Sujet Précédent Sujet Suivant

Pc rame (lire: Hijackthis)

Fermé
guevork22 - 1 juin 2009 à 20:30
 guevork22 - 4 juin 2009 à 18:49
Bonjour,
Pourriez vous m'aider,mon pc rame...j'ai le resultat (je crois) de hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:24:32, on 01.06.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\gearsec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Maxtor\Sync\SyncServices.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\Fichiers communs\Yandex\Yupdate\yupdate.exe
C:\Documents and Settings\Gaguik\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Download Master\dmaster.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://mail.ru/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {83821C2B-32A8-4DD7-B6D4-44309A78E668} - C:\Program Files\Mail.Ru\Agent\Mra\dll\newmrasearch.dll
R3 - URLSearchHook: Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: DM Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - C:\Program Files\Download Master\dmbar.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O3 - Toolbar: Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Яндекс.Бар - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nurb long for chic] C:\Documents and Settings\All Users\Application Data\FirstKeepNurbLong\adminknob.exe
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [eSnips] "C:\Downloads\ClientGW.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [D-Link D-Link Wireless N DWA-140] C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [MAgent] C:\Program Files\Mail.Ru\Agent\MAgent.exe -LM
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [VoipCheapCom] "C:\Program Files\VoipCheapCom\VoipCheapCom.exe" -nosplash -minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [morewin] C:\DOCUME~1\Gaguik\APPLIC~1\GRAMVI~1\mpeg heck.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Documents and Settings\Gaguik\Mes documents\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\WINDOWS\TEMP\E_SBD4.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [Yupdate!] "C:\Program Files\Fichiers communs\Yandex\Yupdate\yupdate.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Gaguik\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] ~"C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [Download Master] C:\Program Files\Download Master\dmaster.exe -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x08da -f video -m logitech -d 11.0.0.1213 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x08da -f video -m logitech -d 11.0.0.1213 (User 'Default user')
O4 - Startup: Mixer.lnk = C:\Program Files\SoundFaction\Mixer\Mixer.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Закачать ВСЕ при помощи Download Master - C:\Program Files\Download Master\dmieall.htm
O8 - Extra context menu item: Закачать при помощи Download Master - C:\Program Files\Download Master\dmie.htm
O8 - Extra context menu item: Найти в интернете - res://C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll/282
O8 - Extra context menu item: Найти в словарях - res://C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll/283
O9 - Extra button: Mail.Ru Агент - {7558b7e5-7b26-4201-bedb-00d5ff534523} - C:\Program Files\Mail.Ru\Agent\magent.exe
O9 - Extra 'Tools' menuitem: Mail.Ru Агент - {7558b7e5-7b26-4201-bedb-00d5ff534523} - C:\Program Files\Mail.Ru\Agent\magent.exe
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {53B8B406-42E4-4DD3-96E7-9DEC8CEB3DD8} (ICQVideoControl Class) - http://xtraz.icq.com/xtraz/activex/ICQVideoControl.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15106/CTPID.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: tuvsqrs - tuvsqrs.dll (file missing)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files\Maxtor\Sync\SyncServices.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O24 - Desktop Component 0: (no name) - http://www.pix3l.net/wallpapers/wall/1193613480_Leopardgrassblade_2560x1600_23.jpg
A voir également:

8 réponses

Réponse 1 / 8
^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
1 juin 2009 à 20:44
Salut

Je regarde et je re
0
guevork22
2 juin 2009 à 13:57
OK.Merci
0
Réponse 2 / 8
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231
2 juin 2009 à 14:21
Bonjour

Marie ayant dû s'absenter, avec son accord, je prends la suite :

Télécharge Lop S&D.exe sur ton Bureau.

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)


Tutorial ( aide ) : http://bibou0007.com/outils-specifiques-f78/tuto-lop-sd-t956.htm
0
guevork22
2 juin 2009 à 19:08
Bonjour. Voici le rapport:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Gaguik ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.5 (Activated)
Firewall : ZoneAlarm Firewall 7.0.483.000 (Activated)
C:\ (Local Disk) - NTFS - Total:113 Go (Free:51 Go)
D:\ (Local Disk) - FAT32 - Total:113 Go (Free:113 Go)
E:\ (CD or DVD)
F:\ (USB)
H:\ (USB)
I:\ (Local Disk) - NTFS - Total:698 Go (Free:503 Go)
J:\ (USB)
K:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 02.06.2009|18:57 )

--------------------\\ Listing des dossiers dans APPLIC~1

[01.11.2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01.11.2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[20.02.2009|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[02.03.2009|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[20.04.2009|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[21.07.2007|22:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[17.03.2009|01:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AlawarWrapper
[11.09.2008|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30.03.2007|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[20.02.2009|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[26.05.2007|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[18.07.2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
[22.01.2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[26.02.2007|22:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[05.09.2008|13:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Egoset
[23.03.2008|12:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[18.04.2009|15:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Escape From Paradise_11
[18.07.2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FirstKeepNurbLong
[28.01.2009|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreshGames
[18.02.2009|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
[03.01.2009|12:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[01.02.2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[15.10.2007|16:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[20.01.2009|13:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[05.03.2007|14:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[17.10.2008|13:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
[20.02.2009|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[20.02.2009|13:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[19.02.2009|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Maxtor
[16.02.2009|18:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09.04.2009|14:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[26.06.2008|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[21.01.2007|19:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[08.01.2009|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon
[22.03.2008|00:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[29.11.2008|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[20.01.2008|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[22.03.2009|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[20.02.2009|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[08.01.2009|17:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[23.03.2008|12:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[16.02.2007|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[22.02.2007|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[06.11.2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wmp
[13.02.2009|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[28.10.2008|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\‚ҐбҐ« п”Ґа¬ 2
[01.02.2009|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\‚ҐбҐ« п”Ґа¬ -ЏҐзҐ¬ЏЁжжг

