ordinateur qui rame

Question

Bonjour,
comment faire pour quil ne rame plus?????
sa beug est c'est lent

spe2d · Answer

'lut,

Entretenir Windows gratuitement - Glary Utilities 

Bonne lecture...

jessi22 · Answer

Run by jess at 2009-12-17 00:12:23
Microsoft® Windows Vista™ Édition Familiale Premium  Service Pack 2
System drive C: has 357 GB (77%) free of 466 GB
Total RAM: 3069 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:13:33, on 17/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\Users\jess\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Ares\Ares.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\jess\AppData\Local\cdlabjya.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\jess\AppData\Local\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Windows\system32\conime.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\jess\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\jess\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\jess\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\aol\aol toolbar 5.0\AolTbServer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\jess\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\jess\Documents\Downloads\RSIT.exe
C:\Program Files	rend micro\jess.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [TVAgent] "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\RunOnce: [SoftwareHelper] C:\Users\jess\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe -runonce
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Google Update] "C:\Users\jess\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [tray style] "C:\ProgramData\shim less less.8othd"
O4 - HKCU\..\Run: [soft soap corn funk] "C:\ProgramData\New that site.gbpp3x"
O4 - HKCU\..\Run: [cdlabjya] "c:\users\jess\appdata\local\cdlabjya.exe" cdlabjya
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbaresources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\aestsrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\STacSV.exe
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

Destrio5 · Answer

Bonjour,

Plusieurs infections.

&#9679; Désinstalle Favorit et eoEngine.

&#9679; Désactive l'UAC le temps de la désinfection.

&#9679; Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

/!\ Déconnecte-toi d'Internet et ferme toutes applications en cours. /!\

&#9679; Double-clique sur le programme AD-R situé sur ton Bureau.
(Sous Vista, il faut cliquer droit sur AD-R et choisir Exécuter en tant qu'administrateur)
&#9679; Au menu principal, choisis l'option L.
&#9679; Poste le rapport généré (C:\Ad-Report-CLEAN.log).

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Kaspersky, etc.) comme étant un RiskTool.

jessi22 · Answer

merci
jai désinstaller favorit et eeoengine
mais je narrive pa a telecharger ce que tu me dis

Destrio5 · Answer

Télécharger quoi ?

jessi22 · Answer

ad-r

Destrio5 · Answer

http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

jessi22 · Answer

sa me marque sa
le controle des comptes utilisateurs
ans ces conditions,le programme ne peut sexecuter

Destrio5 · Answer

C'est pour cela que j'ai écrit qu'il faut désactiver l'UAC pendant la désinfection :
https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

jessi22 · Answer

ok daccord c'est fais jai desactiver luac
ensuite que dois je faire??

Destrio5 · Answer

"ensuite que dois je faire??"

--> Ce qu'il y a marqué dans le message 3 :
https://forums.commentcamarche.net/forum/affich-15640991-ordinateur-qui-rame#3

jessi22 · Answer

oui c'est ce que jai fais,mais sa ne veu toujours pas ce telecharger

Destrio5 · Answer

Tu n'arrives pas à le télécharger sur ton Bureau par exemple ?

jessi22 · Answer

et bien jai fais ce que tu ma dis gt dans panneau de configuration dans comptes des utilisateurs,mais quan je clique rien ne ce passe pour dire que c'est ok donc lad-r ne veu toujours pas fonctionner.
il me dis dis toujours  ce que je tai dis dans les messages precedents tu comprend??

Destrio5 · Answer

UAC = Contrôle des Comptes Utilisateurs.

jessi22 · Answer

oui oui jetais la dedans et jai fais ce que tu ma dis et jai lu que normalement il devrai me demander de redemarrer lordi mais il ne c rien passé justement

Destrio5 · Answer

Tu peux redémarrer le PC toi-même.

jessi22 · Answer

je lai fais redemarrer et c'est toujours pareil,sa ne veu pa
je comprend pas ce quil ce passe la

Destrio5 · Answer

--> Télécharge Lop S&D (par Eric_71 & Angeldark) sur ton Bureau.

