pub cid sur internet

Question

Bonjour,
voici mon problème j'ai plein de publiciter qui arrête pas d'apparaitre sur mon écran j'ai tous essyer pour essayer   de les enlever mais en vain j'ai mozilla firefox comme navigateur avec l'extension de abdlock plus et j'ai avast comme anti-virus et j'ai spybot et ad-ware comme logiciel j'ai fait HijackThis v2.0.2 j(ai regarde si je n'avais pas cidhelp et j'ai suprimer le sponsor de msn plus live et j'ai toujour des pub sur internet et mozilla firefox. Que dois-je faire sil vous plaît?

^^Marie^^ · Accepted Answer

Bonjour

ComBoFix n'est pas nécessaire ici

gil le fantom · Answer

bonsoir

pour vista

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Va dans démarrer puis panneau de configuration 
- Double Clique sur l'icône "Comptes d'utilisateurs" 
- Clique ensuite sur désactiver et valide.

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

hassan · Answer

voici mon rapport 
   -----------------------[  Lop S&D 4.2.0-7  XP/Vista  ]---------------------

   [ Windows 'Longhorn' (NT 6.0) Workstation Build 6001, Service Pack 1 ]
   [ USER : soussi ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 08/05/2008 | 21:29:51,29 ] [ PC : PC-DE-SOUSSI ]
   [ MAJ : 06-05-2008 | 21:45 ]
   [ UAC => 0 ]
 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level07.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level06.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level05.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level04.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level03.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level02.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level01.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\base.16.pak
   [18/03/2008|19:23] C:\Users\soussi\AppData\Roaming\7Wonders\audio

   [14/03/2008|21:41] C:\Users\soussi\AppData\Roaming\Adobe\Designer
   [13/03/2008|22:41] C:\Users\soussi\AppData\Roaming\Adobe\Adobe PDF
   [13/03/2008|22:41] C:\Users\soussi\AppData\Roaming\Adobe\Acrobat
   [06/03/2008|19:17] C:\Users\soussi\AppData\Roaming\Adobe\Linguistics
   [05/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Adobe\Flash Player

   [08/04/2008|17:00] C:\Users\soussi\AppData\Roaming\Apple Computer\iTunes

   [05/03/2008|19:28] C:\Users\soussi\AppData\Roaming\ATI\ACE

   [02/05/2008|15:48] C:\Users\soussi\AppData\Roaming\Bitdefender\Desktop

   [13/04/2008|11:42] C:\Users\soussi\AppData\Roaming\CyberLink\MediaCache
   [13/04/2008|11:42] C:\Users\soussi\AppData\Roaming\CyberLink\PowerDirector
   [08/03/2008|18:54] C:\Users\soussi\AppData\Roaming\CyberLink\PowerStarter


   [19/03/2008|18:45] C:\Users\soussi\AppData\Roaming\GetRightToGo\RCSetupG.data

   [30/04/2008|20:55] C:\Users\soussi\AppData\Roaming\Google\GoogleEarth

   [05/03/2008|19:29] C:\Users\soussi\AppData\Roaming\Hewlett-Packard\HPAdvisor
   [05/03/2008|19:22] C:\Users\soussi\AppData\Roaming\Hewlett-Packard\HP Software UI

   [07/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Identities\{000HQ7FF-AD7A-3FG4-MO09-24UF17SCEVST}
   [05/03/2008|19:27] C:\Users\soussi\AppData\Roaming\Identities\{A64262D7-40F9-4372-9961-22ABB778D32E}

   [03/05/2008|18:50] C:\Users\soussi\AppData\Roaming\InstallShield\ISEngine12.0

   [24/03/2008|14:10] C:\Users\soussi\AppData\Roaming\iWin\FamilyFeud
   [21/03/2008|18:40] C:\Users\soussi\AppData\Roaming\iWin\GardenDefense

   [07/04/2008|18:20] C:\Users\soussi\AppData\Roaming\LimeWire\library.dat
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\filters.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\questions.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire	ables.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\installation.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\mojito.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\limewire.props
   [07/04/2008|18:10] C:\Users\soussi\AppData\Roaming\LimeWire\simpp.xml
   [07/04/2008|18:10] C:\Users\soussi\AppData\Roaming\LimeWire\createtimes.cache
   [07/04/2008|18:10] C:\Users\soussi\AppData\Roaming\LimeWire\fileurns.cache
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire	trees.cache
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire	troot.cache
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire\spam.dat
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire\gnutella.net
   [28/03/2008|19:26] C:\Users\soussi\AppData\Roaming\LimeWireesponses.cache
   [27/03/2008|20:57] C:\Users\soussi\AppData\Roaming\LimeWire\xml
   [26/03/2008|11:47] C:\Users\soussi\AppData\Roaming\LimeWire\version.xml
   [10/03/2008|22:31] C:\Users\soussi\AppData\Roaming\LimeWire\fileurns.bak
   [10/03/2008|22:31] C:\Users\soussi\AppData\Roaming\LimeWire\.AppSpecialShare
   [10/03/2008|22:30] C:\Users\soussi\AppData\Roaming\LimeWire	hemes

   [07/05/2008|14:35] C:\Users\soussi\AppData\Roaming\Macromedia\Flash Player
   [08/03/2008|17:09] C:\Users\soussi\AppData\Roaming\Macromedia\Director MX 2004

   [10/03/2008|22:35] C:\Users\soussi\AppData\Roaming\Magic Academyecords.dat
   [10/03/2008|22:35] C:\Users\soussi\AppData\Roaming\Magic Academy\profiles.dat
   [10/03/2008|22:35] C:\Users\soussi\AppData\Roaming\Magic Academy\settings.dat



   [26/04/2008|17:10] C:\Users\soussi\AppData\Roaming\Microsoft\Installer
   [23/04/2008|21:04] C:\Users\soussi\AppData\Roaming\Microsoft\Windows Photo Gallery
   [29/03/2008|20:13] C:\Users\soussi\AppData\Roaming\Microsoft\Crypto
   [22/03/2008|18:11] C:\Users\soussi\AppData\Roaming\Microsoft\MSN Messenger
   [18/03/2008|13:33] C:\Users\soussi\AppData\Roaming\Microsoft\Windows Live Call
   [18/03/2008|13:33] C:\Users\soussi\AppData\Roaming\Microsoft\IdentityCRL
   [16/03/2008|15:21] C:\Users\soussi\AppData\Roaming\Microsoft\Sticky Notes
   [13/03/2008|22:42] C:\Users\soussi\AppData\Roaming\Microsoft\Templates
   [13/03/2008|22:38] C:\Users\soussi\AppData\Roaming\Microsoft\HTML Help
   [12/03/2008|18:12] C:\Users\soussi\AppData\Roaming\Microsoft\eHome
   [12/03/2008|14:23] C:\Users\soussi\AppData\Roaming\Microsoft\Office
   [11/03/2008|19:04] C:\Users\soussi\AppData\Roaming\Microsoft\Speech
   [11/03/2008|18:48] C:\Users\soussi\AppData\Roaming\Microsoft\MMC
   [07/03/2008|13:31] C:\Users\soussi\AppData\Roaming\Microsoft\Internet Explorer
   [07/03/2008|00:41] C:\Users\soussi\AppData\Roaming\Microsoft\Works
   [06/03/2008|19:14] C:\Users\soussi\AppData\Roaming\Microsoft\Shoebox
   [06/03/2008|14:06] C:\Users\soussi\AppData\Roaming\Microsoft\Windows
   [05/03/2008|22:33] C:\Users\soussi\AppData\Roaming\Microsoft\Word
   [05/03/2008|22:10] C:\Users\soussi\AppData\Roaming\Microsoft\UProof
   [05/03/2008|21:52] C:\Users\soussi\AppData\Roaming\Microsoft\Clip Organizer
   [05/03/2008|21:27] C:\Users\soussi\AppData\Roaming\Microsoft\Proof
   [05/03/2008|21:13] C:\Users\soussi\AppData\Roaming\Microsoft\Document Building Blocks
   [05/03/2008|21:13] C:\Users\soussi\AppData\Roaming\Microsoft\AddIns
   [05/03/2008|19:27] C:\Users\soussi\AppData\Roaming\Microsoft\Protect
   [05/03/2008|19:22] C:\Users\soussi\AppData\Roaming\Microsoft\CLR Security Config
   [05/03/2008|19:21] C:\Users\soussi\AppData\Roaming\Microsoft\SystemCertificates
   [05/03/2008|19:20] C:\Users\soussi\AppData\Roaming\Microsoft\Credentials

   [23/03/2008|17:50] C:\Users\soussi\AppData\Roaming\Mozilla\Extensions
   [23/03/2008|17:08] C:\Users\soussi\AppData\Roaming\Mozilla\Firefox

   [16/03/2008|20:40] C:\Users\soussi\AppData\Roaming\muvee Technologies\session40.mvex
   [16/03/2008|20:40] C:\Users\soussi\AppData\Roaming\muvee Technologies\burnerList40.mvex
   [11/03/2008|18:55] C:\Users\soussi\AppData\Roaming\muvee Technologies\UserProfiles

   [24/03/2008|12:34] C:\Users\soussi\AppData\Roaming\Nokia\ContactsEditor

   [24/03/2008|12:34] C:\Users\soussi\AppData\Roaming\PC Suite\Settings

   [24/03/2008|15:07] C:\Users\soussi\AppData\Roaming\PlayFirst\dreamchronicles
   [14/03/2008|22:16] C:\Users\soussi\AppData\Roaming\PlayFirst\dinerdash2
   [08/03/2008|17:09] C:\Users\soussi\AppData\Roaming\PlayFirst\dinerdash

   [08/05/2008|19:27] C:\Users\soussi\AppData\Roaming\Real\RealPlayer
   [19/03/2008|17:29] C:\Users\soussi\AppData\Roaming\Real\RealMediaSDK
   [19/03/2008|17:07] C:\Users\soussi\AppData\Roaming\Real\Msg
   [19/03/2008|17:06] C:\Users\soussi\AppData\Roaming\Realnadmin

   [05/03/2008|19:27] C:\Users\soussi\AppData\Roaming\Symantec\NPMDataStore

   [07/03/2008|21:10] C:\Users\soussi\AppData\Roaming\Talkback\MozillaOrg

   [23/01/2007|22:02] C:\Users\soussi\AppData\Roaming\Template\Normal.wpt

   [11/04/2008|09:06] C:\Users\soussi\AppData\Roaming\TuneUp Software\TuneUp Utilities

   [06/05/2008|12:57] C:\Users\soussi\AppData\Roaming\vlc\vlcrc
   [02/05/2008|23:15] C:\Users\soussi\AppData\Roaming\vlc\cache

   [06/03/2008|13:38] C:\Users\soussi\AppData\Roaming\WildTangent\My HP Game Console

   [27/03/2008|21:12] C:\Users\soussi\AppData\Roaming\WinBatch\Settings

   [23/04/2008|20:33] C:\Users\soussi\AppData\Roaming\wklnhst.dat\wklnhst.dat

   [07/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Zylom\113
   [07/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Zylom\ZylomGamesPlayer
 
   ----------------[ Tâches planifiées dans C:\Windows	asks ]---------------

   [08/05/2008 21:25][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{0F4C7F58-752C-478C-9520-504F62FF55E5}.job
   [08/05/2008 21:26][--a------] C:\Windows	asks\Maintenance en 1 clic.job
   [08/05/2008 21:26][--ah-----] C:\Windows	asks\SA.DAT
   [08/05/2008 21:25][--a------] C:\Windows	asks\SCHEDLGU.TXT
  
