Publicités intempestives
Scalou13
Messages postés
38
Statut
Membre
-
XaTon Messages postés 2160 Statut Membre -
XaTon Messages postés 2160 Statut Membre -
Bonjour,
depuis quelques temps je reçois, comme beaucoup de monde, des publicités intempestives. J'ai bien lu la marche à suivre dans le forum, mais vu mes compétences dans ce domaine, je pense qu'il me faudrait de l'aide. Par avance merci.
depuis quelques temps je reçois, comme beaucoup de monde, des publicités intempestives. J'ai bien lu la marche à suivre dans le forum, mais vu mes compétences dans ce domaine, je pense qu'il me faudrait de l'aide. Par avance merci.
Configuration: Windows Vista Internet Explorer 7.0
10 réponses
-
Bonjour
Pardon pour l'intrusion, je ne fais que passer :-)
Avec la version actuelle de navilog, il n'est plus nécessaire de désactiver l'UAC mais il faut toujours le lancer par un clic droit "En tant qu'administrateur".
Attention au Tea Timer de Spy Bot :
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Il faut, au minimum le désactiver, l'idéal étant de supprimer totalement Spy Bot. -
Bonjour ,
Fait ceci :
~~~~~~~~~~~~~~~> Hijack This <~~~~~~~~~~~~~~~~~~~
- Telecharger Hijack
>http://www.infos-du-net.com/telecharger/HijackThis.html
Une fois Hijack installer, exécuter le :
- Cliquer sur "Do a system scan and save a logfile"
- Un fichier texte s'ouvre, si ce n'est pas le cas celui-ci se trouve dans le même dossier que hijackthis.exe .
- Faire édition / sélectionner tout
- Clic droit / copier
- Poste moi le rapport entier
-
Par avance merci de ton aide, voilà le fichier texte :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:13:39, on 22/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\pdfforge Toolbar\SearchSettings.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark Z2300 Series\lxdpmon.exe
C:\Program Files\Lexmark Z2300 Series\ezprint.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Winsudate\gibusr.exe
C:\Users\Pascal\AppData\Local\ymyco.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pascal\Desktop\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange\ToolbarFR\ToolbarContainer101000304.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [lxdpmon.exe] "C:\Program Files\Lexmark Z2300 Series\lxdpmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark Z2300 Series\ezprint.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WinUsr] C:\Program Files\Winsudate\gibusr.exe
O4 - HKCU\..\Run: [ymyco] "c:\users\pascal\appdata\local\ymyco.exe" ymyco
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User 'Default user')
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\Pascal\AppData\Local\Temp\cce1AB3.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: traduire la page - C:\Users\Pascal\AppData\Local\Temp\cce1AA1.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\Pascal\AppData\Local\Temp\cce1AB2.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. https://www.bitdefender.fr/ - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Service Google Update (gupdate1c9c058e4beac30) (gupdate1c9c058e4beac30) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common
Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: lxdp_device - - C:\Windows\system32\lxdpcoms.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
O23 - Service: Gestionnaire de mise à jour Winsudate (WinSvc) - Winsudate - C:\Program Files\Winsudate\gibsvc.exe
-
-
Fait ceci :
~~~~~~~~~~~~~~~> Lop S&D <~~~~~~~~~~~~~~~~~~
Téléchargez Lop S&D d'Eric 71 & Angeldark à partir de ce lien
> https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
- Cliquez sur Enregistrer et placez le sur le Bureau
- Une fois le Téléchargement terminé, cliquez sur Fermer
- Double-cliquez sur l'icône pour lancer l'installation
- Acceptez les termes d'utilisation et cliquez sur Suivant
- Cliquez sur Oui pour créer un répertoire
- Double-cliquez sur le nouvel icône placé sur votre bureau pour lancer l'outil
- Choisissez votre langue : dans notre cas, ce sera Français, tapez F et pressez la touche Entrée de votre clavier
