virus aidé moi SVP

Question

Bonjour,
j'étais sur un cite de film en streaming, quand on m'a dit de telecharger un logiciel. et depuis quand sur google j'appuis sr des lien une page de pub apparet et la page  normale n'apparet pas.
mon antivirus (trend micro PC-clining 2007 n'a rien trouvé, ni spywaire octor. que fair?

LePsy · Answer

https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

Bonsoir,

Tu vas réaliser un scan en ligne avec ce produit ;

post ton résultat ensuite ;))

dekl38 · Answer

mon font d'écran a disparu quand je l'ai ralumé (je devais le deplacer)

LePsy · Answer

as tu toujours accès à Internet ?

dekl38 · Answer

je suis ac mon ordi qui a le virus là dailleur dsl si je met du temp, mais ya plein de bug

dekl38 · Answer

ca bloque quand je veus lancer le scan!!!

LePsy · Answer

aurait tu un disque de secours ant- virus ?

dekl38 · Answer

Le CD de réinstalation?

dekl38 · Answer

vous penssez que c'est un virus ou un spywere?

LePsy · Answer

http://www.trendsecure.com/portal/fr/_download/HiJackThis.exe

Bon, tu vas faire un scan avec ce produit ci dessus >> tu l'installes et tu fais DO A SYSTEM SCAN AND SAVE A LOG, puis colle le rapport qui va apparaitre, je suis là pour la soirée, je vais tacher de te sortir de là, DETENDS TOI ;

Pour le disque je parlais d'un disque de programme antivirus qui peut servir dans un cas comme le tiens ;

dekl38 · Answer

je n'ais pas ce CD, et je ne peus plus accéder au bureau a cause des bug

LePsy · Answer

connais tu le mode sans echec ?

dekl38 · Answer

tu veus que je colle tous ce qui s'affiche? de bloc note ou hj..
et au fait merci de m'aider.

LePsy · Answer

oui colle tout et tu peux compter sur moi jusqu'au bout, sans soucis, mon mail en MP si tu veux !

dekl38 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:34:59, on 18/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\PROGRA~1\EACCEL~1\Station\station.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\WINDOWS\SYSTEM32	askmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccVScan.exe
C:\Documents and Settings\claude the boss!!!!!\Local Settings\Temporary Internet Files\Content.IE5\A8174NMV\HiJackThis[1].exe
C:\Documents and Settings\claude the boss!!!!!\Mes documents\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {B753C7C5-0942-4b7f-BC27-942B52BDAC66} - C:\PROGRA~1\ACCELE~1\StopSign\webcbrowse.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684CC} - C:\Program Files\Helper\findsiteonline.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [Service] C:\WINDOWS\winlogon32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = -Fi 11g USB adapter\WLANUTL.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?ee64db8661e046ed9ad9aca5ff6e2f59
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?ee64db8661e046ed9ad9aca5ff6e2f59
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Xanadu - {5CC384BB-1326-11D5-F4AE-00C04923F885} - C:\Program Files\Foreignword\Xanadu\XanaduLaunch.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: printers - {B1DB1ADB-10A4-4F52-8691-EEA69B375453} - libwinets.dll (file missing)
O22 - SharedTaskScheduler: ablator - {fce1c203-ff2b-4ec1-9983-e2900d29bbd8} - C:\WINDOWS\system32\axdpfl.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Protection Trend Micro contre les programmes espions  (PcScnSrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

dekl38 · Answer

a g compri, il a fait un raport dans bloc not dc c la même chose que dans le logiciel ce qu'il y a écrit!

dekl38 · Answer

c quoi en fait tout ca?

LePsy · Answer

Bon, c'est un peu long pour toi je pense mais il faut un peu de temps pour traiter les informations
Ci-dessous, les lignes qui renvoient vers les saletées qui sont dans ta machine et qui te bloque;
Tu vas relancer le programme que tu as utilisé pour ce rapport mais cette fois tu vas cliquer sur DO A SYSTEM SCAN ONLY , puis tu vas cocher exactement les meme lignes qui sont en dessous , enfin tu fais FIX CHECKED et tu confirme la suppression :

APRES >> telecharge ce produit >> https://www.01net.com/outils/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/tele32599.html

Installes le et clic sur >> NETTOYAGE, puis une fois fini, sur >> ERREUR DE REGISTRE, tu les verras dans la colonne de gauche;
Confirmes ensuite pour la suppression de ce qui va être trouver;

JE TE RECUPERE QUAND TU AURAS FINI TOUT CA !!!

LES LIGNES à COCHEES >> 

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {B753C7C5-0942-4b7f-BC27-942B52BDAC66} - C:\PROGRA~1\ACCELE~1\StopSign\webcbrowse.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll 
04 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) -
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
O22 - SharedTaskScheduler: ablator - {fce1c203-ff2b-4ec1-9983-e2900d29bbd8} - C:\WINDOWS\system32\axdpfl.dll 
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe 
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe 
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe 
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exe

dekl38 · Answer

g fini de fair ce que tu m'as dis, et maintenant?

dekl38 · Answer

j'ai toujours le problème de pub a la place du site.

LePsy · Answer

Bien, maintenant tu vas utiliser ce produit >>http://download5.emsisoft.com/a2FreeSetup.exe

Installles, fait la mise à jour complète de ce produit , ferme tous tes programmes et passe en mode sans echec ;

Choisit ta session pour " ouvrir " ton pc et fais un scan complet de ta machine avec ce produit, CHOISIT LE MODE COMPLET,
 c'est la troisième ligne comme choix, ;
UNE FOIS TERMINER , patiente environ 40 minutes , tu confirmes pour supprimer tout ce qu'il va trouver -

PROCEDURE POUR ACCEDER AU MODE " SANS ECHEC " 
  
  >> Fermer tous les programmes et redémarrer l'ordinateur. 
  
  >> Au redémarrage, avant que le LOGO de WINDOWS n'apparaise, TAPOTER sans arrêt sur 
     la touche [ F8 ] ( ou F5 sur certain PC ), jusqu'a ce qu'un écran noir avec des 
     lignes de texte ecrit en blanc soit afichées.
  >> Avec les flèches du curseur, remonter jusqu'en haut et cliquer sur :
     - DEMARRAGE EN MODE SANS ECHEC -
  >> Patienter quelques secondes et au message d'AVERTISSEMENT : confirmer par " OUI "
  >> Choisir son NOM d'UTILISATEUR pour lancer WINDOWS 
     ( N'utiliser pas le compte ADMINISTRATEUR ) 

JE T'ATTENDS POUR LA SUITE, c'est pas fini ;))

dekl38 · Answer

slt voila le rapport:


SmitFraudFix v2.274

Rapport fait à  8:50:55,35, 19/01/2008
Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\system32\uxkavlahh.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\TRENDM~1\INTERN~1	sc.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\claude the boss!!!!!


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\claude the boss!!!!!\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\CLAUDE~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 

C:\Program Files\Helper\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix.exe by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8139/810x Family Fast Ethernet NIC
DNS Server Search Order: 15.243.128.51
DNS Server Search Order: 15.243.160.51

Description: SAGEM Wi-Fi 11g USB adapter
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 0.0.0.0

HKLM\SYSTEM\CCS\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CS1\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CS3\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

g!rly · Answer

Ca va marie?
Ca a l´air?!
un beau samedi qui se prépare?!
@+

g!rly · Answer

t´as des tongs, c´est nouveau ca ;-)

dekl38 · Answer

euh je devrais faire ce que me dit LePsy ou ^^marie^^ ?

g!rly · Answer

marie^^

^^Marie^^ · Answer

Salut

Lis ce que je t'ai mis &#9658;
http://www.commentcamarche.net/forum/affich 4703367 virus aide moi svp?page=2#24

Tu as une infection dans ton rapport, donc autant la supprimer.

A+

dekl38 · Answer

b1 voila le rapport

SmitFraudFix v2.274

Rapport fait à 12:14:39,15, 19/01/2008
Executé à partir de C:\Documents and Settings\claude the boss!!!!!\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\Program Files\Helper\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix.exe by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CS1\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CS3\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

g!rly · Answer

fais ceci a present : 

tu veux restaurer le fichier host, a l´aide de :

http://siri.urz.free.fr/RHosts.php

et repost le meme rapport smitfraud fix option 2 en mode sans echec...
...

^^Marie^^ · Answer

Télécharge Lopxp et enregistres-le sur ton bureau. 

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

&#9658; Referme les fenêtres de tous les programmes en cours, y compris Internet Explorer et MSN 

Double clic sur le fichier Lopxpsetup.exe pour lancer l'installation. 

Double clic sur Lopxpsetup.exe pour lancer l'installation
Au menu, choisir l'option 1
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
Une rapport sera alors crée, à copie/colle en entier sur le forum.

dekl38 · Answer

JE n'ai pas le temp de le faire maintenant, je vais le faire ce soir.
merci et a plus tard

g!rly · Answer

ha ha,  une feignante...

dekl38 · Answer

quand je lance la restoration R-Hosts, rien ne se passe

dekl38 · Answer

encors un raport:

Rapport Lopxp fait le 19/01/2008 à 23:00:30
Exécuté dans : C:\Program Files\Lopxp



___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS	asks\A0417D149192ED40.job 
Crée le : 17/05/2007 à 13:49
Fichier exécuté => c:\docume~1\claude~1\applic~1\grampr~1\data fork comp.exe 

C:\WINDOWS	asks\Connexion facile à Internet.job 
Fichier exécuté => C:\Program Files\Easy Internet signup\HPSdpApp.exe /remind /LaunchPoint reminder

C:\WINDOWS	asks\Vérifier les mises à jour de Windows Live Toolbar.job 
Fichier exécuté => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

21/02/2006 15:44:58 ... Adobe -----= Adobe
02/12/2005 20:04:36 ... AOL -------= AOL
30/07/2007 16:33:34 ... AOLDOW~1 --= AOL Downloads
30/07/2007 16:40:04 ... AOLOCP~1 --= AOL OCP
03/01/2005 03:20:58 ... APPLEC~1 --= Apple Computer
24/05/2007 15:44:21 ... BOONTY ----= BOONTY
13/12/2006 18:25:01 ... BVRPSO~1 --= BVRP Software
13/11/2007 22:55:24 ... Corel -----= Corel
18/01/2008 16:32:32 ... DVDSHR~1 --= DVD Shrink
27/09/2007 17:30:38 ... ELABOR~1 --= Elaborate Bytes
06/04/2007 16:15:02 ... Google ----= Google
13/11/2007 21:58:32 ... GOOGLE~1 --= Google Updater
03/01/2005 03:05:46 ... HP --------= HP
03/01/2005 03:16:24 ... INSTAL~1 --= InstallShield
20/04/2007 21:12:55 ... MESSEN~1 --= Messenger Plus!
25/11/2004 04:25:08 ... MICROS~1 --= Microsoft
11/03/2006 12:55:17 ... MUVEET~1 --= muvee Technologies
03/01/2005 03:21:02 ... QUICKT~1 --= QuickTime
20/04/2007 21:08:16 ... REGSLO~1 --= Regs Load File Clock
03/01/2005 02:48:24 ... SBSI ------= SBSI
13/11/2007 22:06:58 ... Skype -----= Skype
03/01/2005 03:05:06 ... Sonic -----= Sonic
12/12/2006 17:51:00 ... SONYER~1 --= Sony Ericsson
02/11/2006 17:58:58 ... SPYBOT~1 --= Spybot - Search & Destroy
03/01/2005 03:35:09 ... Symantec --= Symantec
12/12/2006 17:50:51 ... Teleca ----= Teleca
07/04/2007 08:04:15 ... TEMP ------= TEMP
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
03/12/2005 13:50:29 ... UDL -------= UDL
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
06/04/2007 16:01:45 ... WINDOW~1 --= Windows Genuine Advantage
14/04/2007 18:59:54 ... WINDOW~2 --= Windows Live Toolbar
20/10/2007 20:22:14 ... WINDOW~3 --= WindowsLiveInstaller
29/05/2007 20:03:50 ... WinZip ----= WinZip
20/10/2007 20:21:35 ... WLINST~1 --= WLInstaller
18/10/2007 16:12:47 ... YAHOO!~1 --= Yahoo! Companion

