Besoin d'aide cheval de troie

Résolu
gue56514 Messages postés 9 Statut Membre -  
 gen-hackman -
Bonjour,

Je crois etre infecté par un cheval de troie que je ne peux neutraliser avec les programmes ad-aware et search and destroy, quelqu'un peux m'aider svp???

merci
Configuration: Windows XP Internet Explorer 7.0

48 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

Une suspicion de cheval de Troie sous Windows XP est apparue lorsque Ad-Aware et Search and Destroy n'ont pas permis de le neutraliser. Des recommandations prioritaires préconisent Malwarebytes Anti-Malware (MBAM) : télécharger, installer, mettre à jour puis lancer un scan complet et supprimer les éléments détectés, en suivant le tutoriel disponible. En parallèle, d'autres conseils recommandent de désinstaller Ad-Aware, puis d'utiliser des outils complémentaires comme ZHPDiag/ZHPFix ou Malwarebytes pour des scans supplémentaires afin d'identifier les éléments récalcitrants et nettoyer le système. En pratique, plusieurs outils complémentaires restent utiles après le nettoyage, notamment la mise à jour du navigateur et de ses extensions et la vérification des paramètres de page d'accueil et de moteur de recherche.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    Salut, fais ceci pour commencer :

    -+-+-+-> ZHPDiag <-+-+-+-

    [x] Télécharge ZHPDiag ( de Nicolas coolman ).

    [x] Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

    [x] Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau

    [x] Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.

    [x] Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

    [x] Rend toi sur www.cjoint.com

    [x] Clique sur " Parcourir " dans la partie " Joindre un fichier[...] "

    [x] Séléctionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

    [x] Clique ensuite sur " Créer le lien cjoint " et copie/colle le dans ton prochain message
    0
  2. georges86400 Messages postés 1893 Statut Membre 143
     
    Bonsoir
    Ad-aware est depasse. Malwarebytes est superieur
    tu le telecharges, installe le, fait une mise à jour et un scan.
    tu supprimes tout ce qu'il aura trouve
    http://www.malwarebytes.org/mbam.php
    0
  4. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    -+-+-+-> Lop S&D <-+-+-+-

    [x] Télécharge Lop S&D (par Eric_71 & Angeldark) à cette adresse : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    [x] /!\ Désactive les protections résidentes : Antivirus, antispywares, controleurs d'intégrité, etc... pour que l'outil puisse s'exécuter correctement.

    [x] Double clique sur " LopSD.exe " ( Vista : Clique droit -> Executer en tant qu'administrateur )

    [x] Choisis l'option F pour français

    [x] Ensuite, Choisis l'option 2 ( Suppression )

    [x] Laisse l'outil travailler

    [x] Copie/Colle le contenu du rapport qui s'ouvrira et poste le dans ton prochain message.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Gue56514
     
    voici le rapport:

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
    BIOS : BIOS Date: 10/15/08 11:57:09 Ver: 08.00.14
    USER : Guillaume ( Administrator )
    BOOT : Normal boot
    Antivirus : AVG Anti-Virus Free 8.5 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:244 Go (Free:0 Go)
    D:\ (CD or DVD)
    E:\ (Local Disk) - NTFS - Total:221 Go (Free:85 Go)
    F:\ (CD or DVD) - CDFS - Total:7 Go (Free:0 Go)
    G:\ (CD or DVD)
    H:\ (USB) - FAT32 - Total:3906 Mo (Free:0 Go)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [2] ( 2009-10-26|12:00 )

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\nsh5C7.tmp
    Supprime! - C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\nsr12D.tmp
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@advertstream[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@imagevenue.advertserve[2].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@advertising[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@ero-advertising[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@www.adultadvertising[2].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@euroclick[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@partypoker[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@rawvegas[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@888[1].txt

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans APPLIC~1

    [2009-03-31|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
    [2009-10-26|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\~0
    [2009-01-18|04:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [2009-03-04|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [2009-01-26|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [2009-02-09|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ArcSoft
    [2009-10-07|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
    [2009-01-15|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [2009-04-22|10:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [2009-03-23|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
    [2009-02-09|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
    [2009-03-31|10:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
    [2009-10-26|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [2009-01-25|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [2009-10-22|01:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SeekService
    [2009-02-10|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SlySoft
    [2009-03-31|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [2009-03-26|21:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
    [2009-01-27|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
    [2009-10-22|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
    [2009-01-15|18:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [2009-01-15|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

    [2009-05-17|06:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
    [2009-01-14|19:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [2009-04-28|19:54] C:\DOCUME~1\GUILLA~1\APPLIC~1\1clickPro
    [2009-01-18|04:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
    [2009-01-18|04:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\AdobeUM
    [2009-03-04|19:36] C:\DOCUME~1\GUILLA~1\APPLIC~1\Ahead
    [2009-02-08|22:53] C:\DOCUME~1\GUILLA~1\APPLIC~1\Apple Computer
    [2009-02-10|18:12] C:\DOCUME~1\GUILLA~1\APPLIC~1\ArcSoft
    [2009-08-18|13:32] C:\DOCUME~1\GUILLA~1\APPLIC~1\AVG8
    [2009-10-22|15:07] C:\DOCUME~1\GUILLA~1\APPLIC~1\Azureus
    [2009-09-18|17:50] C:\DOCUME~1\GUILLA~1\APPLIC~1\Cool Record Edit Pro
    [2009-10-22|17:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\dvdcss
    [2009-09-18|17:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\Free Sound Recorder
    [2009-03-02|22:03] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
    [2009-01-14|19:48] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
    [2009-02-02|23:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\IGN_DLM
    [2009-01-16|19:20] C:\DOCUME~1\GUILLA~1\APPLIC~1\InstallShield
    [2009-02-10|21:44] C:\DOCUME~1\GUILLA~1\APPLIC~1\KodakCredentialStore
    [2009-02-20|21:16] C:\DOCUME~1\GUILLA~1\APPLIC~1\La Bataille pour la Terre du Milieu ™ II
    [2009-01-18|13:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\Leadertech
    [2009-01-15|18:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
    [2009-10-26|11:54] C:\DOCUME~1\GUILLA~1\APPLIC~1\Malwarebytes
    [2009-02-08|22:56] C:\DOCUME~1\GUILLA~1\APPLIC~1\Media Player Classic
    [2009-02-20|21:25] C:\DOCUME~1\GUILLA~1\APPLIC~1\Mes fichiers de LSDA, L'Avènement du Roi-sorcier™
    [2009-10-26|07:04] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
    [2009-10-02|17:17] C:\DOCUME~1\GUILLA~1\APPLIC~1\mIRC
    [2009-04-21|00:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\Mozilla
    [2009-04-02|13:20] C:\DOCUME~1\GUILLA~1\APPLIC~1\Outertech
    [2009-01-18|03:59] C:\DOCUME~1\GUILLA~1\APPLIC~1\SecuROM
    [2009-08-18|13:29] C:\DOCUME~1\GUILLA~1\APPLIC~1\Skinux
    [2009-04-02|16:27] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sun
    [2009-09-09|15:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\Syntrillium
    [2009-09-19|22:40] C:\DOCUME~1\GUILLA~1\APPLIC~1\TVU networks
    [2009-01-27|23:25] C:\DOCUME~1\GUILLA~1\APPLIC~1\Ubisoft
    [2009-10-23|18:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\Utherverse
    [2009-01-20|01:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\vlc
    [2009-10-21|21:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\Vso
    [2009-01-18|02:51] C:\DOCUME~1\GUILLA~1\APPLIC~1\WinRAR