- Ensuite , choisir l'option 1
- Un rapport apparait automatiquement, Poste le dans ton prochain message
-
Voilà la suite :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz )
BIOS : Default System BIOS
USER : Pascal ( Administrator )
BOOT : Normal boot
Antivirus : BitDefender Antivirus 12.0 (Activated)
Firewall : BitDefender Firewall 12.0 (Activated)
C:\ (Local Disk) - NTFS - Total:223 Go (Free:143 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 22/08/2009|16:38 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[11/05/2009|17:08] C:\Users\Pascal\AppData\Local\Adobe
[08/02/2009|12:15] C:\Users\Pascal\AppData\Local\Ahead
[07/02/2009|20:24] C:\Users\Pascal\AppData\Local\AOL
[07/02/2009|21:02] C:\Users\Pascal\AppData\Local\AOL OCP
[07/02/2009|20:07] C:\Users\Pascal\AppData\Local\Application Data
[07/02/2009|20:17] C:\Users\Pascal\AppData\Local\AtStart.txt
[18/06/2009|22:28] C:\Users\Pascal\AppData\Local\d3d9caps.dat
[13/06/2009|17:26] C:\Users\Pascal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[07/02/2009|20:17] C:\Users\Pascal\AppData\Local\DSwitch.txt
[08/03/2009|13:50] C:\Users\Pascal\AppData\Local\eMule
[12/06/2009|22:39] C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT
[25/04/2009|09:28] C:\Users\Pascal\AppData\Local\Google
[19/08/2009|10:38] C:\Users\Pascal\AppData\Local\hhzau.exe
[07/02/2009|20:07] C:\Users\Pascal\AppData\Local\Historique
[22/08/2009|06:49] C:\Users\Pascal\AppData\Local\IconCache.db
[13/02/2009|20:23] C:\Users\Pascal\AppData\Local\IsolatedStorage
[22/08/2009|10:39] C:\Users\Pascal\AppData\Local\iycyo.bat
[19/05/2009|20:34] C:\Users\Pascal\AppData\Local\Microsoft
[25/03/2009|21:41] C:\Users\Pascal\AppData\Local\Microsoft Help
[10/04/2009|17:43] C:\Users\Pascal\AppData\Local\Orange
[07/02/2009|20:17] C:\Users\Pascal\AppData\Local\QSwitch.txt
[12/06/2009|20:48] C:\Users\Pascal\AppData\Local\QuickPlay
[21/08/2009|10:38] C:\Users\Pascal\AppData\Local\rexbhc.exe
[22/08/2009|16:37] C:\Users\Pascal\AppData\Local\Temp
[07/02/2009|20:07] C:\Users\Pascal\AppData\Local\Temporary Internet Files
[20/02/2009|18:28] C:\Users\Pascal\AppData\Local\VirtualStore
[22/08/2009|16:37] C:\Users\Pascal\AppData\Local\ymyco.dat
[01/08/2009|10:44] C:\Users\Pascal\AppData\Local\ymyco.exe
[16/08/2009|17:45] C:\Users\Pascal\AppData\Local\ymyco_nav.dat
[22/08/2009|16:38] C:\Users\Pascal\AppData\Local\ymyco_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[22/08/2009 16:09][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[22/08/2009 10:37][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[22/08/2009 10:39][--a------] C:\Windows\tasks\Google Software Updater.job
[22/08/2009 15:35][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{ED9F3076-22B9-4392-9469-02812FE1EFD8}.job
[22/08/2009 10:37][--ah-----] C:\Windows\tasks\SA.DAT
[22/08/2009 06:49][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[30/07/2008|01:57] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[14/02/2009|11:22] C:\ProgramData\Adobe
[07/02/2009|21:02] C:\ProgramData\AOL
[07/02/2009|21:02] C:\ProgramData\AOL OCP
[02/11/2006|15:02] C:\ProgramData\Application Data
[03/04/2009|18:24] C:\ProgramData\BitDefender
[07/02/2009|20:06] C:\ProgramData\Bureau
[12/04/2009|20:16] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[12/06/2009|20:48] C:\ProgramData\DVD.exe
[08/03/2009|13:50] C:\ProgramData\eMule
[14/05/2009|18:57] C:\ProgramData\Ezprint
[14/05/2009|18:57] C:\ProgramData\FastPics.log
[07/02/2009|20:06] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[15/02/2009|20:03] C:\ProgramData\FRA
[15/02/2009|20:03] C:\ProgramData\Games.exe
[20/02/2009|21:20] C:\ProgramData\Google
[21/08/2009|17:28] C:\ProgramData\Google Updater
[06/02/2009|14:59] C:\ProgramData\Hewlett-Packard
[06/02/2009|15:03] C:\ProgramData\hpqp.ini
[16/08/2009|10:56] C:\ProgramData\hpqp.txt
[15/02/2009|20:03] C:\ProgramData\Karaoke.exe
[08/02/2009|12:21] C:\ProgramData\LightScribe
[07/02/2009|20:06] C:\ProgramData\Menu D‚marrer
[15/02/2009|19:20] C:\ProgramData\Messenger Plus!
