Publicitées CiD s'ouvent sans arrêt [Résolu]

Réponse 1 / 33

toto666 Messages postés 325 Date d'inscription Statut Membre Dernière intervention 14

salut ah953,

I)Telecharger random's system information tool: (RSIT)

http://images.malwareremoval.com/random/RSIT.exe

1)Double clique sur l’icône RSIT.exe
2)Clique sur continue.
3)L’analyse terminée, deux fichiers s’ouvriront, poste moi les 2 rapports stp.
Si les 2 fichiers ne s’ouvrent pas va dans C:\rsit , tu y trouvera les 2 fichiers info.txt et log.txt

Réponse 2 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

slt

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

Réponse 3 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

je laisse la main!

Réponse 4 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

alors ca c info.txt

info.txt logfile of random's system information tool 1.05 2009-03-08 19:24:35

======Uninstall list======

-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
30+ Free Patience-->C:\Program Files\30+ Free Patience\uninstall.exe
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Apple Software Update-->MsiExec.exe /I{A260B422-70E1-41E2-957D-F76FA21266D5}
AquaPark Deluxe-->"C:\Program Files\Zylom Games\AquaPark Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Architecte 3D Platinium Demo-->C:\PROGRA~1\ARCHIT~1\UNWISE.EXE C:\PROGRA~1\ARCHIT~1\INSTALL.LOG
ArcSoft Panorama Maker 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5F68DC8-0278-4AD8-B413-861509B5F25B}\Setup.exe" -l0x40c
ArcSoft PhotoBase-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\ArcSoft\PhotoBase\Uninst.isu"
ArcSoft PhotoStudio 2000-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\ArcSoft\PhotoStudio 2000\Uninst.isu"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
avast! Antivirus-->rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
Becherov 1.01-->C:\Program Files\Becherov\uninst.exe
Believe in Sandy: Holiday Story (remove only)-->"C:\Program Files\Believe in Sandy - Holiday Story\Uninstall.exe"
Belle`s Beauty Boutique (remove only)-->"C:\Program Files\Belle`s Beauty Boutique\Uninstall.exe"
Big City Adventure - Sydney Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - Sydney Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
Big Kahuna Reef 2 Deluxe-->"C:\Program Files\Zylom Games\Big Kahuna Reef 2 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Birdies (remove only)-->"C:\Program Files\Birdies\Uninstall.exe"
Birds on a Wire Deluxe-->"C:\Program Files\Zylom Games\Birds on a Wire Deluxe\GameInstlr.exe" --uninstall UnInstall.log
BLOCKSUM‚ÌƒAƒ“ƒCƒ“ƒXƒg[ƒ‹-->"C:\Program Files\blocksum\unins000.exe"
Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
Bobble Puzzle 0.90-->"C:\Program Files\Bobble Puzzle\unins000.exe"
Bryce 5.5c-->C:\WINDOWS\unvise32.exe C:\Program Files\DAZ\Bryce 5.5\Bryce Uninstall.log
Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{42EDF895-158C-484E-A7F2-42B90759F281}\SETUP.EXE" -l0x40c UNINST
Cannon Smash-->"C:\Program Files\Cannon Smash\Uninstall Cannon Smash.exe"
Canon ScanGear Toolbox 3.0-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\ScanGear Toolbox Ver3\Uninst.isu" -c"C:\Program Files\Canon\ScanGear Toolbox Ver3\uninst.dll"
Caribbean Mah Jong Deluxe Beta-->"C:\Program Files\Zylom Games\Caribbean Mah Jong Deluxe Beta\GameInstaller.exe" --uninstall UnInstall.log
Carrie the Caregiver 2: Preschool (remove only)-->"C:\Program Files\Carrie the Caregiver 2 - Preschool\Uninstall.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Chainz 2 Deluxe-->"C:\Program Files\Zylom Games\Chainz 2 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Command & Conquer Alerte Rouge 2-->C:\Westwood\AR2\Uninstll.EXE
Commandos 2: Men of Courage-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7963BA0-EE1C-11D4-9FA5-00A0C9E6A342}\setup.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Composants Internet Partagés de Westwood-->C:\Westwood\Internet\UnstllAP.EXE
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
Crazy Taxi 3 Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{25AC51D8-A588-4379-AAEF-3F500AC9EEBD}\setup.exe"
Crazy Taxi-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F68A7F48-9F26-4FB1-A7C2-DF3C0F2D849C}\setup.exe"
Cuisine Facile-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4FCD8A17-F679-4AD1-8C4D-CFDACC2FA15C}\Setup.exe" -l0x40c
Day of Defeat: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/300
Daycare Nightmare (remove only)-->"C:\Program Files\Daycare Nightmare\Uninstall.exe"
DAZ|Studio 1.5.1.0-->C:\WINDOWS\unvise32.exe C:\Program Files\DAZ\Studio\DAZ Studio Uninstall.log
De Blob (alleen verwijderen)-->C:\Program Files\De Blob\Uninstall EN.exe
DeepBurner v1.8.0.224-->"C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner\install.log"
Désinstaller l"imprimante EPSON Stylus S20 Series-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FINSEAE.EXE /R /APD /P:"EPSON Stylus S20 Series"
Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dofus 1.14.1-->C:\Program Files\Dofus\uninstall.exe
Electronic Arts Game Updater-->C:\WINDOWS\IsUninst.exe -f"c:\Program Files\EACom\Update\Uninst.isu"
Élysée 3.62-->"C:\Program Files\Jeux de cartes\Élysée\unins000.exe"
Encyclopédie Microsoft Encarta 99-->RunDll32 C:\PROGRA~1\MIE1DB~1\ENCYCL~1\UNENC99.DLL,Uninstall C:\PROGRA~1\MIE1DB~1\ENCYCL~1\SETUP99F\INST99F.LOG
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{46CBBDF8-55B5-40DB-B459-7B848394309C}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Stylus S20_T10_T20 Manuel-->C:\Program Files\EPSON\TPMANUAL\ESS20_T10_T20\FRA\USE_G\DOCUNINS.EXE
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESD68 Guide d'utilisation-->C:\Program Files\EPSON\TPMANUAL\ESD68\USE_G\DOCUNINS.EXE
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Fever Frenzy (remove only)-->"C:\Program Files\Fever Frenzy\Uninstall.exe"
ffdshow (remove only)-->"C:\Program Files\ffdshow\uninstall.exe"
Flower Shop - Big City Break Deluxe-->"C:\Program Files\Zylom Games\Flower Shop - Big City Break Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Frozen-Bubble 1.0-->"C:\Program Files\Frozen-Bubble\unins000.exe"
Garden Planner 2.2 e-->"C:\Program Files\Garden Planner\unins000.exe"
Gem Shop Deluxe-->"C:\Program Files\Zylom Games\Gem Shop Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Glyph Deluxe-->"C:\Program Files\Zylom Games\Glyph Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Gold Rush Deluxe-->"C:\Program Files\Zylom Games\Gold Rush Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
Google Video Player-->"C:\Program Files\Google\Google Video Player\Uninstall.exe"
Gruntz-->C:\WINDOWS\unin040c.exe -fC:\Games\Gruntz\DeIsL1.isu
Half-Life: Opposing Force-->C:\Sierra\HALF-L~1\UNWISE.EXE C:\Sierra\HALF-L~1\OPFOR.LOG
Half-Life-->C:\Sierra\HALF-L~1\UNWISE.EXE C:\Sierra\HALF-L~1\INSTALL.LOG
Hammer Heads Deluxe-->"C:\Program Files\Zylom Games\Hammer Heads Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Happy Note! Papier Peint OneClick-->C:\Program Files\happynote\un_fewoneclick.exe
Happy Note! Tetris-->C:\Program Files\Happy Note\untetris.exe
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Image Web Server 7.0 IE Plugins (Build:3,1,0,229)-->C:\PROGRA~1\EARTHR~1\IMAGEW~1\Client\CABInst.exe -u
Inca Quest Deluxe-->"C:\Program Files\Zylom Games\Inca Quest Deluxe\GameInstaller.exe" --uninstall UnInstall.log
InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{6E93572D-F31E-496F-8B2F-F400B3A2BC4E}
J2SE Runtime Environment 5.0 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
Jane's Hotel - Family Hero Deluxe-->"C:\Program Files\Zylom Games\Jane's Hotel - Family Hero Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jane's Hotel (remove only)-->"C:\Program Files\Janes Hotel\Uninstall.exe"
Jardin-->C:\Documents and Settings\herviaux\Mes documents\Ariane\jardin domont\Désinstaller Jardin.exe
Jewel of Atlantis Deluxe-->"C:\Program Files\Zylom Games\Jewel of Atlantis Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Jewel Quest 2 Deluxe-->"C:\Program Files\Zylom Games\Jewel Quest 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jewel Quest Solitaire Deluxe-->"C:\Program Files\Zylom Games\Jewel Quest Solitaire Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jewel Quest-->"C:\Program Files\Gamenext\Jewel Quest\Uninstall.exe" "C:\Program Files\Gamenext\Jewel Quest\install.log"
Kit d'installation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C650676-CDDB-42C0-8D11-3EEB7F791F99}\setup.exe" -l0x40c -eth
LBreakout2 2.4.1-->"C:\Program Files\lbreakout2\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Sims 2-->C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe
LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"
LUMIX Simple Viewer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2CDCCE7E-55D5-40CC-AEA0-ABA54713501F}\setup.exe" -l0x40c
Macromedia Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Magic Seeds (remove only)-->"C:\Program Files\Magic Seeds\Uninstall.exe"
Mahjong Fortuna 2 Deluxe-->"C:\Program Files\Zylom Games\Mahjong Fortuna 2 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
maxx gp fr-->"C:\Program Files\BoontyGames\Maxx GP\unins000.exe"