    [2009-08-18|13:05] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [2009-08-18|13:05] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [2009-10-26 12:00][--ah-----] C:\WINDOWS\tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job
    [2009-10-26 11:57][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    [2009-10-25 20:57][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    [2009-10-26 10:12][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
    [2009-10-26 11:44][--a------] C:\WINDOWS\tasks\Google Software Updater.job
    [2009-10-22 15:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [2004-08-04 07:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [2009-04-29|20:09] C:\Program Files\Accessdiver
    [2009-01-18|04:55] C:\Program Files\Adobe
    [2009-03-02|12:39] C:\Program Files\AGEIA Technologies
    [2009-01-15|20:24] C:\Program Files\AMD
    [2009-01-16|19:23] C:\Program Files\ANI
    [2009-04-22|17:26] C:\Program Files\Apollo DVD Copy
    [2009-02-09|18:11] C:\Program Files\ArcSoft
    [2009-01-15|18:32] C:\Program Files\AVG
    [2009-01-15|17:49] C:\Program Files\bin32
    [2009-08-21|02:42] C:\Program Files\CamStudio
    [2009-08-18|13:11] C:\Program Files\Common Files
    [2009-01-14|19:32] C:\Program Files\ComPlus Applications
    [2009-09-09|15:02] C:\Program Files\coolpro2
    [2009-10-17|01:12] C:\Program Files\DivX
    [2009-01-16|19:23] C:\Program Files\D-Link
    [2009-02-02|20:42] C:\Program Files\Download Manager
    [2009-02-10|00:19] C:\Program Files\DVD Shrink
    [2009-10-22|21:06] C:\Program Files\DVDFab 6
    [2009-01-18|13:45] C:\Program Files\EA Sports
    [2009-02-20|19:46] C:\Program Files\Electronic Arts
    [2009-01-18|17:25] C:\Program Files\Firaxis Games
    [2009-02-10|21:14] C:\Program Files\Free M4a to MP3 Converter
    [2009-09-18|15:31] C:\Program Files\Free Sound Recorder
    [2009-04-22|17:25] C:\Program Files\Gabest
    [2009-03-20|02:06] C:\Program Files\G-Lock Software
    [2009-05-17|06:11] C:\Program Files\Google
    [2009-08-13|17:39] C:\Program Files\Hasbro Interactive
    [2009-02-16|17:59] C:\Program Files\IC Media Corp
    [2009-10-16|02:02] C:\Program Files\InstallShield Installation Information
    [2009-06-21|02:10] C:\Program Files\Internet Explorer
    [2009-04-02|16:28] C:\Program Files\Java
    [2009-01-21|20:03] C:\Program Files\K-Lite Codec Pack
    [2009-02-09|18:10] C:\Program Files\Kodak
    [2009-03-31|10:11] C:\Program Files\Lavasoft
    [2009-04-23|10:54] C:\Program Files\LG Software Innovations
    [2009-01-15|17:49] C:\Program Files\log
    [2009-01-26|23:40] C:\Program Files\Logitech
    [2009-01-27|17:26] C:\Program Files\MagicDisc
    [2009-01-27|01:15] C:\Program Files\MagicISO
    [2009-10-26|11:55] C:\Program Files\Malwarebytes' Anti-Malware
    [2009-01-27|17:35] C:\Program Files\max payne
    [2009-01-27|17:34] C:\Program Files\MAX-FX Tools
    [2009-01-15|18:43] C:\Program Files\Messenger
    [2009-09-16|12:29] C:\Program Files\Microsoft
    [2009-01-25|20:39] C:\Program Files\Microsoft ActiveSync
    [2009-01-14|19:36] C:\Program Files\microsoft frontpage
    [2009-01-25|20:39] C:\Program Files\Microsoft Office
    [2009-09-18|15:01] C:\Program Files\Microsoft Silverlight
    [2009-09-16|12:28] C:\Program Files\Microsoft SQL Server Compact Edition
    [2009-10-02|17:14] C:\Program Files\mIRC
    [2009-01-14|19:33] C:\Program Files\Movie Maker
    [2009-10-25|16:39] C:\Program Files\Mozilla Firefox
    [2009-01-14|19:31] C:\Program Files\MSN
    [2009-01-14|19:31] C:\Program Files\MSN Gaming Zone
    [2009-02-11|04:00] C:\Program Files\MSXML 4.0
    [2009-03-04|19:33] C:\Program Files\Nero
    [2009-01-14|19:33] C:\Program Files\NetMeeting
    [2009-01-14|19:31] C:\Program Files\Online Services
    [2009-01-14|19:33] C:\Program Files\Outlook Express
    [2009-02-16|18:46] C:\Program Files\PC Camera
    [2009-04-02|12:38] C:\Program Files\PowerISO
    [2009-01-15|17:49] C:\Program Files\profile
    [2009-01-18|03:11] C:\Program Files\PSC - Pilla Soft Coding
    [2009-01-26|19:49] C:\Program Files\QuickTime
    [2009-10-22|15:11] C:\Program Files\SeekService
    [2009-10-03|00:26] C:\Program Files\Shared
    [2009-02-10|00:18] C:\Program Files\SlySoft
    [2009-05-11|23:30] C:\Program Files\Soulseek
    [2009-03-31|09:56] C:\Program Files\Spybot - Search & Destroy
    [2009-03-02|12:32] C:\Program Files\SystemRequirementsLab
    [2009-01-15|20:37] C:\Program Files\THQ
    [2009-01-15|19:26] C:\Program Files\True Sword 5
    [2009-03-26|21:08] C:\Program Files\TVUPlayer
    [2009-03-02|12:07] C:\Program Files\Ubisoft
    [2009-01-14|19:48] C:\Program Files\Uninstall Information
    [2009-10-23|17:53] C:\Program Files\Utherverse Digital Inc
    [2009-01-15|17:56] C:\Program Files\VIA
    [2009-01-19|19:46] C:\Program Files\VideoLAN
    [2009-04-23|10:54] C:\Program Files\VSO
    [2009-10-21|22:08] C:\Program Files\Vuze
    [2009-08-18|12:34] C:\Program Files\Windows Antivirus Pro
    [2009-09-16|12:29] C:\Program Files\Windows Live
    [2009-01-15|19:01] C:\Program Files\Windows Live SkyDrive
    [2009-01-15|19:36] C:\Program Files\Windows Media Connect 2
    [2009-01-15|19:36] C:\Program Files\Windows Media Player
    [2009-01-14|19:31] C:\Program Files\Windows NT
    [2009-01-14|19:34] C:\Program Files\WindowsUpdate
    [2009-01-18|02:51] C:\Program Files\WinRAR
    [2009-09-09|15:29] C:\Program Files\Wondershare
    [2009-01-14|19:36] C:\Program Files\xerox
    [2009-10-26|11:49] C:\Program Files\ZHPDiag

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [2009-01-18|04:55] C:\Program Files\Common Files\Adobe
    [2009-03-04|19:35] C:\Program Files\Common Files\Ahead
    [2009-02-09|18:11] C:\Program Files\Common Files\ArcSoft
    [2009-01-25|20:39] C:\Program Files\Common Files\Designer
    [2009-04-21|00:34] C:\Program Files\Common Files\DivX Shared
    [2009-01-15|22:40] C:\Program Files\Common Files\i4j_jres
    [2009-01-27|01:07] C:\Program Files\Common Files\InstallShield
    [2009-02-09|18:10] C:\Program Files\Common Files\Kodak
    [2009-01-26|23:40] C:\Program Files\Common Files\Logitech
    [2009-03-06|04:00] C:\Program Files\Common Files\Microsoft Shared
    [2009-01-14|19:33] C:\Program Files\Common Files\MSSoap
    [2002-01-01|17:21] C:\Program Files\Common Files\ODBC
    [2009-02-16|18:46] C:\Program Files\Common Files\PCCamera
    [2009-01-14|19:33] C:\Program Files\Common Files\Services
    [2002-01-01|17:21] C:\Program Files\Common Files\SpeechEngines
    [2009-01-25|20:39] C:\Program Files\Common Files\System
    [2009-01-15|18:58] C:\Program Files\Common Files\Windows Live
    [2009-01-15|19:28] C:\Program Files\Common Files\WindowsLiveInstaller
    [2009-03-02|12:40] C:\Program Files\Common Files\Wise Installation Wizard

    --------------------\\ Process

    ( 56 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-10-26 12:09:38
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 519

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\GUILLA~1\Application Data\Azureus\torrents\apollo_dvd_copy_and__keygen.4560694.TPB[1].torrent
    C:\DOCUME~1\GUILLA~1\Application Data\Azureus\torrents\Battle_For_Middle_Earth_2___Crack___Serial.3520055.TPB[1].torrent
    C:\DOCUME~1\GUILLA~1\Application Data\Azureus\torrents\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED_[mininova][1].torrent
    C:\DOCUME~1\GUILLA~1\Cookies\guillaume@cuntcrack[1].txt
    C:\DOCUME~1\GUILLA~1\Cookies\guillaume@www.cuntcrack[2].txt
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\8240SPMI\crack-serial-keygen[1].htm
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\DVM31OI7\full-download-dvdfab-platinum-6.0.1.0-crack-serial-torrent-keygen[1].htm
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\FE2G8C1Z\dvdfab-platinum-6.0.1.0-crack-serial-keygen-rapidshare-download[1].htm
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\WJAXBJO6\full-dvdfab-crack-keygen[1].htm
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Battle.For.Middle.Earth.2.The.Witch.King\Keygen.txt
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\BME 2\BME2 KeyGen.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Crack
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Max Payne Patch v1.05.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Crack\MaxPayne.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Crack
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Max Payne 2 Patch v1.01.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Crack\MaxPayne2.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED\reloaded.nfo
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED\rld-bme2.rar

    [F:245][D:242]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp
    [F:3658][D:0]-> C:\DOCUME~1\GUILLA~1\Cookies
    [F:19757][D:68]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 2009-10-26|12:12 - Option : [2]

    --------------------\\ Fin du rapport a 12:12:42
    0
  7. gue56514 Messages postés 9 Statut Membre
     
    voici le rapport:

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
    BIOS : BIOS Date: 10/15/08 11:57:09 Ver: 08.00.14
    USER : Guillaume ( Administrator )
    BOOT : Normal boot
    Antivirus : AVG Anti-Virus Free 8.5 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:244 Go (Free:0 Go)
    D:\ (CD or DVD)
    E:\ (Local Disk) - NTFS - Total:221 Go (Free:85 Go)
    F:\ (CD or DVD) - CDFS - Total:7 Go (Free:0 Go)
    G:\ (CD or DVD)
    H:\ (USB) - FAT32 - Total:3906 Mo (Free:0 Go)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [2] ( 2009-10-26|12:00 )