   ------[ Listing des dossiers dans C:\ProgramData ]------
   
   [13/04/2008|18:23] C:\ProgramData\Adobe
   [08/03/2008|13:53] C:\ProgramData\Apple
   [08/03/2008|13:55] C:\ProgramData\Apple Computer
   [02/11/2006|15:02] C:\ProgramData\Application Data 
   [14/03/2008|13:48] C:\ProgramData\Arcade Lab
   [08/12/2007|00:16] C:\ProgramData\ATI
   [02/05/2008|15:48] C:\ProgramData\BitDefender
   [05/03/2008|19:16] C:\ProgramData\Bureau 
   [28/03/2008|20:26] C:\ProgramData\cdrom readme download.bqw6rq
   [08/03/2008|18:54] C:\ProgramData\CyberLink
   [02/11/2006|15:02] C:\ProgramData\Desktop 
   [02/11/2006|15:02] C:\ProgramData\Documents 
   [24/03/2008|12:30] C:\ProgramData\Downloaded Installations
   [05/03/2008|19:16] C:\ProgramData\Favoris 
   [02/11/2006|15:02] C:\ProgramData\Favorites 
   [06/04/2008|17:55] C:\ProgramData\FLEXnet
   [05/03/2008|21:03] C:\ProgramData\Google
   [05/03/2008|19:28] C:\ProgramData\Hewlett-Packard
   [28/03/2008|20:26] C:\ProgramData\Hold Trust Amok Mode
   [08/12/2007|00:17] C:\ProgramData\HP
   [08/12/2007|00:17] C:\ProgramData\hpzinstall.log
   [09/03/2008|22:39] C:\ProgramData\InterAction studios
   [22/03/2008|17:46] C:\ProgramData\Lavasoft
   [12/03/2008|21:04] C:\ProgramData\LightScribe
   [07/05/2008|10:50] C:\ProgramData\Macrovision
   [05/03/2008|19:16] C:\ProgramData\Menu D‚marrer 
   [07/05/2008|21:49] C:\ProgramData\Messenger Plus!
   [16/03/2008|12:46] C:\ProgramData\Microsoft
   [14/03/2008|21:27] C:\ProgramData\Microsoft Help
   [05/03/2008|19:16] C:\ProgramData\ModŠles 
   [08/12/2007|00:24] C:\ProgramData\muvee Technologies
   [02/05/2008|23:15] C:\ProgramData\Name beep copy real
   [19/03/2008|13:17] C:\ProgramData
tuser.pol
   [24/03/2008|12:34] C:\ProgramData\PC Suite
   [08/12/2007|00:29] C:\ProgramData\PC-Doctor
   [24/03/2008|15:07] C:\ProgramData\PlayFirst
   [05/03/2008|22:03] C:\ProgramData\QuickTime
   [19/04/2008|11:23] C:\ProgramData\safeokayokay.dm6j86a
   [28/03/2008|20:26] C:\ProgramData\safeokayokay.olg5n
   [11/04/2008|09:12] C:\ProgramData\safeokayokay.qakgie
   [28/03/2008|20:26] C:\ProgramData\safeokayokay.skmnh
   [07/03/2008|19:12] C:\ProgramData\safeokayokay.w7n71
   [02/05/2008|23:15] C:\ProgramData\Spybot - Search & Destroy
   [02/11/2006|15:02] C:\ProgramData\Start Menu 
   [02/05/2008|22:43] C:\ProgramData\Symantec
   [23/04/2008|21:20] C:\ProgramData\TEMP
   [02/11/2006|15:02] C:\ProgramData\Templates 
   [07/03/2008|23:24] C:\ProgramData\TuneUp Software
   [13/04/2008|13:21] C:\ProgramData\WildTangent
   [27/03/2008|21:38] C:\ProgramData\WindowsSearch
   [06/03/2008|13:30] C:\ProgramData\WLInstaller
   [06/05/2008|16:29] C:\ProgramData\Zylom
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [13/04/2008|18:23] C:\Program Files\Adobe
   [23/04/2008|15:04] C:\Program Files\Alwil Software
   [08/03/2008|13:53] C:\Program Files\Apple Software Update
   [02/05/2008|23:15] C:\Program Files\Athan
   [08/12/2007|00:12] C:\Program Files\ATI
   [08/12/2007|00:13] C:\Program Files\ATI Technologies
   [10/04/2008|16:01] C:\Program Files\Audio MP3 Converter
   [12/04/2008|20:17] C:\Program Files\AviSynth 2.5
   [07/05/2008|10:49] C:\Program Files\backburner 2
   [02/05/2008|15:47] C:\Program Files\BitDefender
   [08/03/2008|13:54] C:\Program Files\Bonjour
   [07/05/2008|14:24] C:\Program Files\CCleaner
   [07/05/2008|14:06] C:\Program Files\Common Files
   [08/12/2007|00:23] C:\Program Files\CyberLink
   [25/03/2008|23:30] C:\Program Files\desktop.ini
   [08/12/2007|08:07] C:\Program Files\EasyBits
   [15/03/2008|18:24] C:\Program Files\EasyBits For Kids
   [04/04/2008|12:47] C:\Program Files\Electronic Arts
   [12/04/2008|20:16] C:\Program Files\eRightSoft
   [05/03/2008|19:16] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [05/05/2008|17:50] C:\Program Files\Free Audio Pack
   [04/05/2008|12:26] C:\Program Files\Google
   [03/05/2008|18:52] C:\Program Files\Hercules
   [08/12/2007|00:31] C:\Program Files\Hewlett-Packard
   [08/12/2007|00:26] C:\Program Files\HP
   [13/04/2008|12:54] C:\Program Files\HP Games
   [03/05/2008|18:52] C:\Program Files\InstallShield Installation Information
   [08/04/2008|16:57] C:\Program Files\Internet Explorer
   [08/04/2008|16:59] C:\Program Files\iPod
   [02/05/2008|23:15] C:\Program Files\iTunes
   [29/03/2008|20:57] C:\Program Files\Java
   [22/03/2008|17:46] C:\Program Files\Lavasoft
   [02/05/2008|23:15] C:\Program Files\Lexmark X1100 Series
   [07/05/2008|20:40] C:\Program Files\Messenger Plus! Live
   [26/04/2008|11:55] C:\Program Files\Microsoft Games
   [14/03/2008|21:27] C:\Program Files\Microsoft Office
   [16/03/2008|12:33] C:\Program Files\Microsoft Silverlight
   [06/03/2008|13:34] C:\Program Files\Microsoft SQL Server Compact Edition
   [14/03/2008|21:27] C:\Program Files\Microsoft Works
   [25/03/2008|23:20] C:\Program Files\Movie Maker
   [17/04/2008|11:10] C:\Program Files\Mozilla Firefox
   [24/03/2008|17:50] C:\Program Files\Mozilla Firefox 3 Beta 4
   [02/11/2006|14:37] C:\Program Files\MSBuild
   [08/12/2007|00:24] C:\Program Files\muvee Technologies
   [19/03/2008|21:14] C:\Program Files\Neuf
   [24/03/2008|12:33] C:\Program Files\Nokia
   [05/03/2008|22:04] C:\Program Files\OLYMPUS
   [24/03/2008|12:32] C:\Program Files\PC Connectivity Solution
   [08/12/2007|00:43] C:\Program Files\PC-Doctor 5 for Windows
   [08/04/2008|16:57] C:\Program Files\QuickTime
   [19/03/2008|17:06] C:\Program Files\Real
   [08/12/2007|00:14] C:\Program Files\Realtek
   [02/11/2006|14:37] C:\Program Files\Reference Assemblies
   [08/12/2007|00:35] C:\Program Files\Services en ligne
   [02/05/2008|23:15] C:\Program Files\Spybot - Search & Destroy
   [26/04/2008|13:21] C:\Program Files\Steam
   [17/03/2008|20:13] C:\Program Files\StuffPlug3
   [12/04/2008|18:01] C:\Program Files\Total Video Converter
   [01/05/2008|12:02] C:\Program Files\TuneUp Utilities 2008
   [09/04/2008|20:09] C:\Program Files\Ubi Soft
   [02/11/2006|15:01] C:\Program Files\Uninstall Information
   [26/04/2008|17:03] C:\Program Files\Valve
   [07/03/2008|21:14] C:\Program Files\VideoLAN
   [09/04/2008|16:52] C:\Program Files\Wanadoo Edition
   [25/03/2008|23:20] C:\Program Files\Windows Calendar
   [25/03/2008|23:20] C:\Program Files\Windows Collaboration
   [25/03/2008|23:20] C:\Program Files\Windows Defender
   [25/03/2008|23:20] C:\Program Files\Windows Journal
   [09/03/2008|13:05] C:\Program Files\Windows Live
   [09/04/2008|16:40] C:\Program Files\Windows Mail
   [25/03/2008|23:20] C:\Program Files\Windows Media Player
   [05/03/2008|19:16] C:\Program Files\Windows NT
   [25/03/2008|23:20] C:\Program Files\Windows Photo Gallery
   [25/03/2008|23:20] C:\Program Files\Windows Sidebar
   [07/05/2008|14:38] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Common Files ]------
   
   [13/03/2008|22:41] C:\Program Files\Common Files\Adobe
   [08/03/2008|13:53] C:\Program Files\Common Files\Apple
   [02/05/2008|15:47] C:\Program Files\Common Files\BitDefender
   [08/12/2007|00:17] C:\Program Files\Common Files\HP
   [08/12/2007|00:40] C:\Program Files\Common Files\InstallShield
   [26/03/2008|11:39] C:\Program Files\Common Files\Java
   [08/12/2007|00:23] C:\Program Files\Common Files\LightScribe
   [08/12/2007|00:23] C:\Program Files\Common Files\LS Getting Started
   [06/04/2008|15:57] C:\Program Files\Common Files\microsoft shared
   [05/03/2008|22:04] C:\Program Files\Common Files\MSSoap
   [08/12/2007|00:24] C:\Program Files\Common Files\muvee Technologies
   [24/03/2008|12:33] C:\Program Files\Common Files\Nokia
   [24/03/2008|12:33] C:\Program Files\Common Files\PCSuite
   [19/03/2008|17:06] C:\Program Files\Common Files\Real
   [02/11/2006|13:18] C:\Program Files\Common Files\Services
   [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
   [07/05/2008|14:40] C:\Program Files\Common Files\Steam
   [03/05/2008|09:38] C:\Program Files\Common Files\Symantec Shared
   [25/03/2008|23:20] C:\Program Files\Common Files\System
   [06/03/2008|13:32] C:\Program Files\Common Files\WindowsLiveInstaller
   [06/04/2008|14:30] C:\Program Files\Common Files\Wise Installation Wizard
   [19/03/2008|17:06] C:\Program Files\Common Files\xing shared

   ---------------------------[ Process ]--------------------------

   ... 74

   iexplore.exe ~ [2812]

   ----------------------[ Recherche avec S_Lop ]---------------------

   C:\ProgramData\cdrom readme download.bqw6rq
   C:\ProgramData\cdrom readme download.bqw6rq
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   C:\ProgramData\Name beep copy real
   C:\ProgramData\Name beep copy real\TONS JUGS.exe
 
   ----------------------[ Verification du Registre ]----------------------

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-05-08 21:30:18
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   C:\Windows\system32
vs2.inf
   [b]! EGDACCESS !/b
 


   /!\ [Fich:144][Doss:13] C:\Users\soussi\AppData\Local\Temp
   /!\ [Fich:38][Doss:1] C:\Users\soussi\AppData\Roaming\MICROS~1\Windows\Cookies
   /!\ [Fich:359][Doss:5] C:\Users\soussi\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

   [ UAC => 1 ]

   --------------------[ Fin du rapport a 21:30:50,43  ]----------------------

gil le fantom · Answer

Relance Lop S&D


* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)


(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

hassan · Answer

j'ai supprimer comme vous ne l'avez dit en ce moment j'ai pas de pub  
   -----------------------[  Lop S&D 4.2.0-7  XP/Vista  ]---------------------