MediaBar-->C:\WINDOWS\Downloaded Program Files\MusicManagerUnInstaller.exe "C:\WINDOWS\Downloaded Program Files\MusicManagerPlugin.ocx" "{C45B1500-7B63-47C2-AB25-C28CB46AFDEE}"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Age of Empires II-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTAL.EXE" /runtemp /uninstall
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money-->C:\Program Files\Microsoft Money 2005\MNYCoreFiles\Setup\uninst.exe /s:120
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Excel Viewer 2003-->MsiExec.exe /I{9084040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mosaic - Tomb of Mystery Deluxe-->"C:\Program Files\Zylom Games\Mosaic - Tomb of Mystery Deluxe\GameInstaller.exe" --uninstall UnInstall.log
Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Mystery P.I. - The Vegas Heist Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The Vegas Heist Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Nanny Mania (remove only)-->"C:\Program Files\Nanny Mania\Uninstall.exe"
Natural Selection 3.1-->"c:\program files\steam\steamapps\papy_mouso95\half-life\unins000.exe"
Navilog1 3.4.0-->"C:\Program Files\Navilog1\unins000.exe"
Need For Speed - Porsche 2000-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Electronic Arts\Need For Speed - Porsche 2000\uninst.log"
Nero BurnRights-->C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Nikon FotoShare-->C:\Program Files\Nikon\FotoShare\Uninstal.exe C:\PROGRA~1\Nikon\FOTOSH~1\INSTALL.LOG
Nikon Message Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\Setup.exe" -l0x40c UNINSTALL
Norton Security Scan (Symantec Corporation)-->"C:\Program Files\Fichiers communs\Symantec Shared\NSSSetup\{E579F5FB-D9C9-43A6-8DCF-67B9573C2E7C}_2_0_0\NSSSetup.exe" /X
Norton Security Scan-->MsiExec.exe /X{E579F5FB-D9C9-43A6-8DCF-67B9573C2E7C}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
OmniPage Pro 9.0-->C:\Program Files\Caere\OmniPagePro90\Deinstall.exe "C:\Program Files\Caere\OmniPagePro90\uninstall.exe -f'C:\Program Files\Caere\OmniPagePro90\DeIsL2.isu'"
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{6D7F8D4B-D1A4-402A-973E-31E90940E585}
OpenMG Secure Module 4.7.00-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{CCD663AE-610D-4BDF-AAB0-E914B044527D} UNINSTALL
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Packard Bell Magic Picture-->C:\APPS\MagicPicture\Uninstall.exe
Panda TotalScan-->C:\Program Files\Panda Security\TotalScan\ascuninst.exe
Paparazzi Deluxe-->"C:\Program Files\Zylom Games\Paparazzi Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Paradise Pet Salon (remove only)-->"C:\Program Files\Paradise Pet Salon\Uninstall.exe"
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
PictureProject-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF3999BE-1A7B-4738-88AA-97BF14094A4A}\Setup.exe" -l0x40c UNINSTALL
Posh Shop Deluxe-->"C:\Program Files\Zylom Games\Posh Shop Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Profitville Deluxe-->"C:\Program Files\Zylom Games\Profitville Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Profitville-->"C:\Program Files\Profitville\ReflexiveArcade\unins000.exe"
Puzzle Express Deluxe-->"C:\Program Files\Zylom Games\Puzzle Express Deluxe\GameInstlr.exe" --uninstall UnInstall.log
QuickTime-->MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
Rainforest Adventure Deluxe-->"C:\Program Files\Zylom Games\Rainforest Adventure Deluxe\GameInstlr.exe" --uninstall UnInstall.log
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Réceptions et fêtes Futé-->"C:\Program Files\Anuman Interactive\Réceptions et fêtes Futé\unins000.exe"
Recyclorama (remove only)-->"C:\Program Files\Recyclorama\Uninstall.exe"
RivaTuner v2.06-->"C:\Program Files\RivaTuner v2.06\uninstall.exe"
RomStation-->C:\Program Files\RomStation\Uninstal.exe
Rumble Box Tournament Edition-->C:\Program Files\Rumble Box\uninst.exe
RUN-->C:\Run5\UnInstal\UNWISE.EXE C:\Run5\UnInstal\INSTALL.LOG
Safari Island Deluxe-->"C:\Program Files\Zylom Games\Safari Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
Sally's Salon Deluxe-->"C:\Program Files\Zylom Games\Sally's Salon Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Sallys Salon-->"C:\Program Files\Sallys Salon\ReflexiveArcade\unins000.exe"
Scan Manager 5.2-->MsiExec.exe /I{E0A1559B-9886-11D4-8D06-0050DA284A39}
SecondLife (remove only)-->"C:\Program Files\SecondLife\uninst.exe" /P="SecondLife"
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Shogun Sudoku Deluxe-->"C:\Program Files\Zylom Games\Shogun Sudoku Deluxe\GameInstaller.exe" --uninstall UnInstall.log
SimCity 3000-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Maxis\SimCity 3000\Uninst.isu"
SimCity 4 Deluxe-->C:\Program Files\Maxis\SimCity 4 Deluxe\EAUninstall.exe
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sony Ericsson PC Suite-->MsiExec.exe /I{FE6397C1-CECA-4EC3-B064-42AED7676898}
SpongeBob Diner Dash-->"C:\Program Files\Gamenext\SpongeBob Diner Dash\Uninstall.exe" "C:\Program Files\Gamenext\SpongeBob Diner Dash\install.log"
SpongeBob SquarePants Diner Dash 2 (remove only)-->"C:\Program Files\SpongeBob SquarePants Diner Dash 2\Uninstall.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spyware Doctor 6.0-->C:\Program Files\Spyware Doctor\unins000.exe /LOG
Stand O'Food Deluxe-->"C:\Program Files\Zylom Games\Stand O'Food Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Steam(TM)-->C:\PROGRA~1\Steam\UNWISE.EXE C:\PROGRA~1\Steam\INSTALL.LOG
Steam-->C:\PROGRA~1\Steam\UNWISE.EXE C:\PROGRA~1\Steam\INSTALL.LOG
SUPER © Version 2008.bld.25 (Feb 5, 2008)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
Super Collapse 3-->"C:\Program Files\Super Collapse 3\ReflexiveArcade\unins000.exe"
Super Collapse! 3 Deluxe-->"C:\Program Files\Zylom Games\Super Collapse! 3 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
SweetIM Toolbar for Internet Explorer 3.1-->MsiExec.exe /X{59971D79-8111-42C2-9E40-883A0C277E78}
Table Tennis Pro V2 Lite (V2.32)-->"C:\Program Files\Table Tennis Pro V2 Lite\unins000.exe"
Taxi Racer London 2 fr-->"C:\Program Files\BoontyGames\Taxi Racer London 2\unins000.exe"
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Teddy Factory (remove only)-->"C:\Program Files\Teddy Factory\Uninstall.exe"
Text Express 2 Deluxe-->"C:\Program Files\Zylom Games\Text Express 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Apprentice - Los Angeles (remove only)-->"C:\Program Files\The Apprentice - Los Angeles\Uninstall.exe"
Titan Poker-->"C:\Poker\Titan Poker\_SetupPoker[1].exe" /uninstall
Torino 2006-->"C:\Program Files\2K Sports\Torino 2006\setup.exe" -u
Trivial Pursuit(TM) Genus Edition Deluxe-->"C:\Program Files\Zylom Games\Trivial Pursuit(TM) Genus Edition Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Turbo Pizza (remove only)-->"C:\Program Files\Turbo Pizza\Uninstall.exe"
Turtle Odyssey 2 Deluxe-->"C:\Program Files\Zylom Games\Turtle Odyssey 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
USB MODEM Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{042E2C9D-6647-4C5F-9CEF-387D72023128}\setup.exe" -l0x9 UNINSTALL
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
Veoh Video Compass-->C:\Program Files\Veoh Networks\Veoh Video Compass\uninst.exe
Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"
VeohTV BETA-->C:\Program Files\InstallShield Installation Information\{97A96172-A963-4A37-9FFB-DA6805BB915A}\setup.exe -runfromtemp -l0x0409
VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Media Player 10 Hotfix - KB888656-->"C:\WINDOWS\$NtUninstallKB888656$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Messenger 5.1-->MsiExec.exe /I{A433AE09-2126-4dad-9CBD-C1B05DC42787}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WJChess2D-->C:\PROGRA~1\JeffProd\WJCHES~1\UNWISE.EXE C:\PROGRA~1\JeffProd\WJCHES~1\INSTALL.LOG
WJChess3D-->C:\PROGRA~1\JeffProd\WJCHES~2\UNWISE.EXE C:\PROGRA~1\JeffProd\WJCHES~2\INSTALL.LOG
Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe
YETISPORTS Pingu Throw D.C.-->"C:\Program Files\Yetisports\Uninstall.exe" "C:\Program Files\Yetisports\install.log"
Zylom Puzzles Deluxe-->"C:\Program Files\Zylom Games\Zylom Puzzles Deluxe\GameInstaller.exe" --uninstall UnInstall.log

=====HijackThis Backups=====

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: metaspinner media GmbH - {12FC9A49-CFE0-49AA-BE9E-8F4EEAFC9443} - C:\PROGRA~1\YETISP~1\IEBUTT~1.DLL
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [Flash Player2] C:\DOCUME~1\herviaux\LOCALS~1\Temp\services.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453727 14
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O16 - DPF: {D147430C-86CD-4E6F-A807-93FBC496D201} (NCSLayeredView Class) - http://sallevirtuelle.cotesdarmor.fr/ecwplugins/ncs.cab
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game10.zylom.com/activex/zylomgamesplayer.cab
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

======Hosts File======

127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com

======Security center information======

AV: avast! antivirus 4.7.1098 [VPS 090303-0]

System event log

Computer Name: NOM-A94973C6ED8
Event Code: 7009
Message: Délai (30000 millisecondes) d'attente pour une connexion du service avast! Mail Scanner.

