Pc en nettoyage - Page 2

Précédent
  • 1
  • 2
  1. fix200 Messages postés 3365 Statut Contributeur sécurité 158
     
    Re

    les outils spécifiques avant les outils généralistes.

    De plus usbfix va aussi nettoyer & vacciner les clés usb, donc c'est mieux. ;)

    Donc: Lop S&D, AD-R option L, puis Usbfix. si usbfix laisse des traces, les scripter avec otm.

    ++
    0
  3. fix200 Messages postés 3365 Statut Contributeur sécurité 158
     
    Non le sujet est a moment de grâce. c'est lui qui va continuer.
    0
  4. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    bon ce topic est devenu un grand bazar...

    Téléchargez Lop S&D.exe sur le Bueau

    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    Certaines infections bloquent les telechargements d' outils de desinfection utilisez ce lien alternatif:
    http://ww38.toofiles.com/fr/oip/documents/exe/yop4.html

    * Double-cliquez dessus pour lancer l'installation

    * Puis double-cliquez sur le raccourci Lop S&D présent sur le Bureau

    * Séléctionnez la langue souhaitée, puis choisir l'option 1 (Recherche)

    * Patientez jusqu'à la fin du scan

    * Postez le rapport généré sur un forum(C:\lopR.txt)

    Tutorial (aide) : http://bibou0007.com/outils-specifiques-f78/tuto-lop-sd-t956­.htm
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Bozoff
     
    Alors, après un scan par lop s&d voici le résultat. je suis encore en attente du scan usbfix, aurais-je dû faire réparer tout de suite pour lop?

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.70GHz )
    BIOS : PhoenixBIOS 4.0 Release 6.0
    USER : Emilie ROUGETET ( Administrator )
    BOOT : Normal boot
    Antivirus : AVG 7.5.552 7.5.552 (Activated)
    Firewall : ZoneAlarm Firewall 7.0.462.000 (Activated)
    C:\ (Local Disk) - NTFS - Total:46 Go (Free:33 Go)
    D:\ (Local Disk) - NTFS - Total:36 Go (Free:31 Go)
    E:\ (Local Disk) - FAT32 - Total:9 Go (Free:3 Go)
    F:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [1] ( 01/11/2009|11:09 )

    --------------------\\ Listing des dossiers dans APPLIC~1

    [31/10/2009|15:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [20/01/2005|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [09/08/2006|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
    [12/10/2007|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
    [27/01/2007|15:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [13/02/2007|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
    [23/10/2009|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [19/04/2006|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother
    [26/10/2007|17:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
    [14/03/2005|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
    [23/10/2009|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
    [18/01/2007|23:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESTsoft
    [20/06/2006|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exetender
    [02/04/2008|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\file joy proc deaf
    [13/02/2007|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
    [19/04/2006|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [29/10/2006|22:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Iso Proc Grim Vc
    [12/02/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
    [02/04/2008|15:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
    [11/01/2009|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [20/01/2005|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
    [29/07/2009|18:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
    [06/12/2006|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
    [12/12/2005|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [19/01/2005|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
    [13/06/2009|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
    [31/10/2006|00:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [31/05/2006|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

    [09/08/2006|09:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
    [21/01/2005|20:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\CyberLink
    [19/01/2005|21:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
    [20/01/2005|16:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
    [20/01/2005|17:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
    [21/01/2005|07:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
    [20/01/2005|22:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
    [21/01/2005|08:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

