Aide pour contrôle suite infection
Fermé
stephmi78
Messages postés
206
Date d'inscription
mercredi 3 janvier 2007
Statut
Membre
Dernière intervention
12 octobre 2010
-
4 avril 2010 à 17:03
Utilisateur anonyme - 4 avril 2010 à 19:17
Utilisateur anonyme - 4 avril 2010 à 19:17
A voir également:
- Aide pour contrôle suite infection
- Controle parental pc - Guide
- Controle temperature pc - Guide
- Teamviewer controle à distance - Guide
- Controle de compte utilisateur - Guide
- Contrôle wifi - Guide
6 réponses
stephmi78
Messages postés
206
Date d'inscription
mercredi 3 janvier 2007
Statut
Membre
Dernière intervention
12 octobre 2010
7
4 avril 2010 à 17:05
4 avril 2010 à 17:05
La suite du log du RSIT :
Logfile of random's system information tool 1.06 (written by random/random)
Run by DURAND at 2010-04-03 16:14:02
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 24 GB (33%) free of 72 GB
Total RAM: 255 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:14:30, on 03/04/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\apps\ABoard\AOSD.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
C:\Documents and Settings\DURAND\Bureau\RSIT.exe
C:\Program Files\trend micro\DURAND.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Alice ADSL - {015479CC-1EE5-42FD-8386-F7410356EC63} - https://portail.free.fr/ (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\MSN Messenger\usnsvc.exe (file missing)
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
Logfile of random's system information tool 1.06 (written by random/random)
Run by DURAND at 2010-04-03 16:14:02
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 24 GB (33%) free of 72 GB
Total RAM: 255 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:14:30, on 03/04/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\apps\ABoard\AOSD.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
C:\Documents and Settings\DURAND\Bureau\RSIT.exe
C:\Program Files\trend micro\DURAND.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.gdark.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Alice ADSL - {015479CC-1EE5-42FD-8386-F7410356EC63} - https://portail.free.fr/ (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\MSN Messenger\usnsvc.exe (file missing)
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
Utilisateur anonyme
4 avril 2010 à 18:09
4 avril 2010 à 18:09
Il reste une infection LOP:
Télécharge LopSD.exe sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Clique sur le raccourci LopSD présent sur le Bureau pour lancer LopSD.
Choisis la langue F pour Français puis valide par Entrée.
Choisis l'option Recherche en saisissant 1 puis valide par Entrée
.
* Patiente jusqu'à la fin du scan
* Poste le rapport généré qui se trouve ici => (C:\lopR.txt)
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
a+
Télécharge LopSD.exe sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Clique sur le raccourci LopSD présent sur le Bureau pour lancer LopSD.
Choisis la langue F pour Français puis valide par Entrée.
Choisis l'option Recherche en saisissant 1 puis valide par Entrée
.
* Patiente jusqu'à la fin du scan
* Poste le rapport généré qui se trouve ici => (C:\lopR.txt)
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
a+
stephmi78
Messages postés
206
Date d'inscription
mercredi 3 janvier 2007
Statut
Membre
Dernière intervention
12 octobre 2010
7
4 avril 2010 à 18:37
4 avril 2010 à 18:37
Bonsoir et merci pour l'aide,
voici le log :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : DURAND ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:70 Go (Free:22 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 04/04/2010|18:30 )
--------------------\\ Listing des dossiers dans APPLIC~1
[30/09/2002|13:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/04/2010|18:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[30/09/2002|12:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[01/04/2010|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[21/05/2009|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02/04/2010|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
[01/04/2010|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[13/10/2007|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[20/03/2010|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[24/01/2006|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[17/08/2007|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
