Bonjour, J'ai un petit problème, j'ai des pages internet explorer qui s'ouvrent (pub intempestive) on peut remarquer devant chacune d'elle que les lettres CiD sont inscrites. Vous allez me dire " il faut désinstaller dans panneau de configuration ajout et suppression de programmes le programmes CiDHelp... " Le problème c'est qu'il n'existe pas :o, je me trouve donc dans une impasse... Pouvez vous m'aider s'il vous plaît. PS : Pour un suivi de la question mieux vaut poster son propre topic plutôt que de gêner ceux des autres !!! Merci d'avance :)

Salut, --> Désactive l'UAC le temps de la désinfection. --> Télécharge Lop S&D (par Eric_71 & Angeldark) sur ton Bureau. --> Double-clique dessus pour lancer l'installation. --> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau. (Sous Vista, il faut cliquer droit sur le raccourci de Lop S&D et choisir Exécuter en tant qu'administrateur) --> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche). --> Patiente jusqu'à la fin du scan. --> Poste le rapport généré (C:\lopR.txt).

--------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz ) BIOS : Ver 1.00PARTTBL USER : Elodie ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Not Activated) Firewall : Norton Internet Security 2007 (Not Activated) C:\ (Local Disk) - NTFS - Total:69 Go (Free:37 Go) D:\ (Local Disk) - NTFS - Total:69 Go (Free:59 Go) E:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 13/04/2009|14:25 ) [ UAC => 0 ] --------------------\\ Listing des dossiers dans Local [29/11/2008|18:11] C:\Users\Elodie\AppData\Local\{7326CE9D-C0D2-433A-8A57-B7934EA13EC8} [30/08/2008|19:52] C:\Users\Elodie\AppData\Local\Acer Arcade Deluxe [30/08/2008|19:39] C:\Users\Elodie\AppData\Local\acer eNM [06/10/2008|12:07] C:\Users\Elodie\AppData\Local\Adobe [14/09/2008|14:01] C:\Users\Elodie\AppData\Local\Apple [11/10/2008|17:12] C:\Users\Elodie\AppData\Local\Apple Computer [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Application Data [30/08/2008|18:16] C:\Users\Elodie\AppData\Local\CyberLink [29/03/2009|02:26] C:\Users\Elodie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [23/11/2008|14:34] C:\Users\Elodie\AppData\Local\DVDivine [16/02/2009|11:52] C:\Users\Elodie\AppData\Local\ebaxvmr.bat [18/02/2009|21:19] C:\Users\Elodie\AppData\Local\eMule [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\GDIPFONTCACHEV1.DAT [30/08/2008|21:50] C:\Users\Elodie\AppData\Local\Google [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Historique [30/08/2008|18:16] C:\Users\Elodie\AppData\Local\HomeMedia [13/04/2009|14:21] C:\Users\Elodie\AppData\Local\IconCache.db [06/01/2009|01:10] C:\Users\Elodie\AppData\Local\live-player [09/03/2009|22:31] C:\Users\Elodie\AppData\Local\Microsoft [21/12/2008|12:00] C:\Users\Elodie\AppData\Local\Microsoft Games [01/02/2009|02:27] C:\Users\Elodie\AppData\Local\Mozilla [05/01/2009|16:39] C:\Users\Elodie\AppData\Local\Pando [03/09/2008|20:51] C:\Users\Elodie\AppData\Local\PlayMovie [30/08/2008|19:52] C:\Users\Elodie\AppData\Local\PowerCinema [13/04/2009|14:24] C:\Users\Elodie\AppData\Local\Temp [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Temporary Internet Files [19/10/2008|16:27] C:\Users\Elodie\AppData\Local\VirtualStore --------------------\\ Tâches planifiées dans C:\Windows\tasks [13/04/2009 14:22][--ah-----] C:\Windows\tasks\SA.DAT [13/04/2009 14:21][--a------] C:\Windows\tasks\SCHEDLGU.TXT --------------------\\ Listing des dossiers dans C:\ProgramData [16/10/2007|12:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [16/10/2007|12:01] C:\ProgramData\Adobe [14/09/2008|13:59] C:\ProgramData\Apple [09/03/2009|16:48] C:\ProgramData\Apple Computer [02/11/2006|15:02] C:\ProgramData\Application Data [26/11/2008|00:02] C:\ProgramData\Avira [30/08/2008|19:34] C:\ProgramData\Bureau [26/11/2008|17:38] C:\ProgramData\CheckPoint [31/08/2008|13:10] C:\ProgramData\CyberLink [02/11/2006|15:02] C:\ProgramData\Desktop [02/11/2006|15:02] C:\ProgramData\Documents [18/02/2009|21:19] C:\ProgramData\eMule [18/12/2008|19:08] C:\ProgramData\EncCopyCopy.066kpi [17/12/2008|21:39] C:\ProgramData\EncCopyCopy.0azof [18/12/2008|11:51] C:\ProgramData\EncCopyCopy.0crrzg [18/12/2008|13:19] C:\ProgramData\EncCopyCopy.0f6f3 [17/12/2008|19:27] C:\ProgramData\EncCopyCopy.17gjqs [18/12/2008|01:39] C:\ProgramData\EncCopyCopy.183cnh [18/12/2008|15:08] C:\ProgramData\EncCopyCopy.1g56qf [18/12/2008|14:24] C:\ProgramData\EncCopyCopy.1j39x21 [17/12/2008|16:33] C:\ProgramData\EncCopyCopy.29tuqf0 [17/12/2008|22:01] C:\ProgramData\EncCopyCopy.2r1uo0 [18/12/2008|00:34] C:\ProgramData\EncCopyCopy.31uel [17/12/2008|12:32] C:\ProgramData\EncCopyCopy.3k0pblk [17/12/2008|22:44] C:\ProgramData\EncCopyCopy.3ocpj [18/12/2008|16:57] C:\ProgramData\EncCopyCopy.3s6ch6e [17/12/2008|13:16] C:\ProgramData\EncCopyCopy.4gqb4 [18/12/2008|06:23] C:\ProgramData\EncCopyCopy.4pv2g [18/12/2008|19:30] C:\ProgramData\EncCopyCopy.53rvz [18/12/2008|17:19] C:\ProgramData\EncCopyCopy.55mli [18/12/2008|16:14] C:\ProgramData\EncCopyCopy.5gzees [17/12/2008|11:26] C:\ProgramData\EncCopyCopy.5oacb1m [18/12/2008|11:29] C:\ProgramData\EncCopyCopy.62kws6z [18/12/2008|15:52] C:\ProgramData\EncCopyCopy.6hzlg [17/12/2008|17:38] C:\ProgramData\EncCopyCopy.82xc7 [18/12/2008|09:40] C:\ProgramData\EncCopyCopy.85cze [17/12/2008|00:14] C:\ProgramData\EncCopyCopy.8us8f6z [18/12/2008|19:52] C:\ProgramData\EncCopyCopy.9ad70da [17/12/2008|11:48] C:\ProgramData\EncCopyCopy.9qtasq5 [17/12/2008|18:44] C:\ProgramData\EncCopyCopy.atmy1 [18/12/2008|08:56] C:\ProgramData\EncCopyCopy.c8hefj [18/12/2008|15:30] C:\ProgramData\EncCopyCopy.cnwmv6 [18/12/2008|04:34] C:\ProgramData\EncCopyCopy.ct75t1 [18/12/2008|03:50] C:\ProgramData\EncCopyCopy.dypbj1w [17/12/2008|20:55] C:\ProgramData\EncCopyCopy.ebtsw9p [17/12/2008|14:43] C:\ProgramData\EncCopyCopy.f67v4 [17/12/2008|15:49] C:\ProgramData\EncCopyCopy.fn25xl [18/12/2008|00:12] C:\ProgramData\EncCopyCopy.fvao8 [17/12/2008|10:20] C:\ProgramData\EncCopyCopy.g29xe [17/12/2008|17:16] C:\ProgramData\EncCopyCopy.g88gpr [17/12/2008|15:05] C:\ProgramData\EncCopyCopy.g8t720w [17/12/2008|12:54] C:\ProgramData\EncCopyCopy.gehef15 [17/12/2008|09:59] C:\ProgramData\EncCopyCopy.ggvsb [17/12/2008|22:23] C:\ProgramData\EncCopyCopy.gj9hwqw [18/12/2008|13:40] C:\ProgramData\EncCopyCopy.gm5sse [18/12/2008|04:56] C:\ProgramData\EncCopyCopy.hgoena [18/12/2008|07:07] C:\ProgramData\EncCopyCopy.him24fg [18/12/2008|14:02] C:\ProgramData\EncCopyCopy.i4ms4 [18/12/2008|08:13] C:\ProgramData\EncCopyCopy.iuizq [17/12/2008|20:11] C:\ProgramData\EncCopyCopy.iwy1y [18/12/2008|03:29] C:\ProgramData\EncCopyCopy.iz94po [17/12/2008|18:00] C:\ProgramData\EncCopyCopy.j4hi16 [17/12/2008|21:17] C:\ProgramData\EncCopyCopy.jeqbfe [17/12/2008|16:11] C:\ProgramData\EncCopyCopy.jgi5iqr [17/12/2008|19:06] C:\ProgramData\EncCopyCopy.k115d [18/12/2008|16:35] C:\ProgramData\EncCopyCopy.k4sj0z [18/12/2008|06:02] C:\ProgramData\EncCopyCopy.k6cgpf8 [16/12/2008|19:15] C:\ProgramData\EncCopyCopy.kg1rxbc [17/12/2008|23:50] C:\ProgramData\EncCopyCopy.ks4d5wy [18/12/2008|11:07] C:\ProgramData\EncCopyCopy.l8ier [18/12/2008|18:03] C:\ProgramData\EncCopyCopy.moldi5 [17/12/2008|18:22] C:\ProgramData\EncCopyCopy.mv8di5 [17/12/2008|23:28] C:\ProgramData\EncCopyCopy.mv99x [17/12/2008|23:06] C:\ProgramData\EncCopyCopy.mzq8dk [18/12/2008|12:57] C:\ProgramData\EncCopyCopy.n75rp [18/12/2008|07:29] C:\ProgramData\EncCopyCopy.nlhkoc [18/12/2008|02:45] C:\ProgramData\EncCopyCopy.nx2xan [18/12/2008|02:23] C:\ProgramData\EncCopyCopy.o52ib [18/12/2008|03:07] C:\ProgramData\EncCopyCopy.o6qo39 [17/12/2008|14:00] C:\ProgramData\EncCopyCopy.odpbq [17/12/2008|09:37] C:\ProgramData\EncCopyCopy.oihk8j [18/12/2008|14:46] C:\ProgramData\EncCopyCopy.osovn85 [16/12/2008|19:15] C:\ProgramData\EncCopyCopy.psfhm [18/12/2008|18:47] C:\ProgramData\EncCopyCopy.qublut [17/12/2008|13:38] C:\ProgramData\EncCopyCopy.qv8r9v [18/12/2008|10:02] C:\ProgramData\EncCopyCopy.r2hadd [18/12/2008|05:18] C:\ProgramData\EncCopyCopy.rjaz0o [17/12/2008|16:54] C:\ProgramData\EncCopyCopy.rz8vpa9 [18/12/2008|08:35] C:\ProgramData\EncCopyCopy.sncsmpn [18/12/2008|00:56] C:\ProgramData\EncCopyCopy.sr0ue [18/12/2008|10:24] C:\ProgramData\EncCopyCopy.te8fd [18/12/2008|10:46] C:\ProgramData\EncCopyCopy.tm8zev7 [18/12/2008|12:35] C:\ProgramData\EncCopyCopy.ttepez [18/12/2008|07:51] C:\ProgramData\EncCopyCopy.uhbup [18/12/2008|01:17] C:\ProgramData\EncCopyCopy.ui92y [18/12/2008|02:01] C:\ProgramData\EncCopyCopy.v1m54 [17/12/2008|11:04] C:\ProgramData\EncCopyCopy.vco3i [18/12/2008|09:18] C:\ProgramData\EncCopyCopy.veib4 [18/12/2008|05:40] C:\ProgramData\EncCopyCopy.vov8v [18/12/2008|17:41] C:\ProgramData\EncCopyCopy.vuazw [18/12/2008|04:12] C:\ProgramData\EncCopyCopy.vxqidyx [17/12/2008|19:49] C:\ProgramData\EncCopyCopy.w9bz57 [17/12/2008|15:27] C:\ProgramData\EncCopyCopy.wa6k09u [18/12/2008|12:13] C:\ProgramData\EncCopyCopy.wa84a50 [18/12/2008|06:45] C:\ProgramData\EncCopyCopy.wrd4c [18/12/2008|18:25] C:\ProgramData\EncCopyCopy.xqpnf [17/12/2008|10:42] C:\ProgramData\EncCopyCopy.xzm8l [17/12/2008|20:33] C:\ProgramData\EncCopyCopy.xztme07 [17/12/2008|14:21] C:\ProgramData\EncCopyCopy.yotmy [17/12/2008|12:10] C:\ProgramData\EncCopyCopy.zecn2a [31/08/2008|00:17] C:\ProgramData\ezsidmv.dat [30/08/2008|19:34] C:\ProgramData\Favoris [02/11/2006|15:02] C:\ProgramData\Favorites [31/08/2008|00:12] C:\ProgramData\Forge of Games [26/11/2008|00:21] C:\ProgramData\F-Secure [30/08/2008|12:33] C:\ProgramData\fssg [30/08/2008|15:01] C:\ProgramData\Google [05/02/2009|00:52] C:\ProgramData\InstallShield [27/03/2009|01:29] C:\ProgramData\LauncherAccess.dt [27/11/2008|12:02] C:\ProgramData\Malwarebytes [30/08/2008|19:34] C:\ProgramData\Menu D‚marrer [17/03/2009|18:41] C:\ProgramData\Messenger Plus! [17/03/2009|16:41] C:\ProgramData\Microsoft [12/12/2008|18:53] C:\ProgramData\Microsoft Help [30/08/2008|19:34] C:\ProgramData\ModŠles [06/10/2008|12:00] C:\ProgramData\Office Genuine Advantage [28/01/2009|19:44] C:\ProgramData\oncereal [16/12/2008|19:16] C:\ProgramData\Poke admin tons bike [31/08/2008|00:16] C:\ProgramData\Skype [02/11/2006|15:02] C:\ProgramData\Start Menu [16/12/2008|19:16] C:\ProgramData\Surf Pure Bore.nm51iy [30/08/2008|21:15] C:\ProgramData\Symantec [06/09/2008|14:38] C:\ProgramData\TEMP [02/11/2006|15:02] C:\ProgramData\Templates [16/12/2008|19:05] C:\ProgramData\WLInstaller --------------------\\ Listing des dossiers dans C:\Program Files [16/02/2008|22:59] C:\Program Files\Acer Arcade Deluxe [06/09/2008|14:54] C:\Program Files\Acer GameZone [16/02/2008|23:23] C:\Program Files\Acer Inc [16/10/2007|12:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [16/10/2007|12:01] C:\Program Files\Adobe [26/11/2008|00:02] C:\Program Files\Avira [14/09/2008|14:03] C:\Program Files\Bonjour [02/10/2007|06:06] C:\Program Files\Broadcom [09/03/2009|16:50] C:\Program Files\Common Files [09/03/2009|16:46] C:\Program Files\CyberLink [04/01/2009|04:15] C:\Program Files\DivX [18/02/2009|21:19] C:\Program Files\eMule [30/08/2008|19:34] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [30/08/2008|16:49] C:\Program Files\Google [09/03/2009|16:46] C:\Program Files\InstallShield Installation Information [02/10/2007|05:46] C:\Program Files\Intel [01/10/2008|22:26] C:\Program Files\Internet Explorer [08/11/2008|01:54] C:\Program Files\Java [16/02/2008|23:26] C:\Program Files\Launch Manager [06/01/2009|16:08] C:\Program Files\Live-Player [27/11/2008|12:02] C:\Program Files\Malwarebytes' Anti-Malware [17/03/2009|17:39] C:\Program Files\Messenger Plus! Live [16/12/2008|14:11] C:\Program Files\Microsoft [30/08/2008|22:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [02/11/2006|14:37] C:\Program Files\Microsoft Games [16/10/2007|12:24] C:\Program Files\Microsoft Office [28/02/2009|20:53] C:\Program Files\Microsoft Silverlight [17/03/2009|14:42] C:\Program Files\Microsoft Works [16/10/2007|12:22] C:\Program Files\Microsoft.NET [01/10/2008|22:26] C:\Program Files\Movie Maker [13/04/2009|14:23] C:\Program Files\Mozilla Firefox [02/11/2006|14:37] C:\Program Files\MSBuild [17/03/2009|17:47] C:\Program Files\MSNFix [16/10/2007|11:51] C:\Program Files\MSXML 4.0 [09/03/2009|16:45] C:\Program Files\NewTech Infosystems [30/08/2008|21:17] C:\Program Files\Orange [06/09/2008|15:06] C:\Program Files\Orange HSS [10/02/2009|20:08] C:\Program Files\PhotoFiltre [22/01/2009|16:58] C:\Program Files\PhotoScape [20/02/2009|23:49] C:\Program Files\Real [02/10/2007|06:03] C:\Program Files\Realtek [02/11/2006|14:37] C:\Program Files\Reference Assemblies [18/02/2009|16:45] C:\Program Files\Samsung [31/08/2008|00:16] C:\Program Files\Skype [02/10/2007|06:05] C:\Program Files\Synaptics [05/03/2009|22:09] C:\Program Files\TeamViewer [02/11/2006|15:01] C:\Program Files\Uninstall Information [05/11/2008|01:01] C:\Program Files\uTorrent [01/02/2009|14:18] C:\Program Files\Veoh Networks [06/09/2008|19:34] C:\Program Files\VideoLAN [01/10/2008|22:26] C:\Program Files\Windows Calendar [01/10/2008|22:26] C:\Program Files\Windows Collaboration [01/10/2008|22:26] C:\Program Files\Windows Defender [01/10/2008|22:26] C:\Program Files\Windows Journal [17/03/2009|17:38] C:\Program Files\Windows Live [10/02/2009|20:33] C:\Program Files\Windows Live SkyDrive [11/03/2009|13:39] C:\Program Files\Windows Mail [11/03/2009|13:39] C:\Program Files\Windows Media Player [30/08/2008|19:34] C:\Program Files\Windows NT [01/10/2008|22:26] C:\Program Files\Windows Photo Gallery [01/10/2008|22:26] C:\Program Files\Windows Sidebar [24/11/2008|17:55] C:\Program Files\WinRAR --------------------\\ Listing des dossiers dans C:\Program Files\Common Files [16/10/2007|12:01] C:\Program Files\Common Files\Adobe [16/10/2007|12:22] C:\Program Files\Common Files\DESIGNER [05/02/2009|00:51] C:\Program Files\Common Files\InstallShield [08/11/2008|01:52] C:\Program Files\Common Files\Java [16/10/2007|12:07] C:\Program Files\Common Files\LightScribe [21/02/2009|01:39] C:\Program Files\Common Files\microsoft shared [16/10/2007|12:07] C:\Program Files\Common Files\NewTech Infosystems [06/09/2008|20:07] C:\Program Files\Common Files\PX Storage Engine [09/03/2009|16:39] C:\Program Files\Common Files\Real [02/11/2006|13:18] C:\Program Files\Common Files\Services [31/08/2008|00:16] C:\Program Files\Common Files\Skype [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines [30/08/2008|21:16] C:\Program Files\Common Files\Symantec Shared [01/10/2008|22:26] C:\Program Files\Common Files\System [16/12/2008|13:57] C:\Program Files\Common Files\Windows Live [30/08/2008|22:12] C:\Program Files\Common Files\WindowsLiveInstaller --------------------\\ Process ( 81 Processes ) iexplore.exe ~ [PID:3560] --------------------\\ Recherche avec S_Lop C:\ProgramData\EncCopyCopy.0azof C:\ProgramData\EncCopyCopy.0f6f3 C:\ProgramData\EncCopyCopy.31uel C:\ProgramData\EncCopyCopy.3ocpj C:\ProgramData\EncCopyCopy.4gqb4 C:\ProgramData\EncCopyCopy.4pv2g C:\ProgramData\EncCopyCopy.53rvz C:\ProgramData\EncCopyCopy.55mli C:\ProgramData\EncCopyCopy.6hzlg C:\ProgramData\EncCopyCopy.82xc7 C:\ProgramData\EncCopyCopy.85cze C:\ProgramData\EncCopyCopy.atmy1 C:\ProgramData\EncCopyCopy.f67v4 C:\ProgramData\EncCopyCopy.fvao8 C:\ProgramData\EncCopyCopy.g29xe C:\ProgramData\EncCopyCopy.ggvsb C:\ProgramData\EncCopyCopy.i4ms4 C:\ProgramData\EncCopyCopy.iuizq C:\ProgramData\EncCopyCopy.iwy1y C:\ProgramData\EncCopyCopy.k115d C:\ProgramData\EncCopyCopy.l8ier C:\ProgramData\EncCopyCopy.mv99x C:\ProgramData\EncCopyCopy.n75rp C:\ProgramData\EncCopyCopy.o52ib C:\ProgramData\EncCopyCopy.odpbq C:\ProgramData\EncCopyCopy.psfhm C:\ProgramData\EncCopyCopy.sr0ue C:\ProgramData\EncCopyCopy.te8fd C:\ProgramData\EncCopyCopy.uhbup C:\ProgramData\EncCopyCopy.ui92y C:\ProgramData\EncCopyCopy.v1m54 C:\ProgramData\EncCopyCopy.vco3i C:\ProgramData\EncCopyCopy.veib4 C:\ProgramData\EncCopyCopy.vov8v C:\ProgramData\EncCopyCopy.vuazw C:\ProgramData\EncCopyCopy.wrd4c C:\ProgramData\EncCopyCopy.xqpnf C:\ProgramData\EncCopyCopy.xzm8l C:\ProgramData\EncCopyCopy.yotmy C:\ProgramData\EncCopyCopy.066kpi C:\ProgramData\EncCopyCopy.0crrzg C:\ProgramData\EncCopyCopy.17gjqs C:\ProgramData\EncCopyCopy.183cnh C:\ProgramData\EncCopyCopy.1g56qf C:\ProgramData\EncCopyCopy.2r1uo0 C:\ProgramData\EncCopyCopy.5gzees C:\ProgramData\EncCopyCopy.c8hefj C:\ProgramData\EncCopyCopy.cnwmv6 C:\ProgramData\EncCopyCopy.ct75t1 C:\ProgramData\EncCopyCopy.fn25xl C:\ProgramData\EncCopyCopy.g88gpr C:\ProgramData\EncCopyCopy.gm5sse C:\ProgramData\EncCopyCopy.hgoena C:\ProgramData\EncCopyCopy.iz94po C:\ProgramData\EncCopyCopy.j4hi16 C:\ProgramData\EncCopyCopy.jeqbfe C:\ProgramData\EncCopyCopy.k4sj0z C:\ProgramData\EncCopyCopy.moldi5 C:\ProgramData\EncCopyCopy.mv8di5 C:\ProgramData\EncCopyCopy.mzq8dk C:\ProgramData\EncCopyCopy.nlhkoc C:\ProgramData\EncCopyCopy.nx2xan C:\ProgramData\EncCopyCopy.o6qo39 C:\ProgramData\EncCopyCopy.oihk8j C:\ProgramData\EncCopyCopy.qublut C:\ProgramData\EncCopyCopy.qv8r9v C:\ProgramData\EncCopyCopy.r2hadd C:\ProgramData\EncCopyCopy.rjaz0o C:\ProgramData\EncCopyCopy.ttepez C:\ProgramData\EncCopyCopy.w9bz57 C:\ProgramData\EncCopyCopy.zecn2a C:\ProgramData\Surf Pure Bore.nm51iy C:\ProgramData\EncCopyCopy.1j39x21 C:\ProgramData\EncCopyCopy.29tuqf0 C:\ProgramData\EncCopyCopy.3k0pblk C:\ProgramData\EncCopyCopy.3s6ch6e C:\ProgramData\EncCopyCopy.5oacb1m C:\ProgramData\EncCopyCopy.62kws6z C:\ProgramData\EncCopyCopy.8us8f6z C:\ProgramData\EncCopyCopy.9ad70da C:\ProgramData\EncCopyCopy.9qtasq5 C:\ProgramData\EncCopyCopy.dypbj1w C:\ProgramData\EncCopyCopy.ebtsw9p C:\ProgramData\EncCopyCopy.g8t720w C:\ProgramData\EncCopyCopy.gehef15 C:\ProgramData\EncCopyCopy.gj9hwqw C:\ProgramData\EncCopyCopy.him24fg C:\ProgramData\EncCopyCopy.jgi5iqr C:\ProgramData\EncCopyCopy.k6cgpf8 C:\ProgramData\EncCopyCopy.kg1rxbc C:\ProgramData\EncCopyCopy.ks4d5wy C:\ProgramData\EncCopyCopy.osovn85 C:\ProgramData\EncCopyCopy.rz8vpa9 C:\ProgramData\EncCopyCopy.sncsmpn C:\ProgramData\EncCopyCopy.tm8zev7 C:\ProgramData\EncCopyCopy.vxqidyx C:\ProgramData\EncCopyCopy.wa6k09u C:\ProgramData\EncCopyCopy.wa84a50 C:\ProgramData\EncCopyCopy.xztme07 --------------------\\ Recherche de Fichiers / Dossiers Lop C:\ProgramData\Poke admin tons bike C:\ProgramData\Poke admin tons bike\coal dent.exe C:\Users\Elodie\AppData\Local\Temp\msgpl_481b.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_5f19.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_90f0.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_a260.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_a950.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_ab8b.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_b3d0.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_c9be.tmp C:\Users\Elodie\AppData\Local\Temp\msgpl_d6d7.tmp --------------------\\ Verification du Registre [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "drv acid"="\"C:\\ProgramData\\EncCopyCopy.9ad70da\"" "tons bike intra poll"="\"C:\\ProgramData\\Surf Pure Bore.nm51iy\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-04-13 14:25:45 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 170 --------------------\\ Recherche d'autres infections C:\Program Files\Live-Player C:\Program Files\Live-Player\data C:\Program Files\Live-Player\live-player.exe C:\Program Files\Live-Player\SkinCrafterDll.dll C:\Program Files\Live-Player\skins C:\Program Files\Live-Player\sqlite3.dll C:\Users\Elodie\AppData\Local\live-player C:\Users\Elodie\AppData\Local\live-player\flv.swf C:\Users\Elodie\AppData\Local\live-player\liveplayer.s3db C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url [b]==> EGDACCESS <==/b [F:1672][D:132]-> C:\Users\Elodie\AppData\Local\Temp [F:153][D:1]-> C:\Users\Elodie\AppData\Roaming\MICROS~1\Windows\Cookies [F:848][D:4]-> C:\Users\Elodie\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:4][D:3]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 13/04/2009|14:27 - Option : [1] --------------------\\ Fin du rapport a 14:27:53 [ UAC => 1 ] Merci de votre réponse :p

