Probleme anti virus - Page 2

Résolu
Précédent
  • 1
  • 2
  1. reituag Messages postés 30 Statut Membre
     
    triple poste besoin d'aide
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Désolé...

      Fais un scan avec Kaspersky Online et poste moi le rapport.

      Est-ce que tu peux avant tout me réafficher le rapport de suppression de FindyKill en entier stp.

      Il doit se trouver dans C:/Findykill.txt
      Vérifie bien l'heure et la date: 13:48:15 | 23/06/2009

      @+
      0
  2. reituag Messages postés 30 Statut Membre
     
    je ne trouve pas le fichier C:/findykill j'ai du le supprimé sans m'en redre compte :/ donc je refait un scan findykill??
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      donc je refait un scan findykill?

      Non, laisse tomber.
      0
  3. reituag Messages postés 30 Statut Membre
     
    KASPERSKY ONLINE SCANNER 7.0: rapport d'analyse
    jeudi 25 juin 2009
    Système d'exploitation : Microsoft Windows XP Professional Service Pack 3 (build 2600)
    Version de Kaspersky Online Scanner : 7.0.26.13
    Dernière mise à jour de la base : Thursday, June 25, 2009 04:52:28
    Enregistrements dans la base : 2388140

    Paramètres d'analyse
    analyser avec la base suivante étendue
    Analyser les archives oui
    Analyser les bases de messagerie oui

    Zone d'analyse Poste de travail
    C:\
    D:\
    E:\

    Statistiques d'analyse
    Objets analysés 79401
    Menaces trouvées 4
    Objets infectés trouvés 9
    Objets suspects trouvés 0
    Durée d'analyse 02:48:11

    Nom de fichier Menace Compteur de menaces
    C:\Documents and Settings\All Users\Application Data\File dvd base road\Live Active.exe Infecté : Trojan.Win32.Swizzor.a 1

    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\1seekhold.exe Infecté : Trojan.Win32.Swizzor.a 1

    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\bifuhhoa.exe Infecté : Trojan.Win32.Swizzor.a 1

    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\knusskwf.exe Infecté : Trojan.Win32.Swizzor.a 1

    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\PartMagsAce.exe Infecté : Trojan.Win32.Swizzor.a 1

    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\Tool Settings Mix Multi.exe Infecté : Trojan.Win32.Swizzor.a 1

    C:\Documents and Settings\Proprietaire\Mes documents\LimeWire\Saved\nom de code laiigle.zip Infecté : not-a-virus:AdWare.Win32.Agent.zk 1

    C:\Program Files\Bodom-Child - RaBBi\RMXP\Patch 800x600.exe Infecté : Trojan.Win32.Genome.esg 1

    C:\Program Files\Circle Dvelopement\Uninstall.exe Infecté : Trojan-Downloader.Win32.Injecter.cgv 1

    La zone sélectionnée a été analysée.
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      *Désactive ton antivirus le temps de la manipulation car OTM est détecté comme une infection à tort.

      *Télécharge OTM (OldTimer) sur ton Bureau :

      *Double-clique sur OTM.exe afin de le lancer.

      * Copie (Ctrl+C) le texte en gras ci-dessous :



      :processes
      explorer.exe

      :files
      C:\Documents and Settings\All Users\Application Data\File dvd base road\Live Active.exe
      C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\1seekhold.exe
      C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\bifuhhoa.exe
      C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\knusskwf.exe
      C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\PartMagsAce.exe
      C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\Tool Settings Mix Multi.exe
      C:\Documents and Settings\Proprietaire\Mes documents\LimeWire\Saved\nom de code laiigle.zip
      C:\Program Files\Bodom-Child - RaBBi\RMXP\Patch 800x600.exe
      C:\Program Files\Circle Dvelopement\Uninstall.exe


      :commands
      [purity]
      [emptytemp]
      [reboot]




      *Colle (Ctrl+V) le texte précédemment copié dans le cadre "Paste Instructions for Items to be Moved".

      *Clique maintenant sur le bouton "MoveIt"! puis ferme OTMoveIt3.

      *Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
      Accepte en cliquant sur YES.

