Probleme de pub intenpestive
Résolu
Bonjour, j'ai un problème de pub qui apparait quand je suis sur internet ou même quand je suis inactif sur mon ordinateur, je serait probablement infecter pas "lop" --> http://site-naheulbeuk.com/
merci de m'aider !
merci de m'aider !
Configuration: Windows XP Firefox 3.0.13
17 réponses
-
Ok, Lop SD n'a rien oublié et ton PC n'est plus infecté.
1) Avant de te laisser filer, on va purger ton système de restauration, sachant que parfois certains virus s'y abrittent pour revenir d'entre les morts.
Fais ceci :
Supprimer les anciens points de restauration:
- Clique sur "Démarrer" -> "Tous les programmes" -> "Accessoires" -> "Outils systèmes" -> "Restauration du système"
- Cliquer sur "Paramètres de la restauration du système" (sur la gauche)
- Dans la nouvelle fénêtre, cocher la case "Désactiver la restauration du système", puis cliquer sur "Appliquer" et valider par "OK".
- Clique à nouveau sur "Paramètres de la restauration du système" (sur la gauche)
- Maintenant décoche la case "Désactiver la restauration du système", puis cliquer sur "Appliquer" et valider par "OK".
Les points de restauration sont maintenant supprimés (et les éventuels virus avec).
Maintenant il te faut créer un nouveau point de restauration sain :
- Clique sur "Démarrer" -> "Tous les programmes" -> "Accessoires" -> "Outils systèmes" -> "Restauration du système"
- Dans la nouvelle fenêtre, cliquer la case "Créer un point de restauration".
- Cliquer sur "Suivant".
- Entrer un nom pour le point de restauration : ce nom doit être assez évocateur (comme: "Après désinfection...", ou "Sain")
- Cliquer sur "Créer" et le point de restauration se créé automatiquement.
2) Relance HijackThis (pour la dernière fois) et choisi l'option Do a system scan only.
Ensuite, coche ces lignes qui sont inutiles et fais Fix Checked :
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe => Saitek®Configuration Software
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime => Apple®Quick Time
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe => Microsoft®Windows NT
Tu peux également cocher toutes les lignes commençant par 016, et faire Fix Checked aussi.
A noter que la Toolbar Deenero est connue pour ne pas fonctionner (elle n'apporte rien), donc tu peux la désinstaller via Ajout/Suppression des programmes si tu le souhaites. Pas besoin d'un outil spécial pour ça, elle se désinstalle correctement. Plus généralement, les Bars d'outils, dans le cas où elles ne sont pas néfastes, elles encombrent l'ordinateur et provoquent des bugs sur les navigateurs. Beaucoup de logiciels proposent d'installer des bars d'outils en plus de leur installation. Mon conseil : refuse.
3) Quelques conseils pour mieux sécuriser et préserver ton PC : bannis définitivement l'utilisation des cracks, assure-toi de maintenir tout ton système à jour constamment (antivirus, système d'exploitation, navigateur et tous tes logiciels).
A noter que le navigateur FireFox est prouvé comme étant plus sûr qu'Internet Explorer. Si tu veux utiliser FF, utilise-le en plus avec le module de sécurité WOT qui te signalera les sites web dangereux.
N'utilise qu'un seul Antivirus à la fois : parmi ceux gratuits, Antivir est très bien.
Spybot est un bon anti-spyware.
Et en complément, garde Malwarebytes qui est léger et extrêmement efficace pour la recherche et le néttoyage d'infections (surtout les vers).
Voilà.
Maintenant il ne reste plus qu'à néttoyer les outils que nous avons utilisé pour désinfecter ton PC. Ca ne sert à rien de les garder, les outils sont régulièrement mis à jour, donc mieux vaut les télécharger lorsqu'on en a besoin.
4) Télécharge ToolsCleaner sur ton Bureau pour nettoyer l'ordi de tous les outils qu'on a utilisé : https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/
Double clique sur le fichier. Puis clique sur Recherche et patiente pendant le scan. A la fin, clique sur Suppression pour nettoyer.
Tu peux aussi supprimer les fichiers temporaires.
Ensuite, supprime manuellement ToolsCleaner.
S'il ne supprime pas tout, supprime manuellement ce qui reste.
5) Télécharge et installe ccleaner ici : https://www.ccleaner.com/ccleaner/download
Puis lance le.
Clique sur Option → avancé → Décoche « effacer uniquement les fichiers plus vieux que 48h »
Puis Nettoyeur → Analyse → Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche.
Enfin, Registre → corrige toutes les erreurs, et recommence jusqu'à ce qu'il ne trouve plus d'erreurs.
(Tu peux garder ce logiciel et l'utiliser régulièrement).
6) Et en dernier lieu, je t'invite à visiter cette page (ou à télécharger directement le fichier PDF en faisant clique droit sur le lien et "sauvegarder la cible sous") qui t'apportera des informations de prévention et de protection contre les infections (environ 15 minutes de lecture très instructive et utile) :
https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf]Prévention et sécurité sur internet/url/u
Voilà, on a fini ^^
Bonne lecture, bonne continuation, et n'hésite pas à poser des questions si tu en as ;) -
Salut,
Il nous est impossible d'aller sur ton lien car nous sommes pas enregistré sur le forum en question.
Sinon, je te conseille d'installer un anti-spywares tel que Spybot (tuto : http://www.videotutorial.fr/tutorial/spyware-spybot-logiciel-33 )
Dis nous ce qu'il aura trouvé :) -
http://img190.imageshack.us/img190/4441/pubt.jpg
http://img512.imageshack.us/img512/8162/pub2h.jpg
voila ce qu'il a trouver ! -
Très bien, 67 infections.
Cliques sur "Corriger les problèmes" puis redémarre ton pc et regarde si tu as toujours ton problème. -
J'ai toujours un peu de pub malheureusement, je pense que les pub viennent de l'infection "CiD".
Quelqu'un connait un autre programmes pour enlever les pubs ?
Merci. -
désoler pour le double post, je poste le rapport hijack au cas ou ça pourrait vous aider a me répondre !
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:28:54, on 02/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\System32\alg.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\WINDOWS\system32\DrvMon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,2,0.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Bat Wave Base Dale] C:\Documents and Settings\All Users\Application Data\Link Axis Bat Wave\Flap Less.exe
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [TransBar] C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\AKSoftware\TransBar\TransBar.exe /s
O4 - HKCU\..\Run: [proxy ooze] C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\math byte poke.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
-
Bonjour,
Les symptômes et ton rapport HijackThis montrent que ton PC a une infection LOP qui est à l'origine de la pub intempestive et qui s'installe via les logiciels suivants :
- 3wplayer : hxxp://www.3wplayer.com
- BitDownload : hxxp://www.bitdownload.org
- BitGrabber : hxxp://www.bitgrabber.com
- BitRoll : hxxp://www.bitroll.com
- BitSoftporn : hxxp://www.bitsofporn.com
- Divoplayer : hxxp://www.Divoplayer.com
- Domplayer : hxxp://www.Domplayer.com
- NetPumper : hxxp://www.netpumper.com
- Gamingtorrent : hxxp://www.Gamingtorrent.com
- Get-Torrent : hxxp://www.get-torrent.com/
- Kitplayer : hxxp://www.Kitplayer.com
- Imageswap : hxxp://www.Imageswap.com
- Play3w : hxxp://www.Play3w.com
- Plugindl : hxxp://www.Plugindl.com
- Torrent101 : hxxp://www.torrent101.com/
- Torrentq : hxxp://www.torrentq.com
- Torrentmusic : hxxp://www.Torrentmusic.org
- TorrentSoftware : hxxp://www.torrentsoftware.org/
- Torrentspeeder : hxxp://www.Torrentspeeder.com
- TorrentGamers : hxxp://www.torrentgamers.com
- Uvtorrent : hxxp://www.Uvtorrent.com
- Winzix : http://www.winzix.com/
[b](N'y allez [u]pas/b dessus)/b
Le fait d'installer le sponsor de ' MSN Plus ! ' installe cette infection également.
Il y a un outil spécifique qui permet de se débarasser de LOP.
