Help trojan vundo

trint -  
 trint -
Bonjour, j'ai mon pc qui plante dès que je me connecte à internet depuis ce matin où j'ai cliqué sur un lien sur une page web, firefox à planter d'abord puis le pc, j'ai rebooter il redémare normalement puis au bout de 1min ou 2 le pc qui ce fige de nouveau souris bloqué clavier qui répond plus et ça fait ça à chaque fois que mon pc est connecté à internet; mais si je redèmare mon pc avec le câble ethernet débranché plus de problème. J'ai scaner avec avast rien trouver, par contre Malwarebytes a trouvé un virus (trojan vundo), il a suprimé tous les fichier contaminer. spybot m'a également trouver ce virus sous le nom de virtumonde. Pensez vous que mon problème provienne de ce virus?

log hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 22:33:23, on 10/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dllhost.exe
C:\PVSW\Bin\WGE_SRV.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\PVSW\BIN\W3dbsmgr.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\vsnp2std.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
C:\Documents and Settings\PC\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Documents and Settings\PC\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SiSoftware\SiSoftware Sandra Professional Affaires 2009.SP1\RpcAgentSrv.exe
C:\Documents and Settings\PC\Application Data\U3\0000184CF471EE8E\LaunchPad.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://moteur.chat-land.org/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\PC\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: officejet 6100.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/71365/kavwebscan_unicode.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EBP Pervasive.SQL - Unknown owner - C:\PVSW\Bin\WGE_SRV.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Affaires 2009.SP1\RpcAgentSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Configuration: Windows XP
Firefox 2.0.0.20

Configuration: Windows XP
Firefox 2.0.0.20
A voir également:

11 réponses

Narco!4 Messages postés 2446 Statut Contributeur 467
 
télécharge GenProc http://www.genproc.com/GenProc.exe

double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre
1
trint
 
j'arrive pas à télécharger genproc
0
Dylan_cupi Messages postés 173 Statut Membre 44
 
Tu peux tenter la restauration du système.
Cependant je ne suis pas sur qu'elle supprimera ton virus.
Cependant il y a de forte chance !

Pour cela rend toi :

Démarrer --> Tous les programmes --> accessoires --> Outil Système --> Restauration du système --> Restaurer mon ordinateur à une heure antérieure.

Ensuite sur la calendrier choisi une date ou tu n'avais pas ce virus :)

Dylan
0
trint
 
déja tenter restauration système ça n'a pas marcher
0
Narco!4 Messages postés 2446 Statut Contributeur 467
 
J'arrive pas à télécharger genproc

?
0
Dylan_cupi Messages postés 173 Statut Membre 44
 
Je ne te conseil pas ce logiciel il vient de m'être bloqué par kaspersky cheval de troie !

Edit surement une fausse alerte.

Rend toi sur :
www.genproc.com

et choisi ta version de windows xp/vista ensuite poste le rapport ici è
0
trint
 
faut être connecter à internet pour que genproc fonctionne?
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Narco!4 Messages postés 2446 Statut Contributeur 467
 
Je ne te conseil pas ce logiciel il vient de m'être bloqué par kaspersky cheval de troie !

ah bon
pourquoi ?
Pour getversion..exe ?
tu ne voit pas, qu'a l'heure actuel les antivirus ne savent même pas
getversion..exe n 'est pas un cheval de 3, un faut positif ;)
0
Dylan_cupi Messages postés 173 Statut Membre 44
 
Tout à fait Narco j'avais édité mon poste avant que tu ne répondes :)
0
Dylan_cupi Messages postés 173 Statut Membre 44
 
Trint commence par la restauration du système ensuite dit nous quoi !
0
trint
 
rapport genproc:
Rapport GenProc 2.602 [4] - 11/07/2009 à 0:03:35
@ Windows XP Service Pack 3 - Mode normal
@ Mozilla Firefox (3.5) [Navigateur par défaut]

~~ ECHEC DU TELECHARGEMENT DE MBR.EXE ~~

# Etape 1/ Télécharge :

- Lop S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 (Eric 71 & Angeldark) sur ton Bureau.

- Toolbar-S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 (Team IDN) sur ton Bureau.

- MSNFix http://sosvirus.changelog.fr/MSNFix.zip (!aur3n7) et décompresse-le sur le Bureau.


Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ ; Choisis ta session courante *** PC *** (pour retrouver le rapport, clique sur le raccourci "Rapport GenProc[4]" sur ton bureau).


# Etape 2/

Lance Toolbar-S&D situé sur le Bureau.
Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.

# Etape 3/

Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
- Exécute l'option R.
- Si l'infection est détectée, exécute l'option N.
- Sauvegarde ce rapport sur ton bureau.

# Etape 4/

Double-clique sur Lop S&D pour lancer l'installation, séléctionne la langue souhaitée, puis choisis l'Option 2 - Suppression - et patiente jusqu'à ce qu'il ait terminé.

# Etape 5/

Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

# Etape 6/

Redémarre normalement et poste, dans la même réponse :

- Le contenu du rapport msnfix.txt situé dans C:\WINDOWS ;
- Le contenu du rapport TB.txt situé dans C:\ ;
- Le contenu du rapport lopR.txt situé dans C:\ ;
- Un nouveau rapport HijackThis http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm ;
- Un nouveau rapport GenProc ;

Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

~~ Arguments de la procédure ~~


# Détections [4] GenProc 2.602 11/07/2009 à 0:03:39
Lop:le 11/07/2009 à 0:03:50 "C:\Program Files\Circle Developement"
Toolbar:le 11/07/2009 à 0:03:53 "C:\Program Files\BitLord"
MSNFix:le 11/07/2009 à 0:04:07 "C:\WINDOWS\regedit.com"

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 0:04:21 ~~
0
Narco!4 Messages postés 2446 Statut Contributeur 467
 
suit ces manips
0
trint
 
les rapports:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3000+ )
BIOS : Version 07.00T
USER : PC ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090709-0] 4.8.1335 (Activated)
Firewall : ZoneAlarm Firewall 7.0.483.000 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:20 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:90 Go (Free:11 Go)
G:\ (Local Disk) - NTFS - Total:17 Go (Free:4 Go)
H:\ (Local Disk) - NTFS - Total:9 Go (Free:9 Go)
I:\ (Local Disk) - NTFS - Total:48 Go (Free:1 Go)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
M:\ (USB) - FAT32 - Total:3890 Mo (Free:1 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 11/07/2009| 0:27 )

--------------------\\ Listing des dossiers dans APPLIC~1

[09/09/2007|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{B33CBE2B-A739-401D-A5E0-041195C4A17B}
[09/09/2007|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{DFAB194F-9585-4C44-8299-0338F0BF379E}
[09/07/2009|11:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/02/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/02/2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[16/05/2007|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Aventail
[23/05/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/09/2007|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EBP
[14/07/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[20/08/2007|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[03/06/2009|19:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[10/03/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[15/07/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[10/07/2009|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[04/01/2008|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[21/07/2008|02:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[02/02/2007|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[23/12/2007|17:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[10/07/2009|16:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[04/06/2009|19:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[02/02/2007|13:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[16/04/2008|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[02/02/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[02/02/2007|12:43] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/02/2007|13:34] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[02/02/2007|12:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[09/07/2009|11:47] C:\DOCUME~1\PC\APPLIC~1\Adobe
[20/08/2007|04:46] C:\DOCUME~1\PC\APPLIC~1\Ahead
[16/02/2008|20:29] C:\DOCUME~1\PC\APPLIC~1\ALLCapture
[16/05/2007|18:59] C:\DOCUME~1\PC\APPLIC~1\Aventail
[27/06/2009|21:53] C:\DOCUME~1\PC\APPLIC~1\dvdcss
[09/09/2007|12:26] C:\DOCUME~1\PC\APPLIC~1\EBP
[26/04/2007|13:00] C:\DOCUME~1\PC\APPLIC~1\Google
[03/03/2007|22:20] C:\DOCUME~1\PC\APPLIC~1\Help
[04/02/2007|14:34] C:\DOCUME~1\PC\APPLIC~1\Hewlett-Packard
[02/02/2007|13:25] C:\DOCUME~1\PC\APPLIC~1\Identities
[09/02/2007|17:27] C:\DOCUME~1\PC\APPLIC~1\InterTrust
[21/06/2008|20:06] C:\DOCUME~1\PC\APPLIC~1\JLC's Software
[03/06/2009|18:59] C:\DOCUME~1\PC\APPLIC~1\Lavasoft
[23/09/2008|20:47] C:\DOCUME~1\PC\APPLIC~1\LuckyTender
[14/09/2008|21:49] C:\DOCUME~1\PC\APPLIC~1\Macromedia
[10/07/2009|16:03] C:\DOCUME~1\PC\APPLIC~1\Malwarebytes
[02/02/2007|23:25] C:\DOCUME~1\PC\APPLIC~1\Media Player Classic
[04/06/2009|19:03] C:\DOCUME~1\PC\APPLIC~1\Microsoft
[15/07/2008|02:56] C:\DOCUME~1\PC\APPLIC~1\Mozilla
[18/08/2007|11:50] C:\DOCUME~1\PC\APPLIC~1\OLYMPUS
[22/12/2007|16:53] C:\DOCUME~1\PC\APPLIC~1\Publish Providers
[02/02/2007|23:25] C:\DOCUME~1\PC\APPLIC~1\Real
[31/12/2007|19:01] C:\DOCUME~1\PC\APPLIC~1\SecuROM
[19/08/2007|14:13] C:\DOCUME~1\PC\APPLIC~1\SlySoft
[22/12/2007|16:52] C:\DOCUME~1\PC\APPLIC~1\Sony
[10/04/2008|18:52] C:\DOCUME~1\PC\APPLIC~1\Steinberg
[10/02/2007|19:08] C:\DOCUME~1\PC\APPLIC~1\Sun
[03/02/2007|12:12] C:\DOCUME~1\PC\APPLIC~1\Talkback
[11/07/2009|00:25] C:\DOCUME~1\PC\APPLIC~1\U3
[06/04/2007|01:23] C:\DOCUME~1\PC\APPLIC~1\Ulead Systems
[15/02/2007|22:12] C:\DOCUME~1\PC\APPLIC~1\vlc
[08/03/2008|13:25] C:\DOCUME~1\PC\APPLIC~1\Winamp