--> Double-clique dessus pour lancer l'installation.

--> Puis double-clique sur Lop S&D présent sur ton Bureau.
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)

--> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).

--> Patiente jusqu'à la fin du scan.

--> Poste le rapport généré (C:\lopR.txt).

jessi22 · Answer

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-17 19:19:56
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...





c sa????ou il manque quelque chose???????????

Destrio5 · Answer

Le scan est toujours en cours ?

jessi22 · Answer

Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6002 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-74 )
   BIOS : Default System BIOS
   USER : jess ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:454 Go (Free:350 Go)
   D:\ (Local Disk) - NTFS - Total:11 Go (Free:1 Go)
   E:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 17/12/2009|19:19 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local

   [08/11/2009|21:57] C:\Users\jess\AppData\Local\Adobe
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\AOL
   [03/10/2009|18:36] C:\Users\jess\AppData\Local\Application Data 
   [09/10/2009|15:08] C:\Users\jess\AppData\Local\Apps
   [17/12/2009|18:25] C:\Users\jess\AppData\Local\Ares
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\ATI
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\AtStart.txt
   [09/10/2009|15:40] C:\Users\jess\AppData\Local\CyberLink
   [09/11/2009|18:19] C:\Users\jess\AppData\Local\d3d9caps.dat
   [03/12/2009|23:45] C:\Users\jess\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [09/10/2009|15:09] C:\Users\jess\AppData\Local\Deployment
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\DSwitch.txt
   [03/11/2009|17:30] C:\Users\jess\AppData\Local\eMule
   [03/10/2009|18:42] C:\Users\jess\AppData\Local\GDIPFONTCACHEV1.DAT
   [09/10/2009|15:09] C:\Users\jess\AppData\Local\Google
   [16/12/2009|23:30] C:\Users\jess\AppData\Local\Hewlett-Packard
   [03/10/2009|18:36] C:\Users\jess\AppData\Local\Historique 
   [17/12/2009|19:05] C:\Users\jess\AppData\Local\IconCache.db
   [12/11/2009|22:20] C:\Users\jess\AppData\Local\IsolatedStorage
   [30/11/2009|18:58] C:\Users\jess\AppData\Local\Microsoft
   [03/12/2009|23:34] C:\Users\jess\AppData\Local\Microsoft Games
   [22/10/2009|17:29] C:\Users\jess\AppData\Local\Microsoft Help
   [09/10/2009|15:40] C:\Users\jess\AppData\Local\PowerCinema
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\QSwitch.txt
   [12/11/2009|20:59] C:\Users\jess\AppData\Local\Symantec
   [17/12/2009|19:17] C:\Users\jess\AppData\Local\Temp
   [03/10/2009|18:36] C:\Users\jess\AppData\Local\Temporary Internet Files 
   [10/10/2009|19:12] C:\Users\jess\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [17/12/2009 19:19][--a------] C:\Windows	asks\GoogleUpdateTaskUserS-1-5-21-3245296487-552651647-840591540-1000UA.job