+- C:\Documents and Settings\cherinetmj\Application Data

30/07/2007 16:47:59 ... acccore ---= acccore
27/02/2006 11:36:53 ... Adobe -----= Adobe
27/02/2006 11:37:19 ... AdobeUM ---= AdobeUM
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
19/04/2007 17:12:19 ... EACCEL~1 --= eAcceleration
12/02/2006 19:57:59 ... EPSON -----= EPSON
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
25/04/2007 17:15:13 ... HP --------= HP
26/04/2006 10:15:32 ... HPQ -------= HPQ
12/02/2006 19:27:50 ... IDENTI~1 --= Identities
08/04/2006 20:13:16 ... INTERV~1 --= InterVideo
07/05/2007 17:11:31 ... ItsLabel --= ItsLabel
13/04/2007 18:21:45 ... Lavasoft --= Lavasoft
06/07/2006 14:42:30 ... LEADER~1 --= Leadertech
24/04/2007 21:09:04 ... LimeWire --= LimeWire
17/02/2006 19:08:31 ... MACROM~1 --= Macromedia
18/01/2008 19:31:56 ... MEDIAP~1 --= Media Player Classic
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
12/02/2006 19:27:50 ... SAMPLE~1 --= SampleView
06/07/2006 14:42:35 ... Sonic -----= Sonic
04/05/2007 13:41:25 ... Sun -------= Sun
12/02/2006 19:27:50 ... Symantec --= Symantec
13/04/2007 17:49:38 ... Talkback --= Talkback
22/12/2006 20:38:12 ... Teleca ----= Teleca
24/05/2006 11:06:51 ... Template --= Template
01/10/2007 20:06:36 ... U3 --------= U3

+- C:\Documents and Settings\cherinetmj\Local Settings\Application Data

27/02/2006 11:36:53 ... Adobe -----= Adobe
30/07/2007 16:40:01 ... AOLOCP~1 --= AOL OCP
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
12/02/2006 19:27:50 ... APPLIC~1 --= ApplicationHistory
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
22/09/2007 10:05:12 ... HP --------= HP
26/01/2007 13:21:25 ... IDENTI~1 --= Identities
22/09/2007 10:05:20 ... ISOLAT~1 --= IsolatedStorage
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
01/09/2007 10:33:33 ... MICROV~1 --= MicroVision Applications
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
01/11/2007 15:38:53 ... PCHealth --= PCHealth
12/02/2006 19:27:50 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\claude the boss!!!!!\Application Data

01/08/2007 19:53:19 ... acccore ---= acccore
17/04/2006 17:53:52 ... ACOUST~1 --= Acoustica
12/02/2006 18:52:14 ... Adobe -----= Adobe
16/02/2006 19:20:30 ... AdobeUM ---= AdobeUM
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
25/02/2006 19:00:30 ... ArcSoft ---= ArcSoft
13/11/2007 23:11:48 ... Corel -----= Corel
23/04/2007 20:11:49 ... EACCEL~1 --= eAcceleration
03/09/2006 17:50:59 ... EPSON -----= EPSON
17/03/2006 20:49:03 ... FarStone --= FarStone
12/05/2007 07:03:17 ... FlashGet --= FlashGet
16/02/2006 18:33:06 ... Google ----= Google
20/04/2007 21:07:50 ... GRAMPR~1 --= Gram proxy
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:13 ... HP --------= HP
11/04/2006 15:10:51 ... HPQ -------= HPQ
07/02/2006 21:00:29 ... IDENTI~1 --= Identities
07/02/2006 21:05:46 ... INTERV~1 --= InterVideo
07/05/2007 10:51:28 ... ItsLabel --= ItsLabel
02/05/2007 13:46:15 ... ivivo -----= ivivo
14/04/2007 09:43:38 ... Lavasoft --= Lavasoft
11/02/2006 11:36:45 ... LEADER~1 --= Leadertech
16/02/2006 18:32:59 ... MACROM~1 --= Macromedia
19/02/2007 15:19:47 ... MEDIAP~1 --= Media Player Classic
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
17/02/2006 20:21:16 ... MSNINS~1 --= MSNInstaller
12/04/2006 10:45:01 ... MUVEET~1 --= muvee Technologies
06/01/2008 15:13:24 ... PCTOOL~1 --= PC Tools
07/02/2006 21:00:29 ... SAMPLE~1 --= SampleView
14/11/2007 12:50:58 ... Skype -----= Skype
26/09/2007 13:36:27 ... SlySoft ---= SlySoft
11/02/2006 11:40:52 ... Sonic -----= Sonic
06/01/2008 16:54:00 ... STAROF~1 --= StarOffice8
27/02/2006 11:22:04 ... Sun -------= Sun
07/02/2006 21:00:29 ... Symantec --= Symantec
07/04/2007 14:03:22 ... Talkback --= Talkback
12/12/2006 17:53:12 ... Teleca ----= Teleca
18/05/2007 21:15:16 ... vlc(2) ----= vlc(2)
04/06/2007 11:43:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\claude the boss!!!!!\Local Settings\Application Data

12/02/2006 18:52:14 ... Adobe -----= Adobe
01/08/2007 19:52:31 ... AOLOCP~1 --= AOL OCP
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
07/02/2006 21:00:29 ... APPLIC~1 --= ApplicationHistory
25/12/2006 13:08:11 ... BVRPSO~1 --= BVRP Software
06/04/2007 20:23:31 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:02 ... HP --------= HP
17/02/2006 21:35:39 ... IDENTI~1 --= Identities
03/03/2006 11:47:11 ... ISOLAT~1 --= IsolatedStorage
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
11/02/2006 13:02:26 ... MICROV~1 --= MicroVision Applications
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
05/11/2007 21:41:16 ... PCHealth --= PCHealth
12/12/2006 18:11:56 ... SONYER~1 --= Sony Ericsson
13/05/2006 15:00:39 ... WMTOOL~1 --= WMTools Downloaded Files
07/02/2006 21:00:29 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\debby\Application Data

03/12/2005 18:36:07 ... AOL -------= AOL
03/12/2005 18:35:29 ... APPLEC~1 --= Apple Computer
14/01/2006 10:58:49 ... EPSON -----= EPSON
03/12/2005 18:35:29 ... IDENTI~1 --= Identities
06/12/2005 20:28:41 ... INTERV~1 --= InterVideo
20/01/2006 20:46:54 ... LEADER~1 --= Leadertech
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... SAMPLE~1 --= SampleView
20/01/2006 20:46:56 ... Sonic -----= Sonic
03/12/2005 18:35:28 ... Symantec --= Symantec

+- C:\Documents and Settings\debby\Local Settings\Application Data

03/12/2005 18:35:28 ... APPLEC~1 --= Apple Computer
03/12/2005 18:35:28 ... APPLIC~1 --= ApplicationHistory
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Default User\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
25/11/2004 04:25:34 ... IDENTI~1 --= Identities
25/11/2004 04:25:34 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... SAMPLE~1 --= SampleView
01/12/2005 20:37:35 ... Symantec --= Symantec
20/09/2007 19:26:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\Default User\Local Settings\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
01/12/2005 20:37:35 ... APPLIC~1 --= ApplicationHistory
25/11/2004 04:25:38 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Elo\Application Data

18/12/2005 15:30:50 ... AOL -------= AOL
18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
21/01/2006 14:13:41 ... EPSON -----= EPSON
18/12/2005 15:30:19 ... IDENTI~1 --= Identities
20/12/2005 11:54:04 ... INTERV~1 --= InterVideo
20/12/2005 14:15:22 ... LEADER~1 --= Leadertech
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... SAMPLE~1 --= SampleView
20/12/2005 14:15:26 ... Sonic -----= Sonic
18/12/2005 15:30:19 ... Symantec --= Symantec
16/01/2006 17:11:46 ... Template --= Template

+- C:\Documents and Settings\Elo\Local Settings\Application Data

18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
18/12/2005 15:30:19 ... APPLIC~1 --= ApplicationHistory
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\papa\Application Data

12/01/2008 14:49:52 ... APPLEC~1 --= Apple Computer
12/01/2008 14:51:46 ... EACCEL~1 --= eAcceleration
12/01/2008 14:51:40 ... Google ----= Google
12/01/2008 14:49:52 ... IDENTI~1 --= Identities
12/01/2008 14:52:38 ... MACROM~1 --= Macromedia
12/01/2008 14:49:52 ... MICROS~1 --= Microsoft
12/01/2008 14:49:52 ... SAMPLE~1 --= SampleView
12/01/2008 14:49:52 ... Symantec --= Symantec
12/01/2008 14:49:52 ... Xfire -----= Xfire

+- C:\Documents and Settings\papa\Local Settings\Application Data

12/01/2008 14:49:51 ... APPLEC~1 --= Apple Computer
12/01/2008 14:49:51 ... APPLIC~1 --= ApplicationHistory
12/01/2008 14:51:40 ... Google ----= Google
16/01/2008 11:07:48 ... IDENTI~1 --= Identities
12/01/2008 14:49:51 ... MICROS~1 --= Microsoft
12/01/2008 14:49:51 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

