Trojan.Win32.BHO.agz
angie7979
Messages postés
20
Statut
Membre
-
angie7979 Messages postés 20 Statut Membre -
angie7979 Messages postés 20 Statut Membre -
Bonjour,
qui pourrait m'aider ?????? mon pc déconne un max....... kaspersky me dit que j'ai ce virus encore ( et a mon avis doit en avoir d'autres) j'ai pu en supprier pas mal mais celui ci impossible !!!! Que dois-je faire ????? je suis sur XP
un gand merci d'avance ;-)
qui pourrait m'aider ?????? mon pc déconne un max....... kaspersky me dit que j'ai ce virus encore ( et a mon avis doit en avoir d'autres) j'ai pu en supprier pas mal mais celui ci impossible !!!! Que dois-je faire ????? je suis sur XP
un gand merci d'avance ;-)
Configuration: Windows XP Internet Explorer 6.0
34 réponses
- 1
- 2
Suivant
Résumé de la discussion
Infection détectée sur une machine Windows XP où Kaspersky signale la présence d’un virus persistant et rémanente et où l’utilisateur cherche une aide pour éliminer l’infection. Des éléments du fil montrent un rapport Lopxp et des tâches liées à XoftSpySE, indiquant une infection complexe avec des entrées au démarrage et des services potentiellement malveillants. Pour la suite, il est suggéré d’effectuer une analyse complète avec les outils du système et l’antivirus, de vérifier les tâches récurrentes et de privilégier une désinfection hors ligne si nécessaire. D’autres détails du dossier Program Files et des fichiers identifiés pourraient préciser les éléments à supprimer, les clés de registre éventuellement touchées et les mesures de prévention à adopter pour éviter une réinfection.
-
Fais nous un log hijackthis.
@+ -
alors le voilà : hé hé merci
Scan saved at 20:35:35, on 29.12.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\mnmsrvc.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ASTRID~1\LOCALS~1\Temp\Rar$EX00.765\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.1stsearchportal.com/sp2.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http:\\www.mediamarkt.de
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fmeteo%2f%3f
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Dcads Search Assistant - {1648E328-3E5A-4EA5-A9C6-E5F09EE272DA} - C:\WINDOWS\system32\dcads_sidebar.dll
O2 - BHO: (no name) - {41DBC708-13BE-44CB-A185-072BEF94D4C0} - C:\WINDOWS\system32\datacle.dll
O2 - BHO: superiorads - {4AD44D3E-7316-4251-B754-9B10EC96AF92} - C:\WINDOWS\system32\sprt_ads.dll
O2 - BHO: (no name) - {6E0B1226-EFF1-4EA1-B18B-8AD224D1DC61} - C:\WINDOWS\system32\ssttq.dll (file missing)
O2 - BHO: dcads - {6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E} - C:\WINDOWS\system32\nsf52.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: browser optimizer superiorads - {8E015787-B1E3-404a-95DE-3E71E1FA0305} - C:\WINDOWS\system32\spads.dll (file missing)
O2 - BHO: (no name) - {8E3FBDE2-7DBD-4040-85D9-29BBC559C129} - C:\WINDOWS\system32\opnmnlj.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [blah service] f.exe
O4 - HKLM\..\Run: [us8k34g] verdv.exe
O4 - HKLM\..\Run: [Lexmark X73 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
O4 - HKLM\..\Run: [Lexmark X73 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\sprt_ads.dll" DllStart
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [Host Process] C:\WINDOWS\Fonts\svchost.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunServices: [blah service] f.exe
O4 - HKLM\..\RunOnce: [!CleanupNetMeetingDispDriver] "C:\WINDOWS\system32\rundll32.exe" msconf.dll,CleanupNetMeetingDispDriver 0
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [fBrqRQM6i] unl30hwx.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\xxx\Local Settings\Temp\TMP121.tmp
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O12 - Plugin for .mu3: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O12 - Plugin for .mus: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O12 - Plugin for .myr: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O12 - Plugin for .myt: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O14 - IERESET.INF: START_PAGE_URL=http:\\www.mediamarkt.de
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c6.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei-2/SmileyCentralFWBInitialSetup1.0.0.8-2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by116fd.bay116.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
O16 - DPF: {CDCBE0F1-D13A-4F86-A963-3A272D3ABA7E} - http://advnt01.com/dialer/internazionale_ver15.CAB
O16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} - http://advnt01.com/dialer/internazionale_ver11.CAB
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/html - {997EF325-4D49-4999-A83A-C46EE2B2ED08} - (no file)
O20 - Winlogon Notify: opnmnlj - opnmnlj.dll (file missing)
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
-
Le nombre de truc mauvais c'est énorme supprimer avec le logiciel en les cochant :
O2 - BHO: Dcads Search Assistant - {1648E328-3E5A-4EA5-A9C6-E5F09EE272DA} - C:\WINDOWS\system32\dcads_sidebar.dll
O2 - BHO: (no name) - {41DBC708-13BE-44CB-A185-072BEF94D4C0} - C:\WINDOWS\system32\datacle.dll
O2 - BHO: superiorads - {4AD44D3E-7316-4251-B754-9B10EC96AF92} - C:\WINDOWS\system32\sprt_ads.dll
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\sprt_ads.dll" DllStart
O4 - HKLM\..\Run: [Host Process] C:\WINDOWS\Fonts\svchost.exe
O4 - HKLM\..\RunOnce: [!CleanupNetMeetingDispDriver] "C:\WINDOWS\system32\rundll32.exe" msconf.dll,CleanupNetMeetingDispDriver 0
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c6.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
O16 - DPF: {CDCBE0F1-D13A-4F86-A963-3A272D3ABA7E} - http://advnt01.com/dialer/internazionale_ver15.CAB
O16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} - http://advnt01.com/dialer/internazionale_ver11.CAB
O20 - Winlogon Notify: opnmnlj - opnmnlj.dll (file missing) -
et apres va sur https://www.emsisoft.com/fr/home/emergencykit/
fais un scan complet et dit nous ce que tu trouve -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
tu m'étonnes, on est 4 a employer ce pc pour tout et pour rien... et comme c'est du chinois tout ca pour nous ben voilà le reslutat ! quelle cata !!!!! en tout cas merci de ton aide. voici le résultat ( assis toi loool ) :
a-squared Free - Version 2
Scan settings:
Objects: Memory, Traces, Cookies, C:\WINDOWS, C:\Program Files
Scan archives: On
Heuristics: Off
ADS Scan: On
Scan start: 29.12.2007 21:23:19
Scanned
Files: 149138
Traces: 153693
Cookies: 944
Processes: 27
Found
Files: 0
Traces: 145
Cookies: 82
Processes: 0
Scan end: 29.12.2007 22:53:34
Scan time: 01:30:15 -
supprimer les traces que tu a trouver tout met les en quarantaine
@+ -
ok je vais faire ça et vous retiens au courrant.... merci merci
-
Bonjour,
tout ceci ne va pas suffire (hélas).
Fais ça en plus :
télécharge combofix (par sUBs)ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
2 double-clique sur combofix.exe et suis les instructions
3 à la fin, il va produire un rapport C:\ComboFix.txt
4 copie/colle ce rapport dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. -
effectivement ça n'a pas suffit..... mais là j'en ai plein l'os alors je fait tout ça demain et je vous colle le rapport. un grand merci et a demain ;-)
-
-
hello,,
alors voilà le rapport de combofixe : suis pas sortie de l'auberge a mon avis !!!!
ComboFix 07-12-21.4 - AsD 2007-12-30 13:09:25.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.75 [GMT 1:00]
Running from: C:\Documents and Settings\AsD\Bureau\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\Fonts\a.zip
C:\WINDOWS\system32\MabryObj.dll
C:\WINDOWS\system32\sprt_ads.dll
C:\winlogon.exe
C:\x.dat
C:\z.dat
C:\WINDOWS\Fonts\'
.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-28 to 2007-12-30 ))))))))))))))))))))))))))))))))))))
.
2007-12-29 21:09 . 2007-12-30 02:12 <REP> d-------- C:\Program Files\a-squared Anti-Malware
2007-12-29 01:22 . 2007-12-29 01:22 77 --a------ C:\Documents and Settings\AsD\1595.bat
2007-12-29 00:01 . 2007-12-30 13:33 11,474,208 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-12-29 00:01 . 2007-12-30 13:30 157,616 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2007-12-29 00:01 . 2007-12-30 13:33 108,832 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-12-29 00:01 . 2007-12-30 13:30 11,156 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2007-12-28 23:59 . 2007-12-28 23:59 <REP> d-------- C:\KAV
2007-12-28 22:34 . 2007-12-28 22:34 <REP> d-------- C:\Program Files\Symantec
2007-12-28 19:18 . 2007-12-28 21:16 <REP> d-------- C:\Program Files\Norton 360
2007-12-26 11:05 . 2007-12-29 16:59 <REP> d-------- C:\Program Files\AdvancedCleaner Free
2007-12-25 23:20 . 2007-12-25 23:20 <REP> d-------- C:\Program Files\LimeWire
2007-12-25 18:55 . 19,456 C:\WINDOWS\system32\drivers\jhplmmzx.dat
2007-12-25 18:54 . 2004-08-19 15:09 84,992 --a------ C:\WINDOWS\system32\datacle.dll
2007-12-23 00:17 . 2007-12-23 00:21 <REP> d-------- C:\Program Files\Bejeweled 2 Deluxe
2007-12-23 00:17 . 2007-12-23 00:16 720,896 --a------ C:\WINDOWS\iun6002ev.exe
2007-12-22 19:12 . 2007-12-25 15:38 0 --a------ C:\WINDOWS\system32\mcrh.tmp
2007-12-22 11:35 . 2007-12-22 11:36 80,097 --a------ C:\WINDOWS\system32\dcads-remove.exe
2007-12-22 11:35 . 2007-12-30 11:19 77,379 --a------ C:\WINDOWS\system32\dcads_sidebar_uninstall.exe
2007-12-22 11:35 . 2007-12-25 18:55 40,734 --a------ C:\WINDOWS\system32\superiorads-uninst.exe
2007-12-22 11:34 . 2007-12-22 11:35 <REP> d-------- C:\Program Files\Dcads Games Collection
2007-12-22 10:55 . 2007-12-29 01:16 15,360 --a------ C:\WINDOWS\system32\ctfmon .exe
2007-12-22 10:54 . 2007-12-29 13:07 155,648 --a------ C:\WINDOWS\system32\NeroCheck .exe
2007-12-22 00:39 . 2007-12-29 15:00 6,610 --ahs---- C:\WINDOWS\system32\qttss.ini2
2007-12-22 00:39 . 2007-12-29 14:36 6,610 --ahs---- C:\WINDOWS\system32\qttss.ini
2007-12-22 00:36 . 2007-12-22 00:36 147,456 --a------ C:\WINDOWS\system32\vbzip10.dll
2007-12-22 00:35 . 2007-12-22 00:35 134 --a------ C:\n.bat
2007-12-22 00:32 . 2007-12-22 00:35 <REP> d-------- C:\Program Files\Zuma Deluxe
2007-12-18 15:54 . 2007-12-18 15:54 319,488 --a------ C:\WINDOWS\system32\dcads_sidebar.dll
2007-12-05 14:24 . 2007-12-05 14:24 <REP> d-------- C:\Documents and Settings\AsD\Application Data\Jane s Hotel
2007-11-15 00:47 . 2007-11-15 00:47 <REP> d-------- C:\Program Files\ReflexiveArcade
2007-11-13 12:51 . 2007-12-30 00:59 <REP> d-------- C:\Program Files\Macrogaming
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-30 12:20 --------- d-----w C:\Program Files\Kaspersky Lab
2007-12-29 16:01 --------- d-----w C:\Program Files\QuickTime
2007-12-29 14:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2007-12-29 13:53 --------- d-----w C:\Program Files\LexmarkX73
2007-12-29 13:53 --------- d-----w C:\Program Files\ICQLite
2007-12-28 22:13 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2007-12-27 12:51 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2007-12-27 12:49 --------- d-----w C:\Program Files\Google
2007-12-22 22:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-12-22 10:23 --------- d-----w C:\Program Files\Zylom Games
2007-12-19 13:42 --------- d-----w C:\Documents and Settings\AsD\Application Data\Zylom
2007-11-19 22:23 --------- d-----w C:\Program Files\eMule
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-10 21:19 --------- d-----w C:\Documents and Settings\AsD\Application Data\Gaijin Ent
2007-08-14 10:20 706,630 ----a-w C:\Program Files\captureflux_captureflux_5.2.3_francais_11147.zip
2007-08-10 23:01 753,570 ----a-w C:\Program Files\dvdate_64fr.zip
2007-02-01 20:31 6,469,352 -c--a-w C:\Program Files\avgas-setup-7.5.0.50.exe
2007-02-01 20:22 1,497,680 -c--a-w C:\Program Files\ccsetup136.exe
2007-02-01 20:20 213,151 ----a-w C:\Program Files\hijackthis.zip
2005-06-14 19:53 674 ----a-w C:\Program Files\DVD Shrink 3.2.lnk
2001-07-26 15:58 47 -c--a-w C:\Program Files\ACMonitor_X73.ini
2001-07-05 11:46 8,116 -c--a-w C:\Program Files\OSLO3071b2.USB
2001-05-11 10:39 53,248 -c--a-w C:\Program Files\ACMonitor_X73.exe
2001-05-08 15:36 114,688 -c--a-w C:\Program Files\lxarscan.dll
2001-04-23 13:22 1,437 -c--a-w C:\Program Files\gtx73.ini
2001-02-22 08:54 768 -c--a-w C:\Program Files\x73_lut.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41DBC708-13BE-44CB-A185-072BEF94D4C0}]
2004-08-19 15:09 84992 --a------ C:\WINDOWS\system32\datacle.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6E0B1226-EFF1-4EA1-B18B-8AD224D1DC61}]
C:\WINDOWS\system32\ssttq.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E}]
C:\WINDOWS\system32\nsf52.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8E015787-B1E3-404a-95DE-3E71E1FA0305}]
C:\WINDOWS\system32\spads.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15:09]
"fBrqRQM6i"="unl30hwx.exe" []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-19 15:10 C:\WINDOWS\system32\rundll32.exe]
"Logitech Utility"="Logi_MwX.Exe" [2003-03-04 10:50 C:\WINDOWS\LOGI_MWX.EXE]
"blah service"="f.exe" []
"us8k34g"="verdv.exe" []
"Lexmark X73 Button Monitor"="C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe" []
"Lexmark X73 Button Manager"="C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe" []
"kav"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" [2006-03-24 19:09]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"blah service"="f.exe" []
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15:09]
"ALUAlert"="C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe" [2007-02-15 19:05]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 11:55]
R3 ham50;Creatix V.90 HAM Data Fax Modem;C:\WINDOWS\system32\DRIVERS\CTXH51.sys [2001-08-04 06:50]
R3 P1130VID;Creative WebCam NX Pro;C:\WINDOWS\system32\DRIVERS\P1130Vid.sys [2003-05-08 02:00]
S3 avgntdw;avgntdw;C:\Program Files\AVPersonal\AVGNTDW.SYS []
S3 Dual Mode;Dual Mode Video Capture;C:\WINDOWS\system32\DRIVERS\CoachVc.sys [2002-10-09 21:24]
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2007-12-30 12:00:00 C:\WINDOWS\Tasks\AD86DC2491954F98.job"
- c:\docume~1\astrid~1\applic~1\curbax~1\clock mail window.exe
"2007-12-30 12:00:00 C:\WINDOWS\Tasks\AF7F43A79180F577.job"
- c:\progra~1\curbax~1\clock mail window.exe
"2007-12-30 12:00:00 C:\WINDOWS\Tasks\B2A4DABA90E34B3E.job"
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-30 13:34:05
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
**************************************************************************
.