   [16/12/2009 19:17][--a------] C:\Windows	asks\GoogleUpdateTaskUserS-1-5-21-3245296487-552651647-840591540-1000Core.job
   [05/12/2009 20:22][--a------] C:\Windows	asks\HPCeeScheduleForjess.job
   [17/12/2009 19:08][--ah-----] C:\Windows	asks\SA.DAT
   [17/12/2009 19:06][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [22/05/2009|03:17] C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
   [26/02/2009|10:08] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
   [26/02/2009|10:21] C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
   [22/05/2009|03:16] C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
   [26/02/2009|10:15] C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
   [22/05/2009|03:13] C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
   [22/05/2009|03:16] C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
   [26/02/2009|10:13] C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
   [26/02/2009|10:21] C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
   [22/05/2009|03:18] C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
   [09/11/2009|18:20] C:\ProgramData\Adobe
   [26/02/2009|10:23] C:\ProgramData\AOL
   [02/11/2006|14:02] C:\ProgramData\Application Data 
   [22/05/2009|02:18] C:\ProgramData\Atheros
   [22/05/2009|03:22] C:\ProgramData\ATI
   [13/12/2009|20:26] C:\ProgramData\Bash Cast Date
   [03/10/2009|18:36] C:\ProgramData\Bureau 
   [13/12/2009|23:13] C:\ProgramData\CyberLink
   [02/11/2006|14:02] C:\ProgramData\Desktop 
   [02/11/2006|14:02] C:\ProgramData\Documents 
   [03/11/2009|17:30] C:\ProgramData\eMule
   [04/12/2009|18:39] C:\ProgramData\ezsidmv.dat
   [03/10/2009|18:36] C:\ProgramData\Favoris 
   [02/11/2006|14:02] C:\ProgramData\Favorites 
   [13/12/2009|21:32] C:\ProgramData\Hewlett-Packard
   [17/12/2009|19:13] C:\ProgramData\HPWALog.txt
   [07/10/2009|10:57] C:\ProgramData\LightScribe
   [03/10/2009|18:36] C:\ProgramData\Menu D‚marrer 
   [11/10/2009|20:14] C:\ProgramData\Messenger Plus!
   [13/12/2009|20:25] C:\ProgramData\Meta Knob Soft Soap
   [03/10/2009|20:43] C:\ProgramData\Microsoft
   [13/12/2009|20:27] C:\ProgramData\Microsoft Help
   [03/10/2009|18:36] C:\ProgramData\ModŠles 
   [13/12/2009|20:25] C:\ProgramData\New that site.gbpp3x
   [03/10/2009|18:46] C:\ProgramData\Norton
   [26/02/2009|09:09] C:\ProgramData\NortonInstaller
   [07/10/2009|10:30] C:\ProgramData\Office Genuine Advantage
   [03/12/2009|22:48] C:\ProgramData\Sandlot Games
   [13/12/2009|20:23] C:\ProgramData\shim less less.8othd
   [13/12/2009|20:23] C:\ProgramData\shim less less.x8hbyi
   [03/12/2009|22:35] C:\ProgramData\Skype
   [02/11/2006|14:02] C:\ProgramData\Start Menu 
   [03/10/2009|19:16] C:\ProgramData\Symantec
   [22/05/2009|03:18] C:\ProgramData\Temp
   [02/11/2006|14:02] C:\ProgramData\Templates 
   [03/12/2009|23:21] C:\ProgramData\WildTangent