29/05/2007 20:05:06 ... 7-Zip -----= 7-Zip
19/01/2008 09:05:20 ... A-SQUA~1 --= a-squared Free
11/03/2006 23:05:28 ... abcAVI ----= abcAVI
06/04/2007 15:14:39 ... ACCELE~1 --= Acceleration Software
17/04/2006 17:53:36 ... ACOUST~1 --= Acoustica CD Label Maker
21/01/2006 20:35:16 ... ACTIVI~1 --= Activision
03/01/2005 03:18:38 ... Adobe -----= Adobe
26/06/2007 14:35:04 ... Adverts ---= Adverts
30/07/2007 16:36:38 ... AIM6 ------= AIM6
11/03/2006 23:11:14 ... ALCOHO~1 --= Alcohol Soft
27/04/2007 20:13:47 ... ALICET~1 --= Alice Triway Wi-Fi
04/02/2006 13:57:45 ... ALICE_~1 --= Alice_Triway_WiFi
06/04/2007 19:21:11 ... ALWILS~1 --= Alwil Software
02/12/2005 20:04:36 ... AOL9~1.0 --= AOL 9.0
05/02/2006 18:49:52 ... AOL9~1.0A --= AOL 9.0a
05/02/2006 18:50:58 ... AOL9~1.0B --= AOL 9.0b
02/12/2005 20:08:12 ... AOLCOM~1 --= AOL Compagnon
02/12/2005 20:07:59 ... AOLTOO~1 --= AOL Toolbar
25/02/2006 18:53:30 ... ArcSoft ---= ArcSoft
17/04/2006 17:26:23 ... AUDIOC~1 --= Audio CD Maker
13/12/2006 18:26:36 ... AVANQU~1 --= Avanquest update
24/05/2007 15:26:08 ... BOONTY~1 --= BoontyGames
12/04/2007 22:17:54 ... CCleaner --= CCleaner
24/11/2004 02:37:34 ... COMPLU~1 --= ComPlus Applications
02/05/2007 18:25:25 ... CONTRO~1 --= Controle Parental
13/11/2007 22:44:07 ... Corel -----= Corel
05/02/2006 20:13:26 ... COSMOP~1 --= COSMOPOLITAN
02/08/2006 14:31:58 ... Cyanide ---= Cyanide
26/07/2006 19:23:04 ... directx ---= directx
12/12/2006 21:15:29 ... DISC2P~1 --= Disc2Phone
09/05/2006 20:40:30 ... DivX ------= DivX
14/05/2007 19:18:24 ... DRIVER~1 --= Driver-Soft
18/01/2008 16:32:28 ... DVDSHR~1 --= DVD Shrink
02/05/2006 13:51:03 ... EASPOR~1 --= EA SPORTS
06/04/2007 15:14:29 ... EACCEL~1 --= eAcceleration
02/06/2006 17:54:04 ... EASYCD~1.1 --= Easy CD-DA Extractor FR 5.1
03/01/2005 03:31:14 ... EASYIN~1 --= Easy Internet signup
02/06/2006 17:49:39 ... EASYCD~1 --= EasyCDDAExtractor5104
05/02/2006 19:00:47 ... EHMINS~1 --= EHMINSTALL
01/04/2006 17:16:16 ... ELABOR~1 --= Elaborate Bytes
29/05/2007 20:05:17 ... ELECTR~1 --= Electronic Arts
07/04/2007 21:07:09 ... eMule -----= eMule
03/12/2005 13:47:46 ... epson -----= epson
17/03/2006 20:43:33 ... FarStone --= FarStone
25/11/2004 04:26:44 ... FICHIE~1 --= Fichiers communs
07/04/2007 16:05:30 ... FlashGet --= FlashGet
21/10/2007 19:13:25 ... FOREIG~1 --= Foreignword
04/02/2006 14:31:22 ... Generic ---= Generic
03/01/2005 03:33:04 ... Google ----= Google
03/01/2005 03:17:46 ... HEWLET~1 --= Hewlett-Packard
03/01/2005 03:03:54 ... HP --------= HP
18/04/2007 15:28:45 ... INCOMP~1 --= Incomplete
20/06/2006 16:45:11 ... index -----= index
03/01/2005 03:18:01 ... INSTAL~1 --= InstallShield Installation Information
28/12/2005 20:11:32 ... INTERA~1 --= InterActual
25/11/2004 04:27:06 ... INTERN~1 --= Internet Explorer
03/01/2005 03:18:01 ... INTERV~1 --= InterVideo
03/01/2005 03:20:58 ... iPod ------= iPod
07/05/2007 10:50:15 ... ITSLAB~1 --= Its Label
03/01/2005 03:20:58 ... iTunes ----= iTunes
01/05/2007 15:31:36 ... iViVo -----= iViVo
23/09/2007 10:08:06 ... IZArc -----= IZArc
03/01/2005 02:50:27 ... Java ------= Java
05/02/2006 19:01:38 ... JavaSoft --= JavaSoft
16/07/2007 13:51:00 ... JeffProd --= JeffProd
30/12/2005 22:01:01 ... JETPLA~1 --= Jet Player
18/01/2008 16:50:26 ... JUSTBA~1.01 --= Just BASIC v1.01
29/05/2007 20:05:17 ... KCSOFT~1 --= KC Softwares
17/04/2006 18:00:35 ... KS-SW -----= KS-SW
08/06/2007 16:35:43 ... Larousse --= Larousse
13/04/2007 18:21:39 ... Lavasoft --= Lavasoft
02/12/2005 20:08:10 ... Learn2.com --= Learn2.com
18/04/2007 15:20:42 ... LimeWire --= LimeWire
21/10/2007 17:41:47 ... LIVREA~1 --= Livre Album Fuji Photo
19/01/2008 22:48:00 ... Lopxp -----= Lopxp
11/11/2007 20:50:11 ... MENTAL~1 --= mental9Production
25/11/2004 04:27:08 ... MESSEN~1 --= Messenger
20/04/2007 21:07:30 ... MESSEN~2 --= Messenger Plus! Live
11/07/2007 10:55:58 ... MESSEN~3 --= MessengerSkinner
24/10/2007 16:15:08 ... METIN2~1 --= Metin2_France
10/05/2007 17:08:20 ... MICROS~1.2 --= Microsoft CAPICOM 2.1.0.2
25/11/2004 04:27:08 ... MICROS~1 --= microsoft frontpage
07/04/2007 11:49:51 ... MI9A48~1 --= Microsoft Games
03/01/2005 03:20:18 ... MICROS~3 --= Microsoft Office
01/12/2005 20:50:17 ... MICROS~4 --= Microsoft Visual Studio
03/01/2005 03:20:03 ... MICROS~2 --= Microsoft Works
01/12/2005 20:48:05 ... MICROS~1.NET --= Microsoft.NET
11/03/2006 23:05:38 ... Morgan ----= Morgan
13/12/2006 18:25:01 ... MOTORO~1 --= Motorola Phone Tools
25/11/2004 04:27:16 ... MOVIEM~1 --= Movie Maker
07/04/2007 07:57:08 ... MOZILL~1 --= Mozilla Firefox
25/11/2004 04:27:16 ... MSN -------= MSN
25/11/2004 04:27:30 ... MSNGAM~1 --= MSN Gaming Zone
27/04/2007 20:15:00 ... MSNMES~2 --= MSN Messenger
22/04/2007 12:41:19 ... MSNMES~1 --= MSN Messenger(2)
06/04/2007 20:56:31 ... MSXML4~1.0 --= MSXML 4.0
03/01/2005 03:23:53 ... MUVEET~1 --= muvee Technologies
25/11/2004 04:27:40 ... NETMEE~1 --= NetMeeting
27/07/2006 14:00:50 ... Nokia -----= Nokia
10/06/2006 12:39:04 ... objectif --= objectif
25/11/2004 04:27:42 ... ONLINE~1 --= Online Services
25/11/2004 04:27:44 ... OUTLOO~1 --= Outlook Express
03/01/2005 03:29:37 ... PC-DOC~1 --= PC-Doctor 5 for Windows
02/12/2007 11:03:24 ... PCFRIE~1 --= PCFriendly
13/04/2007 18:11:41 ... PEERGU~1 --= PeerGuardian2
14/11/2007 14:32:34 ... PHOTOF~1 --= PhotoFiltre Studio
29/05/2007 20:05:22 ... Picasa2 ---= Picasa2
30/07/2007 13:53:33 ... POWERA~1 --= PowerArchiver
12/12/2006 21:13:17 ... QUICKT~1 --= QuickTime
02/12/2005 20:05:36 ... Real ------= Real
12/04/2007 22:18:12 ... REGIST~1 --= Registry Mechanic
05/12/2005 17:41:59 ... ROCKST~1 --= Rockstar Games
08/09/2007 11:23:03 ... SAGEM -----= SAGEM
22/04/2007 09:29:11 ... SAGEMW~1 --= SAGEM WiFi manager
09/06/2006 16:38:03 ... Sateira ---= Sateira
16/02/2007 20:06:05 ... SATSUK~1 --= Satsuki Decoder Pack
06/04/2007 13:31:43 ... SECURI~1 --= Securitoo
25/11/2004 04:27:44 ... SERVIC~1 --= Services en ligne
30/12/2005 19:24:55 ... SHEPHE~1 --= Shepherd's Worlds, Inc
13/11/2007 22:07:30 ... Skype -----= Skype
11/03/2006 20:24:30 ... SlySoft ---= SlySoft
03/01/2005 03:16:19 ... Sonic -----= Sonic
12/12/2006 17:50:51 ... SONYER~1 --= Sony Ericsson
30/12/2005 19:46:28 ... SPEEDY~1 --= SpeedyZone
02/11/2006 17:58:55 ... SPYBOT~1 --= Spybot - Search & Destroy
06/01/2008 15:13:24 ... SPYWAR~2 --= Spyware Doctor
06/01/2008 16:40:26 ... Sun -------= Sun
03/01/2005 03:35:07 ... Symantec --= Symantec
02/12/2005 20:03:50 ... TECHCI~1 --= TechCity Solutions
07/04/2007 14:19:08 ... TELECH~1 --= telechargement
06/04/2007 15:18:31 ... THE4TH~1 --= The 4th Coming
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
24/11/2004 02:37:46 ... UNINST~1 --= Uninstall Information
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
09/05/2006 20:36:02 ... vso -------= vso
13/04/2007 17:48:57 ... Wanadoo ---= Wanadoo
28/04/2007 06:42:25 ... WARCRA~2 --= Warcraft III
25/04/2007 16:44:24 ... WARCRA~1 --= Warcraft III(2)
13/05/2007 13:21:34 ... WEBMED~1 --= Web Media Player
20/05/2007 17:21:05 ... WEBMED~2 --= WebMediaPlayer
26/06/2007 14:34:59 ... WI1F86~1 --= Windows Live
30/11/2007 21:56:54 ... WI48FA~1 --= Windows Live Favorites
14/04/2007 18:59:02 ... WI81E8~1 --= Windows Live Toolbar
06/04/2007 19:49:46 ... WINDOW~4 --= Windows Media Connect 2
25/11/2004 04:27:48 ... WINDOW~1 --= Windows Media Player
25/11/2004 04:27:52 ... WINDOW~2 --= Windows NT
24/11/2004 02:37:48 ... WINDOW~3 --= WindowsUpdate
04/06/2007 11:39:20 ... WOLFEN~1 --= Wolfenstein - Enemy Territory
25/11/2004 04:28:02 ... xerox -----= xerox
04/06/2007 11:43:31 ... Xfire -----= Xfire
18/10/2007 15:56:41 ... Yahoo! ----= Yahoo!