Record Number: 167798
Source Name: Service Control Manager
Time Written: 20090204154122.000000+060
Event Type: erreur
User:

Computer Name: NOM-A94973C6ED8
Event Code: 7036
Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution.

Record Number: 167797
Source Name: Service Control Manager
Time Written: 20090204154121.000000+060
Event Type: Informations
User:

Computer Name: NOM-A94973C6ED8
Event Code: 7000
Message: Le service avast! Web Scanner n'a pas pu démarrer en raison de l'erreur :
Le service n'a pas répondu assez vite à la demande de lancement ou de contrôle.

Record Number: 167796
Source Name: Service Control Manager
Time Written: 20090204154121.000000+060
Event Type: erreur
User:

Computer Name: NOM-A94973C6ED8
Event Code: 7009
Message: Délai (30000 millisecondes) d'attente pour une connexion du service avast! Web Scanner.

Record Number: 167795
Source Name: Service Control Manager
Time Written: 20090204154121.000000+060
Event Type: erreur
User:

Computer Name: NOM-A94973C6ED8
Event Code: 7000
Message: Le service avast! Mail Scanner n'a pas pu démarrer en raison de l'erreur :
Le service n'a pas répondu assez vite à la demande de lancement ou de contrôle.

Record Number: 167794
Source Name: Service Control Manager
Time Written: 20090204154121.000000+060
Event Type: erreur
User:

Application event log

Computer Name: NOM-A94973C6ED8
Event Code: 32068
Message: La règle de routage de trafic sortant n'est pas valide car elle ne peut pas trouver de périphérique valide. Les télécopies sortantes qui utilisent cette règle ne peuvent pas être acheminées. Vérifiez que le ou les périphériques concernés (en cas de routage vers un groupe de périphériques) sont connectés et installés correctement et allumés. En cas de routage vers un groupe, vérifiez que le groupe est configuré correctement.
Code de pays/région : '*'
Indicatif régional : '*'

Record Number: 13639
Source Name: Microsoft Fax
Time Written: 20081218075902.000000+060
Event Type: Avertissement
User:

Computer Name: NOM-A94973C6ED8
Event Code: 32026
Message: Le service de télécopie n'a pas pu initialiser de périphériques de télécopies attribués (virtuel ou TAPI).
Aucune télécopie ne peut être envoyée ou reçue tant qu'un périphérique de télécopies n'a pas été installé.

Record Number: 13638
Source Name: Microsoft Fax
Time Written: 20081218075902.000000+060
Event Type: Avertissement
User:

Computer Name: NOM-A94973C6ED8
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 13637
Source Name: SecurityCenter
Time Written: 20081218075902.000000+060
Event Type: Informations
User:

Computer Name: NOM-A94973C6ED8
Event Code: 0
Message:
Record Number: 13636
Source Name: gusvc
Time Written: 20081218075858.000000+060
Event Type: Informations
User:

Computer Name: NOM-A94973C6ED8
Event Code: 101
Message: msnmsgr (304) Le moteur de base de données est arrêté.

Record Number: 13635
Source Name: ESENT
Time Written: 20081217204215.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Fichiers communs\Teleca Shared
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

Réponse 5 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

et l'autre log.txt

Logfile of random's system information tool 1.05 (written by random/random)
Run by herviaux at 2009-03-08 19:24:14
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 78 GB (33%) free of 238 GB
Total RAM: 1023 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:24, on 2009-03-08
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\program files\steam\steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\happynote\pp-oneclick.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Documents and Settings\herviaux\Local Settings\Temporary Internet Files\Content.IE5\3JWS7N67\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\herviaux.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: Veoh Video Compass - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Program Files\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Flash Player2] C:\DOCUME~1\herviaux\LOCALS~1\Temp\services.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [roam slow curb balm] C:\Documents and Settings\All Users\Application Data\Bait cake roam slow\book axis.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /M "Stylus D68" /EF "HKCU"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453727 14
O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
O4 - HKCU\..\Run: [bikeupload] C:\DOCUME~1\herviaux\APPLIC~1\CLOCKB~1\Live Bias.exe
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Happy Note! Papier Peint OneClick.lnk = C:\Program Files\happynote\pp-oneclick.exe
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540001} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540002} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

Réponse 6 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

tu es gaté une infection CId + navipromo + de type IRCBOT !

Réponse 7 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

c'est pour ca que j'en est vraiment marre !! en plus l'ordi plante de plus en plus je me demande si c'est a cause de ca !!

alors que dois-je faire pour qe cela cesse ??
stp

Réponse 8 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

pas de réponse ???!!!

Réponse 9 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

message 2 ...

Réponse 10 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

alors???

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

et aussi:

Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Réponse 11 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

koi message 2

je fais la suite de que tu m'as mis ?

Réponse 12 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

le premier truc !!

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : herviaux ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1098 [VPS 090303-0] 4.7.1098 (Activated)
C:\ (Local Disk) - NTFS - Total:232 Go (Free:76 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2009-03-08|20:25 )

--------------------\\ Listing des dossiers dans APPLIC~1

[2008-12-27|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2005-09-22|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2007-05-30|15:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-03-17|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2009-02-13|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow
[2007-10-24|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[2008-02-17|11:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[2008-03-15|21:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[2008-12-15|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[2009-01-22|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2009-03-08|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[2008-01-19|21:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[2008-05-12|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[2007-10-25|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
[2006-09-01|21:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2009-03-07|15:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2009-01-16|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2009-01-16|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2007-10-21|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[2007-12-26|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2009-03-07|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[2007-10-24|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[2009-03-07|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
[2006-11-12|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[2007-10-24|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[2009-01-31|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[2006-04-02|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2006-10-21|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[2005-09-22|13:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[2008-05-19|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[2008-09-02|19:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[2008-06-08|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[2009-03-07|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2008-04-15|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[2006-04-08|09:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2008-09-02|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
[2009-03-07|17:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2008-12-14|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[2006-07-01|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2007-03-17|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[2008-03-11|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-02-20|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[2007-03-02|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[2005-09-22|14:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[2005-09-22|13:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2007-09-02|20:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[2005-09-22|14:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2009-01-31|18:11] C:\DOCUME~1\herviaux\APPLIC~1\Adobe
[2007-01-26|17:56] C:\DOCUME~1\herviaux\APPLIC~1\AdobeUM
[2007-08-20|20:43] C:\DOCUME~1\herviaux\APPLIC~1\Anuman Interactive
[2007-05-30|17:36] C:\DOCUME~1\herviaux\APPLIC~1\Apple Computer
[2008-09-01|10:08] C:\DOCUME~1\herviaux\APPLIC~1\ArcSoft
[2008-03-17|20:41] C:\DOCUME~1\herviaux\APPLIC~1\AVS4YOU
[2008-01-23|11:22] C:\DOCUME~1\herviaux\APPLIC~1\BitTorrent
[2009-01-19|19:43] C:\DOCUME~1\herviaux\APPLIC~1\Canon
[2006-11-11|13:56] C:\DOCUME~1\herviaux\APPLIC~1\Canvas Multi-Media
[2007-10-25|16:06] C:\DOCUME~1\herviaux\APPLIC~1\Chicken Chase
[2009-02-13|21:04] C:\DOCUME~1\herviaux\APPLIC~1\Clockburnbind
[2007-10-09|17:58] C:\DOCUME~1\herviaux\APPLIC~1\DeepBurner
[2007-10-11|20:32] C:\DOCUME~1\herviaux\APPLIC~1\DivX
[2005-12-25|11:22] C:\DOCUME~1\herviaux\APPLIC~1\EPSON
[2007-08-07|10:05] C:\DOCUME~1\herviaux\APPLIC~1\Gaijin Ent
[2006-02-20|07:54] C:\DOCUME~1\herviaux\APPLIC~1\Google
[2006-01-11|10:14] C:\DOCUME~1\herviaux\APPLIC~1\Help
[2008-06-08|20:04] C:\DOCUME~1\herviaux\APPLIC~1\Identities
[2008-12-14|16:35] C:\DOCUME~1\herviaux\APPLIC~1\InstallShield
[2005-12-23|16:43] C:\DOCUME~1\herviaux\APPLIC~1\InterTrust
[2006-05-19|20:37] C:\DOCUME~1\herviaux\APPLIC~1\InterVideo
[2007-08-08|10:29] C:\DOCUME~1\herviaux\APPLIC~1\iWin
[2007-10-25|14:53] C:\DOCUME~1\herviaux\APPLIC~1\Jane s Hotel
[2008-05-12|15:15] C:\DOCUME~1\herviaux\APPLIC~1\Jane s Hotel Family Hero
[2009-03-02|21:12] C:\DOCUME~1\herviaux\APPLIC~1\LimeWire
[2006-09-01|15:24] C:\DOCUME~1\herviaux\APPLIC~1\Macromedia
[2009-03-07|15:58] C:\DOCUME~1\herviaux\APPLIC~1\Malwarebytes
[2009-01-28|21:59] C:\DOCUME~1\herviaux\APPLIC~1\Microsoft
[2008-12-21|18:37] C:\DOCUME~1\herviaux\APPLIC~1\Mozilla
[2006-01-11|20:22] C:\DOCUME~1\herviaux\APPLIC~1\MSNInstaller
[2007-08-06|12:42] C:\DOCUME~1\herviaux\APPLIC~1\My Games
[2007-10-09|19:30] C:\DOCUME~1\herviaux\APPLIC~1\Nero
[2006-04-02|13:54] C:\DOCUME~1\herviaux\APPLIC~1\Nikon
[2007-10-25|15:44] C:\DOCUME~1\herviaux\APPLIC~1\Ohana Games
[2006-12-23|10:41] C:\DOCUME~1\herviaux\APPLIC~1\Panasonic
[2009-03-07|16:20] C:\DOCUME~1\herviaux\APPLIC~1\PC Tools
[2007-10-24|17:41] C:\DOCUME~1\herviaux\APPLIC~1\PlayFirst
[2008-02-05|21:03] C:\DOCUME~1\herviaux\APPLIC~1\Real
[2008-06-17|16:51] C:\DOCUME~1\herviaux\APPLIC~1\SecondLife
[2009-03-08|20:22] C:\DOCUME~1\herviaux\APPLIC~1\Skype
[2009-03-08|18:43] C:\DOCUME~1\herviaux\APPLIC~1\skypePM
[2008-09-02|19:50] C:\DOCUME~1\herviaux\APPLIC~1\Sony Ericsson
[2006-06-29|14:55] C:\DOCUME~1\herviaux\APPLIC~1\Sun
[2005-12-22|21:50] C:\DOCUME~1\herviaux\APPLIC~1\Symantec
[2007-10-21|16:52] C:\DOCUME~1\herviaux\APPLIC~1\Talkback
[2006-09-01|10:45] C:\DOCUME~1\herviaux\APPLIC~1\teamspeak2
[2008-09-02|19:59] C:\DOCUME~1\herviaux\APPLIC~1\Teleca
[2005-12-22|22:09] C:\DOCUME~1\herviaux\APPLIC~1\Template
[2008-03-16|20:34] C:\DOCUME~1\herviaux\APPLIC~1\video-for-mobile
[2007-02-08|14:14] C:\DOCUME~1\herviaux\APPLIC~1\vlc
[2006-03-14|16:44] C:\DOCUME~1\herviaux\APPLIC~1\Yahoo! Messenger
[2008-06-08|20:04] C:\DOCUME~1\herviaux\APPLIC~1\Zylom