Fais ceci :
- Télécharger et enregistrer [url=https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2][u]lopSD/u/url sur ton bureau
- Double-clic Lop S&D
- Faire l'installation
- Fermer toutes les applications
- Le lancer par un double-clic sur le raccourci qui est sur le bureau
- Taper F pour français , puis faire Entrée
- Taper 1 (Option Recherche)
- Presser Entrée
- Le PC va redémarrer
* [b]Note/b= si l'antivirus annonce une infection dans TEMP , l'ignorer
- Attendre l'apparition du rapport
- Copier le rapport et le coller dans ta prochaine réponse
* le rapport se trouve aussi à C:\lopR -
voila le rapport -->
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:144 Go (Free:68 Go)
D:\ (USB)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (Local Disk) - FAT32 - Total:4 Go (Free:0 Go)
I:\ (CD or DVD)
J:\ (CD or DVD)
K:\ (CD or DVD)
L:\ (CD or DVD)
M:\ (Local Disk) - NTFS - Total:465 Go (Free:382 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 02/09/2009|12:41 )
--------------------\\ Listing des dossiers dans APPLIC~1
[20/06/2009|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\2DBoy
[10/12/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/01/2005|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/01/2005|11:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[01/01/2005|12:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/01/2005|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[14/12/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI
[16/08/2009|10:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
[11/04/2005|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[24/07/2008|22:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[21/04/2007|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[14/02/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2005|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[04/02/2009|12:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonEU
[21/02/2005|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[13/12/2006|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[04/02/2009|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PMB Files
[07/06/2005|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[12/07/2008|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RTL Winter Sports 2008
[10/12/2007|19:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[06/03/2009|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[01/09/2009|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[06/06/2005|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[30/05/2009|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[29/07/2009|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
[30/12/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[24/11/2006|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/11/2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[01/01/2005|12:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[01/01/2005|10:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/01/2005|12:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2005|17:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2005|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[01/01/2005|11:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2005|14:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[15/12/2007|12:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[29/01/2009|10:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[05/03/2005|10:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[01/01/2005|12:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[08/06/2005|23:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[17/07/2009|11:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
[24/12/2005|15:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
[13/05/2009|14:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\fretsonfire
[25/09/2006|14:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[22/02/2005|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[01/01/2005|10:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[04/03/2009|15:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
[21/02/2005|23:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[23/02/2005|09:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[25/11/2006|18:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[24/07/2008|22:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
[14/02/2009|19:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[22/02/2005|10:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[26/08/2008|12:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[05/03/2005|10:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\NeroVision
[16/08/2009|10:06] C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove
[29/08/2009|12:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Python-Eggs
[01/01/2005|15:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[27/04/2007|15:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
[11/12/2007|19:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skyline
[24/06/2009|13:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
[24/06/2009|13:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\skypePM
[23/02/2005|09:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[01/01/2005|11:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[14/03/2005|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[28/09/2008|15:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemRequirementsLab
[01/09/2009|10:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\teamspeak2
[30/05/2009|17:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TomTom
[01/10/2006|18:07] C:\DOCUME~1\HP_PRO~2\APPLIC~1\Macromedia
[04/01/2007|17:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/12/2007|19:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[02/09/2009 12:00][--ah-----] C:\WINDOWS\tasks\AFFA70859185E1AD.job
[02/09/2009 12:36][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2705235062-4181755015-3438477376-1007UA.job
[01/09/2009 17:36][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2705235062-4181755015-3438477376-1007Core.job
[05/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
[02/09/2009 09:03][--ah-----] C:\WINDOWS\tasks\SA.DAT
( AFFA70859185E1AD.job )=( c:\docume~1\hp_pro~1\applic~1\plusmove\Wiperoamplatform.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[05/03/2005|09:49] C:\Program Files\ACE Mega CoDecS Pack
[11/04/2005|10:58] C:\Program Files\Adobe
[11/04/2005|10:45] C:\Program Files\Ahead
[29/12/2006|21:45] C:\Program Files\Alcohol Soft
[10/06/2005|01:50] C:\Program Files\ANPSEDIC
[05/03/2006|15:28] C:\Program Files\Anti-Blaxx
[08/06/2005|23:41] C:\Program Files\ArcSoft
[04/02/2006|14:13] C:\Program Files\Atari
[26/03/2008|14:58] C:\Program Files\Audacity
[09/02/2009|11:23] C:\Program Files\AVSMedia
[02/03/2005|09:55] C:\Program Files\Battlezone II
[24/11/2006|22:17] C:\Program Files\CCleaner
[07/02/2009|16:19] C:\Program Files\Circle Developement
[01/01/2005|10:42] C:\Program Files\ComPlus Applications
[29/08/2009|12:11] C:\Program Files\Deenero
[03/08/2007|15:33] C:\Program Files\Deus Ex - Invisible War
[28/02/2005|18:21] C:\Program Files\directx
[06/06/2009|18:14] C:\Program Files\DivX
[21/07/2008|15:36] C:\Program Files\EA GAMES
[01/05/2007|20:32] C:\Program Files\EA SPORTS
[03/04/2005|14:40] C:\Program Files\Easy Internet signup
[09/02/2007|19:05] C:\Program Files\Electronic Arts
[30/12/2008|11:56] C:\Program Files\epson
[06/06/2009|18:13] C:\Program Files\Fichiers communs
[13/05/2009|14:10] C:\Program Files\FoFiX
[16/08/2008|18:48] C:\Program Files\Google
[01/01/2005|17:16] C:\Program Files\Help and Support Additions
[01/01/2005|11:43] C:\Program Files\Hewlett-Packard
[01/01/2005|11:58] C:\Program Files\HP
[30/12/2008|11:59] C:\Program Files\InstallShield Installation Information
[29/07/2009|14:46] C:\Program Files\Internet Explorer
[21/02/2005|18:26] C:\Program Files\InterVideo
[24/07/2008|22:08] C:\Program Files\Java
[29/12/2006|21:47] C:\Program Files\JoWooD
[14/12/2008|13:07] C:\Program Files\KONAMI
[11/03/2008|17:24] C:\Program Files\log jeux
[18/03/2006|14:52] C:\Program Files\LucasArts
[26/06/2005|19:48] C:\Program Files\Macrovision Corp
[24/07/2008|22:34] C:\Program Files\Malwarebytes' Anti-Malware
[28/02/2005|13:45] C:\Program Files\Maxis
[24/10/2008|18:28] C:\Program Files\Messenger
[11/07/2009|17:59] C:\Program Files\Messenger Plus! Live
[01/09/2008|10:46] C:\Program Files\Metin2_France
[14/02/2009|20:46] C:\Program Files\Microsoft
[22/12/2008|11:28] C:\Program Files\Microsoft AutoRoute
[22/02/2005|10:24] C:\Program Files\Microsoft Encarta
[01/01/2005|10:45] C:\Program Files\microsoft frontpage
[24/06/2009|18:36] C:\Program Files\Microsoft LifeCam
[22/02/2005|15:54] C:\Program Files\Microsoft Money 2005
[07/07/2008|12:55] C:\Program Files\Microsoft Office
[31/07/2009|15:52] C:\Program Files\Microsoft Silverlight
[14/11/2007|15:20] C:\Program Files\Microsoft SQL Server Compact Edition
[21/12/2007|00:45] C:\Program Files\Microsoft Works
[22/02/2005|10:35] C:\Program Files\Microsoft Works Suite 2005
[25/07/2007|11:18] C:\Program Files\Microsoft Xbox 360 Accessories
[03/04/2005|14:22] C:\Program Files\Microsoft.NET
[29/08/2009|19:03] C:\Program Files\Moovida
[24/10/2008|18:24] C:\Program Files\Movie Maker
[02/09/2009|09:11] C:\Program Files\Mozilla Firefox
[21/08/2009|20:37] C:\Program Files\MSBuild
[07/07/2008|12:55] C:\Program Files\MSECache
[01/01/2005|10:41] C:\Program Files\MSN
[01/01/2005|10:41] C:\Program Files\MSN Gaming Zone
[18/11/2006|23:36] C:\Program Files\MSXML 4.0
[01/06/2009|09:34] C:\Program Files\Navilog1
[24/10/2008|18:22] C:\Program Files\NetMeeting
[01/01/2005|10:42] C:\Program Files\Online Services
[16/08/2009|11:46] C:\Program Files\Outlook Express
[04/02/2009|11:30] C:\Program Files\Pando Networks
[01/01/2005|17:18] C:\Program Files\PC-Doctor for Windows
[28/02/2005|18:20] C:\Program Files\Pepsi
[22/02/2005|11:09] C:\Program Files\Picture It! Premium 10
[16/08/2009|10:05] C:\Program Files\plusmove
[05/03/2005|09:50] C:\Program Files\QuickTime
[21/08/2009|20:37] C:\Program Files\Reference Assemblies
[25/09/2006|10:44] C:\Program Files\SAGEM
[22/07/2007|15:53] C:\Program Files\Saitek
[23/09/2006|17:25] C:\Program Files\Securitoo
[05/03/2005|11:28] C:\Program Files\Sega
[01/01/2005|17:25] C:\Program Files\Services en ligne
[02/01/2005|01:27] C:\Program Files\SiS VGA Utilities V3.63
[10/12/2007|19:50] C:\Program Files\Skyline
[06/03/2009|17:47] C:\Program Files\Skype
[01/01/2005|12:08] C:\Program Files\Sonic
[01/01/2005|12:08] C:\Program Files\Sonic RecordNow!
[01/09/2009|16:57] C:\Program Files\Spybot - Search & Destroy
[02/11/2007|21:02] C:\Program Files\Stardock
[07/02/2009|16:47] C:\Program Files\StuffPlug3
[09/02/2009|10:51] C:\Program Files\SuperCopier2
[07/06/2005|22:36] C:\Program Files\Symantec
[02/09/2009|09:04] C:\Program Files\Symantec AntiVirus
[24/05/2008|14:57] C:\Program Files\SystemRequirementsLab
[28/09/2008|18:51] C:\Program Files\Teamspeak2_RC2
[28/07/2009|19:00] C:\Program Files\TeamSpeak3
[25/05/2008|10:28] C:\Program Files\TmNationsForever
[27/05/2009|15:05] C:\Program Files\TmUnitedForever
[30/05/2009|17:42] C:\Program Files\TomTom HOME 2
[30/05/2009|17:43] C:\Program Files\TomTom International B.V
[08/07/2009|11:29] C:\Program Files\TrackMania Nations ESWC
[27/05/2009|14:45] C:\Program Files\TrackMania United
[02/09/2009|09:28] C:\Program Files\Trend Micro
[01/01/2005|10:48] C:\Program Files\Uninstall Information
[22/02/2009|11:11] C:\Program Files\vixy.net
[11/05/2009|17:04] C:\Program Files\Wanadoo
[28/08/2009|11:14] C:\Program Files\WarRock
[14/02/2009|20:48] C:\Program Files\Windows Live
[14/02/2009|20:45] C:\Program Files\Windows Live SkyDrive
[03/04/2008|22:50] C:\Program Files\Windows Live Toolbar
[04/01/2007|17:36] C:\Program Files\Windows Media Connect 2
[24/10/2008|18:22] C:\Program Files\Windows Media Player
[24/10/2008|18:22] C:\Program Files\Windows NT
[01/01/2005|10:43] C:\Program Files\WindowsUpdate
[14/08/2007|14:22] C:\Program Files\WinRAR
[29/12/2006|22:02] C:\Program Files\WinZip
[01/01/2005|10:45] C:\Program Files\xerox
[28/01/2009|15:26] C:\Program Files\Yahoo!