    [29/08/2008|10:54] C:\DOCUME~1\EMILIE~1\APPLIC~1\Adobe
    [18/11/2005|23:30] C:\DOCUME~1\EMILIE~1\APPLIC~1\Ahead
    [01/11/2009|10:46] C:\DOCUME~1\EMILIE~1\APPLIC~1\AVG7
    [31/10/2009|23:41] C:\DOCUME~1\EMILIE~1\APPLIC~1\Azureus
    [27/04/2006|21:51] C:\DOCUME~1\EMILIE~1\APPLIC~1\Brother
    [26/10/2007|17:53] C:\DOCUME~1\EMILIE~1\APPLIC~1\Corel
    [02/10/2005|10:33] C:\DOCUME~1\EMILIE~1\APPLIC~1\Datalayer
    [24/11/2007|22:51] C:\DOCUME~1\EMILIE~1\APPLIC~1\dvdcss
    [18/01/2007|23:16] C:\DOCUME~1\EMILIE~1\APPLIC~1\ESTsoft
    [14/02/2008|15:29] C:\DOCUME~1\EMILIE~1\APPLIC~1\Google
    [19/01/2005|21:38] C:\DOCUME~1\EMILIE~1\APPLIC~1\Identities
    [12/02/2008|19:56] C:\DOCUME~1\EMILIE~1\APPLIC~1\Lavasoft
    [14/03/2008|09:45] C:\DOCUME~1\EMILIE~1\APPLIC~1\Leadertech
    [31/10/2009|11:07] C:\DOCUME~1\EMILIE~1\APPLIC~1\Macromedia
    [26/10/2009|22:05] C:\DOCUME~1\EMILIE~1\APPLIC~1\Microsoft
    [16/08/2005|14:24] C:\DOCUME~1\EMILIE~1\APPLIC~1\MSNInstaller
    [10/12/2007|19:53] C:\DOCUME~1\EMILIE~1\APPLIC~1\SecuROM
    [20/01/2005|22:04] C:\DOCUME~1\EMILIE~1\APPLIC~1\Sun
    [08/02/2007|17:39] C:\DOCUME~1\EMILIE~1\APPLIC~1\teamspeak2
    [02/02/2007|19:26] C:\DOCUME~1\EMILIE~1\APPLIC~1\VLC

    [13/02/2007|15:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
    [13/02/2007|15:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
    [20/01/2005|19:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

    [13/02/2007|15:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [21/02/2006|22:44] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real
    [03/03/2005|17:10] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [23/10/2009 22:52][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    [01/11/2009 11:00][--ah-----] C:\WINDOWS\tasks\B1BDB5EB91722B6B.job
    [23/01/2007 02:11][--a------] C:\WINDOWS\tasks\Critical Battery Alarm Program.job
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
    [01/11/2009 10:44][--ah-----] C:\WINDOWS\tasks\SA.DAT

    ( B1BDB5EB91722B6B.job )=( c:\docume~1\emilie~1\applic~1\driveb~1\aboutlongextra.exe )

    --------------------\\ Listing des dossiers dans C:\Program Files

    [31/10/2009|13:55] C:\Program Files\Adobe
    [31/10/2009|14:28] C:\Program Files\Ad-Remover
    [03/01/2008|19:32] C:\Program Files\Ahead
    [24/08/2008|11:33] C:\Program Files\Apple Software Update
    [20/01/2005|15:15] C:\Program Files\ATI Technologies
    [19/01/2005|21:47] C:\Program Files\Broadcom
    [18/01/2007|20:25] C:\Program Files\Common Files
    [26/10/2007|18:09] C:\Program Files\Corel
    [31/10/2009|15:10] C:\Program Files\DivX
    [18/01/2007|23:16] C:\Program Files\ESTsoft
    [31/10/2009|15:10] C:\Program Files\Fichiers communs
    [13/02/2007|15:07] C:\Program Files\Grisoft
    [26/10/2009|22:27] C:\Program Files\InstallShield Installation Information
    [19/01/2005|21:44] C:\Program Files\Intel
    [27/10/2009|23:53] C:\Program Files\Internet Explorer
    [02/04/2008|17:23] C:\Program Files\Java
    [12/02/2008|20:11] C:\Program Files\Lavasoft
    [26/10/2009|22:52] C:\Program Files\Microsoft
    [19/01/2005|21:39] C:\Program Files\microsoft frontpage
    [26/10/2009|22:15] C:\Program Files\Microsoft Office
    [24/10/2009|00:10] C:\Program Files\Microsoft Silverlight
    [13/06/2009|18:33] C:\Program Files\Microsoft WSE
    [08/10/2008|22:17] C:\Program Files\Movie Maker
    [30/08/2009|23:31] C:\Program Files\MSBuild
    [19/01/2005|21:36] C:\Program Files\MSN Gaming Zone
    [08/10/2008|22:12] C:\Program Files\NetMeeting
    [18/01/2007|20:16] C:\Program Files\OfficeUpdate11
    [19/01/2005|21:36] C:\Program Files\Online Services
    [24/10/2009|00:05] C:\Program Files\Outlook Express
    [30/08/2009|23:31] C:\Program Files\Reference Assemblies
    [19/01/2005|21:37] C:\Program Files\Services en ligne
    [03/02/2007|13:16] C:\Program Files\Spybot - Search & Destroy
    [20/01/2005|15:34] C:\Program Files\Synaptics
    [19/01/2007|00:32] C:\Program Files\Uninstall Information
    [02/02/2007|19:22] C:\Program Files\VideoLAN
    [23/10/2009|10:31] C:\Program Files\Vuze
    [26/10/2009|22:52] C:\Program Files\Windows Live
    [26/10/2009|22:51] C:\Program Files\Windows Live SkyDrive
    [21/01/2007|02:02] C:\Program Files\Windows Media Connect
    [25/10/2007|17:41] C:\Program Files\Windows Media Connect 2
    [08/10/2008|22:12] C:\Program Files\Windows Media Player
    [08/10/2008|22:12] C:\Program Files\Windows NT
    [20/01/2005|16:01] C:\Program Files\X10 Hardware
    [19/01/2005|21:39] C:\Program Files\xerox
    [18/01/2007|23:18] C:\Program Files\Zone Labs

