Pub Résolu

Question

Bjr, je suis rempli de publicités intempestives,
pourriez vous m'aider pour supprimer ce genre de chose merci
J'ai fait un scan HighJack et je joinn le rapport
Merci
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\VTTimer.exe
C:\Program Files\Eset
od32kui.exe
C:\Program Files\Office Mouse\moffice.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Office Mouse\MOUSE32A.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Antipub\antipub.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Eset
od32krn.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Programme 1\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.teledisnet.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset
od32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Office Mouse\moffice.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [DateCompAcidPlus] C:\Documents and Settings\All Users\Application Data\Spam store date comp\anti frag.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [I downloaded pirated Software from P2P ] FIFA Football 2007
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [THIS SKIP] C:\DOCUME~1\Eric\APPLIC~1\PUREOK~1\axis mess.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset
od32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Utilisateur anonyme · Answer

Salut

Télécharge lopxp :
http://perso.numericable.fr/~altshift/Info/Fichiers/lopxpMH2.zip 

dézippe-le sur ton bureau puis double-clic sur le fichier "lopxpmh.bat"
quand il à terminé, un rapport s'ouvre : fait un copier-coller puis mets le ici

^^Marie^^ · Answer

SAlut

Shareaza ==> t'étonnes pas d'avoir des merdouilles de temps en temps..........


Télécharge Blacklight(de F-Secure) a l’une des 2 adresses : 
https://www.f-secure.com/en 
https://www.f-secure.com/en 

et sauvegarde le sur ton Bureau. 

Double-clique blbeta.exeet accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next 

Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

Copie/colle le rapport

A++

^^Marie^^ · Answer

Salut

Regarde sur le tuto (clik sur l'image)

http://ww1.tutmarks.com/story.php?title=Tutorial-FSecure-BlackLight

Eric4111 · Answer

voici le resultat
Encore merci
Bonne année

Eric - 06-12-30 16:19:42,15 Service Pack 1
ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Eric\Mes documents"

((((((((((((((((((((((((((((((( Files Created from 2006-11-30 to 2006-12-30 ))))))))))))))))))))))))))))))))))