      *Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
      Le nom du rapport correspond au moment de sa création : date_heure.log
      0
  4. reituag Messages postés 30 Statut Membre
     
    All processes killed
    ========== PROCESSES ==========
    No active process named explorer.exe was found!
    ========== FILES ==========
    C:\Documents and Settings\All Users\Application Data\File dvd base road\Live Active.exe moved successfully.
    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\1seekhold.exe moved successfully.
    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\bifuhhoa.exe moved successfully.
    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\knusskwf.exe moved successfully.
    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\PartMagsAce.exe moved successfully.
    C:\Documents and Settings\Proprietaire\Application Data\4 platform ball\Tool Settings Mix Multi.exe moved successfully.
    C:\Documents and Settings\Proprietaire\Mes documents\LimeWire\Saved\nom de code laiigle.zip moved successfully.
    C:\Program Files\Bodom-Child - RaBBi\RMXP\Patch 800x600.exe moved successfully.
    C:\Program Files\Circle Dvelopement\Uninstall.exe moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: Administrateur
    ->Temp folder emptied: 32768 bytes
    ->Temporary Internet Files folder emptied: 32768 bytes

    User: All Users

    User: Default User
    ->Temp folder emptied: 32768 bytes
    ->Temporary Internet Files folder emptied: 32768 bytes

    User: LocalService
    ->Temp folder emptied: 0 bytes
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    ->Temporary Internet Files folder emptied: 7276527 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes

    User: Proprietaire
    ->Temp folder emptied: 107958512 bytes
    ->Temporary Internet Files folder emptied: 8301425 bytes
    ->Java cache emptied: 13553509 bytes
    ->FireFox cache emptied: 91652711 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 19569 bytes
    %systemroot%\System32 .tmp files removed: 3433472 bytes
    Windows Temp folder emptied: 0 bytes

    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 221,60 mb

    OTM by OldTimer - Version 3.0.0.2 log created on 06252009_134523

    Files moved on Reboot...

    Registry entries deleted on Reboot...
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Nickel.
      Reposte un rapport Log.txt Rsit actualisé (Regarde l'heure et la date pour ne pas te tromper) s'il te plait.
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. reituag Messages postés 30 Statut Membre
     
    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Proprietaire at 2009-06-25 14:31:49
    Microsoft Windows XP Professionnel Service Pack 3
    System drive C: has 57 GB (51%) free of 111 GB
    Total RAM: 894 MB (45% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:32:03, on 25/06/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\WLTRYSVC.EXE
    C:\WINDOWS\System32\bcmwltry.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\WINDOWS\system32\WLTRAY.exe
    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
    C:\Program Files\McAfee\MSK\MskAgent.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Dell Photo AIO Printer 926\dlcxmon.exe
    C:\Program Files\Dell Photo AIO Printer 926\memcard.exe
    C:\WINDOWS\system32\dlcxcoms.exe
    C:\Program Files\Dell Support\DSAgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
    C:\Documents and Settings\Proprietaire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.bin
    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Documents and Settings\Proprietaire\Bureau\gogo\logiciels\RSIT\RSIT.exe
    C:\Program Files\trend micro\Proprietaire.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=3070626
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [Base road long save] C:\Documents and Settings\All Users\Application Data\File dvd base road\Live Active.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [dlcxmon.exe] "C:\Program Files\Dell Photo AIO Printer 926\dlcxmon.exe"
    O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 926\memcard.exe"
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
    O4 - HKLM\..\Run: [DLCXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCXtime.dll,_RunDLLEntry@16
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [IDOL STORE] C:\DOCUME~1\PROPRI~1\APPLIC~1\4PLATF~1\PartMagsAce.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Proprietaire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - http://www.visiogood.com/jalss/cfweb_activex.camfrogweb.com-advanced-2.0.2.20_instmodule.exe
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O23 - Service: dlcx_device - - C:\WINDOWS\system32\dlcxcoms.exe
    O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
    O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
    O24 - Desktop Component 0: (no name) - http://image.xboxlive.com/global/t.fffe07d1/tile/0/21013
    0
  7. reituag Messages postés 30 Statut Membre
     
    double poste : up
    0
  8. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    *Double-clique sur OTM.exe afin de le lancer.

    * Copie (Ctrl+C) le texte en gras ci-dessous :



    :processes
    explorer.exe

    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Base road long save"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "IDOL STORE"

    :files
    c:\documents and settings\all users\application data\file dvd base road\live active.exe
    c:\program files\4platf~1\partmagsace.exe
    c:\WINDOWS\tasks\ACD91C24918A9A9C.job
    c:\Documents and Settings\All Users\Application Data\File dvd base road

    :commands
    [purity]
    [emptytemp]
    [reboot]


    *Colle (Ctrl+V) le texte précédemment copié dans le cadre "Paste Instructions for Items to be Moved".

    *Clique maintenant sur le bouton "MoveIt"! puis ferme OTMoveIt3.

    *Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

    *Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    0
  9. reituag Messages postés 30 Statut Membre
     
    je pense qu'il y as un problème :/ voila le raport, de plus je croit qu'il faut que je change d'antivirus car la j'ai l'impression qu'il ne marche pas donc si tu a quelque chose a me proposer.

    Files moved on Reboot...

    Registry entries deleted on Reboot...
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Effectivement quel rapport...

      Le temps que je te trouves LopSD, fais ceci:

      Télécharge ça et exécute le. Cela va désinstaller McAffee.
      Il faudra normalement redémarrer ton pc avant d'installer un autre antivirus.