Completion time: 2007-12-30 13:39:35 - machine was rebooted [AsD]
.
2007-12-21 13:05:16 --- E O F --- -
Bonjour,
ne seriez vous pas envahi par des pubs de Cid ?
A la fin, faudra parler "précautions", "sécurité", ...
Pour le moment :
Télécharge ceci: (by Moe) :
http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe
Double clic sur Lopxpsetup.exe pour lancer l'installation
Au menu, choisir l'option 1
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
Une rapport sera alors crée, à copie/colle en entier sur le forum.
2) Télécharge Lop S&D de Angeldark et Eric71 sur ton bureau.
* Décompresse l'archive obtenue en faisant un clic-droit et 'Extraire tout'.
* Double-clique sur le nouveau répertoire Lop S&D obtenu et double-clique sur Scan.bat
(il est possible que l'extension .bat n'apparaisse pas suivant les options d'affichage définies).
* Tape R pour Rechercher et valide ton choix par la touche Entrée.
* Laisse l'outil travailler, il va générer un rapport, poste le à la suite.
3) remets un rapport Hijackthis
-
bonjour et bonne année !!!!!!!¨
alors voilà j'ai fait tout ça.......
voici le premier rapport demandé :
Rapport Lopxp fait le 31.12.2007 à 13:02:07
Exécuté dans : C:\Program Files\Lopxp
Liste des processus actifs :
PID : 476 C:\WINDOWS\System32\smss.exe
PID : 540 C:\WINDOWS\system32\csrss.exe
PID : 564 C:\WINDOWS\system32\winlogon.exe
PID : 608 C:\WINDOWS\system32\services.exe
PID : 620 C:\WINDOWS\system32\lsass.exe
PID : 780 C:\WINDOWS\system32\svchost.exe
PID : 828 C:\WINDOWS\system32\svchost.exe
PID : 892 C:\WINDOWS\System32\svchost.exe
PID : 948 C:\WINDOWS\System32\svchost.exe
PID : 1088 C:\WINDOWS\System32\svchost.exe
PID : 1308 C:\WINDOWS\Explorer.EXE
PID : 1404 C:\WINDOWS\system32\LEXBCES.EXE
PID : 1440 C:\WINDOWS\system32\spoolsv.exe
PID : 1636 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
PID : 1644 C:\WINDOWS\system32\ctfmon.exe
PID : 1688 C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
PID : 1752 C:\Program Files\Logitech\MouseWare\system\em_exec.exe
PID : 1784 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
PID : 1820 C:\Program Files\AVPersonal\AVWUPSRV.EXE
PID : 1840 C:\WINDOWS\System32\drivers\CDAC11BA.EXE
PID : 1916 C:\WINDOWS\System32\mnmsrvc.exe
PID : 1972 C:\WINDOWS\System32\nvsvc32.exe
PID : 2044 C:\WINDOWS\System32\svchost.exe
PID : 184 C:\WINDOWS\system32\rundll32.exe
PID : 1624 C:\WINDOWS\System32\alg.exe
PID : 2472 C:\WINDOWS\System32\svchost.exe
PID : 2584 C:\WINDOWS\system32\cmd.exe
PID : 176 C:\Program Files\Lopxp\tools\pv.exe
___________________________________________________________________________
[Tâches planifiées]
C:\WINDOWS\tasks\AF7F43A79180F577.job
Cr : 20.09.2004 à 19:33
Mo : 31.12.2007 à 13:00
Fichier exécuté : c\progra~1\curbax~1\clock mail window.exe
C:\WINDOWS\tasks\XoftSpySE 2.job
Cr : 30.12.2007 à 14:23
Mo : 31.12.2007 à 12:30
Fichier exécuté : C\Program Files\XoftSpySE\XoftSpy.exe ShowReminders
C:\WINDOWS\tasks\XoftSpySE.job
Cr : 30.12.2007 à 14:23
Mo : 30.12.2007 à 14:23
Fichier exécuté : C\Program Files\XoftSpySE\XoftSpy.exe -t
C:\WINDOWS\tasks\AD86DC2491954F98.job
Cr : 13.08.2005 à 11:01
Mo : 31.12.2007 à 13:00
Fichier exécuté : c:\docume~1\astrid~1\applic~1\curbax~1\clock mail window.exe
C:\WINDOWS\tasks\B2A4DABA90E34B3E.job
Cr : 24.07.2005 à 16:37
Mo : 31.12.2007 à 13:00
Fichier exécuté : c:\docume~1\davidm~1\applic~1\curbax~1\clock mail window.exe
___________________________________________________________________________
[Listing des dossiers Application Data]
cr: Date Création | mo: Date Modification -=- Nom Long -= Nom Court (8.3)
+- C:\Documents and Settings\Administrateur\Application Data
cr: 21.06.2005 21:47:57 | mo: 07.04.2002 14:46:34 -=- Adobe ----= Adobe
cr: 21.06.2005 21:47:57 | mo: 06.04.2002 18:46:03 -=- IDENTI~1 -= Identities
cr: 21.06.2005 21:47:57 | mo: 07.04.2002 14:46:34 -=- INTERT~1 -= InterTrust
cr: 21.06.2005 21:47:57 | mo: 07.04.2002 14:49:38 -=- INTERV~1 -= InterVideo
cr: 21.06.2005 21:47:57 | mo: 27.12.2005 19:34:55 -=- MICROS~1 -= Microsoft
+- C:\Documents and Settings\Administrateur\Local Settings\Application Data
cr: 21.06.2005 21:47:56 | mo: 27.12.2005 19:34:56 -=- MICROS~1 -= Microsoft
+- C:\Documents and Settings\All Users\Application Data
cr: 28.05.2007 18:12:28 | mo: 28.05.2007 18:12:28 -=- Adobe ----= Adobe
cr: 03.12.2004 22:25:53 | mo: 03.12.2004 22:25:53 -=- Ahead ----= Ahead
cr: 20.05.2006 18:15:21 | mo: 20.05.2006 18:15:21 -=- ANTIVI~1 -= AntiVir PersonalEdition classic
cr: 27.12.2005 19:35:38 | mo: 27.12.2005 19:35:38 -=- Avg7 -----= Avg7
cr: 03.12.2004 22:45:01 | mo: 03.12.2004 22:45:01 -=- CYBERL~1 -= CyberLink
cr: 25.07.2004 21:54:42 | mo: 29.04.2006 14:23:04 -=- DEADSO~1 -= Deadsoapchinjugs
cr: 14.06.2005 20:53:27 | mo: 19.06.2005 15:53:52 -=- DVDSHR~1 -= DVD Shrink
cr: 26.01.2007 13:05:28 | mo: 30.12.2007 14:45:53 -=- Google ---= Google
cr: 04.10.2007 19:05:15 | mo: 04.10.2007 19:05:15 -=- ifolor ---= ifolor
cr: 28.08.2005 23:47:39 | mo: 28.08.2005 23:47:39 -=- INSTAL~1 -= InstallShield
cr: 08.03.2007 21:52:14 | mo: 27.08.2007 17:03:59 -=- JOLLYB~1 -= JollyBear
cr: 07.10.2007 15:36:19 | mo: 22.12.2007 23:24:07 -=- KASPER~1 -= Kaspersky Lab
cr: 20.11.2004 23:32:05 | mo: 20.11.2004 23:32:05 -=- MACROV~1 -= Macrovision
cr: 22.05.2005 13:10:20 | mo: 14.11.2005 21:22:45 -=- MESSEN~1 -= Messenger Plus!