2006-12-30 10:43 <REP> d-------- C:\Program Files\CCleaner
2006-12-24 09:15 0 --a------ C:\mxtiwrag.exe
2006-12-24 09:15 0 --a------ C:\flyl.exe
2006-12-24 09:15 0 --a------ C:\cvptc.exe
2006-12-24 09:14 0 --a------ C:\vuyd.exe
2006-12-24 09:14 0 --a------ C:\rvkvek.exe
2006-12-24 09:14 0 --a------ C:\prwtuby.exe
2006-12-24 09:14 0 --a------ C:\dsvfldub.exe
2006-12-24 09:13 0 --a------ C:\cvfogsx.exe
2006-12-23 22:53 <REP> d-------- C:\Program Files\K!
2006-12-23 22:34 194,133 --a------ C:\WINDOWS\patcher.exe
2006-12-22 12:13 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys
2006-12-22 12:13 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys
2006-12-22 12:13 <REP> d-------- C:\Program Files\Alcohol Soft
2006-12-22 11:41 0 --a------ C:\wuxlbsl.exe
2006-12-22 11:41 0 --a------ C:\jojg.exe
2006-12-22 11:40 0 --a------ C:\yidknjo.exe
2006-12-22 11:40 0 --a------ C:\rtos.exe
2006-12-22 11:40 0 --a------ C:\rrhedgnt.exe
2006-12-22 11:40 0 --a------ C:\Program Files\cqwydcgt.exe
2006-12-22 11:40 0 --a------ C:\kosjlqeb.exe
2006-12-22 11:39 280,692 --a------ C:\WINDOWS\dr.exe
2006-12-22 11:39 280,692 --a------ C:\Program Files\dr.exe
2006-12-22 11:39 279,552 --a------ C:\WINDOWS\user32.exe
2006-12-22 11:39 279,552 --a------ C:\Program Files\user32.exe
2006-12-22 11:39 0 --a------ C:\vesuyym.exe
2006-12-22 11:39 0 --a------ C:\sfokuk.exe
2006-12-22 11:39 0 --a------ C:\exwfrso.exe
2006-12-22 11:23 90,624 --a------ C:\WINDOWS\system32\LFFPX80N.DLL
2006-12-22 11:23 74,752 --a------ C:\WINDOWS\system32\LTFIL80N.DLL
2006-12-22 11:23 64,512 --a------ C:\WINDOWS\system32\LFFAX80N.DLL
2006-12-22 11:23 46,592 --a------ C:\WINDOWS\system32\LFICA80N.DLL
2006-12-22 11:23 429,056 --a------ C:\WINDOWS\system32\LTKRN80N.DLL
2006-12-22 11:23 39,424 --a------ C:\WINDOWS\system32\LFGIF80N.DLL
2006-12-22 11:23 35,840 --a------ C:\WINDOWS\system32\LFLMA80N.DLL
2006-12-22 11:23 338,944 --a------ C:\WINDOWS\system32\LFFPX7.DLL
2006-12-22 11:23 33,280 --a------ C:\WINDOWS\system32\LFBMP80N.DLL
2006-12-22 11:23 31,232 --a------ C:\WINDOWS\system32\LFLMB80N.DLL
2006-12-22 11:23 30,720 --a------ C:\WINDOWS\system32\LFPCX80N.DLL
2006-12-22 11:23 30,720 --a------ C:\WINDOWS\system32\LFPCT80N.DLL
2006-12-22 11:23 30,208 --a------ C:\WINDOWS\system32\LFEPS80N.DLL
2006-12-22 11:23 28,672 --a------ C:\WINDOWS\system32\LFPSD80N.DLL
2006-12-22 11:23 28,672 --a------ C:\WINDOWS\system32\LFAWD80N.DLL
2006-12-22 11:23 28,160 --a------ C:\WINDOWS\system32\LFWMF80N.DLL
2006-12-22 11:23 27,648 --a------ C:\WINDOWS\system32\LFWPG80N.DLL
2006-12-22 11:23 27,648 --a------ C:\WINDOWS\system32\LFTGA80N.DLL
2006-12-22 11:23 27,136 --a------ C:\WINDOWS\system32\LFIMG80N.DLL
2006-12-22 11:23 26,624 --a------ C:\WINDOWS\system32\LFPCD80N.DLL
2006-12-22 11:23 26,624 --a------ C:\WINDOWS\system32\LFCAL80N.DLL