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\nsh5C7.tmp
    Supprime! - C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\nsr12D.tmp
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@advertstream[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@imagevenue.advertserve[2].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@advertising[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@ero-advertising[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@www.adultadvertising[2].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@euroclick[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@partypoker[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@rawvegas[1].txt
    Supprime! - C:\DOCUME~1\GUILLA~1\Cookies\guillaume@888[1].txt

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans APPLIC~1

    [2009-03-31|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
    [2009-10-26|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\~0
    [2009-01-18|04:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [2009-03-04|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [2009-01-26|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [2009-02-09|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ArcSoft
    [2009-10-07|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
    [2009-01-15|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [2009-04-22|10:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [2009-03-23|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
    [2009-02-09|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
    [2009-03-31|10:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
    [2009-10-26|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
    [2009-01-25|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [2009-10-22|01:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SeekService
    [2009-02-10|00:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SlySoft
    [2009-03-31|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [2009-03-26|21:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
    [2009-01-27|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
    [2009-10-22|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
    [2009-01-15|18:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [2009-01-15|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

    [2009-05-17|06:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
    [2009-01-14|19:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [2009-04-28|19:54] C:\DOCUME~1\GUILLA~1\APPLIC~1\1clickPro
    [2009-01-18|04:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
    [2009-01-18|04:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\AdobeUM
    [2009-03-04|19:36] C:\DOCUME~1\GUILLA~1\APPLIC~1\Ahead
    [2009-02-08|22:53] C:\DOCUME~1\GUILLA~1\APPLIC~1\Apple Computer
    [2009-02-10|18:12] C:\DOCUME~1\GUILLA~1\APPLIC~1\ArcSoft
    [2009-08-18|13:32] C:\DOCUME~1\GUILLA~1\APPLIC~1\AVG8
    [2009-10-22|15:07] C:\DOCUME~1\GUILLA~1\APPLIC~1\Azureus
    [2009-09-18|17:50] C:\DOCUME~1\GUILLA~1\APPLIC~1\Cool Record Edit Pro
    [2009-10-22|17:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\dvdcss
    [2009-09-18|17:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\Free Sound Recorder
    [2009-03-02|22:03] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
    [2009-01-14|19:48] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
    [2009-02-02|23:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\IGN_DLM
    [2009-01-16|19:20] C:\DOCUME~1\GUILLA~1\APPLIC~1\InstallShield
    [2009-02-10|21:44] C:\DOCUME~1\GUILLA~1\APPLIC~1\KodakCredentialStore
    [2009-02-20|21:16] C:\DOCUME~1\GUILLA~1\APPLIC~1\La Bataille pour la Terre du Milieu ™ II
    [2009-01-18|13:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\Leadertech
    [2009-01-15|18:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
    [2009-10-26|11:54] C:\DOCUME~1\GUILLA~1\APPLIC~1\Malwarebytes
    [2009-02-08|22:56] C:\DOCUME~1\GUILLA~1\APPLIC~1\Media Player Classic
    [2009-02-20|21:25] C:\DOCUME~1\GUILLA~1\APPLIC~1\Mes fichiers de LSDA, L'Avènement du Roi-sorcier™
    [2009-10-26|07:04] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
    [2009-10-02|17:17] C:\DOCUME~1\GUILLA~1\APPLIC~1\mIRC
    [2009-04-21|00:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\Mozilla
    [2009-04-02|13:20] C:\DOCUME~1\GUILLA~1\APPLIC~1\Outertech
    [2009-01-18|03:59] C:\DOCUME~1\GUILLA~1\APPLIC~1\SecuROM
    [2009-08-18|13:29] C:\DOCUME~1\GUILLA~1\APPLIC~1\Skinux
    [2009-04-02|16:27] C:\DOCUME~1\GUILLA~1\APPLIC~1\Sun
    [2009-09-09|15:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\Syntrillium
    [2009-09-19|22:40] C:\DOCUME~1\GUILLA~1\APPLIC~1\TVU networks
    [2009-01-27|23:25] C:\DOCUME~1\GUILLA~1\APPLIC~1\Ubisoft
    [2009-10-23|18:49] C:\DOCUME~1\GUILLA~1\APPLIC~1\Utherverse
    [2009-01-20|01:42] C:\DOCUME~1\GUILLA~1\APPLIC~1\vlc
    [2009-10-21|21:55] C:\DOCUME~1\GUILLA~1\APPLIC~1\Vso
    [2009-01-18|02:51] C:\DOCUME~1\GUILLA~1\APPLIC~1\WinRAR

    [2009-08-18|13:05] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [2009-08-18|13:05] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [2009-10-26 12:00][--ah-----] C:\WINDOWS\tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job
    [2009-10-26 11:57][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    [2009-10-25 20:57][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    [2009-10-26 10:12][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
    [2009-10-26 11:44][--a------] C:\WINDOWS\tasks\Google Software Updater.job
    [2009-10-22 15:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [2004-08-04 07:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [2009-04-29|20:09] C:\Program Files\Accessdiver
    [2009-01-18|04:55] C:\Program Files\Adobe
    [2009-03-02|12:39] C:\Program Files\AGEIA Technologies
    [2009-01-15|20:24] C:\Program Files\AMD
    [2009-01-16|19:23] C:\Program Files\ANI
    [2009-04-22|17:26] C:\Program Files\Apollo DVD Copy
    [2009-02-09|18:11] C:\Program Files\ArcSoft
    [2009-01-15|18:32] C:\Program Files\AVG
    [2009-01-15|17:49] C:\Program Files\bin32
    [2009-08-21|02:42] C:\Program Files\CamStudio
    [2009-08-18|13:11] C:\Program Files\Common Files
    [2009-01-14|19:32] C:\Program Files\ComPlus Applications
    [2009-09-09|15:02] C:\Program Files\coolpro2
    [2009-10-17|01:12] C:\Program Files\DivX
    [2009-01-16|19:23] C:\Program Files\D-Link
    [2009-02-02|20:42] C:\Program Files\Download Manager
    [2009-02-10|00:19] C:\Program Files\DVD Shrink
    [2009-10-22|21:06] C:\Program Files\DVDFab 6
    [2009-01-18|13:45] C:\Program Files\EA Sports
    [2009-02-20|19:46] C:\Program Files\Electronic Arts
    [2009-01-18|17:25] C:\Program Files\Firaxis Games
    [2009-02-10|21:14] C:\Program Files\Free M4a to MP3 Converter
    [2009-09-18|15:31] C:\Program Files\Free Sound Recorder
    [2009-04-22|17:25] C:\Program Files\Gabest
    [2009-03-20|02:06] C:\Program Files\G-Lock Software
    [2009-05-17|06:11] C:\Program Files\Google
    [2009-08-13|17:39] C:\Program Files\Hasbro Interactive
    [2009-02-16|17:59] C:\Program Files\IC Media Corp
    [2009-10-16|02:02] C:\Program Files\InstallShield Installation Information
    [2009-06-21|02:10] C:\Program Files\Internet Explorer
    [2009-04-02|16:28] C:\Program Files\Java
    [2009-01-21|20:03] C:\Program Files\K-Lite Codec Pack
    [2009-02-09|18:10] C:\Program Files\Kodak
    [2009-03-31|10:11] C:\Program Files\Lavasoft
    [2009-04-23|10:54] C:\Program Files\LG Software Innovations
    [2009-01-15|17:49] C:\Program Files\log
    [2009-01-26|23:40] C:\Program Files\Logitech
    [2009-01-27|17:26] C:\Program Files\MagicDisc
    [2009-01-27|01:15] C:\Program Files\MagicISO
    [2009-10-26|11:55] C:\Program Files\Malwarebytes' Anti-Malware
    [2009-01-27|17:35] C:\Program Files\max payne
    [2009-01-27|17:34] C:\Program Files\MAX-FX Tools
    [2009-01-15|18:43] C:\Program Files\Messenger
    [2009-09-16|12:29] C:\Program Files\Microsoft
    [2009-01-25|20:39] C:\Program Files\Microsoft ActiveSync
    [2009-01-14|19:36] C:\Program Files\microsoft frontpage
    [2009-01-25|20:39] C:\Program Files\Microsoft Office
    [2009-09-18|15:01] C:\Program Files\Microsoft Silverlight
    [2009-09-16|12:28] C:\Program Files\Microsoft SQL Server Compact Edition
    [2009-10-02|17:14] C:\Program Files\mIRC
    [2009-01-14|19:33] C:\Program Files\Movie Maker
    [2009-10-25|16:39] C:\Program Files\Mozilla Firefox
    [2009-01-14|19:31] C:\Program Files\MSN
    [2009-01-14|19:31] C:\Program Files\MSN Gaming Zone
    [2009-02-11|04:00] C:\Program Files\MSXML 4.0
    [2009-03-04|19:33] C:\Program Files\Nero
    [2009-01-14|19:33] C:\Program Files\NetMeeting
    [2009-01-14|19:31] C:\Program Files\Online Services
    [2009-01-14|19:33] C:\Program Files\Outlook Express
    [2009-02-16|18:46] C:\Program Files\PC Camera
    [2009-04-02|12:38] C:\Program Files\PowerISO
    [2009-01-15|17:49] C:\Program Files\profile
    [2009-01-18|03:11] C:\Program Files\PSC - Pilla Soft Coding
    [2009-01-26|19:49] C:\Program Files\QuickTime
    [2009-10-22|15:11] C:\Program Files\SeekService
    [2009-10-03|00:26] C:\Program Files\Shared
    [2009-02-10|00:18] C:\Program Files\SlySoft
    [2009-05-11|23:30] C:\Program Files\Soulseek
    [2009-03-31|09:56] C:\Program Files\Spybot - Search & Destroy
    [2009-03-02|12:32] C:\Program Files\SystemRequirementsLab
    [2009-01-15|20:37] C:\Program Files\THQ
    [2009-01-15|19:26] C:\Program Files\True Sword 5
    [2009-03-26|21:08] C:\Program Files\TVUPlayer
    [2009-03-02|12:07] C:\Program Files\Ubisoft
    [2009-01-14|19:48] C:\Program Files\Uninstall Information
    [2009-10-23|17:53] C:\Program Files\Utherverse Digital Inc
    [2009-01-15|17:56] C:\Program Files\VIA
    [2009-01-19|19:46] C:\Program Files\VideoLAN
    [2009-04-23|10:54] C:\Program Files\VSO
    [2009-10-21|22:08] C:\Program Files\Vuze
    [2009-08-18|12:34] C:\Program Files\Windows Antivirus Pro
    [2009-09-16|12:29] C:\Program Files\Windows Live
    [2009-01-15|19:01] C:\Program Files\Windows Live SkyDrive
    [2009-01-15|19:36] C:\Program Files\Windows Media Connect 2
    [2009-01-15|19:36] C:\Program Files\Windows Media Player
    [2009-01-14|19:31] C:\Program Files\Windows NT
    [2009-01-14|19:34] C:\Program Files\WindowsUpdate
    [2009-01-18|02:51] C:\Program Files\WinRAR
    [2009-09-09|15:29] C:\Program Files\Wondershare
    [2009-01-14|19:36] C:\Program Files\xerox
    [2009-10-26|11:49] C:\Program Files\ZHPDiag