      Ensuite, installe Antivir et met le à jour .

      @+
      0
  10. reituag Messages postés 30 Statut Membre
     
    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
    BIOS : BIOS Version 2.4.1
    USER : Proprietaire ( Administrator )
    BOOT : Normal boot
    Antivirus : AntiVir Desktop 9.0.1.26 (Not Activated)
    C:\ (Local Disk) - NTFS - Total:108 Go (Free:55 Go)
    D:\ (CD or DVD)
    E:\ (USB)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [1] ( 25/06/2009|18:37 )

    --------------------\\ Listing des dossiers dans APPLIC~1

    [26/06/2007|15:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
    [26/06/2007|15:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\GTek
    [19/08/2004|14:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
    [26/06/2007|15:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
    [26/06/2007|15:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

    [03/05/2009|09:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
    [23/06/2009|06:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{92E7A367-8E12-4830-AA70-29C32E331A81}
    [19/11/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [04/05/2009|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [25/06/2009|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
    [02/05/2009|10:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
    [27/11/2008|17:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
    [19/11/2008|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Dell
    [28/05/2009|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DellFaxCtr
    [21/04/2009|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
    [25/06/2009|13:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
    [12/03/2009|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [26/06/2007|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
    [26/06/2007|15:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [19/02/2009|21:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
    [23/06/2009|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [01/03/2009|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [07/02/2009|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [02/01/2009|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
    [19/11/2008|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
    [17/03/2009|09:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
    [19/08/2004|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
    [26/06/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
    [19/11/2008|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [19/02/2009|21:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
    [22/01/2009|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [23/06/2009|08:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

    [26/06/2007|15:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
    [26/06/2007|15:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Gtek
    [19/08/2004|14:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
    [26/06/2007|15:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InstallShield
    [26/06/2007|15:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [21/04/2009|23:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [19/08/2004|14:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [25/06/2009|13:45] C:\DOCUME~1\PROPRI~1\APPLIC~1\4 platform ball
    [11/03/2009|15:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
    [05/05/2009|09:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
    [26/06/2007|15:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\ATI
    [02/05/2009|10:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\AVS4YOU
    [28/01/2009|12:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\CamfrogWEB
    [31/01/2009|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\CyberLink
    [28/05/2009|11:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\DellFaxCtr
    [23/06/2009|19:07] C:\DOCUME~1\PROPRI~1\APPLIC~1\drivers
    [05/05/2009|17:22] C:\DOCUME~1\PROPRI~1\APPLIC~1\dvdcss
    [15/03/2009|22:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
    [14/04/2009|17:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\GSC
    [03/05/2009|14:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\GSC 2.00
    [26/06/2007|15:51] C:\DOCUME~1\PROPRI~1\APPLIC~1\Gtek
    [20/01/2009|20:12] C:\DOCUME~1\PROPRI~1\APPLIC~1\gtk-2.0
    [19/08/2004|14:24] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
    [26/06/2007|15:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield
    [31/01/2009|22:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
    [06/03/2009|23:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\LimeWire
    [19/11/2008|18:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
    [23/06/2009|14:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\Malwarebytes
    [09/06/2009|17:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
    [02/01/2009|22:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Games
    [26/11/2008|18:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
    [29/01/2009|19:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller
    [19/11/2008|12:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\Nero
    [19/11/2008|19:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\OpenOffice.org
    [14/02/2009|18:55] C:\DOCUME~1\PROPRI~1\APPLIC~1\Samsung
    [31/01/2009|22:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sonic
    [23/11/2008|12:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
    [10/06/2009|18:48] C:\DOCUME~1\PROPRI~1\APPLIC~1\teamspeak2
    [19/02/2009|22:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\Ulead Systems
    [23/06/2009|06:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\Uniblue
    [05/03/2009|15:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
    [30/11/2008|16:23] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR
    [23/06/2009|07:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Yahoo!

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [25/06/2009 18:00][--ah-----] C:\WINDOWS\tasks\ACD91C24918A9A9C.job
    [25/06/2009 18:12][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    ( ACD91C24918A9A9C.job )=( c:\docume~1\propri~1\applic~1\4platf~1\1seekhold.exe )