[2009-03-07|16:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[2009-03-07|16:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[2009-03-07|16:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2009-03-07|16:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Real

[2007-07-11|19:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[2006-01-11|20:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-03-08 20:00][--ah-----] C:\WINDOWS\tasks\B11AFE459159752D.job
[2009-03-08 18:01][--a------] C:\WINDOWS\tasks\Norton Security Scan for herviaux.job
[2008-11-22 08:49][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-03-08 18:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2004-08-05 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( B11AFE459159752D.job )=( c:\docume~1\herviaux\applic~1\clockb~1\roamgreyokay.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[2007-08-15|18:26] C:\Program Files\2K Sports
[2007-03-26|16:15] C:\Program Files\30+ Free Patience
[2008-12-27|19:42] C:\Program Files\Adobe
[2007-10-09|19:23] C:\Program Files\Ahead
[2006-04-08|08:27] C:\Program Files\Alwil Software
[2007-08-20|20:31] C:\Program Files\Anuman Interactive
[2007-05-30|15:50] C:\Program Files\Apple Software Update
[2007-10-13|19:13] C:\Program Files\Architecte 3D Platinium Demo
[2006-04-02|13:42] C:\Program Files\ArcSoft
[2007-10-09|17:56] C:\Program Files\Astonsoft
[2008-03-16|20:33] C:\Program Files\AviSynth 2.5
[2008-03-17|22:03] C:\Program Files\AVS4YOU
[2007-11-21|17:03] C:\Program Files\Becherov
[2007-10-24|19:24] C:\Program Files\Believe in Sandy - Holiday Story
[2007-10-24|17:41] C:\Program Files\Belle`s Beauty Boutique
[2007-10-24|17:23] C:\Program Files\bfgclient
[2007-10-24|18:01] C:\Program Files\Birdies
[2008-01-24|19:34] C:\Program Files\BitTorrent
[2007-11-22|17:34] C:\Program Files\blocksum
[2007-11-21|21:41] C:\Program Files\Bobble Puzzle
[2008-03-20|18:55] C:\Program Files\Boonty
[2008-02-16|20:45] C:\Program Files\BoontyGames
[2005-12-23|16:41] C:\Program Files\Caere
[2006-01-28|19:40] C:\Program Files\Cannon Smash
[2005-12-23|16:43] C:\Program Files\Canon
[2007-10-25|18:52] C:\Program Files\Carrie the Caregiver 2 - Preschool
[2008-01-16|18:57] C:\Program Files\CCleaner
[2009-02-13|21:03] C:\Program Files\Circle Developement
[2009-02-13|21:03] C:\Program Files\Clockburnbind
[2005-12-22|22:35] C:\Program Files\Commandos II
[2008-03-15|19:42] C:\Program Files\Common Files
[2005-09-22|13:25] C:\Program Files\ComPlus Applications
[2007-10-24|18:20] C:\Program Files\Daycare Nightmare
[2008-04-23|15:13] C:\Program Files\DAZ
[2007-11-22|16:41] C:\Program Files\De Blob
[2005-12-22|22:37] C:\Program Files\directx
[2009-02-16|20:11] C:\Program Files\DivX
[2006-09-01|14:58] C:\Program Files\Dofus
[2005-12-31|13:01] C:\Program Files\EA GAMES
[2005-12-25|12:23] C:\Program Files\EACom
[2006-12-27|15:14] C:\Program Files\Earth Resource Mapping
[2005-12-25|12:20] C:\Program Files\Electronic Arts
[2009-01-11|17:36] C:\Program Files\eMule
[2005-12-23|19:38] C:\Program Files\EPSON
[2008-03-17|21:24] C:\Program Files\eRightSoft
[2007-10-24|18:30] C:\Program Files\Fever Frenzy
[2007-03-29|13:18] C:\Program Files\ffdshow
[2009-03-07|16:21] C:\Program Files\Fichiers communs
[2006-02-04|14:30] C:\Program Files\Frozen-Bubble
[2006-09-01|21:23] C:\Program Files\Gamenext
[2008-04-23|15:28] C:\Program Files\Garden Planner
[2009-01-22|19:06] C:\Program Files\Google
[2007-11-21|21:43] C:\Program Files\Greedy XP Version 1.00
[2006-12-03|20:55] C:\Program Files\HandballManager
[2008-02-03|15:14] C:\Program Files\Happy Note
[2008-02-03|15:14] C:\Program Files\happynote
[2008-12-14|16:41] C:\Program Files\InstallShield Installation Information
[2009-02-11|22:24] C:\Program Files\Internet Explorer
[2005-09-22|14:01] C:\Program Files\InterVideo
[2007-05-30|15:50] C:\Program Files\iPod
[2007-05-30|15:51] C:\Program Files\iTunes
[2008-03-22|13:16] C:\Program Files\IVCsoft
[2007-10-24|18:33] C:\Program Files\Janes Hotel
[2007-03-18|17:27] C:\Program Files\Jardin
[2006-06-29|14:55] C:\Program Files\Java
[2007-03-29|17:58] C:\Program Files\JeffProd
[2008-09-01|10:39] C:\Program Files\Jeux de cartes
[2006-04-08|19:33] C:\Program Files\Kit ADSL
[2007-12-28|18:54] C:\Program Files\Larousse
[2007-11-29|17:02] C:\Program Files\lbreakout2
[2008-02-16|19:23] C:\Program Files\Magic Seeds
[2009-03-07|15:58] C:\Program Files\Malwarebytes' Anti-Malware
[2007-03-25|18:38] C:\Program Files\Maxis
[2006-09-01|21:15] C:\Program Files\Mes Jeux T‚l‚charg‚s
[2008-11-09|12:50] C:\Program Files\Messenger
[2009-02-13|21:03] C:\Program Files\Messenger Plus! Live
[2009-01-16|19:34] C:\Program Files\Microsoft
[2007-05-10|20:36] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2005-09-22|13:27] C:\Program Files\microsoft frontpage
[2006-01-07|17:50] C:\Program Files\Microsoft Games
[2006-06-30|18:16] C:\Program Files\Microsoft Money 2005
[2009-01-28|21:59] C:\Program Files\Microsoft Office
[2007-01-26|18:09] C:\Program Files\Microsoft R‚f‚rence
[2005-12-22|22:01] C:\Program Files\Microsoft Works
[2008-11-09|12:50] C:\Program Files\Movie Maker
[2009-03-02|19:14] C:\Program Files\Mozilla Firefox
[2009-01-28|21:58] C:\Program Files\MSECache
[2005-12-24|20:29] C:\Program Files\MSN
[2005-09-22|13:24] C:\Program Files\MSN Gaming Zone
[2006-11-17|23:09] C:\Program Files\MSXML 4.0
[2007-10-25|15:06] C:\Program Files\Nanny Mania
[2007-03-26|15:28] C:\Program Files\NavExcel
[2009-02-07|19:41] C:\Program Files\Navilog1
[2007-10-09|19:28] C:\Program Files\Nero
[2008-11-09|12:48] C:\Program Files\NetMeeting
[2006-04-02|13:46] C:\Program Files\Nikon
[2009-03-08|18:00] C:\Program Files\Norton Security Scan
[2005-09-22|13:25] C:\Program Files\Online Services
[2008-11-09|12:48] C:\Program Files\Outlook Express
[2006-12-23|10:41] C:\Program Files\Panasonic
[2008-01-20|17:28] C:\Program Files\Panda Security
[2007-10-25|16:54] C:\Program Files\Paradise Pet Salon
[2008-06-17|09:52] C:\Program Files\PhotoFiltre
[2008-09-30|18:53] C:\Program Files\Picasa2
[2007-10-24|17:37] C:\Program Files\Profitville
[2007-05-30|15:50] C:\Program Files\QuickTime
[2005-12-22|21:42] C:\Program Files\Raccourcis de programmes
[2008-02-05|21:00] C:\Program Files\Real
[2007-10-24|18:09] C:\Program Files\Recyclorama
[2006-10-12|20:33] C:\Program Files\ReflexiveArcade
[2008-03-17|18:44] C:\Program Files\Ripp-it_AM
[2007-12-28|16:22] C:\Program Files\RivaTuner v2.06
[2009-03-04|19:36] C:\Program Files\RomStation
[2007-11-22|17:40] C:\Program Files\Rumble Box
[2007-10-24|16:41] C:\Program Files\Sallys Salon
[2008-06-17|16:51] C:\Program Files\SecondLife
[2008-02-16|20:53] C:\Program Files\Sega
[2005-09-22|13:26] C:\Program Files\Services en ligne
[2008-05-19|14:17] C:\Program Files\Skype
[2008-03-15|19:52] C:\Program Files\Sony
[2008-09-02|19:45] C:\Program Files\Sony Ericsson
[2009-02-07|19:46] C:\Program Files\SpongeBob SquarePants Diner Dash 2
[2009-03-07|16:18] C:\Program Files\Spybot - Search & Destroy
[2009-03-07|16:22] C:\Program Files\Spyware Doctor
[2009-03-08|18:42] C:\Program Files\Steam
[2006-10-14|10:33] C:\Program Files\Super Collapse 3
[2008-04-15|17:02] C:\Program Files\SweetIM
[2008-09-01|14:50] C:\Program Files\Table Tennis Pro V2 Lite
[2006-06-30|13:19] C:\Program Files\Teamspeak2_RC2
[2007-10-25|16:50] C:\Program Files\Teddy Factory
[2007-10-24|17:51] C:\Program Files\The Apprentice - Los Angeles
[2008-01-17|19:30] C:\Program Files\Trend Micro
[2007-10-24|17:37] C:\Program Files\Turbo Pizza
[2005-09-22|13:29] C:\Program Files\Uninstall Information
[2006-01-11|20:00] C:\Program Files\USB Driver-Express
[2009-02-15|17:10] C:\Program Files\Veoh Networks
[2007-02-08|14:13] C:\Program Files\VideoLAN
[2008-03-16|20:34] C:\Program Files\videomobileconverter
[2008-03-15|21:15] C:\Program Files\VirginMega
[2009-01-16|19:38] C:\Program Files\Windows Live
[2007-11-30|22:34] C:\Program Files\Windows Live Favorites
[2007-11-30|22:34] C:\Program Files\Windows Live Toolbar
[2007-01-24|19:28] C:\Program Files\Windows Media Connect 2
[2008-11-09|12:48] C:\Program Files\Windows Media Player
[2008-11-09|12:48] C:\Program Files\Windows NT
[2005-09-22|13:26] C:\Program Files\WindowsUpdate
[2005-09-22|13:27] C:\Program Files\xerox
[2006-02-20|17:30] C:\Program Files\Yahoo!
[2008-01-20|10:16] C:\Program Files\Yetisports
[2008-06-12|18:05] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-12-27|19:42] C:\Program Files\Fichiers communs\Adobe
[2008-03-17|22:02] C:\Program Files\Fichiers communs\AVSMedia
[2008-02-17|11:08] C:\Program Files\Fichiers communs\BOONTY Shared
[2005-12-23|16:42] C:\Program Files\Fichiers communs\Caere
[2008-04-23|14:59] C:\Program Files\Fichiers communs\DAZ
[2005-12-23|19:40] C:\Program Files\Fichiers communs\InstallShield
[2006-06-29|14:53] C:\Program Files\Fichiers communs\Java
[2006-09-01|21:16] C:\Program Files\Fichiers communs\Macrovision Shared
[2009-03-05|09:17] C:\Program Files\Fichiers communs\Microsoft Shared
[2005-09-22|13:25] C:\Program Files\Fichiers communs\MSSoap
[2006-04-02|13:54] C:\Program Files\Fichiers communs\Nikon
[2006-09-01|15:24] C:\Program Files\Fichiers communs\Oberon Media
[2005-09-22|15:21] C:\Program Files\Fichiers communs\ODBC
[2009-03-07|16:22] C:\Program Files\Fichiers communs\PC Tools
[2008-02-05|21:01] C:\Program Files\Fichiers communs\Real
[2005-09-22|13:25] C:\Program Files\Fichiers communs\Services
[2008-05-19|14:16] C:\Program Files\Fichiers communs\Skype
[2008-09-02|19:45] C:\Program Files\Fichiers communs\Sony Ericsson Shared
[2008-03-15|19:43] C:\Program Files\Fichiers communs\Sony Shared
[2005-09-22|15:21] C:\Program Files\Fichiers communs\SpeechEngines
[2008-04-23|15:28] C:\Program Files\Fichiers communs\SWF Studio
[2009-03-08|18:00] C:\Program Files\Fichiers communs\Symantec Shared
[2008-11-09|12:48] C:\Program Files\Fichiers communs\System
[2008-09-02|19:45] C:\Program Files\Fichiers communs\Teleca Shared
[2009-01-16|19:23] C:\Program Files\Fichiers communs\Windows Live
[2008-03-11|19:15] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2008-02-05|21:01] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 57 Processes )