--> Double-clique sur le raccourci de Lop S&D pour le lancer. (Sous Vista, il faut cliquer droit sur le raccourci de Lop S&D et choisir Exécuter en tant qu'administrateur) --> Choisis cette fois-ci l'option 2 (Suppression). --> Ne ferme pas la fenêtre lors de la suppression ! --> Poste le rapport généré (C:\lopR.txt). (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

--------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz ) BIOS : Ver 1.00PARTTBL USER : Elodie ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Not Activated) Firewall : Norton Internet Security 2007 (Not Activated) C:\ (Local Disk) - NTFS - Total:69 Go (Free:37 Go) D:\ (Local Disk) - NTFS - Total:69 Go (Free:59 Go) E:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 13/04/2009|14:38 ) [ UAC => 1 ] \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\ProgramData\Poke admin tons bike\coal dent.exe Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_481b.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_5f19.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_90f0.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_a260.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_a950.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_ab8b.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_b3d0.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_c9be.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_d6d7.tmp Supprime! - C:\ProgramData\EncCopyCopy.0azof Supprime! - C:\ProgramData\EncCopyCopy.0f6f3 Supprime! - C:\ProgramData\EncCopyCopy.31uel Supprime! - C:\ProgramData\EncCopyCopy.3ocpj Supprime! - C:\ProgramData\EncCopyCopy.4gqb4 Supprime! - C:\ProgramData\EncCopyCopy.4pv2g Supprime! - C:\ProgramData\EncCopyCopy.53rvz Supprime! - C:\ProgramData\EncCopyCopy.55mli Supprime! - C:\ProgramData\EncCopyCopy.6hzlg Supprime! - C:\ProgramData\EncCopyCopy.82xc7 Supprime! - C:\ProgramData\EncCopyCopy.85cze Supprime! - C:\ProgramData\EncCopyCopy.atmy1 Supprime! - C:\ProgramData\EncCopyCopy.f67v4 Supprime! - C:\ProgramData\EncCopyCopy.fvao8 Supprime! - C:\ProgramData\EncCopyCopy.g29xe Supprime! - C:\ProgramData\EncCopyCopy.ggvsb Supprime! - C:\ProgramData\EncCopyCopy.i4ms4 Supprime! - C:\ProgramData\EncCopyCopy.iuizq Supprime! - C:\ProgramData\EncCopyCopy.iwy1y Supprime! - C:\ProgramData\EncCopyCopy.k115d Supprime! - C:\ProgramData\EncCopyCopy.l8ier Supprime! - C:\ProgramData\EncCopyCopy.mv99x Supprime! - C:\ProgramData\EncCopyCopy.n75rp Supprime! - C:\ProgramData\EncCopyCopy.o52ib Supprime! - C:\ProgramData\EncCopyCopy.odpbq Supprime! - C:\ProgramData\EncCopyCopy.psfhm Supprime! - C:\ProgramData\EncCopyCopy.sr0ue Supprime! - C:\ProgramData\EncCopyCopy.te8fd Supprime! - C:\ProgramData\EncCopyCopy.uhbup Supprime! - C:\ProgramData\EncCopyCopy.ui92y Supprime! - C:\ProgramData\EncCopyCopy.v1m54 Supprime! - C:\ProgramData\EncCopyCopy.vco3i Supprime! - C:\ProgramData\EncCopyCopy.veib4 Supprime! - C:\ProgramData\EncCopyCopy.vov8v Supprime! - C:\ProgramData\EncCopyCopy.vuazw Supprime! - C:\ProgramData\EncCopyCopy.wrd4c Supprime! - C:\ProgramData\EncCopyCopy.xqpnf Supprime! - C:\ProgramData\EncCopyCopy.xzm8l Supprime! - C:\ProgramData\EncCopyCopy.yotmy Supprime! - C:\ProgramData\EncCopyCopy.066kpi Supprime! - C:\ProgramData\EncCopyCopy.0crrzg Supprime! - C:\ProgramData\EncCopyCopy.17gjqs Supprime! - C:\ProgramData\EncCopyCopy.183cnh Supprime! - C:\ProgramData\EncCopyCopy.1g56qf Supprime! - C:\ProgramData\EncCopyCopy.2r1uo0 Supprime! - C:\ProgramData\EncCopyCopy.5gzees Supprime! - C:\ProgramData\EncCopyCopy.c8hefj Supprime! - C:\ProgramData\EncCopyCopy.cnwmv6 Supprime! - C:\ProgramData\EncCopyCopy.ct75t1 Supprime! - C:\ProgramData\EncCopyCopy.fn25xl Supprime! - C:\ProgramData\EncCopyCopy.g88gpr Supprime! - C:\ProgramData\EncCopyCopy.gm5sse Supprime! - C:\ProgramData\EncCopyCopy.hgoena Supprime! - C:\ProgramData\EncCopyCopy.iz94po Supprime! - C:\ProgramData\EncCopyCopy.j4hi16 Supprime! - C:\ProgramData\EncCopyCopy.jeqbfe Supprime! - C:\ProgramData\EncCopyCopy.k4sj0z Supprime! - C:\ProgramData\EncCopyCopy.moldi5 Supprime! - C:\ProgramData\EncCopyCopy.mv8di5 Supprime! - C:\ProgramData\EncCopyCopy.mzq8dk Supprime! - C:\ProgramData\EncCopyCopy.nlhkoc Supprime! - C:\ProgramData\EncCopyCopy.nx2xan Supprime! - C:\ProgramData\EncCopyCopy.o6qo39 Supprime! - C:\ProgramData\EncCopyCopy.oihk8j Supprime! - C:\ProgramData\EncCopyCopy.qublut Supprime! - C:\ProgramData\EncCopyCopy.qv8r9v Supprime! - C:\ProgramData\EncCopyCopy.r2hadd Supprime! - C:\ProgramData\EncCopyCopy.rjaz0o Supprime! - C:\ProgramData\EncCopyCopy.ttepez Supprime! - C:\ProgramData\EncCopyCopy.w9bz57 Supprime! - C:\ProgramData\EncCopyCopy.zecn2a Supprime! - C:\ProgramData\Surf Pure Bore.nm51iy Supprime! - C:\ProgramData\EncCopyCopy.1j39x21 Supprime! - C:\ProgramData\EncCopyCopy.29tuqf0 Supprime! - C:\ProgramData\EncCopyCopy.3k0pblk Supprime! - C:\ProgramData\EncCopyCopy.3s6ch6e Supprime! - C:\ProgramData\EncCopyCopy.5oacb1m Supprime! - C:\ProgramData\EncCopyCopy.62kws6z Supprime! - C:\ProgramData\EncCopyCopy.8us8f6z Supprime! - C:\ProgramData\EncCopyCopy.9ad70da Supprime! - C:\ProgramData\EncCopyCopy.9qtasq5 Supprime! - C:\ProgramData\EncCopyCopy.dypbj1w Supprime! - C:\ProgramData\EncCopyCopy.ebtsw9p Supprime! - C:\ProgramData\EncCopyCopy.g8t720w Supprime! - C:\ProgramData\EncCopyCopy.gehef15 Supprime! - C:\ProgramData\EncCopyCopy.gj9hwqw Supprime! - C:\ProgramData\EncCopyCopy.him24fg Supprime! - C:\ProgramData\EncCopyCopy.jgi5iqr Supprime! - C:\ProgramData\EncCopyCopy.k6cgpf8 Supprime! - C:\ProgramData\EncCopyCopy.kg1rxbc Supprime! - C:\ProgramData\EncCopyCopy.ks4d5wy Supprime! - C:\ProgramData\EncCopyCopy.osovn85 Supprime! - C:\ProgramData\EncCopyCopy.rz8vpa9 Supprime! - C:\ProgramData\EncCopyCopy.sncsmpn Supprime! - C:\ProgramData\EncCopyCopy.tm8zev7 Supprime! - C:\ProgramData\EncCopyCopy.vxqidyx Supprime! - C:\ProgramData\EncCopyCopy.wa6k09u Supprime! - C:\ProgramData\EncCopyCopy.wa84a50 Supprime! - C:\ProgramData\EncCopyCopy.xztme07 Supprime! - C:\ProgramData\Poke admin tons bike - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans Local [29/11/2008|18:11] C:\Users\Elodie\AppData\Local\{7326CE9D-C0D2-433A-8A57-B7934EA13EC8} [30/08/2008|19:52] C:\Users\Elodie\AppData\Local\Acer Arcade Deluxe [30/08/2008|19:39] C:\Users\Elodie\AppData\Local\acer eNM [06/10/2008|12:07] C:\Users\Elodie\AppData\Local\Adobe [14/09/2008|14:01] C:\Users\Elodie\AppData\Local\Apple [11/10/2008|17:12] C:\Users\Elodie\AppData\Local\Apple Computer [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Application Data [30/08/2008|18:16] C:\Users\Elodie\AppData\Local\CyberLink [29/03/2009|02:26] C:\Users\Elodie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [23/11/2008|14:34] C:\Users\Elodie\AppData\Local\DVDivine [16/02/2009|11:52] C:\Users\Elodie\AppData\Local\ebaxvmr.bat [18/02/2009|21:19] C:\Users\Elodie\AppData\Local\eMule [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\GDIPFONTCACHEV1.DAT [30/08/2008|21:50] C:\Users\Elodie\AppData\Local\Google [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Historique [30/08/2008|18:16] C:\Users\Elodie\AppData\Local\HomeMedia [13/04/2009|14:21] C:\Users\Elodie\AppData\Local\IconCache.db [06/01/2009|01:10] C:\Users\Elodie\AppData\Local\live-player [09/03/2009|22:31] C:\Users\Elodie\AppData\Local\Microsoft [21/12/2008|12:00] C:\Users\Elodie\AppData\Local\Microsoft Games [01/02/2009|02:27] C:\Users\Elodie\AppData\Local\Mozilla [05/01/2009|16:39] C:\Users\Elodie\AppData\Local\Pando [03/09/2008|20:51] C:\Users\Elodie\AppData\Local\PlayMovie [30/08/2008|19:52] C:\Users\Elodie\AppData\Local\PowerCinema [13/04/2009|14:38] C:\Users\Elodie\AppData\Local\Temp [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Temporary Internet Files [19/10/2008|16:27] C:\Users\Elodie\AppData\Local\VirtualStore --------------------\\ Tâches planifiées dans C:\Windows\tasks [13/04/2009 14:22][--ah-----] C:\Windows\tasks\SA.DAT [13/04/2009 14:21][--a------] C:\Windows\tasks\SCHEDLGU.TXT --------------------\\ Listing des dossiers dans C:\ProgramData [16/10/2007|12:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [16/10/2007|12:01] C:\ProgramData\Adobe [14/09/2008|13:59] C:\ProgramData\Apple [09/03/2009|16:48] C:\ProgramData\Apple Computer [02/11/2006|15:02] C:\ProgramData\Application Data [26/11/2008|00:02] C:\ProgramData\Avira [30/08/2008|19:34] C:\ProgramData\Bureau [26/11/2008|17:38] C:\ProgramData\CheckPoint [31/08/2008|13:10] C:\ProgramData\CyberLink [02/11/2006|15:02] C:\ProgramData\Desktop [02/11/2006|15:02] C:\ProgramData\Documents [18/02/2009|21:19] C:\ProgramData\eMule [31/08/2008|00:17] C:\ProgramData\ezsidmv.dat [30/08/2008|19:34] C:\ProgramData\Favoris [02/11/2006|15:02] C:\ProgramData\Favorites [31/08/2008|00:12] C:\ProgramData\Forge of Games [26/11/2008|00:21] C:\ProgramData\F-Secure [30/08/2008|12:33] C:\ProgramData\fssg [30/08/2008|15:01] C:\ProgramData\Google [05/02/2009|00:52] C:\ProgramData\InstallShield [27/03/2009|01:29] C:\ProgramData\LauncherAccess.dt [27/11/2008|12:02] C:\ProgramData\Malwarebytes [30/08/2008|19:34] C:\ProgramData\Menu D‚marrer [17/03/2009|18:41] C:\ProgramData\Messenger Plus! [17/03/2009|16:41] C:\ProgramData\Microsoft [12/12/2008|18:53] C:\ProgramData\Microsoft Help [30/08/2008|19:34] C:\ProgramData\ModŠles [06/10/2008|12:00] C:\ProgramData\Office Genuine Advantage [28/01/2009|19:44] C:\ProgramData\oncereal [31/08/2008|00:16] C:\ProgramData\Skype [02/11/2006|15:02] C:\ProgramData\Start Menu [30/08/2008|21:15] C:\ProgramData\Symantec [06/09/2008|14:38] C:\ProgramData\TEMP [02/11/2006|15:02] C:\ProgramData\Templates [16/12/2008|19:05] C:\ProgramData\WLInstaller --------------------\\ Listing des dossiers dans C:\Program Files [16/02/2008|22:59] C:\Program Files\Acer Arcade Deluxe [06/09/2008|14:54] C:\Program Files\Acer GameZone [16/02/2008|23:23] C:\Program Files\Acer Inc [16/10/2007|12:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [16/10/2007|12:01] C:\Program Files\Adobe [26/11/2008|00:02] C:\Program Files\Avira [14/09/2008|14:03] C:\Program Files\Bonjour [02/10/2007|06:06] C:\Program Files\Broadcom [09/03/2009|16:50] C:\Program Files\Common Files [09/03/2009|16:46] C:\Program Files\CyberLink [04/01/2009|04:15] C:\Program Files\DivX [18/02/2009|21:19] C:\Program Files\eMule [30/08/2008|19:34] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [30/08/2008|16:49] C:\Program Files\Google [09/03/2009|16:46] C:\Program Files\InstallShield Installation Information [02/10/2007|05:46] C:\Program Files\Intel [01/10/2008|22:26] C:\Program Files\Internet Explorer [08/11/2008|01:54] C:\Program Files\Java [16/02/2008|23:26] C:\Program Files\Launch Manager [06/01/2009|16:08] C:\Program Files\Live-Player [27/11/2008|12:02] C:\Program Files\Malwarebytes' Anti-Malware [17/03/2009|17:39] C:\Program Files\Messenger Plus! Live [16/12/2008|14:11] C:\Program Files\Microsoft [30/08/2008|22:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [02/11/2006|14:37] C:\Program Files\Microsoft Games [16/10/2007|12:24] C:\Program Files\Microsoft Office [28/02/2009|20:53] C:\Program Files\Microsoft Silverlight [17/03/2009|14:42] C:\Program Files\Microsoft Works [16/10/2007|12:22] C:\Program Files\Microsoft.NET [01/10/2008|22:26] C:\Program Files\Movie Maker [13/04/2009|14:28] C:\Program Files\Mozilla Firefox [02/11/2006|14:37] C:\Program Files\MSBuild [17/03/2009|17:47] C:\Program Files\MSNFix [16/10/2007|11:51] C:\Program Files\MSXML 4.0 [09/03/2009|16:45] C:\Program Files\NewTech Infosystems [30/08/2008|21:17] C:\Program Files\Orange [06/09/2008|15:06] C:\Program Files\Orange HSS [10/02/2009|20:08] C:\Program Files\PhotoFiltre [22/01/2009|16:58] C:\Program Files\PhotoScape [20/02/2009|23:49] C:\Program Files\Real [02/10/2007|06:03] C:\Program Files\Realtek [02/11/2006|14:37] C:\Program Files\Reference Assemblies [18/02/2009|16:45] C:\Program Files\Samsung [31/08/2008|00:16] C:\Program Files\Skype [02/10/2007|06:05] C:\Program Files\Synaptics [05/03/2009|22:09] C:\Program Files\TeamViewer [02/11/2006|15:01] C:\Program Files\Uninstall Information [05/11/2008|01:01] C:\Program Files\uTorrent [01/02/2009|14:18] C:\Program Files\Veoh Networks [06/09/2008|19:34] C:\Program Files\VideoLAN [01/10/2008|22:26] C:\Program Files\Windows Calendar [01/10/2008|22:26] C:\Program Files\Windows Collaboration [01/10/2008|22:26] C:\Program Files\Windows Defender [01/10/2008|22:26] C:\Program Files\Windows Journal [17/03/2009|17:38] C:\Program Files\Windows Live [10/02/2009|20:33] C:\Program Files\Windows Live SkyDrive [11/03/2009|13:39] C:\Program Files\Windows Mail [11/03/2009|13:39] C:\Program Files\Windows Media Player [30/08/2008|19:34] C:\Program Files\Windows NT [01/10/2008|22:26] C:\Program Files\Windows Photo Gallery [01/10/2008|22:26] C:\Program Files\Windows Sidebar [24/11/2008|17:55] C:\Program Files\WinRAR --------------------\\ Listing des dossiers dans C:\Program Files\Common Files [16/10/2007|12:01] C:\Program Files\Common Files\Adobe [16/10/2007|12:22] C:\Program Files\Common Files\DESIGNER [05/02/2009|00:51] C:\Program Files\Common Files\InstallShield [08/11/2008|01:52] C:\Program Files\Common Files\Java [16/10/2007|12:07] C:\Program Files\Common Files\LightScribe [21/02/2009|01:39] C:\Program Files\Common Files\microsoft shared [16/10/2007|12:07] C:\Program Files\Common Files\NewTech Infosystems [06/09/2008|20:07] C:\Program Files\Common Files\PX Storage Engine [09/03/2009|16:39] C:\Program Files\Common Files\Real [02/11/2006|13:18] C:\Program Files\Common Files\Services [31/08/2008|00:16] C:\Program Files\Common Files\Skype [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines [30/08/2008|21:16] C:\Program Files\Common Files\Symantec Shared [01/10/2008|22:26] C:\Program Files\Common Files\System [16/12/2008|13:57] C:\Program Files\Common Files\Windows Live [30/08/2008|22:12] C:\Program Files\Common Files\WindowsLiveInstaller --------------------\\ Process ( 79 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-04-13 14:39:19 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 170 --------------------\\ Recherche d'autres infections C:\Program Files\Live-Player C:\Program Files\Live-Player\data C:\Program Files\Live-Player\live-player.exe C:\Program Files\Live-Player\SkinCrafterDll.dll C:\Program Files\Live-Player\skins C:\Program Files\Live-Player\sqlite3.dll C:\Users\Elodie\AppData\Local\live-player C:\Users\Elodie\AppData\Local\live-player\flv.swf C:\Users\Elodie\AppData\Local\live-player\liveplayer.s3db C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url [b]==> EGDACCESS <==/b [F:1663][D:132]-> C:\Users\Elodie\AppData\Local\Temp [F:155][D:1]-> C:\Users\Elodie\AppData\Roaming\MICROS~1\Windows\Cookies [F:874][D:4]-> C:\Users\Elodie\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:4][D:3]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 13/04/2009|14:27 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 13/04/2009|14:41 - Option : [2] --------------------\\ Fin du rapport a 14:41:11 [ UAC => 1 ] --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz ) BIOS : Ver 1.00PARTTBL USER : Elodie ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Not Activated) Firewall : Norton Internet Security 2007 (Not Activated) C:\ (Local Disk) - NTFS - Total:69 Go (Free:37 Go) D:\ (Local Disk) - NTFS - Total:69 Go (Free:59 Go) E:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 13/04/2009|14:38 ) [ UAC => 1 ] \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\ProgramData\Poke admin tons bike\coal dent.exe Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_481b.