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [31/10/2009|13:56] C:\Program Files\Fichiers communs\Adobe
    [04/01/2008|11:11] C:\Program Files\Fichiers communs\Ahead
    [18/01/2007|20:16] C:\Program Files\Fichiers communs\AOL
    [20/01/2005|17:06] C:\Program Files\Fichiers communs\Designer
    [31/10/2009|15:10] C:\Program Files\Fichiers communs\DivX Shared
    [26/10/2007|17:28] C:\Program Files\Fichiers communs\InstallShield
    [20/01/2005|21:59] C:\Program Files\Fichiers communs\Java
    [26/10/2009|22:51] C:\Program Files\Fichiers communs\Microsoft Shared
    [19/01/2005|21:37] C:\Program Files\Fichiers communs\MSSoap
    [21/01/2005|08:00] C:\Program Files\Fichiers communs\Nullsoft
    [27/01/2009|08:45] C:\Program Files\Fichiers communs\ODBC
    [23/10/2009|22:40] C:\Program Files\Fichiers communs\Real
    [19/01/2005|21:37] C:\Program Files\Fichiers communs\Services
    [19/01/2005|22:32] C:\Program Files\Fichiers communs\SpeechEngines
    [08/10/2008|22:12] C:\Program Files\Fichiers communs\System
    [11/01/2009|19:46] C:\Program Files\Fichiers communs\Windows Live

    --------------------\\ Process

    ( 49 Processes )

    iexplore.exe ~ [PID:3848]
    iexplore.exe ~ [PID:840]

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Joy Proc Deaf
    C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp\nscB.tmp
    C:\DOCUME~1\EMILIE~1\Cookies\emilie_rougetet@advertstream[1].txt
    C:\WINDOWS\Tasks\B1BDB5EB91722B6B.job