[12/05/2004|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[30/09/2002|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[03/04/2010|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sun
[04/10/2009|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[10/09/2008|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[30/09/2002|13:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/09/2002|12:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[04/03/2009|18:32] C:\DOCUME~1\DURAND\APPLIC~1\Adobe
[11/03/2006|20:03] C:\DOCUME~1\DURAND\APPLIC~1\CyberLink
[02/12/2009|19:31] C:\DOCUME~1\DURAND\APPLIC~1\dvdcss
[29/06/2007|18:29] C:\DOCUME~1\DURAND\APPLIC~1\Help
[30/09/2002|13:09] C:\DOCUME~1\DURAND\APPLIC~1\Identities
[07/10/2007|19:06] C:\DOCUME~1\DURAND\APPLIC~1\InstallShield
[07/02/2006|11:36] C:\DOCUME~1\DURAND\APPLIC~1\InterTrust
[17/02/2006|10:30] C:\DOCUME~1\DURAND\APPLIC~1\Macromedia
[01/04/2010|21:46] C:\DOCUME~1\DURAND\APPLIC~1\Malwarebytes
[01/04/2010|22:02] C:\DOCUME~1\DURAND\APPLIC~1\Microsoft
[04/10/2009|19:12] C:\DOCUME~1\DURAND\APPLIC~1\Mozilla
[07/10/2007|11:17] C:\DOCUME~1\DURAND\APPLIC~1\MSN6
[04/10/2009|19:45] C:\DOCUME~1\DURAND\APPLIC~1\OFFICE One v6
[03/04/2010|09:47] C:\DOCUME~1\DURAND\APPLIC~1\Open Bias Mapi
[31/01/2006|19:39] C:\DOCUME~1\DURAND\APPLIC~1\Real
[03/04/2010|16:38] C:\DOCUME~1\DURAND\APPLIC~1\Sun
[24/01/2006|11:25] C:\DOCUME~1\DURAND\APPLIC~1\Symantec
[27/12/2009|05:48] C:\DOCUME~1\DURAND\APPLIC~1\U3
[10/09/2008|18:42] C:\DOCUME~1\DURAND\APPLIC~1\Viewpoint
[22/02/2009|02:32] C:\DOCUME~1\DURAND\APPLIC~1\vlc
[30/09/2002|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[30/09/2002|12:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[04/04/2010 18:16][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[08/03/2009 19:08][--a------] C:\WINDOWS\tasks\Schedule Task Weekly.job
[29/06/2004 11:17][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
[04/04/2010 18:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[07/02/2006|11:36] C:\Program Files\Adobe
[01/02/2009|19:21] C:\Program Files\Ahead
[03/03/2009|22:11] C:\Program Files\Alwil Software
[12/05/2004|13:39] C:\Program Files\AOL Compagnon
[02/04/2010|19:41] C:\Program Files\a-squared Free
[01/04/2010|22:07] C:\Program Files\Avira
[04/10/2009|19:32] C:\Program Files\CCleaner
[01/04/2010|21:39] C:\Program Files\Circle Developement
[12/05/2004|13:32] C:\Program Files\Common Files
[30/09/2002|13:01] C:\Program Files\ComPlus Applications
[12/05/2004|13:40] C:\Program Files\CyberLink
[22/02/2008|19:11] C:\Program Files\eMule
[03/04/2010|16:41] C:\Program Files\Fichiers communs
[21/05/2009|21:47] C:\Program Files\Google
[07/10/2007|19:07] C:\Program Files\Hercules
[21/12/2008|15:30] C:\Program Files\InstallShield Installation Information
[04/04/2010|15:48] C:\Program Files\Internet Explorer
[17/02/2006|10:24] C:\Program Files\Inventel
[29/06/2004|12:03] C:\Program Files\ISSENDIS
[03/04/2010|16:39] C:\Program Files\Java
[02/04/2010|19:46] C:\Program Files\Malwarebytes' Anti-Malware
[04/04/2010|15:55] C:\Program Files\messenger
[18/03/2010|21:50] C:\Program Files\microsoft frontpage
[04/04/2010|16:05] C:\Program Files\Movie Maker
[04/04/2010|18:28] C:\Program Files\Mozilla Firefox
[04/04/2010|15:48] C:\Program Files\msn
[07/10/2007|13:48] C:\Program Files\MSN Apps
[18/03/2010|21:50] C:\Program Files\msn gaming zone
[01/04/2010|22:47] C:\Program Files\MSXML 4.0
[02/04/2010|17:24] C:\Program Files\MyDefrag v4.2.9
[04/04/2010|15:42] C:\Program Files\NetMeeting
[05/10/2009|00:16] C:\Program Files\Norton AntiVirus
[12/05/2004|13:39] C:\Program Files\Nullsoft
[29/06/2004|12:03] C:\Program Files\OFFICE One Fonts
[04/10/2009|19:52] C:\Program Files\OFFICE ONE6.5
[22/02/2009|02:42] C:\Program Files\Open Bias Mapi
[17/08/2007|16:06] C:\Program Files\OrangeHSS
[04/04/2010|16:03] C:\Program Files\Outlook Express
[30/11/2008|23:47] C:\Program Files\QuickTime
[12/05/2004|13:39] C:\Program Files\Real
[01/04/2010|21:50] C:\Program Files\RegCleaner
[17/08/2007|15:16] C:\Program Files\Securitoo
[30/09/2002|13:00] C:\Program Files\Services en ligne
[12/05/2004|13:42] C:\Program Files\Sonic
[04/10/2009|18:51] C:\Program Files\Symantec
[03/04/2010|16:14] C:\Program Files\Trend Micro
[30/09/2002|13:09] C:\Program Files\Uninstall Information
[14/12/2008|22:32] C:\Program Files\VideoLAN
[12/05/2004|13:39] C:\Program Files\Viewpoint
[01/04/2010|21:39] C:\Program Files\VLC
[07/10/2007|14:38] C:\Program Files\Windows Live
[04/04/2010|15:49] C:\Program Files\Windows Media Player
