pub Cid sous vista Résolu

Question

Salut!,
depuis quelques mois j'ai des pub Cid quir s'affiche et ca commence à me "souler".J'ai supprimer msn+ ou il y avait marqué Cid.Mon antivirus est norton et il ne détecte rien,j'ai également AVG et Spybot et c'est la même chose.
Je ne sais pas quoi faire.Aider moi SVP
Merci d'avance.

armandaudric · Answer

pour enlever les pub cid il faut des installer le logiciel il démarre en mode sens échec tu eteint  ton ordi tu le rallume en tapant sur f 5 tu sélectionne le mode puis ta page d accueil va souvrir en grand et la tu fait ajout supprimer la tu verra dans le programme le cid tu le desinstalle et tu redémarre voila normalement plus de pub cid a ++

mogtp · Answer

dsl mais je n'ai pas totalement compri

armandaudric · Answer

tu na pas  compris quoi  je répète pour supprimer le cid de msn il faut faire un demarage sans échec pour le trouver il ya que de cette façon que tu pourra le desinstaller car regarde si tu ouvre ton panneau de config tu ne verra pas le cid par contre en mode sens échec la tu le verra et tu pourra le desinstaller a suivre si tu na pas encore compris repond moi

mogtp · Answer

ok je me mè o boulot

mogtp · Answer

re
je n'avais pas réussi avc ce que tu m'as di, donc ce que j'ai fais,je me suis apercut que je n'aivais pas de pages cid qui apparaissaient lorsque je n'étais pas sur msn donc j'ai supprimé widows live homepage et galerie windows live et j'ai réparé msn et voilà ca fait une demi heure que je n'ai aucune page cid
merci pour ton aide
++

mogtp · Answer

euh,j'ai parlé trop vite
mince!!

raphadu92 · Answer

bonjour tlm,j'ai le même problème que mogtp et j'ai essayer ta solution armandaudric et ça marche pas en tout cas quand je suis en mode sans echec et que je vais dans suppression de programme j'ai exactement les mêmes programme que dans le mode normale.

armandaudric · Answer

bon normallement tu devrais voir le cid qui ces installer en même temps que ton msn la je ne voie plus rien ou alors télécharge ccleaner et regarde si tu le trouve et fait une analyse avec ce logiciel

raphadu92 · Answer

ok je vais voire ça !

mogtp · Answer

j'ai fais une analyse avc ccleaner et il netrouve pas le cid,bon cela dit j'ai beaucoup moin de pub cid que avant

green day · Answer

Salut

Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

* Démarrer en mode sans echec 
* Double cliquer combofix.exe. 
* Appuyer sur la touche Y (Yes) pour démarrer le scan 
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp 

++

mogtp · Answer

voici le rapport et merci pour ton aide

ComboFix 08-03-06.4 - Elie 2008-03-07 15:27:15.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium   6.0.6000.0.1252.1.1036.18.854 [GMT 1:00]
Endroit: C:\Users\Elie\Desktop\Downloads\ComboFix.exe
 * Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((   Fichiers créés 2008-02-07 to 2008-03-07  ))))))))))))))))))))))))))))))))))))
.