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts MODIFIE

    127.0.0.1 bin.errorprotector.com ## added by CiD
    127.0.0.1 br.errorsafe.com ## added by CiD
    127.0.0.1 br.winantivirus.com ## added by CiD
    127.0.0.1 br.winfixer.com ## added by CiD
    127.0.0.1 cdn.drivecleaner.com ## added by CiD
    127.0.0.1 cdn.errorsafe.com ## added by CiD
    127.0.0.1 cdn.winsoftware.com ## added by CiD
    127.0.0.1 de.errorsafe.com ## added by CiD
    127.0.0.1 de.winantivirus.com ## added by CiD
    127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
    127.0.0.1 download.cdn.errorsafe.com ## added by CiD
    127.0.0.1 download.cdn.winsoftware.com ## added by CiD
    127.0.0.1 download.errorsafe.com ## added by CiD
    127.0.0.1 download.systemdoctor.com ## added by CiD
    127.0.0.1 download.winantispyware.com ## added by CiD
    127.0.0.1 download.windrivecleaner.com ## added by CiD
    127.0.0.1 download.winfixer.com ## added by CiD
    127.0.0.1 drivecleaner.com ## added by CiD
    127.0.0.1 dynamique.drivecleaner.com ## added by CiD
    127.0.0.1 errorprotector.com ## added by CiD
    127.0.0.1 errorsafe.com ## added by CiD
    127.0.0.1 es.winantivirus.com ## added by CiD
    127.0.0.1 fr.winantivirus.com ## added by CiD
    127.0.0.1 fr.winfixer.com ## added by CiD
    127.0.0.1 go.drivecleaner.com ## added by CiD
    127.0.0.1 go.errorsafe.com ## added by CiD
    127.0.0.1 go.winantispyware.com ## added by CiD
    127.0.0.1 go.winantivirus.com ## added by CiD
    127.0.0.1 hk.winantivirus.com ## added by CiD
    127.0.0.1 instlog.errorsafe.com ## added by CiD
    127.0.0.1 instlog.winantivirus.com ## added by CiD
    127.0.0.1 instlog.winfixer.com ## added by CiD
    127.0.0.1 jsp.drivecleaner.com ## added by CiD
    127.0.0.1 kb.errorsafe.com ## added by CiD
    127.0.0.1 kb.winantivirus.com ## added by CiD
    127.0.0.1 nl.errorsafe.com ## added by CiD
    127.0.0.1 se.errorsafe.com ## added by CiD
    127.0.0.1 secure.drivecleaner.com ## added by CiD
    127.0.0.1 secure.errorsafe.com ## added by CiD
    127.0.0.1 secure.winantispam.com ## added by CiD
    127.0.0.1 secure.winantispy.com ## added by CiD
    127.0.0.1 secure.winantivirus.com ## added by CiD
    127.0.0.1 support.winantivirus.com ## added by CiD
    127.0.0.1 trial.updates.winsoftware.com ## added by CiD
    127.0.0.1 ulog.winantivirus.com ## added by CiD
    127.0.0.1 utils.errorsafe.com ## added by CiD
    127.0.0.1 utils.winantivirus.com ## added by CiD
    127.0.0.1 utils.winfixer.com ## added by CiD
    127.0.0.1 winantispyware.com ## added by CiD
    127.0.0.1 winantivirus.com ## added by CiD
    127.0.0.1 winfixer.com ## added by CiD
    127.0.0.1 winfixer2006.com ## added by CiD
    127.0.0.1 winsoftware.com ## added by CiD
    127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
    127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
    127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
    127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
    127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
    127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
    127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
    127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
    127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
    127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
    127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
    127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
    127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
    127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
    127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
    127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
    127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

    -> 72 [ 70 ## added by CiD ]

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-11-01 11:11:18
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 4

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [F:4214][D:181]-> C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp
    [F:289][D:0]-> C:\DOCUME~1\EMILIE~1\Cookies
    [F:17345][D:36]-> C:\DOCUME~1\EMILIE~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 01/11/2009|11:14 - Option : [1]

    --------------------\\ Fin du rapport a 11:14:46
    0
  7. Bozoff
     
    et voici le rapport usb fix. merci fix200

    ############################## | UsbFix V6.046 |

    User : Emilie ROUGETET (Administrateurs) # EMILY
    Update on 29/10/2009 by Chiquitine29, C_XX & Chimay8
    Start at: 11:10:09 | 01/11/2009
    Website : http://pagesperso-orange.fr/NosTools/index.html
    Contact : FindyKill.Contact@gmail.com

    Intel(R) Pentium(R) M processor 1.70GHz
    Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    Internet Explorer 8.0.6001.18702
    Windows Firewall Status : Disabled
    AV : AVG 7.5.552 7.5.552 [ Enabled | (!) Outdated ]
    FW : ZoneAlarm Firewall[ Enabled ]7.0.462.000

    C:\ -> Disque fixe local # 46,29 Go (33,2 Go free) # NTFS
    D:\ -> Disque fixe local # 37 Go (31,89 Go free) # NTFS
    E:\ -> Disque fixe local # 9,76 Go (3,4 Go free) # FAT32
    F:\ -> Disque CD-ROM

    ############################## | Processus actifs |

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\AhnRpta.exe
    C:\WINDOWS\system32\brsvc01a.exe
    C:\WINDOWS\system32\brss01a.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\PSIService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\Program Files\Windows Media Player\WMPNetwk.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    ################## | Fichiers # Dossiers infectieux |

    C:\WINDOWS\AhnRpta.exe
    C:\WINDOWS\system32\nmdfgds0.dll
    C:\WINDOWS\system32\nmdfgds1.dll
    C:\WINDOWS\system32\olhrwef.exe
    C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp\cvasds0.dll
    C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp\cvasds1.dll
    C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp\herss.exe
    C:\autorun.inf
    C:\autorun.inf -> fichier appelé : "C:\gcq6.exe" ( Présent ! )
    C:\hjvjte.exe
    C:\sm.exe
    C:\yudald.bat
    D:\autorun.inf
    D:\autorun.inf -> fichier appelé : "D:\gcq6.exe" ( Présent ! )
    D:\hjvjte.exe
    D:\sm.exe
    D:\yudald.bat
    E:\autorun.inf
    E:\autorun.inf -> fichier appelé : "E:\gcq6.exe" ( Présent ! )
    E:\hjvjte.exe
    E:\sm.exe
    E:\yudald.bat