[23/02/2009|21:04] C:\ProgramData\Microsoft
[13/08/2009|05:06] C:\ProgramData\Microsoft Help
[16/05/2009|23:58] C:\ProgramData\MobileTV.exe
[07/02/2009|20:06] C:\ProgramData\ModŠles
[15/02/2009|20:03] C:\ProgramData\MPV.exe
[30/07/2008|01:44] C:\ProgramData\muvee Technologies
[08/02/2009|12:12] C:\ProgramData\Nero
[07/02/2009|22:43] C:\ProgramData\NOS
[06/02/2009|15:04] C:\ProgramData\NVIDIA
[22/08/2009|15:15] C:\ProgramData\nvModes.001
[22/08/2009|15:15] C:\ProgramData\nvModes.dat
[11/04/2009|12:13] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[03/04/2009|18:44] C:\ProgramData\Symantec
[02/06/2009|17:06] C:\ProgramData\Temp
[02/11/2006|15:02] C:\ProgramData\Templates
[07/02/2009|20:10] C:\ProgramData\Viewpoint
[30/07/2008|01:21] C:\ProgramData\WildTangent
[16/03/2009|21:48] C:\ProgramData\WindowsSearch
[27/04/2009|22:48] C:\ProgramData\WinZip
--------------------\\ Listing des dossiers dans C:\Program Files
[30/07/2008|01:57] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[07/02/2009|22:48] C:\Program Files\Adobe
[07/02/2009|20:10] C:\Program Files\AIM6
[30/07/2008|02:09] C:\Program Files\AOL
[06/02/2009|14:51] C:\Program Files\AVerMedia
[03/04/2009|18:19] C:\Program Files\BitDefender
[06/02/2009|14:47] C:\Program Files\Broadcom
[02/06/2009|17:07] C:\Program Files\Common Files
[06/02/2009|15:02] C:\Program Files\CyberLink
[09/05/2009|18:48] C:\Program Files\DivX
[07/02/2009|23:39] C:\Program Files\EasyBits For Kids
[08/03/2009|13:49] C:\Program Files\eMule
[07/02/2009|20:06] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[18/05/2009|17:42] C:\Program Files\Google
[15/02/2009|09:55] C:\Program Files\Hewlett-Packard
[30/07/2008|02:16] C:\Program Files\HP
[30/07/2008|01:21] C:\Program Files\HP Games
[06/02/2009|14:56] C:\Program Files\IDT
[18/04/2009|11:51] C:\Program Files\InstallShield Installation Information
[06/02/2009|14:48] C:\Program Files\Intel
[30/07/2009|06:06] C:\Program Files\Internet Explorer
[11/04/2009|12:21] C:\Program Files\Java
[20/02/2009|20:49] C:\Program Files\K-Lite Codec Pack
[29/06/2009|20:49] C:\Program Files\Letmin
[14/05/2009|18:57] C:\Program Files\Lexmark Toolbar
[14/05/2009|18:57] C:\Program Files\Lexmark Z2300 Series
[15/07/2009|19:56] C:\Program Files\Messenger Plus! Live
[07/02/2009|21:20] C:\Program Files\Microsoft
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[13/02/2009|20:45] C:\Program Files\Microsoft Office
[01/08/2009|09:10] C:\Program Files\Microsoft Silverlight
[18/02/2009|21:54] C:\Program Files\Microsoft SQL Server Compact Edition
[13/02/2009|20:45] C:\Program Files\Microsoft Visual Studio
[13/02/2009|20:42] C:\Program Files\Microsoft Visual Studio 8
[12/06/2009|21:13] C:\Program Files\Microsoft Works
[13/02/2009|20:44] C:\Program Files\Microsoft.NET
[30/07/2008|10:07] C:\Program Files\Movie Maker
[13/02/2009|20:45] C:\Program Files\MSBuild
[07/02/2009|20:42] C:\Program Files\MSXML 4.0
[30/07/2008|01:44] C:\Program Files\muvee Technologies
[18/04/2009|11:51] C:\Program Files\Navman
[08/02/2009|12:12] C:\Program Files\Nero
[07/02/2009|22:43] C:\Program Files\NOS
[07/02/2009|20:10] C:\Program Files\Online Services
[10/04/2009|17:43] C:\Program Files\Orange
[07/02/2009|23:28] C:\Program Files\PDFCreator
[07/02/2009|23:28] C:\Program Files\pdfforge Toolbar
[06/02/2009|14:51] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[22/08/2009|15:43] C:\Program Files\RegCleaner
[10/04/2009|23:09] C:\Program Files\Spybot - Search & Destroy
[06/02/2009|14:52] C:\Program Files\Synaptics
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[26/05/2009|19:45] C:\Program Files\VideoLAN
[07/02/2009|20:10] C:\Program Files\Viewpoint
[30/07/2008|10:07] C:\Program Files\Windows Calendar
[30/07/2008|10:07] C:\Program Files\Windows Collaboration
[30/07/2008|10:07] C:\Program Files\Windows Defender
[30/07/2008|10:07] C:\Program Files\Windows Journal
[18/02/2009|21:54] C:\Program Files\Windows Live
[07/02/2009|21:20] C:\Program Files\Windows Live SkyDrive
[13/08/2009|05:05] C:\Program Files\Windows Mail
[13/08/2009|05:05] C:\Program Files\Windows Media Player