[01.11.2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01.11.2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01.11.2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[08.01.2009|17:06] C:\DOCUME~1\Gaguik\APPLIC~1\.#
[18.04.2009|16:42] C:\DOCUME~1\Gaguik\APPLIC~1\Adobe
[23.02.2007|12:43] C:\DOCUME~1\Gaguik\APPLIC~1\AdobeUM
[11.09.2008|20:09] C:\DOCUME~1\Gaguik\APPLIC~1\Apple Computer
[08.03.2008|21:53] C:\DOCUME~1\Gaguik\APPLIC~1\AutoTransfer
[23.06.2008|23:47] C:\DOCUME~1\Gaguik\APPLIC~1\Azureus
[01.12.2008|20:18] C:\DOCUME~1\Gaguik\APPLIC~1\BeachPartyCraze
[23.10.2008|17:00] C:\DOCUME~1\Gaguik\APPLIC~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[04.11.2007|19:27] C:\DOCUME~1\Gaguik\APPLIC~1\ConvertTemp
[01.08.2008|21:25] C:\DOCUME~1\Gaguik\APPLIC~1\Creative
[15.04.2009|14:37] C:\DOCUME~1\Gaguik\APPLIC~1\CVitae
[26.01.2007|22:59] C:\DOCUME~1\Gaguik\APPLIC~1\CyberLink
[22.03.2008|13:49] C:\DOCUME~1\Gaguik\APPLIC~1\Datalayer
[05.07.2007|16:50] C:\DOCUME~1\Gaguik\APPLIC~1\DivX
[13.02.2007|21:09] C:\DOCUME~1\Gaguik\APPLIC~1\Download Master
[23.10.2008|17:40] C:\DOCUME~1\Gaguik\APPLIC~1\dvdcss
[23.03.2008|14:19] C:\DOCUME~1\Gaguik\APPLIC~1\EPSON
[26.05.2009|22:24] C:\DOCUME~1\Gaguik\APPLIC~1\FileZilla
[25.11.2008|20:59] C:\DOCUME~1\Gaguik\APPLIC~1\foobar2000
[04.02.2009|23:47] C:\DOCUME~1\Gaguik\APPLIC~1\Friday's games
[04.03.2007|21:16] C:\DOCUME~1\Gaguik\APPLIC~1\F-Secure
[02.07.2007|14:04] C:\DOCUME~1\Gaguik\APPLIC~1\Gaijin Ent
[15.02.2007|21:30] C:\DOCUME~1\Gaguik\APPLIC~1\Google
[18.07.2008|14:23] C:\DOCUME~1\Gaguik\APPLIC~1\Gram View 4
[24.01.2007|20:54] C:\DOCUME~1\Gaguik\APPLIC~1\Help
[04.08.2008|00:07] C:\DOCUME~1\Gaguik\APPLIC~1\Icone
[03.06.2007|21:51] C:\DOCUME~1\Gaguik\APPLIC~1\ICQLite
[01.11.2006|01:09] C:\DOCUME~1\Gaguik\APPLIC~1\Identities
[29.05.2007|20:28] C:\DOCUME~1\Gaguik\APPLIC~1\Image Zone Express
[11.03.2008|20:54] C:\DOCUME~1\Gaguik\APPLIC~1\InstallShield
[23.01.2007|22:21] C:\DOCUME~1\Gaguik\APPLIC~1\InterTrust
[04.03.2007|21:14] C:\DOCUME~1\Gaguik\APPLIC~1\ispnews
[22.10.2008|23:06] C:\DOCUME~1\Gaguik\APPLIC~1\Jane s Hotel Family Hero
[30.11.2008|09:54] C:\DOCUME~1\Gaguik\APPLIC~1\Kingston
[25.03.2007|20:13] C:\DOCUME~1\Gaguik\APPLIC~1\Leadertech
[31.07.2008|20:28] C:\DOCUME~1\Gaguik\APPLIC~1\Macromedia
[17.10.2008|13:57] C:\DOCUME~1\Gaguik\APPLIC~1\MAGIX
[20.02.2009|13:40] C:\DOCUME~1\Gaguik\APPLIC~1\Malwarebytes
[17.02.2007|16:14] C:\DOCUME~1\Gaguik\APPLIC~1\Media Player Classic
[27.11.2008|23:25] C:\DOCUME~1\Gaguik\APPLIC~1\Meridian93
[20.02.2009|13:31] C:\DOCUME~1\Gaguik\APPLIC~1\Microsoft
[28.01.2007|01:43] C:\DOCUME~1\Gaguik\APPLIC~1\Microsoft Games
[13.06.2007|17:55] C:\DOCUME~1\Gaguik\APPLIC~1\MixMeister Technology
[21.04.2009|19:52] C:\DOCUME~1\Gaguik\APPLIC~1\Mozilla
[02.06.2009|17:16] C:\DOCUME~1\Gaguik\APPLIC~1\Mra
[22.02.2007|20:40] C:\DOCUME~1\Gaguik\APPLIC~1\MSNInstaller
[20.11.2008|19:52] C:\DOCUME~1\Gaguik\APPLIC~1\My Games
[24.03.2008|15:58] C:\DOCUME~1\Gaguik\APPLIC~1\Nokia
[14.02.2009|15:10] C:\DOCUME~1\Gaguik\APPLIC~1\ooVoo Details
[25.02.2009|15:56] C:\DOCUME~1\Gaguik\APPLIC~1\OpenOffice.org
[25.02.2009|15:36] C:\DOCUME~1\Gaguik\APPLIC~1\OpenOffice.org2
[22.03.2008|00:52] C:\DOCUME~1\Gaguik\APPLIC~1\PC Suite
[29.11.2008|14:59] C:\DOCUME~1\Gaguik\APPLIC~1\PlayFirst
[17.10.2008|13:35] C:\DOCUME~1\Gaguik\APPLIC~1\Real
[10.03.2009|17:51] C:\DOCUME~1\Gaguik\APPLIC~1\Red Kawa
[03.11.2007|23:35] C:\DOCUME~1\Gaguik\APPLIC~1\Samsung
[09.04.2007|15:36] C:\DOCUME~1\Gaguik\APPLIC~1\SecuROM
[01.06.2009|23:40] C:\DOCUME~1\Gaguik\APPLIC~1\Skype
[27.07.2008|00:08] C:\DOCUME~1\Gaguik\APPLIC~1\skypePM
[17.03.2009|01:34] C:\DOCUME~1\Gaguik\APPLIC~1\SulusGames
[21.02.2007|14:25] C:\DOCUME~1\Gaguik\APPLIC~1\Sun
[19.02.2007|22:38] C:\DOCUME~1\Gaguik\APPLIC~1\Talkback
[09.03.2008|21:38] C:\DOCUME~1\Gaguik\APPLIC~1\Temporary
[20.06.2008|20:47] C:\DOCUME~1\Gaguik\APPLIC~1\THQ
[03.11.2007|23:43] C:\DOCUME~1\Gaguik\APPLIC~1\TransRender
[04.05.2009|23:10] C:\DOCUME~1\Gaguik\APPLIC~1\uTorrent
[17.02.2007|15:59] C:\DOCUME~1\Gaguik\APPLIC~1\vlc
[11.02.2009|21:48] C:\DOCUME~1\Gaguik\APPLIC~1\Vocabilis
[09.08.2007|18:23] C:\DOCUME~1\Gaguik\APPLIC~1\VoipCheapCom
[16.05.2009|19:04] C:\DOCUME~1\Gaguik\APPLIC~1\Webcammax
[12.11.2008|14:38] C:\DOCUME~1\Gaguik\APPLIC~1\WinRAR
[13.02.2009|18:44] C:\DOCUME~1\Gaguik\APPLIC~1\Yahoo!
[18.04.2009|15:05] C:\DOCUME~1\Gaguik\APPLIC~1\Yandex

[16.03.2008|16:32] C:\DOCUME~1\Guevork\APPLIC~1\CyberLink
[10.09.2007|20:36] C:\DOCUME~1\Guevork\APPLIC~1\F-Secure
[27.07.2007|10:28] C:\DOCUME~1\Guevork\APPLIC~1\ispnews
[27.07.2007|10:28] C:\DOCUME~1\Guevork\APPLIC~1\Mra
[20.06.2006|21:24] C:\DOCUME~1\Guevork\APPLIC~1\Real
[24.12.2007|14:25] C:\DOCUME~1\Guevork\APPLIC~1\Yahoo!