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_5f19.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_90f0.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_a260.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_a950.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_ab8b.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_b3d0.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_c9be.tmp Supprime! - C:\Users\Elodie\AppData\Local\Temp\msgpl_d6d7.tmp Supprime! - C:\ProgramData\EncCopyCopy.0azof Supprime! - C:\ProgramData\EncCopyCopy.0f6f3 Supprime! - C:\ProgramData\EncCopyCopy.31uel Supprime! - C:\ProgramData\EncCopyCopy.3ocpj Supprime! - C:\ProgramData\EncCopyCopy.4gqb4 Supprime! - C:\ProgramData\EncCopyCopy.4pv2g Supprime! - C:\ProgramData\EncCopyCopy.53rvz Supprime! - C:\ProgramData\EncCopyCopy.55mli Supprime! - C:\ProgramData\EncCopyCopy.6hzlg Supprime! - C:\ProgramData\EncCopyCopy.82xc7 Supprime! - C:\ProgramData\EncCopyCopy.85cze Supprime! - C:\ProgramData\EncCopyCopy.atmy1 Supprime! - C:\ProgramData\EncCopyCopy.f67v4 Supprime! - C:\ProgramData\EncCopyCopy.fvao8 Supprime! - C:\ProgramData\EncCopyCopy.g29xe Supprime! - C:\ProgramData\EncCopyCopy.ggvsb Supprime! - C:\ProgramData\EncCopyCopy.i4ms4 Supprime! - C:\ProgramData\EncCopyCopy.iuizq Supprime! - C:\ProgramData\EncCopyCopy.iwy1y Supprime! - C:\ProgramData\EncCopyCopy.k115d Supprime! - C:\ProgramData\EncCopyCopy.l8ier Supprime! - C:\ProgramData\EncCopyCopy.mv99x Supprime! - C:\ProgramData\EncCopyCopy.n75rp Supprime! - C:\ProgramData\EncCopyCopy.o52ib Supprime! - C:\ProgramData\EncCopyCopy.odpbq Supprime! - C:\ProgramData\EncCopyCopy.psfhm Supprime! - C:\ProgramData\EncCopyCopy.sr0ue Supprime! - C:\ProgramData\EncCopyCopy.te8fd Supprime! - C:\ProgramData\EncCopyCopy.uhbup Supprime! - C:\ProgramData\EncCopyCopy.ui92y Supprime! - C:\ProgramData\EncCopyCopy.v1m54 Supprime! - C:\ProgramData\EncCopyCopy.vco3i Supprime! - C:\ProgramData\EncCopyCopy.veib4 Supprime! - C:\ProgramData\EncCopyCopy.vov8v Supprime! - C:\ProgramData\EncCopyCopy.vuazw Supprime! - C:\ProgramData\EncCopyCopy.wrd4c Supprime! - C:\ProgramData\EncCopyCopy.xqpnf Supprime! - C:\ProgramData\EncCopyCopy.xzm8l Supprime! - C:\ProgramData\EncCopyCopy.yotmy Supprime! - C:\ProgramData\EncCopyCopy.066kpi Supprime! - C:\ProgramData\EncCopyCopy.0crrzg Supprime! - C:\ProgramData\EncCopyCopy.17gjqs Supprime! - C:\ProgramData\EncCopyCopy.183cnh Supprime! - C:\ProgramData\EncCopyCopy.1g56qf Supprime! - C:\ProgramData\EncCopyCopy.2r1uo0 Supprime! - C:\ProgramData\EncCopyCopy.5gzees Supprime! - C:\ProgramData\EncCopyCopy.c8hefj Supprime! - C:\ProgramData\EncCopyCopy.cnwmv6 Supprime! - C:\ProgramData\EncCopyCopy.ct75t1 Supprime! - C:\ProgramData\EncCopyCopy.fn25xl Supprime! - C:\ProgramData\EncCopyCopy.g88gpr Supprime! - C:\ProgramData\EncCopyCopy.gm5sse Supprime! - C:\ProgramData\EncCopyCopy.hgoena Supprime! - C:\ProgramData\EncCopyCopy.iz94po Supprime! - C:\ProgramData\EncCopyCopy.j4hi16 Supprime! - C:\ProgramData\EncCopyCopy.jeqbfe Supprime! - C:\ProgramData\EncCopyCopy.k4sj0z Supprime! - C:\ProgramData\EncCopyCopy.moldi5 Supprime! - C:\ProgramData\EncCopyCopy.mv8di5 Supprime! - C:\ProgramData\EncCopyCopy.mzq8dk Supprime! - C:\ProgramData\EncCopyCopy.nlhkoc Supprime! - C:\ProgramData\EncCopyCopy.nx2xan Supprime! - C:\ProgramData\EncCopyCopy.o6qo39 Supprime! - C:\ProgramData\EncCopyCopy.oihk8j Supprime! - C:\ProgramData\EncCopyCopy.qublut Supprime! - C:\ProgramData\EncCopyCopy.qv8r9v Supprime! - C:\ProgramData\EncCopyCopy.r2hadd Supprime! - C:\ProgramData\EncCopyCopy.rjaz0o Supprime! - C:\ProgramData\EncCopyCopy.ttepez Supprime! - C:\ProgramData\EncCopyCopy.w9bz57 Supprime! - C:\ProgramData\EncCopyCopy.zecn2a Supprime! - C:\ProgramData\Surf Pure Bore.nm51iy Supprime! - C:\ProgramData\EncCopyCopy.1j39x21 Supprime! - C:\ProgramData\EncCopyCopy.29tuqf0 Supprime! - C:\ProgramData\EncCopyCopy.3k0pblk Supprime! - C:\ProgramData\EncCopyCopy.3s6ch6e Supprime! - C:\ProgramData\EncCopyCopy.5oacb1m Supprime! - C:\ProgramData\EncCopyCopy.62kws6z Supprime! - C:\ProgramData\EncCopyCopy.8us8f6z Supprime! - C:\ProgramData\EncCopyCopy.9ad70da Supprime! - C:\ProgramData\EncCopyCopy.9qtasq5 Supprime! - C:\ProgramData\EncCopyCopy.dypbj1w Supprime! - C:\ProgramData\EncCopyCopy.ebtsw9p Supprime! - C:\ProgramData\EncCopyCopy.g8t720w Supprime! - C:\ProgramData\EncCopyCopy.gehef15 Supprime! - C:\ProgramData\EncCopyCopy.gj9hwqw Supprime! - C:\ProgramData\EncCopyCopy.him24fg Supprime! - C:\ProgramData\EncCopyCopy.jgi5iqr Supprime! - C:\ProgramData\EncCopyCopy.k6cgpf8 Supprime! - C:\ProgramData\EncCopyCopy.kg1rxbc Supprime! - C:\ProgramData\EncCopyCopy.ks4d5wy Supprime! - C:\ProgramData\EncCopyCopy.osovn85 Supprime! - C:\ProgramData\EncCopyCopy.rz8vpa9 Supprime! - C:\ProgramData\EncCopyCopy.sncsmpn Supprime! - C:\ProgramData\EncCopyCopy.tm8zev7 Supprime! - C:\ProgramData\EncCopyCopy.vxqidyx Supprime! - C:\ProgramData\EncCopyCopy.wa6k09u Supprime! - C:\ProgramData\EncCopyCopy.wa84a50 Supprime! - C:\ProgramData\EncCopyCopy.xztme07 Supprime! - C:\ProgramData\Poke admin tons bike - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans Local [29/11/2008|18:11] C:\Users\Elodie\AppData\Local\{7326CE9D-C0D2-433A-8A57-B7934EA13EC8} [30/08/2008|19:52] C:\Users\Elodie\AppData\Local\Acer Arcade Deluxe [30/08/2008|19:39] C:\Users\Elodie\AppData\Local\acer eNM [06/10/2008|12:07] C:\Users\Elodie\AppData\Local\Adobe [14/09/2008|14:01] C:\Users\Elodie\AppData\Local\Apple [11/10/2008|17:12] C:\Users\Elodie\AppData\Local\Apple Computer [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Application Data [30/08/2008|18:16] C:\Users\Elodie\AppData\Local\CyberLink [29/03/2009|02:26] C:\Users\Elodie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [23/11/2008|14:34] C:\Users\Elodie\AppData\Local\DVDivine [16/02/2009|11:52] C:\Users\Elodie\AppData\Local\ebaxvmr.bat [18/02/2009|21:19] C:\Users\Elodie\AppData\Local\eMule [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\GDIPFONTCACHEV1.DAT [30/08/2008|21:50] C:\Users\Elodie\AppData\Local\Google [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Historique [30/08/2008|18:16] C:\Users\Elodie\AppData\Local\HomeMedia [13/04/2009|14:21] C:\Users\Elodie\AppData\Local\IconCache.db [06/01/2009|01:10] C:\Users\Elodie\AppData\Local\live-player [09/03/2009|22:31] C:\Users\Elodie\AppData\Local\Microsoft [21/12/2008|12:00] C:\Users\Elodie\AppData\Local\Microsoft Games [01/02/2009|02:27] C:\Users\Elodie\AppData\Local\Mozilla [05/01/2009|16:39] C:\Users\Elodie\AppData\Local\Pando [03/09/2008|20:51] C:\Users\Elodie\AppData\Local\PlayMovie [30/08/2008|19:52] C:\Users\Elodie\AppData\Local\PowerCinema [13/04/2009|14:38] C:\Users\Elodie\AppData\Local\Temp [30/08/2008|19:38] C:\Users\Elodie\AppData\Local\Temporary Internet Files [19/10/2008|16:27] C:\Users\Elodie\AppData\Local\VirtualStore --------------------\\ Tâches planifiées dans C:\Windows\tasks [13/04/2009 14:22][--ah-----] C:\Windows\tasks\SA.DAT [13/04/2009 14:21][--a------] C:\Windows\tasks\SCHEDLGU.TXT --------------------\\ Listing des dossiers dans C:\ProgramData [16/10/2007|12:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [16/10/2007|12:01] C:\ProgramData\Adobe [14/09/2008|13:59] C:\ProgramData\Apple [09/03/2009|16:48] C:\ProgramData\Apple Computer [02/11/2006|15:02] C:\ProgramData\Application Data [26/11/2008|00:02] C:\ProgramData\Avira [30/08/2008|19:34] C:\ProgramData\Bureau [26/11/2008|17:38] C:\ProgramData\CheckPoint [31/08/2008|13:10] C:\ProgramData\CyberLink [02/11/2006|15:02] C:\ProgramData\Desktop [02/11/2006|15:02] C:\ProgramData\Documents [18/02/2009|21:19] C:\ProgramData\eMule [31/08/2008|00:17] C:\ProgramData\ezsidmv.dat [30/08/2008|19:34] C:\ProgramData\Favoris [02/11/2006|15:02] C:\ProgramData\Favorites [31/08/2008|00:12] C:\ProgramData\Forge of Games [26/11/2008|00:21] C:\ProgramData\F-Secure [30/08/2008|12:33] C:\ProgramData\fssg [30/08/2008|15:01] C:\ProgramData\Google [05/02/2009|00:52] C:\ProgramData\InstallShield [27/03/2009|01:29] C:\ProgramData\LauncherAccess.dt [27/11/2008|12:02] C:\ProgramData\Malwarebytes [30/08/2008|19:34] C:\ProgramData\Menu D‚marrer [17/03/2009|18:41] C:\ProgramData\Messenger Plus! [17/03/2009|16:41] C:\ProgramData\Microsoft [12/12/2008|18:53] C:\ProgramData\Microsoft Help [30/08/2008|19:34] C:\ProgramData\ModŠles [06/10/2008|12:00] C:\ProgramData\Office Genuine Advantage [28/01/2009|19:44] C:\ProgramData\oncereal [31/08/2008|00:16] C:\ProgramData\Skype [02/11/2006|15:02] C:\ProgramData\Start Menu [30/08/2008|21:15] C:\ProgramData\Symantec [06/09/2008|14:38] C:\ProgramData\TEMP [02/11/2006|15:02] C:\ProgramData\Templates [16/12/2008|19:05] C:\ProgramData\WLInstaller --------------------\\ Listing des dossiers dans C:\Program Files [16/02/2008|22:59] C:\Program Files\Acer Arcade Deluxe [06/09/2008|14:54] C:\Program Files\Acer GameZone [16/02/2008|23:23] C:\Program Files\Acer Inc [16/10/2007|12:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [16/10/2007|12:01] C:\Program Files\Adobe [26/11/2008|00:02] C:\Program Files\Avira [14/09/2008|14:03] C:\Program Files\Bonjour [02/10/2007|06:06] C:\Program Files\Broadcom [09/03/2009|16:50] C:\Program Files\Common Files [09/03/2009|16:46] C:\Program Files\CyberLink [04/01/2009|04:15] C:\Program Files\DivX [18/02/2009|21:19] C:\Program Files\eMule [30/08/2008|19:34] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [30/08/2008|16:49] C:\Program Files\Google [09/03/2009|16:46] C:\Program Files\InstallShield Installation Information [02/10/2007|05:46] C:\Program Files\Intel [01/10/2008|22:26] C:\Program Files\Internet Explorer [08/11/2008|01:54] C:\Program Files\Java [16/02/2008|23:26] C:\Program Files\Launch Manager [06/01/2009|16:08] C:\Program Files\Live-Player [27/11/2008|12:02] C:\Program Files\Malwarebytes' Anti-Malware [17/03/2009|17:39] C:\Program Files\Messenger Plus! Live [16/12/2008|14:11] C:\Program Files\Microsoft [30/08/2008|22:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [02/11/2006|14:37] C:\Program Files\Microsoft Games [16/10/2007|12:24] C:\Program Files\Microsoft Office [28/02/2009|20:53] C:\Program Files\Microsoft Silverlight [17/03/2009|14:42] C:\Program Files\Microsoft Works [16/10/2007|12:22] C:\Program Files\Microsoft.NET [01/10/2008|22:26] C:\Program Files\Movie Maker [13/04/2009|14:28] C:\Program Files\Mozilla Firefox [02/11/2006|14:37] C:\Program Files\MSBuild [17/03/2009|17:47] C:\Program Files\MSNFix [16/10/2007|11:51] C:\Program Files\MSXML 4.0 [09/03/2009|16:45] C:\Program Files\NewTech Infosystems [30/08/2008|21:17] C:\Program Files\Orange [06/09/2008|15:06] C:\Program Files\Orange HSS [10/02/2009|20:08] C:\Program Files\PhotoFiltre [22/01/2009|16:58] C:\Program Files\PhotoScape [20/02/2009|23:49] C:\Program Files\Real [02/10/2007|06:03] C:\Program Files\Realtek [02/11/2006|14:37] C:\Program Files\Reference Assemblies [18/02/2009|16:45] C:\Program Files\Samsung [31/08/2008|00:16] C:\Program Files\Skype [02/10/2007|06:05] C:\Program Files\Synaptics [05/03/2009|22:09] C:\Program Files\TeamViewer [02/11/2006|15:01] C:\Program Files\Uninstall Information [05/11/2008|01:01] C:\Program Files\uTorrent [01/02/2009|14:18] C:\Program Files\Veoh Networks [06/09/2008|19:34] C:\Program Files\VideoLAN [01/10/2008|22:26] C:\Program Files\Windows Calendar [01/10/2008|22:26] C:\Program Files\Windows Collaboration [01/10/2008|22:26] C:\Program Files\Windows Defender [01/10/2008|22:26] C:\Program Files\Windows Journal [17/03/2009|17:38] C:\Program Files\Windows Live [10/02/2009|20:33] C:\Program Files\Windows Live SkyDrive [11/03/2009|13:39] C:\Program Files\Windows Mail [11/03/2009|13:39] C:\Program Files\Windows Media Player [30/08/2008|19:34] C:\Program Files\Windows NT [01/10/2008|22:26] C:\Program Files\Windows Photo Gallery [01/10/2008|22:26] C:\Program Files\Windows Sidebar [24/11/2008|17:55] C:\Program Files\WinRAR --------------------\\ Listing des dossiers dans C:\Program Files\Common Files [16/10/2007|12:01] C:\Program Files\Common Files\Adobe [16/10/2007|12:22] C:\Program Files\Common Files\DESIGNER [05/02/2009|00:51] C:\Program Files\Common Files\InstallShield [08/11/2008|01:52] C:\Program Files\Common Files\Java [16/10/2007|12:07] C:\Program Files\Common Files\LightScribe [21/02/2009|01:39] C:\Program Files\Common Files\microsoft shared [16/10/2007|12:07] C:\Program Files\Common Files\NewTech Infosystems [06/09/2008|20:07] C:\Program Files\Common Files\PX Storage Engine [09/03/2009|16:39] C:\Program Files\Common Files\Real [02/11/2006|13:18] C:\Program Files\Common Files\Services [31/08/2008|00:16] C:\Program Files\Common Files\Skype [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines [30/08/2008|21:16] C:\Program Files\Common Files\Symantec Shared [01/10/2008|22:26] C:\Program Files\Common Files\System [16/12/2008|13:57] C:\Program Files\Common Files\Windows Live [30/08/2008|22:12] C:\Program Files\Common Files\WindowsLiveInstaller --------------------\\ Process ( 79 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-04-13 14:39:19 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 170 --------------------\\ Recherche d'autres infections C:\Program Files\Live-Player C:\Program Files\Live-Player\data C:\Program Files\Live-Player\live-player.exe C:\Program Files\Live-Player\SkinCrafterDll.dll C:\Program Files\Live-Player\skins C:\Program Files\Live-Player\sqlite3.dll C:\Users\Elodie\AppData\Local\live-player C:\Users\Elodie\AppData\Local\live-player\flv.swf C:\Users\Elodie\AppData\Local\live-player\liveplayer.s3db C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url [b]==> EGDACCESS <==/b [F:1663][D:132]-> C:\Users\Elodie\AppData\Local\Temp [F:155][D:1]-> C:\Users\Elodie\AppData\Roaming\MICROS~1\Windows\Cookies [F:874][D:4]-> C:\Users\Elodie\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:4][D:3]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 13/04/2009|14:27 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 13/04/2009|14:41 - Option : [2] --------------------\\ Fin du rapport a 14:41:11 [ UAC => 1 ] oila ce que tu m'as demandé :) j'attend la suite si il y en a une :p

- Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le Bureau. - Double-clique sur Navilog1.exe afin de lancer l'installation. - Si le fix ne se lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le Bureau. - Appuie sur F ou f puis valide par Entrée. - Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options. - Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix. - Patiente jusqu'au message : *** Analyse terminée le ..... *** - Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse. - Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

rapport navilog : Search Navipromo version 3.7.6 commencé le 13/04/2009 à 14:49:10,05 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz ) BIOS : Ver 1.00PARTTBL USER : Elodie ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Not Activated) Firewall : Norton Internet Security 2007 (Not Activated) C:\ (Local Disk) - NTFS - Total:69 Go (Free:37 Go) D:\ (Local Disk) - NTFS - Total:69 Go (Free:59 Go) E:\ (CD or DVD) Recherche executé en mode normal *** Recherche dossiers dans "C:\Windows" *** *** Recherche dossiers dans "C:\Program Files" *** ...\Live-Player trouvé ! *** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" *** ...\Live-Player trouvé ! *** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" *** *** Recherche dossiers dans "C:\ProgramData" *** *** Recherche dossiers dans "c:\users\elodie\appdata\roaming\micros~1\windows\startm~1\programs" *** *** Recherche dossiers dans "C:\Users\Elodie\AppData\Local\virtualstore\Program Files" *** *** Recherche dossiers dans "C:\Users\Elodie\AppData\Local" *** ...\Live-Player trouvé ! *** Recherche dossiers dans "C:\Users\Elodie\AppData\Roaming" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "C:\Windows\system32" * * Recherche dans "C:\Users\Elodie\AppData\Local\Microsoft" * * Recherche dans "C:\Users\Elodie\AppData\Local\virtualstore\windows\system32" * * Recherche dans "C:\Users\Elodie\AppData\Local" * *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** !! Les clés trouvées ne sont pas forcément infectées !! [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ecqoi"="\"c:\\users\\elodie\\appdata\\local\\ecqoi.exe\" ecqoi" *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "C:\Windows\system32" : * Dans "C:\Users\Elodie\AppData\Local\Microsoft" : * Dans "C:\Users\Elodie\AppData\Local\virtualstore\windows\system32" : * Dans "C:\Users\Elodie\AppData\Local" : 3)Recherche Certificats : Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat Montorgueil absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche autres dossiers et fichiers connus : *** Analyse terminée le 13/04/2009 à 15:00:25,32 *** en attente de la marche à suivre :p