2006-12-22 11:23 26,112 --a------ C:\WINDOWS\system32\LFRAS80N.DLL
2006-12-22 11:23 26,112 --a------ C:\WINDOWS\system32\LFMSP80N.DLL
2006-12-22 11:23 25,600 --a------ C:\WINDOWS\system32\LFWFX80N.DLL
2006-12-22 11:23 25,600 --a------ C:\WINDOWS\system32\LFMAC80N.DLL
2006-12-22 11:23 24,576 --a------ C:\WINDOWS\system32\LFAVI80N.DLL
2006-12-22 11:23 235,008 --a------ C:\WINDOWS\system32\LFDIC80N.DLL
2006-12-22 11:23 235,008 --a------ C:\WINDOWS\system32\LFCMP80N.DLL
2006-12-22 11:23 212,480 --a------ C:\WINDOWS\system32\PCDLIB32.DLL
2006-12-22 11:23 133,632 --a------ C:\WINDOWS\system32\LFPNG80N.DLL
2006-12-22 11:23 118,784 --a------ C:\WINDOWS\system32\LFKODAK.DLL
2006-12-22 11:23 114,688 --a------ C:\WINDOWS\system32\LFTIF80N.DLL
2006-12-22 11:23 <REP> d-------- C:\Program Files\HP CD Labeler II
2006-12-22 00:12 639,224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-12-19 10:57 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2006-12-17 12:34 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-12-17 12:32 284,840 --a------ C:\WINDOWS\system32\mp4sdmod.dll
2006-12-17 12:29 <REP> d-------- C:\Program Files\Codemasters
2006-12-17 10:55 974,848 --a------ C:\WINDOWS\system32\dxdiag.exe
2006-12-17 10:55 83,968 --a------ C:\WINDOWS\system32\drivers\nabtsfec.sys
2006-12-17 10:55 79,360 --a------ C:\WINDOWS\system32\dpwsockx.dll
2006-12-17 10:55 52,096 --a------ C:\WINDOWS\system32\drivers\msdv.sys
2006-12-17 10:55 48,512 --a------ C:\WINDOWS\system32\drivers\stream.sys
2006-12-17 10:55 470,528 --a------ C:\WINDOWS\system32\qdvd.dll
2006-12-17 10:55 47,104 --a------ C:\WINDOWS\system32\wstdecod.dll
2006-12-17 10:55 46,592 --a------ C:\WINDOWS\system32\dxdllreg.exe
2006-12-17 10:55 381,952 --a------ C:\WINDOWS\system32\dsound.dll
2006-12-17 10:55 354,816 --a------ C:\WINDOWS\system32\psisdecd.dll
2006-12-17 10:55 316,928 --a------ C:\WINDOWS\system32\qdv.dll
2006-12-17 10:55 292,864 --a------ C:\WINDOWS\system32\ddraw.dll
2006-12-17 10:55 230,400 --a------ C:\WINDOWS\system32\dplayx.dll
2006-12-17 10:55 181,248 --a------ C:\WINDOWS\system32\dmime.dll
2006-12-17 10:55 18,688 --a------ C:\WINDOWS\system32\drivers\wstcodec.sys
2006-12-17 10:55 16,896 --a------ C:\WINDOWS\system32\msyuv.dll
2006-12-17 10:55 16,384 --a------ C:\WINDOWS\system32\drivers\ccdecode.sys
2006-12-17 10:55 15,104 --a------ C:\WINDOWS\system32\drivers\mpe.sys
2006-12-17 10:55 14,976 --a------ C:\WINDOWS\system32\drivers\streamip.sys
2006-12-17 10:55 122,880 --a------ C:\WINDOWS\system32\dmusic.dll
2006-12-17 10:55 11,392 --a------ C:\WINDOWS\system32\drivers\bdasup.sys
2006-12-17 10:55 10,880 --a------ C:\WINDOWS\system32\drivers\slip.sys
2006-12-17 10:55 10,112 --a------ C:\WINDOWS\system32\drivers\ndisip.sys
2006-12-17 10:55 1,769,472 --a------ C:\WINDOWS\system32\dxdiagn.dll