[04/04/2010|15:42] C:\Program Files\Windows NT
[25/01/2006|10:28] C:\Program Files\WindowsUpdate
[30/09/2002|13:05] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[09/06/2006|13:28] C:\Program Files\Fichiers communs\Adobe
[01/02/2009|19:20] C:\Program Files\Fichiers communs\Ahead
[12/05/2004|13:39] C:\Program Files\Fichiers communs\AOL
[12/05/2004|13:39] C:\Program Files\Fichiers communs\aolshare
[29/06/2004|11:29] C:\Program Files\Fichiers communs\Designer
[17/08/2007|16:02] C:\Program Files\Fichiers communs\France Telecom
[10/10/2007|17:43] C:\Program Files\Fichiers communs\InstallShield
[03/04/2010|16:41] C:\Program Files\Fichiers communs\Java
[10/10/2007|17:47] C:\Program Files\Fichiers communs\Logitech
[01/04/2010|22:04] C:\Program Files\Fichiers communs\Microsoft Shared
[30/09/2002|13:02] C:\Program Files\Fichiers communs\MSSoap
[30/09/2002|12:55] C:\Program Files\Fichiers communs\ODBC
[12/05/2004|13:42] C:\Program Files\Fichiers communs\Real
[30/09/2002|13:02] C:\Program Files\Fichiers communs\Services
[30/09/2002|12:55] C:\Program Files\Fichiers communs\SpeechEngines
[12/05/2004|13:42] C:\Program Files\Fichiers communs\SureThing Shared
[05/10/2009|00:16] C:\Program Files\Fichiers communs\Symantec Shared
[04/04/2010|15:42] C:\Program Files\Fichiers communs\System
[12/05/2004|13:40] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[12/05/2004|13:42] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 41 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
C:\Program Files\Circle Developement
C:\DOCUME~1\DURAND\Cookies\durand@d2.advertserve[1].txt
C:\DOCUME~1\DURAND\Cookies\durand@adultfriendfinder[2].txt
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 72 [ 70 ## added by CiD ]
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-04 18:31:48
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 134
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:23][D:4]-> C:\DOCUME~1\DURAND\LOCALS~1\Temp
[F:74][D:0]-> C:\DOCUME~1\DURAND\Cookies
[F:2449][D:9]-> C:\DOCUME~1\DURAND\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 04/04/2010|18:33 - Option : [1]
--------------------\\ Fin du rapport a 18:33:04
voici le log :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : DURAND ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:70 Go (Free:22 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 04/04/2010|18:30 )
--------------------\\ Listing des dossiers dans APPLIC~1
[30/09/2002|13:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/04/2010|18:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[30/09/2002|12:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[01/04/2010|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[21/05/2009|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02/04/2010|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
[01/04/2010|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[13/10/2007|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[20/03/2010|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[24/01/2006|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[17/08/2007|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
[12/05/2004|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[30/09/2002|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[03/04/2010|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sun
[04/10/2009|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[10/09/2008|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[30/09/2002|13:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/09/2002|12:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[04/03/2009|18:32] C:\DOCUME~1\DURAND\APPLIC~1\Adobe
[11/03/2006|20:03] C:\DOCUME~1\DURAND\APPLIC~1\CyberLink
[02/12/2009|19:31] C:\DOCUME~1\DURAND\APPLIC~1\dvdcss
[29/06/2007|18:29] C:\DOCUME~1\DURAND\APPLIC~1\Help
[30/09/2002|13:09] C:\DOCUME~1\DURAND\APPLIC~1\Identities
[07/10/2007|19:06] C:\DOCUME~1\DURAND\APPLIC~1\InstallShield
[07/02/2006|11:36] C:\DOCUME~1\DURAND\APPLIC~1\InterTrust
[17/02/2006|10:30] C:\DOCUME~1\DURAND\APPLIC~1\Macromedia
[01/04/2010|21:46] C:\DOCUME~1\DURAND\APPLIC~1\Malwarebytes
[01/04/2010|22:02] C:\DOCUME~1\DURAND\APPLIC~1\Microsoft
[04/10/2009|19:12] C:\DOCUME~1\DURAND\APPLIC~1\Mozilla
[07/10/2007|11:17] C:\DOCUME~1\DURAND\APPLIC~1\MSN6
[04/10/2009|19:45] C:\DOCUME~1\DURAND\APPLIC~1\OFFICE One v6
[03/04/2010|09:47] C:\DOCUME~1\DURAND\APPLIC~1\Open Bias Mapi
[31/01/2006|19:39] C:\DOCUME~1\DURAND\APPLIC~1\Real