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [2009-01-18|04:55] C:\Program Files\Common Files\Adobe
    [2009-03-04|19:35] C:\Program Files\Common Files\Ahead
    [2009-02-09|18:11] C:\Program Files\Common Files\ArcSoft
    [2009-01-25|20:39] C:\Program Files\Common Files\Designer
    [2009-04-21|00:34] C:\Program Files\Common Files\DivX Shared
    [2009-01-15|22:40] C:\Program Files\Common Files\i4j_jres
    [2009-01-27|01:07] C:\Program Files\Common Files\InstallShield
    [2009-02-09|18:10] C:\Program Files\Common Files\Kodak
    [2009-01-26|23:40] C:\Program Files\Common Files\Logitech
    [2009-03-06|04:00] C:\Program Files\Common Files\Microsoft Shared
    [2009-01-14|19:33] C:\Program Files\Common Files\MSSoap
    [2002-01-01|17:21] C:\Program Files\Common Files\ODBC
    [2009-02-16|18:46] C:\Program Files\Common Files\PCCamera
    [2009-01-14|19:33] C:\Program Files\Common Files\Services
    [2002-01-01|17:21] C:\Program Files\Common Files\SpeechEngines
    [2009-01-25|20:39] C:\Program Files\Common Files\System
    [2009-01-15|18:58] C:\Program Files\Common Files\Windows Live
    [2009-01-15|19:28] C:\Program Files\Common Files\WindowsLiveInstaller
    [2009-03-02|12:40] C:\Program Files\Common Files\Wise Installation Wizard

    --------------------\\ Process

    ( 56 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-10-26 12:09:38
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 519

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\GUILLA~1\Application Data\Azureus\torrents\apollo_dvd_copy_and__keygen.4560694.TPB[1].torrent
    C:\DOCUME~1\GUILLA~1\Application Data\Azureus\torrents\Battle_For_Middle_Earth_2___Crack___Serial.3520055.TPB[1].torrent
    C:\DOCUME~1\GUILLA~1\Application Data\Azureus\torrents\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED_[mininova][1].torrent
    C:\DOCUME~1\GUILLA~1\Cookies\guillaume@cuntcrack[1].txt
    C:\DOCUME~1\GUILLA~1\Cookies\guillaume@www.cuntcrack[2].txt
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\8240SPMI\crack-serial-keygen[1].htm
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\DVM31OI7\full-download-dvdfab-platinum-6.0.1.0-crack-serial-torrent-keygen[1].htm
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\FE2G8C1Z\dvdfab-platinum-6.0.1.0-crack-serial-keygen-rapidshare-download[1].htm
    C:\DOCUME~1\GUILLA~1\Local Settings\Temporary Internet Files\Content.IE5\WJAXBJO6\full-dvdfab-crack-keygen[1].htm
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Battle.For.Middle.Earth.2.The.Witch.King\Keygen.txt
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\BME 2\BME2 KeyGen.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Crack
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Max Payne Patch v1.05.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Crack\MaxPayne.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Crack
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Max Payne 2 Patch v1.01.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Crack\MaxPayne2.exe
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED\reloaded.nfo
    C:\DOCUME~1\GUILLA~1\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED\rld-bme2.rar

    [F:245][D:242]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp
    [F:3658][D:0]-> C:\DOCUME~1\GUILLA~1\Cookies
    [F:19757][D:68]-> C:\DOCUME~1\GUILLA~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 2009-10-26|12:12 - Option : [2]

    --------------------\\ Fin du rapport a 12:12:42
    0
  8. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    -+-+-+-> AD-Remover <-+-+-+-

    [x] Télécharge Ad-remover (de C_XX) sur ton bureau.

    [x] Lance l'installation avec les paramètres par défaut..

    ▶ Déconnecte toi et ferme toutes applications en cours !

    [x] Double-clique sur le raccourci Ad-Remover sur ton Bureau. (Clic droit -> "Exécuter en tant qu'administrateur". ( Pour Vista))

    [x] Séléctionne l'option F pour français

    [x] A la fenêtre qui s'affiche clique sur " oui "

    [x] Séléctionne l'option L

    [x] Laisse l'outil travailler.

    [x] Une fois le scan fini, appuie sur une touche, le rapport s'ouvre

    [x] Copie/colle le dans ton prochain post
    0
  9. Gue56514
     
    voici le rapport ad-remover

    .
    ======= LOGFILE OF AD-REMOVER 1.1.4.6_A | ONLY XP/VISTA/7 =======
    .
    Updated by C_XX on 18.10.2009 at 19:05
    Contact: AdRemover.contact@gmail.com
    Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Launch at: 13:09:22, 2009-10-26 | Normal Boot | Option: CLEAN
    Executed from: C:\Program Files\Ad-Remover\
    Operating system: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Computer Name: BOTARD | Current user: Guillaume
    .
    ============== NEUTRALIZED ELEMENT(S) ==============
    .
    Service: SeekService Service

    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeekService
    HKLM\Software\SeekService
    .
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\SeekService
    C:\Program Files\SeekService ... [b]NOT DELETED !![/b]
    C:\DOCUME~1\GUILLA~1\Cookies\guillaume@rotator.adjuggler[1].txt
    C:\DOCUME~1\GUILLA~1\Cookies\guillaume@www.trygames[1].txt

    (!) -- Temp files deleted.