---> Relance Navilog1, fais l'option 2 et poste le rapport (C:\cleannavi.txt).

Clean Navipromo version 3.7.6 commencé le 13/04/2009 à 15:10:06,75 Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz ) BIOS : Ver 1.00PARTTBL USER : Elodie ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2007 (Not Activated) Firewall : Norton Internet Security 2007 (Not Activated) C:\ (Local Disk) - NTFS - Total:69 Go (Free:37 Go) D:\ (Local Disk) - NTFS - Total:69 Go (Free:59 Go) E:\ (CD or DVD) Mode suppression automatique avec prise en charge résultats Catchme et GNS Nettoyage exécuté au redémarrage de l'ordinateur *** fsbl1.txt non trouvé *** (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche) *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans "C:\Windows\System32" * * Suppression dans "C:\Users\Elodie\AppData\Local\Microsoft" * * Suppression dans "C:\Users\Elodie\AppData\Local\virtualstore\windows\system32" * * Suppression dans "C:\Users\Elodie\AppData\Local" * *** Suppression dossiers dans "C:\Windows" *** *** Suppression dossiers dans "C:\Program Files" *** ...\Live-Player ...suppression... ...\Live-Player supprimé ! *** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" *** ...\Live-Player ...suppression... ...\Live-Player supprimé ! *** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1" *** *** Suppression dossiers dans "C:\ProgramData" *** *** Suppression dossiers dans c:\users\elodie\appdata\roaming\micros~1\windows\startm~1\programs *** *** Suppression dossiers dans "C:\Users\Elodie\AppData\Local\virtualstore\Program Files" *** *** Suppression dossiers dans "C:\Users\Elodie\AppData\Local" *** *** Suppression dossiers dans "C:\Users\Elodie\AppData\Roaming" *** *** Suppression fichiers *** *** Suppression fichiers temporaires *** Nettoyage contenu C:\Windows\Temp effectué ! Nettoyage contenu C:\Users\Elodie\AppData\Local\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans "C:\Windows\system32" * * Dans "C:\Users\Elodie\AppData\Local\Microsoft" * * Dans "C:\Users\Elodie\AppData\Local\virtualstore\windows\system32" * * Dans "C:\Users\Elodie\AppData\Local" * *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat Montorgueil absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltdt absent ! *** Recherche autres dossiers et fichiers connus *** *** Nettoyage terminé le 13/04/2009 à 15:15:43,61 *** Voila en attente de la marche a suivre :)

--> Désinstalle Navilog1. --> Télécharge DirLook sur ton Bureau. --> Clique droit sur DirLook.exe et choisis Exécuter en tant qu'administrateur. --> Copie le texte ci-dessous : C:\ProgramData\oncereal --> Dans la petite fenêtre de DirLook, faire un clic droit dans la zone blanche et choisir Coller. Note : les lignes sélectionnées précédemment doivent avoir été recopiées dans la zone blanche de DirLook. --> Clique sur le bouton DirLook pour lancer la recherche. Lorsque l'outil a terminé cette recherche, le Bloc-notes s'ouvre. Note : Dans le Bloc-notes, vérifie dans le menu Format (en haut) que l'option "Retour automatique à la ligne" n'est pas cochée. --> Enregistre le rapport sous le nom DirLook1.txt et ferme le Bloc-notes. --> Ferme DirLook en cliquant sur le bouton Exit puis poste le rapport.

DirLook.exe v2.0 by jpshortstuff Log created at 15:43 on 13/04/2009 ==================================[b] Contents of "C:\ProgramData\oncereal" [/b] [b][color=blue]---FOLDERS---[/b][/color] (none found) [b][color=blue]---FILES---[/b][/color] (none found) ================================== [b][color=blue]=EOF=[/b][/color] voila j'attends la marche a suivre :)

Problème pub intenpestive - Page 2

Résolu

Réponse 21 / 22

Destrio5 Messages postés 99820 Date d'inscription Statut Modérateur Dernière intervention 10 323

1/

---> Désinstalle HijackThis.

---> Télécharge OTCleanIt sur ton Bureau :
* Clique droit sur OTCleanIt et choisis Exécuter en tant qu'administrateur.
* Clique sur CleanUp! puis clique sur Yes à la fenêtre Confirm.
* Redémarre ton PC comme demandé.

2/

---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

3/

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème.

==Prévention==

Réactive l'UAC si ce n'est pas déjà fait.

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension NoScript pour plus de sécurité.

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien

Sois plus vigilant(e) sur Internet ;)

Réponse 22 / 22

Evyloo Messages postés 13 Date d'inscription Statut Membre

Merci je vais faire tout ce que tu m'as dis et je te remercie car je n'est plus ces pubs qui apparaissent tout le temps. Heureusement que vous êtes la pour nous aider.

Bonne fin de journée a toi :)

Evyloo

Discussions similaires

Ouvrir un fichier .pub sans Publisher

Ouvrir document Publisher sans Publisher

lire un fichier .pub

Lire, afficher, exécuter un fichier *.pub sans Publisher

Recherche musique air : ta, ti, tatati, tatati et tatata

Discussions similaires

Newsletters