[03/04/2010|16:38] C:\DOCUME~1\DURAND\APPLIC~1\Sun
[24/01/2006|11:25] C:\DOCUME~1\DURAND\APPLIC~1\Symantec
[27/12/2009|05:48] C:\DOCUME~1\DURAND\APPLIC~1\U3
[10/09/2008|18:42] C:\DOCUME~1\DURAND\APPLIC~1\Viewpoint
[22/02/2009|02:32] C:\DOCUME~1\DURAND\APPLIC~1\vlc
[30/09/2002|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[30/09/2002|12:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[04/04/2010 18:16][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[08/03/2009 19:08][--a------] C:\WINDOWS\tasks\Schedule Task Weekly.job
[29/06/2004 11:17][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
[04/04/2010 18:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[07/02/2006|11:36] C:\Program Files\Adobe
[01/02/2009|19:21] C:\Program Files\Ahead
[03/03/2009|22:11] C:\Program Files\Alwil Software
[12/05/2004|13:39] C:\Program Files\AOL Compagnon
[02/04/2010|19:41] C:\Program Files\a-squared Free
[01/04/2010|22:07] C:\Program Files\Avira
[04/10/2009|19:32] C:\Program Files\CCleaner
[01/04/2010|21:39] C:\Program Files\Circle Developement
[12/05/2004|13:32] C:\Program Files\Common Files
[30/09/2002|13:01] C:\Program Files\ComPlus Applications
[12/05/2004|13:40] C:\Program Files\CyberLink
[22/02/2008|19:11] C:\Program Files\eMule
[03/04/2010|16:41] C:\Program Files\Fichiers communs
[21/05/2009|21:47] C:\Program Files\Google
[07/10/2007|19:07] C:\Program Files\Hercules
[21/12/2008|15:30] C:\Program Files\InstallShield Installation Information
[04/04/2010|15:48] C:\Program Files\Internet Explorer
[17/02/2006|10:24] C:\Program Files\Inventel
[29/06/2004|12:03] C:\Program Files\ISSENDIS
[03/04/2010|16:39] C:\Program Files\Java
[02/04/2010|19:46] C:\Program Files\Malwarebytes' Anti-Malware
[04/04/2010|15:55] C:\Program Files\messenger
[18/03/2010|21:50] C:\Program Files\microsoft frontpage
[04/04/2010|16:05] C:\Program Files\Movie Maker
[04/04/2010|18:28] C:\Program Files\Mozilla Firefox
[04/04/2010|15:48] C:\Program Files\msn
[07/10/2007|13:48] C:\Program Files\MSN Apps
[18/03/2010|21:50] C:\Program Files\msn gaming zone
[01/04/2010|22:47] C:\Program Files\MSXML 4.0
[02/04/2010|17:24] C:\Program Files\MyDefrag v4.2.9
[04/04/2010|15:42] C:\Program Files\NetMeeting
[05/10/2009|00:16] C:\Program Files\Norton AntiVirus
[12/05/2004|13:39] C:\Program Files\Nullsoft
[29/06/2004|12:03] C:\Program Files\OFFICE One Fonts
[04/10/2009|19:52] C:\Program Files\OFFICE ONE6.5
[22/02/2009|02:42] C:\Program Files\Open Bias Mapi
[17/08/2007|16:06] C:\Program Files\OrangeHSS
[04/04/2010|16:03] C:\Program Files\Outlook Express
[30/11/2008|23:47] C:\Program Files\QuickTime
[12/05/2004|13:39] C:\Program Files\Real
[01/04/2010|21:50] C:\Program Files\RegCleaner
[17/08/2007|15:16] C:\Program Files\Securitoo
[30/09/2002|13:00] C:\Program Files\Services en ligne
[12/05/2004|13:42] C:\Program Files\Sonic
[04/10/2009|18:51] C:\Program Files\Symantec
[03/04/2010|16:14] C:\Program Files\Trend Micro
[30/09/2002|13:09] C:\Program Files\Uninstall Information
[14/12/2008|22:32] C:\Program Files\VideoLAN
[12/05/2004|13:39] C:\Program Files\Viewpoint
[01/04/2010|21:39] C:\Program Files\VLC
[07/10/2007|14:38] C:\Program Files\Windows Live
[04/04/2010|15:49] C:\Program Files\Windows Media Player
[04/04/2010|15:42] C:\Program Files\Windows NT
[25/01/2006|10:28] C:\Program Files\WindowsUpdate
[30/09/2002|13:05] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[09/06/2006|13:28] C:\Program Files\Fichiers communs\Adobe
[01/02/2009|19:20] C:\Program Files\Fichiers communs\Ahead
[12/05/2004|13:39] C:\Program Files\Fichiers communs\AOL
[12/05/2004|13:39] C:\Program Files\Fichiers communs\aolshare
[29/06/2004|11:29] C:\Program Files\Fichiers communs\Designer
[17/08/2007|16:02] C:\Program Files\Fichiers communs\France Telecom
[10/10/2007|17:43] C:\Program Files\Fichiers communs\InstallShield
[03/04/2010|16:41] C:\Program Files\Fichiers communs\Java
[10/10/2007|17:47] C:\Program Files\Fichiers communs\Logitech
[01/04/2010|22:04] C:\Program Files\Fichiers communs\Microsoft Shared
[30/09/2002|13:02] C:\Program Files\Fichiers communs\MSSoap
[30/09/2002|12:55] C:\Program Files\Fichiers communs\ODBC
[12/05/2004|13:42] C:\Program Files\Fichiers communs\Real
[30/09/2002|13:02] C:\Program Files\Fichiers communs\Services
[30/09/2002|12:55] C:\Program Files\Fichiers communs\SpeechEngines
[12/05/2004|13:42] C:\Program Files\Fichiers communs\SureThing Shared
[05/10/2009|00:16] C:\Program Files\Fichiers communs\Symantec Shared