    --------------------\\ Listing des dossiers dans C:\Program Files

    [01/05/2009|07:10] C:\Program Files\4 platform ball
    [19/11/2008|13:02] C:\Program Files\Adobe
    [23/06/2009|20:15] C:\Program Files\Ad-remover
    [26/06/2007|15:43] C:\Program Files\AMD
    [25/06/2009|18:26] C:\Program Files\Avira
    [13/05/2009|11:35] C:\Program Files\AVS4YOU
    [26/06/2007|15:50] C:\Program Files\BAE
    [24/02/2009|13:20] C:\Program Files\Bodom-Child - RaBBi
    [26/06/2007|15:42] C:\Program Files\Broadcom
    [24/06/2009|14:21] C:\Program Files\CamStudio
    [23/06/2009|07:40] C:\Program Files\CCleaner
    [25/06/2009|13:45] C:\Program Files\Circle Dvelopement
    [19/08/2004|14:15] C:\Program Files\ComPlus Applications
    [26/06/2007|15:39] C:\Program Files\CONEXANT
    [07/06/2009|15:53] C:\Program Files\Copie de iPod
    [07/06/2009|15:53] C:\Program Files\Copie de Mediator 7 Std
    [26/06/2007|15:45] C:\Program Files\CyberLink
    [28/05/2009|10:28] C:\Program Files\Dell
    [28/05/2009|10:28] C:\Program Files\Dell PC Fax
    [28/05/2009|10:43] C:\Program Files\Dell Photo AIO Printer 926
    [26/06/2007|15:51] C:\Program Files\Dell Support
    [26/06/2007|15:41] C:\Program Files\Digital Line Detect
    [20/06/2009|20:40] C:\Program Files\dl_cats
    [27/11/2008|17:02] C:\Program Files\FaxTools
    [25/06/2009|18:12] C:\Program Files\Fichiers communs
    [12/03/2009|22:16] C:\Program Files\Google
    [19/02/2009|21:34] C:\Program Files\InstallShield Installation Information
    [08/04/2009|11:53] C:\Program Files\Internet Explorer
    [03/05/2009|09:06] C:\Program Files\iPod
    [04/05/2009|15:33] C:\Program Files\iTunes
    [11/06/2009|21:30] C:\Program Files\Java
    [19/11/2008|15:58] C:\Program Files\JRE
    [01/06/2009|20:47] C:\Program Files\Lexmark X1100 Series
    [26/06/2007|15:52] C:\Program Files\MAKEMSI Package Documentation
    [23/06/2009|15:04] C:\Program Files\Malwarebytes' Anti-Malware
    [08/04/2009|11:53] C:\Program Files\Messenger
    [20/06/2009|03:42] C:\Program Files\Messenger Plus! Live
    [19/08/2004|14:18] C:\Program Files\microsoft frontpage
    [14/12/2008|13:30] C:\Program Files\Microsoft Office
    [07/03/2009|16:32] C:\Program Files\Microsoft Silverlight
    [27/11/2008|17:42] C:\Program Files\Microsoft Visual Studio
    [23/06/2009|21:21] C:\Program Files\Microsoft Works
    [27/11/2008|17:40] C:\Program Files\Microsoft.NET
    [26/06/2007|15:41] C:\Program Files\Modem Helper
    [07/04/2009|21:49] C:\Program Files\Movie Maker
    [25/06/2009|18:36] C:\Program Files\Mozilla Firefox
    [29/01/2009|19:52] C:\Program Files\MSN
    [19/08/2004|14:14] C:\Program Files\MSN Gaming Zone
    [20/06/2009|03:42] C:\Program Files\MSN Messenger
    [21/11/2008|11:45] C:\Program Files\MSXML 4.0
    [23/06/2009|15:38] C:\Program Files\Navilog1
    [19/11/2008|12:56] C:\Program Files\Nero
    [07/04/2009|21:45] C:\Program Files\NetMeeting
    [23/06/2009|21:20] C:\Program Files\NetWaiting
    [17/03/2009|09:15] C:\Program Files\NOS
    [19/08/2004|14:15] C:\Program Files\Online Services
    [19/11/2008|15:58] C:\Program Files\OpenOffice.org 3
    [26/06/2007|15:52] C:\Program Files\Orange
    [07/04/2009|21:45] C:\Program Files\Outlook Express
    [04/05/2009|15:31] C:\Program Files\QuickTime
    [26/06/2007|15:49] C:\Program Files\Roxio
    [13/02/2009|23:02] C:\Program Files\Samsung
    [19/08/2004|14:16] C:\Program Files\Services en ligne
    [26/06/2007|15:39] C:\Program Files\Sigmatel
    [26/06/2007|15:50] C:\Program Files\Sonic
    [23/06/2009|07:19] C:\Program Files\Spybot - Search & Destroy
    [15/03/2009|21:26] C:\Program Files\Strategy First
    [26/06/2007|15:42] C:\Program Files\Synaptics
    [25/06/2009|14:31] C:\Program Files\trend micro
    [19/08/2004|14:24] C:\Program Files\Uninstall Information
    [07/02/2009|23:29] C:\Program Files\Windows Live
    [19/02/2009|21:33] C:\Program Files\Windows Media Components
    [21/04/2009|23:14] C:\Program Files\Windows Media Connect 2
    [21/04/2009|23:14] C:\Program Files\Windows Media Player
    [07/04/2009|21:45] C:\Program Files\Windows NT
    [19/08/2004|14:16] C:\Program Files\WindowsUpdate
    [19/11/2008|13:00] C:\Program Files\WinRAR
    [19/08/2004|14:18] C:\Program Files\xerox
    [23/06/2009|07:40] C:\Program Files\Yahoo!
    [23/05/2009|11:34] C:\Program Files\Yu-Gi-Oh Virtual Battle 5

