\Common Files\muvee Technologies
[25/12/2007|20:21] C:\Program Files\Common Files\NewTech Infosystems
[25/12/2007|21:02] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[06/01/2009|21:17] C:\Program Files\Common Files\Symantec Shared
[30/08/2008|18:07] C:\Program Files\Common Files\System
[16/12/2008|19:11] C:\Program Files\Common Files\Windows Live
[20/07/2008|18:38] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 84 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-24 21:29:17
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\1A120F75.emf 82580 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\236AA93.emf 82600 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\25F70F8F.emf 82580 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8773FB57.emf 610648 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8D183B78.emf 82580 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9A73725A.emf 82580 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A0A4D519.emf 82580 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A2876D6C.emf 12880 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A4B7C846.emf 82568 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E2B5C444.emf 82580 bytes
C:\Users\Louli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E605967D.emf 82580 bytes
scan completed successfully
hidden processes: 0
hidden files: 57

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:128][D:14]-> C:\Users\Louli\AppData\Local\Temp
[F:75][D:1]-> C:\Users\Louli\AppData\Roaming\MICROS~1\Windows\Cookies
[F:515][D:5]-> C:\Users\Louli\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:2][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 23/02/2009|22:09 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/02/2009|21:30 - Option : [2]

--------------------\\ Fin du rapport a 21:30:45
[ UAC => 1 ]
0
Louli42 Messages postés 34 Statut Membre 1
 
Bonjour,
C'est juste pour signaler que mon problème perdure toujours. De plus, mon antivirus aurait détecté également un virus "Trojan". Je ne sais pas si cela est en rapport avec mon problème.

Merci par avance
0
gil le fantom Messages postés 2809 Statut Membre 25
 
Bonjour,

toujour les pub CID ?
0
Louli42 Messages postés 34 Statut Membre 1
 
Bonsoir,

Oui toujours les mêmes pubs !
0
gil le fantom Messages postés 2809 Statut Membre 25
 
OK

Si tu as Messenger Plus!
tu vas dans le menu Démarrer
tu clique sur panneau de configuration
tu choisi le module ajout/suppression de programmes
verifie si le sponsor est désinstallé

puis tu refais ça
0
Louli42 Messages postés 34 Statut Membre 1
 
Bonjour,

Donc j'ai vérifié dans le panneau de configuration pour regarder si le sponsor de messenger plus était installé ou non (même si je ne l'ai jamais installé) et il ne me semble pas qu'il le soit. néanmoins, si tu pouvais me dire comment il s'intitule je pourrais en être sure !