[04/04/2010|15:42] C:\Program Files\Fichiers communs\System
[12/05/2004|13:40] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[12/05/2004|13:42] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 41 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
C:\Program Files\Circle Developement
C:\DOCUME~1\DURAND\Cookies\durand@d2.advertserve[1].txt
C:\DOCUME~1\DURAND\Cookies\durand@adultfriendfinder[2].txt
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 72 [ 70 ## added by CiD ]
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-04 18:31:48
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 134
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:23][D:4]-> C:\DOCUME~1\DURAND\LOCALS~1\Temp
[F:74][D:0]-> C:\DOCUME~1\DURAND\Cookies
[F:2449][D:9]-> C:\DOCUME~1\DURAND\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 04/04/2010|18:33 - Option : [1]
--------------------\\ Fin du rapport a 18:33:04
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
stephmi78
Messages postés
206
Date d'inscription
mercredi 3 janvier 2007
Statut
Membre
Dernière intervention
12 octobre 2010
7
4 avril 2010 à 19:03
4 avril 2010 à 19:03
Et voilà le 2ème
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : DURAND ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:70 Go (Free:22 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 04/04/2010|18:46 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\DURAND\Cookies\durand@d2.advertserve[1].txt
Supprime! - C:\DOCUME~1\DURAND\Cookies\durand@adultfriendfinder[2].txt
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Supprime! - C:\Program Files\Viewpoint
Supprime! - C:\DOCUME~1\DURAND\APPLIC~1\Viewpoint
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[30/09/2002|13:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/04/2010|18:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[30/09/2002|12:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[01/04/2010|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[21/05/2009|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[01/04/2010|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[13/10/2007|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[20/03/2010|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[24/01/2006|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[17/08/2007|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
[12/05/2004|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[30/09/2002|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[03/04/2010|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sun
[04/10/2009|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[30/09/2002|13:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/09/2002|12:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[04/03/2009|18:32] C:\DOCUME~1\DURAND\APPLIC~1\Adobe
[11/03/2006|20:03] C:\DOCUME~1\DURAND\APPLIC~1\CyberLink
[02/12/2009|19:31] C:\DOCUME~1\DURAND\APPLIC~1\dvdcss
[29/06/2007|18:29] C:\DOCUME~1\DURAND\APPLIC~1\Help
[30/09/2002|13:09] C:\DOCUME~1\DURAND\APPLIC~1\Identities
[07/10/2007|19:06] C:\DOCUME~1\DURAND\APPLIC~1\InstallShield
[07/02/2006|11:36] C:\DOCUME~1\DURAND\APPLIC~1\InterTrust
[17/02/2006|10:30] C:\DOCUME~1\DURAND\APPLIC~1\Macromedia
[01/04/2010|21:46] C:\DOCUME~1\DURAND\APPLIC~1\Malwarebytes
[01/04/2010|22:02] C:\DOCUME~1\DURAND\APPLIC~1\Microsoft
[04/10/2009|19:12] C:\DOCUME~1\DURAND\APPLIC~1\Mozilla
[07/10/2007|11:17] C:\DOCUME~1\DURAND\APPLIC~1\MSN6
[04/10/2009|19:45] C:\DOCUME~1\DURAND\APPLIC~1\OFFICE One v6
[03/04/2010|09:47] C:\DOCUME~1\DURAND\APPLIC~1\Open Bias Mapi
[31/01/2006|19:39] C:\DOCUME~1\DURAND\APPLIC~1\Real
[03/04/2010|16:38] C:\DOCUME~1\DURAND\APPLIC~1\Sun
[24/01/2006|11:25] C:\DOCUME~1\DURAND\APPLIC~1\Symantec
[27/12/2009|05:48] C:\DOCUME~1\DURAND\APPLIC~1\U3
[22/02/2009|02:32] C:\DOCUME~1\DURAND\APPLIC~1\vlc
[30/09/2002|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[30/09/2002|12:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[04/04/2010 18:16][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[08/03/2009 19:08][--a------] C:\WINDOWS\tasks\Schedule Task Weekly.job
[29/06/2004 11:17][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
[04/04/2010 18:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[07/02/2006|11:36] C:\Program Files\Adobe
[01/02/2009|19:21] C:\Program Files\Ahead
[03/03/2009|22:11] C:\Program Files\Alwil Software
[12/05/2004|13:39] C:\Program Files\AOL Compagnon
[02/04/2010|19:41] C:\Program Files\a-squared Free