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [13/02/2009|22:58] C:\Program Files\Fichiers communs\Adobe
    [13/05/2009|11:32] C:\Program Files\Fichiers communs\Apple
    [13/05/2009|11:35] C:\Program Files\Fichiers communs\AVSMedia
    [27/11/2008|17:42] C:\Program Files\Fichiers communs\DESIGNER
    [26/06/2007|15:49] C:\Program Files\Fichiers communs\InstallShield
    [26/06/2007|15:36] C:\Program Files\Fichiers communs\Java
    [09/03/2009|04:04] C:\Program Files\Fichiers communs\Microsoft Shared
    [19/08/2004|14:16] C:\Program Files\Fichiers communs\MSSoap
    [19/11/2008|12:58] C:\Program Files\Fichiers communs\Nero
    [19/08/2004|14:10] C:\Program Files\Fichiers communs\ODBC
    [26/06/2007|15:49] C:\Program Files\Fichiers communs\Roxio Shared
    [19/08/2004|14:16] C:\Program Files\Fichiers communs\Services
    [26/06/2007|15:50] C:\Program Files\Fichiers communs\Sonic Shared
    [19/08/2004|14:10] C:\Program Files\Fichiers communs\SpeechEngines
    [07/04/2009|21:45] C:\Program Files\Fichiers communs\System
    [26/06/2007|15:49] C:\Program Files\Fichiers communs\TiVo Shared
    [19/02/2009|21:33] C:\Program Files\Fichiers communs\Ulead Systems
    [23/06/2009|07:29] C:\Program Files\Fichiers communs\Wise Installation Wizard

    --------------------\\ Process

    ( 53 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Live Active.dat
    C:\DOCUME~1\PROPRI~1\APPLIC~1\4platf~1
    C:\Program Files\4platf~1
    C:\WINDOWS\Tasks\ACD91C24918A9A9C.job

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IDOL STORE"="C:\\DOCUME~1\\PROPRI~1\\APPLIC~1\\4PLATF~1\\PartMagsAce.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Base road long save"="C:\\Documents and Settings\\All Users\\Application Data\\File dvd base road\\Live Active.exe"

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-06-25 18:38:56
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 48

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\PROPRI~1\Bureau\music\rap u\Lil wayne\Lil wayne\06-lil_wayne-the_crack_house_(feat._fat_joe_and_dre).mp3
    C:\DOCUME~1\PROPRI~1\Bureau\music\rap u\Lil wayne\Lil Wayne - We The Best (2008) - Rap\06-lil_wayne-the_crack_house_(feat._fat_joe_and_dre).mp3

    [F:4][D:1]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
    [F:2][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
    [F:7][D:2]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 25/06/2009|18:40 - Option : [1]

    --------------------\\ Fin du rapport a 18:40:02
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Pfff, effectivement, c'est plus simple comme ça ^^:


      C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Live Active.dat
      C:\DOCUME~1\PROPRI~1\APPLIC~1\4platf~1
      C:\Program Files\4platf~1
      C:\WINDOWS\Tasks\ACD91C24918A9A9C.job

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "IDOL STORE"="C:\\DOCUME~1\\PROPRI~1\\APPLIC~1\\4PLATF~1\\PartMagsAce.exe"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Base road long save"="C:\\Documents and Settings\\All Users\\Application Data\\File dvd base road\\Live Active.exe"








      **Donc relanceLopSD et choisir l'option 2(Suppression)


      Tu as installé Antivir et viré Mac Affee?
      T'as géré ton Bac de Français?
      0
  11. reituag Messages postés 30 Statut Membre
     
    Tu as installé Antivir et viré Mac Affee? ==> oui ^^
    T'as géré ton Bac de Français?==> je me suis lever as 5H30 pour rien je me suis, tromper de jour c'est demain (-_-')

    je poste le raport ??
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      je me suis lever as 5H30 pour rien je me suis, tromper de jour c'est demain (-_-')


      Ah bah, t'as géré comme il fallait: félicitations :))

      Oui poste moi le rapport de Lop SD stp.
      0
  12. reituag Messages postés 30 Statut Membre
     
    merci ^^, dit moi si tu veut que j'édite et quel parti garder ...