[20.02.2009|13:31] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[04.02.2008|20:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla
[17.03.2008|20:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Talkback

[20.02.2009|13:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tвches planifiйes dans C:\WINDOWS\tasks

[02.06.2009 18:47][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3157467729-3881354330-1781583254-1005.job
[29.05.2009 15:48][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[11.09.2008 19:00][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[02.06.2009 18:00][--ah-----] C:\WINDOWS\tasks\A8A46C96906814EA.job
[02.06.2009 08:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10.08.2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( A8A46C96906814EA.job )=( c:\docume~1\gaguik\applic~1\gramvi~1\meetonegrim.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[02.08.2007|13:35] C:\Program Files\7-Zip
[01.11.2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07.10.2008|17:35] C:\Program Files\Adobe
[17.03.2009|01:33] C:\Program Files\Alawar.ru
[14.04.2007|14:54] C:\Program Files\Alwil Software
[11.03.2008|20:55] C:\Program Files\ANI
[14.02.2009|11:48] C:\Program Files\antivirus
[15.02.2009|11:10] C:\Program Files\AntivirusFirewall
[11.09.2008|18:59] C:\Program Files\Apple Software Update
[17.12.2008|13:23] C:\Program Files\ArcadeRockstar
[19.06.2007|13:11] C:\Program Files\ASIO4ALL v2
[24.06.2006|23:17] C:\Program Files\AtomixMP3
[06.10.2008|22:41] C:\Program Files\Audacity
[04.07.2008|17:49] C:\Program Files\Audible
[20.02.2009|13:08] C:\Program Files\AVG
[10.03.2009|17:51] C:\Program Files\AviSynth 2.5
[25.02.2007|11:08] C:\Program Files\BitComet
[02.03.2009|21:03] C:\Program Files\Bonjour
[19.07.2007|17:50] C:\Program Files\Carom3D_Launcher Setup
[20.02.2009|11:08] C:\Program Files\CCleaner
[22.01.2007|21:45] C:\Program Files\Chess
[01.11.2006|01:10] C:\Program Files\commercial
[11.08.2006|19:27] C:\Program Files\ComPlus Applications
[20.03.2009|14:26] C:\Program Files\Creative
[04.07.2008|17:46] C:\Program Files\Creative Installation Information
[01.11.2006|01:10] C:\Program Files\CyberLink
[22.03.2008|00:53] C:\Program Files\DIFX
[21.10.2008|20:48] C:\Program Files\DivX
[11.03.2008|20:55] C:\Program Files\D-Link
[18.07.2008|14:16] C:\Program Files\Download Master
[15.12.2008|20:01] C:\Program Files\EA GAMES
[24.04.2008|14:32] C:\Program Files\EA Sports
[12.07.2007|19:18] C:\Program Files\eMule
[23.03.2008|12:58] C:\Program Files\epson
[18.04.2009|15:05] C:\Program Files\Fichiers communs
[21.02.2009|21:05] C:\Program Files\FileZilla FTP Client
[30.01.2009|16:29] C:\Program Files\Games.Mail.Ru
[20.02.2009|16:34] C:\Program Files\GamesBar
[14.12.2008|22:50] C:\Program Files\GameSpy Arcade
[28.01.2007|01:21] C:\Program Files\GemMasterFrench
[26.02.2009|19:10] C:\Program Files\Google
[09.03.2007|03:37] C:\Program Files\Gram View 4
[15.03.2007|22:03] C:\Program Files\HP
[03.06.2007|21:51] C:\Program Files\ICQLite
[25.11.2008|21:25] C:\Program Files\Illustrate
[05.09.2007|17:16] C:\Program Files\Image-Line
[09.05.2009|21:36] C:\Program Files\Imikimi
[19.02.2009|19:48] C:\Program Files\InstallShield Installation Information
[16.04.2009|00:26] C:\Program Files\Internet Explorer
[03.02.2007|21:03] C:\Program Files\Inventel
[02.03.2009|21:04] C:\Program Files\iPod
[02.03.2009|21:04] C:\Program Files\iTunes
[12.05.2009|12:06] C:\Program Files\Java
[25.02.2009|15:43] C:\Program Files\JRE
[06.10.2008|22:34] C:\Program Files\licenses
[20.01.2009|13:12] C:\Program Files\Logitech
[10.09.2007|21:53] C:\Program Files\Macrogaming
[13.02.2009|18:41] C:\Program Files\MAGIX
[18.09.2007|12:03] C:\Program Files\Mail.Ru
[20.02.2009|13:40] C:\Program Files\Malwarebytes' Anti-Malware
[17.02.2007|16:18] C:\Program Files\Masks
[19.02.2009|19:48] C:\Program Files\Maxtor
[03.09.2008|10:01] C:\Program Files\Messenger
[16.02.2009|18:27] C:\Program Files\Microsoft
[10.05.2007|09:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01.11.2006|01:10] C:\Program Files\microsoft frontpage
[25.03.2007|15:45] C:\Program Files\Microsoft Office
[26.02.2009|21:21] C:\Program Files\Microsoft Silverlight
[13.06.2007|17:54] C:\Program Files\MixMeister Express 6
[06.11.2008|14:05] C:\Program Files\MonProduit
[05.10.2008|10:35] C:\Program Files\Movie Maker
[02.06.2009|18:23] C:\Program Files\Mozilla Firefox
[22.02.2007|20:41] C:\Program Files\MSN
[17.10.2008|13:37] C:\Program Files\MSN Games
[01.11.2006|01:10] C:\Program Files\MSN Gaming Zone
[15.02.2007|04:57] C:\Program Files\MSXML 4.0
[30.03.2007|18:21] C:\Program Files\Multi_Media_France
[09.04.2009|14:17] C:\Program Files\NCH Software
[14.03.2007|16:13] C:\Program Files\Neoact
[03.09.2008|09:52] C:\Program Files\NetMeeting
[01.11.2006|01:10] C:\Program Files\NewTech Infosystems
[15.12.2008|19:53] C:\Program Files\Nokia
[29.05.2009|15:00] C:\Program Files\Norton Security Scan
[18.05.2007|00:34] C:\Program Files\NVIDIA Corporation
[08.01.2009|14:54] C:\Program Files\Oberon Media
[01.11.2006|01:11] C:\Program Files\Oca History Tool
[01.11.2006|01:11] C:\Program Files\Online Services
[14.04.2009|18:34] C:\Program Files\ooVoo
[19.02.2009|20:37] C:\Program Files\oovooToolbar
[25.02.2009|15:42] C:\Program Files\OpenOffice.org 2.4
[25.02.2009|15:43] C:\Program Files\OpenOffice.org 3
[08.01.2009|14:54] C:\Program Files\orange
[03.09.2008|09:52] C:\Program Files\Outlook Express
[17.02.2007|16:18] C:\Program Files\Patterns
[14.02.2009|13:45] C:\Program Files\Phone
[28.05.2009|19:56] C:\Program Files\PhotoFiltre
[24.08.2008|02:10] C:\Program Files\PhotoScape
[17.02.2007|16:17] C:\Program Files\Plugins
[18.05.2007|00:34] C:\Program Files\Plug-Ins
[18.05.2007|00:34] C:\Program Files\Presets
[20.02.2009|10:13] C:\Program Files\Prg Chris
[24.01.2009|21:31] C:\Program Files\QIP
[02.03.2009|21:03] C:\Program Files\QuickTime
[06.10.2008|22:34] C:\Program Files\readmes
[19.02.2007|22:30] C:\Program Files\Real
[22.10.2008|22:50] C:\Program Files\Realore
[01.11.2006|01:11] C:\Program Files\Realtek
[10.03.2009|17:50] C:\Program Files\Red Kawa
[10.03.2009|17:51] C:\Program Files\Regensoft
[13.06.2007|16:48] C:\Program Files\Rise
[03.11.2007|23:29] C:\Program Files\Samsung
[21.02.2008|15:08] C:\Program Files\Securitoo
[17.02.2007|16:16] C:\Program Files\Selections
[12.05.2009|21:42] C:\Program Files\SereneScreen
[01.11.2006|01:11] C:\Program Files\Services en ligne
[02.04.2009|17:28] C:\Program Files\Skype
[20.02.2009|12:02] C:\Program Files\Symantec
[20.06.2008|20:34] C:\Program Files\THQ
[01.06.2009|20:23] C:\Program Files\Trend Micro
[25.06.2008|14:49] C:\Program Files\Ubisoft
[11.08.2006|19:40] C:\Program Files\Uninstall Information
[23.02.2009|20:18] C:\Program Files\uTorrent
[17.02.2007|15:52] C:\Program Files\VideoLAN
[11.02.2009|21:47] C:\Program Files\Vocabilis
[24.06.2006|23:15] C:\Program Files\VstPlugins
[18.12.2008|13:26] C:\Program Files\Wanadoo
[20.07.2007|14:56] C:\Program Files\Warcraft III
[25.11.2008|21:01] C:\Program Files\Winamp
[16.02.2009|18:27] C:\Program Files\Windows Live
[27.09.2008|18:48] C:\Program Files\Windows Live Safety Center
[16.02.2009|18:26] C:\Program Files\Windows Live SkyDrive
[15.12.2008|19:57] C:\Program Files\Windows Live Toolbar
[26.07.2007|15:39] C:\Program Files\Windows Media Connect 2
[04.10.2008|18:12] C:\Program Files\Windows Media Player
[03.09.2008|09:52] C:\Program Files\Windows NT
[01.11.2006|01:11] C:\Program Files\Windows Plus
[11.08.2006|19:28] C:\Program Files\WindowsUpdate
[01.11.2006|01:11] C:\Program Files\xerox
[15.12.2008|19:58] C:\Program Files\Yahoo!
[18.04.2009|15:05] C:\Program Files\Yandex
[20.02.2009|11:15] C:\Program Files\Zone Labs
[15.12.2008|19:51] C:\Program Files\€Јал