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

*.securewebinfo.com
*.safetyincludes.com
*.securemanaging.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)

+- Dossiers suspects :

C:\Documents and Settings\All Users\Application Data\Regs Load File Clock
C:\Documents and Settings\claude the boss!!!!!\Application Data\Gram proxy
C:\Program Files\Adverts

+- Tâches planifiées suspectes :

C:\WINDOWS	asks\A0417D149192ED40.job



- Fin du rapport -

^^Marie^^ · Answer

OK

va dans : 

Démarrer

 Exécuter 

puis copier/coller : 

"%programfiles%\Lopxp\Lopxp.bat" /Fixme &#9658; Guillemets y compris &#9658; très important

puis valide, et poste le rapport stp

dekl38 · Answer

voici:

Rapport Lopxp fait le 19/01/2008 à 23:34:39
Exécuté dans : C:\Program Files\Lopxp



___________________________________________________________________________

=> Fixme :

+- Tâches planifiées :
Supprimé : C:\WINDOWS	asks\A0417D149192ED40.job

+- Dossiers :
Supprimé : C:\Documents and Settings\All Users\Application Data\Regs Load File Clock
Supprimé : C:\Documents and Settings\claude the boss!!!!!\Application Data\Gram proxy
Supprimé : C:\Program Files\Adverts

+- Fichiers temporaires :
Nettoyage effectué.

___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS	asks\Connexion facile à Internet.job 
Fichier exécuté => C:\Program Files\Easy Internet signup\HPSdpApp.exe /remind /LaunchPoint reminder

C:\WINDOWS	asks\Vérifier les mises à jour de Windows Live Toolbar.job 
Fichier exécuté => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

21/02/2006 15:44:58 ... Adobe -----= Adobe
02/12/2005 20:04:36 ... AOL -------= AOL
30/07/2007 16:33:34 ... AOLDOW~1 --= AOL Downloads
30/07/2007 16:40:04 ... AOLOCP~1 --= AOL OCP
03/01/2005 03:20:58 ... APPLEC~1 --= Apple Computer
24/05/2007 15:44:21 ... BOONTY ----= BOONTY
13/12/2006 18:25:01 ... BVRPSO~1 --= BVRP Software
13/11/2007 22:55:24 ... Corel -----= Corel
18/01/2008 16:32:32 ... DVDSHR~1 --= DVD Shrink
27/09/2007 17:30:38 ... ELABOR~1 --= Elaborate Bytes
06/04/2007 16:15:02 ... Google ----= Google
13/11/2007 21:58:32 ... GOOGLE~1 --= Google Updater
03/01/2005 03:05:46 ... HP --------= HP
03/01/2005 03:16:24 ... INSTAL~1 --= InstallShield
20/04/2007 21:12:55 ... MESSEN~1 --= Messenger Plus!
25/11/2004 04:25:08 ... MICROS~1 --= Microsoft
11/03/2006 12:55:17 ... MUVEET~1 --= muvee Technologies
03/01/2005 03:21:02 ... QUICKT~1 --= QuickTime
03/01/2005 02:48:24 ... SBSI ------= SBSI
13/11/2007 22:06:58 ... Skype -----= Skype
03/01/2005 03:05:06 ... Sonic -----= Sonic
12/12/2006 17:51:00 ... SONYER~1 --= Sony Ericsson
02/11/2006 17:58:58 ... SPYBOT~1 --= Spybot - Search & Destroy
03/01/2005 03:35:09 ... Symantec --= Symantec
12/12/2006 17:50:51 ... Teleca ----= Teleca
07/04/2007 08:04:15 ... TEMP ------= TEMP
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
03/12/2005 13:50:29 ... UDL -------= UDL
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
06/04/2007 16:01:45 ... WINDOW~1 --= Windows Genuine Advantage
14/04/2007 18:59:54 ... WINDOW~2 --= Windows Live Toolbar
20/10/2007 20:22:14 ... WINDOW~3 --= WindowsLiveInstaller
29/05/2007 20:03:50 ... WinZip ----= WinZip
20/10/2007 20:21:35 ... WLINST~1 --= WLInstaller
18/10/2007 16:12:47 ... YAHOO!~1 --= Yahoo! Companion

+- C:\Documents and Settings\cherinetmj\Application Data

30/07/2007 16:47:59 ... acccore ---= acccore
27/02/2006 11:36:53 ... Adobe -----= Adobe
27/02/2006 11:37:19 ... AdobeUM ---= AdobeUM
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
19/04/2007 17:12:19 ... EACCEL~1 --= eAcceleration
12/02/2006 19:57:59 ... EPSON -----= EPSON
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
25/04/2007 17:15:13 ... HP --------= HP
26/04/2006 10:15:32 ... HPQ -------= HPQ
12/02/2006 19:27:50 ... IDENTI~1 --= Identities
08/04/2006 20:13:16 ... INTERV~1 --= InterVideo
07/05/2007 17:11:31 ... ItsLabel --= ItsLabel
13/04/2007 18:21:45 ... Lavasoft --= Lavasoft
06/07/2006 14:42:30 ... LEADER~1 --= Leadertech
24/04/2007 21:09:04 ... LimeWire --= LimeWire
17/02/2006 19:08:31 ... MACROM~1 --= Macromedia
18/01/2008 19:31:56 ... MEDIAP~1 --= Media Player Classic
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
12/02/2006 19:27:50 ... SAMPLE~1 --= SampleView
06/07/2006 14:42:35 ... Sonic -----= Sonic
04/05/2007 13:41:25 ... Sun -------= Sun
12/02/2006 19:27:50 ... Symantec --= Symantec
13/04/2007 17:49:38 ... Talkback --= Talkback
22/12/2006 20:38:12 ... Teleca ----= Teleca
24/05/2006 11:06:51 ... Template --= Template
01/10/2007 20:06:36 ... U3 --------= U3

+- C:\Documents and Settings\cherinetmj\Local Settings\Application Data

27/02/2006 11:36:53 ... Adobe -----= Adobe
30/07/2007 16:40:01 ... AOLOCP~1 --= AOL OCP
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
12/02/2006 19:27:50 ... APPLIC~1 --= ApplicationHistory
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
22/09/2007 10:05:12 ... HP --------= HP
26/01/2007 13:21:25 ... IDENTI~1 --= Identities
22/09/2007 10:05:20 ... ISOLAT~1 --= IsolatedStorage
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
01/09/2007 10:33:33 ... MICROV~1 --= MicroVision Applications
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
01/11/2007 15:38:53 ... PCHealth --= PCHealth
12/02/2006 19:27:50 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\claude the boss!!!!!\Application Data

01/08/2007 19:53:19 ... acccore ---= acccore
17/04/2006 17:53:52 ... ACOUST~1 --= Acoustica
12/02/2006 18:52:14 ... Adobe -----= Adobe
16/02/2006 19:20:30 ... AdobeUM ---= AdobeUM
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
25/02/2006 19:00:30 ... ArcSoft ---= ArcSoft
13/11/2007 23:11:48 ... Corel -----= Corel
23/04/2007 20:11:49 ... EACCEL~1 --= eAcceleration
03/09/2006 17:50:59 ... EPSON -----= EPSON
17/03/2006 20:49:03 ... FarStone --= FarStone
12/05/2007 07:03:17 ... FlashGet --= FlashGet
16/02/2006 18:33:06 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:13 ... HP --------= HP
11/04/2006 15:10:51 ... HPQ -------= HPQ
07/02/2006 21:00:29 ... IDENTI~1 --= Identities
07/02/2006 21:05:46 ... INTERV~1 --= InterVideo
07/05/2007 10:51:28 ... ItsLabel --= ItsLabel
02/05/2007 13:46:15 ... ivivo -----= ivivo
14/04/2007 09:43:38 ... Lavasoft --= Lavasoft
11/02/2006 11:36:45 ... LEADER~1 --= Leadertech
16/02/2006 18:32:59 ... MACROM~1 --= Macromedia
19/02/2007 15:19:47 ... MEDIAP~1 --= Media Player Classic
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
17/02/2006 20:21:16 ... MSNINS~1 --= MSNInstaller
12/04/2006 10:45:01 ... MUVEET~1 --= muvee Technologies
06/01/2008 15:13:24 ... PCTOOL~1 --= PC Tools
07/02/2006 21:00:29 ... SAMPLE~1 --= SampleView
14/11/2007 12:50:58 ... Skype -----= Skype
26/09/2007 13:36:27 ... SlySoft ---= SlySoft
11/02/2006 11:40:52 ... Sonic -----= Sonic
06/01/2008 16:54:00 ... STAROF~1 --= StarOffice8
27/02/2006 11:22:04 ... Sun -------= Sun
07/02/2006 21:00:29 ... Symantec --= Symantec
07/04/2007 14:03:22 ... Talkback --= Talkback
12/12/2006 17:53:12 ... Teleca ----= Teleca
18/05/2007 21:15:16 ... vlc(2) ----= vlc(2)
04/06/2007 11:43:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\claude the boss!!!!!\Local Settings\Application Data

12/02/2006 18:52:14 ... Adobe -----= Adobe
01/08/2007 19:52:31 ... AOLOCP~1 --= AOL OCP
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
07/02/2006 21:00:29 ... APPLIC~1 --= ApplicationHistory
25/12/2006 13:08:11 ... BVRPSO~1 --= BVRP Software
06/04/2007 20:23:31 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:02 ... HP --------= HP
17/02/2006 21:35:39 ... IDENTI~1 --= Identities
03/03/2006 11:47:11 ... ISOLAT~1 --= IsolatedStorage
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
11/02/2006 13:02:26 ... MICROV~1 --= MicroVision Applications
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
05/11/2007 21:41:16 ... PCHealth --= PCHealth
12/12/2006 18:11:56 ... SONYER~1 --= Sony Ericsson
13/05/2006 15:00:39 ... WMTOOL~1 --= WMTools Downloaded Files
07/02/2006 21:00:29 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\debby\Application Data

03/12/2005 18:36:07 ... AOL -------= AOL
03/12/2005 18:35:29 ... APPLEC~1 --= Apple Computer
14/01/2006 10:58:49 ... EPSON -----= EPSON
03/12/2005 18:35:29 ... IDENTI~1 --= Identities
06/12/2005 20:28:41 ... INTERV~1 --= InterVideo
20/01/2006 20:46:54 ... LEADER~1 --= Leadertech
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... SAMPLE~1 --= SampleView
20/01/2006 20:46:56 ... Sonic -----= Sonic
03/12/2005 18:35:28 ... Symantec --= Symantec

+- C:\Documents and Settings\debby\Local Settings\Application Data

03/12/2005 18:35:28 ... APPLEC~1 --= Apple Computer
03/12/2005 18:35:28 ... APPLIC~1 --= ApplicationHistory
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Default User\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
25/11/2004 04:25:34 ... IDENTI~1 --= Identities
25/11/2004 04:25:34 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... SAMPLE~1 --= SampleView
01/12/2005 20:37:35 ... Symantec --= Symantec
20/09/2007 19:26:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\Default User\Local Settings\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
01/12/2005 20:37:35 ... APPLIC~1 --= ApplicationHistory
25/11/2004 04:25:38 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Elo\Application Data