    ################## | Registre # Clés Run infectieuses |

    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "cdoosoft"
    [HKLM\SYSTEM\CurrentControlSet\Services\AVPsys]
    [HKLM\SYSTEM\ControlSet001\Services\AVPsys]
    [HKLM\SYSTEM\ControlSet003\Services\AVPsys]

    ################## | Registre # Mountpoints2 |

    HKCU\..\..\Explorer\MountPoints2\{722eadcd-e6ed-11dd-aaa2-000e35c8a471}
    Shell\AutoRun\command =G:\uqgvf.exe
    Shell\open\Command =G:\uqgvf.exe

    HKCU\..\..\Explorer\MountPoints2\{9cb75c51-5a96-11de-a7cc-000e35c8a471}
    Shell\AutoRun\command =G:\sm.exe
    Shell\open\Command =G:\sm.exe

    HKCU\..\..\Explorer\MountPoints2\{be8df745-bfdc-11de-b2a3-000e35c8a471}
    Shell\AutoRun\command =G:\sm.exe
    Shell\open\Command =G:\sm.exe

    HKCU\..\..\Explorer\MountPoints2\{f920ba10-9d1a-11dc-a717-000b6b6c7b82}
    Shell\AutoRun\command =G:\CD-LOGIS2007-2004-2.exe

    ################## | Suspect | https://www.virustotal.com/gui/ |

    ################## | Cracks / Keygens / Serials |

    ################## | ! Fin du rapport # UsbFix V6.046 ! |
    0
    1. Utilisateur anonyme
       
      bonjour
      il faudra d'abord réparer les fichiers host
      moment de grâce, je te fait ceci, et tu continueras
      Suppression + Hosts

      double-clique sur le raccourci Lop S&D présent sur ton Bureau
      * Séléctionne la langue souhaitée , puis choisis l'option "Suppression + Hosts"
      * Patiente jusqu'à la fin du scan
      * Poste le rapport généré (C:\lopR.txt)

      ensuite

      Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

      # Double clic sur le raccourci UsbFix présent sur ton bureau

      # Sélectionne l'option 2 ( Suppression )

      # Ton bureau disparaitra et le pc redémarrera .

      # Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

      # Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .

      # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

      ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
      0
  8. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    bonjour et merci nathandre
    1 novembre oblige, mon temps est compté...

    (sourire)
    0
  9. Bozoff
     
    voila j'ai tout fait, c'est bon???

    --------------------\\ Lop S&D 4.2.5-0 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.70GHz )
    BIOS : PhoenixBIOS 4.0 Release 6.0
    USER : Emilie ROUGETET ( Administrator )
    BOOT : Normal boot
    Antivirus : AVG 7.5.552 7.5.552 (Activated)
    Firewall : ZoneAlarm Firewall 7.0.462.000 (Activated)
    C:\ (Local Disk) - NTFS - Total:46 Go (Free:30 Go)
    D:\ (Local Disk) - NTFS - Total:36 Go (Free:31 Go)
    E:\ (Local Disk) - FAT32 - Total:9 Go (Free:3 Go)
    F:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
    Option : [2] ( 02/11/2009|13:14 )

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp\nscB.tmp
    Supprime! - C:\WINDOWS\Tasks\B1BDB5EB91722B6B.job
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Joy Proc Deaf
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans APPLIC~1

    [31/10/2009|15:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [20/01/2005|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [09/08/2006|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
    [12/10/2007|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
    [27/01/2007|15:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [13/02/2007|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
    [23/10/2009|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
    [19/04/2006|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother
    [26/10/2007|17:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
    [14/03/2005|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
    [23/10/2009|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
    [18/01/2007|23:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESTsoft
    [20/06/2006|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exetender
    [13/02/2007|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
    [19/04/2006|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
    [29/10/2006|22:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Iso Proc Grim Vc
    [12/02/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
    [02/04/2008|15:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
    [11/01/2009|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [20/01/2005|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
    [29/07/2009|18:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
    [06/12/2006|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
    [12/12/2005|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [19/01/2005|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
    [13/06/2009|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
    [31/10/2006|00:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [31/05/2006|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