[25/08/2009|20:15] C:\Program Files\Zattoo
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[11/04/2005|11:00] C:\Program Files\Fichiers communs\Adobe
[11/04/2005|11:01] C:\Program Files\Fichiers communs\Adobe Systems Shared
[05/03/2005|10:00] C:\Program Files\Fichiers communs\Ahead
[09/02/2009|11:26] C:\Program Files\Fichiers communs\AVSMedia
[03/04/2005|14:23] C:\Program Files\Fichiers communs\DESIGNER
[06/06/2009|18:13] C:\Program Files\Fichiers communs\DivX Shared
[01/01/2005|11:54] C:\Program Files\Fichiers communs\Hewlett-Packard
[01/01/2005|12:19] C:\Program Files\Fichiers communs\InstallShield
[01/01/2005|11:09] C:\Program Files\Fichiers communs\Java
[23/09/2006|17:09] C:\Program Files\Fichiers communs\Logitech
[29/08/2009|12:11] C:\Program Files\Fichiers communs\Microsoft Shared
[01/01/2005|10:43] C:\Program Files\Fichiers communs\MSSoap
[01/01/2005|11:38] C:\Program Files\Fichiers communs\ODBC
[01/01/2005|10:33] C:\Program Files\Fichiers communs\Services
[06/03/2009|17:47] C:\Program Files\Fichiers communs\Skype
[01/01/2005|11:38] C:\Program Files\Fichiers communs\SpeechEngines
[02/11/2007|21:02] C:\Program Files\Fichiers communs\Stardock
[01/01/2005|12:09] C:\Program Files\Fichiers communs\SureThing Shared
[06/07/2006|14:08] C:\Program Files\Fichiers communs\SWF Studio
[21/07/2008|15:41] C:\Program Files\Fichiers communs\Symantec Shared
[24/10/2008|18:22] C:\Program Files\Fichiers communs\System
[14/02/2009|19:35] C:\Program Files\Fichiers communs\Windows Live
[14/11/2007|15:14] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 54 Processes )
IEXPLORE.EXE ~ [PID:3372]
IEXPLORE.EXE ~ [PID:2640]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Flap Less.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Flap Less.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\ccjrzmlu.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\iaoxrhlq.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\math byte poke.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\qmdqscqn.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\sendtoolweblog.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\Wipe roam platform.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\xrlkvntt.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\xyjdodvw.exe
C:\Program Files\plusmove
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertstream[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@www.adserver5[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@bigpoint[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@fr.deepolis.bigpoint[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.cotedazurpalace[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@cotedazurpalace[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@serve.cotedazurpalace[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@www.cotedazurpalace[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@pacificpoker[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@partypoker[1].txt
C:\WINDOWS\Tasks\AFFA70859185E1AD.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"proxy ooze"="C:\\DOCUME~1\\HP_PRO~1\\APPLIC~1\\plusmove\\math byte poke.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bat Wave Base Dale"="C:\\Documents and Settings\\All Users\\Application Data\\Link Axis Bat Wave\\Flap Less.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-02 12:43:41
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 77
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness 2 + Crack + Coches.ISO
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 Crack For Win Xp Patch.rar
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 No CD crack utility
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 No CD crack utility.zip
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Warcraft 3 Iii Reign Of Chaos Crack Nocd Cd Keygen.rar
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\rzr-wc3.nfo
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\War3.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\warcraft3 keygen.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\WorldEdit.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 No CD crack utility\readme.txt
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Quake 3 Arena\Quake 3 Arena NoCD Crack.zip
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Warcraft3\Warcraft 3 Iii Reign Of Chaos Crack Nocd Cd Keygen.rar
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack\antiblaxx116.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack\ccd-mgp3.nfo
C:\DOCUME~1\HP_PRO~1\Recent\Crack.lnk
[F:3][D:29]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:319][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:518][D:16]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 02/09/2009|12:46 - Option : [1]
--------------------\\ Fin du rapport a 12:46:10 -
Parfait, on va pouvoir néttoyer l'infection.
- Relance Lop S&D
- Choisis cette fois-ci l'option 2 (Suppression)
- Ne ferme pas la fenêtre lors de la suppression !
- Poste le rapport généré (C:\lopR.txt)
* (Si le Bureau ne réapparait pas, appuie sur Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
Ensuite, je te propose de passer ce scan généraliste (plutôt rapide et très efficace) :
• Télécharge et installe Malwarebytes' Anti-Malware ici :
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
• A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
• Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
• Puis va dans l'onglet "Recherche", coche "Exécuter un examen RAPIDE" puis "Rechercher"
• A la fin du scan, clique sur Afficher les résultats
• Coche tous les éléments détectés puis clique sur Supprimer la sélection
• Enregistre le rapport
• S'il t'est demandé de redémarrer le PC, clique sur Yes
• Poste dans ta prochaine réponse le rapport apparaissant après la suppression stp
En dernier lieu, après avoir redémarrer ton ordinateur, poste un nouveau rapport HijackThis pour vérification stp -
Ah.. et j'oubliais.
J'ai vu que tu utilises des cracks : je te conseille de t'en débarasser et de ne plus y avoir recours, étant donné que ce sont les principaux vecteurs d'infections. Même si l'internaute ne voit pas toujours tout, ils sont très dangereux.
Quelques infos sur le danger des cracks dispos ici :
https://forum.malekal.com/viewtopic.php?t=893&start=
Ce n'est qu'un conseil pour t'éviter d'attraper d'autres infections à l'avenir ;) -
le rapport LOP :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:144 Go (Free:68 Go)
D:\ (USB)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (Local Disk) - FAT32 - Total:4 Go (Free:0 Go)
I:\ (CD or DVD)
J:\ (CD or DVD)
K:\ (CD or DVD)
L:\ (CD or DVD)
M:\ (Local Disk) - NTFS - Total:465 Go (Free:382 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 02/09/2009|13:38 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Flap Less.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Flap Less.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\ccjrzmlu.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\iaoxrhlq.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\math byte poke.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\qmdqscqn.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\sendtoolweblog.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\Wipe roam platform.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\xrlkvntt.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\xyjdodvw.exe
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertstream[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@www.adserver5[1].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@bigpoint[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@fr.deepolis.bigpoint[1].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@serve.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@www.cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@pacificpoker[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@partypoker[1].txt
Supprime! - C:\WINDOWS\Tasks\AFFA70859185E1AD.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove
Supprime! - C:\Program Files\plusmove
Supprime! - C:\Program Files\Circle Developement
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[20/06/2009|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\2DBoy
[10/12/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/01/2005|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/01/2005|11:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[01/01/2005|12:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/01/2005|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[14/12/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI
[11/04/2005|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[24/07/2008|22:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[21/04/2007|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[14/02/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2005|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[04/02/2009|12:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonEU
[21/02/2005|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[13/12/2006|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[04/02/2009|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PMB Files
[07/06/2005|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[12/07/2008|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RTL Winter Sports 2008
[10/12/2007|19:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[06/03/2009|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[01/09/2009|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[06/06/2005|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[30/05/2009|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[29/07/2009|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
[30/12/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[24/11/2006|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/11/2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[01/01/2005|12:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[01/01/2005|10:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/01/2005|12:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2005|17:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2005|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[01/01/2005|11:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2005|14:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[15/12/2007|12:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[29/01/2009|10:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[05/03/2005|10:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[01/01/2005|12:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[08/06/2005|23:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[17/07/2009|11:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
[24/12/2005|15:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
[13/05/2009|14:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\fretsonfire
[25/09/2006|14:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[22/02/2005|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[01/01/2005|10:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[04/03/2009|15:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
[21/02/2005|23:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[23/02/2005|09:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[25/11/2006|18:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[24/07/2008|22:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
[14/02/2009|19:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[22/02/2005|10:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[26/08/2008|12:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[05/03/2005|10:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\NeroVision
[29/08/2009|12:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Python-Eggs
[01/01/2005|15:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[27/04/2007|15:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
[11/12/2007|19:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skyline
[24/06/2009|13:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
[24/06/2009|13:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\skypePM
[23/02/2005|09:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[01/01/2005|11:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[14/03/2005|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[28/09/2008|15:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemRequirementsLab
[01/09/2009|10:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\teamspeak2
[30/05/2009|17:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TomTom
[01/10/2006|18:07] C:\DOCUME~1\HP_PRO~2\APPLIC~1\Macromedia
[04/01/2007|17:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/12/2007|19:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[02/09/2009 13:36][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2705235062-4181755015-3438477376-1007UA.job
[01/09/2009 17:36][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2705235062-4181755015-3438477376-1007Core.job
[05/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
[02/09/2009 09:03][--ah-----] C:\WINDOWS\tasks\SA.DAT
--------------------\\ Listing des dossiers dans C:\Program Files
[05/03/2005|09:49] C:\Program Files\ACE Mega CoDecS Pack
[11/04/2005|10:58] C:\Program Files\Adobe
[11/04/2005|10:45] C:\Program Files\Ahead
[29/12/2006|21:45] C:\Program Files\Alcohol Soft
[10/06/2005|01:50] C:\Program Files\ANPSEDIC
[05/03/2006|15:28] C:\Program Files\Anti-Blaxx
[08/06/2005|23:41] C:\Program Files\ArcSoft
[04/02/2006|14:13] C:\Program Files\Atari
[26/03/2008|14:58] C:\Program Files\Audacity
[09/02/2009|11:23] C:\Program Files\AVSMedia
[02/03/2005|09:55] C:\Program Files\Battlezone II
[24/11/2006|22:17] C:\Program Files\CCleaner
[01/01/2005|10:42] C:\Program Files\ComPlus Applications
[29/08/2009|12:11] C:\Program Files\Deenero
[03/08/2007|15:33] C:\Program Files\Deus Ex - Invisible War
[28/02/2005|18:21] C:\Program Files\directx
[06/06/2009|18:14] C:\Program Files\DivX
[21/07/2008|15:36] C:\Program Files\EA GAMES
[01/05/2007|20:32] C:\Program Files\EA SPORTS
[03/04/2005|14:40] C:\Program Files\Easy Internet signup
[09/02/2007|19:05] C:\Program Files\Electronic Arts
[30/12/2008|11:56] C:\Program Files\epson
[06/06/2009|18:13] C:\Program Files\Fichiers communs
[13/05/2009|14:10] C:\Program Files\FoFiX
[16/08/2008|18:48] C:\Program Files\Google
[01/01/2005|17:16] C:\Program Files\Help and Support Additions
[01/01/2005|11:43] C:\Program Files\Hewlett-Packard
[01/01/2005|11:58] C:\Program Files\HP
[30/12/2008|11:59] C:\Program Files\InstallShield Installation Information
[29/07/2009|14:46] C:\Program Files\Internet Explorer
[21/02/2005|18:26] C:\Program Files\InterVideo
[24/07/2008|22:08] C:\Program Files\Java
[29/12/2006|21:47] C:\Program Files\JoWooD
[14/12/2008|13:07] C:\Program Files\KONAMI
[11/03/2008|17:24] C:\Program Files\log jeux
[18/03/2006|14:52] C:\Program Files\LucasArts
[26/06/2005|19:48] C:\Program Files\Macrovision Corp
[24/07/2008|22:34] C:\Program Files\Malwarebytes' Anti-Malware
[28/02/2005|13:45] C:\Program Files\Maxis
[24/10/2008|18:28] C:\Program Files\Messenger
[11/07/2009|17:59] C:\Program Files\Messenger Plus! Live
[01/09/2008|10:46] C:\Program Files\Metin2_France
[14/02/2009|20:46] C:\Program Files\Microsoft
[22/12/2008|11:28] C:\Program Files\Microsoft AutoRoute
[22/02/2005|10:24] C:\Program Files\Microsoft Encarta
[01/01/2005|10:45] C:\Program Files\microsoft frontpage
[24/06/2009|18:36] C:\Program Files\Microsoft LifeCam
[22/02/2005|15:54] C:\Program Files\Microsoft Money 2005
[07/07/2008|12:55] C:\Program Files\Microsoft Office
[31/07/2009|15:52] C:\Program Files\Microsoft Silverlight
[14/11/2007|15:20] C:\Program Files\Microsoft SQL Server Compact Edition
[21/12/2007|00:45] C:\Program Files\Microsoft Works
[22/02/2005|10:35] C:\Program Files\Microsoft Works Suite 2005
[25/07/2007|11:18] C:\Program Files\Microsoft Xbox 360 Accessories
[03/04/2005|14:22] C:\Program Files\Microsoft.NET
[29/08/2009|19:03] C:\Program Files\Moovida
[24/10/2008|18:24] C:\Program Files\Movie Maker
[02/09/2009|12:46] C:\Program Files\Mozilla Firefox
[21/08/2009|20:37] C:\Program Files\MSBuild
[07/07/2008|12:55] C:\Program Files\MSECache
[01/01/2005|10:41] C:\Program Files\MSN
[01/01/2005|10:41] C:\Program Files\MSN Gaming Zone
[18/11/2006|23:36] C:\Program Files\MSXML 4.0
[01/06/2009|09:34] C:\Program Files\Navilog1
[24/10/2008|18:22] C:\Program Files\NetMeeting
[01/01/2005|10:42] C:\Program Files\Online Services
[16/08/2009|11:46] C:\Program Files\Outlook Express
[04/02/2009|11:30] C:\Program Files\Pando Networks
[01/01/2005|17:18] C:\Program Files\PC-Doctor for Windows
[28/02/2005|18:20] C:\Program Files\Pepsi
[22/02/2005|11:09] C:\Program Files\Picture It! Premium 10
[05/03/2005|09:50] C:\Program Files\QuickTime
[21/08/2009|20:37] C:\Program Files\Reference Assemblies
[25/09/2006|10:44] C:\Program Files\SAGEM
[22/07/2007|15:53] C:\Program Files\Saitek
[23/09/2006|17:25] C:\Program Files\Securitoo
[05/03/2005|11:28] C:\Program Files\Sega
[01/01/2005|17:25] C:\Program Files\Services en ligne
[02/01/2005|01:27] C:\Program Files\SiS VGA Utilities V3.63
[10/12/2007|19:50] C:\Program Files\Skyline
[06/03/2009|17:47] C:\Program Files\Skype
[01/01/2005|12:08] C:\Program Files\Sonic
[01/01/2005|12:08] C:\Program Files\Sonic RecordNow!