cr: 06.04.2002 19:36:33 | mo: 30.08.2006 10:07:33 -=- MICROS~1 -= Microsoft
cr: 29.12.2002 22:11:53 | mo: 29.12.2002 22:11:53 -=- MSN6 -----= MSN6
cr: 31.10.2005 17:35:01 | mo: 31.10.2005 17:35:01 -=- MUVEET~1 -= muvee Technologies
cr: 09.10.2005 13:55:28 | mo: 29.04.2006 09:58:36 -=- NEWFOR~1 -= newforgreybias
cr: 01.05.2005 13:00:08 | mo: 01.05.2005 13:00:08 -=- PIXELS~1 -= pixelStorm
cr: 12.12.2006 18:30:22 | mo: 10.02.2007 08:43:28 -=- PLAYFI~1 -= PlayFirst
cr: 23.02.2004 20:45:01 | mo: 23.02.2004 20:48:30 -=- QUICKT~1 -= QuickTime
cr: 25.04.2007 16:23:43 | mo: 25.04.2007 16:23:43 -=- Runic ----= Runic
cr: 17.06.2007 17:49:34 | mo: 17.06.2007 17:49:34 -=- SANDLO~1 -= Sandlot Games
cr: 06.04.2002 18:52:23 | mo: 06.04.2002 18:52:23 -=- SBSI -----= SBSI
cr: 24.04.2002 20:29:57 | mo: 24.04.2002 20:29:58 -=- SBT ------= SBT
cr: 18.02.2005 22:26:24 | mo: 07.10.2007 22:57:09 -=- Skype ----= Skype
cr: 19.03.2007 11:05:15 | mo: 19.03.2007 11:05:15 -=- SPINTO~1 -= SpinTop Games
cr: 05.06.2003 17:58:42 | mo: 29.12.2007 15:49:52 -=- Symantec -= Symantec
cr: 30.12.2007 16:24:52 | mo: 30.12.2007 22:47:03 -=- TEMP -----= TEMP
cr: 30.07.2006 19:53:48 | mo: 30.07.2006 19:53:48 -=- WINDOW~1 -= Windows Genuine Advantage
cr: 22.08.2004 23:22:42 | mo: 02.03.2007 09:21:25 -=- Zylom ----= Zylom
+- C:\Documents and Settings\AsD\Application Data
cr: 10.09.2003 18:51:23 | mo: 10.09.2003 18:51:26 -=- ACAMPREF -= ACAMPREF
cr: 25.04.2002 11:48:07 | mo: 08.10.2007 23:56:30 -=- Adobe ----= Adobe
cr: 11.04.2005 19:01:49 | mo: 09.10.2007 08:57:01 -=- AdobeUM --= AdobeUM
cr: 08.12.2004 23:11:10 | mo: 19.06.2005 15:11:31 -=- Ahead ----= Ahead
cr: 27.02.2004 01:50:25 | mo: 27.02.2004 01:50:29 -=- ArcSoft --= ArcSoft
cr: 05.01.2007 22:10:46 | mo: 28.06.2007 15:53:31 -=- BEEPIN~1 -= Beep Industries
cr: 26.01.2007 18:09:59 | mo: 26.01.2007 18:09:59 -=- CANVAS~1 -= Canvas Multi-Media
cr: 27.02.2004 00:54:04 | mo: 27.02.2004 00:54:05 -=- Creative -= Creative
cr: 15.10.2004 14:33:22 | mo: 29.04.2006 14:24:00 -=- CURBAX~1 -= Curb Axis Rect
cr: 04.12.2004 12:07:32 | mo: 04.12.2004 12:07:32 -=- CYBERL~1 -= CyberLink
cr: 16.07.2007 22:19:11 | mo: 10.11.2007 22:19:10 -=- GAIJIN~1 -= Gaijin Ent
cr: 08.11.2005 13:40:04 | mo: 26.01.2007 19:06:03 -=- Google ---= Google
cr: 31.05.2003 17:24:06 | mo: 31.05.2003 17:24:06 -=- Help -----= Help
cr: 10.11.2003 21:52:19 | mo: 16.02.2005 21:23:38 -=- ICQ ------= ICQ
cr: 10.11.2003 21:51:42 | mo: 16.02.2005 21:28:32 -=- ICQLite --= ICQLite
cr: 25.04.2002 11:48:07 | mo: 19.12.2007 14:42:03 -=- IDENTI~1 -= Identities
cr: 04.10.2007 19:05:21 | mo: 04.10.2007 19:05:21 -=- ifolor ---= ifolor
cr: 25.04.2002 11:48:07 | mo: 07.04.2002 14:46:34 -=- INTERT~1 -= InterTrust
cr: 25.04.2002 11:48:07 | mo: 07.04.2002 14:49:38 -=- INTERV~1 -= InterVideo
cr: 01.05.2007 17:24:44 | mo: 01.05.2007 17:24:44 -=- iWin -----= iWin
cr: 05.12.2007 14:24:26 | mo: 05.12.2007 14:24:26 -=- JANESH~1 -= Jane s Hotel
cr: 16.06.2005 20:58:32 | mo: 16.06.2005 20:58:32 -=- KAZAAL~1 -= Kazaa Lite
cr: 30.08.2006 10:07:47 | mo: 30.08.2006 10:07:47 -=- Lavasoft -= Lavasoft
cr: 19.10.2003 14:52:21 | mo: 27.02.2007 17:17:08 -=- MACROM~1 -= Macromedia
cr: 25.04.2002 11:48:06 | mo: 07.08.2007 14:07:37 -=- MICROS~1 -= Microsoft
cr: 16.05.2006 22:42:45 | mo: 16.05.2006 22:43:16 -=- Mozilla --= Mozilla
cr: 22.05.2003 18:24:53 | mo: 16.10.2007 19:38:33 -=- MSN6 -----= MSN6
cr: 31.10.2005 17:51:33 | mo: 31.10.2005 17:57:01 -=- MUVEET~1 -= muvee Technologies
cr: 02.05.2006 20:56:57 | mo: 02.05.2006 20:56:57 -=- PHOTOC~1 -= Photocolor
cr: 12.12.2006 18:30:22 | mo: 04.08.2007 15:58:14 -=- PLAYFI~1 -= PlayFirst
cr: 28.02.2005 19:17:46 | mo: 15.05.2005 11:11:57 -=- Real -----= Real
cr: 13.08.2005 11:00:55 | mo: 13.08.2005 13:25:30 -=- REMOTE~1 -= Remote bib
cr: 13.01.2006 21:19:39 | mo: 08.10.2007 22:09:30 -=- Skype ----= Skype
cr: 01.03.2006 13:01:29 | mo: 01.03.2006 13:01:29 -=- Sun ------= Sun
cr: 05.06.2003 17:58:52 | mo: 05.06.2003 17:58:52 -=- Symantec -= Symantec
cr: 02.08.2006 17:52:58 | mo: 03.08.2006 11:50:25 -=- Vso ------= Vso
cr: 16.09.2004 23:57:38 | mo: 19.12.2007 14:42:01 -=- Zylom ----= Zylom
+- C:\Documents and Settings\AsD\Local Settings\Application Data
cr: 11.04.2005 19:01:47 | mo: 05.06.2007 16:43:52 -=- Adobe ----= Adobe
cr: 06.11.2005 00:05:09 | mo: 01.12.2007 16:43:57 -=- APPLIC~1 -= ApplicationHistory
cr: 22.09.2007 12:35:38 | mo: 22.09.2007 12:35:38 -=- COLORP~1 -= ColorPlaza
cr: 08.11.2005 13:40:03 | mo: 26.01.2007 14:30:53 -=- Google ---= Google
cr: 30.08.2007 15:36:17 | mo: 30.08.2007 15:36:17 -=- GRUBBY~1 -= Grubby Games
cr: 31.05.2003 17:24:06 | mo: 31.05.2003 17:24:06 -=- Help -----= Help
cr: 11.06.2002 20:41:21 | mo: 11.06.2002 20:41:21 -=- IDENTI~1 -= Identities
cr: 30.06.2003 17:12:30 | mo: 14.11.2003 13:25:07 -=- IM -------= IM
cr: 08.03.2007 21:52:14 | mo: 27.08.2007 17:03:59 -=- JOLLYB~1 -= JollyBear
cr: 25.04.2002 11:48:06 | mo: 03.08.2007 15:19:28 -=- MICROS~1 -= Microsoft
cr: 16.05.2006 22:43:16 | mo: 16.05.2006 22:43:16 -=- Mozilla --= Mozilla
cr: 01.05.2006 12:45:33 | mo: 16.08.2007 00:21:43 -=- WMTOOL~1 -= WMTools Downloaded Files
___________________________________________________________________________
[Listing du dossier Program Files]
+- C:\Program Files
cr: 29.12.2007 21:09:13 | mo: 30.12.2007 02:12:47 -=- A-SQUA~1 -= a-squared Anti-Malware
cr: 27.11.2002 21:18:00 | mo: 28.05.2007 18:09:19 -=- Adobe ----= Adobe
cr: 26.12.2007 11:05:47 | mo: 29.12.2007 16:59:30 -=- ADVANC~1 -= AdvancedCleaner Free
cr: 07.08.2007 14:22:44 | mo: 07.08.2007 14:22:44 -=- Adverts --= Adverts
cr: 07.04.2002 14:42:40 | mo: 03.12.2004 22:28:42 -=- ahead ----= ahead
cr: 08.12.2003 21:26:41 | mo: 08.12.2003 21:26:41 -=- AIPTEK ---= AIPTEK
cr: 05.09.2005 22:36:06 | mo: 05.09.2005 22:36:06 -=- ALWILS~1 -= Alwil Software
cr: 25.09.2002 21:34:12 | mo: 25.09.2002 21:34:12 -=- APOGEC~1 -= Apogée Conception
cr: 27.02.2004 01:46:55 | mo: 05.04.2005 20:02:47 -=- ArcSoft --= ArcSoft
cr: 15.01.2006 00:26:04 | mo: 24.01.2006 00:39:58 -=- AVVCS3~1.0 --= AV VCS 3.0
cr: 27.12.2005 19:49:34 | mo: 11.06.2006 11:45:49 -=- AVPERS~1 -= AVPersonal
cr: 27.11.2006 11:17:49 | mo: 27.11.2006 11:17:49 -=- AXISCO~1 -= Axis Communications
cr: 05.07.2002 00:07:42 | mo: 05.07.2002 00:08:23 -=- BAKAWI~1 -= Baka WinMX
cr: 23.12.2007 00:17:31 | mo: 23.12.2007 00:21:51 -=- BEJEWE~1 -= Bejeweled 2 Deluxe
cr: 26.04.2002 22:53:34 | mo: 26.04.2002 22:53:34 -=- BLACKI~1 -= Black Isle
cr: 18.10.2003 20:38:16 | mo: 24.10.2003 18:11:51 -=- Cakewalk -= Cakewalk
cr: 14.03.2003 12:49:21 | mo: 16.06.2004 18:46:03 -=- COMMON~1 -= Common files
cr: 06.04.2002 18:43:00 | mo: 06.04.2002 18:43:00 -=- COMPLU~1 -= ComPlus Applications
cr: 27.02.2004 00:41:15 | mo: 27.02.2004 00:49:35 -=- Creative -= Creative
cr: 13.08.2005 11:00:46 | mo: 13.08.2005 11:00:46 -=- CURBAX~1 -= Curb Axis Rect
cr: 03.12.2004 22:44:50 | mo: 03.12.2004 22:44:57 -=- CYBERL~1 -= CyberLink
cr: 22.12.2007 11:34:59 | mo: 22.12.2007 11:35:33 -=- DCADSG~1 -= Dcads Games Collection
cr: 27.11.2002 20:25:26 | mo: 27.11.2002 20:25:26 -=- directx --= directx
cr: 25.10.2003 00:18:11 | mo: 06.02.2006 19:38:07 -=- DivX -----= DivX
cr: 18.07.2005 22:40:40 | mo: 18.07.2005 22:42:27 -=- DVDDEC~1 -= DVD Decrypter
cr: 20.06.2003 18:16:00 | mo: 19.11.2007 23:23:10 -=- eMule ----= eMule
cr: 07.04.2002 14:27:08 | mo: 07.04.2002 14:27:09 -=- EuroTool -= EuroTool
cr: 06.04.2002 19:37:13 | mo: 28.12.2007 21:13:06 -=- FICHIE~1 -= Fichiers communs
cr: 09.09.2002 17:29:01 | mo: 01.02.2007 21:49:49 -=- GenTra ---= GenTra
cr: 29.04.2006 21:22:11 | mo: 29.04.2006 21:22:51 -=- GIMP-2.0 -= GIMP-2.0
cr: 08.11.2005 13:39:30 | mo: 30.12.2007 14:46:26 -=- Google ---= Google
cr: 01.02.2007 21:32:36 | mo: 01.02.2007 21:32:36 -=- Grisoft --= Grisoft
cr: 07.08.2002 20:18:10 | mo: 27.01.2004 12:54:59 -=- ICQ ------= ICQ
cr: 06.02.2003 16:17:00 | mo: 29.12.2007 14:53:04 -=- ICQLite --= ICQLite
cr: 04.10.2007 19:05:15 | mo: 04.10.2007 19:05:15 -=- ifolor ---= ifolor
cr: 24.04.2002 21:34:50 | mo: 01.02.2007 21:49:53 -=- iHome ----= iHome
cr: 07.04.2002 14:40:13 | mo: 08.11.2005 13:39:29 -=- INSTAL~1 -= InstallShield Installation Information
cr: 07.04.2002 14:40:24 | mo: 07.04.2002 14:40:24 -=- Intel ----= Intel
cr: 06.04.2002 18:43:21 | mo: 12.12.2007 15:59:30 -=- INTERN~1 -= Internet Explorer
cr: 07.04.2002 14:44:21 | mo: 07.04.2002 14:44:21 -=- INTERV~1 -= InterVideo
cr: 28.08.2005 23:42:17 | mo: 30.10.2005 18:03:47 -=- JASCSO~1 -= Jasc Software Inc
cr: 27.11.2005 15:17:24 | mo: 12.02.2007 20:39:39 -=- Java -----= Java
cr: 07.10.2007 15:36:19 | mo: 30.12.2007 13:20:48 -=- KASPER~1 -= Kaspersky Lab
cr: 30.08.2006 10:07:32 | mo: 30.08.2006 10:07:32 -=- Lavasoft -= Lavasoft
cr: 20.02.2005 18:04:20 | mo: 20.02.2005 18:04:20 -=- Lexibook -= Lexibook
cr: 15.01.2006 23:15:54 | mo: 15.01.2006 23:15:54 -=- Lexmark --= Lexmark
cr: 24.04.2002 20:44:50 | mo: 29.12.2007 14:53:37 -=- LEXMAR~1 -= LexmarkX73
cr: 25.12.2007 23:20:57 | mo: 25.12.2007 23:20:57 -=- LimeWire -= LimeWire
cr: 21.12.2003 22:58:59 | mo: 21.12.2003 23:02:21 -=- Logitech -= Logitech
cr: 31.12.2007 12:54:37 | mo: 31.12.2007 13:02:47 -=- Lopxp ----= Lopxp
cr: 13.11.2007 12:51:12 | mo: 30.12.2007 00:59:48 -=- MACROG~1 -= Macrogaming
cr: 28.07.2007 22:51:21 | mo: 28.07.2007 22:51:21 -=- MAGIX ----= MAGIX