18/12/2005 15:30:50 ... AOL -------= AOL
18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
21/01/2006 14:13:41 ... EPSON -----= EPSON
18/12/2005 15:30:19 ... IDENTI~1 --= Identities
20/12/2005 11:54:04 ... INTERV~1 --= InterVideo
20/12/2005 14:15:22 ... LEADER~1 --= Leadertech
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... SAMPLE~1 --= SampleView
20/12/2005 14:15:26 ... Sonic -----= Sonic
18/12/2005 15:30:19 ... Symantec --= Symantec
16/01/2006 17:11:46 ... Template --= Template

+- C:\Documents and Settings\Elo\Local Settings\Application Data

18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
18/12/2005 15:30:19 ... APPLIC~1 --= ApplicationHistory
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\papa\Application Data

12/01/2008 14:49:52 ... APPLEC~1 --= Apple Computer
12/01/2008 14:51:46 ... EACCEL~1 --= eAcceleration
12/01/2008 14:51:40 ... Google ----= Google
12/01/2008 14:49:52 ... IDENTI~1 --= Identities
12/01/2008 14:52:38 ... MACROM~1 --= Macromedia
12/01/2008 14:49:52 ... MICROS~1 --= Microsoft
12/01/2008 14:49:52 ... SAMPLE~1 --= SampleView
12/01/2008 14:49:52 ... Symantec --= Symantec
12/01/2008 14:49:52 ... Xfire -----= Xfire

+- C:\Documents and Settings\papa\Local Settings\Application Data

12/01/2008 14:49:51 ... APPLEC~1 --= Apple Computer
12/01/2008 14:49:51 ... APPLIC~1 --= ApplicationHistory
12/01/2008 14:51:40 ... Google ----= Google
16/01/2008 11:07:48 ... IDENTI~1 --= Identities
12/01/2008 14:49:51 ... MICROS~1 --= Microsoft
12/01/2008 14:49:51 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

29/05/2007 20:05:06 ... 7-Zip -----= 7-Zip
19/01/2008 09:05:20 ... A-SQUA~1 --= a-squared Free
11/03/2006 23:05:28 ... abcAVI ----= abcAVI
06/04/2007 15:14:39 ... ACCELE~1 --= Acceleration Software
17/04/2006 17:53:36 ... ACOUST~1 --= Acoustica CD Label Maker
21/01/2006 20:35:16 ... ACTIVI~1 --= Activision
03/01/2005 03:18:38 ... Adobe -----= Adobe
30/07/2007 16:36:38 ... AIM6 ------= AIM6
11/03/2006 23:11:14 ... ALCOHO~1 --= Alcohol Soft
27/04/2007 20:13:47 ... ALICET~1 --= Alice Triway Wi-Fi
04/02/2006 13:57:45 ... ALICE_~1 --= Alice_Triway_WiFi
06/04/2007 19:21:11 ... ALWILS~1 --= Alwil Software
02/12/2005 20:04:36 ... AOL9~1.0 --= AOL 9.0
05/02/2006 18:49:52 ... AOL9~1.0A --= AOL 9.0a
05/02/2006 18:50:58 ... AOL9~1.0B --= AOL 9.0b
02/12/2005 20:08:12 ... AOLCOM~1 --= AOL Compagnon
02/12/2005 20:07:59 ... AOLTOO~1 --= AOL Toolbar
25/02/2006 18:53:30 ... ArcSoft ---= ArcSoft
17/04/2006 17:26:23 ... AUDIOC~1 --= Audio CD Maker
13/12/2006 18:26:36 ... AVANQU~1 --= Avanquest update
24/05/2007 15:26:08 ... BOONTY~1 --= BoontyGames
12/04/2007 22:17:54 ... CCleaner --= CCleaner
24/11/2004 02:37:34 ... COMPLU~1 --= ComPlus Applications
02/05/2007 18:25:25 ... CONTRO~1 --= Controle Parental
13/11/2007 22:44:07 ... Corel -----= Corel
05/02/2006 20:13:26 ... COSMOP~1 --= COSMOPOLITAN
02/08/2006 14:31:58 ... Cyanide ---= Cyanide
26/07/2006 19:23:04 ... directx ---= directx
12/12/2006 21:15:29 ... DISC2P~1 --= Disc2Phone
09/05/2006 20:40:30 ... DivX ------= DivX
14/05/2007 19:18:24 ... DRIVER~1 --= Driver-Soft
18/01/2008 16:32:28 ... DVDSHR~1 --= DVD Shrink
02/05/2006 13:51:03 ... EASPOR~1 --= EA SPORTS
06/04/2007 15:14:29 ... EACCEL~1 --= eAcceleration
02/06/2006 17:54:04 ... EASYCD~1.1 --= Easy CD-DA Extractor FR 5.1
03/01/2005 03:31:14 ... EASYIN~1 --= Easy Internet signup
02/06/2006 17:49:39 ... EASYCD~1 --= EasyCDDAExtractor5104
05/02/2006 19:00:47 ... EHMINS~1 --= EHMINSTALL
01/04/2006 17:16:16 ... ELABOR~1 --= Elaborate Bytes
29/05/2007 20:05:17 ... ELECTR~1 --= Electronic Arts
07/04/2007 21:07:09 ... eMule -----= eMule
03/12/2005 13:47:46 ... epson -----= epson
17/03/2006 20:43:33 ... FarStone --= FarStone
25/11/2004 04:26:44 ... FICHIE~1 --= Fichiers communs
07/04/2007 16:05:30 ... FlashGet --= FlashGet
21/10/2007 19:13:25 ... FOREIG~1 --= Foreignword
04/02/2006 14:31:22 ... Generic ---= Generic
03/01/2005 03:33:04 ... Google ----= Google
03/01/2005 03:17:46 ... HEWLET~1 --= Hewlett-Packard
03/01/2005 03:03:54 ... HP --------= HP
18/04/2007 15:28:45 ... INCOMP~1 --= Incomplete
20/06/2006 16:45:11 ... index -----= index
03/01/2005 03:18:01 ... INSTAL~1 --= InstallShield Installation Information
28/12/2005 20:11:32 ... INTERA~1 --= InterActual
25/11/2004 04:27:06 ... INTERN~1 --= Internet Explorer
03/01/2005 03:18:01 ... INTERV~1 --= InterVideo
03/01/2005 03:20:58 ... iPod ------= iPod
07/05/2007 10:50:15 ... ITSLAB~1 --= Its Label
03/01/2005 03:20:58 ... iTunes ----= iTunes
01/05/2007 15:31:36 ... iViVo -----= iViVo
23/09/2007 10:08:06 ... IZArc -----= IZArc
03/01/2005 02:50:27 ... Java ------= Java
05/02/2006 19:01:38 ... JavaSoft --= JavaSoft
16/07/2007 13:51:00 ... JeffProd --= JeffProd
30/12/2005 22:01:01 ... JETPLA~1 --= Jet Player
18/01/2008 16:50:26 ... JUSTBA~1.01 --= Just BASIC v1.01
29/05/2007 20:05:17 ... KCSOFT~1 --= KC Softwares
17/04/2006 18:00:35 ... KS-SW -----= KS-SW
08/06/2007 16:35:43 ... Larousse --= Larousse
13/04/2007 18:21:39 ... Lavasoft --= Lavasoft
02/12/2005 20:08:10 ... Learn2.com --= Learn2.com
18/04/2007 15:20:42 ... LimeWire --= LimeWire
21/10/2007 17:41:47 ... LIVREA~1 --= Livre Album Fuji Photo
19/01/2008 22:48:00 ... Lopxp -----= Lopxp
11/11/2007 20:50:11 ... MENTAL~1 --= mental9Production
25/11/2004 04:27:08 ... MESSEN~1 --= Messenger
20/04/2007 21:07:30 ... MESSEN~2 --= Messenger Plus! Live
11/07/2007 10:55:58 ... MESSEN~3 --= MessengerSkinner
24/10/2007 16:15:08 ... METIN2~1 --= Metin2_France
10/05/2007 17:08:20 ... MICROS~1.2 --= Microsoft CAPICOM 2.1.0.2
25/11/2004 04:27:08 ... MICROS~1 --= microsoft frontpage
07/04/2007 11:49:51 ... MI9A48~1 --= Microsoft Games
03/01/2005 03:20:18 ... MICROS~3 --= Microsoft Office
01/12/2005 20:50:17 ... MICROS~4 --= Microsoft Visual Studio
03/01/2005 03:20:03 ... MICROS~2 --= Microsoft Works
01/12/2005 20:48:05 ... MICROS~1.NET --= Microsoft.NET
11/03/2006 23:05:38 ... Morgan ----= Morgan
13/12/2006 18:25:01 ... MOTORO~1 --= Motorola Phone Tools
25/11/2004 04:27:16 ... MOVIEM~1 --= Movie Maker
07/04/2007 07:57:08 ... MOZILL~1 --= Mozilla Firefox
25/11/2004 04:27:16 ... MSN -------= MSN
25/11/2004 04:27:30 ... MSNGAM~1 --= MSN Gaming Zone
27/04/2007 20:15:00 ... MSNMES~2 --= MSN Messenger
22/04/2007 12:41:19 ... MSNMES~1 --= MSN Messenger(2)
06/04/2007 20:56:31 ... MSXML4~1.0 --= MSXML 4.0
03/01/2005 03:23:53 ... MUVEET~1 --= muvee Technologies
25/11/2004 04:27:40 ... NETMEE~1 --= NetMeeting
27/07/2006 14:00:50 ... Nokia -----= Nokia
10/06/2006 12:39:04 ... objectif --= objectif
25/11/2004 04:27:42 ... ONLINE~1 --= Online Services
25/11/2004 04:27:44 ... OUTLOO~1 --= Outlook Express
03/01/2005 03:29:37 ... PC-DOC~1 --= PC-Doctor 5 for Windows
02/12/2007 11:03:24 ... PCFRIE~1 --= PCFriendly
13/04/2007 18:11:41 ... PEERGU~1 --= PeerGuardian2
14/11/2007 14:32:34 ... PHOTOF~1 --= PhotoFiltre Studio
29/05/2007 20:05:22 ... Picasa2 ---= Picasa2
30/07/2007 13:53:33 ... POWERA~1 --= PowerArchiver
12/12/2006 21:13:17 ... QUICKT~1 --= QuickTime
02/12/2005 20:05:36 ... Real ------= Real
12/04/2007 22:18:12 ... REGIST~1 --= Registry Mechanic
05/12/2005 17:41:59 ... ROCKST~1 --= Rockstar Games
08/09/2007 11:23:03 ... SAGEM -----= SAGEM
22/04/2007 09:29:11 ... SAGEMW~1 --= SAGEM WiFi manager
09/06/2006 16:38:03 ... Sateira ---= Sateira
16/02/2007 20:06:05 ... SATSUK~1 --= Satsuki Decoder Pack
06/04/2007 13:31:43 ... SECURI~1 --= Securitoo
25/11/2004 04:27:44 ... SERVIC~1 --= Services en ligne
30/12/2005 19:24:55 ... SHEPHE~1 --= Shepherd's Worlds, Inc
13/11/2007 22:07:30 ... Skype -----= Skype
11/03/2006 20:24:30 ... SlySoft ---= SlySoft
03/01/2005 03:16:19 ... Sonic -----= Sonic
12/12/2006 17:50:51 ... SONYER~1 --= Sony Ericsson
30/12/2005 19:46:28 ... SPEEDY~1 --= SpeedyZone
02/11/2006 17:58:55 ... SPYBOT~1 --= Spybot - Search & Destroy
06/01/2008 15:13:24 ... SPYWAR~2 --= Spyware Doctor
06/01/2008 16:40:26 ... Sun -------= Sun
03/01/2005 03:35:07 ... Symantec --= Symantec
02/12/2005 20:03:50 ... TECHCI~1 --= TechCity Solutions
07/04/2007 14:19:08 ... TELECH~1 --= telechargement
06/04/2007 15:18:31 ... THE4TH~1 --= The 4th Coming
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
24/11/2004 02:37:46 ... UNINST~1 --= Uninstall Information
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
09/05/2006 20:36:02 ... vso -------= vso
13/04/2007 17:48:57 ... Wanadoo ---= Wanadoo
28/04/2007 06:42:25 ... WARCRA~2 --= Warcraft III
25/04/2007 16:44:24 ... WARCRA~1 --= Warcraft III(2)
13/05/2007 13:21:34 ... WEBMED~1 --= Web Media Player
20/05/2007 17:21:05 ... WEBMED~2 --= WebMediaPlayer
26/06/2007 14:34:59 ... WI1F86~1 --= Windows Live
30/11/2007 21:56:54 ... WI48FA~1 --= Windows Live Favorites
14/04/2007 18:59:02 ... WI81E8~1 --= Windows Live Toolbar
06/04/2007 19:49:46 ... WINDOW~4 --= Windows Media Connect 2
25/11/2004 04:27:48 ... WINDOW~1 --= Windows Media Player
25/11/2004 04:27:52 ... WINDOW~2 --= Windows NT
24/11/2004 02:37:48 ... WINDOW~3 --= WindowsUpdate
04/06/2007 11:39:20 ... WOLFEN~1 --= Wolfenstein - Enemy Territory
25/11/2004 04:28:02 ... xerox -----= xerox
04/06/2007 11:43:31 ... Xfire -----= Xfire
18/10/2007 15:56:41 ... Yahoo! ----= Yahoo!