   [ Windows 'Longhorn' (NT 6.0) Workstation Build 6001, Service Pack 1 ]
   [ USER : soussi ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 08/05/2008 | 21:43:07,88 ] [ PC : PC-DE-SOUSSI ]
   [ MAJ : 06-05-2008 | 21:45 ]
   [ UAC => 0 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprimé! - C:\ProgramData\Name beep copy real\TONS JUGS.exe
   Supprimé! - C:\ProgramData\cdrom readme download.bqw6rq
   Supprimé! - C:\ProgramData\Name beep copy real
   Restauré! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level07.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level06.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level05.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level04.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level03.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level02.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\level01.16.pak
   [18/03/2008|19:24] C:\Users\soussi\AppData\Roaming\7Wonders\base.16.pak
   [18/03/2008|19:23] C:\Users\soussi\AppData\Roaming\7Wonders\audio

   [14/03/2008|21:41] C:\Users\soussi\AppData\Roaming\Adobe\Designer
   [13/03/2008|22:41] C:\Users\soussi\AppData\Roaming\Adobe\Adobe PDF
   [13/03/2008|22:41] C:\Users\soussi\AppData\Roaming\Adobe\Acrobat
   [06/03/2008|19:17] C:\Users\soussi\AppData\Roaming\Adobe\Linguistics
   [05/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Adobe\Flash Player

   [08/04/2008|17:00] C:\Users\soussi\AppData\Roaming\Apple Computer\iTunes

   [05/03/2008|19:28] C:\Users\soussi\AppData\Roaming\ATI\ACE

   [02/05/2008|15:48] C:\Users\soussi\AppData\Roaming\Bitdefender\Desktop

   [13/04/2008|11:42] C:\Users\soussi\AppData\Roaming\CyberLink\MediaCache
   [13/04/2008|11:42] C:\Users\soussi\AppData\Roaming\CyberLink\PowerDirector
   [08/03/2008|18:54] C:\Users\soussi\AppData\Roaming\CyberLink\PowerStarter


   [19/03/2008|18:45] C:\Users\soussi\AppData\Roaming\GetRightToGo\RCSetupG.data

   [30/04/2008|20:55] C:\Users\soussi\AppData\Roaming\Google\GoogleEarth

   [05/03/2008|19:29] C:\Users\soussi\AppData\Roaming\Hewlett-Packard\HPAdvisor
   [05/03/2008|19:22] C:\Users\soussi\AppData\Roaming\Hewlett-Packard\HP Software UI

   [07/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Identities\{000HQ7FF-AD7A-3FG4-MO09-24UF17SCEVST}
   [05/03/2008|19:27] C:\Users\soussi\AppData\Roaming\Identities\{A64262D7-40F9-4372-9961-22ABB778D32E}

   [03/05/2008|18:50] C:\Users\soussi\AppData\Roaming\InstallShield\ISEngine12.0

   [24/03/2008|14:10] C:\Users\soussi\AppData\Roaming\iWin\FamilyFeud
   [21/03/2008|18:40] C:\Users\soussi\AppData\Roaming\iWin\GardenDefense

   [07/04/2008|18:20] C:\Users\soussi\AppData\Roaming\LimeWire\library.dat
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\filters.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\questions.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire	ables.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\installation.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\mojito.props
   [07/04/2008|18:13] C:\Users\soussi\AppData\Roaming\LimeWire\limewire.props
   [07/04/2008|18:10] C:\Users\soussi\AppData\Roaming\LimeWire\simpp.xml
   [07/04/2008|18:10] C:\Users\soussi\AppData\Roaming\LimeWire\createtimes.cache
   [07/04/2008|18:10] C:\Users\soussi\AppData\Roaming\LimeWire\fileurns.cache
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire	trees.cache
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire	troot.cache
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire\spam.dat
   [03/04/2008|18:25] C:\Users\soussi\AppData\Roaming\LimeWire\gnutella.net
   [28/03/2008|19:26] C:\Users\soussi\AppData\Roaming\LimeWireesponses.cache
   [27/03/2008|20:57] C:\Users\soussi\AppData\Roaming\LimeWire\xml
   [26/03/2008|11:47] C:\Users\soussi\AppData\Roaming\LimeWire\version.xml
   [10/03/2008|22:31] C:\Users\soussi\AppData\Roaming\LimeWire\fileurns.bak
   [10/03/2008|22:31] C:\Users\soussi\AppData\Roaming\LimeWire\.AppSpecialShare
   [10/03/2008|22:30] C:\Users\soussi\AppData\Roaming\LimeWire	hemes

   [07/05/2008|14:35] C:\Users\soussi\AppData\Roaming\Macromedia\Flash Player
   [08/03/2008|17:09] C:\Users\soussi\AppData\Roaming\Macromedia\Director MX 2004

   [10/03/2008|22:35] C:\Users\soussi\AppData\Roaming\Magic Academyecords.dat
   [10/03/2008|22:35] C:\Users\soussi\AppData\Roaming\Magic Academy\profiles.dat
   [10/03/2008|22:35] C:\Users\soussi\AppData\Roaming\Magic Academy\settings.dat



   [26/04/2008|17:10] C:\Users\soussi\AppData\Roaming\Microsoft\Installer
   [23/04/2008|21:04] C:\Users\soussi\AppData\Roaming\Microsoft\Windows Photo Gallery
   [29/03/2008|20:13] C:\Users\soussi\AppData\Roaming\Microsoft\Crypto
   [22/03/2008|18:11] C:\Users\soussi\AppData\Roaming\Microsoft\MSN Messenger
   [18/03/2008|13:33] C:\Users\soussi\AppData\Roaming\Microsoft\Windows Live Call
   [18/03/2008|13:33] C:\Users\soussi\AppData\Roaming\Microsoft\IdentityCRL
   [16/03/2008|15:21] C:\Users\soussi\AppData\Roaming\Microsoft\Sticky Notes
   [13/03/2008|22:42] C:\Users\soussi\AppData\Roaming\Microsoft\Templates
   [13/03/2008|22:38] C:\Users\soussi\AppData\Roaming\Microsoft\HTML Help
   [12/03/2008|18:12] C:\Users\soussi\AppData\Roaming\Microsoft\eHome
   [12/03/2008|14:23] C:\Users\soussi\AppData\Roaming\Microsoft\Office
   [11/03/2008|19:04] C:\Users\soussi\AppData\Roaming\Microsoft\Speech
   [11/03/2008|18:48] C:\Users\soussi\AppData\Roaming\Microsoft\MMC
   [07/03/2008|13:31] C:\Users\soussi\AppData\Roaming\Microsoft\Internet Explorer
   [07/03/2008|00:41] C:\Users\soussi\AppData\Roaming\Microsoft\Works
   [06/03/2008|19:14] C:\Users\soussi\AppData\Roaming\Microsoft\Shoebox
   [06/03/2008|14:06] C:\Users\soussi\AppData\Roaming\Microsoft\Windows
   [05/03/2008|22:33] C:\Users\soussi\AppData\Roaming\Microsoft\Word
   [05/03/2008|22:10] C:\Users\soussi\AppData\Roaming\Microsoft\UProof
   [05/03/2008|21:52] C:\Users\soussi\AppData\Roaming\Microsoft\Clip Organizer
   [05/03/2008|21:27] C:\Users\soussi\AppData\Roaming\Microsoft\Proof
   [05/03/2008|21:13] C:\Users\soussi\AppData\Roaming\Microsoft\Document Building Blocks
   [05/03/2008|21:13] C:\Users\soussi\AppData\Roaming\Microsoft\AddIns
   [05/03/2008|19:27] C:\Users\soussi\AppData\Roaming\Microsoft\Protect
   [05/03/2008|19:22] C:\Users\soussi\AppData\Roaming\Microsoft\CLR Security Config
   [05/03/2008|19:21] C:\Users\soussi\AppData\Roaming\Microsoft\SystemCertificates
   [05/03/2008|19:20] C:\Users\soussi\AppData\Roaming\Microsoft\Credentials

   [23/03/2008|17:50] C:\Users\soussi\AppData\Roaming\Mozilla\Extensions
   [23/03/2008|17:08] C:\Users\soussi\AppData\Roaming\Mozilla\Firefox

   [16/03/2008|20:40] C:\Users\soussi\AppData\Roaming\muvee Technologies\session40.mvex
   [16/03/2008|20:40] C:\Users\soussi\AppData\Roaming\muvee Technologies\burnerList40.mvex
   [11/03/2008|18:55] C:\Users\soussi\AppData\Roaming\muvee Technologies\UserProfiles

   [24/03/2008|12:34] C:\Users\soussi\AppData\Roaming\Nokia\ContactsEditor

   [24/03/2008|12:34] C:\Users\soussi\AppData\Roaming\PC Suite\Settings

   [24/03/2008|15:07] C:\Users\soussi\AppData\Roaming\PlayFirst\dreamchronicles
   [14/03/2008|22:16] C:\Users\soussi\AppData\Roaming\PlayFirst\dinerdash2
   [08/03/2008|17:09] C:\Users\soussi\AppData\Roaming\PlayFirst\dinerdash

   [08/05/2008|19:27] C:\Users\soussi\AppData\Roaming\Real\RealPlayer
   [19/03/2008|17:29] C:\Users\soussi\AppData\Roaming\Real\RealMediaSDK
   [19/03/2008|17:07] C:\Users\soussi\AppData\Roaming\Real\Msg
   [19/03/2008|17:06] C:\Users\soussi\AppData\Roaming\Realnadmin

   [05/03/2008|19:27] C:\Users\soussi\AppData\Roaming\Symantec\NPMDataStore

   [07/03/2008|21:10] C:\Users\soussi\AppData\Roaming\Talkback\MozillaOrg

   [23/01/2007|22:02] C:\Users\soussi\AppData\Roaming\Template\Normal.wpt

   [11/04/2008|09:06] C:\Users\soussi\AppData\Roaming\TuneUp Software\TuneUp Utilities

   [06/05/2008|12:57] C:\Users\soussi\AppData\Roaming\vlc\vlcrc
   [02/05/2008|23:15] C:\Users\soussi\AppData\Roaming\vlc\cache

   [06/03/2008|13:38] C:\Users\soussi\AppData\Roaming\WildTangent\My HP Game Console

   [27/03/2008|21:12] C:\Users\soussi\AppData\Roaming\WinBatch\Settings

   [23/04/2008|20:33] C:\Users\soussi\AppData\Roaming\wklnhst.dat\wklnhst.dat

   [07/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Zylom\113
   [07/03/2008|23:50] C:\Users\soussi\AppData\Roaming\Zylom\ZylomGamesPlayer
 
   ----------------[ Tâches planifiées dans C:\Windows	asks ]---------------

   [08/05/2008 21:30][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{0F4C7F58-752C-478C-9520-504F62FF55E5}.job
   [08/05/2008 21:42][--a------] C:\Windows	asks\Maintenance en 1 clic.job
   [08/05/2008 21:42][--ah-----] C:\Windows	asks\SA.DAT
   [08/05/2008 21:41][--a------] C:\Windows	asks\SCHEDLGU.TXT
  