IEXPLORE.EXE ~ [PID:2792]
IEXPLORE.EXE ~ [PID:3064]
IEXPLORE.EXE ~ [PID:2640]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow\book axis.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow\book axis.exe
C:\DOCUME~1\herviaux\APPLIC~1\clockb~1
C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\Live Bias.exe
C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\roam grey okay.exe
C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\WipeBuildBlehProc.exe
C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\xlysisro.exe
C:\Program Files\clockb~1
C:\DOCUME~1\herviaux\LOCALS~1\Temp\nsgB.tmp
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\herviaux\Cookies\herviaux@advertstream[1].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@imagevenue.advertserve[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@advertising[1].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@adin.bigpoint[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@fr.seafight.bigpoint[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@banner.cotedazurpalace[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@cotedazurpalace[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@www.cotedazurpalace[1].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@adopt.euroclick[1].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@pacificpoker[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@partypoker[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@fr.seafight.bigpoint[2].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@2xmoinscher[1].txt
C:\DOCUME~1\herviaux\Cookies\herviaux@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\B11AFE459159752D.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bikeupload"="C:\\DOCUME~1\\herviaux\\APPLIC~1\\CLOCKB~1\\Live Bias.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"roam slow curb balm"="C:\\Documents and Settings\\All Users\\Application Data\\Bait cake roam slow\\book axis.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-08 20:27:30
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 280

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:100][D:44]-> C:\DOCUME~1\herviaux\LOCALS~1\Temp
[F:1312][D:0]-> C:\DOCUME~1\herviaux\Cookies
[F:3621][D:76]-> C:\DOCUME~1\herviaux\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-03-08|20:29 - Option : [1]

--------------------\\ Fin du rapport a 20:29:27

Réponse 13 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

j'attends l'autre

Réponse 14 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

et le deuxième !!

Search Navipromo version 3.7.5 commencé le 2009-03-08 à 20:34:37.36

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 26.02.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : herviaux ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.7.1098 [VPS 090303-0] 4.7.1098 (Activated)

C:\ (Local Disk) - NTFS - Total:232 Go (Free:76 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\herviaux\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\herviaux\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\herviaux\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\herviaux\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\herviaux\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

C:\WINDOWS\Tasks\B11AFE459159752D.job trouvé ! Infection Lop possible non traitée par cet outil !

*** Analyse terminée le 2009-03-08 à 20:45:17.04 ***

Réponse 15 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

et le deuxième !!

Search Navipromo version 3.7.5 commencé le 2009-03-08 à 20:34:37.36

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 26.02.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : herviaux ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.7.1098 [VPS 090303-0] 4.7.1098 (Activated)

C:\ (Local Disk) - NTFS - Total:232 Go (Free:76 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\herviaux\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\herviaux\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\herviaux\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\herviaux\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\herviaux\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

C:\WINDOWS\Tasks\B11AFE459159752D.job trouvé ! Infection Lop possible non traitée par cet outil !

*** Analyse terminée le 2009-03-08 à 20:45:17.04 ***

Réponse 16 / 33

jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention 5 040

vire la sauvegarde de hijackthis que tu as fais (backup)

______________

désactive le tea timer de spybot en allant dans MODE puis MODE AVACNE puis OUTILS puis RESIDENT
______________
refais lop sd

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)

_______________

= Lance navilog1
= Cette fois-ci choisi l'option 2
= Navilog va faire le nettoyage.. patient jusqu'à ce qui soit marqué *** Nettoyage Termine le ..... ***
= Un rapport va être génrer sur ton C:\ qui sera en option 2
Note: le bureau disparaît

= colle le contenu du rapport de navilog (qui est en option2)

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Celà te fera apparaitre ton bureau.

________________

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
guide: http://site-naheulbeuk.com/
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

__________________

remets un rapport RSIt et dis tes soucis

Réponse 17 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

LE LOP ..