[01/04/2010|22:07] C:\Program Files\Avira
[04/10/2009|19:32] C:\Program Files\CCleaner
[12/05/2004|13:32] C:\Program Files\Common Files
[30/09/2002|13:01] C:\Program Files\ComPlus Applications
[12/05/2004|13:40] C:\Program Files\CyberLink
[22/02/2008|19:11] C:\Program Files\eMule
[03/04/2010|16:41] C:\Program Files\Fichiers communs
[21/05/2009|21:47] C:\Program Files\Google
[07/10/2007|19:07] C:\Program Files\Hercules
[21/12/2008|15:30] C:\Program Files\InstallShield Installation Information
[04/04/2010|15:48] C:\Program Files\Internet Explorer
[17/02/2006|10:24] C:\Program Files\Inventel
[29/06/2004|12:03] C:\Program Files\ISSENDIS
[03/04/2010|16:39] C:\Program Files\Java
[02/04/2010|19:46] C:\Program Files\Malwarebytes' Anti-Malware
[04/04/2010|15:55] C:\Program Files\messenger
[18/03/2010|21:50] C:\Program Files\microsoft frontpage
[04/04/2010|16:05] C:\Program Files\Movie Maker
[04/04/2010|18:36] C:\Program Files\Mozilla Firefox
[04/04/2010|15:48] C:\Program Files\msn
[07/10/2007|13:48] C:\Program Files\MSN Apps
[18/03/2010|21:50] C:\Program Files\msn gaming zone
[01/04/2010|22:47] C:\Program Files\MSXML 4.0
[02/04/2010|17:24] C:\Program Files\MyDefrag v4.2.9
[04/04/2010|15:42] C:\Program Files\NetMeeting
[05/10/2009|00:16] C:\Program Files\Norton AntiVirus
[12/05/2004|13:39] C:\Program Files\Nullsoft
[29/06/2004|12:03] C:\Program Files\OFFICE One Fonts
[04/10/2009|19:52] C:\Program Files\OFFICE ONE6.5
[22/02/2009|02:42] C:\Program Files\Open Bias Mapi
[17/08/2007|16:06] C:\Program Files\OrangeHSS
[04/04/2010|16:03] C:\Program Files\Outlook Express
[30/11/2008|23:47] C:\Program Files\QuickTime
[12/05/2004|13:39] C:\Program Files\Real
[01/04/2010|21:50] C:\Program Files\RegCleaner
[17/08/2007|15:16] C:\Program Files\Securitoo
[30/09/2002|13:00] C:\Program Files\Services en ligne
[12/05/2004|13:42] C:\Program Files\Sonic
[04/10/2009|18:51] C:\Program Files\Symantec
[03/04/2010|16:14] C:\Program Files\Trend Micro
[30/09/2002|13:09] C:\Program Files\Uninstall Information
[14/12/2008|22:32] C:\Program Files\VideoLAN
[01/04/2010|21:39] C:\Program Files\VLC
[07/10/2007|14:38] C:\Program Files\Windows Live
[04/04/2010|15:49] C:\Program Files\Windows Media Player
[04/04/2010|15:42] C:\Program Files\Windows NT
[25/01/2006|10:28] C:\Program Files\WindowsUpdate
[30/09/2002|13:05] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[09/06/2006|13:28] C:\Program Files\Fichiers communs\Adobe
[01/02/2009|19:20] C:\Program Files\Fichiers communs\Ahead
[12/05/2004|13:39] C:\Program Files\Fichiers communs\AOL
[12/05/2004|13:39] C:\Program Files\Fichiers communs\aolshare
[29/06/2004|11:29] C:\Program Files\Fichiers communs\Designer
[17/08/2007|16:02] C:\Program Files\Fichiers communs\France Telecom
[10/10/2007|17:43] C:\Program Files\Fichiers communs\InstallShield
[03/04/2010|16:41] C:\Program Files\Fichiers communs\Java
[10/10/2007|17:47] C:\Program Files\Fichiers communs\Logitech
[01/04/2010|22:04] C:\Program Files\Fichiers communs\Microsoft Shared
[30/09/2002|13:02] C:\Program Files\Fichiers communs\MSSoap
[30/09/2002|12:55] C:\Program Files\Fichiers communs\ODBC
[12/05/2004|13:42] C:\Program Files\Fichiers communs\Real
[30/09/2002|13:02] C:\Program Files\Fichiers communs\Services
[30/09/2002|12:55] C:\Program Files\Fichiers communs\SpeechEngines
[12/05/2004|13:42] C:\Program Files\Fichiers communs\SureThing Shared
[05/10/2009|00:16] C:\Program Files\Fichiers communs\Symantec Shared
[04/04/2010|15:42] C:\Program Files\Fichiers communs\System
[12/05/2004|13:40] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[12/05/2004|13:42] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-04 18:47:26
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 134
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:23][D:4]-> C:\DOCUME~1\DURAND\LOCALS~1\Temp
[F:72][D:0]-> C:\DOCUME~1\DURAND\Cookies
[F:2449][D:9]-> C:\DOCUME~1\DURAND\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 04/04/2010|18:33 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 04/04/2010|18:48 - Option : [2]
--------------------\\ Fin du rapport a 18:48:23
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : DURAND ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:70 Go (Free:22 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 04/04/2010|18:46 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\DURAND\Cookies\durand@d2.advertserve[1].txt
Supprime! - C:\DOCUME~1\DURAND\Cookies\durand@adultfriendfinder[2].txt