    .
    ============== Added scan ==============
    .
    .
    * Mozilla FireFox Version 3.0.14 [fr] *
    .
    ProfilePath: xpo8uw8t.default (Guillaume)
    .
    (Prefs.js) user_pref("browser.search.defaultenginename", "Bing");
    (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.bing.com/search?FORM=IEFM1&q=");
    (Prefs.js) user_pref("browser.startup.homepage", "google.ca");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.14");
    .
    .
    * Internet Explorer Version 7.0.5730.13 *
    .
    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
    .
    Start Page: hxxp://fr.msn.com/
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/
    Search bar: hxxp://search.msn.com/spbasic.htm
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    .
    ============== Suspect (Cracks, Serials ... ) ==============
    .
    C:\Documents and Settings\Guillaume\Application Data\Azureus\torrents\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED_[mininova][1].torrent
    C:\Documents and Settings\Guillaume\Application Data\Azureus\torrents\1_click_dvd_copy_pro_v2.3.1.1___patch___copytodvd3se.3546406.TPB[1].torrent
    C:\Documents and Settings\Guillaume\Application Data\Azureus\torrents\apollo_dvd_copy_and__keygen.4560694.TPB[1].torrent
    C:\Documents and Settings\Guillaume\Application Data\Azureus\torrents\Battle_For_Middle_Earth_2___Crack___Serial.3520055.TPB[1].torrent
    C:\Documents and Settings\Guillaume\Application Data\Azureus\torrents\DVDFab.Platinum.v6.0.7.0.Multilingual.WinAll.Cracked.REPACK-DJiNN_[BeLLBoY]_[mininova][1].torrent
    C:\Documents and Settings\Guillaume\Local Settings\Temporary Internet Files\Content.IE5\W65H62EQ\DVDFab.Platinum.v6.0.7.0.Multilingual.WinAll.Cracked.REPACK-DJiNN_[BeLLBoY]_[mininova][1].torrent
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\1Click DVD COPY Pro 2.3.1.1\1Click.DVD.COPY.PRO.2.3.1.1 Patch_by_P!mPdOG!.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\BME 2\BME2 KeyGen.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\DVDFab.Platinum.v6.0.7.0.Multilingual.WinAll.Cracked.REPACK-DJiNN [BeLLBoY]\DJiNN.nfo
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\DVDFab.Platinum.v6.0.7.0.Multilingual.WinAll.Cracked.REPACK-DJiNN [BeLLBoY]\DJiNN\Crack\DVDFab.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\DVDFab.Platinum.v6.0.7.0.Multilingual.WinAll.Cracked.REPACK-DJiNN [BeLLBoY]\DJiNN\Setup\DVDFab6070.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Max Payne Patch v1.05.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne\Crack & Patch\Crack\MaxPayne.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Max Payne 2 Patch v1.01.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\Max Payne 1 & 2 (The Collector's Edition)\Max Payne 2 - The Fall Of Max Payne\Crack & Patch\Crack\MaxPayne2.exe
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED\reloaded.nfo
    C:\Documents and Settings\Guillaume\My Documents\Azureus Downloads\[NTi]_The.Lord.Of.The.Rings.Battle.For.Middle.Earth.2.CRACK.ONLY-RELOADED\rld-bme2.rar
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_100_140_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_140_2101_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2101_2201_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2201_2202_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2202_2300_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2300_2301_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2301_2400_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2400_2500_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2400_2500_Patch.exe.torrent
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2500_2501_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2500_2501_Patch.exe.torrent
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2501_2502_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2501_2502_Patch.exe.torrent
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2502_2600_Patch.exe
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\EN_2502_2600_Patch.exe.torrent
    C:\Documents and Settings\Guillaume\My Documents\My Games\Company of Heroes\Patch\RelicAutoPatcher_1102_English.exe
    .
    ===================================
    .
    6763 Byte(s) - C:\Ad-Report-CLEAN[1].log
    .
    119 File(s) - C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp
    3 File(s) - C:\WINDOWS\Temp
    .
    18 File(s) - C:\Program Files\Ad-Remover\BACKUP
    6 File(s) - C:\Program Files\Ad-Remover\QUARANTINE
    .
    End at: 13:26:10 | 2009-10-26 - CLEAN[1]
    .
    ============== E.O.F ==============
    .
    0
  10. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    -+-+-+-> Malwarebyte's Anti-Malware <-+-+-+-

    [x] Télécharge Malwarebyte's anti-malware (MBAM) à cette adresse : http://www.malwarebytes.org/mbam/program/mbam-setup.exe

    [x] Installe le.

    [x] Met le à jour.

    [x] Lance un scan complet !

    [x] Coche bien tout les éléments trouvés et supprime les !

    [x] Un tutoriel pour son utilisation est disponible ici : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    [x] Suis les indications données sur le lien précédent puis copie/colle le rapport généré dans ton prochain message
    0
  11. Gue56514
     
    voici le rapport

    Malwarebytes' Anti-Malware 1.41
    Database version: 2775
    Windows 5.1.2600 Service Pack 3

    2009-10-26 15:45:14
    mbam-log-2009-10-26 (15-45-14).txt

    Scan type: Quick Scan
    Objects scanned: 113196
    Time elapsed: 14 minute(s), 58 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 1
    Folders Infected: 0
    Files Infected: 1

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    F:\autorun.inf (Worm.Agent.H) -> Delete on reboot.
    0
  12. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    Bien, fais un nouveau ZHPDiag maintenant
    0
  14. shadox.shadox Messages postés 39 Statut Membre 1
     
    Malwarebytes' Anti-Malware 1.41
    Database version: 2775
    Windows 5.1.2600 Service Pack 3

    2009-10-26 15:45:14
    mbam-log-2009-10-26 (15-45-14).txt

    La mise à jour date d'hier, donc le programme est à jour.
    0
  15. gen-hackman
     
    MBAM a jour :

    Malwarebytes' Anti-Malware 1.41
    Database version: 3038
    Windows 5.1.2600 Service Pack 3
    0
  17. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    Est ce que tu as un programme nommé " True Sword " dans ajout/suppression de programmes ?

    Si oui, désinstalle le. Puis fais ceci :

    -+-+-+-> RSIT <-+-+-+-

    [x] Télécharge Random's System Information Tool à cette adresse : http://images.malwareremoval.com/random/RSIT.exe

    [x] Double clique sur " RSIT.exe ".

    [x] Clique sur " Continue ".

    [x] Si hijackthis n'est pas présent il sera automatiquement téléchargé et tu devras accepter la license.

    [x] Une fois l'analyse finie, deux fichiers ( info.txt & log.txt ) s'ouvriront.

    [x] Rend toi sur www.cjoint.com

    [x] Clique sur " Parcourir " dans la partie " Joindre un fichier[...] "

    [x] Séléctionne le rapport info.txt qui se trouve sur ton bureau

    [x] Clique ensuite sur " Créer le lien cjoint "

    [x] Fais de même pour le log.txt

    [x] Copie/colle ensuite les deux liens dans ton prochain message

    [x] Note : si jamais tu as fermé les rapports sans faire attention, ils sont sous C:\rsit
    0
  19. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    -+-+-+-+-> ComboFix <-+-+-+-

    [x] Télécharge ComboFix ( de sUBs ) à cette adresse.

    [x] /!\ Fermez toutes les fenêtres de programme ouvertes /!\

    [x] /!\ Désactivez toutes les protections résidentes ( Antivirus, Pare-Feu, AntiSpyware ) /!\

    [x] Double clique sur " Combofix.exe "

    [x] Suis les indications qui sont données à l'écran, à un moment tu auras un message te demandant d'installer la console de récupération, fais le

    [x] Combofix va maintenant déconnecter ton PC d'internet

    [x] Pendant le scan, ne touche à rien ( souris, clavier )

    [x] A la fin du scan, le rapport s'ouvrira automatiquement, copie/colle le dans ton prochain message.

    [o] Nb : Si jamais il ne s'ouvrait pas, il se trouve sous C:\Combofix.txt
    0
  20. gue56514 Messages postés 9 Statut Membre
     
    voici le log

    ComboFix 09-10-26.06 - Guillaume 2009-10-27 12:14.2.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.2.1033.18.1791.1076 [GMT -4:00]
    Lancé depuis: c:\documents and settings\Guillaume\Desktop\ComboFix.exe
    AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Guillaume\Application Data\inst.exe
    c:\program files\Shared
    c:\windows\system32\404Fix.exe
    c:\windows\system32\Agent.OMZ.Fix.exe
    c:\windows\system32\dahogemu.dll
    c:\windows\system32\dasotegi.dll
    c:\windows\system32\dumphive.exe
    c:\windows\system32\IEDFix.C.exe
    c:\windows\system32\IEDFix.exe
    c:\windows\system32\images
    c:\windows\system32\images\i1.gif
    c:\windows\system32\images\i2.gif
    c:\windows\system32\images\i3.gif
    c:\windows\system32\images\j1.gif
    c:\windows\system32\images\j2.gif
    c:\windows\system32\images\j3.gif
    c:\windows\system32\images\jj1.gif
    c:\windows\system32\images\jj2.gif
    c:\windows\system32\images\jj3.gif
    c:\windows\system32\images\l1.gif
    c:\windows\system32\images\l2.gif
    c:\windows\system32\images\l3.gif
    c:\windows\system32\images\pix.gif
    c:\windows\system32\images\t1.gif
    c:\windows\system32\images\t2.gif
    c:\windows\system32\images\up1.gif
    c:\windows\system32\images\up2.gif
    c:\windows\system32\images\w1.gif
    c:\windows\system32\images\w11.gif
    c:\windows\system32\images\w2.gif
    c:\windows\system32\images\w3.gif
    c:\windows\system32\images\w3.jpg
    c:\windows\system32\images\wt1.gif
    c:\windows\system32\images\wt2.gif
    c:\windows\system32\images\wt3.gif
    c:\windows\system32\madipoha.dll
    c:\windows\system32\mefivedo.dll.tmp
    c:\windows\system32\mehumifo.dll.tmp
    c:\windows\system32\nafiwofu.dll.tmp
    c:\windows\system32\o4Patch.exe
    c:\windows\system32\Process.exe
    c:\windows\system32\SrchSTS.exe
    c:\windows\system32\tmp.reg
    c:\windows\system32\VACFix.exe
    c:\windows\system32\VCCLSID.exe
    c:\windows\system32\wiwisoho.dll
    c:\windows\system32\WS2Fix.exe
    c:\windows\system32\yomisujo.dll

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2009-09-27 au 2009-10-27 ))))))))))))))))))))))))))))))))))))
    .