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

*.securewebinfo.com
*.safetyincludes.com
*.securemanaging.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)



- Fin du rapport -

^^Marie^^ · Answer

Slt

Relance smitfraud option 2*
Stp
Merci

dekl38 · Answer

mitFraudFix v2.274

Rapport fait à  9:34:06,87, 20/01/2008
Executé à partir de C:\Documents and Settings\claude the boss!!!!!\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix.exe by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CS1\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CS3\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

^^Marie^^ · Answer

OK

Super

Refais un log hijackthis
stp

dekl38 · Answer

apport Lopxp fait le 20/01/2008 à  9:55:26
Exécuté dans : C:\Program Files\Lopxp



___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS	asks\Connexion facile à Internet.job 
Fichier exécuté => C:\Program Files\Easy Internet signup\HPSdpApp.exe /remind /LaunchPoint reminder

C:\WINDOWS	asks\Vérifier les mises à jour de Windows Live Toolbar.job 
Fichier exécuté => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

21/02/2006 15:44:58 ... Adobe -----= Adobe
02/12/2005 20:04:36 ... AOL -------= AOL
30/07/2007 16:33:34 ... AOLDOW~1 --= AOL Downloads
30/07/2007 16:40:04 ... AOLOCP~1 --= AOL OCP
03/01/2005 03:20:58 ... APPLEC~1 --= Apple Computer
24/05/2007 15:44:21 ... BOONTY ----= BOONTY
13/12/2006 18:25:01 ... BVRPSO~1 --= BVRP Software
13/11/2007 22:55:24 ... Corel -----= Corel
18/01/2008 16:32:32 ... DVDSHR~1 --= DVD Shrink
27/09/2007 17:30:38 ... ELABOR~1 --= Elaborate Bytes
06/04/2007 16:15:02 ... Google ----= Google
13/11/2007 21:58:32 ... GOOGLE~1 --= Google Updater
03/01/2005 03:05:46 ... HP --------= HP
03/01/2005 03:16:24 ... INSTAL~1 --= InstallShield
20/04/2007 21:12:55 ... MESSEN~1 --= Messenger Plus!
25/11/2004 04:25:08 ... MICROS~1 --= Microsoft
11/03/2006 12:55:17 ... MUVEET~1 --= muvee Technologies
03/01/2005 03:21:02 ... QUICKT~1 --= QuickTime
03/01/2005 02:48:24 ... SBSI ------= SBSI
13/11/2007 22:06:58 ... Skype -----= Skype
03/01/2005 03:05:06 ... Sonic -----= Sonic
12/12/2006 17:51:00 ... SONYER~1 --= Sony Ericsson
02/11/2006 17:58:58 ... SPYBOT~1 --= Spybot - Search & Destroy
03/01/2005 03:35:09 ... Symantec --= Symantec
12/12/2006 17:50:51 ... Teleca ----= Teleca
07/04/2007 08:04:15 ... TEMP ------= TEMP
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
03/12/2005 13:50:29 ... UDL -------= UDL
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
06/04/2007 16:01:45 ... WINDOW~1 --= Windows Genuine Advantage
14/04/2007 18:59:54 ... WINDOW~2 --= Windows Live Toolbar
20/10/2007 20:22:14 ... WINDOW~3 --= WindowsLiveInstaller
29/05/2007 20:03:50 ... WinZip ----= WinZip
20/10/2007 20:21:35 ... WLINST~1 --= WLInstaller
18/10/2007 16:12:47 ... YAHOO!~1 --= Yahoo! Companion

+- C:\Documents and Settings\cherinetmj\Application Data

30/07/2007 16:47:59 ... acccore ---= acccore
27/02/2006 11:36:53 ... Adobe -----= Adobe
27/02/2006 11:37:19 ... AdobeUM ---= AdobeUM
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
19/04/2007 17:12:19 ... EACCEL~1 --= eAcceleration
12/02/2006 19:57:59 ... EPSON -----= EPSON
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
25/04/2007 17:15:13 ... HP --------= HP
26/04/2006 10:15:32 ... HPQ -------= HPQ
12/02/2006 19:27:50 ... IDENTI~1 --= Identities
08/04/2006 20:13:16 ... INTERV~1 --= InterVideo
07/05/2007 17:11:31 ... ItsLabel --= ItsLabel
13/04/2007 18:21:45 ... Lavasoft --= Lavasoft
06/07/2006 14:42:30 ... LEADER~1 --= Leadertech
24/04/2007 21:09:04 ... LimeWire --= LimeWire
17/02/2006 19:08:31 ... MACROM~1 --= Macromedia
18/01/2008 19:31:56 ... MEDIAP~1 --= Media Player Classic
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
12/02/2006 19:27:50 ... SAMPLE~1 --= SampleView
06/07/2006 14:42:35 ... Sonic -----= Sonic
04/05/2007 13:41:25 ... Sun -------= Sun
12/02/2006 19:27:50 ... Symantec --= Symantec
13/04/2007 17:49:38 ... Talkback --= Talkback
22/12/2006 20:38:12 ... Teleca ----= Teleca
24/05/2006 11:06:51 ... Template --= Template
01/10/2007 20:06:36 ... U3 --------= U3

+- C:\Documents and Settings\cherinetmj\Local Settings\Application Data

27/02/2006 11:36:53 ... Adobe -----= Adobe
30/07/2007 16:40:01 ... AOLOCP~1 --= AOL OCP
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
12/02/2006 19:27:50 ... APPLIC~1 --= ApplicationHistory
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
22/09/2007 10:05:12 ... HP --------= HP
26/01/2007 13:21:25 ... IDENTI~1 --= Identities
22/09/2007 10:05:20 ... ISOLAT~1 --= IsolatedStorage
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
01/09/2007 10:33:33 ... MICROV~1 --= MicroVision Applications
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
01/11/2007 15:38:53 ... PCHealth --= PCHealth
12/02/2006 19:27:50 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\claude the boss!!!!!\Application Data

01/08/2007 19:53:19 ... acccore ---= acccore
17/04/2006 17:53:52 ... ACOUST~1 --= Acoustica
12/02/2006 18:52:14 ... Adobe -----= Adobe
16/02/2006 19:20:30 ... AdobeUM ---= AdobeUM
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
25/02/2006 19:00:30 ... ArcSoft ---= ArcSoft
13/11/2007 23:11:48 ... Corel -----= Corel
23/04/2007 20:11:49 ... EACCEL~1 --= eAcceleration
03/09/2006 17:50:59 ... EPSON -----= EPSON
17/03/2006 20:49:03 ... FarStone --= FarStone
12/05/2007 07:03:17 ... FlashGet --= FlashGet
16/02/2006 18:33:06 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:13 ... HP --------= HP
11/04/2006 15:10:51 ... HPQ -------= HPQ
07/02/2006 21:00:29 ... IDENTI~1 --= Identities
07/02/2006 21:05:46 ... INTERV~1 --= InterVideo
07/05/2007 10:51:28 ... ItsLabel --= ItsLabel
02/05/2007 13:46:15 ... ivivo -----= ivivo
14/04/2007 09:43:38 ... Lavasoft --= Lavasoft
11/02/2006 11:36:45 ... LEADER~1 --= Leadertech
16/02/2006 18:32:59 ... MACROM~1 --= Macromedia
19/02/2007 15:19:47 ... MEDIAP~1 --= Media Player Classic
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
17/02/2006 20:21:16 ... MSNINS~1 --= MSNInstaller
12/04/2006 10:45:01 ... MUVEET~1 --= muvee Technologies
06/01/2008 15:13:24 ... PCTOOL~1 --= PC Tools
07/02/2006 21:00:29 ... SAMPLE~1 --= SampleView
14/11/2007 12:50:58 ... Skype -----= Skype
26/09/2007 13:36:27 ... SlySoft ---= SlySoft
11/02/2006 11:40:52 ... Sonic -----= Sonic
06/01/2008 16:54:00 ... STAROF~1 --= StarOffice8
27/02/2006 11:22:04 ... Sun -------= Sun
07/02/2006 21:00:29 ... Symantec --= Symantec
07/04/2007 14:03:22 ... Talkback --= Talkback
12/12/2006 17:53:12 ... Teleca ----= Teleca
18/05/2007 21:15:16 ... vlc(2) ----= vlc(2)
04/06/2007 11:43:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\claude the boss!!!!!\Local Settings\Application Data