cr: 06.04.2002 18:42:02 | mo: 15.01.2006 00:13:29 -=- MESSEN~1 -= Messenger
cr: 01.06.2004 23:06:41 | mo: 30.09.2006 21:15:34 -=- MESSEN~3 -= Messenger Plus! 3
cr: 07.08.2007 14:22:15 | mo: 07.08.2007 14:22:19 -=- MESSEN~2 -= Messenger Plus! Live
cr: 24.04.2002 20:58:00 | mo: 24.04.2002 20:58:00 -=- MGI ------= MGI
cr: 08.07.2002 19:59:31 | mo: 13.03.2005 15:30:07 -=- MICROA~1 -= Micro Application
cr: 06.04.2002 18:46:10 | mo: 24.04.2002 20:29:19 -=- MICROS~1 -= microsoft frontpage
cr: 24.04.2002 20:24:13 | mo: 24.04.2002 20:30:08 -=- MICROS~2 -= Microsoft Office
cr: 31.10.2005 18:21:23 | mo: 31.10.2005 18:21:31 -=- MONKEY~1 -= MonkeyPhoto
cr: 06.04.2002 18:43:41 | mo: 09.10.2005 13:10:16 -=- MOVIEM~1 -= Movie Maker
cr: 16.05.2006 22:42:43 | mo: 29.12.2007 20:26:30 -=- MOZILL~1 -= Mozilla Firefox
cr: 29.08.2005 18:19:05 | mo: 29.08.2005 18:19:09 -=- MP3PLA~1 -= MP3 Player Utilities
cr: 06.04.2002 18:41:59 | mo: 29.12.2002 22:13:47 -=- MSN ------= MSN
cr: 06.04.2002 18:41:56 | mo: 06.04.2002 18:41:56 -=- MSNGAM~1 -= MSN Gaming Zone
cr: 22.05.2006 09:23:59 | mo: 16.10.2007 19:52:43 -=- MSNMES~1 -= MSN Messenger
cr: 27.07.2005 20:23:30 | mo: 27.07.2005 20:23:30 -=- MSNTWE~1 -= MSNTweaker
cr: 29.07.2007 19:38:35 | mo: 29.07.2007 19:38:35 -=- MSXML4~1.0 -= MSXML 4.0
cr: 06.04.2002 18:43:27 | mo: 09.10.2005 13:03:35 -=- NETMEE~1 -= NetMeeting
cr: 24.04.2002 21:07:38 | mo: 24.04.2002 21:08:39 -=- Netscape -= Netscape
cr: 28.12.2007 19:18:07 | mo: 28.12.2007 21:16:48 -=- NORTON~1 -= Norton 360
cr: 11.02.2004 13:22:52 | mo: 11.04.2005 18:46:48 -=- OBERON~1 -= Oberon Media
cr: 06.04.2002 18:43:24 | mo: 15.06.2007 00:16:32 -=- OUTLOO~1 -= Outlook Express
cr: 02.05.2006 20:30:07 | mo: 04.10.2007 19:03:30 -=- PHOTOC~1 -= Photocolor
cr: 04.08.2005 21:26:23 | mo: 04.08.2005 21:54:33 -=- PHOTOF~1 -= PhotoFiltre
cr: 24.04.2002 20:35:32 | mo: 14.12.2003 21:35:59 -=- PSP3FR ---= PSP3FR
cr: 23.02.2004 20:44:22 | mo: 29.12.2007 17:01:19 -=- QUICKT~1 -= QuickTime
cr: 09.09.2002 14:20:01 | mo: 05.08.2005 22:52:17 -=- Real -----= Real
cr: 15.11.2007 00:47:04 | mo: 15.11.2007 00:47:04 -=- REFLEX~1 -= ReflexiveArcade
cr: 21.05.2004 16:00:28 | mo: 21.05.2004 16:00:28 -=- SERENE~1 -= SereneScreen
cr: 06.04.2002 18:42:09 | mo: 06.04.2002 18:44:01 -=- SERVIC~1 -= Services en ligne
cr: 01.07.2002 16:54:19 | mo: 01.07.2002 16:54:19 -=- Shiny ----= Shiny
cr: 18.02.2005 22:26:00 | mo: 07.10.2007 22:56:04 -=- Skype ----= Skype
cr: 28.02.2005 20:23:13 | mo: 17.11.2005 23:39:07 -=- SlySoft --= SlySoft
cr: 24.04.2002 20:29:56 | mo: 24.04.2002 20:29:56 -=- SNAPSH~1 -= Snapshot Viewer
cr: 25.12.2002 20:10:57 | mo: 07.05.2005 10:53:50 -=- SRMP31~1.0 -= SRMP3 1.0
cr: 13.08.2002 22:23:38 | mo: 20.05.2006 18:03:47 -=- STMICR~1 -= STMicroelectronics
cr: 28.12.2007 22:34:31 | mo: 28.12.2007 22:34:37 -=- Symantec -= Symantec
cr: 03.10.2003 23:43:14 | mo: 03.10.2003 23:43:14 -=- TryMedia -= TryMedia
cr: 16.08.2005 00:03:40 | mo: 23.08.2005 17:16:00 -=- TWEAK-~1 -= Tweak-XP Pro 4
cr: 06.04.2002 18:50:02 | mo: 31.05.2003 23:00:02 -=- UNINST~1 -= Uninstall Information
cr: 31.10.2005 17:04:59 | mo: 31.10.2005 17:15:27 -=- VISICO~1 -= Visicom Media
cr: 06.04.2005 23:07:07 | mo: 02.08.2006 17:51:38 -=- vso ------= vso
cr: 07.08.2007 14:22:18 | mo: 07.08.2007 14:22:18 -=- WI1F86~1 -= Windows Live
cr: 09.07.2007 20:59:03 | mo: 18.10.2007 22:34:23 -=- WINDOW~4 -= Windows Media Connect 2
cr: 06.04.2002 18:43:29 | mo: 18.10.2007 22:34:16 -=- WINDOW~3 -= Windows Media Player
cr: 06.04.2002 18:41:52 | mo: 09.10.2005 13:03:22 -=- WINDOW~1 -= Windows NT
cr: 06.04.2002 18:42:09 | mo: 17.09.2004 20:27:21 -=- WINDOW~2 -= WindowsUpdate
cr: 08.03.2005 15:48:49 | mo: 29.04.2006 10:31:47 -=- WinRAR ---= WinRAR
cr: 01.08.2003 14:49:18 | mo: 01.08.2003 14:49:18 -=- WON ------= WON
cr: 06.04.2002 18:46:10 | mo: 06.04.2002 18:46:10 -=- xerox ----= xerox
cr: 30.12.2007 14:23:23 | mo: 30.12.2007 14:26:46 -=- XOFTSP~1 -= XoftSpySE
cr: 01.02.2007 21:29:33 | mo: 14.04.2007 16:53:20 -=- Yahoo! ---= Yahoo!
cr: 22.12.2007 00:32:31 | mo: 22.12.2007 00:35:21 -=- ZUMADE~1 -= Zuma Deluxe
cr: 13.04.2006 19:30:20 | mo: 22.12.2007 11:23:21 -=- ZYLOMG~1 -= Zylom Games
___________________________________________________________________________
[Recherche programmes connus, liés à CiD]
C:\Program Files\Messenger Plus! Live
___________________________________________________________________________
[Clés registre de démarrage]
___________________________________________________________________________
[Popups autorisés]
[-] Internet Explorer :
*.zylom.com
*.zylomgames.com
fr.launch.yahoo.com
fr.music.yahoo.com
www.pense-malin.com
fra.dolcegabbana.it
PopupMgr
[-] Mozilla Firefox
host popup 1 im-adventskalender.de
host popup 1 www.camel.ch
host popup 1 www.cultimedia.ch
host popup 1 www.sheba.ch
[-] Suite Mozilla / SeaMonkey
___________________________________________________________________________
[Suggestion nettoyage registre]
- Aucune suggestion.
- Fin du rapport - -
bonjour et bonne année !!!!!!!¨
alors voilà j'ai fait tout ça.......
voici le premier rapport demandé :
Rapport Lopxp fait le 31.12.2007 à 13:02:07
Exécuté dans : C:\Program Files\Lopxp
Liste des processus actifs :
PID : 476 C:\WINDOWS\System32\smss.exe
PID : 540 C:\WINDOWS\system32\csrss.exe
PID : 564 C:\WINDOWS\system32\winlogon.exe
PID : 608 C:\WINDOWS\system32\services.exe
PID : 620 C:\WINDOWS\system32\lsass.exe
PID : 780 C:\WINDOWS\system32\svchost.exe
PID : 828 C:\WINDOWS\system32\svchost.exe
PID : 892 C:\WINDOWS\System32\svchost.exe
PID : 948 C:\WINDOWS\System32\svchost.exe
PID : 1088 C:\WINDOWS\System32\svchost.exe
PID : 1308 C:\WINDOWS\Explorer.EXE
PID : 1404 C:\WINDOWS\system32\LEXBCES.EXE
PID : 1440 C:\WINDOWS\system32\spoolsv.exe
PID : 1636 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
PID : 1644 C:\WINDOWS\system32\ctfmon.exe
PID : 1688 C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
PID : 1752 C:\Program Files\Logitech\MouseWare\system\em_exec.exe
PID : 1784 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
PID : 1820 C:\Program Files\AVPersonal\AVWUPSRV.EXE
PID : 1840 C:\WINDOWS\System32\drivers\CDAC11BA.EXE
PID : 1916 C:\WINDOWS\System32\mnmsrvc.exe
PID : 1972 C:\WINDOWS\System32\nvsvc32.exe
PID : 2044 C:\WINDOWS\System32\svchost.exe
PID : 184 C:\WINDOWS\system32\rundll32.exe
PID : 1624 C:\WINDOWS\System32\alg.exe
PID : 2472 C:\WINDOWS\System32\svchost.exe
PID : 2584 C:\WINDOWS\system32\cmd.exe
PID : 176 C:\Program Files\Lopxp\tools\pv.exe
___________________________________________________________________________
[Tâches planifiées]
C:\WINDOWS\tasks\AF7F43A79180F577.job
Cr : 20.09.2004 à 19:33
Mo : 31.12.2007 à 13:00
Fichier exécuté : c\progra~1\curbax~1\clock mail window.exe
C:\WINDOWS\tasks\XoftSpySE 2.job
Cr : 30.12.2007 à 14:23
Mo : 31.12.2007 à 12:30
Fichier exécuté : C\Program Files\XoftSpySE\XoftSpy.exe ShowReminders
C:\WINDOWS\tasks\XoftSpySE.job
Cr : 30.12.2007 à 14:23
Mo : 30.12.2007 à 14:23
Fichier exécuté : C\Program Files\XoftSpySE\XoftSpy.exe -t
C:\WINDOWS\tasks\AD86DC2491954F98.job
Cr : 13.08.2005 à 11:01
Mo : 31.12.2007 à 13:00
Fichier exécuté : c:\docume~1\astrid~1\applic~1\curbax~1\clock mail window.exe
C:\WINDOWS\tasks\B2A4DABA90E34B3E.job
Cr : 24.07.2005 à 16:37
Mo : 31.12.2007 à 13:00
Fichier exécuté : c:\docume~1\davidm~1\applic~1\curbax~1\clock mail window.exe
___________________________________________________________________________
[Listing des dossiers Application Data]
cr: Date Création | mo: Date Modification -=- Nom Long -= Nom Court (8.3)
+- C:\Documents and Settings\Administrateur\Application Data
cr: 21.06.2005 21:47:57 | mo: 07.04.2002 14:46:34 -=- Adobe ----= Adobe
cr: 21.06.2005 21:47:57 | mo: 06.04.2002 18:46:03 -=- IDENTI~1 -= Identities
cr: 21.06.2005 21:47:57 | mo: 07.04.2002 14:46:34 -=- INTERT~1 -= InterTrust
cr: 21.06.2005 21:47:57 | mo: 07.04.2002 14:49:38 -=- INTERV~1 -= InterVideo
cr: 21.06.2005 21:47:57 | mo: 27.12.2005 19:34:55 -=- MICROS~1 -= Microsoft
+- C:\Documents and Settings\Administrateur\Local Settings\Application Data
cr: 21.06.2005 21:47:56 | mo: 27.12.2005 19:34:56 -=- MICROS~1 -= Microsoft
+- C:\Documents and Settings\All Users\Application Data
cr: 28.05.2007 18:12:28 | mo: 28.05.2007 18:12:28 -=- Adobe ----= Adobe
cr: 03.12.2004 22:25:53 | mo: 03.12.2004 22:25:53 -=- Ahead ----= Ahead
cr: 20.05.2006 18:15:21 | mo: 20.05.2006 18:15:21 -=- ANTIVI~1 -= AntiVir PersonalEdition classic
cr: 27.12.2005 19:35:38 | mo: 27.12.2005 19:35:38 -=- Avg7 -----= Avg7
cr: 03.12.2004 22:45:01 | mo: 03.12.2004 22:45:01 -=- CYBERL~1 -= CyberLink
cr: 25.07.2004 21:54:42 | mo: 29.04.2006 14:23:04 -=- DEADSO~1 -= Deadsoapchinjugs
cr: 14.06.2005 20:53:27 | mo: 19.06.2005 15:53:52 -=- DVDSHR~1 -= DVD Shrink
cr: 26.01.2007 13:05:28 | mo: 30.12.2007 14:45:53 -=- Google ---= Google
cr: 04.10.2007 19:05:15 | mo: 04.10.2007 19:05:15 -=- ifolor ---= ifolor
cr: 28.08.2005 23:47:39 | mo: 28.08.2005 23:47:39 -=- INSTAL~1 -= InstallShield
cr: 08.03.2007 21:52:14 | mo: 27.08.2007 17:03:59 -=- JOLLYB~1 -= JollyBear
cr: 07.10.2007 15:36:19 | mo: 22.12.2007 23:24:07 -=- KASPER~1 -= Kaspersky Lab
cr: 20.11.2004 23:32:05 | mo: 20.11.2004 23:32:05 -=- MACROV~1 -= Macrovision
cr: 22.05.2005 13:10:20 | mo: 14.11.2005 21:22:45 -=- MESSEN~1 -= Messenger Plus!