Pas de nouveau fichier créé dans cet espace de temps

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-07 14:06	---------	d-----w	C:\ProgramData\Symantec
2008-03-07 13:49	---------	d-----w	C:\ProgramData\Messenger Plus!
2008-03-07 13:47	---------	d-----w	C:\Users\Elie\AppData\Roaming\OpenOffice.org2
2008-03-07 13:47	---------	d-----w	C:\Program Files\Steam
2008-03-07 13:46	---------	d-----w	C:\Program Files\Spybot - Search & Destroy
2008-03-06 21:42	---------	d-----w	C:\Program Files\Messenger Plus! Live
2008-03-06 21:35	---------	d-----w	C:\ProgramData\Spybot - Search & Destroy
2008-03-06 21:34	---------	d-----w	C:\ProgramData\Lavasoft
2008-03-06 21:34	---------	d-----w	C:\Program Files\Lavasoft
2008-03-06 21:33	---------	d-----w	C:\Program Files\Common Files\Wise Installation Wizard
2008-03-06 21:24	---------	d-----w	C:\Program Files\A.S.C
2008-03-06 21:23	---------	d-----w	C:\Program Files\Navilog1
2008-03-06 20:46	---------	d--h--w	C:\Program Files\InstallShield Installation Information
2008-03-06 18:00	---------	d-----w	C:\Program Files\Windows Live
2008-03-06 15:18	---------	d-----w	C:\Program Files\Panda Security
2008-03-06 14:56	---------	d-----w	C:\Program Files\Microsoft Silverlight
2008-03-06 14:09	---------	d-----w	C:\Program Files\Trend Micro
2008-03-05 21:45	---------	d-----w	C:\Program Files\Launch Manager
2008-03-05 16:36	---------	d-----w	C:\Users\Elie\AppData\Roaming\LimeWire
2008-03-05 13:20	---------	d-----w	C:\Users\Elie\AppData\Roaming\Grisoft
2008-03-05 13:20	---------	d-----w	C:\ProgramData\Grisoft
2008-03-04 21:51	---------	d-----w	C:\Program Files\CCleaner
2008-03-03 12:44	---------	d-----w	C:\Users\Elie\AppData\Roaming\Uniblue
2008-03-02 19:33	---------	d-----w	C:\Users\Elie\AppData\Roaming	eamspeak2
2008-03-02 18:58	---------	d-----w	C:\Program Files\Norton Internet Security
2008-03-02 18:58	---------	d-----w	C:\Program Files\Common Files\Symantec Shared
2008-03-02 18:51	805	----a-w	C:\Windows\system32\drivers\SYMEVENT.INF
2008-03-02 18:51	123,952	----a-w	C:\Windows\system32\drivers\SYMEVENT.SYS
2008-03-02 18:51	10,740	----a-w	C:\Windows\system32\drivers\SYMEVENT.CAT
2008-03-02 18:51	---------	d-----w	C:\Program Files\Symantec
2008-03-02 15:45	---------	d-----w	C:\ProgramData\Fiveroadfor
2008-03-02 14:40	---------	d-----w	C:\Users\Elie\AppData\Roaming\Symantec
2008-03-02 14:20	---------	d-----w	C:\Program Files\AxBx
2008-03-02 13:58	---------	d---a-w	C:\ProgramData\TEMP
2008-03-01 12:47	---------	d-----w	C:\Program Files\New Folder
2008-02-24 16:07	---------	d-----w	C:\Program Files\Common Files\Steam
2008-02-22 20:06	---------	d-----w	C:\Program Files\Teamspeak2_RC2
2008-02-22 17:13	---------	d-----w	C:\ProgramData\Admin Inter 1 Mags
2008-02-14 02:12	194,560	----a-w	C:\Windows\System32\WebClnt.dll
2008-02-14 02:12	110,080	----a-w	C:\Windows\system32\drivers\mrxdav.sys
2008-02-14 02:07	45,112	----a-w	C:\Windows\system32\drivers\pciidex.sys
2008-02-14 02:07	3,504,696	----a-w	C:\Windows\System32
tkrnlpa.exe
2008-02-14 02:07	3,470,392	----a-w	C:\Windows\System32
toskrnl.exe
2008-02-14 02:07	21,560	----a-w	C:\Windows\system32\drivers\atapi.sys
2008-02-14 02:07	154,624	----a-w	C:\Windows\system32\drivers
wifi.sys
2008-02-14 02:07	15,928	----a-w	C:\Windows\system32\drivers\pciide.sys
2008-02-14 02:07	109,624	----a-w	C:\Windows\system32\drivers\ataport.sys
2008-02-14 02:06	803,328	----a-w	C:\Windows\system32\drivers	cpip.sys
2008-02-14 02:06	537,600	----a-w	C:\Windows\AppPatch\AcLayers.dll
2008-02-14 02:06	449,536	----a-w	C:\Windows\AppPatch\AcSpecfc.dll
2008-02-14 02:06	4,247,552	----a-w	C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-14 02:06	24,064	----a-w	C:\Windows\System32
etcfg.exe
2008-02-14 02:06	22,016	----a-w	C:\Windows\System32
etiougc.exe
2008-02-14 02:06	216,632	----a-w	C:\Windows\system32\drivers
etio.sys
2008-02-14 02:06	2,144,256	----a-w	C:\Windows\AppPatch\AcGenral.dll
2008-02-14 02:06	173,056	----a-w	C:\Windows\AppPatch\AcXtrnal.dll
2008-02-14 02:06	167,424	----a-w	C:\Windows\System32	cpipcfg.dll
2008-02-14 02:06	1,686,528	----a-w	C:\Windows\System32\gameux.dll
2008-02-14 02:03	824,832	----a-w	C:\Windows\System32\wininet.dll
2008-02-14 02:03	56,320	----a-w	C:\Windows\System32\iesetup.dll
2008-02-14 02:03	52,736	----a-w	C:\Windows\AppPatch\iebrshim.dll
2008-02-14 02:03	26,624	----a-w	C:\Windows\System32\ieUnatt.exe
2008-01-26 20:37	---------	d-----w	C:\Program Files\Windows Media Components
2008-01-26 20:34	---------	d-----w	C:\Program Files\NRJ
2008-01-24 20:55	---------	d-----w	C:\Program Files\Java
2008-01-22 20:05	---------	d-----w	C:\ProgramData\Avg7
2008-01-15 08:54	10,537	----a-w	C:\Windows\system32\drivers\coh_mon.cat
2008-01-15 04:28	706	----a-w	C:\Windows\system32\drivers\COH_Mon.inf
2008-01-12 17:32	23,904	----a-w	C:\Windows\system32\drivers\COH_Mon.sys
2008-01-10 17:29	---------	d-----w	C:\Program Files\Windows Mail
2008-01-10 05:50	1,244,672	----a-w	C:\Windows\System32\mcmde.dll
2008-01-09 21:30	211,000	----a-w	C:\Windows\system32\drivers\volsnap.sys
2008-01-09 21:30	1,060,920	----a-w	C:\Windows\system32\drivers
tfs.sys
2008-01-09 21:30	---------	d-----w	C:\Program Files\Windows Sidebar
2008-01-09 21:29	11,776	----a-w	C:\Windows\System32\sbunattend.exe
2007-12-14 10:32	12,632	----a-w	C:\Windows\System32\lsdelete.exe
2007-12-12 19:01	1,327,104	----a-w	C:\Windows\System32\quartz.dll
2007-12-12 19:00	9,728	----a-w	C:\Windows\System32\LAPRXY.DLL
2007-12-12 19:00	223,232	----a-w	C:\Windows\System32\WMASF.DLL
2007-08-30 15:36	174	--sha-w	C:\Program Files\desktop.ini
2007-07-19 08:36	278,528	----a-w	C:\Program Files\Common Files\FDEUnInstaller.exe
.