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[10/07/2009 21:11][--a------] C:\WINDOWS\tasks\WGASetup.job
[04/05/2007 13:54][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp officejet 6100 series#1170592315.job
[10/07/2009 21:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/09/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[04/06/2009|18:58] C:\Program Files\Adobe
[17/02/2007|12:22] C:\Program Files\Ahead
[02/02/2007|14:29] C:\Program Files\AIDA32 - Enterprise System Information
[22/12/2007|05:37] C:\Program Files\AIST
[02/02/2007|15:08] C:\Program Files\Alwil Software
[14/07/2008|18:26] C:\Program Files\Anti Trojan Elite
[09/06/2009|21:38] C:\Program Files\a-squared Free
[03/03/2007|19:38] C:\Program Files\ATI Technologies
[15/02/2007|23:08] C:\Program Files\AviSynth 2.5
[04/06/2009|19:04] C:\Program Files\AVSMedia
[03/02/2007|12:19] C:\Program Files\BitLord
[02/02/2007|20:29] C:\Program Files\CCleaner
[17/10/2008|22:19] C:\Program Files\Circle Developement
[02/02/2007|12:40] C:\Program Files\ComPlus Applications
[16/02/2008|13:04] C:\Program Files\DalianCD
[04/07/2007|02:29] C:\Program Files\Dial-Messenger
[31/12/2007|18:41] C:\Program Files\EA GAMES
[09/09/2007|12:26] C:\Program Files\EBP
[18/05/2009|04:36] C:\Program Files\eChanblard
[09/07/2009|00:57] C:\Program Files\eMule
[30/11/2007|17:36] C:\Program Files\Evariste
[14/07/2008|18:44] C:\Program Files\ewido anti-malware
[04/06/2009|19:02] C:\Program Files\Fichiers communs
[14/07/2008|18:48] C:\Program Files\Free.fr
[19/01/2009|20:21] C:\Program Files\Geoplan-Geospace
[04/02/2007|14:26] C:\Program Files\Hewlett-Packard
[10/07/2009|22:33] C:\Program Files\Hijackthis Version Fran‡aise
[09/06/2009|21:40] C:\Program Files\InstallShield Installation Information
[10/06/2009|23:10] C:\Program Files\Internet Explorer
[21/06/2009|11:44] C:\Program Files\Java
[02/02/2007|15:08] C:\Program Files\K-Lite Codec Pack
[04/06/2009|18:11] C:\Program Files\Lavasoft
[10/07/2009|16:03] C:\Program Files\Malwarebytes' Anti-Malware
[24/08/2008|20:29] C:\Program Files\Messenger
[17/10/2008|22:19] C:\Program Files\Messenger Plus! Live
[31/03/2007|01:03] C:\Program Files\MessengerPlus! 3
[02/02/2007|12:43] C:\Program Files\microsoft frontpage
[02/02/2007|15:05] C:\Program Files\Microsoft Office
[22/12/2007|00:20] C:\Program Files\Microsoft SQL Server
[02/02/2007|15:04] C:\Program Files\Microsoft.NET
[24/08/2008|20:22] C:\Program Files\Movie Maker
[11/07/2009|00:03] C:\Program Files\Mozilla Firefox
[02/02/2007|14:06] C:\Program Files\MSBuild
[06/07/2008|12:33] C:\Program Files\MSI
[14/11/2008|19:19] C:\Program Files\MSN
[02/02/2007|12:39] C:\Program Files\MSN Gaming Zone
[04/06/2009|18:51] C:\Program Files\MSN Messenger
[15/08/2007|19:30] C:\Program Files\MSXML 6.0
[24/08/2008|20:19] C:\Program Files\NetMeeting
[02/02/2007|12:40] C:\Program Files\Online Services
[24/08/2008|20:19] C:\Program Files\Outlook Express
[23/02/2008|15:54] C:\Program Files\PDF Editeur 2
[06/04/2008|13:52] C:\Program Files\PowerISO
[09/06/2009|21:47] C:\Program Files\RamBoost XP
[02/02/2007|14:40] C:\Program Files\Realtek AC97
[02/02/2007|14:04] C:\Program Files\Reference Assemblies
[10/02/2007|01:18] C:\Program Files\ReflexiveArcade
[09/06/2009|21:39] C:\Program Files\Ripp-it_AM
[02/02/2007|12:42] C:\Program Files\Services en ligne
[06/07/2008|12:28] C:\Program Files\Setup Files
[10/07/2009|19:30] C:\Program Files\SiSoftware
[19/08/2007|14:14] C:\Program Files\SlySoft
[23/12/2007|17:03] C:\Program Files\Sony
[22/12/2007|00:18] C:\Program Files\Sony Setup
[10/07/2009|15:07] C:\Program Files\Spybot - Search & Destroy
[18/08/2007|12:47] C:\Program Files\Storyboard Tools
[10/08/2008|21:25] C:\Program Files\Sun
[10/04/2008|18:48] C:\Program Files\Syncrosoft
[14/07/2008|20:55] C:\Program Files\ToniArts
[03/07/2008|23:42] C:\Program Files\Trust
[22/12/2007|00:20] C:\Program Files\Uninstall Information
[02/02/2007|14:45] C:\Program Files\VIA
[02/02/2007|15:08] C:\Program Files\VideoLAN
[04/09/2007|21:13] C:\Program Files\Virtools
[06/04/2008|14:57] C:\Program Files\VoptXP v7
[02/02/2007|20:36] C:\Program Files\Webteh
[26/08/2008|11:47] C:\Program Files\Winamp
[14/09/2007|12:17] C:\Program Files\Windows Live
[04/07/2008|03:44] C:\Program Files\Windows Live Safety Center
[02/02/2007|14:00] C:\Program Files\Windows Media Connect 2
[24/08/2008|20:19] C:\Program Files\Windows Media Player
[24/08/2008|20:19] C:\Program Files\Windows NT
[02/02/2007|12:42] C:\Program Files\WindowsUpdate
[17/04/2008|01:10] C:\Program Files\WinRAR
[16/04/2008|13:32] C:\Program Files\WinZip
[02/02/2007|12:43] C:\Program Files\xerox
[02/02/2007|20:29] C:\Program Files\Yahoo!
[16/02/2008|13:04] C:\Program Files\Zero G Registry
[15/07/2008|12:25] C:\Program Files\Zone Labs