[01/09/2009|16:57] C:\Program Files\Spybot - Search & Destroy
[02/11/2007|21:02] C:\Program Files\Stardock
[07/02/2009|16:47] C:\Program Files\StuffPlug3
[09/02/2009|10:51] C:\Program Files\SuperCopier2
[07/06/2005|22:36] C:\Program Files\Symantec
[02/09/2009|09:04] C:\Program Files\Symantec AntiVirus
[24/05/2008|14:57] C:\Program Files\SystemRequirementsLab
[28/09/2008|18:51] C:\Program Files\Teamspeak2_RC2
[28/07/2009|19:00] C:\Program Files\TeamSpeak3
[25/05/2008|10:28] C:\Program Files\TmNationsForever
[27/05/2009|15:05] C:\Program Files\TmUnitedForever
[30/05/2009|17:42] C:\Program Files\TomTom HOME 2
[30/05/2009|17:43] C:\Program Files\TomTom International B.V
[08/07/2009|11:29] C:\Program Files\TrackMania Nations ESWC
[27/05/2009|14:45] C:\Program Files\TrackMania United
[02/09/2009|09:28] C:\Program Files\Trend Micro
[01/01/2005|10:48] C:\Program Files\Uninstall Information
[22/02/2009|11:11] C:\Program Files\vixy.net
[11/05/2009|17:04] C:\Program Files\Wanadoo
[28/08/2009|11:14] C:\Program Files\WarRock
[14/02/2009|20:48] C:\Program Files\Windows Live
[14/02/2009|20:45] C:\Program Files\Windows Live SkyDrive
[03/04/2008|22:50] C:\Program Files\Windows Live Toolbar
[04/01/2007|17:36] C:\Program Files\Windows Media Connect 2
[24/10/2008|18:22] C:\Program Files\Windows Media Player
[24/10/2008|18:22] C:\Program Files\Windows NT
[01/01/2005|10:43] C:\Program Files\WindowsUpdate
[14/08/2007|14:22] C:\Program Files\WinRAR
[29/12/2006|22:02] C:\Program Files\WinZip
[01/01/2005|10:45] C:\Program Files\xerox
[28/01/2009|15:26] C:\Program Files\Yahoo!
[25/08/2009|20:15] C:\Program Files\Zattoo
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[11/04/2005|11:00] C:\Program Files\Fichiers communs\Adobe
[11/04/2005|11:01] C:\Program Files\Fichiers communs\Adobe Systems Shared
[05/03/2005|10:00] C:\Program Files\Fichiers communs\Ahead
[09/02/2009|11:26] C:\Program Files\Fichiers communs\AVSMedia
[03/04/2005|14:23] C:\Program Files\Fichiers communs\DESIGNER
[06/06/2009|18:13] C:\Program Files\Fichiers communs\DivX Shared
[01/01/2005|11:54] C:\Program Files\Fichiers communs\Hewlett-Packard
[01/01/2005|12:19] C:\Program Files\Fichiers communs\InstallShield
[01/01/2005|11:09] C:\Program Files\Fichiers communs\Java
[23/09/2006|17:09] C:\Program Files\Fichiers communs\Logitech
[29/08/2009|12:11] C:\Program Files\Fichiers communs\Microsoft Shared
[01/01/2005|10:43] C:\Program Files\Fichiers communs\MSSoap
[01/01/2005|11:38] C:\Program Files\Fichiers communs\ODBC
[01/01/2005|10:33] C:\Program Files\Fichiers communs\Services
[06/03/2009|17:47] C:\Program Files\Fichiers communs\Skype
[01/01/2005|11:38] C:\Program Files\Fichiers communs\SpeechEngines
[02/11/2007|21:02] C:\Program Files\Fichiers communs\Stardock
[01/01/2005|12:09] C:\Program Files\Fichiers communs\SureThing Shared
[06/07/2006|14:08] C:\Program Files\Fichiers communs\SWF Studio
[21/07/2008|15:41] C:\Program Files\Fichiers communs\Symantec Shared
[24/10/2008|18:22] C:\Program Files\Fichiers communs\System
[14/02/2009|19:35] C:\Program Files\Fichiers communs\Windows Live
[14/11/2007|15:14] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 54 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-02 13:40:18
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\DOCUME~1\HP_PRO~1\LOCALS~1\APPLIC~1\Microsoft\Windows Live Contacts\{a3401721-96e0-416b-813b-f2c069ca2de4}\DBStore\LogFiles\edbtmp.log
scan completed successfully
hidden processes: 0
hidden files: 78
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness 2 + Crack + Coches.ISO
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 Crack For Win Xp Patch.rar
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 No CD crack utility
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 No CD crack utility.zip
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Warcraft 3 Iii Reign Of Chaos Crack Nocd Cd Keygen.rar
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\rzr-wc3.nfo
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\War3.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\warcraft3 keygen.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Crack\WorldEdit.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Midtown Madness2 No CD crack utility\readme.txt
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Quake 3 Arena\Quake 3 Arena NoCD Crack.zip
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\autres\Warcraft3\Warcraft 3 Iii Reign Of Chaos Crack Nocd Cd Keygen.rar
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack\antiblaxx116.exe
C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\sauvegarde et autres\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack\ccd-mgp3.nfo
C:\DOCUME~1\HP_PRO~1\Recent\Crack.lnk
[F:20][D:29]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:307][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:440][D:16]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 02/09/2009|12:46 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 02/09/2009|13:42 - Option : [2]
--------------------\\ Fin du rapport a 13:42:08
voila le rapport Malwarebyte's Anti-Malware : ( aucun fichier infecté détecter )
Malwarebytes' Anti-Malware 1.23
Version de la base de données: 987
Windows 5.1.2600 Service Pack 3
13:53:53 02/09/2009
mbam-log-9-2-2009 (13-53-53).txt
Type de recherche: Examen rapide
Eléments examinés: 40781
Temps écoulé: 8 minute(s), 51 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
et enfin le rapport hijack :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:55:01, on 02/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\System32\alg.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\WINDOWS\system32\DrvMon.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Deenero\DEENER~1.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,2,0.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [TransBar] C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\AKSoftware\TransBar\TransBar.exe /s
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
-
merci pour tout ! !
-
Il n'y a pas de quoi, c'était avec plaisir ^_^
-
Bonjour, j'ai également un problème de pub Cid, J'ai fais un rapport avec Lop S&D, pourriez vous me dire que faire après ?
En vous remerciant par avance.
Cordialement.