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[20.04.2009|13:04] C:\Program Files\Fichiers communs\Adobe
[07.10.2008|17:34] C:\Program Files\Fichiers communs\Adobe AIR
[15.07.2007|18:03] C:\Program Files\Fichiers communs\Adobe Systems Shared
[02.03.2009|21:04] C:\Program Files\Fichiers communs\Apple
[04.07.2008|17:45] C:\Program Files\Fichiers communs\Creative
[20.06.2008|20:48] C:\Program Files\Fichiers communs\DirectX
[15.03.2007|22:03] C:\Program Files\Fichiers communs\HP
[15.10.2007|16:48] C:\Program Files\Fichiers communs\InstallShield
[21.01.2007|18:22] C:\Program Files\Fichiers communs\Java
[01.11.2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[20.01.2009|13:14] C:\Program Files\Fichiers communs\LogiShrd
[14.09.2008|21:08] C:\Program Files\Fichiers communs\Logitech
[20.02.2009|10:47] C:\Program Files\Fichiers communs\Microsoft Shared
[01.11.2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01.11.2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01.11.2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[08.01.2009|14:54] C:\Program Files\Fichiers communs\Oberon Media
[01.11.2006|01:10] C:\Program Files\Fichiers communs\ODBC
[17.10.2008|13:35] C:\Program Files\Fichiers communs\Real
[01.11.2006|01:10] C:\Program Files\Fichiers communs\Services
[01.11.2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[08.01.2009|17:01] C:\Program Files\Fichiers communs\SWF Studio
[20.02.2009|12:02] C:\Program Files\Fichiers communs\Symantec Shared
[03.09.2008|09:52] C:\Program Files\Fichiers communs\System
[16.02.2009|18:14] C:\Program Files\Fichiers communs\Windows Live
[18.04.2009|15:05] C:\Program Files\Fichiers communs\Yandex

--------------------\\ Process

( 79 Processes )

IEXPLORE.EXE ~ [PID:2300]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvй !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Gaguik\APPLIC~1\Gram View 4
C:\Program Files\Gram View 4
C:\DOCUME~1\Gaguik\APPLIC~1\gramvi~1
C:\Program Files\gramvi~1
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\LanguagePack.xml
C:\Program Files\Multi_Media_France\LocalSettings.txt
C:\Program Files\Multi_Media_France\RadioPlayer
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\ThirdPartyComponents.xml
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\Program Files\Multi_Media_France\update.xml
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\LanguagePack.xml
C:\Program Files\Multi_Media_France\LocalSettings.txt
C:\Program Files\Multi_Media_France\RadioPlayer
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\ThirdPartyComponents.xml
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\Program Files\Multi_Media_France\update.xml
C:\DOCUME~1\Gaguik\Cookies\gaguik@adultfriendfinder[2].txt
C:\WINDOWS\Tasks\A8A46C96906814EA.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\Gaguik\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 72 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-02 18:59:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 741

--------------------\\ Recherche d'autres infections

C:\Program Files\Raccourci vers messengerskinner.lnk
[b]==> EGDACCESS <==/b

C:\WINDOWS\system32\prqss.bak1
C:\WINDOWS\system32\prqss.bak2
C:\WINDOWS\system32\prqss.ini
[b]==> VUNDO <==/b

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Gaguik\Application Data\Azureus\torrents\[TBox] Adobe Photoshop CS v8.0.Final + KeyGen-Working.torrent
C:\DOCUME~1\Gaguik\Application Data\Azureus\torrents\[TBox] Adobe Photoshop CS2 V9.0 MULTILANGUAGE + KEYGEN.iso.torrent


[F:259][D:29]-> C:\DOCUME~1\Gaguik\LOCALS~1\Temp
[F:87][D:0]-> C:\DOCUME~1\Gaguik\Cookies
[F:543][D:5]-> C:\DOCUME~1\Gaguik\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 02.06.2009|19:06 - Option : [1]

--------------------\\ Fin du rapport a 19:06:41
0
Réponse 3 / 8
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231
2 juin 2009 à 19:20
Relance Lop S&D


* Choisis cette fois ci l'Option 2 (Suppression)

* Ne ferme pas la fenêtre lors de la suppression !

* Poste le rapport généré (C:\lopR.txt)
0
guevork22
2 juin 2009 à 20:07
voilà



Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Gaguik ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.5 (Activated)
Firewall : ZoneAlarm Firewall 7.0.483.000 (Activated)
C:\ (Local Disk) - NTFS - Total:113 Go (Free:51 Go)
D:\ (Local Disk) - FAT32 - Total:113 Go (Free:113 Go)
E:\ (CD or DVD)
F:\ (USB)
H:\ (USB)
I:\ (Local Disk) - NTFS - Total:698 Go (Free:503 Go)
J:\ (USB)
K:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 02.06.2009|19:59 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media_France\LanguagePack.xml
Supprime! - C:\Program Files\Multi_Media_France\LocalSettings.txt
Supprime! - C:\Program Files\Multi_Media_France\RadioPlayer
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\Program Files\Multi_Media_France\ThirdPartyComponents.xml
Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
Supprime! - C:\Program Files\Multi_Media_France\update.xml
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\DOCUME~1\Gaguik\Cookies\gaguik@adultfriendfinder[2].txt
Supprime! - C:\WINDOWS\Tasks\A8A46C96906814EA.job
Supprime! - C:\DOCUME~1\Gaguik\APPLIC~1\Gram View 4
Supprime! - C:\Program Files\Gram View 4
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[01.11.2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01.11.2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[20.02.2009|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[02.03.2009|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[20.04.2009|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[21.07.2007|22:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[17.03.2009|01:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AlawarWrapper
[11.09.2008|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30.03.2007|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[20.02.2009|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[26.05.2007|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[18.07.2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
[22.01.2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[26.02.2007|22:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[05.09.2008|13:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Egoset
[23.03.2008|12:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[18.04.2009|15:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Escape From Paradise_11
[18.07.2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FirstKeepNurbLong
[28.01.2009|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreshGames
[18.02.2009|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
[03.01.2009|12:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[01.02.2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[15.10.2007|16:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[20.01.2009|13:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[05.03.2007|14:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[17.10.2008|13:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
[20.02.2009|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[20.02.2009|13:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[19.02.2009|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Maxtor
[16.02.2009|18:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09.04.2009|14:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[26.06.2008|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[21.01.2007|19:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[08.01.2009|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon
[22.03.2008|00:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[29.11.2008|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[20.01.2008|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[22.03.2009|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[20.02.2009|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[08.01.2009|17:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[23.03.2008|12:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[16.02.2007|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[22.02.2007|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[06.11.2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wmp
[13.02.2009|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[28.10.2008|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\‚ҐбҐ« п”Ґа¬ 2
[01.02.2009|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\‚ҐбҐ« п”Ґа¬ -ЏҐзҐ¬ЏЁжжг