   ------[ Listing des dossiers dans C:\ProgramData ]------
   
   [13/04/2008|18:23] C:\ProgramData\Adobe
   [08/03/2008|13:53] C:\ProgramData\Apple
   [08/03/2008|13:55] C:\ProgramData\Apple Computer
   [02/11/2006|15:02] C:\ProgramData\Application Data 
   [14/03/2008|13:48] C:\ProgramData\Arcade Lab
   [08/12/2007|00:16] C:\ProgramData\ATI
   [02/05/2008|15:48] C:\ProgramData\BitDefender
   [05/03/2008|19:16] C:\ProgramData\Bureau 
   [08/03/2008|18:54] C:\ProgramData\CyberLink
   [02/11/2006|15:02] C:\ProgramData\Desktop 
   [02/11/2006|15:02] C:\ProgramData\Documents 
   [24/03/2008|12:30] C:\ProgramData\Downloaded Installations
   [05/03/2008|19:16] C:\ProgramData\Favoris 
   [02/11/2006|15:02] C:\ProgramData\Favorites 
   [06/04/2008|17:55] C:\ProgramData\FLEXnet
   [05/03/2008|21:03] C:\ProgramData\Google
   [05/03/2008|19:28] C:\ProgramData\Hewlett-Packard
   [28/03/2008|20:26] C:\ProgramData\Hold Trust Amok Mode
   [08/12/2007|00:17] C:\ProgramData\HP
   [08/12/2007|00:17] C:\ProgramData\hpzinstall.log
   [09/03/2008|22:39] C:\ProgramData\InterAction studios
   [22/03/2008|17:46] C:\ProgramData\Lavasoft
   [12/03/2008|21:04] C:\ProgramData\LightScribe
   [07/05/2008|10:50] C:\ProgramData\Macrovision
   [05/03/2008|19:16] C:\ProgramData\Menu D‚marrer 
   [07/05/2008|21:49] C:\ProgramData\Messenger Plus!
   [16/03/2008|12:46] C:\ProgramData\Microsoft
   [14/03/2008|21:27] C:\ProgramData\Microsoft Help
   [05/03/2008|19:16] C:\ProgramData\ModŠles 
   [08/12/2007|00:24] C:\ProgramData\muvee Technologies
   [19/03/2008|13:17] C:\ProgramData
tuser.pol
   [24/03/2008|12:34] C:\ProgramData\PC Suite
   [08/12/2007|00:29] C:\ProgramData\PC-Doctor
   [24/03/2008|15:07] C:\ProgramData\PlayFirst
   [05/03/2008|22:03] C:\ProgramData\QuickTime
   [19/04/2008|11:23] C:\ProgramData\safeokayokay.dm6j86a
   [28/03/2008|20:26] C:\ProgramData\safeokayokay.olg5n
   [11/04/2008|09:12] C:\ProgramData\safeokayokay.qakgie
   [28/03/2008|20:26] C:\ProgramData\safeokayokay.skmnh
   [07/03/2008|19:12] C:\ProgramData\safeokayokay.w7n71
   [02/05/2008|23:15] C:\ProgramData\Spybot - Search & Destroy
   [02/11/2006|15:02] C:\ProgramData\Start Menu 
   [02/05/2008|22:43] C:\ProgramData\Symantec
   [23/04/2008|21:20] C:\ProgramData\TEMP
   [02/11/2006|15:02] C:\ProgramData\Templates 
   [07/03/2008|23:24] C:\ProgramData\TuneUp Software
   [13/04/2008|13:21] C:\ProgramData\WildTangent
   [27/03/2008|21:38] C:\ProgramData\WindowsSearch
   [06/03/2008|13:30] C:\ProgramData\WLInstaller
   [06/05/2008|16:29] C:\ProgramData\Zylom
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [13/04/2008|18:23] C:\Program Files\Adobe
   [23/04/2008|15:04] C:\Program Files\Alwil Software
   [08/03/2008|13:53] C:\Program Files\Apple Software Update
   [02/05/2008|23:15] C:\Program Files\Athan
   [08/12/2007|00:12] C:\Program Files\ATI
   [08/12/2007|00:13] C:\Program Files\ATI Technologies
   [10/04/2008|16:01] C:\Program Files\Audio MP3 Converter
   [12/04/2008|20:17] C:\Program Files\AviSynth 2.5
   [07/05/2008|10:49] C:\Program Files\backburner 2
   [02/05/2008|15:47] C:\Program Files\BitDefender
   [08/03/2008|13:54] C:\Program Files\Bonjour
   [07/05/2008|14:24] C:\Program Files\CCleaner
   [07/05/2008|14:06] C:\Program Files\Common Files
   [08/12/2007|00:23] C:\Program Files\CyberLink
   [25/03/2008|23:30] C:\Program Files\desktop.ini
   [08/12/2007|08:07] C:\Program Files\EasyBits
   [15/03/2008|18:24] C:\Program Files\EasyBits For Kids
   [04/04/2008|12:47] C:\Program Files\Electronic Arts
   [12/04/2008|20:16] C:\Program Files\eRightSoft
   [05/03/2008|19:16] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [05/05/2008|17:50] C:\Program Files\Free Audio Pack
   [04/05/2008|12:26] C:\Program Files\Google
   [03/05/2008|18:52] C:\Program Files\Hercules
   [08/12/2007|00:31] C:\Program Files\Hewlett-Packard
   [08/12/2007|00:26] C:\Program Files\HP
   [13/04/2008|12:54] C:\Program Files\HP Games
   [03/05/2008|18:52] C:\Program Files\InstallShield Installation Information
   [08/04/2008|16:57] C:\Program Files\Internet Explorer
   [08/04/2008|16:59] C:\Program Files\iPod
   [02/05/2008|23:15] C:\Program Files\iTunes
   [29/03/2008|20:57] C:\Program Files\Java
   [22/03/2008|17:46] C:\Program Files\Lavasoft
   [02/05/2008|23:15] C:\Program Files\Lexmark X1100 Series
   [07/05/2008|20:40] C:\Program Files\Messenger Plus! Live
   [26/04/2008|11:55] C:\Program Files\Microsoft Games
   [14/03/2008|21:27] C:\Program Files\Microsoft Office
   [16/03/2008|12:33] C:\Program Files\Microsoft Silverlight
   [06/03/2008|13:34] C:\Program Files\Microsoft SQL Server Compact Edition
   [14/03/2008|21:27] C:\Program Files\Microsoft Works
   [25/03/2008|23:20] C:\Program Files\Movie Maker
   [17/04/2008|11:10] C:\Program Files\Mozilla Firefox
   [24/03/2008|17:50] C:\Program Files\Mozilla Firefox 3 Beta 4
   [02/11/2006|14:37] C:\Program Files\MSBuild
   [08/12/2007|00:24] C:\Program Files\muvee Technologies
   [19/03/2008|21:14] C:\Program Files\Neuf
   [24/03/2008|12:33] C:\Program Files\Nokia
   [05/03/2008|22:04] C:\Program Files\OLYMPUS
   [24/03/2008|12:32] C:\Program Files\PC Connectivity Solution
   [08/12/2007|00:43] C:\Program Files\PC-Doctor 5 for Windows
   [08/04/2008|16:57] C:\Program Files\QuickTime
   [19/03/2008|17:06] C:\Program Files\Real
   [08/12/2007|00:14] C:\Program Files\Realtek
   [02/11/2006|14:37] C:\Program Files\Reference Assemblies
   [08/12/2007|00:35] C:\Program Files\Services en ligne
   [02/05/2008|23:15] C:\Program Files\Spybot - Search & Destroy
   [26/04/2008|13:21] C:\Program Files\Steam
   [17/03/2008|20:13] C:\Program Files\StuffPlug3
   [12/04/2008|18:01] C:\Program Files\Total Video Converter
   [01/05/2008|12:02] C:\Program Files\TuneUp Utilities 2008
   [09/04/2008|20:09] C:\Program Files\Ubi Soft
   [02/11/2006|15:01] C:\Program Files\Uninstall Information
   [26/04/2008|17:03] C:\Program Files\Valve
   [07/03/2008|21:14] C:\Program Files\VideoLAN
   [09/04/2008|16:52] C:\Program Files\Wanadoo Edition
   [25/03/2008|23:20] C:\Program Files\Windows Calendar
   [25/03/2008|23:20] C:\Program Files\Windows Collaboration
   [25/03/2008|23:20] C:\Program Files\Windows Defender
   [25/03/2008|23:20] C:\Program Files\Windows Journal
   [09/03/2008|13:05] C:\Program Files\Windows Live
   [09/04/2008|16:40] C:\Program Files\Windows Mail
   [25/03/2008|23:20] C:\Program Files\Windows Media Player
   [05/03/2008|19:16] C:\Program Files\Windows NT
   [25/03/2008|23:20] C:\Program Files\Windows Photo Gallery
   [25/03/2008|23:20] C:\Program Files\Windows Sidebar
   [07/05/2008|14:38] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Common Files ]------
   
   [13/03/2008|22:41] C:\Program Files\Common Files\Adobe
   [08/03/2008|13:53] C:\Program Files\Common Files\Apple
   [02/05/2008|15:47] C:\Program Files\Common Files\BitDefender
   [08/12/2007|00:17] C:\Program Files\Common Files\HP
   [08/12/2007|00:40] C:\Program Files\Common Files\InstallShield
   [26/03/2008|11:39] C:\Program Files\Common Files\Java
   [08/12/2007|00:23] C:\Program Files\Common Files\LightScribe
   [08/12/2007|00:23] C:\Program Files\Common Files\LS Getting Started
   [06/04/2008|15:57] C:\Program Files\Common Files\microsoft shared
   [05/03/2008|22:04] C:\Program Files\Common Files\MSSoap
   [08/12/2007|00:24] C:\Program Files\Common Files\muvee Technologies
   [24/03/2008|12:33] C:\Program Files\Common Files\Nokia
   [24/03/2008|12:33] C:\Program Files\Common Files\PCSuite
   [19/03/2008|17:06] C:\Program Files\Common Files\Real
   [02/11/2006|13:18] C:\Program Files\Common Files\Services
   [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
   [07/05/2008|14:40] C:\Program Files\Common Files\Steam
   [03/05/2008|09:38] C:\Program Files\Common Files\Symantec Shared
   [25/03/2008|23:20] C:\Program Files\Common Files\System
   [06/03/2008|13:32] C:\Program Files\Common Files\WindowsLiveInstaller
   [06/04/2008|14:30] C:\Program Files\Common Files\Wise Installation Wizard
   [19/03/2008|17:06] C:\Program Files\Common Files\xing shared

   ---------------------------[ Process ]--------------------------

   ... 70

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-05-08 21:44:32
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   C:\Windows\system32
vs2.inf
   [b]! EGDACCESS !/b
 


   /!\ [Fich:145][Doss:13] C:\Users\soussi\AppData\Local\Temp
   /!\ [Fich:38][Doss:1] C:\Users\soussi\AppData\Roaming\MICROS~1\Windows\Cookies
   /!\ [Fich:362][Doss:5] C:\Users\soussi\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

   [ UAC => 1 ]

   --------------------[ Fin du rapport a 21:46:43,18  ]----------------------

gil le fantom · Answer

tu vas dans le menu Démarrer
    tu clique sur panneau de configuration
    tu choisi le module ajout/suppression de programmes
    tu désinstalle messenger plus!
tu supprime les programmes suivants si présents :
                + Cid help
                + Circle Developement
                + Adverts

bonne soirée

hassan · Answer

dsl te desrancher mais j'ai pas c'est ajout/suppression de programmes 
 + Cid help
+ Circle Developement
+ Adverts
mais j'ai suprimer le sponsor de msn plus live et j'ai quel que pub sur mozilla firefox

hassan · Answer

dsl te déranger mais j'ai pas les
 + Cid help
+ Circle Developement
+ Adverts 
et j'ai supprimer le sponsor de msn plus live et j'ai quelque pub sur mozilla firefox

gil le fantom · Answer

si tu les as pas tant mieux,c'est juste une vérification

bonne continuation

a+

hassan · Answer

merci de ton aide  j'ai quelque pud sur mozilla mais sa à rediut considérablement merci encore a+

gil le fantom · Answer

tu as encore des pubs
tu télécharge navilog1 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
tutoriel http://il.mafioso.pagesperso-orange.fr/Navifix/presentation.htm

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 
Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

nanouer 12 · Answer

Search Navipromo version 3.6.0 commencé le 28/06/2008 à 14:11:46,75

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "HP_Propriétaire" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\papa\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1	om\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\papa\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1	om\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\papa\menudm~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\papa\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1	om\locals~1\applic~1" * 



*** Recherche fichiers *** 


C:\WINDOWS\pack.epk trouvé !