   --------------------\  Listing des dossiers dans C:\Program Files

   [26/02/2009|10:08] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [08/11/2009|22:35] C:\Program Files\Adobe
   [17/12/2009|19:13] C:\Program Files\Ad-Remover
   [22/05/2009|02:19] C:\Program Files\AMD
   [26/02/2009|10:23] C:\Program Files\AOL
   [03/10/2009|19:29] C:\Program Files\Ares
   [22/05/2009|02:18] C:\Program Files\Atheros
   [22/05/2009|02:11] C:\Program Files\ATI
   [22/05/2009|02:13] C:\Program Files\ATI Technologies
   [13/12/2009|20:23] C:\Program Files\Circle Devlopement
   [03/12/2009|22:35] C:\Program Files\Common Files
   [26/02/2009|10:21] C:\Program Files\CyberLink
   [22/05/2009|02:14] C:\Program Files\DIFX
   [09/10/2009|15:52] C:\Program Files\DivX
   [26/02/2009|10:22] C:\Program Files\EasyBits For Kids
   [03/10/2009|18:36] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [22/05/2009|03:12] C:\Program Files\Hewlett-Packard
   [26/02/2009|09:07] C:\Program Files\Hewlett-Packard Company
   [26/02/2009|10:33] C:\Program Files\HP
   [26/02/2009|10:10] C:\Program Files\HP Games
   [15/12/2009|16:20] C:\Program Files\IDT
   [22/05/2009|03:17] C:\Program Files\InstallShield Installation Information
   [15/12/2009|15:29] C:\Program Files\Internet Explorer
   [26/02/2009|10:25] C:\Program Files\Java
   [22/05/2009|02:15] C:\Program Files\JMicron
   [13/12/2009|23:56] C:\Program Files\LimeWire
   [13/11/2009|17:25] C:\Program Files\Live-Player
   [13/12/2009|20:23] C:\Program Files\Messenger Plus! Live
   [22/10/2009|17:26] C:\Program Files\Microsoft
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [26/02/2009|10:07] C:\Program Files\Microsoft Office
   [05/10/2009|18:07] C:\Program Files\Microsoft Silverlight
   [03/10/2009|19:12] C:\Program Files\Microsoft SQL Server Compact Edition
   [10/11/2009|23:27] C:\Program Files\Microsoft Works
   [26/02/2009|10:07] C:\Program Files\Microsoft.NET
   [10/11/2009|23:27] C:\Program Files\Movie Maker
   [02/11/2006|13:37] C:\Program Files\MSBuild
   [05/10/2009|13:48] C:\Program Files\MSXML 4.0
   [22/05/2009|03:18] C:\Program Files\muvee Technologies
   [26/02/2009|09:09] C:\Program Files\Norton Internet Security
   [12/11/2009|21:06] C:\Program Files\Norton Support
   [26/02/2009|09:09] C:\Program Files\NortonInstaller
   [03/10/2009|18:39] C:\Program Files\Online Services
   [22/05/2009|02:16] C:\Program Files\Realtek
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [03/12/2009|22:35] C:\Program Files\Skype
   [12/11/2009|20:40] C:\Program Files\SMINST
   [06/10/2009|19:29] C:\Program Files\Symantec
   [22/05/2009|02:13] C:\Program Files\Synaptics
   [17/12/2009|00:12] C:\Program Files	rend micro
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [10/11/2009|23:27] C:\Program Files\Windows Calendar
   [10/11/2009|23:27] C:\Program Files\Windows Collaboration
   [10/11/2009|23:27] C:\Program Files\Windows Defender
   [10/11/2009|23:27] C:\Program Files\Windows Journal
   [03/10/2009|19:13] C:\Program Files\Windows Live
   [03/10/2009|19:09] C:\Program Files\Windows Live SkyDrive
   [15/12/2009|15:29] C:\Program Files\Windows Mail
   [10/11/2009|23:27] C:\Program Files\Windows Media Player
   [03/10/2009|18:36] C:\Program Files\Windows NT
   [10/11/2009|23:27] C:\Program Files\Windows Photo Gallery
   [18/11/2009|20:26] C:\Program Files\Windows Portable Devices
   [10/11/2009|23:27] C:\Program Files\Windows Sidebar

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [10/11/2009|23:28] C:\Program Files\Common Files\Adobe
   [26/02/2009|10:07] C:\Program Files\Common Files\DESIGNER
   [09/10/2009|15:52] C:\Program Files\Common Files\DivX Shared
   [26/02/2009|09:07] C:\Program Files\Common Files\InstallShield
   [22/05/2009|02:50] C:\Program Files\Common Files\LightScribe
   [22/10/2009|17:28] C:\Program Files\Common Files\microsoft shared
   [22/05/2009|03:18] C:\Program Files\Common Files\muvee Technologies
   [09/10/2009|15:52] C:\Program Files\Common Files\PX Storage Engine
   [05/10/2009|20:59] C:\Program Files\Common Files\Sandlot Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [03/12/2009|22:35] C:\Program Files\Common Files\Skype
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [03/10/2009|21:40] C:\Program Files\Common Files\Symantec Shared
   [10/11/2009|23:27] C:\Program Files\Common Files\System
   [03/10/2009|18:52] C:\Program Files\Common Files\Windows Live

   --------------------\  Process

   ( 90 Processes )

   iexplore.exe ~ [PID:3108]
   iexplore.exe ~ [PID:2636]