Rapport :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : sylvie-wilfrid ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1043 [VPS 090422-0] 4.7.1043 (Activated)
C:\ (Local Disk) - NTFS - Total:224 Go (Free:20 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD) - UDF - Total:5 Go (Free:0 Go)
I:\ (USB)
J:\ (CD or DVD)
K:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
L:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 03/09/2009| 9:40 )
[ UAC => 0 ]
--------------------\\ Listing des dossiers dans Local
[17/06/2009|07:46] C:\Users\SYLVIE~1\AppData\Local\Adobe
[29/08/2008|23:10] C:\Users\SYLVIE~1\AppData\Local\Ahead
[20/06/2008|17:01] C:\Users\SYLVIE~1\AppData\Local\AOL
[26/12/2008|22:39] C:\Users\SYLVIE~1\AppData\Local\Apple
[13/02/2009|17:38] C:\Users\SYLVIE~1\AppData\Local\Apple Computer
[24/03/2008|12:19] C:\Users\SYLVIE~1\AppData\Local\Application Data
[03/09/2009|09:12] C:\Users\SYLVIE~1\AppData\Local\ApplicationHistory
[08/05/2008|17:49] C:\Users\SYLVIE~1\AppData\Local\CyberLink
[28/03/2009|04:12] C:\Users\SYLVIE~1\AppData\Local\d3d9caps.dat
[03/09/2009|02:13] C:\Users\SYLVIE~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[26/10/2008|22:14] C:\Users\SYLVIE~1\AppData\Local\Downloaded Installations
[14/04/2008|17:20] C:\Users\SYLVIE~1\AppData\Local\eMule
[24/03/2008|12:26] C:\Users\SYLVIE~1\AppData\Local\fusioncache.dat
[10/05/2009|19:59] C:\Users\SYLVIE~1\AppData\Local\GDIPFONTCACHEV1.DAT
[09/08/2009|11:24] C:\Users\SYLVIE~1\AppData\Local\Google
[24/03/2008|12:19] C:\Users\SYLVIE~1\AppData\Local\Historique
[03/09/2009|09:00] C:\Users\SYLVIE~1\AppData\Local\IconCache.db
[16/08/2009|18:53] C:\Users\SYLVIE~1\AppData\Local\JollyBear
[08/05/2008|17:49] C:\Users\SYLVIE~1\AppData\Local\MagicSports
[10/05/2009|12:01] C:\Users\SYLVIE~1\AppData\Local\Microsoft
[14/05/2008|18:55] C:\Users\SYLVIE~1\AppData\Local\Microsoft Games
[30/04/2008|12:06] C:\Users\SYLVIE~1\AppData\Local\Midway
[24/03/2008|17:10] C:\Users\SYLVIE~1\AppData\Local\Mozilla
[01/11/2008|09:07] C:\Users\SYLVIE~1\AppData\Local\Nero
[08/05/2008|17:49] C:\Users\SYLVIE~1\AppData\Local\PowerCinema
[06/05/2008|14:19] C:\Users\SYLVIE~1\AppData\Local\SpookyManor
[31/08/2009|18:53] C:\Users\SYLVIE~1\AppData\Local\STARGAZE_IMAGE_CACHE
[03/09/2009|09:39] C:\Users\SYLVIE~1\AppData\Local\Temp
[24/03/2008|12:19] C:\Users\SYLVIE~1\AppData\Local\Temporary Internet Files
[19/12/2008|01:58] C:\Users\SYLVIE~1\AppData\Local\TimeParadox
[02/07/2008|14:36] C:\Users\SYLVIE~1\AppData\Local\Virtools
[24/03/2008|12:26] C:\Users\SYLVIE~1\AppData\Local\VirtualStore
[30/10/2008|15:33] C:\Users\SYLVIE~1\AppData\Local\World in Conflict
[01/09/2009|20:03] C:\Users\SYLVIE~1\AppData\Local\Zylom Games
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[03/09/2009 09:14][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[03/09/2009 09:12][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[03/09/2009 09:30][--a------] C:\Windows\tasks\Extension de garantie.job
[03/09/2009 09:30][--a------] C:\Windows\tasks\Recovery DVD Creator.job
[03/09/2009 09:12][--ah-----] C:\Windows\tasks\SA.DAT
[03/09/2009 09:00][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[04/02/2007|09:15] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[26/12/2008|22:42] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[11/06/2009|17:41] C:\ProgramData\Adobe
[04/07/2009|13:20] C:\ProgramData\AdventureChronicles1
[18/01/2009|19:30] C:\ProgramData\Age of Empires 3
[17/08/2008|23:05] C:\ProgramData\airportmania
[31/08/2009|18:53] C:\ProgramData\Alawar Stargaze
[28/09/2008|09:19] C:\ProgramData\AOL
[09/10/2008|10:39] C:\ProgramData\AOL OCP
[26/12/2008|22:37] C:\ProgramData\Apple
[26/12/2008|22:41] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[05/09/2008|11:59] C:\ProgramData\Artogon
[16/08/2009|12:10] C:\ProgramData\Axis Readme Second Bat
[19/04/2008|18:22] C:\ProgramData\Azureus
[06/08/2008|20:57] C:\ProgramData\BC Soft Games
[11/11/2008|21:31] C:\ProgramData\BOONTY
[24/03/2008|12:15] C:\ProgramData\Bureau
[26/10/2008|11:38] C:\ProgramData\CyberLink
[06/02/2009|17:54] C:\ProgramData\Dekovir
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[10/05/2009|11:55] C:\ProgramData\Electronic Arts
[14/04/2008|17:20] C:\ProgramData\eMule
[05/05/2009|20:01] C:\ProgramData\Enkord
[13/07/2008|09:38] C:\ProgramData\Fashion Solitaire 1.2
[24/03/2008|12:15] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[12/11/2008|10:47] C:\ProgramData\FreshGames
[22/06/2009|13:55] C:\ProgramData\Fugazo
[15/06/2008|10:33] C:\ProgramData\GameHouse
[21/05/2009|13:49] C:\ProgramData\Gogii
[04/08/2008|18:13] C:\ProgramData\Google
[21/03/2009|10:14] C:\ProgramData\HipSoft
[09/08/2009|11:02] C:\ProgramData\HoverBee Studios
[04/02/2007|09:04] C:\ProgramData\InstallShield
[16/08/2009|18:53] C:\ProgramData\JollyBear
[25/02/2009|16:13] C:\ProgramData\Kaspersky Lab
[31/12/2008|09:57] C:\ProgramData\Kaspersky Lab Setup Files
[09/08/2009|11:05] C:\ProgramData\LauncherAccess.dt
[31/12/2008|10:15] C:\ProgramData\LUUnInstall.LiveUpdate
[20/06/2008|16:51] C:\ProgramData\Macromedia
[30/10/2008|15:19] C:\ProgramData\Media Center Programs
[24/03/2008|12:15] C:\ProgramData\Menu D‚marrer
[11/04/2008|12:40] C:\ProgramData\Messenger Plus!
[10/05/2009|12:01] C:\ProgramData\Microsoft
[12/06/2009|03:05] C:\ProgramData\Microsoft Help
[24/03/2008|12:15] C:\ProgramData\ModŠles
[25/08/2009|02:17] C:\ProgramData\Mpeg dash
[18/03/2009|21:14] C:\ProgramData\MumboJumbo
[10/04/2008|13:56] C:\ProgramData\My Games
[26/10/2008|20:45] C:\ProgramData\MysteryChronicles
[23/10/2008|14:23] C:\ProgramData\MythPeople
[04/08/2008|12:14] C:\ProgramData\NeptunesAdve
[06/08/2008|19:57] C:\ProgramData\Nero
[04/02/2007|08:57] C:\ProgramData\NVIDIA
[25/08/2009|18:43] C:\ProgramData\planlovelove.02ooj
[26/08/2009|03:49] C:\ProgramData\planlovelove.0e0ytf
[26/08/2009|17:17] C:\ProgramData\planlovelove.0gt6gvc
[25/08/2009|13:15] C:\ProgramData\planlovelove.0syipf
[26/08/2009|00:54] C:\ProgramData\planlovelove.17nhaq
[26/08/2009|14:23] C:\ProgramData\planlovelove.18hk3
[26/08/2009|15:50] C:\ProgramData\planlovelove.1ewhg98
[26/08/2009|11:28] C:\ProgramData\planlovelove.1w53i
[26/08/2009|12:55] C:\ProgramData\planlovelove.2amly0h
[25/08/2009|12:09] C:\ProgramData\planlovelove.2bbxty
[26/08/2009|22:23] C:\ProgramData\planlovelove.2o80pcc
[26/08/2009|12:33] C:\ProgramData\planlovelove.2uzmp
[26/08/2009|05:38] C:\ProgramData\planlovelove.2uzrbn7
[27/08/2009|01:40] C:\ProgramData\planlovelove.2xc784
[26/08/2009|07:49] C:\ProgramData\planlovelove.2zbk6
[25/08/2009|07:25] C:\ProgramData\planlovelove.33pxt
[26/08/2009|19:07] C:\ProgramData\planlovelove.3pcz9z
[26/08/2009|14:44] C:\ProgramData\planlovelove.3t9cz
[25/08/2009|22:43] C:\ProgramData\planlovelove.47sx4vl
[25/08/2009|22:00] C:\ProgramData\planlovelove.4i2zzpo
[26/08/2009|07:28] C:\ProgramData\planlovelove.4liqdp
[26/08/2009|17:39] C:\ProgramData\planlovelove.4y0i0pf
[26/08/2009|05:16] C:\ProgramData\planlovelove.56bem4
[26/08/2009|02:44] C:\ProgramData\planlovelove.56hmc
[25/08/2009|23:49] C:\ProgramData\planlovelove.5ggm8c
[26/08/2009|10:22] C:\ProgramData\planlovelove.5zmo75
[16/08/2009|12:10] C:\ProgramData\planlovelove.6o888
[26/08/2009|16:56] C:\ProgramData\planlovelove.6o9hrva
[26/08/2009|22:01] C:\ProgramData\planlovelove.6rjiy
[26/08/2009|09:17] C:\ProgramData\planlovelove.77np70l
[25/08/2009|19:49] C:\ProgramData\planlovelove.797hm63
[26/08/2009|21:18] C:\ProgramData\planlovelove.7fi5ga
[25/08/2009|03:47] C:\ProgramData\planlovelove.7lgjiz
[26/08/2009|23:51] C:\ProgramData\planlovelove.81smg51
[26/08/2009|16:34] C:\ProgramData\planlovelove.854ml
[26/08/2009|03:05] C:\ProgramData\planlovelove.8fhpfpv
[25/08/2009|06:20] C:\ProgramData\planlovelove.8svm9j
[26/08/2009|18:23] C:\ProgramData\planlovelove.8uhfn4
[27/08/2009|02:24] C:\ProgramData\planlovelove.8x4ycj
[25/08/2009|12:53] C:\ProgramData\planlovelove.8yjfj
[25/08/2009|20:32] C:\ProgramData\planlovelove.90fp5u
[25/08/2009|17:15] C:\ProgramData\planlovelove.98l8rm
[25/08/2009|04:09] C:\ProgramData\planlovelove.9h15qz8
[25/08/2009|10:20] C:\ProgramData\planlovelove.9mahov
[26/08/2009|16:12] C:\ProgramData\planlovelove.9t8z4
[25/08/2009|20:10] C:\ProgramData\planlovelove.aa6pi
[26/08/2009|00:11] C:\ProgramData\planlovelove.aliaua
[26/08/2009|06:22] C:\ProgramData\planlovelove.axrvpny
[26/08/2009|20:56] C:\ProgramData\planlovelove.ayue4f0
[26/08/2009|21:40] C:\ProgramData\planlovelove.b3u2nk1