    2009-10-27 15:24 . 2009-10-27 15:24 -------- d-----w- c:\program files\trend micro
    2009-10-27 15:24 . 2009-10-27 15:24 -------- d-----w- C:\rsit
    2009-10-26 17:09 . 2009-10-26 17:26 -------- d-----w- c:\program files\Ad-Remover
    2009-10-26 15:58 . 2009-10-26 16:12 -------- d-----w- C:\Lop SD
    2009-10-26 15:54 . 2009-10-26 15:54 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Malwarebytes
    2009-10-26 15:54 . 2009-09-10 18:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-10-26 15:54 . 2009-10-26 15:55 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2009-10-26 15:54 . 2009-10-26 15:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-10-26 15:54 . 2009-09-10 18:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-10-26 15:44 . 2009-10-26 15:49 -------- d-----w- c:\program files\ZHPDiag
    2009-10-23 22:49 . 2009-10-23 22:49 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Utherverse
    2009-10-23 00:57 . 2009-10-23 00:57 -------- d-----w- c:\documents and settings\All Users\Application Data\vsosdk
    2009-10-22 01:55 . 2009-10-23 01:06 -------- d-----w- c:\program files\DVDFab 6
    2009-10-21 01:40 . 2009-10-21 01:40 304182 ----a-w- C:\StiImg.dat
    2009-10-05 20:12 . 2009-10-26 15:44 -------- dc-h--w- c:\documents and settings\All Users\Application Data\~0