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\shim less less.8othd
   C:\ProgramData\New that site.gbpp3x
   C:\ProgramData\shim less less.x8hbyi
   C:\Users\jess\AppData\Local\Temp\bisA708.exe
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "tray style"="\"C:\ProgramData\shim less less.8othd\""
   "soft soap corn funk"="\"C:\ProgramData\New that site.gbpp3x\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-12-17 19:19:56
   Windows 6.0.6002 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   C:\Program Files\Live-Player
   C:\Program Files\Live-Player\data
   C:\Program Files\Live-Player\img
   C:\Program Files\Live-Player\live-player.log
   C:\Program Files\Live-Player\SkinCrafterDll.dll
   C:\Program Files\Live-Player\skins
   C:\Program Files\Live-Player\sqlite3.dll
   C:\Program Files\Live-Player\uninst.exe
   C:\Users\jess\AppData\Roaming\live-player
   C:\Users\jess\AppData\Roaming\live-player\liveplayer.s3db
   C:\Users\jess\AppData\Roaming\live-player\flv.swf
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url
   [b]==> EGDACCESS <==/b



   [F:307][D:34]-> C:\Users\jess\AppData\Local\Temp
   [F:325][D:1]-> C:\Users\jess\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:560][D:12]-> C:\Users\jess\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:6][D:4]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 17/12/2009|19:29 - Option : [1]

   --------------------\  Fin du rapport a 19:29:58
   [ UAC => 1 ]

Destrio5 · Answer

Ok pour le rapport, il montre des infections.

--> Double-clique sur Lop S&D pour le lancer.
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur) 

--> Choisis cette fois-ci l'option 2 (Suppression).

--> Ne ferme pas la fenêtre lors de la suppression !

--> Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

jessi22 · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6002 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-74 )
   BIOS : Default System BIOS
   USER : jess ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:454 Go (Free:349 Go)
   D:\ (Local Disk) - NTFS - Total:11 Go (Free:1 Go)
   E:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 17/12/2009|19:33 )

   [ UAC => 1 ]


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\ProgramData\shim less less.8othd
   Supprime! - C:\ProgramData\New that site.gbpp3x
   Supprime! - C:\ProgramData\shim less less.x8hbyi
   Supprime! - C:\Users\jess\AppData\Local\Temp\bisA708.exe
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans Local