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
    BIOS : BIOS Version 2.4.1
    USER : Proprietaire ( Administrator )
    BOOT : Normal boot
    Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
    C:\ (Local Disk) - NTFS - Total:108 Go (Free:55 Go)
    D:\ (CD or DVD)
    E:\ (USB)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [2] ( 25/06/2009|19:17 )

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Live Active.dat
    Supprime! - C:\WINDOWS\Tasks\ACD91C24918A9A9C.job
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
    Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\4platf~1
    Supprime! - C:\Program Files\4platf~1
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans APPLIC~1

    [26/06/2007|15:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
    [26/06/2007|15:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\GTek
    [19/08/2004|14:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
    [26/06/2007|15:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
    [26/06/2007|15:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

    [03/05/2009|09:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
    [23/06/2009|06:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{92E7A367-8E12-4830-AA70-29C32E331A81}
    [19/11/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [04/05/2009|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [25/06/2009|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
    [02/05/2009|10:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
    [27/11/2008|17:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
    [19/11/2008|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Dell
    [28/05/2009|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DellFaxCtr
    [21/04/2009|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
    [12/03/2009|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [26/06/2007|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
    [26/06/2007|15:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [19/02/2009|21:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
    [23/06/2009|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [01/03/2009|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [07/02/2009|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [02/01/2009|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
    [19/11/2008|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
    [17/03/2009|09:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
    [19/08/2004|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
    [26/06/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
    [19/11/2008|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [19/02/2009|21:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
    [22/01/2009|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [23/06/2009|08:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

    [26/06/2007|15:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
    [26/06/2007|15:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Gtek
    [19/08/2004|14:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
    [26/06/2007|15:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InstallShield
    [26/06/2007|15:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [21/04/2009|23:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [19/08/2004|14:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [11/03/2009|15:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
    [05/05/2009|09:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
    [26/06/2007|15:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\ATI
    [02/05/2009|10:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\AVS4YOU
    [28/01/2009|12:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\CamfrogWEB
    [31/01/2009|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\CyberLink
    [28/05/2009|11:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\DellFaxCtr
    [23/06/2009|19:07] C:\DOCUME~1\PROPRI~1\APPLIC~1\drivers
    [05/05/2009|17:22] C:\DOCUME~1\PROPRI~1\APPLIC~1\dvdcss
    [15/03/2009|22:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
    [14/04/2009|17:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\GSC
    [03/05/2009|14:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\GSC 2.00
    [26/06/2007|15:51] C:\DOCUME~1\PROPRI~1\APPLIC~1\Gtek
    [20/01/2009|20:12] C:\DOCUME~1\PROPRI~1\APPLIC~1\gtk-2.0
    [19/08/2004|14:24] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
    [26/06/2007|15:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield
    [31/01/2009|22:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
    [06/03/2009|23:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\LimeWire
    [19/11/2008|18:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
    [23/06/2009|14:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\Malwarebytes
    [09/06/2009|17:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
    [02/01/2009|22:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Games
    [26/11/2008|18:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
    [29/01/2009|19:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller
    [19/11/2008|12:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\Nero
    [19/11/2008|19:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\OpenOffice.org
    [14/02/2009|18:55] C:\DOCUME~1\PROPRI~1\APPLIC~1\Samsung
    [31/01/2009|22:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sonic
    [23/11/2008|12:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
    [10/06/2009|18:48] C:\DOCUME~1\PROPRI~1\APPLIC~1\teamspeak2
    [19/02/2009|22:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\Ulead Systems
    [23/06/2009|06:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\Uniblue
    [05/03/2009|15:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
    [30/11/2008|16:23] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR
    [23/06/2009|07:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Yahoo!