    [09/08/2006|09:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
    [21/01/2005|20:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\CyberLink
    [19/01/2005|21:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
    [20/01/2005|16:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
    [20/01/2005|17:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
    [21/01/2005|07:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
    [20/01/2005|22:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
    [21/01/2005|08:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

    [29/08/2008|10:54] C:\DOCUME~1\EMILIE~1\APPLIC~1\Adobe
    [18/11/2005|23:30] C:\DOCUME~1\EMILIE~1\APPLIC~1\Ahead
    [02/11/2009|09:31] C:\DOCUME~1\EMILIE~1\APPLIC~1\AVG7
    [02/11/2009|13:14] C:\DOCUME~1\EMILIE~1\APPLIC~1\Azureus
    [27/04/2006|21:51] C:\DOCUME~1\EMILIE~1\APPLIC~1\Brother
    [26/10/2007|17:53] C:\DOCUME~1\EMILIE~1\APPLIC~1\Corel
    [02/10/2005|10:33] C:\DOCUME~1\EMILIE~1\APPLIC~1\Datalayer
    [24/11/2007|22:51] C:\DOCUME~1\EMILIE~1\APPLIC~1\dvdcss
    [18/01/2007|23:16] C:\DOCUME~1\EMILIE~1\APPLIC~1\ESTsoft
    [14/02/2008|15:29] C:\DOCUME~1\EMILIE~1\APPLIC~1\Google
    [19/01/2005|21:38] C:\DOCUME~1\EMILIE~1\APPLIC~1\Identities
    [12/02/2008|19:56] C:\DOCUME~1\EMILIE~1\APPLIC~1\Lavasoft
    [14/03/2008|09:45] C:\DOCUME~1\EMILIE~1\APPLIC~1\Leadertech
    [31/10/2009|11:07] C:\DOCUME~1\EMILIE~1\APPLIC~1\Macromedia
    [26/10/2009|22:05] C:\DOCUME~1\EMILIE~1\APPLIC~1\Microsoft
    [16/08/2005|14:24] C:\DOCUME~1\EMILIE~1\APPLIC~1\MSNInstaller
    [10/12/2007|19:53] C:\DOCUME~1\EMILIE~1\APPLIC~1\SecuROM
    [20/01/2005|22:04] C:\DOCUME~1\EMILIE~1\APPLIC~1\Sun
    [08/02/2007|17:39] C:\DOCUME~1\EMILIE~1\APPLIC~1\teamspeak2
    [02/02/2007|19:26] C:\DOCUME~1\EMILIE~1\APPLIC~1\VLC

    [13/02/2007|15:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
    [13/02/2007|15:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
    [20/01/2005|19:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

    [13/02/2007|15:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [21/02/2006|22:44] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real
    [03/03/2005|17:10] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [23/10/2009 22:52][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    [23/01/2007 02:11][--a------] C:\WINDOWS\tasks\Critical Battery Alarm Program.job
    [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
    [02/11/2009 09:29][--ah-----] C:\WINDOWS\tasks\SA.DAT