[07/02/2009|20:06] C:\Program Files\Windows NT
[30/07/2008|10:07] C:\Program Files\Windows Photo Gallery
[30/07/2008|10:07] C:\Program Files\Windows Sidebar
[29/06/2009|20:49] C:\Program Files\Winsudate
[27/04/2009|22:47] C:\Program Files\WinZip
[21/03/2009|02:56] C:\Program Files\YesMessenger
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[07/02/2009|22:48] C:\Program Files\Common Files\Adobe
[07/02/2009|20:10] C:\Program Files\Common Files\AOL
[03/04/2009|18:19] C:\Program Files\Common Files\BitDefender
[13/02/2009|20:45] C:\Program Files\Common Files\DESIGNER
[30/07/2008|02:11] C:\Program Files\Common Files\InstallShield
[30/07/2008|02:18] C:\Program Files\Common Files\Java
[06/02/2009|15:00] C:\Program Files\Common Files\LightScribe
[12/06/2009|21:08] C:\Program Files\Common Files\microsoft shared
[30/07/2008|01:44] C:\Program Files\Common Files\muvee Technologies
[08/02/2009|12:13] C:\Program Files\Common Files\Nero
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[03/04/2009|18:46] C:\Program Files\Common Files\Symantec Shared
[12/06/2009|21:06] C:\Program Files\Common Files\System
[07/02/2009|21:04] C:\Program Files\Common Files\Windows Live
--------------------\\ Process
( 91 Processes )
iexplore.exe ~ [PID:1424]
iexplore.exe ~ [PID:4808]
iexplore.exe ~ [PID:5876]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\Pascal\AppData\Local\Temp\nsr358D.tmp
C:\Users\Pascal\AppData\Local\Temp\nsuE6DA.exe
C:\Users\Pascal\AppData\Local\Temp\nsuE6DA.tmp
C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@advertising[1].txt
C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@bigpoint[2].txt
C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.darkorbit.bigpoint[1].txt
C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.deepolis.bigpoint[1].txt
C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.seafight.bigpoint[1].txt
C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.seafight.bigpoint[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-22 16:38:58
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
C:\Users\Pascal\AppData\Local\ymyco.dat
C:\Users\Pascal\AppData\Local\ymyco.exe
C:\Users\Pascal\AppData\Local\ymyco_nav.dat
C:\Users\Pascal\AppData\Local\ymyco_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\carte europe navman keygen.sis.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\crack [2009] navman f20.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\DivX codec 6.8 PRO include keygen 7.12.2007.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\Spyware Doctor 5.5 Keygen Crack.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\Spyware Doctor 6.0.0.386 keygen Keygen.lnk
C:\Users\Pascal\Downloads\eMule\Incoming\Navman\crack [2009] actualizacion de gps navman .rar
C:\Users\Pascal\Downloads\eMule\Incoming\Navman\crack [2009] navman f20.zip
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\N 95 - GPS - Card ID nø.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\garmin_kgen.exe
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\IMEI converter.exe
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\MAP Codes.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\N95.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\readme.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\Archive X-plore
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\X-plore v 1.22.sisx
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\XploreKeygen.exe
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\Archive X-plore\X-plore_S60_3rd.sisx
[F:1117][D:153]-> C:\Users\Pascal\AppData\Local\Temp
[F:625][D:1]-> C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies
[F:166][D:4]-> C:\Users\Pascal\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 22/08/2009|16:41 - Option : [1]
--------------------\\ Fin du rapport a 16:41:40
[ UAC => 1 ] -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
~~~~~~~~~~~~~~~> Lop S&D <~~~~~~~~~~~~~~~~~~
- Relancer Lop S&D
- Dans le menu principal, tapez 2 puis validez par entrée.
- Le menu démarrer et les icônes vont à nouveau disparaître.. c'est normal.