(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
2007-08-24 20:51	316784	--a------	C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
2008-03-02 16:04	116088	--a------	C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= "C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll" [2007-08-24 20:51 316784]

[HKEY_CLASSES_ROOT\clsid\{7febefe3-6b19-4349-98d2-ffb09d4b49ca}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 20:51 316784]

[HKEY_CLASSES_ROOT\clsid\{7febefe3-6b19-4349-98d2-ffb09d4b49ca}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"????r"="" []
"?????????"="??????????????e" []
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:35 125440]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-08-11 15:30 249856]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-20 11:43 171448]
"Steam"="c:\progra~1\steam\steam.exe" [2007-12-03 18:25 1266936]
"MEMO JUGS"="C:\ProgramData\Idol trust trust.tc8u35" [2008-02-22 18:12 196624]
"1 mags 16 more"="C:\ProgramData\ping multi build.014gm" [2008-02-22 18:13 135184]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 13:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-15 20:49 1006264]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-07-11 17:12 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2006-11-20 07:13 4018176 C:\Windows\RtHDVCpl.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 04:00 815104]
"Acer Tour"="" []
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 21:48 57344]
"SetPanel"="" []
"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2006-11-15 07:02 614400]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-02-06 23:04 464168]
"eRecoveryService"="" []
"AGEIA PhysX SysTray"="C:\Program Files\AGEIA Technologies\TrayIcon.exe" [2006-03-20 20:43 331776]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-02-14 11:01 51048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