12/02/2006 18:52:14 ... Adobe -----= Adobe
01/08/2007 19:52:31 ... AOLOCP~1 --= AOL OCP
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
07/02/2006 21:00:29 ... APPLIC~1 --= ApplicationHistory
25/12/2006 13:08:11 ... BVRPSO~1 --= BVRP Software
06/04/2007 20:23:31 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:02 ... HP --------= HP
17/02/2006 21:35:39 ... IDENTI~1 --= Identities
03/03/2006 11:47:11 ... ISOLAT~1 --= IsolatedStorage
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
11/02/2006 13:02:26 ... MICROV~1 --= MicroVision Applications
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
05/11/2007 21:41:16 ... PCHealth --= PCHealth
12/12/2006 18:11:56 ... SONYER~1 --= Sony Ericsson
13/05/2006 15:00:39 ... WMTOOL~1 --= WMTools Downloaded Files
07/02/2006 21:00:29 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\debby\Application Data

03/12/2005 18:36:07 ... AOL -------= AOL
03/12/2005 18:35:29 ... APPLEC~1 --= Apple Computer
14/01/2006 10:58:49 ... EPSON -----= EPSON
03/12/2005 18:35:29 ... IDENTI~1 --= Identities
06/12/2005 20:28:41 ... INTERV~1 --= InterVideo
20/01/2006 20:46:54 ... LEADER~1 --= Leadertech
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... SAMPLE~1 --= SampleView
20/01/2006 20:46:56 ... Sonic -----= Sonic
03/12/2005 18:35:28 ... Symantec --= Symantec

+- C:\Documents and Settings\debby\Local Settings\Application Data

03/12/2005 18:35:28 ... APPLEC~1 --= Apple Computer
03/12/2005 18:35:28 ... APPLIC~1 --= ApplicationHistory
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Default User\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
25/11/2004 04:25:34 ... IDENTI~1 --= Identities
25/11/2004 04:25:34 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... SAMPLE~1 --= SampleView
01/12/2005 20:37:35 ... Symantec --= Symantec
20/09/2007 19:26:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\Default User\Local Settings\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
01/12/2005 20:37:35 ... APPLIC~1 --= ApplicationHistory
25/11/2004 04:25:38 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Elo\Application Data

18/12/2005 15:30:50 ... AOL -------= AOL
18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
21/01/2006 14:13:41 ... EPSON -----= EPSON
18/12/2005 15:30:19 ... IDENTI~1 --= Identities
20/12/2005 11:54:04 ... INTERV~1 --= InterVideo
20/12/2005 14:15:22 ... LEADER~1 --= Leadertech
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... SAMPLE~1 --= SampleView
20/12/2005 14:15:26 ... Sonic -----= Sonic
18/12/2005 15:30:19 ... Symantec --= Symantec
16/01/2006 17:11:46 ... Template --= Template

+- C:\Documents and Settings\Elo\Local Settings\Application Data

18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
18/12/2005 15:30:19 ... APPLIC~1 --= ApplicationHistory
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\papa\Application Data

12/01/2008 14:49:52 ... APPLEC~1 --= Apple Computer
12/01/2008 14:51:46 ... EACCEL~1 --= eAcceleration
12/01/2008 14:51:40 ... Google ----= Google
12/01/2008 14:49:52 ... IDENTI~1 --= Identities
12/01/2008 14:52:38 ... MACROM~1 --= Macromedia
12/01/2008 14:49:52 ... MICROS~1 --= Microsoft
12/01/2008 14:49:52 ... SAMPLE~1 --= SampleView
12/01/2008 14:49:52 ... Symantec --= Symantec
12/01/2008 14:49:52 ... Xfire -----= Xfire

+- C:\Documents and Settings\papa\Local Settings\Application Data

12/01/2008 14:49:51 ... APPLEC~1 --= Apple Computer
12/01/2008 14:49:51 ... APPLIC~1 --= ApplicationHistory
12/01/2008 14:51:40 ... Google ----= Google
16/01/2008 11:07:48 ... IDENTI~1 --= Identities
12/01/2008 14:49:51 ... MICROS~1 --= Microsoft
12/01/2008 14:49:51 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

29/05/2007 20:05:06 ... 7-Zip -----= 7-Zip
19/01/2008 09:05:20 ... A-SQUA~1 --= a-squared Free
11/03/2006 23:05:28 ... abcAVI ----= abcAVI
06/04/2007 15:14:39 ... ACCELE~1 --= Acceleration Software
17/04/2006 17:53:36 ... ACOUST~1 --= Acoustica CD Label Maker
21/01/2006 20:35:16 ... ACTIVI~1 --= Activision
03/01/2005 03:18:38 ... Adobe -----= Adobe
30/07/2007 16:36:38 ... AIM6 ------= AIM6
11/03/2006 23:11:14 ... ALCOHO~1 --= Alcohol Soft
27/04/2007 20:13:47 ... ALICET~1 --= Alice Triway Wi-Fi
04/02/2006 13:57:45 ... ALICE_~1 --= Alice_Triway_WiFi
06/04/2007 19:21:11 ... ALWILS~1 --= Alwil Software
02/12/2005 20:04:36 ... AOL9~1.0 --= AOL 9.0
05/02/2006 18:49:52 ... AOL9~1.0A --= AOL 9.0a
05/02/2006 18:50:58 ... AOL9~1.0B --= AOL 9.0b
02/12/2005 20:08:12 ... AOLCOM~1 --= AOL Compagnon
02/12/2005 20:07:59 ... AOLTOO~1 --= AOL Toolbar
25/02/2006 18:53:30 ... ArcSoft ---= ArcSoft
17/04/2006 17:26:23 ... AUDIOC~1 --= Audio CD Maker
13/12/2006 18:26:36 ... AVANQU~1 --= Avanquest update
24/05/2007 15:26:08 ... BOONTY~1 --= BoontyGames
12/04/2007 22:17:54 ... CCleaner --= CCleaner
24/11/2004 02:37:34 ... COMPLU~1 --= ComPlus Applications
02/05/2007 18:25:25 ... CONTRO~1 --= Controle Parental
13/11/2007 22:44:07 ... Corel -----= Corel
05/02/2006 20:13:26 ... COSMOP~1 --= COSMOPOLITAN
02/08/2006 14:31:58 ... Cyanide ---= Cyanide
26/07/2006 19:23:04 ... directx ---= directx
12/12/2006 21:15:29 ... DISC2P~1 --= Disc2Phone
09/05/2006 20:40:30 ... DivX ------= DivX
14/05/2007 19:18:24 ... DRIVER~1 --= Driver-Soft
18/01/2008 16:32:28 ... DVDSHR~1 --= DVD Shrink
02/05/2006 13:51:03 ... EASPOR~1 --= EA SPORTS
06/04/2007 15:14:29 ... EACCEL~1 --= eAcceleration
02/06/2006 17:54:04 ... EASYCD~1.1 --= Easy CD-DA Extractor FR 5.1
03/01/2005 03:31:14 ... EASYIN~1 --= Easy Internet signup
02/06/2006 17:49:39 ... EASYCD~1 --= EasyCDDAExtractor5104
05/02/2006 19:00:47 ... EHMINS~1 --= EHMINSTALL
01/04/2006 17:16:16 ... ELABOR~1 --= Elaborate Bytes
29/05/2007 20:05:17 ... ELECTR~1 --= Electronic Arts
07/04/2007 21:07:09 ... eMule -----= eMule
03/12/2005 13:47:46 ... epson -----= epson
17/03/2006 20:43:33 ... FarStone --= FarStone
25/11/2004 04:26:44 ... FICHIE~1 --= Fichiers communs
07/04/2007 16:05:30 ... FlashGet --= FlashGet
21/10/2007 19:13:25 ... FOREIG~1 --= Foreignword
04/02/2006 14:31:22 ... Generic ---= Generic
03/01/2005 03:33:04 ... Google ----= Google
03/01/2005 03:17:46 ... HEWLET~1 --= Hewlett-Packard
03/01/2005 03:03:54 ... HP --------= HP
18/04/2007 15:28:45 ... INCOMP~1 --= Incomplete
20/06/2006 16:45:11 ... index -----= index
03/01/2005 03:18:01 ... INSTAL~1 --= InstallShield Installation Information
28/12/2005 20:11:32 ... INTERA~1 --= InterActual
25/11/2004 04:27:06 ... INTERN~1 --= Internet Explorer
03/01/2005 03:18:01 ... INTERV~1 --= InterVideo
03/01/2005 03:20:58 ... iPod ------= iPod
07/05/2007 10:50:15 ... ITSLAB~1 --= Its Label
03/01/2005 03:20:58 ... iTunes ----= iTunes
01/05/2007 15:31:36 ... iViVo -----= iViVo
23/09/2007 10:08:06 ... IZArc -----= IZArc
03/01/2005 02:50:27 ... Java ------= Java
05/02/2006 19:01:38 ... JavaSoft --= JavaSoft
16/07/2007 13:51:00 ... JeffProd --= JeffProd
30/12/2005 22:01:01 ... JETPLA~1 --= Jet Player
18/01/2008 16:50:26 ... JUSTBA~1.01 --= Just BASIC v1.01
29/05/2007 20:05:17 ... KCSOFT~1 --= KC Softwares
17/04/2006 18:00:35 ... KS-SW -----= KS-SW
08/06/2007 16:35:43 ... Larousse --= Larousse
13/04/2007 18:21:39 ... Lavasoft --= Lavasoft
02/12/2005 20:08:10 ... Learn2.com --= Learn2.com
18/04/2007 15:20:42 ... LimeWire --= LimeWire
21/10/2007 17:41:47 ... LIVREA~1 --= Livre Album Fuji Photo
19/01/2008 22:48:00 ... Lopxp -----= Lopxp
11/11/2007 20:50:11 ... MENTAL~1 --= mental9Production
25/11/2004 04:27:08 ... MESSEN~1 --= Messenger
20/04/2007 21:07:30 ... MESSEN~2 --= Messenger Plus! Live
11/07/2007 10:55:58 ... MESSEN~3 --= MessengerSkinner
24/10/2007 16:15:08 ... METIN2~1 --= Metin2_France
10/05/2007 17:08:20 ... MICROS~1.2 --= Microsoft CAPICOM 2.1.0.2
25/11/2004 04:27:08 ... MICROS~1 --= microsoft frontpage
07/04/2007 11:49:51 ... MI9A48~1 --= Microsoft Games
03/01/2005 03:20:18 ... MICROS~3 --= Microsoft Office
01/12/2005 20:50:17 ... MICROS~4 --= Microsoft Visual Studio
03/01/2005 03:20:03 ... MICROS~2 --= Microsoft Works
01/12/2005 20:48:05 ... MICROS~1.NET --= Microsoft.NET
11/03/2006 23:05:38 ... Morgan ----= Morgan
13/12/2006 18:25:01 ... MOTORO~1 --= Motorola Phone Tools
25/11/2004 04:27:16 ... MOVIEM~1 --= Movie Maker
07/04/2007 07:57:08 ... MOZILL~1 --= Mozilla Firefox
25/11/2004 04:27:16 ... MSN -------= MSN
25/11/2004 04:27:30 ... MSNGAM~1 --= MSN Gaming Zone
27/04/2007 20:15:00 ... MSNMES~2 --= MSN Messenger
22/04/2007 12:41:19 ... MSNMES~1 --= MSN Messenger(2)
06/04/2007 20:56:31 ... MSXML4~1.0 --= MSXML 4.0
03/01/2005 03:23:53 ... MUVEET~1 --= muvee Technologies
25/11/2004 04:27:40 ... NETMEE~1 --= NetMeeting
27/07/2006 14:00:50 ... Nokia -----= Nokia
10/06/2006 12:39:04 ... objectif --= objectif
25/11/2004 04:27:42 ... ONLINE~1 --= Online Services
25/11/2004 04:27:44 ... OUTLOO~1 --= Outlook Express
03/01/2005 03:29:37 ... PC-DOC~1 --= PC-Doctor 5 for Windows
02/12/2007 11:03:24 ... PCFRIE~1 --= PCFriendly
13/04/2007 18:11:41 ... PEERGU~1 --= PeerGuardian2
14/11/2007 14:32:34 ... PHOTOF~1 --= PhotoFiltre Studio
29/05/2007 20:05:22 ... Picasa2 ---= Picasa2
30/07/2007 13:53:33 ... POWERA~1 --= PowerArchiver
12/12/2006 21:13:17 ... QUICKT~1 --= QuickTime
02/12/2005 20:05:36 ... Real ------= Real
12/04/2007 22:18:12 ... REGIST~1 --= Registry Mechanic
05/12/2005 17:41:59 ... ROCKST~1 --= Rockstar Games
08/09/2007 11:23:03 ... SAGEM -----= SAGEM
22/04/2007 09:29:11 ... SAGEMW~1 --= SAGEM WiFi manager
09/06/2006 16:38:03 ... Sateira ---= Sateira
16/02/2007 20:06:05 ... SATSUK~1 --= Satsuki Decoder Pack
06/04/2007 13:31:43 ... SECURI~1 --= Securitoo
25/11/2004 04:27:44 ... SERVIC~1 --= Services en ligne
30/12/2005 19:24:55 ... SHEPHE~1 --= Shepherd's Worlds, Inc
13/11/2007 22:07:30 ... Skype -----= Skype
11/03/2006 20:24:30 ... SlySoft ---= SlySoft
03/01/2005 03:16:19 ... Sonic -----= Sonic
12/12/2006 17:50:51 ... SONYER~1 --= Sony Ericsson
30/12/2005 19:46:28 ... SPEEDY~1 --= SpeedyZone
02/11/2006 17:58:55 ... SPYBOT~1 --= Spybot - Search & Destroy
06/01/2008 15:13:24 ... SPYWAR~2 --= Spyware Doctor
06/01/2008 16:40:26 ... Sun -------= Sun
03/01/2005 03:35:07 ... Symantec --= Symantec
02/12/2005 20:03:50 ... TECHCI~1 --= TechCity Solutions
07/04/2007 14:19:08 ... TELECH~1 --= telechargement
06/04/2007 15:18:31 ... THE4TH~1 --= The 4th Coming
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
24/11/2004 02:37:46 ... UNINST~1 --= Uninstall Information
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
09/05/2006 20:36:02 ... vso -------= vso
13/04/2007 17:48:57 ... Wanadoo ---= Wanadoo
28/04/2007 06:42:25 ... WARCRA~2 --= Warcraft III
25/04/2007 16:44:24 ... WARCRA~1 --= Warcraft III(2)
13/05/2007 13:21:34 ... WEBMED~1 --= Web Media Player
20/05/2007 17:21:05 ... WEBMED~2 --= WebMediaPlayer
26/06/2007 14:34:59 ... WI1F86~1 --= Windows Live
30/11/2007 21:56:54 ... WI48FA~1 --= Windows Live Favorites
14/04/2007 18:59:02 ... WI81E8~1 --= Windows Live Toolbar
06/04/2007 19:49:46 ... WINDOW~4 --= Windows Media Connect 2
25/11/2004 04:27:48 ... WINDOW~1 --= Windows Media Player
25/11/2004 04:27:52 ... WINDOW~2 --= Windows NT
24/11/2004 02:37:48 ... WINDOW~3 --= WindowsUpdate
04/06/2007 11:39:20 ... WOLFEN~1 --= Wolfenstein - Enemy Territory
25/11/2004 04:28:02 ... xerox -----= xerox
04/06/2007 11:43:31 ... Xfire -----= Xfire
18/10/2007 15:56:41 ... Yahoo! ----= Yahoo!