Sinon voici le rapport demandé :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : Louli ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security Online 2007 (Activated)
Firewall : Norton Internet Security Online 2007 (Activated)
C:\ (Local Disk) - NTFS - Total:111 Go (Free:64 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:100 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 01/03/2009|14:31 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[19/07/2008|21:10] C:\Users\Louli\AppData\Local\Acer Arcade Deluxe
[19/07/2008|18:34] C:\Users\Louli\AppData\Local\acer eNM
[21/07/2008|18:53] C:\Users\Louli\AppData\Local\Adobe
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Application Data
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\CyberLink
[01/03/2009|00:01] C:\Users\Louli\AppData\Local\d3d9caps.dat
[17/01/2009|17:38] C:\Users\Louli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[17/02/2009|21:59] C:\Users\Louli\AppData\Local\dtsdrlnk
[18/08/2008|19:52] C:\Users\Louli\AppData\Local\GDIPFONTCACHEV1.DAT
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Historique
[17/02/2009|21:58] C:\Users\Louli\AppData\Local\hlidedlp
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\HomeMedia
[01/03/2009|00:09] C:\Users\Louli\AppData\Local\IconCache.db
[21/12/2008|21:13] C:\Users\Louli\AppData\Local\Microsoft
[12/09/2008|21:33] C:\Users\Louli\AppData\Local\Microsoft Games
[22/07/2008|19:36] C:\Users\Louli\AppData\Local\Microsoft Help
[20/07/2008|18:24] C:\Users\Louli\AppData\Local\Mozilla
[19/07/2008|18:34] C:\Users\Louli\AppData\Local\PlayMovie
[19/07/2008|21:10] C:\Users\Louli\AppData\Local\PowerCinema
[01/03/2009|14:31] C:\Users\Louli\AppData\Local\Temp
[19/07/2008|18:32] C:\Users\Louli\AppData\Local\Temporary Internet Files
[14/02/2009|20:58] C:\Users\Louli\AppData\Local\TVU Networks
[20/07/2008|18:42] C:\Users\Louli\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[09/02/2009 21:15][--a------] C:\Windows\tasks\Norton Internet Security Online - Analyse systŠme complŠte - Louli.job
[01/03/2009 10:46][--ah-----] C:\Windows\tasks\SA.DAT
[01/03/2009 00:10][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[25/12/2007|21:00] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[25/12/2007|20:52] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[19/07/2008|18:28] C:\ProgramData\Bureau
[26/02/2008|00:46] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[19/07/2008|18:28] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[20/02/2009|21:54] C:\ProgramData\Malwarebytes
[19/07/2008|18:28] C:\ProgramData\Menu D‚marrer
[20/07/2008|19:41] C:\ProgramData\Messenger Plus!
[16/12/2008|19:11] C:\ProgramData\Microsoft
[10/12/2008|20:53] C:\ProgramData\Microsoft Help
[19/07/2008|18:28] C:\ProgramData\ModŠles
[30/08/2008|18:00] C:\ProgramData\NVIDIA
[02/11/2006|14:02] C:\ProgramData\Start Menu
[01/03/2009|11:38] C:\ProgramData\Symantec
[02/11/2006|14:02] C:\ProgramData\Templates
[14/02/2009|20:58] C:\ProgramData\TVU Networks
[09/02/2009|21:32] C:\ProgramData\WindowsSearch
[19/01/2009|21:49] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[14/12/2008|14:08] C:\Program Files\7-Zip
[26/02/2008|00:45] C:\Program Files\Acer Arcade Deluxe
[25/12/2007|21:07] C:\Program Files\Acer GameZone
[26/02/2008|00:49] C:\Program Files\Acer Inc
[25/12/2007|21:00] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[25/12/2007|20:52] C:\Program Files\Adobe
[19/07/2008|18:33] C:\Program Files\Apoint2K
[17/02/2009|22:02] C:\Program Files\CCleaner
[16/12/2008|19:11] C:\Program Files\Common Files
[25/12/2007|19:13] C:\Program Files\CONEXANT
[25/12/2007|20:45] C:\Program Files\CyberLink
[19/07/2008|18:28] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[19/07/2008|18:33] C:\Program Files\InstallShield Installation Information
[26/02/2008|00:40] C:\Program Files\Intel
[30/08/2008|18:07] C:\Program Files\Internet Explorer
[20/12/2008|23:15] C:\Program Files\Java
[26/02/2008|00:44] C:\Program Files\Launch Manager
[30/08/2008|20:16] C:\Program Files\LimeWire
[20/02/2009|21:54] C:\Program Files\Malwarebytes' Anti-Malware
[08/02/2009|19:55] C:\Program Files\Messenger Plus! Live
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[19/07/2008|18:50] C:\Program Files\Microsoft Office
[10/09/2008|18:51] C:\Program Files\Microsoft Works
[25/12/2007|20:56] C:\Program Files\Microsoft.NET
[30/08/2008|18:08] C:\Program Files\Movie Maker
[07/02/2009|13:20] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[25/12/2007|19:51] C:\Program Files\MSXML 4.0
[25/12/2007|20:21] C:\Program Files\NewTech Infosystems
[09/08/2008|17:12] C:\Program Files\Norton Internet Security
[25/12/2007|19:05] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[06/01/2009|21:17] C:\Program Files\Symantec
[20/02/2009|20:15] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[01/11/2008|20:55] C:\Program Files\Veetle
[03/10/2008|20:07] C:\Program Files\VideoLAN
[30/08/2008|18:08] C:\Program Files\Windows Calendar
[30/08/2008|18:07] C:\Program Files\Windows Collaboration
[30/08/2008|18:07] C:\Program Files\Windows Defender
[30/08/2008|18:07] C:\Program Files\Windows Journal
[19/01/2009|21:50] C:\Program Files\Windows Live
[16/12/2008|19:19] C:\Program Files\Windows Live SkyDrive
[13/02/2009|21:39] C:\Program Files\Windows Mail
[30/08/2008|18:07] C:\Program Files\Windows Media Player
[19/07/2008|18:28] C:\Program Files\Windows NT
[30/08/2008|18:07] C:\Program Files\Windows Photo Gallery
[30/08/2008|18:08] C:\Program Files\Windows Sidebar
[22/12/2008|10:50] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[25/12/2007|20:52] C:\Program Files\Common Files\Adobe
[25/12/2007|20:56] C:\Program Files\Common Files\DESIGNER
[25/12/2007|20:45] C:\Program Files\Common Files\InstallShield
[25/07/2008|20:31] C:\Program Files\Common Files\Java
[25/12/2007|20:20] C:\Program Files\Common Files\LightScribe
[16/12/2008|19:19] C:\Program Files\Common Files\microsoft shared
[25/12/2007|20:20] C:\Program Files\Common Files\muvee Technologies
[25/12/2007|20:21] C:\Program Files\Common Files\NewTech Infosystems
[25/12/2007|21:02] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[06/01/2009|21:17] C:\Program Files\Common Files\Symantec Shared
[30/08/2008|18:07] C:\Program Files\Common Files\System
[16/12/2008|19:11] C:\Program Files\Common Files\Windows Live
[20/07/2008|18:38] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 84 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-01 14:31:53
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 46

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:159][D:14]-> C:\Users\Louli\AppData\Local\Temp
[F:79][D:1]-> C:\Users\Louli\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1089][D:5]-> C:\Users\Louli\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:2][D:2]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 23/02/2009|22:09 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/02/2009|21:30 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - 01/03/2009|14:33 - Option : [1]

--------------------\\ Fin du rapport a 14:33:21
[ UAC => 1 ]
0