   [08/11/2009|21:57] C:\Users\jess\AppData\Local\Adobe
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\AOL
   [03/10/2009|18:36] C:\Users\jess\AppData\Local\Application Data 
   [09/10/2009|15:08] C:\Users\jess\AppData\Local\Apps
   [17/12/2009|18:25] C:\Users\jess\AppData\Local\Ares
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\ATI
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\AtStart.txt
   [09/10/2009|15:40] C:\Users\jess\AppData\Local\CyberLink
   [09/11/2009|18:19] C:\Users\jess\AppData\Local\d3d9caps.dat
   [03/12/2009|23:45] C:\Users\jess\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [09/10/2009|15:09] C:\Users\jess\AppData\Local\Deployment
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\DSwitch.txt
   [03/11/2009|17:30] C:\Users\jess\AppData\Local\eMule
   [03/10/2009|18:42] C:\Users\jess\AppData\Local\GDIPFONTCACHEV1.DAT
   [09/10/2009|15:09] C:\Users\jess\AppData\Local\Google
   [16/12/2009|23:30] C:\Users\jess\AppData\Local\Hewlett-Packard
   [03/10/2009|18:36] C:\Users\jess\AppData\Local\Historique 
   [17/12/2009|19:05] C:\Users\jess\AppData\Local\IconCache.db
   [12/11/2009|22:20] C:\Users\jess\AppData\Local\IsolatedStorage
   [30/11/2009|18:58] C:\Users\jess\AppData\Local\Microsoft
   [03/12/2009|23:34] C:\Users\jess\AppData\Local\Microsoft Games
   [22/10/2009|17:29] C:\Users\jess\AppData\Local\Microsoft Help
   [09/10/2009|15:40] C:\Users\jess\AppData\Local\PowerCinema
   [03/10/2009|18:45] C:\Users\jess\AppData\Local\QSwitch.txt
   [12/11/2009|20:59] C:\Users\jess\AppData\Local\Symantec
   [17/12/2009|19:34] C:\Users\jess\AppData\Local\Temp
   [03/10/2009|18:36] C:\Users\jess\AppData\Local\Temporary Internet Files 
   [10/10/2009|19:12] C:\Users\jess\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [17/12/2009 19:19][--a------] C:\Windows	asks\GoogleUpdateTaskUserS-1-5-21-3245296487-552651647-840591540-1000UA.job
   [16/12/2009 19:17][--a------] C:\Windows	asks\GoogleUpdateTaskUserS-1-5-21-3245296487-552651647-840591540-1000Core.job
   [05/12/2009 20:22][--a------] C:\Windows	asks\HPCeeScheduleForjess.job
   [17/12/2009 19:08][--ah-----] C:\Windows	asks\SA.DAT
   [17/12/2009 19:06][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [22/05/2009|03:17] C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
   [26/02/2009|10:08] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
   [26/02/2009|10:21] C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
   [22/05/2009|03:16] C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
   [26/02/2009|10:15] C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
   [22/05/2009|03:13] C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
   [22/05/2009|03:16] C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
   [26/02/2009|10:13] C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
   [26/02/2009|10:21] C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
   [22/05/2009|03:18] C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
   [09/11/2009|18:20] C:\ProgramData\Adobe
   [26/02/2009|10:23] C:\ProgramData\AOL
   [02/11/2006|14:02] C:\ProgramData\Application Data 
   [22/05/2009|02:18] C:\ProgramData\Atheros
   [22/05/2009|03:22] C:\ProgramData\ATI
   [13/12/2009|20:26] C:\ProgramData\Bash Cast Date
   [03/10/2009|18:36] C:\ProgramData\Bureau 
   [13/12/2009|23:13] C:\ProgramData\CyberLink
   [02/11/2006|14:02] C:\ProgramData\Desktop 
   [02/11/2006|14:02] C:\ProgramData\Documents 
   [03/11/2009|17:30] C:\ProgramData\eMule
   [04/12/2009|18:39] C:\ProgramData\ezsidmv.dat
   [03/10/2009|18:36] C:\ProgramData\Favoris 
   [02/11/2006|14:02] C:\ProgramData\Favorites 
   [13/12/2009|21:32] C:\ProgramData\Hewlett-Packard
   [17/12/2009|19:30] C:\ProgramData\HPWALog.txt
   [07/10/2009|10:57] C:\ProgramData\LightScribe
   [03/10/2009|18:36] C:\ProgramData\Menu D‚marrer 
   [11/10/2009|20:14] C:\ProgramData\Messenger Plus!
   [13/12/2009|20:25] C:\ProgramData\Meta Knob Soft Soap
   [03/10/2009|20:43] C:\ProgramData\Microsoft
   [13/12/2009|20:27] C:\ProgramData\Microsoft Help
   [03/10/2009|18:36] C:\ProgramData\ModŠles 
   [03/10/2009|18:46] C:\ProgramData\Norton
   [26/02/2009|09:09] C:\ProgramData\NortonInstaller
   [07/10/2009|10:30] C:\ProgramData\Office Genuine Advantage
   [03/12/2009|22:48] C:\ProgramData\Sandlot Games
   [03/12/2009|22:35] C:\ProgramData\Skype
   [02/11/2006|14:02] C:\ProgramData\Start Menu 
   [03/10/2009|19:16] C:\ProgramData\Symantec
   [22/05/2009|03:18] C:\ProgramData\Temp
   [02/11/2006|14:02] C:\ProgramData\Templates 
   [03/12/2009|23:21] C:\ProgramData\WildTangent