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-10-27 15:40 . 2009-01-15 22:32 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
    2009-10-26 17:21 . 2009-09-18 19:31 -------- d-----w- c:\program files\SeekService
    2009-10-22 21:49 . 2009-02-10 04:36 -------- d-----w- c:\documents and settings\Guillaume\Application Data\dvdcss
    2009-10-22 19:07 . 2009-01-16 02:41 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Azureus
    2009-10-22 02:08 . 2009-01-16 02:40 -------- d-----w- c:\program files\Vuze
    2009-10-22 01:55 . 2009-04-14 19:28 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Vso
    2009-10-22 01:55 . 2009-04-22 21:26 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
    2009-10-22 01:55 . 2009-04-14 19:28 47360 ----a-w- c:\documents and settings\Guillaume\Application Data\pcouffin.sys
    2009-10-17 05:12 . 2009-02-12 02:30 -------- d-----w- c:\program files\DivX
    2009-10-16 06:02 . 2009-01-15 00:17 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-10-02 21:17 . 2009-01-23 04:45 -------- d-----w- c:\documents and settings\Guillaume\Application Data\mIRC
    2009-10-02 21:14 . 2009-01-23 04:45 -------- d-----w- c:\program files\mIRC
    2009-09-20 02:40 . 2009-09-20 02:40 -------- d-----w- c:\documents and settings\Guillaume\Application Data\TVU networks
    2009-09-18 21:50 . 2009-09-18 21:10 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Cool Record Edit Pro
    2009-09-18 21:10 . 2009-09-18 21:10 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Free Sound Recorder
    2009-09-18 19:31 . 2009-09-18 19:31 -------- d-----w- c:\program files\Free Sound Recorder
    2009-09-18 19:01 . 2009-07-10 21:45 -------- d-----w- c:\program files\Microsoft Silverlight
    2009-09-16 16:29 . 2009-09-16 16:26 -------- d-----w- c:\program files\Microsoft
    2009-09-16 16:29 . 2009-01-15 23:28 -------- d-----w- c:\program files\Windows Live
    2009-09-16 16:28 . 2009-09-16 16:28 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
    2009-09-09 19:29 . 2009-09-09 19:29 -------- d-----w- c:\program files\Wondershare
    2009-09-09 19:02 . 2009-09-09 19:02 -------- d-----w- c:\documents and settings\Guillaume\Application Data\Syntrillium
    2009-09-09 19:02 . 2009-09-09 19:01 -------- d-----w- c:\program files\coolpro2
    2009-08-21 19:15 . 2009-08-21 19:15 557568 ----a-w- c:\windows\system32\B4FM.dll
    2009-08-16 13:30 . 2009-01-15 22:32 11952 ----a-w- c:\windows\system32\avgrsstx.dll
    2009-08-16 13:30 . 2009-01-15 22:32 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2009-08-16 13:30 . 2009-01-15 22:32 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
    2009-08-13 21:57 . 2009-08-13 21:57 45056 ----a-w- c:\windows\system32\dpvhelp.exe
    2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
    2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
    2009-07-27 02:52 . 2009-07-27 02:52 51712 --sha-w- c:\windows\system32\lenodanu.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-08-18_17.16.12 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2007-11-07 06:19 . 2007-11-07 06:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
    + 2009-10-27 16:22 . 2009-10-27 16:22 16384 c:\windows\temp\Perflib_Perfdata_77c.dat
    - 2009-01-15 23:36 . 2008-07-09 07:38 17272 c:\windows\system32\spmsg.dll
    + 2009-01-15 23:36 . 2007-11-30 12:39 17272 c:\windows\system32\spmsg.dll
    + 2009-07-26 20:44 . 2009-07-26 20:44 48448 c:\windows\system32\sirenacm.dll
    - 2004-08-04 11:00 . 2009-08-18 17:01 58732 c:\windows\system32\perfc009.dat
    + 2004-08-04 11:00 . 2009-10-27 15:51 58732 c:\windows\system32\perfc009.dat
    + 1998-06-18 04:00 . 1998-06-18 04:00 77824 c:\windows\system32\MSBIND.DLL
    + 2009-01-16 00:01 . 2009-10-20 19:29 88589 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    - 2009-03-31 14:24 . 2009-04-21 14:13 15688 c:\windows\system32\lsdelete.exe
    + 2009-03-31 14:24 . 2009-05-26 14:17 15688 c:\windows\system32\lsdelete.exe
    + 2009-09-09 19:29 . 2008-11-19 13:41 16640 c:\windows\system32\drivers\WsAudioDevice_383.sys
    + 2008-04-14 00:15 . 2004-07-09 09:27 48512 c:\windows\system32\drivers\stream.sys
    + 2009-01-15 21:56 . 2008-04-14 04:15 60160 c:\windows\system32\drivers\drmk.sys
    - 2009-01-15 21:56 . 2008-04-14 05:15 60160 c:\windows\system32\drivers\drmk.sys
    + 2008-04-14 00:15 . 2004-07-09 09:27 48512 c:\windows\system32\dllcache\stream.sys
    - 2009-01-15 21:56 . 2008-04-14 05:15 60160 c:\windows\system32\dllcache\drmk.sys
    + 2009-01-15 21:56 . 2008-04-14 04:15 60160 c:\windows\system32\dllcache\drmk.sys
    + 2009-08-18 17:20 . 2008-10-16 19:09 51224 c:\windows\system32\dllcache\cache\wuauclt.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 13824 c:\windows\system32\dllcache\cache\wscntfy.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 82432 c:\windows\system32\dllcache\cache\ws2_32.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 26112 c:\windows\system32\dllcache\cache\userinit.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 14336 c:\windows\system32\dllcache\cache\svchost.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 57856 c:\windows\system32\dllcache\cache\spoolsv.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 88576 c:\windows\system32\dllcache\cache\rasauto.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 17408 c:\windows\system32\dllcache\cache\powrprof.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 33792 c:\windows\system32\dllcache\cache\msgsvc.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 13312 c:\windows\system32\dllcache\cache\lsass.exe
    + 2009-08-18 17:20 . 2008-04-14 11:41 22016 c:\windows\system32\dllcache\cache\lpk.dll
    + 2009-08-18 17:20 . 2008-04-14 06:09 24576 c:\windows\system32\dllcache\cache\kbdclass.sys
    + 2009-08-18 17:20 . 2008-04-14 06:23 36608 c:\windows\system32\dllcache\cache\ip6fw.sys
    + 2009-08-18 17:20 . 2008-04-14 11:42 15360 c:\windows\system32\dllcache\cache\ctfmon.exe
    + 2009-08-18 17:20 . 2008-04-14 06:27 14336 c:\windows\system32\dllcache\cache\asyncmac.sys
    + 2009-08-18 17:20 . 2004-08-04 11:00 11648 c:\windows\system32\dllcache\cache\acpiec.sys
    + 2009-01-14 23:47 . 2009-10-26 16:57 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2009-01-14 23:47 . 2009-03-31 14:16 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-01-14 23:47 . 2009-10-26 16:57 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2009-01-14 23:47 . 2009-03-31 14:16 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-01-14 23:47 . 2009-10-26 16:57 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2009-01-14 23:47 . 2009-03-31 14:16 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-09-16 16:28 . 2009-09-16 16:28 22016 c:\windows\Installer\339ba5da.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 27136 c:\windows\Installer\339ba56b.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 83456 c:\windows\Installer\339ba55f.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 59904 c:\windows\Installer\339ba559.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 62304 c:\windows\Installer\{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}\IconWlc.exe
    + 2009-09-16 16:27 . 2009-09-16 16:27 80395 c:\windows\Installer\{770F1BEC-2871-4E70-B837-FB8525FFA3B1}\MsblIco.Exe
    + 2009-09-16 16:28 . 2009-09-16 16:28 58945 c:\windows\Installer\{5DD76286-9BE7-4894-A990-E905E91AC818}\wlmail.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 5120 c:\windows\system32\dllcache\cache\sfc.dll
    + 2009-08-18 17:20 . 2004-08-04 11:00 2944 c:\windows\system32\dllcache\cache\null.sys
    + 2009-08-18 17:20 . 2004-08-04 11:00 4224 c:\windows\system32\dllcache\cache\beep.sys
    + 2009-07-10 17:01 . 2009-07-10 17:01 307560 c:\windows\WLXPGSS.SCR
    + 2007-11-07 05:19 . 2007-11-07 05:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
    + 2007-11-07 05:19 . 2007-11-07 05:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
    + 2007-11-07 00:23 . 2007-11-07 00:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
    + 2009-09-09 19:02 . 2001-10-19 18:39 572752 c:\windows\system32\wmvdmoe.dll
    + 2009-09-09 19:02 . 2001-10-19 18:40 665424 c:\windows\system32\wmv8dmoe.dll
    + 2009-09-09 19:02 . 2001-10-19 18:40 438608 c:\windows\system32\wmv8dmod.dll
    + 2008-04-14 11:42 . 2008-07-11 08:55 347648 c:\windows\system32\windowscodecsext.dll
    - 2008-04-14 11:42 . 2008-04-14 11:42 712704 c:\windows\system32\windowscodecs.dll
    + 2008-04-14 11:42 . 2008-07-11 08:55 712704 c:\windows\system32\windowscodecs.dll
    - 2004-08-04 11:00 . 2009-08-18 17:01 392432 c:\windows\system32\perfh009.dat
    + 2004-08-04 11:00 . 2009-10-27 15:51 392432 c:\windows\system32\perfh009.dat
    + 2009-09-18 19:31 . 2005-02-24 15:51 348160 c:\windows\system32\NCTWMAFile2.dll
    + 2009-09-18 19:31 . 2005-03-28 19:52 417792 c:\windows\system32\NCTTextToAudio2.dll
    + 2009-09-18 19:31 . 2005-03-28 19:54 479232 c:\windows\system32\NCTAudioVisualization2.dll
    + 2009-09-18 19:31 . 2005-04-04 21:21 602112 c:\windows\system32\NCTAudioTransform2.dll
    + 2009-09-18 19:31 . 2005-04-25 17:01 458752 c:\windows\system32\NCTAudioRecord2.dll
    + 2009-09-18 19:31 . 2005-04-25 17:01 458752 c:\windows\system32\NCTAudioPlayer2.dll
    + 2009-09-18 19:31 . 2005-04-15 16:08 880640 c:\windows\system32\NCTAudioEditor2.dll
    + 2009-09-18 19:31 . 2004-11-04 17:31 835584 c:\windows\system32\NCTAudioCDGrabber2.dll
    + 2009-09-18 19:31 . 2002-01-05 20:37 344064 c:\windows\system32\msvcr70.dll
    + 2003-08-28 10:43 . 2003-08-28 10:43 499712 c:\windows\system32\msvcp71.dll
    + 2009-07-18 03:12 . 2009-07-18 03:12 257440 c:\windows\system32\Macromed\Flash\FlashUtil10c.exe
    - 2009-01-15 21:56 . 2008-04-14 05:49 146048 c:\windows\system32\drivers\portcls.sys
    + 2009-01-15 21:56 . 2008-04-14 04:49 146048 c:\windows\system32\drivers\portcls.sys
    - 2009-01-15 21:56 . 2008-04-14 05:49 146048 c:\windows\system32\dllcache\portcls.sys
    + 2009-01-15 21:56 . 2008-04-14 04:49 146048 c:\windows\system32\dllcache\portcls.sys
    + 2009-08-18 17:20 . 2008-04-14 11:42 507904 c:\windows\system32\dllcache\cache\winlogon.exe
    + 2009-08-18 17:20 . 2009-04-29 04:56 827392 c:\windows\system32\dllcache\cache\wininet.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 578560 c:\windows\system32\dllcache\cache\user32.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 295424 c:\windows\system32\dllcache\cache\termsrv.dll
    + 2009-08-18 17:20 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\cache\tcpip.sys
    + 2009-08-18 17:20 . 2008-04-14 11:42 171008 c:\windows\system32\dllcache\cache\srsvc.dll
    + 2009-08-18 17:20 . 2009-02-06 11:11 110592 c:\windows\system32\dllcache\cache\services.exe
    + 2009-08-18 17:20 . 2008-04-14 11:42 181248 c:\windows\system32\dllcache\cache\scecli.dll
    + 2009-08-18 17:20 . 2009-02-09 12:10 401408 c:\windows\system32\dllcache\cache\rpcss.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 409088 c:\windows\system32\dllcache\cache\qmgr.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 435200 c:\windows\system32\dllcache\cache\ntmssvc.dll
    + 2009-08-18 17:20 . 2008-04-14 06:45 574976 c:\windows\system32\dllcache\cache\ntfs.sys
    + 2009-08-18 17:20 . 2008-04-14 11:42 407040 c:\windows\system32\dllcache\cache\netlogon.dll
    + 2009-08-18 17:20 . 2008-04-14 06:50 182656 c:\windows\system32\dllcache\cache\ndis.sys
    + 2009-08-18 17:20 . 2008-04-14 11:41 927504 c:\windows\system32\dllcache\cache\mfc40u.dll
    + 2009-08-18 17:20 . 2009-03-21 14:06 989696 c:\windows\system32\dllcache\cache\kernel32.dll
    + 2009-08-18 17:20 . 2008-04-14 11:41 110080 c:\windows\system32\dllcache\cache\imm32.dll
    + 2009-08-18 17:20 . 2008-04-14 11:41 792064 c:\windows\system32\dllcache\cache\comres.dll
    + 2009-08-18 17:20 . 2008-04-14 11:41 617472 c:\windows\system32\dllcache\cache\comctl32.dll
    + 2009-08-18 17:20 . 2008-04-14 11:41 167936 c:\windows\system32\dllcache\cache\appmgmts.dll
    + 2009-08-18 17:20 . 2008-04-14 03:09 142592 c:\windows\system32\dllcache\cache\aec.sys
    + 2009-10-23 21:54 . 2009-10-23 21:54 228352 c:\windows\Installer\5b9924c.msi
    + 2009-09-16 16:29 . 2009-09-16 16:29 550400 c:\windows\Installer\339ba5f9.msi
    + 2009-09-16 16:29 . 2009-09-16 16:29 779264 c:\windows\Installer\339ba5f2.msi
    + 2009-09-16 16:29 . 2009-09-16 16:29 483328 c:\windows\Installer\339ba5ec.msi
    + 2009-09-16 16:28 . 2009-09-16 16:28 891904 c:\windows\Installer\339ba5e6.msi
    + 2009-09-16 16:28 . 2009-09-16 16:28 816640 c:\windows\Installer\339ba5e0.msi
    + 2009-09-16 16:27 . 2009-09-16 16:27 430080 c:\windows\Installer\339ba588.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 155648 c:\windows\Installer\339ba580.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 152576 c:\windows\Installer\339ba565.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 107008 c:\windows\Installer\339ba553.msi
    + 2009-09-16 16:26 . 2009-09-16 16:26 301056 c:\windows\Installer\339ba54d.msi
    + 2009-09-16 16:29 . 2009-09-16 16:29 132096 c:\windows\Installer\{B131E59D-202C-43C6-84C9-68F0C37541F1}\WLXPhotoGalleryIcon.exe
    + 2009-09-16 16:28 . 2009-09-16 16:28 236392 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\9.0.242.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
    + 2009-09-16 16:28 . 2008-04-14 11:42 346112 c:\windows\$NtUninstallKB954708$\windowscodecsext.dll
    + 2009-09-16 16:28 . 2008-04-14 11:42 712704 c:\windows\$NtUninstallKB954708$\windowscodecs.dll
    + 2009-09-16 16:28 . 2007-11-30 12:39 382840 c:\windows\$NtUninstallKB954708$\spuninst\updspapi.dll
    + 2009-09-16 16:28 . 2007-11-30 12:39 231288 c:\windows\$NtUninstallKB954708$\spuninst\spuninst.exe
    + 2009-09-09 19:02 . 2001-10-19 18:40 1683792 c:\windows\system32\wmvcore2.dll
    + 2009-09-18 19:31 . 2005-05-18 15:52 1212416 c:\windows\system32\NCTAudioInformation2.dll
    + 2009-09-18 19:31 . 2005-05-17 16:37 1986560 c:\windows\system32\NCTAudioFile2.dll
    + 2003-03-20 08:12 . 2003-03-20 08:12 1047552 c:\windows\system32\MFC71u.dll
    + 2003-03-20 08:20 . 2003-03-20 08:20 1060864 c:\windows\system32\MFC71.dll
    + 2008-08-28 11:16 . 2008-08-28 11:16 1773568 c:\windows\system32\gdiplus.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 1614848 c:\windows\system32\dllcache\cache\sfcfiles.dll
    + 2009-08-18 17:20 . 2009-02-06 11:06 2145280 c:\windows\system32\dllcache\cache\ntoskrnl.exe
    + 2009-08-18 17:20 . 2009-02-06 10:32 2023936 c:\windows\system32\dllcache\cache\ntkrnlpa.exe
    + 2009-08-18 17:20 . 2009-04-29 04:56 3596288 c:\windows\system32\dllcache\cache\mshtml.dll
    + 2009-08-18 17:20 . 2008-04-14 11:42 1033728 c:\windows\system32\dllcache\cache\explorer.exe
    + 2009-09-17 21:39 . 2009-09-17 21:39 15709696 c:\windows\Installer\1ae3311.msp
    .
    -- Instantané actualisé --
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "igndlm.exe"="c:\program files\Download Manager\DLM.exe" [2009-05-15 1103216]
    "AnyDVD"="c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe" [2009-03-04 2567104]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-04-21 94208]
    "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-03 39408]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-09 13680640]
    "HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2008-05-14 29831168]
    "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-10-17 2025752]
    "amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
    "D-Link AirPlus XtremeG DWL-G520"="c:\program files\D-Link\AirPlus XtremeG DWL-G520\AirPlusCFG.exe" [2007-06-27 1327104]
    "ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-26 413696]
    "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2008-04-04 88584]
    "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2009-10-10 203264]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-09 86016]
    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
    "Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-09-21 520024]
    "PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-02 148888]
    "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
    "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-02-09 1657376]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    c:\documents and settings\Guillaume\Start Menu\Programs\Startup\
    MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2009-1-27 575488]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Launchpad.lnk - c:\program files\IC Media Corp.\ICM532\Launchpad.exe [2009-2-16 49152]
    Logiciel Kodak EasyShare.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2008-10-30 282624]
    Malwarebytes' Anti-Malware.lnk - c:\program files\Malwarebytes' Anti-Malware\mbam.exe [2009-10-26 1312080]
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
    2009-08-16 13:30 11952 ----a-w- c:\windows\system32\avgrsstx.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
    "c:\\Program Files\\Vuze\\Azureus.exe"=
    "c:\\Program Files\\Soulseek\\slsk.exe"=
    "c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
    "c:\\Program Files\\mIRC\\mirc.exe"=
    "c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
    "c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
    "c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
    "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
    "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
    "c:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"=
    "c:\\Program Files\\Electronic Arts\\L'Avènement du Roi-sorcier\\game.dat"=
    "c:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Double Agent\\SCDA-Offline\\System\\SplinterCell4.exe"=
    "c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
    "c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
    "e:\\bfvit\\Battlefield Vietnam\\BfVietnam.exe"=
    "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
    "c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