cr: 06.04.2002 19:36:33 | mo: 30.08.2006 10:07:33 -=- MICROS~1 -= Microsoft
cr: 29.12.2002 22:11:53 | mo: 29.12.2002 22:11:53 -=- MSN6 -----= MSN6
cr: 31.10.2005 17:35:01 | mo: 31.10.2005 17:35:01 -=- MUVEET~1 -= muvee Technologies
cr: 09.10.2005 13:55:28 | mo: 29.04.2006 09:58:36 -=- NEWFOR~1 -= newforgreybias
cr: 01.05.2005 13:00:08 | mo: 01.05.2005 13:00:08 -=- PIXELS~1 -= pixelStorm
cr: 12.12.2006 18:30:22 | mo: 10.02.2007 08:43:28 -=- PLAYFI~1 -= PlayFirst
cr: 23.02.2004 20:45:01 | mo: 23.02.2004 20:48:30 -=- QUICKT~1 -= QuickTime
cr: 25.04.2007 16:23:43 | mo: 25.04.2007 16:23:43 -=- Runic ----= Runic
cr: 17.06.2007 17:49:34 | mo: 17.06.2007 17:49:34 -=- SANDLO~1 -= Sandlot Games
cr: 06.04.2002 18:52:23 | mo: 06.04.2002 18:52:23 -=- SBSI -----= SBSI
cr: 24.04.2002 20:29:57 | mo: 24.04.2002 20:29:58 -=- SBT ------= SBT
cr: 18.02.2005 22:26:24 | mo: 07.10.2007 22:57:09 -=- Skype ----= Skype
cr: 19.03.2007 11:05:15 | mo: 19.03.2007 11:05:15 -=- SPINTO~1 -= SpinTop Games
cr: 05.06.2003 17:58:42 | mo: 29.12.2007 15:49:52 -=- Symantec -= Symantec
cr: 30.12.2007 16:24:52 | mo: 30.12.2007 22:47:03 -=- TEMP -----= TEMP
cr: 30.07.2006 19:53:48 | mo: 30.07.2006 19:53:48 -=- WINDOW~1 -= Windows Genuine Advantage
cr: 22.08.2004 23:22:42 | mo: 02.03.2007 09:21:25 -=- Zylom ----= Zylom
+- C:\Documents and Settings\AsD\Application Data
cr: 10.09.2003 18:51:23 | mo: 10.09.2003 18:51:26 -=- ACAMPREF -= ACAMPREF
cr: 25.04.2002 11:48:07 | mo: 08.10.2007 23:56:30 -=- Adobe ----= Adobe
cr: 11.04.2005 19:01:49 | mo: 09.10.2007 08:57:01 -=- AdobeUM --= AdobeUM
cr: 08.12.2004 23:11:10 | mo: 19.06.2005 15:11:31 -=- Ahead ----= Ahead
cr: 27.02.2004 01:50:25 | mo: 27.02.2004 01:50:29 -=- ArcSoft --= ArcSoft
cr: 05.01.2007 22:10:46 | mo: 28.06.2007 15:53:31 -=- BEEPIN~1 -= Beep Industries
cr: 26.01.2007 18:09:59 | mo: 26.01.2007 18:09:59 -=- CANVAS~1 -= Canvas Multi-Media
cr: 27.02.2004 00:54:04 | mo: 27.02.2004 00:54:05 -=- Creative -= Creative
cr: 15.10.2004 14:33:22 | mo: 29.04.2006 14:24:00 -=- CURBAX~1 -= Curb Axis Rect
cr: 04.12.2004 12:07:32 | mo: 04.12.2004 12:07:32 -=- CYBERL~1 -= CyberLink
cr: 16.07.2007 22:19:11 | mo: 10.11.2007 22:19:10 -=- GAIJIN~1 -= Gaijin Ent
cr: 08.11.2005 13:40:04 | mo: 26.01.2007 19:06:03 -=- Google ---= Google
cr: 31.05.2003 17:24:06 | mo: 31.05.2003 17:24:06 -=- Help -----= Help
cr: 10.11.2003 21:52:19 | mo: 16.02.2005 21:23:38 -=- ICQ ------= ICQ
cr: 10.11.2003 21:51:42 | mo: 16.02.2005 21:28:32 -=- ICQLite --= ICQLite
cr: 25.04.2002 11:48:07 | mo: 19.12.2007 14:42:03 -=- IDENTI~1 -= Identities
cr: 04.10.2007 19:05:21 | mo: 04.10.2007 19:05:21 -=- ifolor ---= ifolor
cr: 25.04.2002 11:48:07 | mo: 07.04.2002 14:46:34 -=- INTERT~1 -= InterTrust
cr: 25.04.2002 11:48:07 | mo: 07.04.2002 14:49:38 -=- INTERV~1 -= InterVideo
cr: 01.05.2007 17:24:44 | mo: 01.05.2007 17:24:44 -=- iWin -----= iWin
cr: 05.12.2007 14:24:26 | mo: 05.12.2007 14:24:26 -=- JANESH~1 -= Jane s Hotel
cr: 16.06.2005 20:58:32 | mo: 16.06.2005 20:58:32 -=- KAZAAL~1 -= Kazaa Lite
cr: 30.08.2006 10:07:47 | mo: 30.08.2006 10:07:47 -=- Lavasoft -= Lavasoft
cr: 19.10.2003 14:52:21 | mo: 27.02.2007 17:17:08 -=- MACROM~1 -= Macromedia
cr: 25.04.2002 11:48:06 | mo: 07.08.2007 14:07:37 -=- MICROS~1 -= Microsoft
cr: 16.05.2006 22:42:45 | mo: 16.05.2006 22:43:16 -=- Mozilla --= Mozilla
cr: 22.05.2003 18:24:53 | mo: 16.10.2007 19:38:33 -=- MSN6 -----= MSN6
cr: 31.10.2005 17:51:33 | mo: 31.10.2005 17:57:01 -=- MUVEET~1 -= muvee Technologies
cr: 02.05.2006 20:56:57 | mo: 02.05.2006 20:56:57 -=- PHOTOC~1 -= Photocolor
cr: 12.12.2006 18:30:22 | mo: 04.08.2007 15:58:14 -=- PLAYFI~1 -= PlayFirst
cr: 28.02.2005 19:17:46 | mo: 15.05.2005 11:11:57 -=- Real -----= Real
cr: 13.08.2005 11:00:55 | mo: 13.08.2005 13:25:30 -=- REMOTE~1 -= Remote bib
cr: 13.01.2006 21:19:39 | mo: 08.10.2007 22:09:30 -=- Skype ----= Skype
cr: 01.03.2006 13:01:29 | mo: 01.03.2006 13:01:29 -=- Sun ------= Sun
cr: 05.06.2003 17:58:52 | mo: 05.06.2003 17:58:52 -=- Symantec -= Symantec
cr: 02.08.2006 17:52:58 | mo: 03.08.2006 11:50:25 -=- Vso ------= Vso
cr: 16.09.2004 23:57:38 | mo: 19.12.2007 14:42:01 -=- Zylom ----= Zylom
+- C:\Documents and Settings\AsD\Local Settings\Application Data
cr: 11.04.2005 19:01:47 | mo: 05.06.2007 16:43:52 -=- Adobe ----= Adobe
cr: 06.11.2005 00:05:09 | mo: 01.12.2007 16:43:57 -=- APPLIC~1 -= ApplicationHistory
cr: 22.09.2007 12:35:38 | mo: 22.09.2007 12:35:38 -=- COLORP~1 -= ColorPlaza
cr: 08.11.2005 13:40:03 | mo: 26.01.2007 14:30:53 -=- Google ---= Google
cr: 30.08.2007 15:36:17 | mo: 30.08.2007 15:36:17 -=- GRUBBY~1 -= Grubby Games
cr: 31.05.2003 17:24:06 | mo: 31.05.2003 17:24:06 -=- Help -----= Help
cr: 11.06.2002 20:41:21 | mo: 11.06.2002 20:41:21 -=- IDENTI~1 -= Identities
cr: 30.06.2003 17:12:30 | mo: 14.11.2003 13:25:07 -=- IM -------= IM
cr: 08.03.2007 21:52:14 | mo: 27.08.2007 17:03:59 -=- JOLLYB~1 -= JollyBear
cr: 25.04.2002 11:48:06 | mo: 03.08.2007 15:19:28 -=- MICROS~1 -= Microsoft
cr: 16.05.2006 22:43:16 | mo: 16.05.2006 22:43:16 -=- Mozilla --= Mozilla
cr: 01.05.2006 12:45:33 | mo: 16.08.2007 00:21:43 -=- WMTOOL~1 -= WMTools Downloaded Files
___________________________________________________________________________
[Listing du dossier Program Files]
+- C:\Program Files
cr: 29.12.2007 21:09:13 | mo: 30.12.2007 02:12:47 -=- A-SQUA~1 -= a-squared Anti-Malware
cr: 27.11.2002 21:18:00 | mo: 28.05.2007 18:09:19 -=- Adobe ----= Adobe
cr: 26.12.2007 11:05:47 | mo: 29.12.2007 16:59:30 -=- ADVANC~1 -= AdvancedCleaner Free
cr: 07.08.2007 14:22:44 | mo: 07.08.2007 14:22:44 -=- Adverts --= Adverts
cr: 07.04.2002 14:42:40 | mo: 03.12.2004 22:28:42 -=- ahead ----= ahead
cr: 08.12.2003 21:26:41 | mo: 08.12.2003 21:26:41 -=- AIPTEK ---= AIPTEK
cr: 05.09.2005 22:36:06 | mo: 05.09.2005 22:36:06 -=- ALWILS~1 -= Alwil Software
cr: 25.09.2002 21:34:12 | mo: 25.09.2002 21:34:12 -=- APOGEC~1 -= Apogée Conception
cr: 27.02.2004 01:46:55 | mo: 05.04.2005 20:02:47 -=- ArcSoft --= ArcSoft
cr: 15.01.2006 00:26:04 | mo: 24.01.2006 00:39:58 -=- AVVCS3~1.0 --= AV VCS 3.0
cr: 27.12.2005 19:49:34 | mo: 11.06.2006 11:45:49 -=- AVPERS~1 -= AVPersonal
cr: 27.11.2006 11:17:49 | mo: 27.11.2006 11:17:49 -=- AXISCO~1 -= Axis Communications
cr: 05.07.2002 00:07:42 | mo: 05.07.2002 00:08:23 -=- BAKAWI~1 -= Baka WinMX
cr: 23.12.2007 00:17:31 | mo: 23.12.2007 00:21:51 -=- BEJEWE~1 -= Bejeweled 2 Deluxe
cr: 26.04.2002 22:53:34 | mo: 26.04.2002 22:53:34 -=- BLACKI~1 -= Black Isle
cr: 18.10.2003 20:38:16 | mo: 24.10.2003 18:11:51 -=- Cakewalk -= Cakewalk
cr: 14.03.2003 12:49:21 | mo: 16.06.2004 18:46:03 -=- COMMON~1 -= Common files
cr: 06.04.2002 18:43:00 | mo: 06.04.2002 18:43:00 -=- COMPLU~1 -= ComPlus Applications
cr: 27.02.2004 00:41:15 | mo: 27.02.2004 00:49:35 -=- Creative -= Creative
cr: 13.08.2005 11:00:46 | mo: 13.08.2005 11:00:46 -=- CURBAX~1 -= Curb Axis Rect
cr: 03.12.2004 22:44:50 | mo: 03.12.2004 22:44:57 -=- CYBERL~1 -= CyberLink
cr: 22.12.2007 11:34:59 | mo: 22.12.2007 11:35:33 -=- DCADSG~1 -= Dcads Games Collection
cr: 27.11.2002 20:25:26 | mo: 27.11.2002 20:25:26 -=- directx --= directx
cr: 25.10.2003 00:18:11 | mo: 06.02.2006 19:38:07 -=- DivX -----= DivX
cr: 18.07.2005 22:40:40 | mo: 18.07.2005 22:42:27 -=- DVDDEC~1 -= DVD Decrypter
cr: 20.06.2003 18:16:00 | mo: 19.11.2007 23:23:10 -=- eMule ----= eMule
cr: 07.04.2002 14:27:08 | mo: 07.04.2002 14:27:09 -=- EuroTool -= EuroTool
cr: 06.04.2002 19:37:13 | mo: 28.12.2007 21:13:06 -=- FICHIE~1 -= Fichiers communs
cr: 09.09.2002 17:29:01 | mo: 01.02.2007 21:49:49 -=- GenTra ---= GenTra
cr: 29.04.2006 21:22:11 | mo: 29.04.2006 21:22:51 -=- GIMP-2.0 -= GIMP-2.0
cr: 08.11.2005 13:39:30 | mo: 30.12.2007 14:46:26 -=- Google ---= Google
cr: 01.02.2007 21:32:36 | mo: 01.02.2007 21:32:36 -=- Grisoft --= Grisoft
cr: 07.08.2002 20:18:10 | mo: 27.01.2004 12:54:59 -=- ICQ ------= ICQ
cr: 06.02.2003 16:17:00 | mo: 29.12.2007 14:53:04 -=- ICQLite --= ICQLite
cr: 04.10.2007 19:05:15 | mo: 04.10.2007 19:05:15 -=- ifolor ---= ifolor
cr: 24.04.2002 21:34:50 | mo: 01.02.2007 21:49:53 -=- iHome ----= iHome