- Le nettoyage va prendre quelques minutes...
- Une fois l'opération terminée, le rapport de nettoyage s'ouvre.
- Poste ce rapport dans ton prochain message
-
Voilà la suite...
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz )
BIOS : Default System BIOS
USER : Pascal ( Administrator )
BOOT : Normal boot
Antivirus : BitDefender Antivirus 12.0 (Activated)
Firewall : BitDefender Firewall 12.0 (Activated)
C:\ (Local Disk) - NTFS - Total:223 Go (Free:143 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 22/08/2009|16:55 )
[ UAC => 1 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\Pascal\AppData\Local\Temp\nsr358D.tmp
Supprime! - C:\Users\Pascal\AppData\Local\Temp\nsuE6DA.exe
Supprime! - C:\Users\Pascal\AppData\Local\Temp\nsuE6DA.tmp
Supprime! - C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@advertising[1].txt
Supprime! - C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@bigpoint[2].txt
Supprime! - C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.darkorbit.bigpoint[1].txt
Supprime! - C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.deepolis.bigpoint[1].txt
Supprime! - C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies\pascal@fr.seafight.bigpoint[1].txt
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Supprime! - C:\Program Files\Viewpoint
Supprime! - C:\PROGRA~2\Viewpoint
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[11/05/2009|17:08] C:\Users\Pascal\AppData\Local\Adobe
[08/02/2009|12:15] C:\Users\Pascal\AppData\Local\Ahead
[07/02/2009|20:24] C:\Users\Pascal\AppData\Local\AOL
[07/02/2009|21:02] C:\Users\Pascal\AppData\Local\AOL OCP
[07/02/2009|20:07] C:\Users\Pascal\AppData\Local\Application Data
[07/02/2009|20:17] C:\Users\Pascal\AppData\Local\AtStart.txt
[18/06/2009|22:28] C:\Users\Pascal\AppData\Local\d3d9caps.dat
[13/06/2009|17:26] C:\Users\Pascal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[07/02/2009|20:17] C:\Users\Pascal\AppData\Local\DSwitch.txt
[08/03/2009|13:50] C:\Users\Pascal\AppData\Local\eMule
[12/06/2009|22:39] C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT
[25/04/2009|09:28] C:\Users\Pascal\AppData\Local\Google
[19/08/2009|10:38] C:\Users\Pascal\AppData\Local\hhzau.exe
[07/02/2009|20:07] C:\Users\Pascal\AppData\Local\Historique
[22/08/2009|06:49] C:\Users\Pascal\AppData\Local\IconCache.db
[13/02/2009|20:23] C:\Users\Pascal\AppData\Local\IsolatedStorage
[22/08/2009|10:39] C:\Users\Pascal\AppData\Local\iycyo.bat
[19/05/2009|20:34] C:\Users\Pascal\AppData\Local\Microsoft
[25/03/2009|21:41] C:\Users\Pascal\AppData\Local\Microsoft Help
[10/04/2009|17:43] C:\Users\Pascal\AppData\Local\Orange
[07/02/2009|20:17] C:\Users\Pascal\AppData\Local\QSwitch.txt
[12/06/2009|20:48] C:\Users\Pascal\AppData\Local\QuickPlay
[21/08/2009|10:38] C:\Users\Pascal\AppData\Local\rexbhc.exe
[22/08/2009|16:56] C:\Users\Pascal\AppData\Local\Temp
[07/02/2009|20:07] C:\Users\Pascal\AppData\Local\Temporary Internet Files
[20/02/2009|18:28] C:\Users\Pascal\AppData\Local\VirtualStore
[22/08/2009|16:55] C:\Users\Pascal\AppData\Local\ymyco.dat
[01/08/2009|10:44] C:\Users\Pascal\AppData\Local\ymyco.exe
[16/08/2009|17:45] C:\Users\Pascal\AppData\Local\ymyco_nav.dat
[22/08/2009|16:55] C:\Users\Pascal\AppData\Local\ymyco_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[22/08/2009 16:09][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[22/08/2009 10:37][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[22/08/2009 10:39][--a------] C:\Windows\tasks\Google Software Updater.job
[22/08/2009 15:35][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{ED9F3076-22B9-4392-9469-02812FE1EFD8}.job
[22/08/2009 10:37][--ah-----] C:\Windows\tasks\SA.DAT
[22/08/2009 06:49][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[30/07/2008|01:57] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[14/02/2009|11:22] C:\ProgramData\Adobe
[07/02/2009|21:02] C:\ProgramData\AOL
[07/02/2009|21:02] C:\ProgramData\AOL OCP
[02/11/2006|15:02] C:\ProgramData\Application Data