[25/08/2009|17:59] C:\ProgramData\planlovelove.bhayq
[25/08/2009|21:38] C:\ProgramData\planlovelove.bnjtyzh
[25/08/2009|03:03] C:\ProgramData\planlovelove.boujma
[27/08/2009|02:45] C:\ProgramData\planlovelove.bpqf6
[26/08/2009|00:32] C:\ProgramData\planlovelove.bvo7qgk
[26/08/2009|20:12] C:\ProgramData\planlovelove.c5fsp
[11/04/2008|11:36] C:\ProgramData\planlovelove.cb0dwp
[26/08/2009|04:33] C:\ProgramData\planlovelove.cgn41c9
[25/08/2009|04:30] C:\ProgramData\planlovelove.ch7iy
[25/08/2009|15:26] C:\ProgramData\planlovelove.cshuj
[26/08/2009|03:27] C:\ProgramData\planlovelove.czrn6vg
[25/08/2009|02:19] C:\ProgramData\planlovelove.ddsr6q
[26/08/2009|15:06] C:\ProgramData\planlovelove.dkmqrj
[25/08/2009|11:04] C:\ProgramData\planlovelove.dn9t9ec
[26/08/2009|20:34] C:\ProgramData\planlovelove.drpua
[25/08/2009|18:21] C:\ProgramData\planlovelove.eq0lw
[26/08/2009|04:55] C:\ProgramData\planlovelove.ewxbqv
[26/08/2009|10:44] C:\ProgramData\planlovelove.fgrjok
[25/08/2009|13:37] C:\ProgramData\planlovelove.fmo50
[25/08/2009|11:26] C:\ProgramData\planlovelove.glhtfn
[25/08/2009|23:05] C:\ProgramData\planlovelove.h0e1rbs
[26/08/2009|08:33] C:\ProgramData\planlovelove.hjzeuc1
[26/08/2009|01:16] C:\ProgramData\planlovelove.hvilqxe
[25/08/2009|20:54] C:\ProgramData\planlovelove.ikx5a
[26/08/2009|23:29] C:\ProgramData\planlovelove.iozkyde
[25/08/2009|14:20] C:\ProgramData\planlovelove.j36ar0
[25/08/2009|15:48] C:\ProgramData\planlovelove.jbt72z
[25/08/2009|23:27] C:\ProgramData\planlovelove.juewk
[27/08/2009|02:02] C:\ProgramData\planlovelove.k4uyx9
[26/08/2009|01:38] C:\ProgramData\planlovelove.k6e2hx
[25/08/2009|16:10] C:\ProgramData\planlovelove.krqm29u
[11/04/2008|11:36] C:\ProgramData\planlovelove.lo29qp
[26/08/2009|12:12] C:\ProgramData\planlovelove.lqnwzd9
[26/08/2009|18:01] C:\ProgramData\planlovelove.n758d8n
[25/08/2009|15:04] C:\ProgramData\planlovelove.ncd34k
[26/08/2009|08:55] C:\ProgramData\planlovelove.ndx9i
[26/08/2009|11:50] C:\ProgramData\planlovelove.np2jpt
[25/08/2009|09:14] C:\ProgramData\planlovelove.nsone2y
[25/08/2009|16:53] C:\ProgramData\planlovelove.o0bpogv
[26/08/2009|15:28] C:\ProgramData\planlovelove.o58cyiq
[26/08/2009|09:39] C:\ProgramData\planlovelove.obgbqxy
[26/08/2009|10:00] C:\ProgramData\planlovelove.oi2a5
[26/08/2009|13:39] C:\ProgramData\planlovelove.ojhqf
[27/08/2009|00:34] C:\ProgramData\planlovelove.okyrw
[25/08/2009|08:53] C:\ProgramData\planlovelove.osqqh
[26/08/2009|13:17] C:\ProgramData\planlovelove.ozn9b
[25/08/2009|04:52] C:\ProgramData\planlovelove.p0i8rwu
[25/08/2009|21:16] C:\ProgramData\planlovelove.pj8pp
[25/08/2009|05:14] C:\ProgramData\planlovelove.pm3372
[26/08/2009|08:11] C:\ProgramData\planlovelove.psgrgh
[26/08/2009|14:01] C:\ProgramData\planlovelove.q4iuc
[25/08/2009|19:27] C:\ProgramData\planlovelove.qftfno
[27/08/2009|00:13] C:\ProgramData\planlovelove.qgoyae
[26/08/2009|18:45] C:\ProgramData\planlovelove.qmk5i
[26/08/2009|04:11] C:\ProgramData\planlovelove.qyw6tso
[26/08/2009|06:44] C:\ProgramData\planlovelove.rtd2j
[25/08/2009|05:58] C:\ProgramData\planlovelove.s8s6ub
[26/08/2009|02:22] C:\ProgramData\planlovelove.snq4xte
[25/08/2009|08:31] C:\ProgramData\planlovelove.sxfxnw
[27/08/2009|01:18] C:\ProgramData\planlovelove.t0vw6i
[26/08/2009|11:06] C:\ProgramData\planlovelove.t6ptjoy
[25/08/2009|11:47] C:\ProgramData\planlovelove.t9ot9b
[25/08/2009|16:32] C:\ProgramData\planlovelove.tdvu45
[26/08/2009|06:00] C:\ProgramData\planlovelove.th5s9
[25/08/2009|12:31] C:\ProgramData\planlovelove.tt487g
[26/08/2009|22:45] C:\ProgramData\planlovelove.u6is48u
[26/08/2009|23:07] C:\ProgramData\planlovelove.u6tk2qi
[25/08/2009|07:03] C:\ProgramData\planlovelove.uaxm1hv
[25/08/2009|03:25] C:\ProgramData\planlovelove.uynwca
[26/08/2009|19:29] C:\ProgramData\planlovelove.uzcp2h
[16/08/2009|12:10] C:\ProgramData\planlovelove.v0ukz7
[25/08/2009|17:37] C:\ProgramData\planlovelove.va8rn0
[25/08/2009|08:09] C:\ProgramData\planlovelove.vy9m8
[25/08/2009|13:59] C:\ProgramData\planlovelove.wjdpae
[25/08/2009|09:58] C:\ProgramData\planlovelove.wn9b8o
[25/08/2009|19:05] C:\ProgramData\planlovelove.wu33g5
[26/08/2009|02:00] C:\ProgramData\planlovelove.wvcjf
[25/08/2009|22:21] C:\ProgramData\planlovelove.xa3fmrq
[25/08/2009|05:36] C:\ProgramData\planlovelove.xabofqz
[25/08/2009|06:41] C:\ProgramData\planlovelove.xc9i0c
[26/08/2009|19:50] C:\ProgramData\planlovelove.xt93ov1
[26/08/2009|07:06] C:\ProgramData\planlovelove.y07tz
[25/08/2009|09:36] C:\ProgramData\planlovelove.y1zyk
[25/08/2009|14:42] C:\ProgramData\planlovelove.ykuggtn
[25/08/2009|07:47] C:\ProgramData\planlovelove.youxysq
[25/08/2009|10:42] C:\ProgramData\planlovelove.yxaut
[27/08/2009|00:56] C:\ProgramData\planlovelove.z4a39oz
[25/08/2009|02:41] C:\ProgramData\planlovelove.zgyy9
[20/08/2009|18:07] C:\ProgramData\PlayFirst
[13/08/2009|09:31] C:\ProgramData\PlayPond
[08/03/2009|18:02] C:\ProgramData\Playrix Entertainment
[24/04/2009|15:22] C:\ProgramData\PoBros
[03/12/2008|00:01] C:\ProgramData\PopCap Games
[27/03/2008|20:04] C:\ProgramData\Real
[29/08/2009|20:57] C:\ProgramData\Roxio
[16/08/2009|12:10] C:\ProgramData\SAFE PLUS BALM.4w7go
[17/06/2009|20:50] C:\ProgramData\Sandlot Games
[15/12/2008|22:35] C:\ProgramData\Skype
[31/12/2008|18:38] C:\ProgramData\Sonic
[06/08/2008|21:01] C:\ProgramData\SpinTop Games
[02/11/2006|15:02] C:\ProgramData\Start Menu
[25/08/2009|19:11] C:\ProgramData\SugarGames
[31/12/2008|10:47] C:\ProgramData\Symantec
[03/09/2009|09:12] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[08/04/2008|20:23] C:\ProgramData\TERMINAL Studio
[05/06/2008|19:50] C:\ProgramData\TrackMania
[17/04/2009|11:44] C:\ProgramData\UDL
[17/09/2008|15:52] C:\ProgramData\Viewpoint
[04/07/2008|17:45] C:\ProgramData\Vogue Tales
[25/03/2008|19:19] C:\ProgramData\WLInstaller
[22/01/2009|13:10] C:\ProgramData\Zeal Deluxe
[07/07/2009|19:46] C:\ProgramData\ZEMNOTT
[01/04/2008|17:18] C:\ProgramData\Zylom
--------------------\\ Listing des dossiers dans C:\Program Files
[07/04/2008|13:33] C:\Program Files\ABBYY FineReader 6.0 Sprint
[04/02/2007|09:15] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[22/09/2008|08:34] C:\Program Files\adap054G
[11/06/2009|17:40] C:\Program Files\Adobe
[05/04/2008|13:54] C:\Program Files\AdVantage
[22/02/2009|17:22] C:\Program Files\Alwil Software
[02/09/2009|13:23] C:\Program Files\American Conquest
[28/09/2008|09:20] C:\Program Files\AOL
[24/03/2008|18:22] C:\Program Files\AOL 8.0
[22/06/2009|06:59] C:\Program Files\AOL 8.0a
[20/06/2008|16:54] C:\Program Files\AOL 9.0 VR
[17/09/2008|16:03] C:\Program Files\AOL 9.0 VRa
[22/09/2008|08:38] C:\Program Files\AOL 9.0 VRb
[28/09/2008|09:21] C:\Program Files\AOL 9.0 VRc
[26/12/2008|22:38] C:\Program Files\Apple Software Update
[21/07/2008|18:52] C:\Program Files\Auran
[02/05/2009|01:09] C:\Program Files\Azureus
[31/10/2008|14:34] C:\Program Files\BestGameEver
[26/12/2008|22:40] C:\Program Files\Bonjour
[30/04/2009|20:07] C:\Program Files\BoontyGames
[02/05/2008|10:00] C:\Program Files\CDisplay
[11/03/2009|19:03] C:\Program Files\Circl Developement
[10/11/2008|10:08] C:\Program Files\Codemasters
[11/03/2009|18:30] C:\Program Files\Common Files
[26/10/2008|11:38] C:\Program Files\CyberLink
[05/04/2008|13:52] C:\Program Files\DAEMON Tools Lite
[13/07/2008|09:51] C:\Program Files\DAP
[16/11/2008|23:48] C:\Program Files\djDecks VirtualDJ Control Record Plug-In
[21/09/2008|21:38] C:\Program Files\EA GAMES
[11/08/2009|11:22] C:\Program Files\Electronic Arts
[16/09/2008|18:38] C:\Program Files\eMule
[17/04/2009|11:23] C:\Program Files\epson
[16/08/2009|12:10] C:\Program Files\eToro
[24/03/2008|12:15] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[05/05/2009|20:00] C:\Program Files\Google
[04/02/2007|08:58] C:\Program Files\HDReg
[24/03/2008|17:50] C:\Program Files\Hewlett-Packard
[09/12/2008|22:42] C:\Program Files\Hidden Expedition - Amazon
[24/03/2008|17:50] C:\Program Files\hp deskjet 5550 series
[16/08/2009|13:21] C:\Program Files\InstallShield Installation Information
[29/07/2009|03:06] C:\Program Files\Internet Explorer
[30/12/2008|17:54] C:\Program Files\iPod
[26/12/2008|22:42] C:\Program Files\iTunes
[03/04/2008|19:14] C:\Program Files\Java
[10/11/2008|10:08] C:\Program Files\KaraFun
[02/09/2009|21:01] C:\Program Files\LimeWire
[13/07/2008|09:22] C:\Program Files\Lopxp
[05/09/2008|13:53] C:\Program Files\Maxis
[11/03/2009|19:03] C:\Program Files\Messenger Plus! Live