C:\Users\Elie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 21:57:56 393216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe [2004-12-14 04:44:06 29696]
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2006-12-05 22:36:42 528384]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{8EBFFF4D-3E7E-4664-B625-AF732DCAFA64}"= UDP:C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{8A8B13C7-3F61-4116-A5E1-BF55907A7D2D}"= TCP:C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{4BC46A30-432C-4C21-9B33-42C696CDE3B7}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{7B6D432C-7363-460E-9DE4-91466E13C241}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{FB4957AF-CB28-4ECC-8EB5-13381C40DDB3}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{90D95120-DF4F-47F5-800A-DEB613D486B6}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{67BC16B6-1784-433A-A10B-1A8886E8864C}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{6C2E3E05-8B7C-4353-8B69-CDEAA954F0B2}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{965DFA45-6548-480B-AF1B-B9A2B3C528D7}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{69354A29-D81C-4904-87D3-21C111CAF376}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{1D4882CA-4946-487C-8210-4B1F7A6799CB}"= UDP:C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\game.dat:La Bataille pour la Terre du Milieu(tm)
"{2E33DBB7-134F-4C18-BC01-58D816552441}"= TCP:C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\game.dat:La Bataille pour la Terre du Milieu(tm)
"{1CB2AE5D-0E69-46F9-877A-ED3EBE1F9DB7}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{A0CAB59F-2CEA-487A-8B14-FC64BCFE974B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{4F25AA50-F7BF-40F5-95A6-1D51E47EA67B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{C796098D-3CFA-4253-B3B7-C0C32F248AD1}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{967EFD1F-238F-4C09-A205-84FFE95DC15A}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{6566EB37-B023-45F7-95AB-E867070D91D1}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{78A20CA3-E277-4477-89D6-685EC98727AC}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{DFEE9742-25B5-419C-BF0E-6D4334E6E2BA}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{E71AE3E0-42DC-48BE-A815-6B9C9DCFF944}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{A65F8E18-C9F1-444E-954A-14752957B1DE}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{2C2E3022-6B16-4D33-8008-F2968387D564}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{0489961A-9ADF-4BAA-83C5-F22D045A8341}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{42C48FBA-35D2-4073-9B2D-AA4D8ABF2280}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{A00ACA3B-CC1B-493F-8FCE-7120269221FD}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{EDA089FE-A121-40FB-B8D9-1D9FCD92D960}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{07D2A656-0B9B-415C-9A01-A5245340E331}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe"= C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu
"C:\Acer\Empowering Technology\eDataSecurity\encryption.exe"= C:\Acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption
"C:\Acer\Empowering Technology\eDataSecurity\decryption.exe"= C:\Acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption
"C:\Program Files\WINSOS\winsos.exe"= C:\Program Files\WINSOS\winsos.exe:*:Enabled:Winsos
"C:\Program Files\WINSOS\anti-spy.exe"= C:\Program Files\WINSOS\anti-spy.exe:*:Enabled:anti-spy Winsos
"C:\Program Files\WINSOS\help.exe"= C:\Program Files\WINSOS\help.exe:*:Enabled:Winsos Help

R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-02-06 23:04]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-02-06 23:04]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2006-11-08 16:11]
R0 SI3112r;ATI-4379 Serial ATA Controller;C:\Windows\system32\DRIVERS\SI3112r.sys [2007-08-29 03:04]
R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20080305.003\IDSvix86.sys [2008-02-13 17:18]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-02-06 23:04]
R2 eNet Service;eNet Service;C:\Acer\Empowering Technology\eNet\eNet Service.exe [2006-11-20 21:43]
R2 LiveUpdate Notice;LiveUpdate Notice;"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon []
R2 MobilityService;MobilityService;C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 12:57]
R2 WMIService;ePower Service;C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2006-12-01 10:34]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 10:39]
R3 COH_Mon;COH_Mon;C:\Windows\system32\Drivers\COH_Mon.sys [2008-01-12 18:32]
R3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-25 03:46]
R3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-02-22 20:49]
R3 SymIMMP;SymIMMP;C:\Windows\system32\DRIVERS\SymIM.sys [2007-08-09 17:27]
R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2007-08-13 13:50]
S2 eSettingsService;eSettings Service;C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2006-11-13 00:13]
S3 athr;Atheros Extensible Wireless LAN device driver;C:\Windows\system32\DRIVERS\athr.sys [2006-11-10 07:38]
S3 SymIM;Symantec Network Security Intermediate Filter Service;C:\Windows\system32\DRIVERS\SymIM.sys [2007-08-09 17:27]

*Newly Created Service* - COMHOST
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-03 19:00:00 C:\Windows\Tasks\Norton Internet Security - Effectuer une analyse complète du système - Elie.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-03-06 13:16:20 C:\Windows\Tasks\User_Feed_Synchronization-{68AFC8CD-F351-4E55-820C-BBEE4D6061DB}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 15:29:06
Windows 6.0.6000  NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès 
Les fichiers cachés: 0 

**************************************************************************
.
Temps d'accomplissement: 2008-03-07 15:30:05
.
2008-03-06 14:56:10	--- E O F ---

mogtp · Answer

je doi i alé je revien ds une heure et demi

green day · Answer

ok,

Crée un nouveau document texte et nomme le CFScript.txt ( attention très important ! ) : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes en gras : 



file::