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[16/02/2008|12:48] C:\Program Files\Fichiers communs\Adobe
[10/03/2007|16:19] C:\Program Files\Fichiers communs\Adobe Systems Shared
[02/02/2007|15:03] C:\Program Files\Fichiers communs\Ahead
[04/06/2009|19:04] C:\Program Files\Fichiers communs\AVSMedia
[02/02/2007|15:05] C:\Program Files\Fichiers communs\DESIGNER
[09/09/2007|12:26] C:\Program Files\Fichiers communs\EBP
[04/02/2007|14:27] C:\Program Files\Fichiers communs\Hewlett-Packard
[02/02/2007|20:12] C:\Program Files\Fichiers communs\InstallShield
[10/02/2007|18:34] C:\Program Files\Fichiers communs\Java
[17/02/2007|12:26] C:\Program Files\Fichiers communs\LightScribe
[02/02/2007|15:06] C:\Program Files\Fichiers communs\Microsoft Shared
[02/02/2007|12:41] C:\Program Files\Fichiers communs\MSSoap
[02/02/2007|13:35] C:\Program Files\Fichiers communs\ODBC
[02/02/2007|12:41] C:\Program Files\Fichiers communs\Services
[03/07/2008|23:42] C:\Program Files\Fichiers communs\snp2std
[02/02/2007|13:35] C:\Program Files\Fichiers communs\SpeechEngines
[24/08/2008|20:19] C:\Program Files\Fichiers communs\System
[03/06/2009|19:16] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 52 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Program Files\Circle Developement