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : herviaux ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1098 [VPS 090303-0] 4.7.1098 (Activated)
C:\ (Local Disk) - NTFS - Total:232 Go (Free:76 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 2009-03-08|20:56 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow\book axis.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow\book axis.exe
Supprime! - C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\Live Bias.exe
Supprime! - C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\roam grey okay.exe
Supprime! - C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\WipeBuildBlehProc.exe
Supprime! - C:\DOCUME~1\herviaux\APPLIC~1\clockb~1\xlysisro.exe
Supprime! - C:\DOCUME~1\herviaux\LOCALS~1\Temp\nsgB.tmp
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@advertstream[1].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@imagevenue.advertserve[2].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@advertising[1].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@adin.bigpoint[2].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@fr.seafight.bigpoint[2].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@www.cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@pacificpoker[2].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@2xmoinscher[1].txt
Supprime! - C:\DOCUME~1\herviaux\Cookies\herviaux@www.2xmoinscher[2].txt
Supprime! - C:\WINDOWS\Tasks\B11AFE459159752D.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bait cake roam slow
Supprime! - C:\DOCUME~1\herviaux\APPLIC~1\clockb~1
Supprime! - C:\Program Files\clockb~1
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[2008-12-27|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2005-09-22|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2007-05-30|15:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-03-17|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2007-10-24|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[2008-02-17|11:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[2008-03-15|21:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[2008-12-15|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[2009-01-22|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2009-03-08|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[2008-01-19|21:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[2008-05-12|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[2007-10-25|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
[2006-09-01|21:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2009-03-07|15:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2009-01-16|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2009-01-16|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2007-10-21|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[2007-12-26|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2009-03-07|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[2007-10-24|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[2009-03-07|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
[2006-11-12|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[2007-10-24|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[2009-01-31|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[2006-04-02|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2006-10-21|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[2005-09-22|13:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[2008-05-19|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[2008-09-02|19:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[2008-06-08|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[2009-03-07|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2008-04-15|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[2006-04-08|09:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2008-09-02|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
[2009-03-07|17:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2008-12-14|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[2006-07-01|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2007-03-17|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[2008-03-11|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-02-20|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[2007-03-02|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[2005-09-22|14:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[2005-09-22|13:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2007-09-02|20:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[2005-09-22|14:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2009-01-31|18:11] C:\DOCUME~1\herviaux\APPLIC~1\Adobe
[2007-01-26|17:56] C:\DOCUME~1\herviaux\APPLIC~1\AdobeUM
[2007-08-20|20:43] C:\DOCUME~1\herviaux\APPLIC~1\Anuman Interactive
[2007-05-30|17:36] C:\DOCUME~1\herviaux\APPLIC~1\Apple Computer
[2008-09-01|10:08] C:\DOCUME~1\herviaux\APPLIC~1\ArcSoft
[2008-03-17|20:41] C:\DOCUME~1\herviaux\APPLIC~1\AVS4YOU
[2008-01-23|11:22] C:\DOCUME~1\herviaux\APPLIC~1\BitTorrent
[2009-01-19|19:43] C:\DOCUME~1\herviaux\APPLIC~1\Canon
[2006-11-11|13:56] C:\DOCUME~1\herviaux\APPLIC~1\Canvas Multi-Media
[2007-10-25|16:06] C:\DOCUME~1\herviaux\APPLIC~1\Chicken Chase
[2007-10-09|17:58] C:\DOCUME~1\herviaux\APPLIC~1\DeepBurner
[2007-10-11|20:32] C:\DOCUME~1\herviaux\APPLIC~1\DivX
[2005-12-25|11:22] C:\DOCUME~1\herviaux\APPLIC~1\EPSON
[2007-08-07|10:05] C:\DOCUME~1\herviaux\APPLIC~1\Gaijin Ent
[2006-02-20|07:54] C:\DOCUME~1\herviaux\APPLIC~1\Google
[2006-01-11|10:14] C:\DOCUME~1\herviaux\APPLIC~1\Help
[2008-06-08|20:04] C:\DOCUME~1\herviaux\APPLIC~1\Identities
[2008-12-14|16:35] C:\DOCUME~1\herviaux\APPLIC~1\InstallShield
[2005-12-23|16:43] C:\DOCUME~1\herviaux\APPLIC~1\InterTrust
[2006-05-19|20:37] C:\DOCUME~1\herviaux\APPLIC~1\InterVideo
[2007-08-08|10:29] C:\DOCUME~1\herviaux\APPLIC~1\iWin
[2007-10-25|14:53] C:\DOCUME~1\herviaux\APPLIC~1\Jane s Hotel
[2008-05-12|15:15] C:\DOCUME~1\herviaux\APPLIC~1\Jane s Hotel Family Hero
[2009-03-02|21:12] C:\DOCUME~1\herviaux\APPLIC~1\LimeWire
[2006-09-01|15:24] C:\DOCUME~1\herviaux\APPLIC~1\Macromedia
[2009-03-07|15:58] C:\DOCUME~1\herviaux\APPLIC~1\Malwarebytes
[2009-01-28|21:59] C:\DOCUME~1\herviaux\APPLIC~1\Microsoft
[2008-12-21|18:37] C:\DOCUME~1\herviaux\APPLIC~1\Mozilla
[2006-01-11|20:22] C:\DOCUME~1\herviaux\APPLIC~1\MSNInstaller
[2007-08-06|12:42] C:\DOCUME~1\herviaux\APPLIC~1\My Games
[2007-10-09|19:30] C:\DOCUME~1\herviaux\APPLIC~1\Nero
[2006-04-02|13:54] C:\DOCUME~1\herviaux\APPLIC~1\Nikon
[2007-10-25|15:44] C:\DOCUME~1\herviaux\APPLIC~1\Ohana Games
[2006-12-23|10:41] C:\DOCUME~1\herviaux\APPLIC~1\Panasonic
[2009-03-07|16:20] C:\DOCUME~1\herviaux\APPLIC~1\PC Tools
[2007-10-24|17:41] C:\DOCUME~1\herviaux\APPLIC~1\PlayFirst
[2008-02-05|21:03] C:\DOCUME~1\herviaux\APPLIC~1\Real
[2008-06-17|16:51] C:\DOCUME~1\herviaux\APPLIC~1\SecondLife
[2009-03-08|20:43] C:\DOCUME~1\herviaux\APPLIC~1\Skype
[2009-03-08|18:43] C:\DOCUME~1\herviaux\APPLIC~1\skypePM
[2008-09-02|19:50] C:\DOCUME~1\herviaux\APPLIC~1\Sony Ericsson
[2006-06-29|14:55] C:\DOCUME~1\herviaux\APPLIC~1\Sun
[2005-12-22|21:50] C:\DOCUME~1\herviaux\APPLIC~1\Symantec
[2007-10-21|16:52] C:\DOCUME~1\herviaux\APPLIC~1\Talkback
[2006-09-01|10:45] C:\DOCUME~1\herviaux\APPLIC~1\teamspeak2
[2008-09-02|19:59] C:\DOCUME~1\herviaux\APPLIC~1\Teleca
[2005-12-22|22:09] C:\DOCUME~1\herviaux\APPLIC~1\Template
[2008-03-16|20:34] C:\DOCUME~1\herviaux\APPLIC~1\video-for-mobile
[2007-02-08|14:14] C:\DOCUME~1\herviaux\APPLIC~1\vlc
[2006-03-14|16:44] C:\DOCUME~1\herviaux\APPLIC~1\Yahoo! Messenger
[2008-06-08|20:04] C:\DOCUME~1\herviaux\APPLIC~1\Zylom

[2009-03-07|16:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[2009-03-07|16:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[2009-03-07|16:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2009-03-07|16:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Real