[01.11.2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01.11.2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01.11.2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[08.01.2009|17:06] C:\DOCUME~1\Gaguik\APPLIC~1\.#
[18.04.2009|16:42] C:\DOCUME~1\Gaguik\APPLIC~1\Adobe
[23.02.2007|12:43] C:\DOCUME~1\Gaguik\APPLIC~1\AdobeUM
[11.09.2008|20:09] C:\DOCUME~1\Gaguik\APPLIC~1\Apple Computer
[08.03.2008|21:53] C:\DOCUME~1\Gaguik\APPLIC~1\AutoTransfer
[23.06.2008|23:47] C:\DOCUME~1\Gaguik\APPLIC~1\Azureus
[01.12.2008|20:18] C:\DOCUME~1\Gaguik\APPLIC~1\BeachPartyCraze
[23.10.2008|17:00] C:\DOCUME~1\Gaguik\APPLIC~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[04.11.2007|19:27] C:\DOCUME~1\Gaguik\APPLIC~1\ConvertTemp
[01.08.2008|21:25] C:\DOCUME~1\Gaguik\APPLIC~1\Creative
[15.04.2009|14:37] C:\DOCUME~1\Gaguik\APPLIC~1\CVitae
[26.01.2007|22:59] C:\DOCUME~1\Gaguik\APPLIC~1\CyberLink
[22.03.2008|13:49] C:\DOCUME~1\Gaguik\APPLIC~1\Datalayer
[05.07.2007|16:50] C:\DOCUME~1\Gaguik\APPLIC~1\DivX
[13.02.2007|21:09] C:\DOCUME~1\Gaguik\APPLIC~1\Download Master
[23.10.2008|17:40] C:\DOCUME~1\Gaguik\APPLIC~1\dvdcss
[23.03.2008|14:19] C:\DOCUME~1\Gaguik\APPLIC~1\EPSON
[02.06.2009|19:32] C:\DOCUME~1\Gaguik\APPLIC~1\FileZilla
[25.11.2008|20:59] C:\DOCUME~1\Gaguik\APPLIC~1\foobar2000
[04.02.2009|23:47] C:\DOCUME~1\Gaguik\APPLIC~1\Friday's games
[04.03.2007|21:16] C:\DOCUME~1\Gaguik\APPLIC~1\F-Secure
[02.07.2007|14:04] C:\DOCUME~1\Gaguik\APPLIC~1\Gaijin Ent
[15.02.2007|21:30] C:\DOCUME~1\Gaguik\APPLIC~1\Google
[24.01.2007|20:54] C:\DOCUME~1\Gaguik\APPLIC~1\Help
[04.08.2008|00:07] C:\DOCUME~1\Gaguik\APPLIC~1\Icone
[03.06.2007|21:51] C:\DOCUME~1\Gaguik\APPLIC~1\ICQLite
[01.11.2006|01:09] C:\DOCUME~1\Gaguik\APPLIC~1\Identities
[29.05.2007|20:28] C:\DOCUME~1\Gaguik\APPLIC~1\Image Zone Express
[11.03.2008|20:54] C:\DOCUME~1\Gaguik\APPLIC~1\InstallShield
[23.01.2007|22:21] C:\DOCUME~1\Gaguik\APPLIC~1\InterTrust
[04.03.2007|21:14] C:\DOCUME~1\Gaguik\APPLIC~1\ispnews
[22.10.2008|23:06] C:\DOCUME~1\Gaguik\APPLIC~1\Jane s Hotel Family Hero
[30.11.2008|09:54] C:\DOCUME~1\Gaguik\APPLIC~1\Kingston
[25.03.2007|20:13] C:\DOCUME~1\Gaguik\APPLIC~1\Leadertech
[31.07.2008|20:28] C:\DOCUME~1\Gaguik\APPLIC~1\Macromedia
[17.10.2008|13:57] C:\DOCUME~1\Gaguik\APPLIC~1\MAGIX
[20.02.2009|13:40] C:\DOCUME~1\Gaguik\APPLIC~1\Malwarebytes
[17.02.2007|16:14] C:\DOCUME~1\Gaguik\APPLIC~1\Media Player Classic
[27.11.2008|23:25] C:\DOCUME~1\Gaguik\APPLIC~1\Meridian93
[20.02.2009|13:31] C:\DOCUME~1\Gaguik\APPLIC~1\Microsoft
[28.01.2007|01:43] C:\DOCUME~1\Gaguik\APPLIC~1\Microsoft Games
[13.06.2007|17:55] C:\DOCUME~1\Gaguik\APPLIC~1\MixMeister Technology
[21.04.2009|19:52] C:\DOCUME~1\Gaguik\APPLIC~1\Mozilla
[02.06.2009|19:16] C:\DOCUME~1\Gaguik\APPLIC~1\Mra
[22.02.2007|20:40] C:\DOCUME~1\Gaguik\APPLIC~1\MSNInstaller
[20.11.2008|19:52] C:\DOCUME~1\Gaguik\APPLIC~1\My Games
[24.03.2008|15:58] C:\DOCUME~1\Gaguik\APPLIC~1\Nokia
[14.02.2009|15:10] C:\DOCUME~1\Gaguik\APPLIC~1\ooVoo Details
[25.02.2009|15:56] C:\DOCUME~1\Gaguik\APPLIC~1\OpenOffice.org
[25.02.2009|15:36] C:\DOCUME~1\Gaguik\APPLIC~1\OpenOffice.org2
[22.03.2008|00:52] C:\DOCUME~1\Gaguik\APPLIC~1\PC Suite
[29.11.2008|14:59] C:\DOCUME~1\Gaguik\APPLIC~1\PlayFirst
[17.10.2008|13:35] C:\DOCUME~1\Gaguik\APPLIC~1\Real
[10.03.2009|17:51] C:\DOCUME~1\Gaguik\APPLIC~1\Red Kawa
[03.11.2007|23:35] C:\DOCUME~1\Gaguik\APPLIC~1\Samsung
[09.04.2007|15:36] C:\DOCUME~1\Gaguik\APPLIC~1\SecuROM
[01.06.2009|23:40] C:\DOCUME~1\Gaguik\APPLIC~1\Skype
[27.07.2008|00:08] C:\DOCUME~1\Gaguik\APPLIC~1\skypePM
[17.03.2009|01:34] C:\DOCUME~1\Gaguik\APPLIC~1\SulusGames
[21.02.2007|14:25] C:\DOCUME~1\Gaguik\APPLIC~1\Sun
[19.02.2007|22:38] C:\DOCUME~1\Gaguik\APPLIC~1\Talkback
[09.03.2008|21:38] C:\DOCUME~1\Gaguik\APPLIC~1\Temporary
[20.06.2008|20:47] C:\DOCUME~1\Gaguik\APPLIC~1\THQ
[03.11.2007|23:43] C:\DOCUME~1\Gaguik\APPLIC~1\TransRender
[04.05.2009|23:10] C:\DOCUME~1\Gaguik\APPLIC~1\uTorrent
[17.02.2007|15:59] C:\DOCUME~1\Gaguik\APPLIC~1\vlc
[11.02.2009|21:48] C:\DOCUME~1\Gaguik\APPLIC~1\Vocabilis
[09.08.2007|18:23] C:\DOCUME~1\Gaguik\APPLIC~1\VoipCheapCom
[16.05.2009|19:04] C:\DOCUME~1\Gaguik\APPLIC~1\Webcammax
[12.11.2008|14:38] C:\DOCUME~1\Gaguik\APPLIC~1\WinRAR
[13.02.2009|18:44] C:\DOCUME~1\Gaguik\APPLIC~1\Yahoo!
[18.04.2009|15:05] C:\DOCUME~1\Gaguik\APPLIC~1\Yandex