C:\ProgramData\Fiveroadfor
C:\ProgramData\Admin Inter 1 Mags
C:\ProgramData\Idol trust trust.tc8u35
C:\ProgramData\ping multi build.014gm

registry::

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

MEMO JUGS"="-
"1 mags 16 more"="-

ensuite fais glisser le fichier texte sur combo.exe comme sur l'animation : 
http://img.bleepingcomputer.com/combofix/usage/rc.gif

Dans la fenêtre qui suit, choisie l'option 1 puis valide 
Patiente un peu, si le bureau disparait parfois durant le scan : c'est normal ! 
A la fin du scan, un rapport va s'afficher : poste le stp ( sinon il se situe dans ici : C:\ComboFix.txt ) 

++

mogtp · Answer

re voici le rapport

ComboFix 08-03-06.4 - Elie 2008-03-07 17:40:47.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium   6.0.6000.0.1252.1.1036.18.966 [GMT 1:00]
Endroit: C:\Users\Elie\Desktop\ComboFix.exe
Command switches used :: C:\Users\Elie\Desktop\CFScript.txt.txt
 * Création d'un nouveau point de restauration

FILE ::
C:\ProgramData\Admin Inter 1 Mags
C:\ProgramData\Fiveroadfor
C:\ProgramData\Idol trust trust.tc8u35
C:\ProgramData\ping multi build.014gm
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\ProgramData\Idol trust trust.tc8u35
C:\ProgramData\ping multi build.014gm

.
(((((((((((((((((((((((((((((   Fichiers créés 2008-02-07 to 2008-03-07  ))))))))))))))))))))))))))))))))))))
.