   --------------------\  Listing des dossiers dans C:\Program Files

   [26/02/2009|10:08] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [08/11/2009|22:35] C:\Program Files\Adobe
   [17/12/2009|19:13] C:\Program Files\Ad-Remover
   [22/05/2009|02:19] C:\Program Files\AMD
   [26/02/2009|10:23] C:\Program Files\AOL
   [03/10/2009|19:29] C:\Program Files\Ares
   [22/05/2009|02:18] C:\Program Files\Atheros
   [22/05/2009|02:11] C:\Program Files\ATI
   [22/05/2009|02:13] C:\Program Files\ATI Technologies
   [13/12/2009|20:23] C:\Program Files\Circle Devlopement
   [03/12/2009|22:35] C:\Program Files\Common Files
   [26/02/2009|10:21] C:\Program Files\CyberLink
   [22/05/2009|02:14] C:\Program Files\DIFX
   [09/10/2009|15:52] C:\Program Files\DivX
   [26/02/2009|10:22] C:\Program Files\EasyBits For Kids
   [03/10/2009|18:36] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [22/05/2009|03:12] C:\Program Files\Hewlett-Packard
   [26/02/2009|09:07] C:\Program Files\Hewlett-Packard Company
   [26/02/2009|10:33] C:\Program Files\HP
   [26/02/2009|10:10] C:\Program Files\HP Games
   [15/12/2009|16:20] C:\Program Files\IDT
   [22/05/2009|03:17] C:\Program Files\InstallShield Installation Information
   [15/12/2009|15:29] C:\Program Files\Internet Explorer
   [26/02/2009|10:25] C:\Program Files\Java
   [22/05/2009|02:15] C:\Program Files\JMicron
   [13/12/2009|23:56] C:\Program Files\LimeWire
   [13/11/2009|17:25] C:\Program Files\Live-Player
   [13/12/2009|20:23] C:\Program Files\Messenger Plus! Live
   [22/10/2009|17:26] C:\Program Files\Microsoft
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [26/02/2009|10:07] C:\Program Files\Microsoft Office
   [05/10/2009|18:07] C:\Program Files\Microsoft Silverlight
   [03/10/2009|19:12] C:\Program Files\Microsoft SQL Server Compact Edition
   [10/11/2009|23:27] C:\Program Files\Microsoft Works
   [26/02/2009|10:07] C:\Program Files\Microsoft.NET
   [10/11/2009|23:27] C:\Program Files\Movie Maker
   [02/11/2006|13:37] C:\Program Files\MSBuild
   [05/10/2009|13:48] C:\Program Files\MSXML 4.0
   [22/05/2009|03:18] C:\Program Files\muvee Technologies
   [26/02/2009|09:09] C:\Program Files\Norton Internet Security
   [12/11/2009|21:06] C:\Program Files\Norton Support
   [26/02/2009|09:09] C:\Program Files\NortonInstaller
   [03/10/2009|18:39] C:\Program Files\Online Services
   [22/05/2009|02:16] C:\Program Files\Realtek
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [03/12/2009|22:35] C:\Program Files\Skype
   [12/11/2009|20:40] C:\Program Files\SMINST
   [06/10/2009|19:29] C:\Program Files\Symantec
   [22/05/2009|02:13] C:\Program Files\Synaptics
   [17/12/2009|00:12] C:\Program Files	rend micro
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [10/11/2009|23:27] C:\Program Files\Windows Calendar
   [10/11/2009|23:27] C:\Program Files\Windows Collaboration
   [10/11/2009|23:27] C:\Program Files\Windows Defender
   [10/11/2009|23:27] C:\Program Files\Windows Journal
   [03/10/2009|19:13] C:\Program Files\Windows Live
   [03/10/2009|19:09] C:\Program Files\Windows Live SkyDrive
   [15/12/2009|15:29] C:\Program Files\Windows Mail
   [10/11/2009|23:27] C:\Program Files\Windows Media Player
   [03/10/2009|18:36] C:\Program Files\Windows NT
   [10/11/2009|23:27] C:\Program Files\Windows Photo Gallery
   [18/11/2009|20:26] C:\Program Files\Windows Portable Devices
   [10/11/2009|23:27] C:\Program Files\Windows Sidebar