[16.03.2008|16:32] C:\DOCUME~1\Guevork\APPLIC~1\CyberLink
[10.09.2007|20:36] C:\DOCUME~1\Guevork\APPLIC~1\F-Secure
[27.07.2007|10:28] C:\DOCUME~1\Guevork\APPLIC~1\ispnews
[27.07.2007|10:28] C:\DOCUME~1\Guevork\APPLIC~1\Mra
[20.06.2006|21:24] C:\DOCUME~1\Guevork\APPLIC~1\Real
[24.12.2007|14:25] C:\DOCUME~1\Guevork\APPLIC~1\Yahoo!

[20.02.2009|13:31] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[04.02.2008|20:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla
[17.03.2008|20:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Talkback

[20.02.2009|13:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tвches planifiйes dans C:\WINDOWS\tasks

[02.06.2009 19:29][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3157467729-3881354330-1781583254-1005.job
[29.05.2009 15:48][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[11.09.2008 19:00][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[02.06.2009 08:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10.08.2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[02.08.2007|13:35] C:\Program Files\7-Zip
[01.11.2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07.10.2008|17:35] C:\Program Files\Adobe
[17.03.2009|01:33] C:\Program Files\Alawar.ru
[14.04.2007|14:54] C:\Program Files\Alwil Software
[11.03.2008|20:55] C:\Program Files\ANI
[14.02.2009|11:48] C:\Program Files\antivirus
[15.02.2009|11:10] C:\Program Files\AntivirusFirewall
[11.09.2008|18:59] C:\Program Files\Apple Software Update
[17.12.2008|13:23] C:\Program Files\ArcadeRockstar
[19.06.2007|13:11] C:\Program Files\ASIO4ALL v2
[24.06.2006|23:17] C:\Program Files\AtomixMP3
[06.10.2008|22:41] C:\Program Files\Audacity
[04.07.2008|17:49] C:\Program Files\Audible
[20.02.2009|13:08] C:\Program Files\AVG
[10.03.2009|17:51] C:\Program Files\AviSynth 2.5
[25.02.2007|11:08] C:\Program Files\BitComet
[02.03.2009|21:03] C:\Program Files\Bonjour
[19.07.2007|17:50] C:\Program Files\Carom3D_Launcher Setup
[20.02.2009|11:08] C:\Program Files\CCleaner
[22.01.2007|21:45] C:\Program Files\Chess
[01.11.2006|01:10] C:\Program Files\commercial
[11.08.2006|19:27] C:\Program Files\ComPlus Applications
[20.03.2009|14:26] C:\Program Files\Creative
[04.07.2008|17:46] C:\Program Files\Creative Installation Information
[01.11.2006|01:10] C:\Program Files\CyberLink
[22.03.2008|00:53] C:\Program Files\DIFX
[21.10.2008|20:48] C:\Program Files\DivX
[11.03.2008|20:55] C:\Program Files\D-Link
[18.07.2008|14:16] C:\Program Files\Download Master
[15.12.2008|20:01] C:\Program Files\EA GAMES
[24.04.2008|14:32] C:\Program Files\EA Sports
[12.07.2007|19:18] C:\Program Files\eMule
[23.03.2008|12:58] C:\Program Files\epson
[18.04.2009|15:05] C:\Program Files\Fichiers communs
[21.02.2009|21:05] C:\Program Files\FileZilla FTP Client
[30.01.2009|16:29] C:\Program Files\Games.Mail.Ru
[20.02.2009|16:34] C:\Program Files\GamesBar
[14.12.2008|22:50] C:\Program Files\GameSpy Arcade
[28.01.2007|01:21] C:\Program Files\GemMasterFrench
[26.02.2009|19:10] C:\Program Files\Google
[15.03.2007|22:03] C:\Program Files\HP
[03.06.2007|21:51] C:\Program Files\ICQLite
[25.11.2008|21:25] C:\Program Files\Illustrate
[05.09.2007|17:16] C:\Program Files\Image-Line
[09.05.2009|21:36] C:\Program Files\Imikimi
[19.02.2009|19:48] C:\Program Files\InstallShield Installation Information
[16.04.2009|00:26] C:\Program Files\Internet Explorer
[03.02.2007|21:03] C:\Program Files\Inventel
[02.03.2009|21:04] C:\Program Files\iPod
[02.03.2009|21:04] C:\Program Files\iTunes
[12.05.2009|12:06] C:\Program Files\Java
[25.02.2009|15:43] C:\Program Files\JRE
[06.10.2008|22:34] C:\Program Files\licenses
[20.01.2009|13:12] C:\Program Files\Logitech
[10.09.2007|21:53] C:\Program Files\Macrogaming
[13.02.2009|18:41] C:\Program Files\MAGIX
[18.09.2007|12:03] C:\Program Files\Mail.Ru
[20.02.2009|13:40] C:\Program Files\Malwarebytes' Anti-Malware
[17.02.2007|16:18] C:\Program Files\Masks
[19.02.2009|19:48] C:\Program Files\Maxtor
[03.09.2008|10:01] C:\Program Files\Messenger
[16.02.2009|18:27] C:\Program Files\Microsoft
[10.05.2007|09:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01.11.2006|01:10] C:\Program Files\microsoft frontpage
[25.03.2007|15:45] C:\Program Files\Microsoft Office
[26.02.2009|21:21] C:\Program Files\Microsoft Silverlight
[13.06.2007|17:54] C:\Program Files\MixMeister Express 6
[06.11.2008|14:05] C:\Program Files\MonProduit
[05.10.2008|10:35] C:\Program Files\Movie Maker
[02.06.2009|19:46] C:\Program Files\Mozilla Firefox
[22.02.2007|20:41] C:\Program Files\MSN
[17.10.2008|13:37] C:\Program Files\MSN Games
[01.11.2006|01:10] C:\Program Files\MSN Gaming Zone
[15.02.2007|04:57] C:\Program Files\MSXML 4.0
[02.06.2009|20:00] C:\Program Files\Multi_Media_France
[09.04.2009|14:17] C:\Program Files\NCH Software
[14.03.2007|16:13] C:\Program Files\Neoact
[03.09.2008|09:52] C:\Program Files\NetMeeting
[01.11.2006|01:10] C:\Program Files\NewTech Infosystems
[15.12.2008|19:53] C:\Program Files\Nokia
[29.05.2009|15:00] C:\Program Files\Norton Security Scan
[18.05.2007|00:34] C:\Program Files\NVIDIA Corporation
[08.01.2009|14:54] C:\Program Files\Oberon Media
[01.11.2006|01:11] C:\Program Files\Oca History Tool
[01.11.2006|01:11] C:\Program Files\Online Services
[14.04.2009|18:34] C:\Program Files\ooVoo
[19.02.2009|20:37] C:\Program Files\oovooToolbar
[25.02.2009|15:42] C:\Program Files\OpenOffice.org 2.4
[25.02.2009|15:43] C:\Program Files\OpenOffice.org 3
[08.01.2009|14:54] C:\Program Files\orange
[03.09.2008|09:52] C:\Program Files\Outlook Express
[17.02.2007|16:18] C:\Program Files\Patterns
[14.02.2009|13:45] C:\Program Files\Phone
[28.05.2009|19:56] C:\Program Files\PhotoFiltre
[24.08.2008|02:10] C:\Program Files\PhotoScape
[17.02.2007|16:17] C:\Program Files\Plugins
[18.05.2007|00:34] C:\Program Files\Plug-Ins
[18.05.2007|00:34] C:\Program Files\Presets
[20.02.2009|10:13] C:\Program Files\Prg Chris
[24.01.2009|21:31] C:\Program Files\QIP
[02.03.2009|21:03] C:\Program Files\QuickTime
[06.10.2008|22:34] C:\Program Files\readmes
[19.02.2007|22:30] C:\Program Files\Real
[22.10.2008|22:50] C:\Program Files\Realore
[01.11.2006|01:11] C:\Program Files\Realtek
[10.03.2009|17:50] C:\Program Files\Red Kawa
[10.03.2009|17:51] C:\Program Files\Regensoft
[13.06.2007|16:48] C:\Program Files\Rise
[03.11.2007|23:29] C:\Program Files\Samsung
[21.02.2008|15:08] C:\Program Files\Securitoo
[17.02.2007|16:16] C:\Program Files\Selections
[12.05.2009|21:42] C:\Program Files\SereneScreen
[01.11.2006|01:11] C:\Program Files\Services en ligne
[02.04.2009|17:28] C:\Program Files\Skype
[20.02.2009|12:02] C:\Program Files\Symantec
[20.06.2008|20:34] C:\Program Files\THQ
[01.06.2009|20:23] C:\Program Files\Trend Micro
[25.06.2008|14:49] C:\Program Files\Ubisoft
[11.08.2006|19:40] C:\Program Files\Uninstall Information
[23.02.2009|20:18] C:\Program Files\uTorrent
[17.02.2007|15:52] C:\Program Files\VideoLAN
[11.02.2009|21:47] C:\Program Files\Vocabilis
[24.06.2006|23:15] C:\Program Files\VstPlugins
[18.12.2008|13:26] C:\Program Files\Wanadoo
[20.07.2007|14:56] C:\Program Files\Warcraft III
[25.11.2008|21:01] C:\Program Files\Winamp
[16.02.2009|18:27] C:\Program Files\Windows Live
[27.09.2008|18:48] C:\Program Files\Windows Live Safety Center
[16.02.2009|18:26] C:\Program Files\Windows Live SkyDrive
[15.12.2008|19:57] C:\Program Files\Windows Live Toolbar
[26.07.2007|15:39] C:\Program Files\Windows Media Connect 2
[04.10.2008|18:12] C:\Program Files\Windows Media Player
[03.09.2008|09:52] C:\Program Files\Windows NT
[01.11.2006|01:11] C:\Program Files\Windows Plus
[11.08.2006|19:28] C:\Program Files\WindowsUpdate
[01.11.2006|01:11] C:\Program Files\xerox
[15.12.2008|19:58] C:\Program Files\Yahoo!
[18.04.2009|15:05] C:\Program Files\Yandex
[20.02.2009|11:15] C:\Program Files\Zone Labs
[15.12.2008|19:51] C:\Program Files\€Јал