*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" : 

rnjfqmqmxt.dat trouvé !
rnjfqmqmxt_nav.dat trouvé !
rnjfqmqmxt_navps.dat trouvé !
rwafjnbdbn.dat trouvé !
rwafjnbdbn_nav.dat trouvé !
rwafjnbdbn_navps.dat trouvé !
thjgzuxrq.dat trouvé !
thjgzuxrq_nav.dat trouvé !
thjgzuxrq_navps.dat trouvé !

* Dans "C:\DOCUME~1\papa\locals~1\applic~1" : 


* Dans "C:\DOCUME~1	om\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 28/06/2008 à 14:19:38,51 ***

nanouer 12 · Answer

est ce que qq peux m'aider SVP merci

gil le fantom · Answer

bonjour

j'ai pas le temp en ce moment, je fais que passer,donc soit patient
au moins qu'un membre prend le relais

Tu clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 2 et valide. 
(ne fais pas le choix ,3 ou 4 sans notre avis/accord) 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts 
Appuies sur une touche comme demandé. 
(si ton Pc ne redémarre pas automatiquement, fais le toi même) 
Au redémarrage de ton PC, choisis ta session habituelle. 

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le bloc-notes va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le bloc-notes. Ton bureau va réapparaitre 

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Celà te fera apparaitre ton bureau. 

Poste le rapport

gil le fantom · Answer

bonjour

tu vas dans le menu Démarrer 
tu clique sur panneau de configuration 
tu choisi le module ajout/suppression de programmes 
tu désinstalle messenger plus!

tu supprime les programmes suivants si présents : 
+ Cid help 
+ Circle Developement 
+ Adverts

tu refais Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 

* Double-clique dessus pour lancer l'installation 
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau 
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche) 
* Patiente jusqu'à la fin du scan 
* Poste le rapport généré (C:\lopR.txt)

nanouer12 · Answer

je n'est pas messenger plus ni les fichiers cid help, adverse ou circle developement

geoffrey5 · Answer

Salut !!

on n a pas eu le rapport de la suppression de navilog

gil le fantom · Answer

tu refais Lop S&D l'option 1 

et aussi tu poste un rapport hijackthis http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
important,tu vas "C:\ programme file\Trend Micro\HijackThis\HijackThis.exe ,tu clic droit sur hijackthis.exe,tu vas à renommer,tu note "test.exe" par exemple.
si problème voir l'aide 
http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

tu Clic sur Do a system scan and save the log 
tu me colle le rapport sur ta réponse

gil le fantom · Answer

ah ok
je n'avais pas fais attention que c'était une personne différente
autant pour moi ,nanouer12 tu aurrai du crée ton post,je pensait que tu l'avais déja  Lop S&D sur ton PC que que tu l'avais utilisé
poste le rapport hijackthis stp

geoffrey5 · Answer

et le rapport de la suppression de navilog aussi

nanouer12 · Answer

Search Navipromo version 3.6.0 commencé le 29/06/2008 à 13:31:36,48

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "HP_Propriétaire" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\papa\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1	om\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\papa\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1	om\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\papa\menudm~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\papa\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1	om\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\papa\locals~1\applic~1" : 


* Dans "C:\DOCUME~1	om\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 29/06/2008 à 13:37:53,04 ***

geoffrey5 · Answer

ok...ca avait bien été supprimé..

on attends ton rapport hijackthis

gil le fantom · Answer

tout à fait geoffrey5,merci
j'avais pas fait gaffe qu'il avais coller sa réponse sur un ancien topic
hier je n'ai fais que passer,j'aurrai du étre plus attentif

nanouer12 · Answer

Clean Navipromo version 3.6.0 commencé le 29/06/2008 à 13:54:38,57

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "HP_Propriétaire" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1\papa\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1	om\locals~1\applic~1" * 



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\HP_Propriétaire\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\papa\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1	om\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\papa\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1	om\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\HP_Propriétaire\menudm~1\progra~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\papa\menudm~1\progra~1" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\HP_Propri‚taire\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" * 


* Dans "C:\DOCUME~1\papa\locals~1\applic~1" * 


* Dans "C:\DOCUME~1	om\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 29/06/2008 à 13:57:27,79 ***

geoffrey5 · Answer

Télécharge  hijackthis : http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

-une fois installé, le renommer scan.exe
-Double-clic dessus 
- Clic sur "Do a system scan and save the log" 
- copier le rapport, le coller dans la réponse

nanouer12 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:03:57, on 29/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32
tvdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [workflow] E:\install\workflow.exe
O4 - HKLM\..\Run: [Flag Owns Live Grim] C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

nanouer12 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:03:57, on 29/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32
tvdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [workflow] E:\install\workflow.exe
O4 - HKLM\..\Run: [Flag Owns Live Grim] C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

nanouer12 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:03:57, on 29/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32
tvdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [workflow] E:\install\workflow.exe
O4 - HKLM\..\Run: [Flag Owns Live Grim] C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

nanouer12 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:03:57, on 29/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32
tvdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [workflow] E:\install\workflow.exe
O4 - HKLM\..\Run: [Flag Owns Live Grim] C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

geoffrey5 · Answer

télécharge OtMoveIt 

Télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. 
Double-clique sur OTMoveIt.exe pour le lancer. 
Copie la liste qui se trouve en citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move. 


 c:\documents and settings\all users\application data\software rule flag owns\second bend.exe


clique sur MoveIt! pour lancer la suppression. 
Le résultat apparaitra dans le cadre "Results". 
Clique sur Exit pour fermer. 
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

ensuite :

Fix.reg 

Ouvre le bloc-notes (click droit sur le bureau > dans l´arborescence choisie nouveau et nouveau fichier texte) et fais un copier coller de ce qui est en citation ci-dessous (copie tout d'un trait-sans les barres(x)) : 

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Flag Owns Live Grim"=-

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 
Note : Regedit4 est sur la premiere ligne dans le bloc note et il y a une ligne blanche a la fin. 
Puis click sur "fichier"/"enregistrer sous" : 
dans : sur le bureau 
Nom du fichier : fix.reg 
Type de fichier : "tous les fichiers" 
clique sur "enregistrer" 

ca doit ressembler a ca une fois enrregistré : 

http://img520.imageshack.us/img520/4251/screenshot005ps2.png 

double clique sur fix.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?" 
Si c'est bien le cas, clique sur "oui" 

ensuite refais un nouveau rapport hijackthis pour vérifier stp

nanouer12 · Answer

ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:14:22, on 29/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32
tvdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\YZMGGZ7A\HiJackThis[1].exe
C:\C:\WINDOWS\HiJackThis.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [workflow] E:\install\workflow.exe
O4 - HKLM\..\Run: [Flag Owns Live Grim] C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

geoffrey5 · Answer

tu n as pas fais le Otmoveit et le fix.reg !

nanouer12 · Answer

je n'arrive pas à faire otoweit rien ne se passe

geoffrey5 · Answer

tu n arrives pas à l ouvrir??

nanouer12 · Answer

non, je ne peux pas l'ouvrir

geoffrey5 · Answer

essais en faisant un clic droit dessus puis "utiliser en tant qu administrateur".

je ne connais pas bien vista mais il me semble que c est comme ca que ca va

geoffrey5 · Answer

As tu désactivé le controle des comptes utilisateurs??

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Va dans démarrer puis panneau de configuration 
- Double Clique sur l'icône "Comptes d'utilisateurs" 
- Clique ensuite sur désactiver et valide.

geoffrey5 · Answer

si oui, essais en le réactivant

nnouer12 · Answer

en plus j'ai oublié de te dire que j'ai windows XP et no vista merci de ton aide c'est sympa

geoffrey5 · Answer

on va essayer autrement...tu aurais du créer ton propre topic mais bon...tampis.

Télécharger sur le bureau malware bytes : http://ww.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware?thread
 

= double-clic sur mbam-setup pour lancer l'installation 
= Installer simplement sans rien modifier 
= Quand le programme lancé ==> faire une mise à jour ensuite cocher Exécuter un examen complet 
= Clic Rechercher 
= Eventuellement décocher les disque à ne pas analyser 
= Clic Lancer l'examen 
= En fin de scan , si infection trouvée 
==> Clic Afficher résultat 
= Fermer vos applications en cours 
= Vérifier si tout est coché et clic Supprimer la sélection 

un rapport s'ouvre le copier et le coller dans la réponse 

Puis redémarrer le pc !!

ensuite :


télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le sur le Bureau. 

déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

nnouer12 · Answer

16:38:38 29/06/2008
mbam-log-6-29-2008 (16-38-38).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 175268
Temps écoulé: 57 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\PlayMP3z\uninstall.exe (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

geoffrey5 · Answer

ok...Fais quand meme combofix et un nouveau rapport hijackthis stp

gil le fantom · Answer

oublie pas geoffrey qu'il a une infection CID
avant d'utiliser combofix

tu télécharge : (by Moe) : 
http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe 

Double clic sur Lopxpsetup.exe pour lancer l'installation 
Au menu, choisir l'option 1 
Patienter jusqu'à que l'on demande d'appuyer sur une touche,tu appuies 
Un rapport sera  crée, copie/colle  sur le forum.

a+

nnouer12 · Answer

dslé mais j'avais du m'absenter ci joint rapport hitachis
StartupList report, 01/07/2008, 13:55:10
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\lecompagnonclub.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32
tvdm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage]
Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage]
Autochk-DR.lnk = ?
HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0\bin\jusched.exe
hpsysdrv = c:\windows\system\hpsysdrv.exe
Raccourci vers la page des propriétés de High Definition Audio = HDAShCut.exe
IgfxTray = C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe
Persistence = C:\WINDOWS\system32\igfxpers.exe
SoundMan = SOUNDMAN.EXE
AlcWzrd = ALCWZRD.EXE
Alcmtr = ALCMTR.EXE
HPHUPD08 = c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
KBD = C:\HP\KBD\KBD.EXE
Recguard = C:\WINDOWS\SMINST\RECGUARD.EXE
PS2 = C:\WINDOWS\system32\ps2.exe
LSBWatcher = c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
Reminder = "C:\Windows\Creator\Remind_XP.exe"
Flag Owns Live Grim = C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
F-Secure Manager = "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
F-Secure TNB = "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
EPSON Stylus DX5000 Series = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
BJCFD = C:\Program Files\BroadJump\Client Foundation\CFD.exe
StandardInstall = 

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsnMsgr = "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - c:\program files\google\googletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Windows Live Toolbar\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
(no name) - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}

--------------------------------------------------

Enumerating Task Scheduler jobs:

AppleSoftwareUpdate.job
Connexion facile à Internet.job
HPCeeSchedule.job
Norton Internet Security Online - Analyse système complète - HP_Propriétaire.job
Vérifier les mises à jour de Windows Live Toolbar.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
CODEBASE = http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
szE7.tmp\IPToolsDLL.dll||C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
szE7.tmp\


--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 8 705 bytes
Report generated in 0,078 seconds

Command line options:
   /verbose  - to add additional info on each section
   /complete - to include empty sections and unsuspicious data
   /full     - to include several rarely-important sections
   /force9x  - to include Win9x-only startups even if running on WinNT
   /forcent  - to include WinNT-only startups even if running on Win9x
   /forceall - to include all Win9x and WinNT startups, regardless of platform
   /history  - to list version history only

nnouer12 · Answer

dslé mais j'avais du m'absenter ci joint rapport hitachis
StartupList report, 01/07/2008, 13:55:10
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\lecompagnonclub.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32
tvdm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage]
Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage]
Autochk-DR.lnk = ?
HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0\bin\jusched.exe
hpsysdrv = c:\windows\system\hpsysdrv.exe
Raccourci vers la page des propriétés de High Definition Audio = HDAShCut.exe
IgfxTray = C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe
Persistence = C:\WINDOWS\system32\igfxpers.exe
SoundMan = SOUNDMAN.EXE
AlcWzrd = ALCWZRD.EXE
Alcmtr = ALCMTR.EXE
HPHUPD08 = c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
KBD = C:\HP\KBD\KBD.EXE
Recguard = C:\WINDOWS\SMINST\RECGUARD.EXE
PS2 = C:\WINDOWS\system32\ps2.exe
LSBWatcher = c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
Reminder = "C:\Windows\Creator\Remind_XP.exe"
Flag Owns Live Grim = C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
F-Secure Manager = "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
F-Secure TNB = "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
EPSON Stylus DX5000 Series = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
BJCFD = C:\Program Files\BroadJump\Client Foundation\CFD.exe
StandardInstall = 