2006-12-17 10:55 1,703,936 --a------ C:\WINDOWS\system32\d3d9.dll
2006-12-17 10:55 1,230,336 --a------ C:\WINDOWS\system32\msvidctl.dll
2006-12-17 10:55 1,201,152 --a------ C:\WINDOWS\system32\d3d8.dll
2006-12-16 14:31 <REP> d-------- C:\WINDOWS\system32\QuickTime
2006-12-16 01:47 <REP> d-------- C:\Program Files\USB Game Controller
2006-12-14 07:12 <REP> d--h-c--- C:\WINDOWS\$MSI30UninstallMSI30-KB884016$
2006-12-14 07:10 <REP> d-------- C:\Macromedia
2006-12-12 10:05 <REP> d-------- C:\Documents and Settings\Eric\Application Data\AdobeUM
2006-12-07 18:39 <REP> d-------- C:\Program Files\ETAJV PC
2006-12-07 18:39 <REP> d-------- C:\Documents and Settings\Eric\Application Data\Help
2006-12-07 09:59 <REP> d-------- C:\Audacity
2006-12-06 18:44 <REP> d-------- C:\Documents and Settings\Eric\Application Data\HP
2006-12-04 13:43 53,248 --a------ C:\WINDOWS\system32\Process.exe
2006-12-04 13:43 212,480 --------- C:\WINDOWS\PCDLIB32.DLL
2006-12-04 13:43 <REP> d-------- C:\Program Files\ArcSoft
2006-12-04 13:35 <REP> d-------- C:\Documents and Settings\Eric\Application Data\Lavasoft
2006-12-04 13:34 <REP> d-------- C:\Program Files\Lavasoft
2006-12-04 11:17 42,920 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll
2006-12-04 11:17 <REP> d-------- C:\WINDOWS\system32\ZoneLabs
2006-12-04 11:14 <REP> d-------- C:\WINDOWS\Internet Logs
2006-12-04 11:14 <REP> d-------- C:\Program Files\Zone Labs
2006-12-04 06:07 <REP> d-------- C:\WINDOWS\Prefetch
2006-12-04 06:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Activesendbagsthunk
2006-12-03 09:37 <REP> d-------- C:\Program Files\PSCS2Updater
2006-12-01 23:38 <REP> d-------- C:\Program Files\DVD Shrink
2006-12-01 23:38 <REP> d-------- C:\Program Files\DVD Decrypter
2006-12-01 23:38 <REP> d-------- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2006-12-01 23:36 <REP> d-------- C:\Program Files\SlySoft
2006-12-01 23:36 <REP> d-------- C:\Program Files\Elaborate Bytes
2006-12-01 23:34 <REP> d-------- C:\Documents and Settings\Eric\Application Data\Opera
2006-12-01 23:06 <REP> d-------- C:\Program Files\Fichiers communs\Adobe Systems Shared
2006-12-01 10:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Adobe Systems
2006-12-01 08:47 <REP> d-------- C:\Documents and Settings\Eric\Application Data\NetPumper
2006-12-01 08:46 <REP> d-------- C:\Program Files\Anti-Leech
2006-11-30 17:35 <REP> d-------- C:\Documents and Settings\Eric\Application Data\Adobe
2006-11-30 16:57 8,704 --a------ C:\WINDOWS\system32\kbdjpn.dll
2006-11-30 16:57 8,192 --a------ C:\WINDOWS\system32\kbdkor.dll
2006-11-30 16:57 6,144 --a------ C:\WINDOWS\system32\kbd106.dll
2006-11-30 16:57 6,144 --a------ C:\WINDOWS\system32\kbd101c.dll
2006-11-30 16:57 6,144 --a------ C:\WINDOWS\system32\kbd101b.dll
2006-11-30 16:57 5,632 --a------ C:\WINDOWS\system32\kbd103.dll