[2007-07-11|19:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[2006-01-11|20:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-03-08 18:01][--a------] C:\WINDOWS\tasks\Norton Security Scan for herviaux.job
[2008-11-22 08:49][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009-03-08 18:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2004-08-05 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2007-08-15|18:26] C:\Program Files\2K Sports
[2007-03-26|16:15] C:\Program Files\30+ Free Patience
[2008-12-27|19:42] C:\Program Files\Adobe
[2007-10-09|19:23] C:\Program Files\Ahead
[2006-04-08|08:27] C:\Program Files\Alwil Software
[2007-08-20|20:31] C:\Program Files\Anuman Interactive
[2007-05-30|15:50] C:\Program Files\Apple Software Update
[2007-10-13|19:13] C:\Program Files\Architecte 3D Platinium Demo
[2006-04-02|13:42] C:\Program Files\ArcSoft
[2007-10-09|17:56] C:\Program Files\Astonsoft
[2008-03-16|20:33] C:\Program Files\AviSynth 2.5
[2008-03-17|22:03] C:\Program Files\AVS4YOU
[2007-11-21|17:03] C:\Program Files\Becherov
[2007-10-24|19:24] C:\Program Files\Believe in Sandy - Holiday Story
[2007-10-24|17:41] C:\Program Files\Belle`s Beauty Boutique
[2007-10-24|17:23] C:\Program Files\bfgclient
[2007-10-24|18:01] C:\Program Files\Birdies
[2008-01-24|19:34] C:\Program Files\BitTorrent
[2007-11-22|17:34] C:\Program Files\blocksum
[2007-11-21|21:41] C:\Program Files\Bobble Puzzle
[2008-03-20|18:55] C:\Program Files\Boonty
[2008-02-16|20:45] C:\Program Files\BoontyGames
[2005-12-23|16:41] C:\Program Files\Caere
[2006-01-28|19:40] C:\Program Files\Cannon Smash
[2005-12-23|16:43] C:\Program Files\Canon
[2007-10-25|18:52] C:\Program Files\Carrie the Caregiver 2 - Preschool
[2008-01-16|18:57] C:\Program Files\CCleaner
[2005-12-22|22:35] C:\Program Files\Commandos II
[2008-03-15|19:42] C:\Program Files\Common Files
[2005-09-22|13:25] C:\Program Files\ComPlus Applications
[2007-10-24|18:20] C:\Program Files\Daycare Nightmare
[2008-04-23|15:13] C:\Program Files\DAZ
[2007-11-22|16:41] C:\Program Files\De Blob
[2005-12-22|22:37] C:\Program Files\directx
[2009-02-16|20:11] C:\Program Files\DivX
[2006-09-01|14:58] C:\Program Files\Dofus
[2005-12-31|13:01] C:\Program Files\EA GAMES
[2005-12-25|12:23] C:\Program Files\EACom
[2006-12-27|15:14] C:\Program Files\Earth Resource Mapping
[2005-12-25|12:20] C:\Program Files\Electronic Arts
[2009-01-11|17:36] C:\Program Files\eMule
[2005-12-23|19:38] C:\Program Files\EPSON
[2008-03-17|21:24] C:\Program Files\eRightSoft
[2007-10-24|18:30] C:\Program Files\Fever Frenzy
[2007-03-29|13:18] C:\Program Files\ffdshow
[2009-03-07|16:21] C:\Program Files\Fichiers communs
[2006-02-04|14:30] C:\Program Files\Frozen-Bubble
[2006-09-01|21:23] C:\Program Files\Gamenext
[2008-04-23|15:28] C:\Program Files\Garden Planner
[2009-01-22|19:06] C:\Program Files\Google
[2007-11-21|21:43] C:\Program Files\Greedy XP Version 1.00
[2006-12-03|20:55] C:\Program Files\HandballManager
[2008-02-03|15:14] C:\Program Files\Happy Note
[2008-02-03|15:14] C:\Program Files\happynote
[2008-12-14|16:41] C:\Program Files\InstallShield Installation Information
[2009-02-11|22:24] C:\Program Files\Internet Explorer
[2005-09-22|14:01] C:\Program Files\InterVideo
[2007-05-30|15:50] C:\Program Files\iPod
[2007-05-30|15:51] C:\Program Files\iTunes
[2008-03-22|13:16] C:\Program Files\IVCsoft
[2007-10-24|18:33] C:\Program Files\Janes Hotel
[2007-03-18|17:27] C:\Program Files\Jardin
[2006-06-29|14:55] C:\Program Files\Java
[2007-03-29|17:58] C:\Program Files\JeffProd
[2008-09-01|10:39] C:\Program Files\Jeux de cartes
[2006-04-08|19:33] C:\Program Files\Kit ADSL
[2007-12-28|18:54] C:\Program Files\Larousse
[2007-11-29|17:02] C:\Program Files\lbreakout2
[2008-02-16|19:23] C:\Program Files\Magic Seeds
[2009-03-07|15:58] C:\Program Files\Malwarebytes' Anti-Malware
[2007-03-25|18:38] C:\Program Files\Maxis
[2006-09-01|21:15] C:\Program Files\Mes Jeux T‚l‚charg‚s
[2008-11-09|12:50] C:\Program Files\Messenger
[2009-02-13|21:03] C:\Program Files\Messenger Plus! Live
[2009-01-16|19:34] C:\Program Files\Microsoft
[2007-05-10|20:36] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2005-09-22|13:27] C:\Program Files\microsoft frontpage
[2006-01-07|17:50] C:\Program Files\Microsoft Games
[2006-06-30|18:16] C:\Program Files\Microsoft Money 2005
[2009-01-28|21:59] C:\Program Files\Microsoft Office
[2007-01-26|18:09] C:\Program Files\Microsoft R‚f‚rence
[2005-12-22|22:01] C:\Program Files\Microsoft Works
[2008-11-09|12:50] C:\Program Files\Movie Maker
[2009-03-02|19:14] C:\Program Files\Mozilla Firefox
[2009-01-28|21:58] C:\Program Files\MSECache
[2005-12-24|20:29] C:\Program Files\MSN
[2005-09-22|13:24] C:\Program Files\MSN Gaming Zone
[2006-11-17|23:09] C:\Program Files\MSXML 4.0
[2007-10-25|15:06] C:\Program Files\Nanny Mania
[2007-03-26|15:28] C:\Program Files\NavExcel
[2009-03-08|20:45] C:\Program Files\Navilog1
[2007-10-09|19:28] C:\Program Files\Nero
[2008-11-09|12:48] C:\Program Files\NetMeeting
[2006-04-02|13:46] C:\Program Files\Nikon
[2009-03-08|18:00] C:\Program Files\Norton Security Scan
[2005-09-22|13:25] C:\Program Files\Online Services
[2008-11-09|12:48] C:\Program Files\Outlook Express
[2006-12-23|10:41] C:\Program Files\Panasonic
[2008-01-20|17:28] C:\Program Files\Panda Security
[2007-10-25|16:54] C:\Program Files\Paradise Pet Salon
[2008-06-17|09:52] C:\Program Files\PhotoFiltre
[2008-09-30|18:53] C:\Program Files\Picasa2
[2007-10-24|17:37] C:\Program Files\Profitville
[2007-05-30|15:50] C:\Program Files\QuickTime
[2005-12-22|21:42] C:\Program Files\Raccourcis de programmes
[2008-02-05|21:00] C:\Program Files\Real
[2007-10-24|18:09] C:\Program Files\Recyclorama
[2006-10-12|20:33] C:\Program Files\ReflexiveArcade
[2008-03-17|18:44] C:\Program Files\Ripp-it_AM
[2007-12-28|16:22] C:\Program Files\RivaTuner v2.06
[2009-03-04|19:36] C:\Program Files\RomStation
[2007-11-22|17:40] C:\Program Files\Rumble Box
[2007-10-24|16:41] C:\Program Files\Sallys Salon
[2008-06-17|16:51] C:\Program Files\SecondLife
[2008-02-16|20:53] C:\Program Files\Sega
[2005-09-22|13:26] C:\Program Files\Services en ligne
[2008-05-19|14:17] C:\Program Files\Skype
[2008-03-15|19:52] C:\Program Files\Sony
[2008-09-02|19:45] C:\Program Files\Sony Ericsson
[2009-02-07|19:46] C:\Program Files\SpongeBob SquarePants Diner Dash 2
[2009-03-07|16:18] C:\Program Files\Spybot - Search & Destroy
[2009-03-07|16:22] C:\Program Files\Spyware Doctor
[2009-03-08|18:42] C:\Program Files\Steam
[2006-10-14|10:33] C:\Program Files\Super Collapse 3
[2008-04-15|17:02] C:\Program Files\SweetIM
[2008-09-01|14:50] C:\Program Files\Table Tennis Pro V2 Lite
[2006-06-30|13:19] C:\Program Files\Teamspeak2_RC2
[2007-10-25|16:50] C:\Program Files\Teddy Factory
[2007-10-24|17:51] C:\Program Files\The Apprentice - Los Angeles
[2008-01-17|19:30] C:\Program Files\Trend Micro
[2007-10-24|17:37] C:\Program Files\Turbo Pizza
[2005-09-22|13:29] C:\Program Files\Uninstall Information
[2006-01-11|20:00] C:\Program Files\USB Driver-Express
[2009-02-15|17:10] C:\Program Files\Veoh Networks
[2007-02-08|14:13] C:\Program Files\VideoLAN
[2008-03-16|20:34] C:\Program Files\videomobileconverter
[2008-03-15|21:15] C:\Program Files\VirginMega
[2009-01-16|19:38] C:\Program Files\Windows Live
[2007-11-30|22:34] C:\Program Files\Windows Live Favorites
[2007-11-30|22:34] C:\Program Files\Windows Live Toolbar
[2007-01-24|19:28] C:\Program Files\Windows Media Connect 2
[2008-11-09|12:48] C:\Program Files\Windows Media Player
[2008-11-09|12:48] C:\Program Files\Windows NT
[2005-09-22|13:26] C:\Program Files\WindowsUpdate
[2005-09-22|13:27] C:\Program Files\xerox
[2006-02-20|17:30] C:\Program Files\Yahoo!
[2008-01-20|10:16] C:\Program Files\Yetisports
[2008-06-12|18:05] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-12-27|19:42] C:\Program Files\Fichiers communs\Adobe
[2008-03-17|22:02] C:\Program Files\Fichiers communs\AVSMedia
[2008-02-17|11:08] C:\Program Files\Fichiers communs\BOONTY Shared
[2005-12-23|16:42] C:\Program Files\Fichiers communs\Caere
[2008-04-23|14:59] C:\Program Files\Fichiers communs\DAZ
[2005-12-23|19:40] C:\Program Files\Fichiers communs\InstallShield
[2006-06-29|14:53] C:\Program Files\Fichiers communs\Java
[2006-09-01|21:16] C:\Program Files\Fichiers communs\Macrovision Shared
[2009-03-05|09:17] C:\Program Files\Fichiers communs\Microsoft Shared
[2005-09-22|13:25] C:\Program Files\Fichiers communs\MSSoap
[2006-04-02|13:54] C:\Program Files\Fichiers communs\Nikon
[2006-09-01|15:24] C:\Program Files\Fichiers communs\Oberon Media
[2005-09-22|15:21] C:\Program Files\Fichiers communs\ODBC
[2009-03-07|16:22] C:\Program Files\Fichiers communs\PC Tools
[2008-02-05|21:01] C:\Program Files\Fichiers communs\Real
[2005-09-22|13:25] C:\Program Files\Fichiers communs\Services
[2008-05-19|14:16] C:\Program Files\Fichiers communs\Skype
[2008-09-02|19:45] C:\Program Files\Fichiers communs\Sony Ericsson Shared
[2008-03-15|19:43] C:\Program Files\Fichiers communs\Sony Shared
[2005-09-22|15:21] C:\Program Files\Fichiers communs\SpeechEngines
[2008-04-23|15:28] C:\Program Files\Fichiers communs\SWF Studio
[2009-03-08|18:00] C:\Program Files\Fichiers communs\Symantec Shared
[2008-11-09|12:48] C:\Program Files\Fichiers communs\System
[2008-09-02|19:45] C:\Program Files\Fichiers communs\Teleca Shared
[2009-01-16|19:23] C:\Program Files\Fichiers communs\Windows Live
[2008-03-11|19:15] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2008-02-05|21:01] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 53 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\herviaux\Cookies\herviaux@partypoker[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-08 20:58:31
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 280

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:102][D:43]-> C:\DOCUME~1\herviaux\LOCALS~1\Temp
[F:1301][D:0]-> C:\DOCUME~1\herviaux\Cookies
[F:3873][D:76]-> C:\DOCUME~1\herviaux\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2009-03-08|20:29 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2009-03-08|21:00 - Option : [2]

--------------------\\ Fin du rapport a 21:00:10

Réponse 18 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

le navilog ..