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Supprime! - C:\Program Files\Viewpoint
Supprime! - C:\DOCUME~1\DURAND\APPLIC~1\Viewpoint
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[30/09/2002|13:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/04/2010|18:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[30/09/2002|12:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[01/04/2010|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[21/05/2009|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[01/04/2010|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[13/10/2007|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[20/03/2010|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[24/01/2006|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[17/08/2007|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
[12/05/2004|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[30/09/2002|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[03/04/2010|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sun
[04/10/2009|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[30/09/2002|13:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/09/2002|12:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[12/05/2004|13:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[04/03/2009|18:32] C:\DOCUME~1\DURAND\APPLIC~1\Adobe
[11/03/2006|20:03] C:\DOCUME~1\DURAND\APPLIC~1\CyberLink
[02/12/2009|19:31] C:\DOCUME~1\DURAND\APPLIC~1\dvdcss
[29/06/2007|18:29] C:\DOCUME~1\DURAND\APPLIC~1\Help
[30/09/2002|13:09] C:\DOCUME~1\DURAND\APPLIC~1\Identities
[07/10/2007|19:06] C:\DOCUME~1\DURAND\APPLIC~1\InstallShield
[07/02/2006|11:36] C:\DOCUME~1\DURAND\APPLIC~1\InterTrust
[17/02/2006|10:30] C:\DOCUME~1\DURAND\APPLIC~1\Macromedia
[01/04/2010|21:46] C:\DOCUME~1\DURAND\APPLIC~1\Malwarebytes
[01/04/2010|22:02] C:\DOCUME~1\DURAND\APPLIC~1\Microsoft
[04/10/2009|19:12] C:\DOCUME~1\DURAND\APPLIC~1\Mozilla
[07/10/2007|11:17] C:\DOCUME~1\DURAND\APPLIC~1\MSN6
[04/10/2009|19:45] C:\DOCUME~1\DURAND\APPLIC~1\OFFICE One v6
[03/04/2010|09:47] C:\DOCUME~1\DURAND\APPLIC~1\Open Bias Mapi
[31/01/2006|19:39] C:\DOCUME~1\DURAND\APPLIC~1\Real
[03/04/2010|16:38] C:\DOCUME~1\DURAND\APPLIC~1\Sun
[24/01/2006|11:25] C:\DOCUME~1\DURAND\APPLIC~1\Symantec
[27/12/2009|05:48] C:\DOCUME~1\DURAND\APPLIC~1\U3
[22/02/2009|02:32] C:\DOCUME~1\DURAND\APPLIC~1\vlc
[30/09/2002|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[30/09/2002|12:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[04/04/2010 18:16][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[08/03/2009 19:08][--a------] C:\WINDOWS\tasks\Schedule Task Weekly.job
[29/06/2004 11:17][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
[04/04/2010 18:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[07/02/2006|11:36] C:\Program Files\Adobe
[01/02/2009|19:21] C:\Program Files\Ahead
[03/03/2009|22:11] C:\Program Files\Alwil Software
[12/05/2004|13:39] C:\Program Files\AOL Compagnon
[02/04/2010|19:41] C:\Program Files\a-squared Free
[01/04/2010|22:07] C:\Program Files\Avira
[04/10/2009|19:32] C:\Program Files\CCleaner
[12/05/2004|13:32] C:\Program Files\Common Files
[30/09/2002|13:01] C:\Program Files\ComPlus Applications
[12/05/2004|13:40] C:\Program Files\CyberLink
[22/02/2008|19:11] C:\Program Files\eMule
[03/04/2010|16:41] C:\Program Files\Fichiers communs
[21/05/2009|21:47] C:\Program Files\Google
[07/10/2007|19:07] C:\Program Files\Hercules
[21/12/2008|15:30] C:\Program Files\InstallShield Installation Information
[04/04/2010|15:48] C:\Program Files\Internet Explorer
[17/02/2006|10:24] C:\Program Files\Inventel
[29/06/2004|12:03] C:\Program Files\ISSENDIS
[03/04/2010|16:39] C:\Program Files\Java
[02/04/2010|19:46] C:\Program Files\Malwarebytes' Anti-Malware
[04/04/2010|15:55] C:\Program Files\messenger
[18/03/2010|21:50] C:\Program Files\microsoft frontpage
[04/04/2010|16:05] C:\Program Files\Movie Maker
[04/04/2010|18:36] C:\Program Files\Mozilla Firefox
[04/04/2010|15:48] C:\Program Files\msn
[07/10/2007|13:48] C:\Program Files\MSN Apps
[18/03/2010|21:50] C:\Program Files\msn gaming zone
[01/04/2010|22:47] C:\Program Files\MSXML 4.0
[02/04/2010|17:24] C:\Program Files\MyDefrag v4.2.9
[04/04/2010|15:42] C:\Program Files\NetMeeting
[05/10/2009|00:16] C:\Program Files\Norton AntiVirus
[12/05/2004|13:39] C:\Program Files\Nullsoft
[29/06/2004|12:03] C:\Program Files\OFFICE One Fonts
[04/10/2009|19:52] C:\Program Files\OFFICE ONE6.5