[24/06/2009|18:43] C:\Program Files\Micro Application
[11/03/2009|18:44] C:\Program Files\Microsoft
[16/08/2009|13:21] C:\Program Files\Microsoft Games
[04/02/2007|09:13] C:\Program Files\Microsoft Office
[25/03/2008|19:28] C:\Program Files\Microsoft SQL Server Compact Edition
[11/03/2009|18:50] C:\Program Files\Microsoft Sync Framework
[12/06/2009|03:05] C:\Program Files\Microsoft Works
[06/06/2009|13:50] C:\Program Files\Microsoft WSE
[04/02/2007|09:13] C:\Program Files\Microsoft.NET
[27/03/2009|04:25] C:\Program Files\Movie Maker
[03/09/2009|09:13] C:\Program Files\Mozilla Firefox
[02/11/2006|14:37] C:\Program Files\MSBuild
[24/03/2008|12:43] C:\Program Files\MSXML 4.0
[06/08/2008|19:57] C:\Program Files\Nero
[31/12/2008|10:15] C:\Program Files\Norton 360
[24/03/2008|18:17] C:\Program Files\Nullsoft
[29/08/2008|22:56] C:\Program Files\Packard Bell
[20/04/2008|23:04] C:\Program Files\PhotoFiltre
[26/12/2008|22:40] C:\Program Files\QuickTime
[24/03/2008|18:17] C:\Program Files\Real
[04/02/2007|08:53] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[26/10/2008|11:27] C:\Program Files\ReflexiveArcade
[04/02/2007|09:04] C:\Program Files\Roxio
[04/09/2008|14:31] C:\Program Files\Samsung
[04/02/2007|08:59] C:\Program Files\Seagate
[30/10/2008|15:13] C:\Program Files\Sierra Entertainment
[31/12/2008|10:14] C:\Program Files\Symantec
[26/05/2008|14:44] C:\Program Files\TmNationsForever
[16/08/2009|12:10] C:\Program Files\TorrentSpeeder
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[16/11/2008|21:58] C:\Program Files\Veronica Rivers - Portails de l'Inconnu
[14/04/2008|17:04] C:\Program Files\VideoLAN
[17/09/2008|15:52] C:\Program Files\Viewpoint
[02/07/2008|14:35] C:\Program Files\Virtools
[01/08/2008|16:28] C:\Program Files\Winamp
[27/03/2009|04:25] C:\Program Files\Windows Calendar
[27/03/2009|04:25] C:\Program Files\Windows Collaboration
[27/03/2009|04:25] C:\Program Files\Windows Defender
[27/03/2009|04:25] C:\Program Files\Windows Journal
[11/03/2009|18:51] C:\Program Files\Windows Live
[25/03/2008|19:27] C:\Program Files\Windows Live Favorites
[11/03/2009|18:44] C:\Program Files\Windows Live SkyDrive
[11/03/2009|18:51] C:\Program Files\Windows Live Toolbar
[11/08/2009|23:23] C:\Program Files\Windows Mail
[12/08/2009|06:02] C:\Program Files\Windows Media Player
[24/03/2008|12:15] C:\Program Files\Windows NT
[27/03/2009|04:25] C:\Program Files\Windows Photo Gallery
[27/03/2009|04:25] C:\Program Files\Windows Sidebar
[05/04/2008|15:11] C:\Program Files\WinRAR
[25/11/2008|16:13] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[11/06/2009|17:41] C:\Program Files\Common Files\Adobe
[09/10/2008|10:39] C:\Program Files\Common Files\AOL
[20/06/2008|16:51] C:\Program Files\Common Files\aolback
[28/09/2008|09:19] C:\Program Files\Common Files\aolshare
[26/12/2008|22:42] C:\Program Files\Common Files\Apple
[11/11/2008|21:31] C:\Program Files\Common Files\BOONTY Shared
[04/02/2007|09:13] C:\Program Files\Common Files\DESIGNER
[04/02/2007|09:06] C:\Program Files\Common Files\InstallShield
[03/04/2008|19:10] C:\Program Files\Common Files\Java
[18/01/2009|19:25] C:\Program Files\Common Files\Microsoft Games
[06/03/2009|04:01] C:\Program Files\Common Files\microsoft shared
[06/08/2008|20:01] C:\Program Files\Common Files\Nero
[20/06/2008|16:50] C:\Program Files\Common Files\Nullsoft
[24/03/2008|18:25] C:\Program Files\Common Files\Real
[04/02/2007|09:04] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[04/02/2007|09:04] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[04/02/2007|09:04] C:\Program Files\Common Files\SureThing Shared
[08/04/2008|18:38] C:\Program Files\Common Files\SWF Studio
[31/12/2008|10:47] C:\Program Files\Common Files\Symantec Shared
[27/03/2009|04:25] C:\Program Files\Common Files\System
[11/03/2009|18:30] C:\Program Files\Common Files\Windows Live
[25/03/2008|19:25] C:\Program Files\Common Files\WindowsLiveInstaller
[04/02/2007|08:58] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 77 Processes )
iexplore.exe ~ [PID:3900]
--------------------\\ Recherche avec S_Lop
C:\ProgramData\planlovelove.02ooj
C:\ProgramData\planlovelove.18hk3
C:\ProgramData\planlovelove.1w53i
C:\ProgramData\planlovelove.2uzmp
C:\ProgramData\planlovelove.2zbk6
C:\ProgramData\planlovelove.33pxt
C:\ProgramData\planlovelove.3t9cz
C:\ProgramData\planlovelove.56hmc
C:\ProgramData\planlovelove.6o888
C:\ProgramData\planlovelove.6rjiy
C:\ProgramData\planlovelove.854ml
C:\ProgramData\planlovelove.8yjfj
C:\ProgramData\planlovelove.9t8z4
C:\ProgramData\planlovelove.aa6pi
C:\ProgramData\planlovelove.bhayq
C:\ProgramData\planlovelove.bpqf6
C:\ProgramData\planlovelove.c5fsp
C:\ProgramData\planlovelove.ch7iy
C:\ProgramData\planlovelove.cshuj
C:\ProgramData\planlovelove.drpua
C:\ProgramData\planlovelove.eq0lw
C:\ProgramData\planlovelove.fmo50
C:\ProgramData\planlovelove.ikx5a
C:\ProgramData\planlovelove.juewk
C:\ProgramData\planlovelove.ndx9i
C:\ProgramData\planlovelove.oi2a5
C:\ProgramData\planlovelove.ojhqf
C:\ProgramData\planlovelove.okyrw
C:\ProgramData\planlovelove.osqqh
C:\ProgramData\planlovelove.ozn9b
C:\ProgramData\planlovelove.pj8pp
C:\ProgramData\planlovelove.q4iuc
C:\ProgramData\planlovelove.qmk5i
C:\ProgramData\planlovelove.rtd2j
C:\ProgramData\planlovelove.th5s9
C:\ProgramData\planlovelove.vy9m8
C:\ProgramData\planlovelove.wvcjf
C:\ProgramData\planlovelove.y07tz
C:\ProgramData\planlovelove.y1zyk
C:\ProgramData\planlovelove.yxaut
C:\ProgramData\planlovelove.zgyy9
C:\ProgramData\SAFE PLUS BALM.4w7go
C:\ProgramData\planlovelove.0e0ytf
C:\ProgramData\planlovelove.0syipf
C:\ProgramData\planlovelove.17nhaq
C:\ProgramData\planlovelove.2bbxty
C:\ProgramData\planlovelove.2xc784
C:\ProgramData\planlovelove.3pcz9z
C:\ProgramData\planlovelove.4liqdp
C:\ProgramData\planlovelove.56bem4
C:\ProgramData\planlovelove.5ggm8c
C:\ProgramData\planlovelove.5zmo75
C:\ProgramData\planlovelove.7fi5ga
C:\ProgramData\planlovelove.7lgjiz
C:\ProgramData\planlovelove.8svm9j
C:\ProgramData\planlovelove.8uhfn4
C:\ProgramData\planlovelove.8x4ycj
C:\ProgramData\planlovelove.90fp5u
C:\ProgramData\planlovelove.98l8rm
C:\ProgramData\planlovelove.9mahov
C:\ProgramData\planlovelove.aliaua
C:\ProgramData\planlovelove.boujma
C:\ProgramData\planlovelove.cb0dwp
C:\ProgramData\planlovelove.ddsr6q
C:\ProgramData\planlovelove.dkmqrj
C:\ProgramData\planlovelove.ewxbqv
C:\ProgramData\planlovelove.fgrjok
C:\ProgramData\planlovelove.glhtfn
C:\ProgramData\planlovelove.j36ar0
C:\ProgramData\planlovelove.jbt72z
C:\ProgramData\planlovelove.k4uyx9
C:\ProgramData\planlovelove.k6e2hx
C:\ProgramData\planlovelove.lo29qp
C:\ProgramData\planlovelove.ncd34k
C:\ProgramData\planlovelove.np2jpt
C:\ProgramData\planlovelove.pm3372
C:\ProgramData\planlovelove.psgrgh
C:\ProgramData\planlovelove.qftfno
C:\ProgramData\planlovelove.qgoyae
C:\ProgramData\planlovelove.s8s6ub
C:\ProgramData\planlovelove.sxfxnw
C:\ProgramData\planlovelove.t0vw6i
C:\ProgramData\planlovelove.t9ot9b
C:\ProgramData\planlovelove.tdvu45
C:\ProgramData\planlovelove.tt487g
C:\ProgramData\planlovelove.uynwca
C:\ProgramData\planlovelove.uzcp2h
C:\ProgramData\planlovelove.v0ukz7
C:\ProgramData\planlovelove.va8rn0
C:\ProgramData\planlovelove.wjdpae
C:\ProgramData\planlovelove.wn9b8o
C:\ProgramData\planlovelove.wu33g5
C:\ProgramData\planlovelove.xc9i0c
C:\ProgramData\planlovelove.0gt6gvc
C:\ProgramData\planlovelove.1ewhg98
C:\ProgramData\planlovelove.2amly0h
C:\ProgramData\planlovelove.2o80pcc
C:\ProgramData\planlovelove.2uzrbn7
C:\ProgramData\planlovelove.47sx4vl
C:\ProgramData\planlovelove.4i2zzpo
C:\ProgramData\planlovelove.4y0i0pf
C:\ProgramData\planlovelove.6o9hrva
C:\ProgramData\planlovelove.77np70l
C:\ProgramData\planlovelove.797hm63
C:\ProgramData\planlovelove.81smg51
C:\ProgramData\planlovelove.8fhpfpv
C:\ProgramData\planlovelove.9h15qz8
C:\ProgramData\planlovelove.axrvpny
C:\ProgramData\planlovelove.ayue4f0
C:\ProgramData\planlovelove.b3u2nk1
C:\ProgramData\planlovelove.bnjtyzh
C:\ProgramData\planlovelove.bvo7qgk
C:\ProgramData\planlovelove.cgn41c9
C:\ProgramData\planlovelove.czrn6vg
C:\ProgramData\planlovelove.dn9t9ec
C:\ProgramData\planlovelove.h0e1rbs
C:\ProgramData\planlovelove.hjzeuc1
C:\ProgramData\planlovelove.hvilqxe
C:\ProgramData\planlovelove.iozkyde
C:\ProgramData\planlovelove.krqm29u
C:\ProgramData\planlovelove.lqnwzd9
C:\ProgramData\planlovelove.n758d8n
C:\ProgramData\planlovelove.nsone2y
C:\ProgramData\planlovelove.o0bpogv
C:\ProgramData\planlovelove.o58cyiq