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [25/06/2009 18:12][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [19/11/2008|13:02] C:\Program Files\Adobe
    [23/06/2009|20:15] C:\Program Files\Ad-remover
    [26/06/2007|15:43] C:\Program Files\AMD
    [25/06/2009|18:26] C:\Program Files\Avira
    [13/05/2009|11:35] C:\Program Files\AVS4YOU
    [26/06/2007|15:50] C:\Program Files\BAE
    [24/02/2009|13:20] C:\Program Files\Bodom-Child - RaBBi
    [26/06/2007|15:42] C:\Program Files\Broadcom
    [24/06/2009|14:21] C:\Program Files\CamStudio
    [23/06/2009|07:40] C:\Program Files\CCleaner
    [25/06/2009|13:45] C:\Program Files\Circle Dvelopement
    [19/08/2004|14:15] C:\Program Files\ComPlus Applications
    [26/06/2007|15:39] C:\Program Files\CONEXANT
    [07/06/2009|15:53] C:\Program Files\Copie de iPod
    [07/06/2009|15:53] C:\Program Files\Copie de Mediator 7 Std
    [26/06/2007|15:45] C:\Program Files\CyberLink
    [28/05/2009|10:28] C:\Program Files\Dell
    [28/05/2009|10:28] C:\Program Files\Dell PC Fax
    [28/05/2009|10:43] C:\Program Files\Dell Photo AIO Printer 926
    [26/06/2007|15:51] C:\Program Files\Dell Support
    [26/06/2007|15:41] C:\Program Files\Digital Line Detect
    [20/06/2009|20:40] C:\Program Files\dl_cats
    [27/11/2008|17:02] C:\Program Files\FaxTools
    [25/06/2009|18:12] C:\Program Files\Fichiers communs
    [12/03/2009|22:16] C:\Program Files\Google
    [19/02/2009|21:34] C:\Program Files\InstallShield Installation Information
    [08/04/2009|11:53] C:\Program Files\Internet Explorer
    [03/05/2009|09:06] C:\Program Files\iPod
    [04/05/2009|15:33] C:\Program Files\iTunes
    [11/06/2009|21:30] C:\Program Files\Java
    [19/11/2008|15:58] C:\Program Files\JRE
    [01/06/2009|20:47] C:\Program Files\Lexmark X1100 Series
    [26/06/2007|15:52] C:\Program Files\MAKEMSI Package Documentation
    [23/06/2009|15:04] C:\Program Files\Malwarebytes' Anti-Malware
    [08/04/2009|11:53] C:\Program Files\Messenger
    [20/06/2009|03:42] C:\Program Files\Messenger Plus! Live
    [19/08/2004|14:18] C:\Program Files\microsoft frontpage
    [14/12/2008|13:30] C:\Program Files\Microsoft Office
    [07/03/2009|16:32] C:\Program Files\Microsoft Silverlight
    [27/11/2008|17:42] C:\Program Files\Microsoft Visual Studio
    [23/06/2009|21:21] C:\Program Files\Microsoft Works
    [27/11/2008|17:40] C:\Program Files\Microsoft.NET
    [26/06/2007|15:41] C:\Program Files\Modem Helper
    [07/04/2009|21:49] C:\Program Files\Movie Maker
    [25/06/2009|18:45] C:\Program Files\Mozilla Firefox
    [29/01/2009|19:52] C:\Program Files\MSN
    [19/08/2004|14:14] C:\Program Files\MSN Gaming Zone
    [20/06/2009|03:42] C:\Program Files\MSN Messenger
    [21/11/2008|11:45] C:\Program Files\MSXML 4.0
    [23/06/2009|15:38] C:\Program Files\Navilog1
    [19/11/2008|12:56] C:\Program Files\Nero
    [07/04/2009|21:45] C:\Program Files\NetMeeting
    [23/06/2009|21:20] C:\Program Files\NetWaiting
    [17/03/2009|09:15] C:\Program Files\NOS
    [19/08/2004|14:15] C:\Program Files\Online Services
    [19/11/2008|15:58] C:\Program Files\OpenOffice.org 3
    [26/06/2007|15:52] C:\Program Files\Orange
    [07/04/2009|21:45] C:\Program Files\Outlook Express
    [04/05/2009|15:31] C:\Program Files\QuickTime
    [26/06/2007|15:49] C:\Program Files\Roxio
    [13/02/2009|23:02] C:\Program Files\Samsung
    [19/08/2004|14:16] C:\Program Files\Services en ligne
    [26/06/2007|15:39] C:\Program Files\Sigmatel
    [26/06/2007|15:50] C:\Program Files\Sonic
    [23/06/2009|07:19] C:\Program Files\Spybot - Search & Destroy
    [15/03/2009|21:26] C:\Program Files\Strategy First
    [26/06/2007|15:42] C:\Program Files\Synaptics
    [25/06/2009|14:31] C:\Program Files\trend micro
    [19/08/2004|14:24] C:\Program Files\Uninstall Information
    [07/02/2009|23:29] C:\Program Files\Windows Live
    [19/02/2009|21:33] C:\Program Files\Windows Media Components
    [21/04/2009|23:14] C:\Program Files\Windows Media Connect 2
    [21/04/2009|23:14] C:\Program Files\Windows Media Player
    [07/04/2009|21:45] C:\Program Files\Windows NT
    [19/08/2004|14:16] C:\Program Files\WindowsUpdate
    [19/11/2008|13:00] C:\Program Files\WinRAR
    [19/08/2004|14:18] C:\Program Files\xerox
    [23/06/2009|07:40] C:\Program Files\Yahoo!
    [23/05/2009|11:34] C:\Program Files\Yu-Gi-Oh Virtual Battle 5