cr: 07.04.2002 14:40:13 | mo: 08.11.2005 13:39:29 -=- INSTAL~1 -= InstallShield Installation Information
cr: 07.04.2002 14:40:24 | mo: 07.04.2002 14:40:24 -=- Intel ----= Intel
cr: 06.04.2002 18:43:21 | mo: 12.12.2007 15:59:30 -=- INTERN~1 -= Internet Explorer
cr: 07.04.2002 14:44:21 | mo: 07.04.2002 14:44:21 -=- INTERV~1 -= InterVideo
cr: 28.08.2005 23:42:17 | mo: 30.10.2005 18:03:47 -=- JASCSO~1 -= Jasc Software Inc
cr: 27.11.2005 15:17:24 | mo: 12.02.2007 20:39:39 -=- Java -----= Java
cr: 07.10.2007 15:36:19 | mo: 30.12.2007 13:20:48 -=- KASPER~1 -= Kaspersky Lab
cr: 30.08.2006 10:07:32 | mo: 30.08.2006 10:07:32 -=- Lavasoft -= Lavasoft
cr: 20.02.2005 18:04:20 | mo: 20.02.2005 18:04:20 -=- Lexibook -= Lexibook
cr: 15.01.2006 23:15:54 | mo: 15.01.2006 23:15:54 -=- Lexmark --= Lexmark
cr: 24.04.2002 20:44:50 | mo: 29.12.2007 14:53:37 -=- LEXMAR~1 -= LexmarkX73
cr: 25.12.2007 23:20:57 | mo: 25.12.2007 23:20:57 -=- LimeWire -= LimeWire
cr: 21.12.2003 22:58:59 | mo: 21.12.2003 23:02:21 -=- Logitech -= Logitech
cr: 31.12.2007 12:54:37 | mo: 31.12.2007 13:02:47 -=- Lopxp ----= Lopxp
cr: 13.11.2007 12:51:12 | mo: 30.12.2007 00:59:48 -=- MACROG~1 -= Macrogaming
cr: 28.07.2007 22:51:21 | mo: 28.07.2007 22:51:21 -=- MAGIX ----= MAGIX
cr: 06.04.2002 18:42:02 | mo: 15.01.2006 00:13:29 -=- MESSEN~1 -= Messenger
cr: 01.06.2004 23:06:41 | mo: 30.09.2006 21:15:34 -=- MESSEN~3 -= Messenger Plus! 3
cr: 07.08.2007 14:22:15 | mo: 07.08.2007 14:22:19 -=- MESSEN~2 -= Messenger Plus! Live
cr: 24.04.2002 20:58:00 | mo: 24.04.2002 20:58:00 -=- MGI ------= MGI
cr: 08.07.2002 19:59:31 | mo: 13.03.2005 15:30:07 -=- MICROA~1 -= Micro Application
cr: 06.04.2002 18:46:10 | mo: 24.04.2002 20:29:19 -=- MICROS~1 -= microsoft frontpage
cr: 24.04.2002 20:24:13 | mo: 24.04.2002 20:30:08 -=- MICROS~2 -= Microsoft Office
cr: 31.10.2005 18:21:23 | mo: 31.10.2005 18:21:31 -=- MONKEY~1 -= MonkeyPhoto
cr: 06.04.2002 18:43:41 | mo: 09.10.2005 13:10:16 -=- MOVIEM~1 -= Movie Maker
cr: 16.05.2006 22:42:43 | mo: 29.12.2007 20:26:30 -=- MOZILL~1 -= Mozilla Firefox
cr: 29.08.2005 18:19:05 | mo: 29.08.2005 18:19:09 -=- MP3PLA~1 -= MP3 Player Utilities
cr: 06.04.2002 18:41:59 | mo: 29.12.2002 22:13:47 -=- MSN ------= MSN
cr: 06.04.2002 18:41:56 | mo: 06.04.2002 18:41:56 -=- MSNGAM~1 -= MSN Gaming Zone
cr: 22.05.2006 09:23:59 | mo: 16.10.2007 19:52:43 -=- MSNMES~1 -= MSN Messenger
cr: 27.07.2005 20:23:30 | mo: 27.07.2005 20:23:30 -=- MSNTWE~1 -= MSNTweaker
cr: 29.07.2007 19:38:35 | mo: 29.07.2007 19:38:35 -=- MSXML4~1.0 -= MSXML 4.0
cr: 06.04.2002 18:43:27 | mo: 09.10.2005 13:03:35 -=- NETMEE~1 -= NetMeeting
cr: 24.04.2002 21:07:38 | mo: 24.04.2002 21:08:39 -=- Netscape -= Netscape
cr: 28.12.2007 19:18:07 | mo: 28.12.2007 21:16:48 -=- NORTON~1 -= Norton 360
cr: 11.02.2004 13:22:52 | mo: 11.04.2005 18:46:48 -=- OBERON~1 -= Oberon Media
cr: 06.04.2002 18:43:24 | mo: 15.06.2007 00:16:32 -=- OUTLOO~1 -= Outlook Express
cr: 02.05.2006 20:30:07 | mo: 04.10.2007 19:03:30 -=- PHOTOC~1 -= Photocolor
cr: 04.08.2005 21:26:23 | mo: 04.08.2005 21:54:33 -=- PHOTOF~1 -= PhotoFiltre
cr: 24.04.2002 20:35:32 | mo: 14.12.2003 21:35:59 -=- PSP3FR ---= PSP3FR
cr: 23.02.2004 20:44:22 | mo: 29.12.2007 17:01:19 -=- QUICKT~1 -= QuickTime
cr: 09.09.2002 14:20:01 | mo: 05.08.2005 22:52:17 -=- Real -----= Real
cr: 15.11.2007 00:47:04 | mo: 15.11.2007 00:47:04 -=- REFLEX~1 -= ReflexiveArcade
cr: 21.05.2004 16:00:28 | mo: 21.05.2004 16:00:28 -=- SERENE~1 -= SereneScreen
cr: 06.04.2002 18:42:09 | mo: 06.04.2002 18:44:01 -=- SERVIC~1 -= Services en ligne
cr: 01.07.2002 16:54:19 | mo: 01.07.2002 16:54:19 -=- Shiny ----= Shiny
cr: 18.02.2005 22:26:00 | mo: 07.10.2007 22:56:04 -=- Skype ----= Skype
cr: 28.02.2005 20:23:13 | mo: 17.11.2005 23:39:07 -=- SlySoft --= SlySoft
cr: 24.04.2002 20:29:56 | mo: 24.04.2002 20:29:56 -=- SNAPSH~1 -= Snapshot Viewer
cr: 25.12.2002 20:10:57 | mo: 07.05.2005 10:53:50 -=- SRMP31~1.0 -= SRMP3 1.0
cr: 13.08.2002 22:23:38 | mo: 20.05.2006 18:03:47 -=- STMICR~1 -= STMicroelectronics
cr: 28.12.2007 22:34:31 | mo: 28.12.2007 22:34:37 -=- Symantec -= Symantec
cr: 03.10.2003 23:43:14 | mo: 03.10.2003 23:43:14 -=- TryMedia -= TryMedia
cr: 16.08.2005 00:03:40 | mo: 23.08.2005 17:16:00 -=- TWEAK-~1 -= Tweak-XP Pro 4
cr: 06.04.2002 18:50:02 | mo: 31.05.2003 23:00:02 -=- UNINST~1 -= Uninstall Information
cr: 31.10.2005 17:04:59 | mo: 31.10.2005 17:15:27 -=- VISICO~1 -= Visicom Media
cr: 06.04.2005 23:07:07 | mo: 02.08.2006 17:51:38 -=- vso ------= vso
cr: 07.08.2007 14:22:18 | mo: 07.08.2007 14:22:18 -=- WI1F86~1 -= Windows Live
cr: 09.07.2007 20:59:03 | mo: 18.10.2007 22:34:23 -=- WINDOW~4 -= Windows Media Connect 2
cr: 06.04.2002 18:43:29 | mo: 18.10.2007 22:34:16 -=- WINDOW~3 -= Windows Media Player
cr: 06.04.2002 18:41:52 | mo: 09.10.2005 13:03:22 -=- WINDOW~1 -= Windows NT
cr: 06.04.2002 18:42:09 | mo: 17.09.2004 20:27:21 -=- WINDOW~2 -= WindowsUpdate
cr: 08.03.2005 15:48:49 | mo: 29.04.2006 10:31:47 -=- WinRAR ---= WinRAR
cr: 01.08.2003 14:49:18 | mo: 01.08.2003 14:49:18 -=- WON ------= WON
cr: 06.04.2002 18:46:10 | mo: 06.04.2002 18:46:10 -=- xerox ----= xerox
cr: 30.12.2007 14:23:23 | mo: 30.12.2007 14:26:46 -=- XOFTSP~1 -= XoftSpySE
cr: 01.02.2007 21:29:33 | mo: 14.04.2007 16:53:20 -=- Yahoo! ---= Yahoo!
cr: 22.12.2007 00:32:31 | mo: 22.12.2007 00:35:21 -=- ZUMADE~1 -= Zuma Deluxe
cr: 13.04.2006 19:30:20 | mo: 22.12.2007 11:23:21 -=- ZYLOMG~1 -= Zylom Games
___________________________________________________________________________
[Recherche programmes connus, liés à CiD]
C:\Program Files\Messenger Plus! Live
___________________________________________________________________________
[Clés registre de démarrage]
___________________________________________________________________________
[Popups autorisés]
[-] Internet Explorer :
*.zylom.com
*.zylomgames.com
fr.launch.yahoo.com
fr.music.yahoo.com
www.pense-malin.com
fra.dolcegabbana.it
PopupMgr
[-] Mozilla Firefox
host popup 1 im-adventskalender.de
host popup 1 www.camel.ch
host popup 1 www.cultimedia.ch
host popup 1 www.sheba.ch
[-] Suite Mozilla / SeaMonkey
___________________________________________________________________________
[Suggestion nettoyage registre]
- Aucune suggestion.
- Fin du rapport - -
voici le 2 eme :
-----------------------------[ Lop S&D 2.0.1 ]---------------------------
Microsoft Windows XP [version 5.1.2600] [ OS : Windows_NT ]
"C:\Program Files\Lop SD"
[ 01.01.2008 | 18:25:53.56 ] [ MAB ]
-------------[ Listing des dossiers dans Application Data ]------------
C:\Documents and Settings\Administrateur\APPLIC~1\Microsoft
C:\Documents and Settings\Administrateur\APPLIC~1\sversion.ini
C:\Documents and Settings\Administrateur\APPLIC~1\InterVideo
C:\Documents and Settings\Administrateur\APPLIC~1\Adobe
C:\Documents and Settings\Administrateur\APPLIC~1\InterTrust
C:\Documents and Settings\Administrateur\APPLIC~1\desktop.ini
C:\Documents and Settings\Administrateur\APPLIC~1\Identities
C:\Documents and Settings\All Users\APPLIC~1\TEMP
C:\Documents and Settings\All Users\APPLIC~1\Google
C:\Documents and Settings\All Users\APPLIC~1\Symantec
C:\Documents and Settings\All Users\APPLIC~1\LUInstall.LiveUpdate
C:\Documents and Settings\All Users\APPLIC~1\Kaspersky Lab
C:\Documents and Settings\All Users\APPLIC~1\Skype
C:\Documents and Settings\All Users\APPLIC~1\ifolor
C:\Documents and Settings\All Users\APPLIC~1\JollyBear
C:\Documents and Settings\All Users\APPLIC~1\Sandlot Games
C:\Documents and Settings\All Users\APPLIC~1\Adobe
C:\Documents and Settings\All Users\APPLIC~1\Runic
C:\Documents and Settings\All Users\APPLIC~1\SpinTop Games
C:\Documents and Settings\All Users\APPLIC~1\Zylom
C:\Documents and Settings\All Users\APPLIC~1\PlayFirst
C:\Documents and Settings\All Users\APPLIC~1\Microsoft
C:\Documents and Settings\All Users\APPLIC~1\Windows Genuine Advantage
C:\Documents and Settings\All Users\APPLIC~1\AntiVir PersonalEdition classic
C:\Documents and Settings\All Users\APPLIC~1\Deadsoapchinjugs
C:\Documents and Settings\All Users\APPLIC~1\newforgreybias
C:\Documents and Settings\All Users\APPLIC~1\Avg7
C:\Documents and Settings\All Users\APPLIC~1\Messenger Plus!