[03/04/2009|18:24] C:\ProgramData\BitDefender
[07/02/2009|20:06] C:\ProgramData\Bureau
[12/04/2009|20:16] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[12/06/2009|20:48] C:\ProgramData\DVD.exe
[08/03/2009|13:50] C:\ProgramData\eMule
[14/05/2009|18:57] C:\ProgramData\Ezprint
[14/05/2009|18:57] C:\ProgramData\FastPics.log
[07/02/2009|20:06] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[15/02/2009|20:03] C:\ProgramData\FRA
[15/02/2009|20:03] C:\ProgramData\Games.exe
[20/02/2009|21:20] C:\ProgramData\Google
[21/08/2009|17:28] C:\ProgramData\Google Updater
[06/02/2009|14:59] C:\ProgramData\Hewlett-Packard
[06/02/2009|15:03] C:\ProgramData\hpqp.ini
[16/08/2009|10:56] C:\ProgramData\hpqp.txt
[15/02/2009|20:03] C:\ProgramData\Karaoke.exe
[08/02/2009|12:21] C:\ProgramData\LightScribe
[07/02/2009|20:06] C:\ProgramData\Menu D‚marrer
[15/02/2009|19:20] C:\ProgramData\Messenger Plus!
[23/02/2009|21:04] C:\ProgramData\Microsoft
[13/08/2009|05:06] C:\ProgramData\Microsoft Help
[16/05/2009|23:58] C:\ProgramData\MobileTV.exe
[07/02/2009|20:06] C:\ProgramData\ModŠles
[15/02/2009|20:03] C:\ProgramData\MPV.exe
[30/07/2008|01:44] C:\ProgramData\muvee Technologies
[08/02/2009|12:12] C:\ProgramData\Nero
[07/02/2009|22:43] C:\ProgramData\NOS
[06/02/2009|15:04] C:\ProgramData\NVIDIA
[22/08/2009|15:15] C:\ProgramData\nvModes.001
[22/08/2009|15:15] C:\ProgramData\nvModes.dat
[11/04/2009|12:13] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[03/04/2009|18:44] C:\ProgramData\Symantec
[02/06/2009|17:06] C:\ProgramData\Temp
[02/11/2006|15:02] C:\ProgramData\Templates
[30/07/2008|01:21] C:\ProgramData\WildTangent
[16/03/2009|21:48] C:\ProgramData\WindowsSearch
[27/04/2009|22:48] C:\ProgramData\WinZip
--------------------\\ Listing des dossiers dans C:\Program Files
[30/07/2008|01:57] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[07/02/2009|22:48] C:\Program Files\Adobe
[07/02/2009|20:10] C:\Program Files\AIM6
[30/07/2008|02:09] C:\Program Files\AOL
[06/02/2009|14:51] C:\Program Files\AVerMedia
[03/04/2009|18:19] C:\Program Files\BitDefender
[06/02/2009|14:47] C:\Program Files\Broadcom
[02/06/2009|17:07] C:\Program Files\Common Files
[06/02/2009|15:02] C:\Program Files\CyberLink
[09/05/2009|18:48] C:\Program Files\DivX
[07/02/2009|23:39] C:\Program Files\EasyBits For Kids
[08/03/2009|13:49] C:\Program Files\eMule
[07/02/2009|20:06] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[18/05/2009|17:42] C:\Program Files\Google
[15/02/2009|09:55] C:\Program Files\Hewlett-Packard
[30/07/2008|02:16] C:\Program Files\HP
[30/07/2008|01:21] C:\Program Files\HP Games
[06/02/2009|14:56] C:\Program Files\IDT
[18/04/2009|11:51] C:\Program Files\InstallShield Installation Information
[06/02/2009|14:48] C:\Program Files\Intel
[30/07/2009|06:06] C:\Program Files\Internet Explorer
[11/04/2009|12:21] C:\Program Files\Java
[20/02/2009|20:49] C:\Program Files\K-Lite Codec Pack
[29/06/2009|20:49] C:\Program Files\Letmin
[14/05/2009|18:57] C:\Program Files\Lexmark Toolbar
[14/05/2009|18:57] C:\Program Files\Lexmark Z2300 Series
[15/07/2009|19:56] C:\Program Files\Messenger Plus! Live
[07/02/2009|21:20] C:\Program Files\Microsoft
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[13/02/2009|20:45] C:\Program Files\Microsoft Office
[01/08/2009|09:10] C:\Program Files\Microsoft Silverlight
[18/02/2009|21:54] C:\Program Files\Microsoft SQL Server Compact Edition
[13/02/2009|20:45] C:\Program Files\Microsoft Visual Studio
[13/02/2009|20:42] C:\Program Files\Microsoft Visual Studio 8
[12/06/2009|21:13] C:\Program Files\Microsoft Works
[13/02/2009|20:44] C:\Program Files\Microsoft.NET
[30/07/2008|10:07] C:\Program Files\Movie Maker
[13/02/2009|20:45] C:\Program Files\MSBuild
[07/02/2009|20:42] C:\Program Files\MSXML 4.0
[30/07/2008|01:44] C:\Program Files\muvee Technologies
[18/04/2009|11:51] C:\Program Files\Navman
[08/02/2009|12:12] C:\Program Files\Nero
[07/02/2009|22:43] C:\Program Files\NOS
[07/02/2009|20:10] C:\Program Files\Online Services
[10/04/2009|17:43] C:\Program Files\Orange