    R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-31 64160]
    R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-01-15 335240]
    R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-01-15 108552]
    R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-06-20 908056]
    R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-15 297752]
    R3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);c:\windows\system32\drivers\A3AB.sys [2005-03-22 547744]
    R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [2009-01-15 31392]
    R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2009-01-15 238080]
    R3 WsAudioDevice_383;WsAudioDevice_383;c:\windows\system32\drivers\WsAudioDevice_383.sys [2009-09-09 16640]
    S2 gupdate1c99ba430003e31;Service Google Update (gupdate1c99ba430003e31);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-02 133104]
    S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-03-09 1028432]

    --- Autres Services/Pilotes en mémoire ---

    *Deregistered* - mbr
    .
    Contenu du dossier 'Tâches planifiées'

    2009-10-27 c:\windows\Tasks\Ad-Aware Update (Weekly).job
    - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 14:12]

    2009-10-27 c:\windows\Tasks\Google Software Updater.job
    - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-03 02:02]

    2009-10-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-03-03 02:02]

    2009-10-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-03-03 02:02]
    .
    .
    ------- Examen supplémentaire -------
    .
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
    LSP: %SYSTEMROOT%\system32\nvLsp.dll
    FF - ProfilePath - c:\documents and settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\xpo8uw8t.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
    FF - prefs.js: browser.startup.homepage - google.ca
    FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=IEFM1&q=
    FF - plugin: c:\program files\Download Manager\npfpdlm.dll
    FF - plugin: c:\program files\Google\Google Updater\2.4.1508.6312\npCIDetect13.dll
    FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    BHO-{e85e4a14-4c5e-49c1-9b47-22e523bed950} - gufulise.dll
    WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)
    HKLM-Run-humetipav - c:\windows\system32\madipoha.dll
    HKLM-Run-filijokazu - wipoveku.dll
    SharedTaskScheduler-{5d452edd-32dc-4526-be4f-908cad9e357c} - c:\windows\system32\madipoha.dll
    SSODL-bikikopej-{5d452edd-32dc-4526-be4f-908cad9e357c} - c:\windows\system32\madipoha.dll

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-10-27 12:25
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------

    [HKEY_USERS\S-1-5-21-746137067-117609710-1801674531-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
    "??"=hex:69,20,f1,90,df,80,a7,06,82,fb,ef,60,bd,4b,77,54,1f,da,1a,2c,f0,b6,c0,
    74,8c,a3,26,7e,fc,e1,76,25,9e,d5,3c,a4,9b,a8,c4,3b,8a,c4,b7,b6,af,25,db,80,\
    "??"=hex:aa,99,e1,3d,41,df,35,11,97,a6,c3,00,40,86,d4,fe

    [HKEY_USERS\S-1-5-21-746137067-117609710-1801674531-1003\Software\SecuROM\License information*]
    "datasecu"=hex:a4,23,b5,e4,e9,16,67,05,9e,dd,e7,1c,b6,d7,65,c6,1e,93,25,76,42,
    70,0e,b9,f5,14,2f,e7,aa,47,22,73,dd,c0,81,12,5a,ca,20,ce,41,0d,9d,2c,0e,22,\
    "rkeysecu"=hex:e0,ff,90,bf,7d,92,d4,3a,74,b7,8c,e1,58,bf,94,ac
    .
    --------------------- DLLs chargées dans les processus actifs ---------------------

    - - - - - - - > 'lsass.exe'(712)
    c:\windows\system32\nvLsp.dll

    - - - - - - - > 'explorer.exe'(3732)
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\windows\system32\nvsvc32.exe
    c:\progra~1\AVG\AVG8\avgrsx.exe
    c:\progra~1\AVG\AVG8\avgnsx.exe
    c:\program files\bin32\nSvcAppFlt.exe
    c:\program files\bin32\nSvcIp.exe
    c:\program files\AVG\AVG8\avgcsrvx.exe
    c:\windows\system32\wscntfy.exe
    c:\combofix\CF19496.exe
    c:\windows\system32\RUNDLL32.EXE
    c:\program files\Java\jre6\bin\jucheck.exe
    c:\combofix\PEV.cfxxe
    .
    **************************************************************************
    .
    Heure de fin: 2009-10-27 12:30 - La machine a redémarré
    ComboFix-quarantined-files.txt 2009-10-27 16:30
    ComboFix2.txt 2009-08-18 17:20

    Avant-CF: 4 605 177 856 bytes free
    Après-CF: 6 792 835 072 bytes free

    WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

    - - End Of File - - F31F3CC894FF3451D623391A3AFDE4A1
    0
  21. Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    -+-+-+-> CFScript <-+-+-+-

    [x] Crée un nouveau fichier texte ( .txt )

    [x] Copie/Colle ceci dedans :


    File::
    c:\windows\system32\lenodanu.dll
    c:\windows\system32\B4FM.dll



    [x] Puis enregistre le en CFScript.txt sur ton bureau

    [x] Fais glisser le fichier CFScript.txt sur l'icone de ComboFix.

    [x] Combofix effectuera la tache demandée dans le script, puis ouvrira un rapport.

    [x] Copie/Colle son contenu dans ton prochain message

    Nb : Le rapport est sauvegardé sous C:\Combofix.txt
    0
  • 1
  • 2
  • 3

Discussions similaires

Cheval de Troie- e.tre456.worm.windows
Ninou037 -
Ninou037 -

13 réponses
Virus potentiel
Ramon1 -
bazfile -

29 réponses
virus et ou cheval de troie
FLORE+60 -
bazfile -

1 réponse
cheval dans oblivion
sernaldo53 -
sernaldo53 -

12 réponses
expressions francaises
bifaka -
lanonyme -

4 réponses