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsnMsgr = "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - c:\program files\google\googletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Windows Live Toolbar\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
(no name) - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}

--------------------------------------------------

Enumerating Task Scheduler jobs:

AppleSoftwareUpdate.job
Connexion facile à Internet.job
HPCeeSchedule.job
Norton Internet Security Online - Analyse système complète - HP_Propriétaire.job
Vérifier les mises à jour de Windows Live Toolbar.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
CODEBASE = http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
szE7.tmp\IPToolsDLL.dll||C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
szE7.tmp\


--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 8 705 bytes
Report generated in 0,078 seconds

Command line options:
   /verbose  - to add additional info on each section
   /complete - to include empty sections and unsuspicious data
   /full     - to include several rarely-important sections
   /force9x  - to include Win9x-only startups even if running on WinNT
   /forcent  - to include WinNT-only startups even if running on Win9x
   /forceall - to include all Win9x and WinNT startups, regardless of platform
   /history  - to list version history only

geoffrey5 · Answer

Salut nnouer !!

excuse moi mais c est quoi pour un rapport ca?? lol

nnouer12 · Answer

ça c'est le rapport lop S&B  

   -----------------------[  Lop S&D 4.2.1-9  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 01/07/2008 | 17:00:59,09 ] [ PC : NOM-EB85C523610 ]
   [ MAJ : 01-07-2008 | 00:25 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns\second bend.exe
   Supprime! - C:\WINDOWS\Prefetch\SECOND BEND.EXE-2012B6F8.pf 
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.casinoking[2].txt 
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@casinoking[1].txt 
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.cotedazurpalace[2].txt 
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@cotedazurpalace[2].txt 
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[1].txt 
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   -------------[ Listing des dossiers dans APPLIC~1 ]------------  

   [28/09/2007|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
   [30/08/2007|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
   [03/01/2005|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [16/07/2007|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [27/10/2007|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
   [27/12/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [11/07/2007|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astonsoft
   [02/12/2007|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
   [24/10/2007|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [16/09/2007|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [07/02/2006|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [24/11/2004|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [27/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [27/06/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
   [29/10/2007|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [10/09/2007|05:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [03/01/2005|06:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [03/01/2005|06:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [27/06/2008|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [29/06/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [03/01/2005|06:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [04/08/2006|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
   [25/08/2006|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
   [10/02/2006|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [04/11/2007|10:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [11/07/2007|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
   [03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [03/01/2005|05:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [11/03/2008|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [27/06/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [25/06/2008|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [28/06/2008|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [22/08/2007|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WholeSecurity
   [30/06/2006|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [24/12/2006|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [25/06/2008|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [28/12/2006|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo
   [28/12/2006|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
   [11/09/2007|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [03/01/2005|06:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [24/11/2004|00:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [26/06/2008|19:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [03/01/2005|06:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [03/01/2005|06:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [06/12/2007|12:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [01/07/2008|14:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [15/08/2007|11:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
   [12/01/2008|21:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Anuman Interactive
   [03/01/2005|06:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [25/08/2006|17:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
   [02/12/2007|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVG7
   [30/04/2008|10:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus
   [06/11/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CopyToDvd
   [11/07/2007|18:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner
   [24/11/2004|00:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
   [19/09/2006|20:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Enregistrement Hachette
   [04/02/2008|09:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ezpinst.exe
   [14/09/2006|16:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FUJIFILM
   [24/09/2006|11:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
   [20/09/2006|12:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [02/07/2006|20:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [09/02/2006|21:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
   [07/02/2006|15:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
   [03/12/2007|15:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPSU_48BitScanUpdate.log
   [25/06/2008|09:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [10/10/2007|13:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\inst.exe
   [14/04/2008|19:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
   [07/02/2006|15:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
   [07/02/2006|16:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
   [16/02/2006|16:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [11/06/2008|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LimeWire
   [24/12/2007|18:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [29/06/2008|15:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
   [25/06/2008|09:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [20/01/2007|16:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
   [24/10/2006|15:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
   [26/08/2006|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [17/09/2006|15:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
   [10/02/2006|19:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
   [04/11/2007|10:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nero
   [01/06/2008|07:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
   [20/11/2006|21:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Passeport II Prefs
   [03/12/2007|15:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
   [24/09/2006|11:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
   [03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_InstantShareJPG.log
   [03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_IZClosingDiscError.log
   [20/05/2007|18:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Tools
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.cat
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.inf
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.log
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.sys
   [17/08/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\RagTime
   [03/01/2005|06:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [19/01/2008|16:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Shareaza
   [16/02/2006|16:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [18/02/2006|18:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [20/05/2007|18:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
   [26/05/2006|15:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
   [23/12/2005|18:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
   [24/01/2007|12:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
   [03/12/2007|15:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Update_HP_RedboxHprblog_HPSU.log
   [20/02/2008|11:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
   [28/03/2008|15:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

   [14/09/2007|07:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [22/11/2007|18:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
   [07/01/2007|19:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
   [07/02/2006|20:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help
   [03/01/2005|05:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [25/06/2008|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Real Dart Media

   [03/01/2005|05:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [10/09/2007|06:27] C:\DOCUME~1\papa\APPLIC~1\Adobe
   [03/01/2005|06:24] C:\DOCUME~1\papa\APPLIC~1\Apple Computer
   [24/11/2004|00:13] C:\DOCUME~1\papa\APPLIC~1\desktop.ini
   [27/08/2007|06:44] C:\DOCUME~1\papa\APPLIC~1\Google
   [25/11/2004|05:26] C:\DOCUME~1\papa\APPLIC~1\Identities
   [27/08/2007|06:43] C:\DOCUME~1\papa\APPLIC~1\Macromedia
   [02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Microsoft
   [02/09/2007|06:14] C:\DOCUME~1\papa\APPLIC~1\Mozilla
   [03/01/2005|06:28] C:\DOCUME~1\papa\APPLIC~1\SampleView
   [03/01/2005|06:40] C:\DOCUME~1\papa\APPLIC~1\Symantec
   [02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Talkback