Pas de nouveau fichier créé dans cet espace de temps

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-07 14:06	---------	d-----w	C:\ProgramData\Symantec
2008-03-07 13:49	---------	d-----w	C:\ProgramData\Messenger Plus!
2008-03-07 13:47	---------	d-----w	C:\Users\Elie\AppData\Roaming\OpenOffice.org2
2008-03-07 13:47	---------	d-----w	C:\Program Files\Steam
2008-03-07 13:46	---------	d-----w	C:\Program Files\Spybot - Search & Destroy
2008-03-06 21:42	---------	d-----w	C:\Program Files\Messenger Plus! Live
2008-03-06 21:35	---------	d-----w	C:\ProgramData\Spybot - Search & Destroy
2008-03-06 21:34	---------	d-----w	C:\ProgramData\Lavasoft
2008-03-06 21:34	---------	d-----w	C:\Program Files\Lavasoft
2008-03-06 21:33	---------	d-----w	C:\Program Files\Common Files\Wise Installation Wizard
2008-03-06 21:24	---------	d-----w	C:\Program Files\A.S.C
2008-03-06 21:23	---------	d-----w	C:\Program Files\Navilog1
2008-03-06 20:46	---------	d--h--w	C:\Program Files\InstallShield Installation Information
2008-03-06 18:00	---------	d-----w	C:\Program Files\Windows Live
2008-03-06 15:18	---------	d-----w	C:\Program Files\Panda Security
2008-03-06 14:56	---------	d-----w	C:\Program Files\Microsoft Silverlight
2008-03-06 14:09	---------	d-----w	C:\Program Files\Trend Micro
2008-03-05 21:45	---------	d-----w	C:\Program Files\Launch Manager
2008-03-05 16:36	---------	d-----w	C:\Users\Elie\AppData\Roaming\LimeWire
2008-03-05 13:20	---------	d-----w	C:\Users\Elie\AppData\Roaming\Grisoft
2008-03-05 13:20	---------	d-----w	C:\ProgramData\Grisoft
2008-03-04 21:51	---------	d-----w	C:\Program Files\CCleaner
2008-03-03 12:44	---------	d-----w	C:\Users\Elie\AppData\Roaming\Uniblue
2008-03-02 19:33	---------	d-----w	C:\Users\Elie\AppData\Roaming	eamspeak2
2008-03-02 18:58	---------	d-----w	C:\Program Files\Norton Internet Security
2008-03-02 18:58	---------	d-----w	C:\Program Files\Common Files\Symantec Shared
2008-03-02 18:51	805	----a-w	C:\Windows\system32\drivers\SYMEVENT.INF
2008-03-02 18:51	123,952	----a-w	C:\Windows\system32\drivers\SYMEVENT.SYS
2008-03-02 18:51	10,740	----a-w	C:\Windows\system32\drivers\SYMEVENT.CAT
2008-03-02 18:51	---------	d-----w	C:\Program Files\Symantec
2008-03-02 15:45	---------	d-----w	C:\ProgramData\Fiveroadfor
2008-03-02 14:40	---------	d-----w	C:\Users\Elie\AppData\Roaming\Symantec
2008-03-02 14:20	---------	d-----w	C:\Program Files\AxBx
2008-03-02 13:58	---------	d---a-w	C:\ProgramData\TEMP
2008-03-01 12:47	---------	d-----w	C:\Program Files\New Folder
2008-02-24 16:07	---------	d-----w	C:\Program Files\Common Files\Steam
2008-02-22 20:06	---------	d-----w	C:\Program Files\Teamspeak2_RC2
2008-02-22 17:13	---------	d-----w	C:\ProgramData\Admin Inter 1 Mags
2008-02-14 02:12	194,560	----a-w	C:\Windows\System32\WebClnt.dll
2008-02-14 02:12	110,080	----a-w	C:\Windows\system32\drivers\mrxdav.sys
2008-02-14 02:07	45,112	----a-w	C:\Windows\system32\drivers\pciidex.sys
2008-02-14 02:07	3,504,696	----a-w	C:\Windows\System32
tkrnlpa.exe
2008-02-14 02:07	3,470,392	----a-w	C:\Windows\System32
toskrnl.exe
2008-02-14 02:07	21,560	----a-w	C:\Windows\system32\drivers\atapi.sys
2008-02-14 02:07	154,624	----a-w	C:\Windows\system32\drivers
wifi.sys
2008-02-14 02:07	15,928	----a-w	C:\Windows\system32\drivers\pciide.sys
2008-02-14 02:07	109,624	----a-w	C:\Windows\system32\drivers\ataport.sys
2008-02-14 02:06	803,328	----a-w	C:\Windows\system32\drivers	cpip.sys
2008-02-14 02:06	537,600	----a-w	C:\Windows\AppPatch\AcLayers.dll
2008-02-14 02:06	449,536	----a-w	C:\Windows\AppPatch\AcSpecfc.dll
2008-02-14 02:06	4,247,552	----a-w	C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-14 02:06	24,064	----a-w	C:\Windows\System32
etcfg.exe
2008-02-14 02:06	22,016	----a-w	C:\Windows\System32
etiougc.exe
2008-02-14 02:06	216,632	----a-w	C:\Windows\system32\drivers
etio.sys
2008-02-14 02:06	2,144,256	----a-w	C:\Windows\AppPatch\AcGenral.dll
2008-02-14 02:06	173,056	----a-w	C:\Windows\AppPatch\AcXtrnal.dll
2008-02-14 02:06	167,424	----a-w	C:\Windows\System32	cpipcfg.dll
2008-02-14 02:06	1,686,528	----a-w	C:\Windows\System32\gameux.dll
2008-02-14 02:03	824,832	----a-w	C:\Windows\System32\wininet.dll
2008-02-14 02:03	56,320	----a-w	C:\Windows\System32\iesetup.dll
2008-02-14 02:03	52,736	----a-w	C:\Windows\AppPatch\iebrshim.dll
2008-02-14 02:03	26,624	----a-w	C:\Windows\System32\ieUnatt.exe
2008-01-26 20:37	---------	d-----w	C:\Program Files\Windows Media Components
2008-01-26 20:34	---------	d-----w	C:\Program Files\NRJ
2008-01-24 20:55	---------	d-----w	C:\Program Files\Java
2008-01-22 20:05	---------	d-----w	C:\ProgramData\Avg7
2008-01-15 08:54	10,537	----a-w	C:\Windows\system32\drivers\coh_mon.cat
2008-01-15 04:28	706	----a-w	C:\Windows\system32\drivers\COH_Mon.inf
2008-01-12 17:32	23,904	----a-w	C:\Windows\system32\drivers\COH_Mon.sys
2008-01-10 17:29	---------	d-----w	C:\Program Files\Windows Mail
2008-01-10 05:50	1,244,672	----a-w	C:\Windows\System32\mcmde.dll
2008-01-09 21:30	211,000	----a-w	C:\Windows\system32\drivers\volsnap.sys
2008-01-09 21:30	1,060,920	----a-w	C:\Windows\system32\drivers
tfs.sys
2008-01-09 21:30	---------	d-----w	C:\Program Files\Windows Sidebar
2008-01-09 21:29	11,776	----a-w	C:\Windows\System32\sbunattend.exe
2007-12-14 10:32	12,632	----a-w	C:\Windows\System32\lsdelete.exe
2007-12-12 19:01	1,327,104	----a-w	C:\Windows\System32\quartz.dll
2007-12-12 19:00	9,728	----a-w	C:\Windows\System32\LAPRXY.DLL
2007-12-12 19:00	223,232	----a-w	C:\Windows\System32\WMASF.DLL
2007-08-30 15:36	174	--sha-w	C:\Program Files\desktop.ini
2007-07-19 08:36	278,528	----a-w	C:\Program Files\Common Files\FDEUnInstaller.exe
.