[07/02/2009|23:28] C:\Program Files\PDFCreator
[07/02/2009|23:28] C:\Program Files\pdfforge Toolbar
[06/02/2009|14:51] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[22/08/2009|15:43] C:\Program Files\RegCleaner
[10/04/2009|23:09] C:\Program Files\Spybot - Search & Destroy
[06/02/2009|14:52] C:\Program Files\Synaptics
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[26/05/2009|19:45] C:\Program Files\VideoLAN
[30/07/2008|10:07] C:\Program Files\Windows Calendar
[30/07/2008|10:07] C:\Program Files\Windows Collaboration
[30/07/2008|10:07] C:\Program Files\Windows Defender
[30/07/2008|10:07] C:\Program Files\Windows Journal
[18/02/2009|21:54] C:\Program Files\Windows Live
[07/02/2009|21:20] C:\Program Files\Windows Live SkyDrive
[13/08/2009|05:05] C:\Program Files\Windows Mail
[13/08/2009|05:05] C:\Program Files\Windows Media Player
[07/02/2009|20:06] C:\Program Files\Windows NT
[30/07/2008|10:07] C:\Program Files\Windows Photo Gallery
[30/07/2008|10:07] C:\Program Files\Windows Sidebar
[29/06/2009|20:49] C:\Program Files\Winsudate
[27/04/2009|22:47] C:\Program Files\WinZip
[21/03/2009|02:56] C:\Program Files\YesMessenger
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[07/02/2009|22:48] C:\Program Files\Common Files\Adobe
[07/02/2009|20:10] C:\Program Files\Common Files\AOL
[03/04/2009|18:19] C:\Program Files\Common Files\BitDefender
[13/02/2009|20:45] C:\Program Files\Common Files\DESIGNER
[30/07/2008|02:11] C:\Program Files\Common Files\InstallShield
[30/07/2008|02:18] C:\Program Files\Common Files\Java
[06/02/2009|15:00] C:\Program Files\Common Files\LightScribe
[12/06/2009|21:08] C:\Program Files\Common Files\microsoft shared
[30/07/2008|01:44] C:\Program Files\Common Files\muvee Technologies
[08/02/2009|12:13] C:\Program Files\Common Files\Nero
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[03/04/2009|18:46] C:\Program Files\Common Files\Symantec Shared
[12/06/2009|21:06] C:\Program Files\Common Files\System
[07/02/2009|21:04] C:\Program Files\Common Files\Windows Live
--------------------\\ Process
( 89 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-22 16:56:13
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
C:\Users\Pascal\AppData\Local\ymyco.dat
C:\Users\Pascal\AppData\Local\ymyco.exe
C:\Users\Pascal\AppData\Local\ymyco_nav.dat
C:\Users\Pascal\AppData\Local\ymyco_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\carte europe navman keygen.sis.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\crack [2009] navman f20.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\DivX codec 6.8 PRO include keygen 7.12.2007.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\Spyware Doctor 5.5 Keygen Crack.lnk
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\Spyware Doctor 6.0.0.386 keygen Keygen.lnk
C:\Users\Pascal\Downloads\eMule\Incoming\Navman\crack [2009] actualizacion de gps navman .rar
C:\Users\Pascal\Downloads\eMule\Incoming\Navman\crack [2009] navman f20.zip
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\N 95 - GPS - Card ID nø.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\garmin_kgen.exe
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\IMEI converter.exe
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\MAP Codes.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\N95.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\readme.txt
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\Archive X-plore
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\X-plore v 1.22.sisx
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\XploreKeygen.exe
C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\Archive X-plore\X-plore_S60_3rd.sisx
[F:1112][D:152]-> C:\Users\Pascal\AppData\Local\Temp
[F:620][D:1]-> C:\Users\Pascal\AppData\Roaming\MICROS~1\Windows\Cookies
[F:166][D:4]-> C:\Users\Pascal\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 22/08/2009|16:41 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 22/08/2009|16:58 - Option : [2]