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [13/02/2009|22:58] C:\Program Files\Fichiers communs\Adobe
    [13/05/2009|11:32] C:\Program Files\Fichiers communs\Apple
    [13/05/2009|11:35] C:\Program Files\Fichiers communs\AVSMedia
    [27/11/2008|17:42] C:\Program Files\Fichiers communs\DESIGNER
    [26/06/2007|15:49] C:\Program Files\Fichiers communs\InstallShield
    [26/06/2007|15:36] C:\Program Files\Fichiers communs\Java
    [09/03/2009|04:04] C:\Program Files\Fichiers communs\Microsoft Shared
    [19/08/2004|14:16] C:\Program Files\Fichiers communs\MSSoap
    [19/11/2008|12:58] C:\Program Files\Fichiers communs\Nero
    [19/08/2004|14:10] C:\Program Files\Fichiers communs\ODBC
    [26/06/2007|15:49] C:\Program Files\Fichiers communs\Roxio Shared
    [19/08/2004|14:16] C:\Program Files\Fichiers communs\Services
    [26/06/2007|15:50] C:\Program Files\Fichiers communs\Sonic Shared
    [19/08/2004|14:10] C:\Program Files\Fichiers communs\SpeechEngines
    [07/04/2009|21:45] C:\Program Files\Fichiers communs\System
    [26/06/2007|15:49] C:\Program Files\Fichiers communs\TiVo Shared
    [19/02/2009|21:33] C:\Program Files\Fichiers communs\Ulead Systems
    [23/06/2009|07:29] C:\Program Files\Fichiers communs\Wise Installation Wizard

    --------------------\\ Process

    ( 50 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-06-25 19:18:22
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 48

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\PROPRI~1\Bureau\music\rap u\Lil wayne\Lil wayne\06-lil_wayne-the_crack_house_(feat._fat_joe_and_dre).mp3
    C:\DOCUME~1\PROPRI~1\Bureau\music\rap u\Lil wayne\Lil Wayne - We The Best (2008) - Rap\06-lil_wayne-the_crack_house_(feat._fat_joe_and_dre).mp3

    [F:2][D:1]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
    [F:1][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
    [F:1][D:0]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 25/06/2009|18:40 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 25/06/2009|19:19 - Option : [2]

    --------------------\\ Fin du rapport a 19:19:20
    0
    1. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
       
      Même si on approche de la fin:

      Il ne faut jamais éditer ces rapports, pratiquement chaque info est précieuse et permet de suivre l'évolution de la machine sous divers angles.
      0
  13. reituag Messages postés 30 Statut Membre
     
    ok, comme sa je suis avertit...
    0
  14. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     

    Tu peux suivre ces instructions, pour exécuter ccleaner.

    Il faut cocher ces deux cases avant le nettoyage:
    * clique sur "Options", "Avancé" et décoche la case: "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".

    *Dans Nettoyeur/Windows /avancé il faut cocher la case vieilles données du prefetch.

    Et fais ensuite ces deux procédures:
    1/Nettoyage classique
    2/Recherche des erreurs .--> Tu peux effectuer 3 fois la recherche des erreurs de registre.(en n'oubliant pas à chaque fois comme proposé de faire une sauvegarde dans mes documents)

    CCleaner ne génère pas de rapports: ne perd pas ton temps à en chercher un. :)
    0
  15. reituag Messages postés 30 Statut Membre
     
    sa y est, j'ai fait ce que tu m'as dit ^^
    0
  16. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    Lance Proprietaire.exe qui se trouve dans C:\Program Files\trend micro\ et poste moi le rapport dans ta prochaine réponse.
    Comment générer un rapport. (merci à Balltrap 34 pour la démo)
    0
  17. reituag Messages postés 30 Statut Membre
     
    voici le raport
    0
  18. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    J'ai essayé de poster moi même ton rapport que tu m'as fait parvenir en mp.

    Il doit y avoir dans son contenu un mot blacklisté.

    Patience....
    0
  19. Trying2 Messages postés 7096 Date d'inscription   Statut Contributeur sécurité Dernière intervention   236
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:34:03, on 26/06/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\WLTRYSVC.EXE
    C:\WINDOWS\System32\bcmwltry.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\WINDOWS\system32\WLTRAY.exe
    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Dell Photo AIO Printer 926\dlcxmon.exe
    C:\Program Files\Dell Photo AIO Printer 926\memcard.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Dell Support\DSAgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Documents and Settings\Proprietaire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.bin
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
    C:\WINDOWS\system32\dlcxcoms.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Documents and Settings\Proprietaire\Bureau\Downloader_AirRivals_FR_1.0.0.1­.exe
    C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\is-9UCGF.tmp\Downloader_A­irRivals_FR_1.0.0.1.tmp
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\trend micro\Proprietaire.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=3070626
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [dlcxmon.exe] "C:\Program Files\Dell Photo AIO Printer 926\dlcxmon.exe"
    O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 926\memcard.exe"
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
    O4 - HKLM\..\Run: [DLCXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCXtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Proprietaire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - http://www.visiogood.com/
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: dlcx_device - - C:\WINDOWS\system32\dlcxcoms.exe
    O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
    O24 - Desktop Component 0: (no name) - http://image.xboxlive.com/global/t.fffe07d1/tile/0/21013
    0
Précédent
  • 1
  • 2