Clean Navipromo version 3.7.5 commencé le 2009-03-08 à 21:01:57.53

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 26.02.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : herviaux ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.7.1098 [VPS 090303-0] 4.7.1098 (Activated)

C:\ (Local Disk) - NTFS - Total:232 Go (Free:76 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\herviaux\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\herviaux\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\herviaux\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\herviaux\menudm~1\progra~1" ***

*** Suppression fichiers ***

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\herviaux\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

* Dans "C:\Documents and Settings\herviaux\locals~1\applic~1" *

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***

*** Nettoyage terminé le 2009-03-08 à 21:06:07.96 ***

Réponse 19 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

c normal que je ne peut pas choisir installer , il me met automatique sa :

SDFix has been extracted to %systemdrive%\SDFix\
(Drive that contains the Windows directory - typically C:\SDFix)

Open the SDFix folder in Safe Mode and double click the RunThis.bat file to start the fixtool
If RunThis.bat is started in Normal Mode, options to download and run Anti-Virus command line scanners are displayed

Catchme.exe Stealth Malware Detector by GMER is also included in the SDFix folder

Additional SDFix Instructions & screen shots can be found here - http://www.bleepingcomputer.com/forums/topic131299.html

SDFix a été extrait dans %systemdrive%\SDFix\
(Le disque qui contient le répertoire Windows - typiquement C:\SDFix)

Ouvrez le dossier SDFix en mode sans échec et double cliquez sur le fichier RunThis.bat pour démarrer l'outil.
Si RunThis.bat est lancé en mode normal, les options pour télécharger et lancer les scanners Antivirus en ligne de commande seront affichées

Catchme.exe Stealth Malware Detector de GMER est également inclus dans le dossier SDFix

Instructions supplémentaires pour SDFix & captures d'écran peuvent être trouvées ici - http://www.bleepingcomputer.com/forums/topic131299.html

SDFix wurde nach %systemdrive%\SDFix\ entpackt
(Das ist das laufwerk welches den Windows Ordner enthält - normalerweise c:\SDFix)

Öffe den SDFix Ordner im Abgesicherten Modus und doppelklicke zum starten die RunThis.bat Datei
Sollte die RunThis.bat im normalen Modus gestartet werden, wird einem die Möglichkeiten geboten Antivirenscanner für die Kommandozeile
(Dosbox) downzuloaden.

Das Programm Catchme Malware Detector von Gmer ist auch im SDFix Ordner enthalten.

Zusätzliche SDFix Anleitungen und Screen Shots können hier nach geschaut werden: [url="http://www.bleepingcomputer.com/forums/topic131299.html"]http://www.bleepingcomputer.com/forums/topic131299.html/url

C bien a partir de la que je redémarre en mode sans échec ??

Nirld

Bonjour,

Tu devrais essayer de scanner avec malwarebytes antimalware, il vire la plupart des trojans.

Bon courage.

Réponse 20 / 33

ah953 Messages postés 73 Date d'inscription Statut Membre Dernière intervention

voila enfin le dernier rapport:

[b]SDFix: Version 1.240 [/b]
Run by herviaux on 2009-03-08 at 21:38

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files [/b]:

No Trojan Files Found

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-08 21:59:15
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb 65536 bytes

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"="C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe:*:Enabled:Veoh Client"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:bittorrent"
"C:\\Program Files\\Steam\\SteamApps\\ariane22350\\counter-strike source\\hl2.exe"="C:\\Program Files\\Steam\\SteamApps\\ariane22350\\counter-strike source\\hl2.exe:*:Disabled:hl2"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Disabled:iTunes"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Ex‚cuter une DLL en tant qu'application"
"C:\\Program Files\\SecondLife\\SLVoice.exe"="C:\\Program Files\\SecondLife\\SLVoice.exe:*:Enabled:SLVoice"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Disabled:LimeWire"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Steam\\SteamApps\\common\\zuma deluxe\\Zuma.exe"="C:\\Program Files\\Steam\\SteamApps\\common\\zuma deluxe\\Zuma.exe:*:Enabled:Zuma Deluxe Demo"
"C:\\Program Files\\Steam\\SteamApps\\common\\chuzzle deluxe\\Chuzzle.exe"="C:\\Program Files\\Steam\\SteamApps\\common\\chuzzle deluxe\\Chuzzle.exe:*:Enabled:Chuzzle Deluxe Demo"
"C:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"="C:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe:*:Enabled:Veoh Web Player "
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:

[b]Files with Hidden Attributes [/b]:

Wed 5 Sep 2007 2,852,168 ...H. --- "C:\Program Files\Believe in Sandy - Holiday Story\BinS2_release.exe"
Tue 22 May 2007 8,332,880 ...H. --- "C:\Program Files\Belle`s Beauty Boutique\BellesBeautyBoutique.exe"
Fri 29 Jun 2007 1,631,560 ...H. --- "C:\Program Files\Birdies\Birdies.exe"
Tue 16 Oct 2007 800,072 ...H. --- "C:\Program Files\Carrie the Caregiver 2 - Preschool\Carrie the Caregiver 2.exe"
Mon 30 Jul 2007 1,795,400 ...H. --- "C:\Program Files\Daycare Nightmare\DaycareNightmare.exe"
Mon 13 Aug 2007 2,704,712 ...H. --- "C:\Program Files\Fever Frenzy\Fever Frenzy.exe"
Sat 22 Sep 2007 1,418,568 ...H. --- "C:\Program Files\Janes Hotel\Janes Hotel.exe"
Wed 13 Feb 2008 2,045,256 ...H. --- "C:\Program Files\Magic Seeds\MagicSeeds.exe"
Mon 9 Jul 2007 15,250,760 ...H. --- "C:\Program Files\Nanny Mania\NannyMania.exe"
Wed 19 Sep 2007 32,232,776 ...H. --- "C:\Program Files\Paradise Pet Salon\PetSalon.exe"
Tue 30 Sep 2008 6,108,728 A..H. --- "C:\Program Files\Picasa2\setup.exe"
Mon 21 May 2007 10,626,640 ...H. --- "C:\Program Files\Recyclorama\Recyclorama.exe"
Tue 25 Sep 2007 1,787,208 ...H. --- "C:\Program Files\SpongeBob SquarePants Diner Dash 2\SpongeBob Diner Dash 2.exe"
Mon 26 Jan 2009 1,740,632 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 26 Jan 2009 5,365,592 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 26 Jan 2009 2,144,088 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Fri 4 May 2007 17,502,208 ...H. --- "C:\Program Files\Teddy Factory\Teddy Factory.exe"
Tue 12 Jun 2007 3,393,104 ...H. --- "C:\Program Files\The Apprentice - Los Angeles\TheApprenticeLosAngeles.exe"
Mon 6 Aug 2007 2,532,680 ...H. --- "C:\Program Files\Turbo Pizza\TurboPizza.exe"
Wed 3 May 2006 163,328 ..SHR --- "C:\WINDOWS\system32\flvDX.dll"
Wed 21 Feb 2007 31,232 ..SHR --- "C:\WINDOWS\system32\msfDX.dll"
Mon 17 Dec 2007 27,648 ..SH. --- "C:\WINDOWS\system32\Smab0.dll"
Mon 4 Feb 2008 151,040 ..SH. --- "C:\WINDOWS\system32\VistaUltm.dll"
Wed 23 Apr 2008 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sun 26 Jun 2005 616,448 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygwin1.dll"
Tue 21 Jun 2005 45,568 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygz.dll"
Mon 17 Mar 2008 72,704 ..SHR --- "C:\Program Files\eRightSoft\SUPER\Setup.exe"
Fri 27 Oct 2006 15,872 A.SHR --- "C:\Program Files\eRightSoft\SUPER\_Setup.dll"
Sat 15 Mar 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Tue 4 Jun 2002 84,992 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll"
Tue 4 Jun 2002 44,032 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll"
Tue 10 Dec 2002 73,766 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll"
Tue 10 Dec 2002 65,575 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll"
Sun 9 Jun 2002 36,864 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll"
Tue 4 Jun 2002 20,480 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll"
Tue 10 Dec 2002 102,437 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll"
Tue 10 Dec 2002 176,165 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll"
Tue 10 Dec 2002 208,935 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll"
Tue 10 Dec 2002 217,127 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll"
Sun 9 Jun 2002 40,448 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll"
Sun 4 Nov 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll"
Tue 10 Apr 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll"
Fri 20 Feb 2004 232,960 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\raac.dll"
Sun 9 Jun 2002 525,824 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnco3260.dll"
Tue 10 Dec 2002 245,805 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnlt3260.dll"
Tue 10 Dec 2002 45,093 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv103260.dll"
Tue 10 Dec 2002 98,341 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv203260.dll"
Tue 10 Dec 2002 94,247 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv303260.dll"
Tue 10 Dec 2002 90,151 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv403260.dll"
Tue 10 Dec 2002 102,439 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll"
Sun 9 Jun 2002 49,152 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\tokr3260.dll"

[b]Finished![/b]

Publicitées CiD s'ouvent sans arrêt

33 réponses

Votre réponse

Discussions similaires