C:\Documents and Settings\All Users\APPLIC~1\muvee Technologies
C:\Documents and Settings\All Users\APPLIC~1\InstallShield
C:\Documents and Settings\All Users\APPLIC~1\DVD Shrink
C:\Documents and Settings\All Users\APPLIC~1\pixelStorm
C:\Documents and Settings\All Users\APPLIC~1\CyberLink
C:\Documents and Settings\All Users\APPLIC~1\Ahead
C:\Documents and Settings\All Users\APPLIC~1\Macrovision
C:\Documents and Settings\All Users\APPLIC~1\QuickTime
C:\Documents and Settings\All Users\APPLIC~1\MSN6
C:\Documents and Settings\All Users\APPLIC~1\SBT
C:\Documents and Settings\All Users\APPLIC~1\desktop.ini
C:\Documents and Settings\All Users\APPLIC~1\SBSI
C:\Documents and Settings\AsD\APPLIC~1\update.log
C:\Documents and Settings\AsD\APPLIC~1\Identities
C:\Documents and Settings\AsD\APPLIC~1\Zylom
C:\Documents and Settings\AsD\APPLIC~1\Jane s Hotel
C:\Documents and Settings\AsD\APPLIC~1\Gaijin Ent
C:\Documents and Settings\AsD\APPLIC~1\MSN6
C:\Documents and Settings\AsD\APPLIC~1\AdobeUM
C:\Documents and Settings\AsD\APPLIC~1\Adobe
C:\Documents and Settings\AsD\APPLIC~1\Skype
C:\Documents and Settings\AsD\APPLIC~1\ifolor
C:\Documents and Settings\AsD\APPLIC~1\Microsoft
C:\Documents and Settings\AsD\APPLIC~1\PlayFirst
C:\Documents and Settings\AsD\APPLIC~1\Beep Industries
C:\Documents and Settings\AsD\APPLIC~1\iWin
C:\Documents and Settings\AsD\APPLIC~1\Macromedia
C:\Documents and Settings\AsD\APPLIC~1\Google
C:\Documents and Settings\AsD\APPLIC~1\Canvas Multi-Media
C:\Documents and Settings\AsD\APPLIC~1\Lavasoft
C:\Documents and Settings\AsD\APPLIC~1\Vso
C:\Documents and Settings\AsD\APPLIC~1\Mozilla
C:\Documents and Settings\AsD\APPLIC~1\Photocolor
C:\Documents and Settings\AsD\APPLIC~1\Curb Axis Rect
C:\Documents and Settings\AsD\APPLIC~1\Sun
C:\Documents and Settings\AsD\APPLIC~1\muvee Technologies
C:\Documents and Settings\AsD\APPLIC~1\Remote bib
C:\Documents and Settings\AsD\APPLIC~1\Ahead
C:\Documents and Settings\AsD\APPLIC~1\Kazaa Lite
C:\Documents and Settings\AsD\APPLIC~1\Real
C:\Documents and Settings\AsD\APPLIC~1\ICQLite
C:\Documents and Settings\AsD\APPLIC~1\ICQ
C:\Documents and Settings\AsD\APPLIC~1\sversion.ini
C:\Documents and Settings\AsD\APPLIC~1\CyberLink
C:\Documents and Settings\AsD\APPLIC~1\ArcSoft
C:\Documents and Settings\AsD\APPLIC~1\Creative
C:\Documents and Settings\AsD\APPLIC~1\ACAMPREF
C:\Documents and Settings\AsD\APPLIC~1\Symantec
C:\Documents and Settings\AsD\APPLIC~1\Help
C:\Documents and Settings\AsD\APPLIC~1\InterVideo
C:\Documents and Settings\AsD\APPLIC~1\InterTrust
C:\Documents and Settings\AsD\APPLIC~1\desktop.ini
C:\Documents and Settings\Default User\APPLIC~1\Microsoft
C:\Documents and Settings\Default User\APPLIC~1\sversion.ini
C:\Documents and Settings\Default User\APPLIC~1\InterVideo
C:\Documents and Settings\Default User\APPLIC~1\Adobe
C:\Documents and Settings\Default User\APPLIC~1\InterTrust
C:\Documents and Settings\Default User\APPLIC~1\desktop.ini
C:\Documents and Settings\Default User\APPLIC~1\Identities
C:\Documents and Settings\LocalService\APPLIC~1\Microsoft
C:\Documents and Settings\NetworkService\APPLIC~1\Microsoft
C:\Documents and Settings\Propri‚taire\APPLIC~1\Microsoft
C:\Documents and Settings\Propri‚taire\APPLIC~1\sversion.ini
C:\Documents and Settings\Propri‚taire\APPLIC~1\InterVideo
C:\Documents and Settings\Propri‚taire\APPLIC~1\desktop.ini
C:\Documents and Settings\Propri‚taire\APPLIC~1\Identities
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[01.01.2008 17:00][--a------]C:\WINDOWS\tasks\XoftSpySE 2.job
[30.12.2007 14:23][--a------]C:\WINDOWS\tasks\XoftSpySE.job
[01.01.2008 18:00][--ah-----]C:\WINDOWS\tasks\AD86DC2491954F98.job
[01.01.2008 18:00][--ah-----]C:\WINDOWS\tasks\B2A4DABA90E34B3E.job
[01.01.2008 18:00][--ah-----]C:\WINDOWS\tasks\AF7F43A79180F577.job
[01.01.2008 13:20][--ah-----]C:\WINDOWS\tasks\SA.DAT
[28.08.2001 13:00][-r-h-----]C:\WINDOWS\tasks\desktop.ini
---------------[ Listing des dossiers dans C:\Program Files ]--------------
C:\Program Files\ACMonitor_X73.exe
C:\Program Files\ACMonitor_X73.ini
C:\Program Files\Adobe
C:\Program Files\AdvancedCleaner Free
C:\Program Files\Adverts
C:\Program Files\ahead
C:\Program Files\AIPTEK
C:\Program Files\Alwil Software
C:\Program Files\Apog‚e Conception
C:\Program Files\ArcSoft
C:\Program Files\a-squared Anti-Malware
C:\Program Files\AV VCS 3.0
C:\Program Files\avgas-setup-7.5.0.50.exe
C:\Program Files\AVPersonal
C:\Program Files\Axis Communications
C:\Program Files\Baka WinMX
C:\Program Files\Bejeweled 2 Deluxe
C:\Program Files\Black Isle
C:\Program Files\Cakewalk
C:\Program Files\captureflux_captureflux_5.2.3_francais_11147.zip
C:\Program Files\ccsetup136.exe
C:\Program Files\Common files
C:\Program Files\ComPlus Applications
C:\Program Files\Creative
C:\Program Files\Curb Axis Rect
C:\Program Files\CyberLink
C:\Program Files\Dcads Games Collection
C:\Program Files\directx
C:\Program Files\DivX
C:\Program Files\DVD Decrypter
C:\Program Files\DVD Shrink 3.2.lnk
C:\Program Files\dvdate_64fr.zip
C:\Program Files\eMule
C:\Program Files\EuroTool
C:\Program Files\Fichiers communs
C:\Program Files\GenTra
C:\Program Files\GIMP-2.0
C:\Program Files\Google
C:\Program Files\Grisoft
C:\Program Files\gtx73.ini
C:\Program Files\hijackthis.zip
C:\Program Files\ICQ
C:\Program Files\ICQLite
C:\Program Files\ifolor
C:\Program Files\iHome
C:\Program Files\Intel
C:\Program Files\Internet Explorer
C:\Program Files\InterVideo
C:\Program Files\Jasc Software Inc
C:\Program Files\Java
C:\Program Files\Kaspersky Lab
C:\Program Files\Lavasoft
C:\Program Files\Lexibook
C:\Program Files\Lexmark
C:\Program Files\LexmarkX73
C:\Program Files\LimeWire
C:\Program Files\Logitech
C:\Program Files\Lop SD
C:\Program Files\Lopxp
C:\Program Files\lxarscan.dll
C:\Program Files\Macrogaming
C:\Program Files\MAGIX
C:\Program Files\Messenger
C:\Program Files\Messenger Plus! 3
C:\Program Files\Messenger Plus! Live
C:\Program Files\MGI
C:\Program Files\Micro Application
C:\Program Files\microsoft frontpage
C:\Program Files\Microsoft Office
C:\Program Files\MonkeyPhoto
C:\Program Files\Movie Maker
C:\Program Files\Mozilla Firefox
C:\Program Files\MP3 Player Utilities
C:\Program Files\MSN
C:\Program Files\MSN Gaming Zone
C:\Program Files\MSN Messenger
C:\Program Files\MSNTweaker
C:\Program Files\MSXML 4.0
C:\Program Files\NetMeeting
C:\Program Files\Netscape
C:\Program Files\Norton 360
C:\Program Files\Oberon Media
C:\Program Files\OSLO3071b2.USB
C:\Program Files\Outlook Express
C:\Program Files\Photocolor
C:\Program Files\PhotoFiltre
C:\Program Files\PSP3FR
C:\Program Files\QuickTime
C:\Program Files\Real
C:\Program Files\ReflexiveArcade
C:\Program Files\SereneScreen
C:\Program Files\Services en ligne
C:\Program Files\Shiny
C:\Program Files\Skype
C:\Program Files\SlySoft
C:\Program Files\Snapshot Viewer
C:\Program Files\SRMP3 1.0
C:\Program Files\STMicroelectronics
C:\Program Files\Symantec
C:\Program Files\TryMedia
C:\Program Files\Tweak-XP Pro 4
C:\Program Files\Visicom Media
C:\Program Files\vso
C:\Program Files\Windows Live
C:\Program Files\Windows Media Connect 2
C:\Program Files\Windows Media Player
C:\Program Files\Windows NT
C:\Program Files\WinRAR
C:\Program Files\WON
C:\Program Files\x73_lut.dat
C:\Program Files\xerox
C:\Program Files\XoftSpySE
C:\Program Files\Yahoo!
C:\Program Files\Zuma Deluxe
C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
C:\Program Files\Fichiers communs\Adobe
C:\Program Files\Fichiers communs\Ahead
C:\Program Files\Fichiers communs\Borland Shared
C:\Program Files\Fichiers communs\Designer
C:\Program Files\Fichiers communs\Digi308
C:\Program Files\Fichiers communs\GTK
C:\Program Files\Fichiers communs\InstallShield
C:\Program Files\Fichiers communs\Java
C:\Program Files\Fichiers communs\Logitech
C:\Program Files\Fichiers communs\Macrovision Shared
C:\Program Files\Fichiers communs\MAGIX Shared
C:\Program Files\Fichiers communs\Microsoft Shared
C:\Program Files\Fichiers communs\MSSoap
C:\Program Files\Fichiers communs\ODBC
C:\Program Files\Fichiers communs\Real
C:\Program Files\Fichiers communs\Services
C:\Program Files\Fichiers communs\Skype
C:\Program Files\Fichiers communs\SpeechEngines
C:\Program Files\Fichiers communs\SWF Studio
C:\Program Files\Fichiers communs\Symantec Shared
C:\Program Files\Fichiers communs\System
C:\Program Files\Fichiers communs\Vbox
C:\Program Files\Fichiers communs\xing shared
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé ! )
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\Program Files\Adverts
C:\WINDOWS\Tasks\AD86DC2491954F98.job
C:\WINDOWS\Tasks\AF7F43A79180F577.job
C:\WINDOWS\Tasks\B2A4DABA90E34B3E.job
----------------------[ Verification du Registre ]----------------------
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-01 18:31:00
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden files ...
scan completed successfully
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
[b]! VUNDO Possible ![/b]
--------------------[ Fin du rapport a 18:31:32.45 ]---------------------- -
et voici le troisième :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:03:14, on 01.01.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ASTRID~1\LOCALS~1\Temp\Rar$EX01.859\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http:\\www.mediamarkt.de
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fmeteo%2f%3f
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {41DBC708-13BE-44CB-A185-072BEF94D4C0} - C:\WINDOWS\system32\datacle.dll
O2 - BHO: dcads - {6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E} - C:\WINDOWS\system32\nsf52.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [blah service] f.exe
O4 - HKLM\..\Run: [us8k34g] verdv.exe
O4 - HKLM\..\Run: [Lexmark X73 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
O4 - HKLM\..\Run: [Lexmark X73 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\RunServices: [blah service] f.exe
O4 - HKLM\..\RunOnce: [!CleanupNetMeetingDispDriver] "C:\WINDOWS\system32\rundll32.exe" msconf.dll,CleanupNetMeetingDispDriver 0
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [fBrqRQM6i] unl30hwx.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\RunOnce: [SWHelper] "C:\WINDOWS\system32\Macromed\Shockwave 10\PostUpdate.exe" 1010011
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Astrid Delalay\Local Settings\Temp\TMP121.tmp
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O12 - Plugin for .mu3: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O12 - Plugin for .mus: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O12 - Plugin for .myr: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O12 - Plugin for .myt: C:\Program Files\Internet Explorer\Plugins\NPMyrMus.dll
O14 - IERESET.INF: START_PAGE_URL=http:\\www.mediamarkt.de
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by116fd.bay116.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
-
il y a ,
f.exe, verdv.exe, unl30hwx.exe, qui démarre automatiquement au démarrage mais on ne sait pas ce que c'est ni GOOGLE il trouve très peut de résultats.
Sinon tu as Kaspersky 6.0 passe à la version 7.0 c'est gratuit tu le télécharge sur leur site. Tu ne désinstalle pas la 6 sa se fera automatiquement et le clé de license sera transféré sur la 7.0
@+ -
j'ai mon ami qui a acheter norton il est bon aussi ? le seul pleme c'est qu'il y a quelque chose qui doit bloquer car il est pas arriver a l'installé.
-
Re,
bon, on est pas arrivé.