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [10/11/2009|23:28] C:\Program Files\Common Files\Adobe
   [26/02/2009|10:07] C:\Program Files\Common Files\DESIGNER
   [09/10/2009|15:52] C:\Program Files\Common Files\DivX Shared
   [26/02/2009|09:07] C:\Program Files\Common Files\InstallShield
   [22/05/2009|02:50] C:\Program Files\Common Files\LightScribe
   [22/10/2009|17:28] C:\Program Files\Common Files\microsoft shared
   [22/05/2009|03:18] C:\Program Files\Common Files\muvee Technologies
   [09/10/2009|15:52] C:\Program Files\Common Files\PX Storage Engine
   [05/10/2009|20:59] C:\Program Files\Common Files\Sandlot Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [03/12/2009|22:35] C:\Program Files\Common Files\Skype
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [03/10/2009|21:40] C:\Program Files\Common Files\Symantec Shared
   [10/11/2009|23:27] C:\Program Files\Common Files\System
   [03/10/2009|18:52] C:\Program Files\Common Files\Windows Live

   --------------------\  Process

   ( 92 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-12-17 19:34:59
   Windows 6.0.6002 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   C:\Users\jess\AppData\Local\Temp\etilqs_w1zyZzlHUlgjOhF9Ktnd
   scan completed successfully
   hidden processes: 0
   hidden files: 1
 
   --------------------\  Recherche d'autres infections

   C:\Program Files\Live-Player
   C:\Program Files\Live-Player\data
   C:\Program Files\Live-Player\img
   C:\Program Files\Live-Player\live-player.log
   C:\Program Files\Live-Player\SkinCrafterDll.dll
   C:\Program Files\Live-Player\skins
   C:\Program Files\Live-Player\sqlite3.dll
   C:\Program Files\Live-Player\uninst.exe
   C:\Users\jess\AppData\Roaming\live-player
   C:\Users\jess\AppData\Roaming\live-player\liveplayer.s3db
   C:\Users\jess\AppData\Roaming\live-player\flv.swf
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url
   [b]==> EGDACCESS <==/b



   [F:307][D:34]-> C:\Users\jess\AppData\Local\Temp
   [F:325][D:1]-> C:\Users\jess\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:560][D:12]-> C:\Users\jess\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:6][D:4]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 17/12/2009|19:29 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 17/12/2009|19:47 - Option : [2]

   --------------------\  Fin du rapport a 19:47:33
   [ UAC => 1 ]

Destrio5 · Answer

Bien.

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

jessi22 · Answer

Version de la base de données: 3381
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865

17/12/2009 20:39:06
mbam-log-2009-12-17 (20-39-06).txt

Type de recherche: Examen rapide
Eléments examinés: 95851
Temps écoulé: 29 minute(s), 15 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
C:\Users\jess\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live-Player (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\jess\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.

Destrio5 · Answer

--> Relance MBAM, va dans Quarantaine et supprime tout.

--> Refais un scan RSIT et poste le rapport log.

jessi22 · Answer

jai supprimé ce qui etais en quarantaine mais je vai ou pour le scan??je trouve pas

Destrio5 · Answer

http://images.malwareremoval.com/random/RSIT.exe

Je m'absente.

Utilisateur anonyme · Answer

Je suis ce sujet et je ne comprends pas pourquoi tu ne fais pas passer Navilog Willy.
Tu l'as bien vu, j'en suis sûr. Alors je pense que tu as une idée derrière la tête mais laquelle ?

Destrio5 · Answer

Car Ad-Remover s'occupe de l'infection Navipromo mais comme l'utilisateur n'arrive pas à faire le scan...

Utilisateur anonyme · Answer

Ha ok, merci.

Destrio5 · Answer

Je n'arrive pas à te retrouver un rapport pour te montrer.

A l'occasion, utilise Ad-Remover sur du Navipromo et tu verras ;)

jessi22 · Answer

et moi je fais quoi maintenant???????????????????????!!

Destrio5 · Answer

Regarde les messages 27 et 29 ;)

Ordinateur qui rame

35 réponses

Votre réponse

Newsletters