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-11 00:29:24
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\gYAPIv4hnVjKwKFJkZXM2+7mcEQ=.dt2 12742 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\vXvXhuhRwjkz9Qwz9AOfG2fyDpg=.id2 336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\VY8V2FMnuVcJ0SeUORq1xl1Etji8=.dt2 3294 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\VY8V2FMnuVcJ0SeUORq1xl1Etji8=.id2 336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\WWCqedWxuxdYU2Kqkc9t+SgGzhw=.dt2 7223 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\WWCqedWxuxdYU2Kqkc9t+SgGzhw=.id2 336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\x7uO75VJgTBQ2isvH6lojwcbd+o=.dt2 13142 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\x7uO75VJgTBQ2isvH6lojwcbd+o=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\xAtNyM3vSRm9yJyQfiErBaxtxnc=.dt2 39308 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\xAtNyM3vSRm9yJyQfiErBaxtxnc=.id2 512 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\XClbCoQ7EWe1VZIux8F3f2FUdAA4=.dt2 51578 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\XClbCoQ7EWe1VZIux8F3f2FUdAA4=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\XkDW6G3ysQU0j6xvA5YwLfX4vK0=.dt2 3033 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\XkDW6G3ysQU0j6xvA5YwLfX4vK0=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\gYAPIv4hnVjKwKFJkZXM2+7mcEQ=.id2 400 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\H6of8Cj09JYipVmO2FSK2CFvwRRQ=.dt2 10913 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\H6of8Cj09JYipVmO2FSK2CFvwRRQ=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Hoy+c7CDf6RBbioPIKjYDI2Gzjg=.dt2 45185 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Hoy+c7CDf6RBbioPIKjYDI2Gzjg=.id2 512 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\hQiNbRD2FNjYnhnsukO9SHSfas34=.dt2 23443 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\hQiNbRD2FNjYnhnsukO9SHSfas34=.id2 496 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\T22FldMW8f3iwkkhiv0xj2p94mTk=.dt2 65833 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\T22FldMW8f3iwkkhiv0xj2p94mTk=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\TIVsOVLDPMct7m6on2FuPebPVxfI=.dt2 34887 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\TIVsOVLDPMct7m6on2FuPebPVxfI=.id2 464 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\uIN5MBXqLe3bSYNTDBevlHbWrBA=.dt2 2804 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\uIN5MBXqLe3bSYNTDBevlHbWrBA=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\uNodB+9MY9JNUlCxwyGhQOAMtwg=.dt2 26531 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\uNodB+9MY9JNUlCxwyGhQOAMtwg=.id2 496 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\UwV2FtqMKn4b34BklAtBtfJLnelo=.dt2 43136 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\UwV2FtqMKn4b34BklAtBtfJLnelo=.id2 448 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\VOqxwC8pnOGy9WTRb5ZxuqRO2q0=.dt2 7648 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\VOqxwC8pnOGy9WTRb5ZxuqRO2q0=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\vQFEb4cp7DZwm9SeC2F2FvqNsGv+4=.dt2 9961 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\vQFEb4cp7DZwm9SeC2F2FvqNsGv+4=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\1ho4+cAw492bfODPRHdI2FyylLAk=.dt2 17787 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\1ho4+cAw492bfODPRHdI2FyylLAk=.id2 528 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\3f7e6Uqm4yn2CGnyCBpDpo+u1tE=.dt2 3221 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\3f7e6Uqm4yn2CGnyCBpDpo+u1tE=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\3YeFt+C116gAExV8ZQPQKes2Zrk=.dt2 6420 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\3YeFt+C116gAExV8ZQPQKes2Zrk=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\46sZRH3KvqmFupFeFS8iKm4Fb2Fw=.dt2 5942 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\46sZRH3KvqmFupFeFS8iKm4Fb2Fw=.id2 336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\EpAVx0GtbFDKAgw2Fncch3Sj11OA=.dt2 17814 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\M3Y6bCpEQrhjrfhKHgdHqI5XvYU=.dt2 9622 