Garde kaspersky et passe à la verszion 7 comme luke te l'as dit;
1) Relance Lop S&D
* Choisis cette fois ci l'Option 2 ( Suppression )
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré ( C:\lopR.txt )
( Si le Bureau ne réapparît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )
2) Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.cmd pour lancer le scrïpt.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
3) télécharge combofix (par sUBs)ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
2 double-clique sur combofix.exe et suis les instructions
3 à la fin, il va produire un rapport C:\ComboFix.txt
4 copie/colle ce rapport dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. -
voilà, j'ai mis kaspersky version 7 et j'ai relancé Lop S&D voici son rapport :
-----------------------------[ Lop S&D 2.0.1 ]---------------------------
Microsoft Windows XP [version 5.1.2600] [ OS : Windows_NT ]
"C:\Program Files\Lop SD"
[ 02.01.2008 | 0:40:08.12 ] [ MAB ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Supprimé! - C:\WINDOWS\Tasks\AD86DC2491954F98.job
Supprimé! - C:\WINDOWS\Tasks\AF7F43A79180F577.job
Supprimé! - C:\WINDOWS\Tasks\B2A4DABA90E34B3E.job
Supprimé! - C:\Program Files\Adverts
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
C:\Documents and Settings\Administrateur\APPLIC~1\Microsoft
C:\Documents and Settings\Administrateur\APPLIC~1\sversion.ini
C:\Documents and Settings\Administrateur\APPLIC~1\InterVideo
C:\Documents and Settings\Administrateur\APPLIC~1\Adobe
C:\Documents and Settings\Administrateur\APPLIC~1\InterTrust
C:\Documents and Settings\Administrateur\APPLIC~1\desktop.ini
C:\Documents and Settings\Administrateur\APPLIC~1\Identities
C:\Documents and Settings\All Users\APPLIC~1\Kaspersky Lab
C:\Documents and Settings\All Users\APPLIC~1\TEMP
C:\Documents and Settings\All Users\APPLIC~1\Google
C:\Documents and Settings\All Users\APPLIC~1\Symantec
C:\Documents and Settings\All Users\APPLIC~1\LUInstall.LiveUpdate
C:\Documents and Settings\All Users\APPLIC~1\Skype
C:\Documents and Settings\All Users\APPLIC~1\ifolor
C:\Documents and Settings\All Users\APPLIC~1\JollyBear
C:\Documents and Settings\All Users\APPLIC~1\Sandlot Games
C:\Documents and Settings\All Users\APPLIC~1\Adobe
C:\Documents and Settings\All Users\APPLIC~1\Runic
C:\Documents and Settings\All Users\APPLIC~1\SpinTop Games
C:\Documents and Settings\All Users\APPLIC~1\Zylom
C:\Documents and Settings\All Users\APPLIC~1\PlayFirst
C:\Documents and Settings\All Users\APPLIC~1\Microsoft
C:\Documents and Settings\All Users\APPLIC~1\Windows Genuine Advantage
C:\Documents and Settings\All Users\APPLIC~1\AntiVir PersonalEdition classic
C:\Documents and Settings\All Users\APPLIC~1\Deadsoapchinjugs
C:\Documents and Settings\All Users\APPLIC~1\newforgreybias
C:\Documents and Settings\All Users\APPLIC~1\Avg7
C:\Documents and Settings\All Users\APPLIC~1\Messenger Plus!
C:\Documents and Settings\All Users\APPLIC~1\muvee Technologies
C:\Documents and Settings\All Users\APPLIC~1\InstallShield
C:\Documents and Settings\All Users\APPLIC~1\DVD Shrink
C:\Documents and Settings\All Users\APPLIC~1\pixelStorm
C:\Documents and Settings\All Users\APPLIC~1\CyberLink
C:\Documents and Settings\All Users\APPLIC~1\Ahead
C:\Documents and Settings\All Users\APPLIC~1\Macrovision
C:\Documents and Settings\All Users\APPLIC~1\QuickTime
C:\Documents and Settings\All Users\APPLIC~1\MSN6
C:\Documents and Settings\All Users\APPLIC~1\SBT
C:\Documents and Settings\All Users\APPLIC~1\desktop.ini
C:\Documents and Settings\All Users\APPLIC~1\SBSI
C:\Documents and Settings\AsD\APPLIC~1\update.log
C:\Documents and Settings\AsD\APPLIC~1\Identities
C:\Documents and Settings\AsD\APPLIC~1\Zylom
C:\Documents and Settings\AsD\APPLIC~1\Jane s Hotel
C:\Documents and Settings\AsD\APPLIC~1\Gaijin Ent
C:\Documents and Settings\AsD\APPLIC~1\MSN6
C:\Documents and Settings\AsD\APPLIC~1\AdobeUM
C:\Documents and Settings\AsD\APPLIC~1\Adobe
C:\Documents and Settings\AsD\APPLIC~1\Skype
C:\Documents and Settings\AsD\APPLIC~1\ifolor
C:\Documents and Settings\AsD\APPLIC~1\Microsoft
C:\Documents and Settings\AsD\APPLIC~1\PlayFirst
C:\Documents and Settings\AsD\APPLIC~1\Beep Industries
C:\Documents and Settings\AsD\APPLIC~1\iWin
C:\Documents and Settings\AsD\APPLIC~1\Macromedia
C:\Documents and Settings\AsD\APPLIC~1\Google
C:\Documents and Settings\AsD\APPLIC~1\Canvas Multi-Media
C:\Documents and Settings\AsD\APPLIC~1\Lavasoft
C:\Documents and Settings\AsD\APPLIC~1\Vso
C:\Documents and Settings\AsD\APPLIC~1\Mozilla
C:\Documents and Settings\AsD\APPLIC~1\Photocolor
C:\Documents and Settings\AsD\APPLIC~1\Curb Axis Rect
C:\Documents and Settings\AsD\APPLIC~1\Sun
C:\Documents and Settings\AsD\APPLIC~1\muvee Technologies
C:\Documents and Settings\AsD\APPLIC~1\Remote bib
C:\Documents and Settings\AsD\APPLIC~1\Ahead
C:\Documents and Settings\AsD\APPLIC~1\Kazaa Lite
C:\Documents and Settings\AsD\APPLIC~1\Real
C:\Documents and Settings\AsD\APPLIC~1\ICQLite
C:\Documents and Settings\AsD\APPLIC~1\ICQ
C:\Documents and Settings\AsD\APPLIC~1\sversion.ini
C:\Documents and Settings\AsD\APPLIC~1\CyberLink
C:\Documents and Settings\AsD\APPLIC~1\ArcSoft
C:\Documents and Settings\AsD\APPLIC~1\Creative
C:\Documents and Settings\AsD\APPLIC~1\ACAMPREF
C:\Documents and Settings\AsD\APPLIC~1\Symantec
C:\Documents and Settings\AsD\APPLIC~1\Help
C:\Documents and Settings\AsD\APPLIC~1\InterVideo
C:\Documents and Settings\AsD\APPLIC~1\InterTrust
C:\Documents and Settings\AsD\APPLIC~1\desktop.ini
C:\Documents and Settings\Default User\APPLIC~1\Microsoft
C:\Documents and Settings\Default User\APPLIC~1\sversion.ini
C:\Documents and Settings\Default User\APPLIC~1\InterVideo
C:\Documents and Settings\Default User\APPLIC~1\Adobe
C:\Documents and Settings\Default User\APPLIC~1\InterTrust
C:\Documents and Settings\Default User\APPLIC~1\desktop.ini
C:\Documents and Settings\Default User\APPLIC~1\Identities
C:\Documents and Settings\LocalService\APPLIC~1\Microsoft
C:\Documents and Settings\NetworkService\APPLIC~1\Microsoft
C:\Documents and Settings\Propri‚taire\APPLIC~1\Microsoft
C:\Documents and Settings\Propri‚taire\APPLIC~1\sversion.ini
C:\Documents and Settings\Propri‚taire\APPLIC~1\InterVideo
C:\Documents and Settings\Propri‚taire\APPLIC~1\desktop.ini
C:\Documents and Settings\Propri‚taire\APPLIC~1\Identities
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[02.01.2008 00:33][--a------]C:\WINDOWS\tasks\XoftSpySE 2.job
[30.12.2007 14:23][--a------]C:\WINDOWS\tasks\XoftSpySE.job
[02.01.2008 00:33][--ah-----]C:\WINDOWS\tasks\SA.DAT
[28.08.2001 13:00][-r-h-----]C:\WINDOWS\tasks\desktop.ini
---------------[ Listing des dossiers dans C:\Program Files ]--------------
C:\Program Files\ACMonitor_X73.exe
C:\Program Files\ACMonitor_X73.ini
C:\Program Files\Adobe
C:\Program Files\AdvancedCleaner Free
C:\Program Files\ahead
C:\Program Files\AIPTEK
C:\Program Files\Alwil Software
C:\Program Files\Apog‚e Conception
C:\Program Files\ArcSoft
C:\Program Files\a-squared Anti-Malware
C:\Program Files\AV VCS 3.0
C:\Program Files\avgas-setup-7.5.0.50.exe
C:\Program Files\AVPersonal
C:\Program Files\Axis Communications
C:\Program Files\Baka WinMX
C:\Program Files\Bejeweled 2 Deluxe
C:\Program Files\Black Isle
C:\Program Files\Cakewalk
C:\Program Files\captureflux_captureflux_5.2.3_francais_11147.zip
C:\Program Files\ccsetup136.exe
C:\Program Files\Common files
C:\Program Files\ComPlus Applications
C:\Program Files\Creative
C:\Program Files\Curb Axis Rect
C:\Program Files\CyberLink
C:\Program Files\Dcads Games Collection
C:\Program Files\directx
C:\Program Files\DivX
C:\Program Files\DVD Decrypter
C:\Program Files\DVD Shrink 3.2.lnk
C:\Program Files\dvdate_64fr.zip
C:\Program Files\eMule
C:\Program Files\EuroTool
C:\Program Files\Fichiers communs
C:\Program Files\GenTra
C:\Program Files\GIMP-2.0
C:\Program Files\Google
C:\Program Files\Grisoft
C:\Program Files\gtx73.ini
C:\Program Files\hijackthis.zip
C:\Program Files\ICQ
C:\Program Files\ICQLite
C:\Program Files\ifolor
C:\Program Files\iHome
C:\Program Files\Intel
C:\Program Files\Internet Explorer
C:\Program Files\InterVideo
C:\Program Files\Jasc Software Inc
C:\Program Files\Java
C:\Program Files\Kaspersky Lab
C:\Program Files\Lavasoft
C:\Program Files\Lexibook
C:\Program Files\Lexmark
C:\Program Files\LexmarkX73
C:\Program Files\LimeWire
C:\Program Files\Logitech
C:\Program Files\Lop SD
C:\Program Files\Lopxp
C:\Program Files\lxarscan.dll
C:\Program Files\Macrogaming
C:\Program Files\MAGIX
C:\Program Files\Messenger
C:\Program Files\Messenger Plus! 3
C:\Program Files\Messenger Plus! Live
C:\Program Files\MGI
C:\Program Files\Micro Application
C:\Program Files\microsoft frontpage
C:\Program Files\Microsoft Office
C:\Program Files\MonkeyPhoto
C:\Program Files\Movie Maker
C:\Program Files\Mozilla Firefox
C:\Program Files\MP3 Player Utilities
C:\Program Files\MSN
C:\Program Files\MSN Gaming Zone
C:\Program Files\MSN Messenger
C:\Program Files\MSNTweaker
C:\Program Files\MSXML 4.0
C:\Program Files\NetMeeting
C:\Program Files\Netscape
C:\Program Files\Norton 360
C:\Program Files\Oberon Media
C:\Program Files\OSLO3071b2.USB
C:\Program Files\Outlook Express
C:\Program Files\Photocolor
C:\Program Files\PhotoFiltre
C:\Program Files\PSP3FR
C:\Program Files\QuickTime
C:\Program Files\Real
C:\Program Files\ReflexiveArcade
C:\Program Files\SereneScreen
C:\Program Files\Services en ligne
C:\Program Files\Shiny
C:\Program Files\Skype
C:\Program Files\SlySoft
C:\Program Files\Snapshot Viewer
C:\Program Files\SRMP3 1.0
C:\Program Files\STMicroelectronics
C:\Program Files\Symantec
C:\Program Files\TryMedia
C:\Program Files\Tweak-XP Pro 4
C:\Program Files\Visicom Media
C:\Program Files\vso
C:\Program Files\Windows Live
C:\Program Files\Windows Media Connect 2
C:\Program Files\Windows Media Player
C:\Program Files\Windows NT
C:\Program Files\WinRAR
C:\Program Files\WON
C:\Program Files\x73_lut.dat
C:\Program Files\xerox
C:\Program Files\XoftSpySE
C:\Program Files\Yahoo!
C:\Program Files\Zuma Deluxe
C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
C:\Program Files\Fichiers communs\Adobe
C:\Program Files\Fichiers communs\Ahead
C:\Program Files\Fichiers communs\Borland Shared
C:\Program Files\Fichiers communs\Designer
C:\Program Files\Fichiers communs\Digi308
C:\Program Files\Fichiers communs\GTK
C:\Program Files\Fichiers communs\InstallShield
C:\Program Files\Fichiers communs\Java
C:\Program Files\Fichiers communs\Logitech
C:\Program Files\Fichiers communs\Macrovision Shared
C:\Program Files\Fichiers communs\MAGIX Shared
C:\Program Files\Fichiers communs\Microsoft Shared
C:\Program Files\Fichiers communs\MSSoap
C:\Program Files\Fichiers communs\ODBC
C:\Program Files\Fichiers communs\Real
C:\Program Files\Fichiers communs\Services
C:\Program Files\Fichiers communs\Skype
C:\Program Files\Fichiers communs\SpeechEngines
C:\Program Files\Fichiers communs\SWF Studio
C:\Program Files\Fichiers communs\Symantec Shared
C:\Program Files\Fichiers communs\System
C:\Program Files\Fichiers communs\Vbox
C:\Program Files\Fichiers communs\xing shared
----------------------[ Recherche avec S_Lop ]---------------------
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
Aucun fichier / dossier Lop trouvé !
----------------------[ Verification du Registre ]----------------------
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-02 00:48:23
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden files ...
scan completed successfully
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
[b]! VUNDO Possible ![/b]
--------------------[ Fin du rapport a 0:49:17.62 ]----------------------
- 1
- 2
Suivant