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2006-12-19 14:36 -------- d-------- C:\Program Files\LimeWire
2006-12-17 10:59 -------- d-------- C:\Program Files\EA SPORTS
2006-12-16 14:32 -------- d-------- C:\Program Files\Macromedia
2006-12-16 01:47 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-12-14 07:18 -------- d-------- C:\Documents and Settings\Eric\Application Data\Macromedia
2006-12-14 07:14 -------- d---s---- C:\Documents and Settings\Eric\Application Data\Microsoft
2006-12-13 23:48 -------- d-------- C:\Documents and Settings\Eric\Application Data\LimeWire
2006-12-10 11:51 -------- d-------- C:\Program Files\Windows Media Player
2006-12-10 11:51 -------- d-------- C:\Program Files\Office Mouse
2006-12-10 11:51 -------- d-------- C:\Program Files\Movie Maker
2006-12-10 11:51 -------- d-------- C:\Program Files\Mafia
2006-12-10 11:50 -------- d-------- C:\Program Files\K-Lite Codec Pack
2006-12-09 00:04 -------- d-------- C:\Program Files\Messenger Plus! Live
2006-12-07 21:03 -------- d-------- C:\Program Files\PhotoFiltre
2006-12-07 18:53 -------- d-------- C:\Program Files\FlashGet
2006-12-04 06:09 -------- d-------- C:\Program Files\MSN Messenger
2006-12-04 06:06 -------- d-------- C:\Program Files\Internet Explorer
2006-12-04 05:58 -------- d-------- C:\Program Files\Windows NT
2006-12-04 05:58 -------- d-------- C:\Program Files\Outlook Express
2006-12-04 05:58 -------- d-------- C:\Program Files\NetMeeting
2006-12-04 05:58 -------- d-------- C:\Program Files\Fichiers communs\System
2006-12-04 05:55 -------- d-------- C:\Program Files\Messenger
2006-12-03 09:33 -------- d-------- C:\Program Files\Adobe
2006-12-03 09:32 -------- d-------- C:\Program Files\Fichiers communs\Adobe
2006-12-01 23:06 -------- d-------- C:\Program Files\Fichiers communs
2006-12-01 10:07 -------- d-------- C:\Program Files\ESET
2006-11-29 00:03 -------- d-------- C:\Program Files\Fichiers communs\Macromedia
2006-11-28 23:06 -------- d-------- C:\Program Files\Xara
2006-11-28 23:06 -------- d-------- C:\Program Files\Common Files
2006-11-28 23:02 -------- d-------- C:\Program Files\FileZilla
2006-11-28 13:23 -------- d-------- C:\Program Files\ING
2006-11-27 22:45 -------- d-------- C:\Program Files\CyberLink DVD Solution
2006-11-27 22:44 -------- d-------- C:\Program Files\CyberLink
2006-11-27 21:44 -------- d-------- C:\Program Files\Auran
2006-11-27 21:43 -------- d-------- C:\Program Files\Fichiers communs\InstallShield
2006-11-27 13:46 -------- d-------- C:\Program Files\Pinnacle
2006-11-27 12:16 -------- d-------- C:\Program Files\MSXML 4.0
2006-11-26 21:08 -------- d-------- C:\Documents and Settings\Eric\Application Data\Image Zone Express
2006-11-26 11:14 -------- d-------- C:\Program Files\Fichiers communs\HP
2006-11-25 10:34 -------- d-------- C:\Program Files\Creative
2006-11-25 10:00 -------- d-------- C:\Program Files\Microsoft ActiveSync
2006-11-25 10:00 -------- d-------- C:\Program Files\AvantGo Connect
2006-11-25 09:55 -------- d-------- C:\Program Files\Canon
2006-11-25 09:43 -------- d-------- C:\Program Files\honestech
2006-11-25 09:38 -------- d-------- C:\Program Files\HP
2006-11-25 09:36 -------- d-------- C:\Program Files\Hewlett-Packard
2006-11-25 09:35 -------- d-------- C:\Program Files\Fichiers communs\Hewlett-Packard
2006-11-25 02:09 -------- d--h----- C:\Program Files\Uninstall Information
2006-11-25 01:57 -------- d-------- C:\Program Files\Fichiers communs\Ahead
2006-11-25 01:55 -------- d-------- C:\Program Files\Ahead
2006-11-25 01:35 -------- d-------- C:\Program Files\Java
2006-11-25 01:16 -------- d-------- C:\Program Files\DivX
2006-11-24 23:53 -------- d-------- C:\Program Files\Shareaza
2006-11-24 23:53 -------- d-------- C:\Documents and Settings\Eric\Application Data\Shareaza
2006-11-24 23:52 -------- d-------- C:\Documents and Settings\Eric\Application Data\Google
2006-11-24 23:51 -------- d--h----- C:\Program Files\WindowsUpdate