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\M3Y6bCpEQrhjrfhKHgdHqI5XvYU=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\mSjM2plQyQjjln0jYNvyzFYZDq4=.dt2 7854 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\mSjM2plQyQjjln0jYNvyzFYZDq4=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\ob8SH5grg2ayIOMkceADnpU6KeY=.dt2 72041 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\ob8SH5grg2ayIOMkceADnpU6KeY=.id2 528 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\OJk626WDdJ3F67vUUX0AxfN+iuI=.dt2 37516 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\OJk626WDdJ3F67vUUX0AxfN+iuI=.id2 544 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\OuykYDQDvEC2FhHDlQ0WlQM5lKiU=.dt2 22002 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\OuykYDQDvEC2FhHDlQ0WlQM5lKiU=.id2 400 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\EpAVx0GtbFDKAgw2Fncch3Sj11OA=.id2 384 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\if70RRjv12NZqQ9MNgjZHq9OQLA=.dt2 78802 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\if70RRjv12NZqQ9MNgjZHq9OQLA=.id2 336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\j+kZd+AEgyxc3FHrb1WOrfomrJY=.dt2 5213 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\j+kZd+AEgyxc3FHrb1WOrfomrJY=.id2 304 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\J691utye9LcsOXREWYotKexEIF0=.dt2 7190 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\J691utye9LcsOXREWYotKexEIF0=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\jL6gDfhSbrttsevdR2FxOZnMyF8=.dt2 19514 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\jL6gDfhSbrttsevdR2FxOZnMyF8=.id2 512 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\JOU9fFgZKIF9GBfCEjX2FU8GwCMA=.dt2 158 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\JOU9fFgZKIF9GBfCEjX2FU8GwCMA=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\6KcUHNhibQ2kraJwRzE2RCAMcF4=.dt2 30782 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\6KcUHNhibQ2kraJwRzE2RCAMcF4=.id2 544 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\7nJT7vWETPmykQGA1KT1PJGccno=.dt2 32675 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\7nJT7vWETPmykQGA1KT1PJGccno=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\8oWHqPlGHLoZpa+1s2fKmrwK658=.dt2 976 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\8oWHqPlGHLoZpa+1s2fKmrwK658=.id2 304 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\AiOv9DRPZT2FDetPcyHNE5pywyqM=.dt2 303 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\AiOv9DRPZT2FDetPcyHNE5pywyqM=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Al2FVJ9vWTAp9hsu9JQa8gVw+UbQ=.dt2 8434 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Al2FVJ9vWTAp9hsu9JQa8gVw+UbQ=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Y5H7hiw0jnY0uFrmG9T6o3dbFZY=.id2 304 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\y9KEYWvEFABB0Iqpr6mM2PqMSH8=.dt2 10170 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\y9KEYWvEFABB0Iqpr6mM2PqMSH8=.id2 336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\YJ0lK0JMNuZGg6GI2Fccd4UyCjVU=.dt2 48866 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\YJ0lK0JMNuZGg6GI2Fccd4UyCjVU=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Zy5fXJxgh4L09c9rKackm1NCL3E=.dt2 5568 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\Zy5fXJxgh4L09c9rKackm1NCL3E=.id2 304 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\DrWgMaGhOiUy1AacGLrtle2w1rE=.dt2 43049 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\DrWgMaGhOiUy1AacGLrtle2w1rE=.id2 416 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\dWfyCNZxdMF3aTcZIXz5TsnfHbM=.dt2 14856 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\dWfyCNZxdMF3aTcZIXz5TsnfHbM=.id2 528 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\EaD8UmQiCos8jkef2FLHnrekLJks=.dt2 5336 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\EaD8UmQiCos8jkef2FLHnrekLJks=.id2 320 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\eCbXMD0+6kZCyZiAeskNIPxS6hE=.dt2 8028 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Messenger\camille_8891@hotmail.fr\ObjectStore\CustomEmoticons\eCbXMD0+6kZCyZiAeskNIPxS6hE=.id2 352 bytes
C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1087 bytes hidden from API
scan completed successfully
hidden processes: 0
hidden files: 94