    --------------------\\ Listing des dossiers dans C:\Program Files

    [31/10/2009|13:55] C:\Program Files\Adobe
    [31/10/2009|14:28] C:\Program Files\Ad-Remover
    [03/01/2008|19:32] C:\Program Files\Ahead
    [24/08/2008|11:33] C:\Program Files\Apple Software Update
    [20/01/2005|15:15] C:\Program Files\ATI Technologies
    [19/01/2005|21:47] C:\Program Files\Broadcom
    [18/01/2007|20:25] C:\Program Files\Common Files
    [26/10/2007|18:09] C:\Program Files\Corel
    [31/10/2009|15:10] C:\Program Files\DivX
    [18/01/2007|23:16] C:\Program Files\ESTsoft
    [31/10/2009|15:10] C:\Program Files\Fichiers communs
    [13/02/2007|15:07] C:\Program Files\Grisoft
    [26/10/2009|22:27] C:\Program Files\InstallShield Installation Information
    [19/01/2005|21:44] C:\Program Files\Intel
    [27/10/2009|23:53] C:\Program Files\Internet Explorer
    [02/04/2008|17:23] C:\Program Files\Java
    [12/02/2008|20:11] C:\Program Files\Lavasoft
    [26/10/2009|22:52] C:\Program Files\Microsoft
    [19/01/2005|21:39] C:\Program Files\microsoft frontpage
    [26/10/2009|22:15] C:\Program Files\Microsoft Office
    [24/10/2009|00:10] C:\Program Files\Microsoft Silverlight
    [13/06/2009|18:33] C:\Program Files\Microsoft WSE
    [08/10/2008|22:17] C:\Program Files\Movie Maker
    [30/08/2009|23:31] C:\Program Files\MSBuild
    [19/01/2005|21:36] C:\Program Files\MSN Gaming Zone
    [08/10/2008|22:12] C:\Program Files\NetMeeting
    [18/01/2007|20:16] C:\Program Files\OfficeUpdate11
    [19/01/2005|21:36] C:\Program Files\Online Services
    [24/10/2009|00:05] C:\Program Files\Outlook Express
    [30/08/2009|23:31] C:\Program Files\Reference Assemblies
    [19/01/2005|21:37] C:\Program Files\Services en ligne
    [03/02/2007|13:16] C:\Program Files\Spybot - Search & Destroy
    [20/01/2005|15:34] C:\Program Files\Synaptics
    [19/01/2007|00:32] C:\Program Files\Uninstall Information
    [02/02/2007|19:22] C:\Program Files\VideoLAN
    [23/10/2009|10:31] C:\Program Files\Vuze
    [26/10/2009|22:52] C:\Program Files\Windows Live
    [26/10/2009|22:51] C:\Program Files\Windows Live SkyDrive
    [21/01/2007|02:02] C:\Program Files\Windows Media Connect
    [25/10/2007|17:41] C:\Program Files\Windows Media Connect 2
    [08/10/2008|22:12] C:\Program Files\Windows Media Player
    [08/10/2008|22:12] C:\Program Files\Windows NT
    [20/01/2005|16:01] C:\Program Files\X10 Hardware
    [19/01/2005|21:39] C:\Program Files\xerox
    [18/01/2007|23:18] C:\Program Files\Zone Labs

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [31/10/2009|13:56] C:\Program Files\Fichiers communs\Adobe
    [04/01/2008|11:11] C:\Program Files\Fichiers communs\Ahead
    [18/01/2007|20:16] C:\Program Files\Fichiers communs\AOL
    [20/01/2005|17:06] C:\Program Files\Fichiers communs\Designer
    [31/10/2009|15:10] C:\Program Files\Fichiers communs\DivX Shared
    [26/10/2007|17:28] C:\Program Files\Fichiers communs\InstallShield
    [20/01/2005|21:59] C:\Program Files\Fichiers communs\Java
    [26/10/2009|22:51] C:\Program Files\Fichiers communs\Microsoft Shared
    [19/01/2005|21:37] C:\Program Files\Fichiers communs\MSSoap
    [21/01/2005|08:00] C:\Program Files\Fichiers communs\Nullsoft
    [27/01/2009|08:45] C:\Program Files\Fichiers communs\ODBC
    [23/10/2009|22:40] C:\Program Files\Fichiers communs\Real
    [19/01/2005|21:37] C:\Program Files\Fichiers communs\Services
    [19/01/2005|22:32] C:\Program Files\Fichiers communs\SpeechEngines
    [08/10/2008|22:12] C:\Program Files\Fichiers communs\System
    [11/01/2009|19:46] C:\Program Files\Fichiers communs\Windows Live

    --------------------\\ Process

    ( 45 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-11-02 13:16:26
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 4

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [F:4217][D:182]-> C:\DOCUME~1\EMILIE~1\LOCALS~1\Temp
    [F:51][D:0]-> C:\DOCUME~1\EMILIE~1\Cookies
    [F:738][D:14]-> C:\DOCUME~1\EMILIE~1\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 01/11/2009|11:14 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 02/11/2009|13:17 - Option : [2]

    --------------------\\ Fin du rapport a 13:17:57
    0
  10. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    tres bien

    il manque cette opération là

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

    # Double clic sur le raccourci UsbFix présent sur ton bureau

    # Sélectionne l'option 2 ( Suppression )

    # Ton bureau disparaitra et le pc redémarrera .

    # Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

    # Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .

    # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
    0
  11. Utilisateur anonyme
     
    Bonjour, c'est parfait, les fichiers host ont été restauré, c'est l'essentiel
    0
Précédent
  • 1
  • 2