   [26/08/2007|15:38] C:\DOCUME~1	om\APPLIC~1\Microsoft
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [01/07/2008 16:56][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [25/06/2008 09:15][--a------] C:\WINDOWS	asks\Connexion facile … Internet.job
   [28/06/2008 07:55][--a------] C:\WINDOWS	asks\Norton Internet Security Online - Analyse systŠme complŠte - HP_Propri‚taire.job
   [25/06/2008 09:15][--a------] C:\WINDOWS	asks\HPCeeSchedule.job
   [01/07/2008 15:25][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [01/07/2008 08:42][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 20:00][-rah-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [07/02/2006|16:54] C:\Program Files\ABBYY FineReader 5.0 Sprint
   [31/12/2007|10:31] C:\Program Files\ABBYY FineReader 6.0 Sprint
   [05/09/2007|11:54] C:\Program Files\AbiSuite2
   [13/02/2006|16:34] C:\Program Files\Activision Value
   [03/01/2005|06:22] C:\Program Files\Adobe
   [30/05/2008|17:31] C:\Program Files\Aero - QCM
   [27/08/2007|11:33] C:\Program Files\Alwil Software
   [10/09/2007|10:47] C:\Program Files\AntiVir PersonalEdition Classic
   [12/01/2008|20:33] C:\Program Files\Anuman Interactive
   [27/12/2007|18:46] C:\Program Files\Apple Software Update
   [13/05/2006|15:44] C:\Program Files\ArcSoft
   [01/12/2007|11:01] C:\Program Files\AskTBar
   [11/07/2007|19:01] C:\Program Files\Astonsoft
   [24/10/2007|15:10] C:\Program Files\Avira
   [30/04/2008|10:46] C:\Program Files\Azureus
   [25/10/2007|16:34] C:\Program Files\BitDefender
   [28/05/2008|17:36] C:\Program Files\Bonjour
   [16/09/2007|11:38] C:\Program Files\Boonty
   [10/10/2007|13:01] C:\Program Files\BoontyGames
   [04/08/2006|13:07] C:\Program Files\BroadJump
   [27/06/2008|12:16] C:\Program Files\CCleaner
   [16/03/2008|15:34] C:\Program Files\Club-Internet
   [12/09/2007|15:17] C:\Program Files\Common Files
   [24/11/2004|03:37] C:\Program Files\ComPlus Applications
   [14/04/2008|19:25] C:\Program Files\Cristie
   [10/07/2006|13:41] C:\Program Files\Cryo
   [25/06/2007|15:56] C:\Program Files\Devomaxx
   [25/06/2008|09:15] C:\Program Files\Easy Internet signup
   [22/08/2007|08:09] C:\Program Files\EasyBurning
   [22/08/2007|08:09] C:\Program Files\eBay
   [08/06/2007|17:40] C:\Program Files\Empire Interactive
   [27/11/2007|17:21] C:\Program Files\eMule
   [28/06/2008|08:40] C:\Program Files\epson
   [20/09/2007|19:26] C:\Program Files\FaxTools
   [27/06/2008|09:54] C:\Program Files\Fichiers communs
   [20/09/2007|17:12] C:\Program Files\FinePixViewer
   [03/01/2005|06:37] C:\Program Files\Google
   [22/11/2007|18:06] C:\Program Files\Grisoft
   [03/01/2005|06:21] C:\Program Files\Hewlett-Packard
   [03/01/2005|06:09] C:\Program Files\HP
   [06/02/2007|16:29] C:\Program Files\IncrediMail
   [28/06/2008|08:45] C:\Program Files\InstallShield Installation Information
   [25/06/2008|17:25] C:\Program Files\Internet Explorer
   [03/01/2005|06:21] C:\Program Files\InterVideo
   [03/01/2005|06:24] C:\Program Files\iPod
   [25/06/2008|16:10] C:\Program Files\iTunes
   [03/01/2005|05:53] C:\Program Files\Java
   [28/10/2007|18:29] C:\Program Files\Kaspersky Lab
   [28/10/2007|12:39] C:\Program Files\Lavasoft
   [03/03/2007|09:57] C:\Program Files\Lexmark X1100 Series
   [28/04/2008|08:52] C:\Program Files\LimeWire
   [29/06/2008|15:12] C:\Program Files\Malwarebytes' Anti-Malware
   [03/01/2005|05:57] C:\Program Files\Messenger
   [27/06/2008|12:24] C:\Program Files\Messenger Plus! Live
   [29/09/2006|13:55] C:\Program Files\Micro Application
   [19/05/2007|19:57] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [25/11/2004|05:27] C:\Program Files\microsoft frontpage
   [03/01/2005|06:23] C:\Program Files\Microsoft Office
   [05/12/2007|18:02] C:\Program Files\Microsoft SQL Server Compact Edition
   [28/03/2008|10:37] C:\Program Files\Microsoft Visual Studio
   [03/01/2005|06:23] C:\Program Files\Microsoft Works
   [10/01/2007|10:25] C:\Program Files\MioNet
   [10/08/2007|17:05] C:\Program Files\Monkeymen Calendar
   [23/06/2008|13:07] C:\Program Files\Motive
   [25/11/2004|05:27] C:\Program Files\Movie Maker
   [27/06/2008|13:57] C:\Program Files\Mozilla Firefox
   [29/06/2008|10:04] C:\Program Files\MSN
   [25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
   [27/06/2008|12:24] C:\Program Files\MSN Messenger
   [15/08/2007|08:26] C:\Program Files\MSXML 4.0
   [03/01/2005|06:27] C:\Program Files\muvee Technologies
   [29/06/2008|13:57] C:\Program Files\Navilog1
   [04/11/2007|10:37] C:\Program Files\Nero
   [25/06/2008|16:35] C:\Program Files\NetMeeting
   [27/12/2007|16:22] C:\Program Files\Norton Security Scan
   [12/01/2008|20:47] C:\Program Files\NRJ
   [25/11/2004|05:27] C:\Program Files\Online Services
   [05/09/2007|15:19] C:\Program Files\OpenOffice.org 2.2
   [29/10/2007|12:47] C:\Program Files\OpenOffice.org 2.3
   [25/06/2008|17:29] C:\Program Files\Outlook Express
   [27/06/2008|15:17] C:\Program Files\Pack Securite
   [03/01/2005|06:39] C:\Program Files\PC-Doctor 5 for Windows
   [24/12/2006|19:37] C:\Program Files\Philips
   [03/01/2005|06:24] C:\Program Files\QuickTime
   [22/08/2007|08:11] C:\Program Files\RagTime Solo
   [16/08/2007|15:33] C:\Program Files\Rainlendar2
   [22/08/2007|08:03] C:\Program Files\Recovery for Excel
   [29/10/2007|09:05] C:\Program Files\RegCleaner
   [14/09/2006|16:14] C:\Program Files\REGSHAVE
   [15/10/2007|11:38] C:\Program Files\Secret Maryo Chronicles
   [03/01/2005|06:36] C:\Program Files\Services en ligne
   [19/01/2008|16:41] C:\Program Files\Shareaza
   [30/12/2007|08:58] C:\Program Files\Shareaza Applications
   [28/09/2007|16:57] C:\Program Files\SlySoft
   [12/11/2007|12:44] C:\Program Files\Softwin
   [03/01/2005|06:20] C:\Program Files\Sonic
   [11/03/2008|15:54] C:\Program Files\Spybot - Search & Destroy
   [16/09/2007|09:47] C:\Program Files\Stunt Playground
   [17/04/2008|08:18] C:\Program Files\The Game Factory
   [29/06/2008|13:48] C:\Program Files\Trend Micro
   [29/10/2007|10:52] C:\Program Files\Tweak-XP Pro 4
   [24/11/2004|03:37] C:\Program Files\Uninstall Information
   [20/02/2008|11:24] C:\Program Files\VideoLAN
   [10/11/2007|10:18] C:\Program Files\VSO
   [27/06/2008|13:59] C:\Program Files\Windows Live
   [25/06/2008|16:49] C:\Program Files\Windows Live Favorites
   [11/01/2007|20:01] C:\Program Files\Windows Live Safety Center
   [25/06/2008|16:50] C:\Program Files\Windows Live Toolbar
   [12/01/2008|20:16] C:\Program Files\Windows Media Components
   [02/01/2007|17:13] C:\Program Files\Windows Media Connect 2
   [25/06/2008|17:30] C:\Program Files\Windows Media Player
   [25/06/2008|16:35] C:\Program Files\Windows NT
   [24/11/2004|03:37] C:\Program Files\WindowsUpdate
   [25/11/2004|05:28] C:\Program Files\xerox
   [29/12/2007|18:14] C:\Program Files\Yahoo!
   [30/11/2007|13:37] C:\Program Files\ZTWinCNO
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [03/01/2005|06:22] C:\Program Files\Fichiers communs\Adobe
   [15/08/2007|10:09] C:\Program Files\Fichiers communs\Ahead
   [27/12/2007|18:45] C:\Program Files\Fichiers communs\Apple
   [13/05/2006|15:48] C:\Program Files\Fichiers communs\ArcSoft
   [11/07/2007|19:01] C:\Program Files\Fichiers communs\Astonsoft
   [12/01/2008|10:42] C:\Program Files\Fichiers communs\BitDefender
   [16/09/2007|11:43] C:\Program Files\Fichiers communs\BOONTY Shared
   [20/01/2007|16:03] C:\Program Files\Fichiers communs\Designer
   [03/01/2005|06:15] C:\Program Files\Fichiers communs\Hewlett-Packard
   [03/01/2005|06:12] C:\Program Files\Fichiers communs\HP
   [03/01/2005|06:26] C:\Program Files\Fichiers communs\InstallShield
   [03/01/2005|05:53] C:\Program Files\Fichiers communs\Java
   [29/09/2006|13:55] C:\Program Files\Fichiers communs\Micro Application Shared
   [03/01/2005|06:23] C:\Program Files\Fichiers communs\Microsoft Shared
   [16/04/2007|13:53] C:\Program Files\Fichiers communs\Motive
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
   [03/01/2005|06:27] C:\Program Files\Fichiers communs\muvee Technologies
   [04/11/2007|10:39] C:\Program Files\Fichiers communs\Nero
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
   [25/06/2008|16:35] C:\Program Files\Fichiers communs\Services
   [12/11/2007|12:44] C:\Program Files\Fichiers communs\Softwin
   [03/01/2005|06:19] C:\Program Files\Fichiers communs\Sonic Shared
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
   [03/01/2005|06:19] C:\Program Files\Fichiers communs\SureThing Shared
   [27/06/2008|13:06] C:\Program Files\Fichiers communs\Symantec Shared
   [25/06/2008|17:29] C:\Program Files\Fichiers communs\System
   [03/01/2005|06:20] C:\Program Files\Fichiers communs\TiVo Shared
   [05/12/2007|17:56] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   ---------------------------[ Process ]--------------------------

   ... 54

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-01 17:02:41
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------


   Aucune autre infection trouvée  !

   [F:26][D:6]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:129][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:5592][D:12]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 17:03:06,93  ]----------------------

geoffrey5 · Answer

Salut !!

fais un nouveau rapport hijack stp

^^Marie^^ · Answer

Slt

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:26][D:6]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:129][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:5592][D:12]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 17:03:06,93 ]----------------------

??????????

geoffrey5 · Answer

merci marie...  ;)

nnouer : relance lopSD et choisi l option 3 pour le nettoyage

ensuite refais un nouveau rapport hijack stp

^^Marie^^ · Answer

Et pourquoi l'option  3 ???

nnouer12 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:38:02, on 01/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\lecompagnonclub.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32
tvdm.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

nnouer12 · Answer

Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci .je n'en reveiens pas plus de cids  merci geoffrey 5 t'es trop fort et trop sympa

nnouer12 · Answer

Merci, merci merci 
   -----------------------[  Lop S&D 4.2.1-9  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 01/07/2008 | 18:22:23,15 ] [ PC : NOM-EB85C523610 ]
   [ MAJ : 01-07-2008 | 00:25 ]

 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   -------------[ Listing des dossiers dans APPLIC~1 ]------------  

   [28/09/2007|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
   [30/08/2007|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
   [03/01/2005|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [16/07/2007|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [27/10/2007|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
   [27/12/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [11/07/2007|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astonsoft
   [02/12/2007|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
   [24/10/2007|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [16/09/2007|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [07/02/2006|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [24/11/2004|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [27/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [27/06/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
   [29/10/2007|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [10/09/2007|05:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [03/01/2005|06:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [03/01/2005|06:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [27/06/2008|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [29/06/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [03/01/2005|06:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [04/08/2006|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
   [25/08/2006|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
   [10/02/2006|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [04/11/2007|10:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [11/07/2007|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
   [03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [03/01/2005|05:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [11/03/2008|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [27/06/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [25/06/2008|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [28/06/2008|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [22/08/2007|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WholeSecurity
   [30/06/2006|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [24/12/2006|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [25/06/2008|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [28/12/2006|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo
   [28/12/2006|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
   [11/09/2007|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [03/01/2005|06:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [24/11/2004|00:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [26/06/2008|19:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [03/01/2005|06:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [03/01/2005|06:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [06/12/2007|12:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [01/07/2008|14:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [15/08/2007|11:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
   [12/01/2008|21:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Anuman Interactive
   [03/01/2005|06:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [25/08/2006|17:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
   [02/12/2007|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVG7
   [30/04/2008|10:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus
   [06/11/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CopyToDvd
   [11/07/2007|18:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner
   [24/11/2004|00:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
   [19/09/2006|20:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Enregistrement Hachette
   [04/02/2008|09:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ezpinst.exe
   [01/07/2008|17:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\F-Secure
   [14/09/2006|16:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FUJIFILM
   [24/09/2006|11:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
   [20/09/2006|12:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [02/07/2006|20:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [09/02/2006|21:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
   [07/02/2006|15:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
   [03/12/2007|15:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPSU_48BitScanUpdate.log
   [25/06/2008|09:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [10/10/2007|13:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\inst.exe
   [14/04/2008|19:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
   [07/02/2006|15:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
   [07/02/2006|16:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
   [16/02/2006|16:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [11/06/2008|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LimeWire
   [24/12/2007|18:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [29/06/2008|15:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
   [25/06/2008|09:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [20/01/2007|16:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
   [24/10/2006|15:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
   [26/08/2006|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [17/09/2006|15:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
   [10/02/2006|19:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
   [04/11/2007|10:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nero
   [01/06/2008|07:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
   [20/11/2006|21:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Passeport II Prefs
   [03/12/2007|15:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
   [24/09/2006|11:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
   [03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_InstantShareJPG.log
   [03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_IZClosingDiscError.log
   [20/05/2007|18:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Tools
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.cat
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.inf
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.log
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.sys
   [17/08/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\RagTime
   [03/01/2005|06:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [19/01/2008|16:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Shareaza
   [16/02/2006|16:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [18/02/2006|18:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [20/05/2007|18:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
   [26/05/2006|15:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
   [23/12/2005|18:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
   [24/01/2007|12:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
   [03/12/2007|15:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Update_HP_RedboxHprblog_HPSU.log
   [20/02/2008|11:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
   [10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
   [28/03/2008|15:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

   [14/09/2007|07:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [22/11/2007|18:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
   [07/01/2007|19:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
   [07/02/2006|20:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help
   [03/01/2005|05:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [25/06/2008|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Real Dart Media

   [03/01/2005|05:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [10/09/2007|06:27] C:\DOCUME~1\papa\APPLIC~1\Adobe
   [03/01/2005|06:24] C:\DOCUME~1\papa\APPLIC~1\Apple Computer
   [24/11/2004|00:13] C:\DOCUME~1\papa\APPLIC~1\desktop.ini
   [27/08/2007|06:44] C:\DOCUME~1\papa\APPLIC~1\Google
   [25/11/2004|05:26] C:\DOCUME~1\papa\APPLIC~1\Identities
   [27/08/2007|06:43] C:\DOCUME~1\papa\APPLIC~1\Macromedia
   [02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Microsoft
   [02/09/2007|06:14] C:\DOCUME~1\papa\APPLIC~1\Mozilla
   [03/01/2005|06:28] C:\DOCUME~1\papa\APPLIC~1\SampleView
   [03/01/2005|06:40] C:\DOCUME~1\papa\APPLIC~1\Symantec
   [02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Talkback