C:\ProgramData\planlovelove.obgbqxy
C:\ProgramData\planlovelove.p0i8rwu
C:\ProgramData\planlovelove.qyw6tso
C:\ProgramData\planlovelove.snq4xte
C:\ProgramData\planlovelove.t6ptjoy
C:\ProgramData\planlovelove.u6is48u
C:\ProgramData\planlovelove.u6tk2qi
C:\ProgramData\planlovelove.uaxm1hv
C:\ProgramData\planlovelove.xa3fmrq
C:\ProgramData\planlovelove.xabofqz
C:\ProgramData\planlovelove.xt93ov1
C:\ProgramData\planlovelove.ykuggtn
C:\ProgramData\planlovelove.youxysq
C:\ProgramData\planlovelove.z4a39oz
C:\Users\SYLVIE~1\AppData\Local\Temp\bis89A9.exe
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\ProgramData\Axis Readme Second Bat
C:\ProgramData\Axis Readme Second Bat\mail tick.dat
C:\ProgramData\Axis Readme Second Bat\mail tick.exe
C:\Users\SYLVIE~1\AppData\Local\Temp\TorrentSpeeder.zip
C:\Users\SYLVIE~1\AppData\Local\Temp\minime.exe
C:\Users\SYLVIE~1\AppData\Local\Temp\HtmlControl.dll
C:\Users\SYLVIE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\TorrentSpeeder
C:\Users\SYLVIE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\TorrentSpeeder\HomePage.lnk
C:\Users\SYLVIE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\TorrentSpeeder\TorrentSpeeder.lnk
C:\Users\SYLVIE~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\TorrentSpeeder\Uninstall.lnk
C:\Program Files\TorrentSpeeder
C:\Program Files\TorrentSpeeder\config
C:\Program Files\TorrentSpeeder\data
C:\Program Files\TorrentSpeeder\torrentspeeder.exe
C:\Program Files\TorrentSpeeder\TorrentSpeeder.url
C:\Users\SYLVIE~1\Desktop\TorrentSpeeder.lnk
C:\Users\SYLVIE~1\AppData\Roaming\MICROS~1\Windows\Cookies\sylvie-wilfrid@advertising[2].txt
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"admin heck"="\"C:\\ProgramData\\planlovelove.bpqf6\""
"Second bat creative peak"="\"C:\\ProgramData\\SAFE PLUS BALM.4w7go\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-03 09:04:36
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
IPC error: 2 Le fichier spécifié est introuvable.
scanning hidden files ...
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-03 09:40:21
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\SYLVIE~1\AppData\Local\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1242 bytes hidden from API
scan completed successfully
hidden processes: 0
hidden files: 686
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\SYLVIE~1\AppData\Roaming\Azureus\torrents\[isoHunt] Age of Empires III 1.0.4 & Asian Dynasties NoCD cracks.torrent
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\Crack
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\instructions.txt
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\sc4d_a.iso
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\sc4d_b.iso
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\serial.txt
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\Crack\PCDELAGOUTTE-config-log.txt
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\Crack\Plugins
C:\Users\SYLVIE~1\Documents\Azureus Downloads\SimCity 4 Deluxe + Crack\Crack\SimCity 4.exe
C:\PROGRA~2\Fugazo\Cooking Academy\cached\sounds\eggcrack.wav
C:\PROGRA~2\Fugazo\Cooking Academy 2\cached\sounds\eggcrack.wav
[F:3109][D:81]-> C:\Users\SYLVIE~1\AppData\Local\Temp
[F:122][D:1]-> C:\Users\SYLVIE~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:781][D:10]-> C:\Users\SYLVIE~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:188][D:4]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 03/09/2009| 9:43 - Option : [1]
--------------------\\ Fin du rapport a 9:43:44
[ UAC => 1 ] -
Bonjour,
Effectivement, il s'agit de la même infection que précédemment -> LOP.
Petit rappel, on l'attrape en installant les logiciels suivants (n'y allez pas) :
- 3wplayer : hxxp://www.3wplayer.com
- BitDownload : hxxp://www.bitdownload.org
- BitGrabber : hxxp://www.bitgrabber.com
- BitRoll : hxxp://www.bitroll.com
- BitSoftporn : hxxp://www.bitsofporn.com
- Divoplayer : hxxp://www.Divoplayer.com
- Domplayer : hxxp://www.Domplayer.com
- NetPumper : hxxp://www.netpumper.com
- Gamingtorrent : hxxp://www.Gamingtorrent.com
- Get-Torrent : hxxp://www.get-torrent.com/
- Kitplayer : hxxp://www.Kitplayer.com
- Imageswap : hxxp://www.Imageswap.com
- Play3w : hxxp://www.Play3w.com
- Plugindl : hxxp://www.Plugindl.com
- Torrent101 : hxxp://www.torrent101.com/
- Torrentq : hxxp://www.torrentq.com
- Torrentmusic : hxxp://www.Torrentmusic.org
- TorrentSoftware : hxxp://www.torrentsoftware.org/
- Torrentspeeder : hxxp://www.Torrentspeeder.com
- TorrentGamers : hxxp://www.torrentgamers.com
- Uvtorrent : hxxp://www.Uvtorrent.com
- Winzix : hxxp://www.winzix.com/
Le fait d'installer le sponsor de ' MSN Plus ! ' installe cette infection également.
Pour t'en débarasser, relance Lop SD une nouvelle fois :
- Choisis cette fois-ci l'option 2 (Suppression)
- Ne ferme pas la fenêtre lors de la suppression !
- Poste le rapport généré (C:\lopR.txt)
* (Si le Bureau ne réapparait pas, appuie sur Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
Ensuite :
• Télécharge Random's System Information Tool (RSIT) de random/random, et enregistre le sur ton Bureau : http://images.malwareremoval.com/random/RSIT.exe
• Double clique sur RSIT.exe pour lancer l'outil.
• Clique sur ' Continue ' à l'écran Disclaimer.
• Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
• Une fois le scan terminé, deux rapports vont apparaître : poste les dans ta prochaine réponse s'il te plaît (pour vérification)
Tutoriel illustré pour t'aider à utiliser RSIT : https://www.androidworld.fr/-
Je te remercie Stranger voila les deux rapport :
Logfile of random's system information tool 1.06 (written by random/random)
Run by sylvie-wilfrid at 2009-09-03 17:34:03
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 20 GB (9%) free of 230 GB
Total RAM: 3071 MB (68% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:34:35, on 03/09/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\Program Files\DAP\DAP.exe
C:\Program Files\Common Files\AOL\1213973260\ee\aolsoftware.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\eMule\emule.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\cmd.exe
C:\Lop SD\catchme.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\sylvie-wilfrid\Downloads\RSIT.exe
C:\Program Files\trend micro\sylvie-wilfrid.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.iesearch.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1213973260\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Lop S&D.lnk = C:\Lop SD\LopSD.cmd
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\Windows\system32\Shdocvw.dll
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Service Google Update (gupdate1c9cdab4ece21ec) (gupdate1c9cdab4ece21ec) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\Windows\system32\UAService7.exe
-
-
Re,
Désolé pour le temps de réponse ^^
Lop a bien été nettoyé, par contre le dernier rapport RSIT montre d'autres infections dont il faudra s'occuper également.
• Télécharge et installe Malwarebytes' Anti-Malware ici :
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
• A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
• Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
• Puis va dans l'onglet "Recherche", coche "Exécuter un examen RAPIDE" puis "Rechercher"
• A la fin du scan, clique sur Afficher les résultats
• Coche tous les éléments détectés puis clique sur Supprimer la sélection
• Enregistre le rapport
• S'il t'est demandé de redémarrer le PC, clique sur Yes
• Poste dans ta prochaine réponse le rapport apparaissant après la suppression stp
En second lieu, utilise ce logiciel pour repérer les bars d'outils néfastes en présence :
- Télécharge ToolBarSD (de Team IDN) ici et enregistre-le sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2[u]ToolbarSD[/u][/url]
- Lance l'installation du programme en exécutant le fichier téléchargé.
- Double-clique maintenant sur le raccourci de Toolbar-S&D.
- Sélectionne la langue souhaitée en tapant la lettre de ton choix (par exemple ' F ') puis en validant avec la touche Entrée.
- Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
- Poste le rapport généré stp. (C:\TB.txt)
Sinon, est-ce que tu sais à quoi correspond cette ligne ?
=> H:\Autorun.exe
Lecteur de disques? Support amovible? Lecteur virtuel? -
Re,
Ce n'est pas tout à fait terminé, et même si la pub s'est arrêtée, il reste quelques petites infections sur ton pc.
As-tu toujours besoin d'aide?
A+