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[20.04.2009|13:04] C:\Program Files\Fichiers communs\Adobe
[07.10.2008|17:34] C:\Program Files\Fichiers communs\Adobe AIR
[15.07.2007|18:03] C:\Program Files\Fichiers communs\Adobe Systems Shared
[02.03.2009|21:04] C:\Program Files\Fichiers communs\Apple
[04.07.2008|17:45] C:\Program Files\Fichiers communs\Creative
[20.06.2008|20:48] C:\Program Files\Fichiers communs\DirectX
[15.03.2007|22:03] C:\Program Files\Fichiers communs\HP
[15.10.2007|16:48] C:\Program Files\Fichiers communs\InstallShield
[21.01.2007|18:22] C:\Program Files\Fichiers communs\Java
[01.11.2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[20.01.2009|13:14] C:\Program Files\Fichiers communs\LogiShrd
[14.09.2008|21:08] C:\Program Files\Fichiers communs\Logitech
[20.02.2009|10:47] C:\Program Files\Fichiers communs\Microsoft Shared
[01.11.2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01.11.2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01.11.2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[08.01.2009|14:54] C:\Program Files\Fichiers communs\Oberon Media
[01.11.2006|01:10] C:\Program Files\Fichiers communs\ODBC
[17.10.2008|13:35] C:\Program Files\Fichiers communs\Real
[01.11.2006|01:10] C:\Program Files\Fichiers communs\Services
[01.11.2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[08.01.2009|17:01] C:\Program Files\Fichiers communs\SWF Studio
[20.02.2009|12:02] C:\Program Files\Fichiers communs\Symantec Shared
[03.09.2008|09:52] C:\Program Files\Fichiers communs\System
[16.02.2009|18:14] C:\Program Files\Fichiers communs\Windows Live
[18.04.2009|15:05] C:\Program Files\Fichiers communs\Yandex

--------------------\\ Process

( 77 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvй !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMul1.dll

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-02 20:02:15
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 741

--------------------\\ Recherche d'autres infections

C:\Program Files\Raccourci vers messengerskinner.lnk
[b]==> EGDACCESS <==/b

C:\WINDOWS\system32\prqss.bak1
C:\WINDOWS\system32\prqss.bak2
C:\WINDOWS\system32\prqss.ini
[b]==> VUNDO <==/b

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Gaguik\Application Data\Azureus\torrents\[TBox] Adobe Photoshop CS v8.0.Final + KeyGen-Working.torrent
C:\DOCUME~1\Gaguik\Application Data\Azureus\torrents\[TBox] Adobe Photoshop CS2 V9.0 MULTILANGUAGE + KEYGEN.iso.torrent


[F:255][D:29]-> C:\DOCUME~1\Gaguik\LOCALS~1\Temp
[F:86][D:0]-> C:\DOCUME~1\Gaguik\Cookies
[F:553][D:5]-> C:\DOCUME~1\Gaguik\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 02.06.2009|19:06 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 02.06.2009|20:06 - Option : [2]

--------------------\\ Fin du rapport a 20:06:29
0
Réponse 4 / 8
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231
2 juin 2009 à 20:14
Télécharges ComboFix à partir d'un de ces liens :

En premier
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

A lire
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Et important, enregistre le sur le bureau.


Lors de son exécution, ComboFix va vérifier si la Console de récupération Microsoft Windows est installée. Avec des infections comme celles d'aujourd'hui, il est fortement conseillé de l'avoir pré-installée sur votre PC avant toute suppression de nuisibles. Elle vous permettra de démarrer dans un mode spécial, de récupération (réparation), qui nous permet de vous aider plus facilement si jamais votre ordinateur rencontre un problème après une tentative de nettoyage.
Suivez les invites pour permettre à ComboFix de télécharger et installer la Console de récupération Microsoft Windows, et lorsque cela vous est demandé, acceptez le Contrat de Licence Utilisateur Final pour installer la Console de récupération Microsoft Windows.

Sous XP
https://support.microsoft.com/en-us/help/310994

Sous Vista
https://www.commentcamarche.net/list 13735 console de recuperation vista sur cd bootable
**Note importante: Si la Console de récupération Microsoft Windows est déjà installée, ComboFix continuera ses procédures de suppression de nuisibles.