   [26/08/2007|15:38] C:\DOCUME~1	om\APPLIC~1\Microsoft
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [01/07/2008 17:56][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [25/06/2008 09:15][--a------] C:\WINDOWS	asks\Connexion facile … Internet.job
   [28/06/2008 07:55][--a------] C:\WINDOWS	asks\Norton Internet Security Online - Analyse systŠme complŠte - HP_Propri‚taire.job
   [25/06/2008 09:15][--a------] C:\WINDOWS	asks\HPCeeSchedule.job
   [01/07/2008 15:25][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [01/07/2008 08:42][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 20:00][-rah-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [07/02/2006|16:54] C:\Program Files\ABBYY FineReader 5.0 Sprint
   [31/12/2007|10:31] C:\Program Files\ABBYY FineReader 6.0 Sprint
   [05/09/2007|11:54] C:\Program Files\AbiSuite2
   [13/02/2006|16:34] C:\Program Files\Activision Value
   [03/01/2005|06:22] C:\Program Files\Adobe
   [30/05/2008|17:31] C:\Program Files\Aero - QCM
   [27/08/2007|11:33] C:\Program Files\Alwil Software
   [10/09/2007|10:47] C:\Program Files\AntiVir PersonalEdition Classic
   [12/01/2008|20:33] C:\Program Files\Anuman Interactive
   [27/12/2007|18:46] C:\Program Files\Apple Software Update
   [13/05/2006|15:44] C:\Program Files\ArcSoft
   [01/12/2007|11:01] C:\Program Files\AskTBar
   [11/07/2007|19:01] C:\Program Files\Astonsoft
   [24/10/2007|15:10] C:\Program Files\Avira
   [30/04/2008|10:46] C:\Program Files\Azureus
   [25/10/2007|16:34] C:\Program Files\BitDefender
   [28/05/2008|17:36] C:\Program Files\Bonjour
   [16/09/2007|11:38] C:\Program Files\Boonty
   [10/10/2007|13:01] C:\Program Files\BoontyGames
   [04/08/2006|13:07] C:\Program Files\BroadJump
   [27/06/2008|12:16] C:\Program Files\CCleaner
   [16/03/2008|15:34] C:\Program Files\Club-Internet
   [12/09/2007|15:17] C:\Program Files\Common Files
   [24/11/2004|03:37] C:\Program Files\ComPlus Applications
   [14/04/2008|19:25] C:\Program Files\Cristie
   [10/07/2006|13:41] C:\Program Files\Cryo
   [25/06/2007|15:56] C:\Program Files\Devomaxx
   [25/06/2008|09:15] C:\Program Files\Easy Internet signup
   [22/08/2007|08:09] C:\Program Files\EasyBurning
   [22/08/2007|08:09] C:\Program Files\eBay
   [08/06/2007|17:40] C:\Program Files\Empire Interactive
   [27/11/2007|17:21] C:\Program Files\eMule
   [28/06/2008|08:40] C:\Program Files\epson
   [20/09/2007|19:26] C:\Program Files\FaxTools
   [27/06/2008|09:54] C:\Program Files\Fichiers communs
   [20/09/2007|17:12] C:\Program Files\FinePixViewer
   [03/01/2005|06:37] C:\Program Files\Google
   [22/11/2007|18:06] C:\Program Files\Grisoft
   [03/01/2005|06:21] C:\Program Files\Hewlett-Packard
   [03/01/2005|06:09] C:\Program Files\HP
   [06/02/2007|16:29] C:\Program Files\IncrediMail
   [28/06/2008|08:45] C:\Program Files\InstallShield Installation Information
   [25/06/2008|17:25] C:\Program Files\Internet Explorer
   [03/01/2005|06:21] C:\Program Files\InterVideo
   [03/01/2005|06:24] C:\Program Files\iPod
   [25/06/2008|16:10] C:\Program Files\iTunes
   [03/01/2005|05:53] C:\Program Files\Java
   [28/10/2007|18:29] C:\Program Files\Kaspersky Lab
   [28/10/2007|12:39] C:\Program Files\Lavasoft
   [03/03/2007|09:57] C:\Program Files\Lexmark X1100 Series
   [28/04/2008|08:52] C:\Program Files\LimeWire
   [29/06/2008|15:12] C:\Program Files\Malwarebytes' Anti-Malware
   [03/01/2005|05:57] C:\Program Files\Messenger
   [27/06/2008|12:24] C:\Program Files\Messenger Plus! Live
   [29/09/2006|13:55] C:\Program Files\Micro Application
   [19/05/2007|19:57] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [25/11/2004|05:27] C:\Program Files\microsoft frontpage
   [03/01/2005|06:23] C:\Program Files\Microsoft Office
   [05/12/2007|18:02] C:\Program Files\Microsoft SQL Server Compact Edition
   [28/03/2008|10:37] C:\Program Files\Microsoft Visual Studio
   [03/01/2005|06:23] C:\Program Files\Microsoft Works
   [10/01/2007|10:25] C:\Program Files\MioNet
   [10/08/2007|17:05] C:\Program Files\Monkeymen Calendar
   [23/06/2008|13:07] C:\Program Files\Motive
   [25/11/2004|05:27] C:\Program Files\Movie Maker
   [27/06/2008|13:57] C:\Program Files\Mozilla Firefox
   [29/06/2008|10:04] C:\Program Files\MSN
   [25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
   [27/06/2008|12:24] C:\Program Files\MSN Messenger
   [15/08/2007|08:26] C:\Program Files\MSXML 4.0
   [03/01/2005|06:27] C:\Program Files\muvee Technologies
   [29/06/2008|13:57] C:\Program Files\Navilog1
   [04/11/2007|10:37] C:\Program Files\Nero
   [25/06/2008|16:35] C:\Program Files\NetMeeting
   [27/12/2007|16:22] C:\Program Files\Norton Security Scan
   [12/01/2008|20:47] C:\Program Files\NRJ
   [25/11/2004|05:27] C:\Program Files\Online Services
   [05/09/2007|15:19] C:\Program Files\OpenOffice.org 2.2
   [29/10/2007|12:47] C:\Program Files\OpenOffice.org 2.3
   [25/06/2008|17:29] C:\Program Files\Outlook Express
   [27/06/2008|15:17] C:\Program Files\Pack Securite
   [03/01/2005|06:39] C:\Program Files\PC-Doctor 5 for Windows
   [24/12/2006|19:37] C:\Program Files\Philips
   [03/01/2005|06:24] C:\Program Files\QuickTime
   [22/08/2007|08:11] C:\Program Files\RagTime Solo
   [16/08/2007|15:33] C:\Program Files\Rainlendar2
   [22/08/2007|08:03] C:\Program Files\Recovery for Excel
   [29/10/2007|09:05] C:\Program Files\RegCleaner
   [14/09/2006|16:14] C:\Program Files\REGSHAVE
   [15/10/2007|11:38] C:\Program Files\Secret Maryo Chronicles
   [03/01/2005|06:36] C:\Program Files\Services en ligne
   [19/01/2008|16:41] C:\Program Files\Shareaza
   [30/12/2007|08:58] C:\Program Files\Shareaza Applications
   [28/09/2007|16:57] C:\Program Files\SlySoft
   [12/11/2007|12:44] C:\Program Files\Softwin
   [03/01/2005|06:20] C:\Program Files\Sonic
   [11/03/2008|15:54] C:\Program Files\Spybot - Search & Destroy
   [16/09/2007|09:47] C:\Program Files\Stunt Playground
   [17/04/2008|08:18] C:\Program Files\The Game Factory
   [29/06/2008|13:48] C:\Program Files\Trend Micro
   [29/10/2007|10:52] C:\Program Files\Tweak-XP Pro 4
   [24/11/2004|03:37] C:\Program Files\Uninstall Information
   [20/02/2008|11:24] C:\Program Files\VideoLAN
   [10/11/2007|10:18] C:\Program Files\VSO
   [27/06/2008|13:59] C:\Program Files\Windows Live
   [25/06/2008|16:49] C:\Program Files\Windows Live Favorites
   [11/01/2007|20:01] C:\Program Files\Windows Live Safety Center
   [25/06/2008|16:50] C:\Program Files\Windows Live Toolbar
   [12/01/2008|20:16] C:\Program Files\Windows Media Components
   [02/01/2007|17:13] C:\Program Files\Windows Media Connect 2
   [25/06/2008|17:30] C:\Program Files\Windows Media Player
   [25/06/2008|16:35] C:\Program Files\Windows NT
   [24/11/2004|03:37] C:\Program Files\WindowsUpdate
   [25/11/2004|05:28] C:\Program Files\xerox
   [29/12/2007|18:14] C:\Program Files\Yahoo!
   [30/11/2007|13:37] C:\Program Files\ZTWinCNO
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [03/01/2005|06:22] C:\Program Files\Fichiers communs\Adobe
   [15/08/2007|10:09] C:\Program Files\Fichiers communs\Ahead
   [27/12/2007|18:45] C:\Program Files\Fichiers communs\Apple
   [13/05/2006|15:48] C:\Program Files\Fichiers communs\ArcSoft
   [11/07/2007|19:01] C:\Program Files\Fichiers communs\Astonsoft
   [12/01/2008|10:42] C:\Program Files\Fichiers communs\BitDefender
   [16/09/2007|11:43] C:\Program Files\Fichiers communs\BOONTY Shared
   [20/01/2007|16:03] C:\Program Files\Fichiers communs\Designer
   [03/01/2005|06:15] C:\Program Files\Fichiers communs\Hewlett-Packard
   [03/01/2005|06:12] C:\Program Files\Fichiers communs\HP
   [03/01/2005|06:26] C:\Program Files\Fichiers communs\InstallShield
   [03/01/2005|05:53] C:\Program Files\Fichiers communs\Java
   [29/09/2006|13:55] C:\Program Files\Fichiers communs\Micro Application Shared
   [03/01/2005|06:23] C:\Program Files\Fichiers communs\Microsoft Shared
   [16/04/2007|13:53] C:\Program Files\Fichiers communs\Motive
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
   [03/01/2005|06:27] C:\Program Files\Fichiers communs\muvee Technologies
   [04/11/2007|10:39] C:\Program Files\Fichiers communs\Nero
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
   [25/06/2008|16:35] C:\Program Files\Fichiers communs\Services
   [12/11/2007|12:44] C:\Program Files\Fichiers communs\Softwin
   [03/01/2005|06:19] C:\Program Files\Fichiers communs\Sonic Shared
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
   [03/01/2005|06:19] C:\Program Files\Fichiers communs\SureThing Shared
   [27/06/2008|13:06] C:\Program Files\Fichiers communs\Symantec Shared
   [25/06/2008|17:29] C:\Program Files\Fichiers communs\System
   [03/01/2005|06:20] C:\Program Files\Fichiers communs\TiVo Shared
   [05/12/2007|17:56] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   ---------------------------[ Process ]--------------------------

   ... 55

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-01 18:25:15
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------


   Aucune autre infection trouvée  !

   [F:11][D:1]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:37][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:928][D:8]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 18:25:36,95  ]----------------------

^^Marie^^ · Answer

Rebelotte


--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:11][D:1]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:37][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:928][D:8]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 18:25:36,95 ]----------------------

geoffrey5 · Answer

marie : je lui ai demandé de faire l option 3 car les fichiers hosts étaient propres, donc il n y avait pas besoin de les réinstaller..

nnouer : relance hijackthis en cliquant sur scan only et coches ces lignes :

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
 
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll 

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
     
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
     
O4 - Global Startup: Autochk-DR.lnk = ? 

puis tu cliques sur fix checked.

remet java à jour : java : https://www.java.com/fr/download/manual.jsp

ensuite si tu n as plus de problemes :

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques : 

Télécharge toolscleaner sur ton Bureau : http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner 
* Double-clique sur ToolsCleaner2.bat et laisse le travailler 
* Clique sur Recherche et laisse le scan se terminer. 
* Clique sur Suppression pour finaliser. 
* Tu peux, si tu le souhaites, te servir des Options facultatives. 
* Clique sur Quitter, pour que le rapport puisse se créer. 
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

nnouer12 · Answer

-->- Recherche: 

C:\Lop SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\Lop S&D.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Lop S&D: trouvé !
C:\Lop SD\Lop S&D.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\SystemRoot\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\Lop S&D.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\LopSD.exe: supprimé !
C:\Lop SD\Lop S&D.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\SystemRoot\HijackThis.exe: supprimé !
C:\Lop SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Lop S&D: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !
Corbeille vidée!



voici le rapport de toollscleaner

Pub cid sur internet

57 réponses

Votre réponse

Discussions similaires

Newsletters