(((((((((((((((((((((((((((((   snapshot@2008-03-07_15.29.37,92   )))))))))))))))))))))))))))))))))))))))))
.
- 2008-03-07 14:04:45	16,384	--sha-w	C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-03-07 16:03:58	16,384	--sha-w	C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-03-07 14:04:45	32,768	--sha-w	C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-07 16:03:58	32,768	--sha-w	C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-03-07 14:04:45	16,384	--sha-w	C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-03-07 16:03:58	16,384	--sha-w	C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
.
(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
2007-08-24 20:51	316784	--a------	C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
2008-03-02 16:04	116088	--a------	C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= "C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll" [2007-08-24 20:51 316784]

[HKEY_CLASSES_ROOT\clsid\{7febefe3-6b19-4349-98d2-ffb09d4b49ca}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 20:51 316784]

[HKEY_CLASSES_ROOT\clsid\{7febefe3-6b19-4349-98d2-ffb09d4b49ca}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"????r"="" []
"?????????"="??????????????e" []
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:35 125440]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-08-11 15:30 249856]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-20 11:43 171448]
"Steam"="c:\progra~1\steam\steam.exe" [2007-12-03 18:25 1266936]
"MEMO JUGS"="C:\ProgramData\Idol trust trust.tc8u35" [ ]
"1 mags 16 more"="C:\ProgramData\ping multi build.014gm" [ ]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 13:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-15 20:49 1006264]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-07-11 17:12 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2006-11-20 07:13 4018176 C:\Windows\RtHDVCpl.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 04:00 815104]
"Acer Tour"="" []
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 21:48 57344]
"SetPanel"="" []
"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2006-11-15 07:02 614400]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-02-06 23:04 464168]
"eRecoveryService"="" []
"AGEIA PhysX SysTray"="C:\Program Files\AGEIA Technologies\TrayIcon.exe" [2006-03-20 20:43 331776]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-02-14 11:01 51048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

C:\Users\Elie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 21:57:56 393216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe [2004-12-14 04:44:06 29696]
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2006-12-05 22:36:42 528384]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{8EBFFF4D-3E7E-4664-B625-AF732DCAFA64}"= UDP:C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{8A8B13C7-3F61-4116-A5E1-BF55907A7D2D}"= TCP:C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{4BC46A30-432C-4C21-9B33-42C696CDE3B7}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{7B6D432C-7363-460E-9DE4-91466E13C241}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{FB4957AF-CB28-4ECC-8EB5-13381C40DDB3}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{90D95120-DF4F-47F5-800A-DEB613D486B6}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{67BC16B6-1784-433A-A10B-1A8886E8864C}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{6C2E3E05-8B7C-4353-8B69-CDEAA954F0B2}"= UDP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{965DFA45-6548-480B-AF1B-B9A2B3C528D7}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:AOL
"{69354A29-D81C-4904-87D3-21C111CAF376}"= TCP:C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:AOL
"{1D4882CA-4946-487C-8210-4B1F7A6799CB}"= UDP:C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\game.dat:La Bataille pour la Terre du Milieu(tm)
"{2E33DBB7-134F-4C18-BC01-58D816552441}"= TCP:C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\game.dat:La Bataille pour la Terre du Milieu(tm)
"{1CB2AE5D-0E69-46F9-877A-ED3EBE1F9DB7}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{A0CAB59F-2CEA-487A-8B14-FC64BCFE974B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{4F25AA50-F7BF-40F5-95A6-1D51E47EA67B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{C796098D-3CFA-4253-B3B7-C0C32F248AD1}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{967EFD1F-238F-4C09-A205-84FFE95DC15A}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{6566EB37-B023-45F7-95AB-E867070D91D1}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{78A20CA3-E277-4477-89D6-685EC98727AC}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{DFEE9742-25B5-419C-BF0E-6D4334E6E2BA}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{E71AE3E0-42DC-48BE-A815-6B9C9DCFF944}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{A65F8E18-C9F1-444E-954A-14752957B1DE}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{2C2E3022-6B16-4D33-8008-F2968387D564}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{0489961A-9ADF-4BAA-83C5-F22D045A8341}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{42C48FBA-35D2-4073-9B2D-AA4D8ABF2280}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{A00ACA3B-CC1B-493F-8FCE-7120269221FD}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{EDA089FE-A121-40FB-B8D9-1D9FCD92D960}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|
"{07D2A656-0B9B-415C-9A01-A5245340E331}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)|Edge=TRUE|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe"= C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu
"C:\Acer\Empowering Technology\eDataSecurity\encryption.exe"= C:\Acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption
"C:\Acer\Empowering Technology\eDataSecurity\decryption.exe"= C:\Acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption
"C:\Program Files\WINSOS\winsos.exe"= C:\Program Files\WINSOS\winsos.exe:*:Enabled:Winsos
"C:\Program Files\WINSOS\anti-spy.exe"= C:\Program Files\WINSOS\anti-spy.exe:*:Enabled:anti-spy Winsos
"C:\Program Files\WINSOS\help.exe"= C:\Program Files\WINSOS\help.exe:*:Enabled:Winsos Help