--------------------\\ Fin du rapport a 16:58:47
[ UAC => 1 ] -
Supprime moi absolument ces cracks
C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\carte europe navman keygen.sis.lnk C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\crack [2009] navman f20.lnk C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\DivX codec 6.8 PRO include keygen 7.12.2007.lnk C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\Spyware Doctor 5.5 Keygen Crack.lnk C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Recent\Spyware Doctor 6.0.0.386 keygen Keygen.lnk C:\Users\Pascal\Downloads\eMule\Incoming\Navman\crack [2009] actualizacion de gps navman .rar C:\Users\Pascal\Downloads\eMule\Incoming\Navman\crack [2009] navman f20.zip C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3 C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\N 95 - GPS - Card ID nø.txt C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\garmin_kgen.exe C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\IMEI converter.exe C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\MAP Codes.txt C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\N95.txt C:\Users\Pascal\Downloads\GPS T‚l\N 95\GPS GARMIN\2 - Keygen\GarminKeygen v1.3\readme.txt C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\Archive X-plore C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\X-plore v 1.22.sisx C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\XploreKeygen.exe C:\Users\Pascal\Downloads\GPS T‚l\N 95\N 95 - Hack dossier\X-plore 1.22 S60v2 v3 incl.keygen\Archive X-plore\X-plore_S60_3rd.sisx
Et fait ceci
Désactive tout d'abord L'uac en suivant le tuto de ce lien
> https://forum.malekal.com/viewtopic.php?t=6517&start=
~~~~~~~~~~~~~~> Navilog <~~~~~~~~~~~~~~~~~~~
Télécharge Navilog1 (par IL-MAFIOSO) sur ton bureau
> http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
- Enregistre la cible (du lien) sous... et enregistre-le sur ton bureau.
- Ensuite double clique sur navilog1.exe pour lancer l'installation.
- Une fois l'installation terminée, double droit sur le raccourci Navilog1 présent sur le bureau.
- Laisse-toi guider. Appuie sur une touche quand on te le demande.
- Au menu principal, choisis 1 et valide.
/!\ Ne fais pas le choix 2 /!\
Patiente le temps du scan.
Note
Il te sera peut-être demandé de redémarrer ton PC.
Laisse l'outil le faire automatiquement, sinon redémarre ton PC normalement s'il te le demande.
- Patiente jusqu'au message "Scan terminé le......"
- Appuie sur une touche comme demandé ; le bloc-notes va s'ouvrir.
- Copie-colle l'intégralité dans ta réponse. Referme le bloc-notes.
PS : le rapport est, aussi, sauvegardé à la racine du disque dur C:\cleannavi.txt
-
Peut ête bête, mais je fais comment pour accéder aux fichiers "C:\Users\Pascal\AppData\Roaming\Microsoft...", je suis sous Vista.
-
Voilà la suite...
Fix Navipromo version 4.0.1 commencé le 22/08/2009 17:56:57,54
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 18.07.2009 à 11h00 par IL-MAFIOSO
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz )
BIOS : Default System BIOS
USER : Pascal ( Administrator )
BOOT : Normal boot
Antivirus : BitDefender Antivirus 12.0 (Activated)
Firewall : BitDefender Firewall 12.0 (Activated)
C:\ (Local Disk) - NTFS - Total:223 Go (Free:156 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
E:\ (CD or DVD)
Recherche executée en mode normal
Nettoyage exécuté au redémarrage de l'ordinateur
C:\Windows\prefetch\ymyco*.pf supprimé !
C:\Users\Pascal\AppData\Local\ymyco.exe supprimé !
C:\Users\Pascal\AppData\Local\ymyco.dat supprimé !
C:\Users\Pascal\AppData\Local\ymyco_nav.dat supprimé !
C:\Users\Pascal\AppData\Local\ymyco_navps.dat supprimé !
Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\Pascal\AppData\Local\Temp effectué !
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
*** Scan terminé 22/08/2009 18:16:45,94 *** -
Pardon pour l'intrusion, je ne fais que passer :-)
Bien le bonsoir a toi
Tu peut me refaire un log Hijack