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

*.securewebinfo.com
*.safetyincludes.com
*.securemanaging.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)



- Fin du rapport -

^^Marie^^ · Answer

Refais un log hijackthis
stp

dekl38 · Answer

Dsl mais c quoi le log hijackthis déjà?

^^Marie^^ · Answer

F -  Hijackthis - Outil de diagnostic et réparation 
télécharge HijackThis ici: 
http://telechargement.zebulon.fr/138-hijackthis-1991.html 
Dézippe le dans un dossier prévu à cet effet. 
Par exemple C:\hijackthis < Enregistre le bien dans c : ! 
Démo : (Merci a Balltrap34 pour cette réalisation) 
http://pageperso.aol.fr/balltrap34/Hijenr.gif 
Lance le puis: 
clique sur "do a system scan and save logfile" (cf démo) 
faire un copier coller du log entier sur le forum 
Démo : (Merci a Balltrap34 pour cette réalisation) 
http://pageperso.aol.fr/balltrap34/demohijack.htm 
http://www.tutoriaux-excalibur.com/hijackthis.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html 

Bon courage 

A+

dekl38 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:49:06, on 20/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684CC} - C:\Program Files\Helper\findsiteonline.dll (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKLM\..\Policies\Explorer\Run: [Service] C:\WINDOWS\winlogon32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = -Fi 11g USB adapter\WLANUTL.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?7079462f846e47f0a9c3a40a7ed7f044
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?7079462f846e47f0a9c3a40a7ed7f044
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Xanadu - {5CC384BB-1326-11D5-F4AE-00C04923F885} - C:\Program Files\Foreignword\Xanadu\XanaduLaunch.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: printers - {B1DB1ADB-10A4-4F52-8691-EEA69B375453} - libwinets.dll (file missing)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Protection Trend Micro contre les programmes espions  (PcScnSrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1	mproxy.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

^^Marie^^ · Answer

OK

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau. 
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe 
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici : 
• Redémarre ton ordinateur 
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde). 
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître. 
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée". 
• Choisis ton compte. 
Déroule la liste des instructions ci-dessous : 
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script. 
• Appuie sur Y pour commencer le processus de nettoyage. 
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer. 
• Appuie sur une touche pour redémarrer le PC. 
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers. 
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished. 
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau. 
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt. 
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !



A++

QQu'un d'autre prendra la suite
Bon courage

dekl38 · Answer

salut voici le raport


SDFix: Version 1.130

Run by claude the boss!!!!! on 22/01/2008 at 19:28

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files: 

No Trojan Files Found






Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-22 19:48:51
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 417


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL France"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\eMule\eMule.exe"="C:\Program Files\eMule\eMule.exe:*:Enabled:eMule Plus"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\FlashGet\FlashGet.exe"="C:\Program Files\FlashGet\FlashGet.exe:*:Enabled:Flashget"
"C:\Program Files\Fichiers communs\AOL\Loader\aolload.exe"="C:\Program Files\Fichiers communs\AOL\Loader\aolload.exe:*:Enabled:AOL Loader"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%ProgramFiles%\iTunes\iTunes.exe"="%ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

Remaining Files:
---------------


Files with Hidden Attributes:

Tue  7 Feb 2006           218 A.SHR --- "C:\BOOT.BAK"
Sun  7 Oct 2007        27,928 A..H. --- "C:\WINDOWS\NETVISION.exe"
Sun  6 Jan 2008            72 A.SH. --- "C:\WINDOWS\SAAF8CD2E.tmp"
Mon 10 May 2004        54,384 A..H. --- "C:\Program Files\AOL 9.0\aolphx.exe"
Mon 10 May 2004       156,784 A..H. --- "C:\Program Files\AOL 9.0\aoltray.exe"
Mon 10 May 2004        31,344 A..H. --- "C:\Program Files\AOL 9.0\RBM.exe"
Mon 10 May 2004        54,384 A..H. --- "C:\Program Files\AOL 9.0b\aolphx.exe"
Mon 10 May 2004       156,784 A..H. --- "C:\Program Files\AOL 9.0b\aoltray.exe"
Mon 10 May 2004        31,344 A..H. --- "C:\Program Files\AOL 9.0b\RBM.exe"
Wed 10 Oct 2007     5,903,928 A..H. --- "C:\Program Files\Picasa2\setup.exe"
Thu 10 Jan 2008            88 ..SHR --- "C:\WINDOWS\system32\C758AF80CF.sys"
Thu 10 Jan 2008         2,828 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Mon  9 Apr 2007         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 13 Nov 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP583\A0185213.sys"
Wed 14 Nov 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP583\A0185263.sys"
Wed 14 Nov 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP585\A0186726.sys"
Wed 21 Nov 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP593\A0194555.sys"
Sun  9 Dec 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP597\A0197382.sys"
Fri 21 Dec 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP600\A0197755.sys"
Thu 27 Dec 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP602\A0197987.sys"
Thu 27 Dec 2007         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP619\A0202227.sys"
Wed  9 Jan 2008         2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP621\A0204243.sys"
Fri  6 Apr 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Fri 24 Aug 2007    19,561,840 A..H. --- "C:\Documents and Settings\HP_Propri‚taire\Local Settings\Temp\BIT92.tmp"
Wed 26 Sep 2007             0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\778fd2fc3fe6b905e366b5ddbba384c8\BIT243.tmp"
Mon 17 Dec 2007        88,064 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL0005.tmp"
Thu 10 Jan 2008        89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL0236.tmp"
Thu 10 Jan 2008        89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL1229.tmp"
Thu 10 Jan 2008        91,648 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL1318.tmp"
Thu 10 Jan 2008        92,160 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL1918.tmp"
Thu 10 Jan 2008        90,112 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2007.tmp"
Thu 10 Jan 2008        89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2173.tmp"
Thu 10 Jan 2008        90,112 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2244.tmp"
Thu 10 Jan 2008        89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2730.tmp"
Thu 10 Jan 2008        90,112 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL3058.tmp"
Thu 10 Jan 2008        89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL3160.tmp"
Thu 10 Jan 2008        89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL3395.tmp"

Finished!

Virus aidé moi SVP

45 réponses

Discussions similaires

Newsletters