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:30][D:6]-> C:\DOCUME~1\PC\LOCALS~1\Temp
[F:2][D:0]-> C:\DOCUME~1\PC\Cookies
[F:14][D:4]-> C:\DOCUME~1\PC\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 11/07/2009| 0:30 - Option : [1]

--------------------\\ Fin du rapport a 0:30:41











-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3000+ )
BIOS : Version 07.00T
USER : PC ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090709-0] 4.8.1335 (Activated)
Firewall : ZoneAlarm Firewall 7.0.483.000 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:20 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:90 Go (Free:11 Go)
G:\ (Local Disk) - NTFS - Total:17 Go (Free:4 Go)
H:\ (Local Disk) - NTFS - Total:9 Go (Free:9 Go)
I:\ (Local Disk) - NTFS - Total:48 Go (Free:1 Go)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
M:\ (USB) - FAT32 - Total:3890 Mo (Free:1 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 11/07/2009| 0:32 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\BitLord
C:\Program Files\BitLord\BitLord.exe
C:\Program Files\BitLord\BitLord.url
C:\Program Files\BitLord\BitLord.xml
C:\Program Files\BitLord\Downloads
C:\Program Files\BitLord\Downloads.xml
C:\Program Files\BitLord\lang
C:\Program Files\BitLord\License.txt
C:\Program Files\BitLord\rules
C:\Program Files\BitLord\Torrents
C:\Program Files\BitLord\uninst.exe
C:\Program Files\BitLord\lang\lang_ar_ae.xml
C:\Program Files\BitLord\lang\lang_bg_bg.xml
C:\Program Files\BitLord\lang\lang_ca_es.xml
C:\Program Files\BitLord\lang\lang_cz_cz.xml
C:\Program Files\BitLord\lang\lang_da_dk.xml
C:\Program Files\BitLord\lang\lang_de_de.xml
C:\Program Files\BitLord\lang\lang_el_gr.xml
C:\Program Files\BitLord\lang\lang_en_us.xml
C:\Program Files\BitLord\lang\lang_es_ar.xml
C:\Program Files\BitLord\lang\lang_es_es.xml
C:\Program Files\BitLord\lang\lang_et_ee.xml
C:\Program Files\BitLord\lang\lang_fi_fi.xml
C:\Program Files\BitLord\lang\lang_fr_fr.xml
C:\Program Files\BitLord\lang\lang_gl_es.xml
C:\Program Files\BitLord\lang\lang_he_il.xml
C:\Program Files\BitLord\lang\lang_hu_hu.xml
C:\Program Files\BitLord\lang\lang_it_it.xml
C:\Program Files\BitLord\lang\lang_jp_jp.xml
C:\Program Files\BitLord\lang\lang_ko_kr.xml
C:\Program Files\BitLord\lang\lang_nb_no.xml
C:\Program Files\BitLord\lang\lang_nl_nl.xml
C:\Program Files\BitLord\lang\lang_pl_pl.xml
C:\Program Files\BitLord\lang\lang_pt_br.xml
C:\Program Files\BitLord\lang\lang_pt_pt.xml
C:\Program Files\BitLord\lang\lang_ro_ro.xml
C:\Program Files\BitLord\lang\lang_ru_ru.xml
C:\Program Files\BitLord\lang\lang_sk_sk.xml
C:\Program Files\BitLord\lang\lang_sl_si.xml
C:\Program Files\BitLord\lang\lang_sr_sr.xml
C:\Program Files\BitLord\lang\lang_sv_se.xml
C:\Program Files\BitLord\lang\lang_th_th.xml
C:\Program Files\BitLord\lang\lang_tr_tr.xml
C:\Program Files\BitLord\lang\lang_va_es.xml
C:\Program Files\BitLord\lang\lang_zh_tw.xml
C:\Program Files\BitLord\rules\ipfilter.dat
C:\Program Files\BitLord\rules\tracker.dat
C:\Program Files\BitLord\Torrents\A very british gangster.dvdripfrench.WDF.avi.torrent
C:\Program Files\BitLord\Torrents\Adobe Dreamweaver CS4.torrent
C:\Program Files\BitLord\Torrents\Adobe Premiere Pro CS3 + Keygen Activator 100% working #1.torrent