Avant d'utiliser ComboFix :

► Déconnecte-toi d'internet et referme les fenêtres de tous les programmes en cours.

► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.


Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes, ne touche ni à la souris, ni au clavier.

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
0
guevork22
2 juin 2009 à 20:28
ok. Juste une question : C'est ComboFix qui me demandra installer la Console de récupération Microsoft Windows XP?
0
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231 > guevork22
2 juin 2009 à 20:29
Oui.
0
guevork22 > toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010
2 juin 2009 à 20:39
J'arrive pas arreter AVG -ANTIVIRUS Free!!! Comment faire? ComboFix m'affiche qu'il faut le fermer...
0
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231 > guevork22
2 juin 2009 à 20:41
Tu dois avoir une icône près de l'horloge.
0
guevork22 > toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010
2 juin 2009 à 20:44
Oui, Click droit sur AVG ,puis quitter, mais ComboFix m'affiche ça:
The above real time scanner(s) are still active but ComboFix shall continue to run. Kindly note this is at your own risk.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 8
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231
2 juin 2009 à 21:38
Bien.
Pas mal de saletés d'éliminées.
On va refaire le point :

• Télécharge Random's System Information Tool (RSIT) de Random / Random et sauvegarde-le sur ton Bureau,

-> http://images.malwareremoval.com/random/RSIT.exe

• Double-clique sur RSIT.exe pour lancer le programme,
• Clique sur continuer sur l'écran Disclaimer,
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

Tuto si besoin : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
0
guevork22
2 juin 2009 à 21:55
Logfile of random's system information tool 1.06 (written by random/random)
Run by Gaguik at 2009-06-02 21:48:12
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 53 GB (46%) free of 116 GB
Total RAM: 1023 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:48:15, on 02.06.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\gearsec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Maxtor\Sync\SyncServices.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE
C:\Program Files\Fichiers communs\Yandex\Yupdate\yupdate.exe
C:\Documents and Settings\Gaguik\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Gaguik\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Gaguik.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://mail.ru/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IE 4.x-6.x BHO for Download Master - {9961627E-4059-41B4-8E0E-A7D6B3854ADF} - C:\PROGRA~1\DOWNLO~1\dmiehlp.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: DM Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3C} - C:\Program Files\Download Master\dmbar.dll
O3 - Toolbar: Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Яндекс.Бар - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [D-Link D-Link Wireless N DWA-140] C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [MAgent] C:\Program Files\Mail.Ru\Agent\MAgent.exe -LM
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [Yupdate!] "C:\Program Files\Fichiers communs\Yandex\Yupdate\yupdate.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Gaguik\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Download Master] C:\Program Files\Download Master\dmaster.exe -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x08da -f video -m logitech -d 11.0.0.1213 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x08da -f video -m logitech -d 11.0.0.1213 (User 'Default user')
O4 - Startup: Mixer.lnk = C:\Program Files\SoundFaction\Mixer\Mixer.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Закачать ВСЕ при помощи Download Master - C:\Program Files\Download Master\dmieall.htm
O8 - Extra context menu item: Закачать при помощи Download Master - C:\Program Files\Download Master\dmie.htm
O8 - Extra context menu item: Найти в интернете - res://C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll/282
O8 - Extra context menu item: Найти в словарях - res://C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll/283
O9 - Extra button: Mail.Ru Агент - {7558b7e5-7b26-4201-bedb-00d5ff534523} - C:\Program Files\Mail.Ru\Agent\magent.exe
O9 - Extra 'Tools' menuitem: Mail.Ru Агент - {7558b7e5-7b26-4201-bedb-00d5ff534523} - C:\Program Files\Mail.Ru\Agent\magent.exe
O9 - Extra button: Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra 'Tools' menuitem: &Download Master - {8DAE90AD-4583-4977-9DD4-4360F7A45C74} - C:\Program Files\Download Master\dmaster.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {53B8B406-42E4-4DD3-96E7-9DEC8CEB3DD8} (ICQVideoControl Class) - http://xtraz.icq.com/xtraz/activex/ICQVideoControl.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15106/CTPID.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files\Maxtor\Sync\SyncServices.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O24 - Desktop Component 0: (no name) - http://www.pix3l.net/wallpapers/wall/1193613480_Leopardgrassblade_2560x1600_23.jpg
0
Réponse 6 / 8
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 2 231
2 juin 2009 à 21:59
ça se présente pas mal.
Comment se comporte le PC ?
0
guevork22
2 juin 2009 à 22:08
Il rame sur Internet. Mais aussi dans les fishiers...Il y a pas long temps il a tout seul changé la taille de police des fenetres ... Voilà...Par fois il bug et je l'eteind par le bouton qui est sur processor. Il fait beaucoup de bruit aussi...
0
guevork22 > guevork22
2 juin 2009 à 22:17
...Il est lent... et il fait bcp de bruit.
0
guevork22 > guevork22
2 juin 2009 à 22:25
ET maintenant il s'arrete pas de maniére habituelle...
0
guevork22 > guevork22
2 juin 2009 à 22:28
...Et il ne redemarre non plus...
0
Réponse 7 / 8
^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
2 juin 2009 à 22:35
· Télécharge ToolsCleaner de A.Roshtein& dj QUIOU sur ton Bureau.(sur un des 2 liens)
http://pc-system.fr/
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
· Clique sur Recherche et laisse le scan se terminer.
· Clique, sur Suppression pour finaliser.
· Tu peux, si tu le souhaites, te servir des Options facultatives.
· Clique sur Quitter, pour que le rapport puisse se créer.
· Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).
0
guevork22
4 juin 2009 à 13:42
ok Voici le rapport:

[ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvй !
C:\lopR.txt: trouvй !
C:\Combofix: trouvй !
C:\Lop SD: trouvй !
C:\Qoobox: trouvй !
C:\Rsit: trouvй !
C:\Documents and Settings\All Users\Menu Demarrer\Programmes\HijackThis: trouvй !
C:\Documents and Settings\All Users\Menu Demarrer\Programmes\HijackThis\HijackThis.lnk: trouvй !
C:\Documents and Settings\All Users\Menu Demarrer\Programmes\HijackThis: trouvй !
C:\Documents and Settings\All Users\Menu Demarrer\Programmes\HijackThis\HijackThis.lnk: trouvй !
C:\Documents and Settings\Gaguik\Bureau\HijackThis.lnk: trouvй !
C:\Documents and Settings\Gaguik\Bureau\ComboFix.exe: trouvй !
C:\Documents and Settings\Gaguik\Bureau\Rsit.exe: trouvй !
C:\Downloads\programms\LopSD.exe: trouvй !
C:\Downloads\programms\HJTInstall.exe: trouvй !
C:\Program Files\Trend Micro\HijackThis: trouvй !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvй !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvй !

---------------------------------
--> Suppression:

C:\Documents and Settings\All Users\Menu Demarrer\Programmes\HijackThis\HijackThis.lnk: supprimй !
C:\Documents and Settings\Gaguik\Bureau\HijackThis.lnk: supprimй !
C:\Downloads\programms\LopSD.exe: supprimй !
C:\Downloads\programms\HJTInstall.exe: supprimй !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimй !
C:\Combofix.txt: supprimй !
C:\lopR.txt: supprimй !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimй !
C:\Combofix: supprimй !
C:\Lop SD: supprimй !
C:\Qoobox: supprimй !
C:\Rsit: supprimй !
C:\Documents and Settings\All Users\Menu Demarrer\Programmes\HijackThis: supprimй !
C:\Program Files\Trend Micro\HijackThis: supprimй !
0
Réponse 8 / 8
guevork22
4 juin 2009 à 18:49
Et Maintenant je fait quoi?
0