R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-02-06 23:04]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-02-06 23:04]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2006-11-08 16:11]
R0 SI3112r;ATI-4379 Serial ATA Controller;C:\Windows\system32\DRIVERS\SI3112r.sys [2007-08-29 03:04]
R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20080305.003\IDSvix86.sys [2008-02-13 17:18]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-02-06 23:04]
R2 eNet Service;eNet Service;C:\Acer\Empowering Technology\eNet\eNet Service.exe [2006-11-20 21:43]
R2 LiveUpdate Notice;LiveUpdate Notice;"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon []
R2 MobilityService;MobilityService;C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 12:57]
R2 WMIService;ePower Service;C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2006-12-01 10:34]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 10:39]
R3 COH_Mon;COH_Mon;C:\Windows\system32\Drivers\COH_Mon.sys [2008-01-12 18:32]
R3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-25 03:46]
R3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-02-22 20:49]
R3 SymIMMP;SymIMMP;C:\Windows\system32\DRIVERS\SymIM.sys [2007-08-09 17:27]
R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2007-08-13 13:50]
S2 eSettingsService;eSettings Service;C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2006-11-13 00:13]
S3 athr;Atheros Extensible Wireless LAN device driver;C:\Windows\system32\DRIVERS\athr.sys [2006-11-10 07:38]
S3 SymIM;Symantec Network Security Intermediate Filter Service;C:\Windows\system32\DRIVERS\SymIM.sys [2007-08-09 17:27]

*Newly Created Service* - COMHOST
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-03 19:00:00 C:\Windows\Tasks\Norton Internet Security - Effectuer une analyse complète du système - Elie.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-03-07 14:39:26 C:\Windows\Tasks\User_Feed_Synchronization-{68AFC8CD-F351-4E55-820C-BBEE4D6061DB}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 17:42:09
Windows 6.0.6000  NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès 
Les fichiers cachés: 0 

**************************************************************************
.
Temps d'accomplissement: 2008-03-07 17:43:02
ComboFix-quarantined-files.txt  2008-03-07 16:42:59
ComboFix2.txt  2008-03-07 14:30:06
.
2008-03-06 14:56:10	--- E O F ---

green day · Answer

ok, où en sont tes soucis ??

@+

mogtp · Answer

ba pour le moment je n'ai aucune page cid qui s'affiche, je te tien au courant
++

mogtp · Answer

je te remercie green day
grace a toi je n'ai plus de fenêtre Cid
meeerrrccciiiii

green day · Answer

;-))

fais quand même ce qui est indiqué ici, car il reste des "restes de bébéttes" encore :

http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr

++

mogtp · Answer

faut il que je fasse tout car j'ai déjà fai ccleaner et ad-aware

green day · Answer

avg et le scan en ligne dans ce cas !

++

mogtp · Answer

ok ba je fais AVG

Pub Cid sous vista

22 réponses

Votre réponse

Discussions similaires

Newsletters