C:\Program Files\BitLord\Torrents\Armee.Haute.Technologie.SECRET.DEFENSE.torrent
C:\Program Files\BitLord\Torrents\Cr4zy M4ch1n3s 2.rar.torrent
C:\Program Files\BitLord\Torrents\Crazy Machines 2.torrent
C:\Program Files\BitLord\Torrents\CRAZY MACHINES 2[0].torrent
C:\Program Files\BitLord\Torrents\Crazy Machines II.torrent
C:\Program Files\BitLord\Torrents\Crazy Machines II[0].torrent
C:\Program Files\BitLord\Torrents\Crazy Machines.rar.torrent
C:\Program Files\BitLord\Torrents\Crazy Machines.torrent
C:\Program Files\BitLord\Torrents\Crazy.Machines.2.GERMAN-SiLENTGATE.torrent
C:\Program Files\BitLord\Torrents\Crazy.Machines.2.GERMAN-SiLENTGATE[0].torrent
C:\Program Files\BitLord\Torrents\Crazy.Machines.II-ViTALiTY.torrent
C:\Program Files\BitLord\Torrents\Crazy.Machines.II.rar.torrent
C:\Program Files\BitLord\Torrents\Download.torrent
C:\Program Files\BitLord\Torrents\FM2008.torrent
C:\Program Files\BitLord\Torrents\Football Manager.torrent
C:\Program Files\BitLord\Torrents\Football.Manager.2008.CloneCD-NETSHOW.torrent
C:\Program Files\BitLord\Torrents\Football.Manager.2008.PROPER-FLT.torrent
C:\Program Files\BitLord\Torrents\Frontiere s.torrent
C:\Program Files\BitLord\Torrents\Le Scandale Des Armes A Uranium Appauvri - La Guerre Radioactive Secrete.avi.torrent
C:\Program Files\BitLord\Torrents\Le Scandale Des Armes A Uranium Appauvri - La Guerre Radioactive Secrete.avi.xml
C:\Program Files\BitLord\Torrents\Orfeu!.torrent
C:\Program Files\BitLord\Torrents\Orphée (1949).torrent
C:\Program Files\BitLord\Torrents\pack.torrent
C:\Program Files\BitLord\Torrents\pack.xml
C:\Program Files\BitLord\Torrents\Voyage.au.coeur.de.la.lune.torrent
C:\Program Files\BitLord\Torrents\Windows XP Pro SP3 FR - IE7 - WMP11.iso.torrent
C:\Program Files\BitLord\Torrents\[Tsubasa-Fansub_&_Gensoteam]_Saint_Seiya_Hades_-_Elysion-Hen_-_OAV_06_-_DVD-JAP_[BB71D21C].mp4.torrent
C:\DOCUME~1\PC\MENUDM~1\PROGRA~1\BitLord

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://moteur.chat-land.org/"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
"Default_Page_Url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_Url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"CustomizeSearch"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm"
"SearchAssistant"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 11/07/2009| 0:33 - Option : [1]

-----------\\ Fin du rapport a 0:33:12,09
0
Narco!4 Messages postés 2446 Statut Contributeur 467
 
option 2 et msnfix
0
trint
 
ça a empiré mon ordi reboote tout le temps avant la page d'acueil de windows même en mode sans échec il reboot. il reboot en boucle. tu y comprend quelque chose??
0
trint
 
Est ce que quand on répare windows faut réinstaller tout les logiciels qui étais instanlé?
0
Dylan_cupi Messages postés 173 Statut Membre 44
 
Pouquoi n'a pas tu simplement restauré ton ordinateur.

Quand tu viens ici ait au moin l'obligance de faire ce que l'on te dit c'est parceque l'on a tout de même une expérience et qu'on te conseil ce qui nous semble le mieux !

J'ai déjà du reformaté mon ordinateur suite à ce problème la fois suivante j'avais simplement restauré et le problème était résolu !

Cordialement Dylan
0
trint
 
j'ai déjà tenter ça sans aucun résultat c'est même la première chose que j'ai faites il me semble l'avoir déjà dit non!?
0