2006-11-24 22:43 -------- d-------- C:\Documents and Settings\Eric\Application Data\Sun
2006-11-24 22:41 62592 --a------ C:\WINDOWS\system32\drivers\moufiltr.sys
2006-11-24 22:35 -------- d-------- C:\Program Files\WinRAR
2006-11-24 22:22 -------- d-------- C:\Program Files\Microsoft.NET
2006-11-24 22:22 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared
2006-11-24 22:21 -------- d-------- C:\Program Files\Microsoft Office
2006-11-24 22:21 -------- d-------- C:\Program Files\Fichiers communs\DESIGNER
2006-11-24 22:13 -------- d-------- C:\Program Files\Google
2006-11-24 22:01 -------- d-------- C:\Program Files\IncrediMail
2006-11-24 21:51 -------- d-------- C:\Program Files\Fichiers communs\Java
2006-11-24 17:54 -------- d-------- C:\Program Files\Spybot - Search & Destroy
2006-11-24 17:44 502208 --a------ C:\WINDOWS\system32\drivers\amon.sys
2006-11-24 17:44 270336 --a------ C:\WINDOWS\system32\imon.dll
2006-11-24 16:56 -------- d-------- C:\Documents and Settings\Eric\Application Data\Identities
2006-11-24 16:52 0 -rahs---- C:\MSDOS.SYS
2006-11-24 16:52 0 -rahs---- C:\IO.SYS
2006-11-24 16:52 0 --a------ C:\CONFIG.SYS
2006-11-24 16:52 0 --a------ C:\AUTOEXEC.BAT
2006-11-24 16:52 -------- d-------- C:\Program Files\xerox
2006-11-24 16:52 -------- d-------- C:\Program Files\microsoft frontpage
2006-11-24 16:50 -------- d-------- C:\Program Files\Fichiers communs\Services
2006-11-24 16:50 -------- d-------- C:\Program Files\Fichiers communs\MSSoap
2006-11-24 16:49 -------- d-------- C:\Program Files\ComPlus Applications
2006-11-24 16:48 -------- d-------- C:\Program Files\Services en ligne
2006-11-24 16:48 -------- d-------- C:\Program Files\MSN Gaming Zone
2006-11-24 16:48 -------- d-------- C:\Program Files\MSN
2006-11-24 16:42 -------- d-------- C:\Program Files\Fichiers communs\SpeechEngines
2006-11-24 16:42 -------- d-------- C:\Program Files\Fichiers communs\ODBC
2006-11-24 16:41 62 --ahs---- C:\Documents and Settings\Eric\Application Data\desktop.ini
2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-10-15 18:56 1270272 --a------ C:\WINDOWS\system32\C'n'C.scr
2006-10-13 13:36 64000 --a------ C:\WINDOWS\system32\nwapi32.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"IncrediMail"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe /c"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.908.5008\\GoogleToolbarNotifier.exe"
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"H/PC Connection Agent"="\"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE\""
"THIS SKIP"="C:\\DOCUME~1\\Eric\\APPLIC~1\\PUREOK~1\\axis mess.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SoundMan"="SOUNDMAN.EXE"
"VTTimer"="VTTimer.exe"
"nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"
"FLMOFFICE4DMOUSE"="C:\\Program Files\\Office Mouse\\moffice.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
"ScanRegistry"="C:\\W"
"RemoteControl"="\"C:\\Program Files\\CyberLink DVD Solution\\PowerDVD\\PDVDServ.exe\""
"DateCompAcidPlus"="C:\\Documents and Settings\\All Users\\Application Data\\Spam store date comp\\anti frag.exe"
"CloneCDTray"="\"C:\\Program Files\\SlySoft\\CloneCD\\CloneCDTray.exe\" /s"
"AnyDVD"="C:\\Program Files\\SlySoft\\AnyDVD\\AnyDVD.exe"
"Zone Labs Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""
"I downloaded pirated Software from P2P "="FIFA Football 2007"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000000

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-12-30 16:21:35.43
C:\ComboFix.txt ... 06-12-30 16:21

^^Marie^^ · Answer

.../...

Utilisateur anonyme · Answer

Bah oui Marie !

..........

bon, bref,  y'a des bestioles donc :

Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clique dessus et choisis "accepter l'active X" pour  faire fonctionner le scan anti-virus.
Une fois qu'il a terminé colle le rapport ici stp

https://www.bitdefender.com/toolbox/

Pub

6 réponses

Discussions similaires

Newsletters