[22/02/2009|02:42] C:\Program Files\Open Bias Mapi
[17/08/2007|16:06] C:\Program Files\OrangeHSS
[04/04/2010|16:03] C:\Program Files\Outlook Express
[30/11/2008|23:47] C:\Program Files\QuickTime
[12/05/2004|13:39] C:\Program Files\Real
[01/04/2010|21:50] C:\Program Files\RegCleaner
[17/08/2007|15:16] C:\Program Files\Securitoo
[30/09/2002|13:00] C:\Program Files\Services en ligne
[12/05/2004|13:42] C:\Program Files\Sonic
[04/10/2009|18:51] C:\Program Files\Symantec
[03/04/2010|16:14] C:\Program Files\Trend Micro
[30/09/2002|13:09] C:\Program Files\Uninstall Information
[14/12/2008|22:32] C:\Program Files\VideoLAN
[01/04/2010|21:39] C:\Program Files\VLC
[07/10/2007|14:38] C:\Program Files\Windows Live
[04/04/2010|15:49] C:\Program Files\Windows Media Player
[04/04/2010|15:42] C:\Program Files\Windows NT
[25/01/2006|10:28] C:\Program Files\WindowsUpdate
[30/09/2002|13:05] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[09/06/2006|13:28] C:\Program Files\Fichiers communs\Adobe
[01/02/2009|19:20] C:\Program Files\Fichiers communs\Ahead
[12/05/2004|13:39] C:\Program Files\Fichiers communs\AOL
[12/05/2004|13:39] C:\Program Files\Fichiers communs\aolshare
[29/06/2004|11:29] C:\Program Files\Fichiers communs\Designer
[17/08/2007|16:02] C:\Program Files\Fichiers communs\France Telecom
[10/10/2007|17:43] C:\Program Files\Fichiers communs\InstallShield
[03/04/2010|16:41] C:\Program Files\Fichiers communs\Java
[10/10/2007|17:47] C:\Program Files\Fichiers communs\Logitech
[01/04/2010|22:04] C:\Program Files\Fichiers communs\Microsoft Shared
[30/09/2002|13:02] C:\Program Files\Fichiers communs\MSSoap
[30/09/2002|12:55] C:\Program Files\Fichiers communs\ODBC
[12/05/2004|13:42] C:\Program Files\Fichiers communs\Real
[30/09/2002|13:02] C:\Program Files\Fichiers communs\Services
[30/09/2002|12:55] C:\Program Files\Fichiers communs\SpeechEngines
[12/05/2004|13:42] C:\Program Files\Fichiers communs\SureThing Shared
[05/10/2009|00:16] C:\Program Files\Fichiers communs\Symantec Shared
[04/04/2010|15:42] C:\Program Files\Fichiers communs\System
[12/05/2004|13:40] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[12/05/2004|13:42] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-04 18:47:26
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 134
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:23][D:4]-> C:\DOCUME~1\DURAND\LOCALS~1\Temp
[F:72][D:0]-> C:\DOCUME~1\DURAND\Cookies
[F:2449][D:9]-> C:\DOCUME~1\DURAND\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 04/04/2010|18:33 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 04/04/2010|18:48 - Option : [2]
--------------------\\ Fin du rapport a 18:48:23
Utilisateur anonyme
Modifié par archet9 le 4/04/2010 à 19:25
Modifié par archet9 le 4/04/2010 à 19:25
Ok
Vas ds C:\Program Files\trend micro\DURAND.exe ,et clic sur DURAND.exe
Cela va relancer hijackthis....
Au menu principal choisis "Do a system scan only"
et coches les lignes suivantes:
TUTO animé
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = <http://g.msn.fr/0SEFRFR/SAOS02>
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
Appuies sur FIX CHECKED et redémarres le pc
ENSUITE:
A mettre à jour,
XP Service Pack 2 ==> SP3
https://www.commentcamarche.net/telecharger/systemes-d-exploitation/20759-sp3-windows-xp/
Version MSIE: Internet Explorer v6.00 ==> v8.00
https://www.commentcamarche.net/telecharger/web-internet/12477-internet-explorer-11/
Adobe Acrobat Reader 5.0 ==> 9.3
https://www.commentcamarche.net/telecharger/bureautique/2625-adobe-reader/
PUIS:
Refais un RSIT et colles le rapport (tu n'en auras qu'un cette fois ,c'est normal !)
a+
........
Vas ds C:\Program Files\trend micro\DURAND.exe ,et clic sur DURAND.exe
Cela va relancer hijackthis....
Au menu principal choisis "Do a system scan only"
et coches les lignes suivantes:
TUTO animé
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = <http://g.msn.fr/0SEFRFR/SAOS02>
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
Appuies sur FIX CHECKED et redémarres le pc
ENSUITE:
A mettre à jour,
XP Service Pack 2 ==> SP3
https://www.commentcamarche.net/telecharger/systemes-d-exploitation/20759-sp3-windows-xp/
Version MSIE: Internet Explorer v6.00 ==> v8.00
https://www.commentcamarche.net/telecharger/web-internet/12477-internet-explorer-11/
Adobe Acrobat Reader 5.0 ==> 9.3
https://www.commentcamarche.net/telecharger/bureautique/2625-adobe-reader/
PUIS:
Refais un RSIT et colles le rapport (tu n'en auras qu'un cette fois ,c'est normal !)
a+
........