Bonjour, Un trojan popuper c'est infiltré sur mon pc. comment faire pour le retirer. Merci

Trojan popuper

Réponse 1 / 5

jessydu54870 Messages postés 176 Statut Membre 5

salut

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---

Titom65 Messages postés 4 Statut Membre

-----------------------[ Lop S&D 4.2.0-9 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : TOMDINE ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 27/05/2008 | 21:02:49,64 ] [ PC : PC-DE-TOMDINE ]
[ MAJ : 16-05-2008 | 23:35 ]
[ UAC => 0 ]

-------------[ Listing des dossiers dans Application Data ]------------

[06/12/2007|19:48] C:\Users\TOMDINE\AppData\Roaming\Adobe\Flash Player
[06/12/2007|14:50] C:\Users\TOMDINE\AppData\Roaming\Adobe\Linguistics
[06/12/2007|14:49] C:\Users\TOMDINE\AppData\Roaming\Adobe\Acrobat

[07/12/2007|17:24] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PlayMovie
[07/12/2007|17:23] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PowerCinema
[07/12/2007|17:20] C:\Users\TOMDINE\AppData\Roaming\CyberLink\MediaCache
[07/12/2007|17:20] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PowerProducer
[07/12/2007|17:20] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PowerDVD

[11/03/2008|20:06] C:\Users\TOMDINE\AppData\Roaming\Google\Local Search History
[08/12/2007|20:32] C:\Users\TOMDINE\AppData\Roaming\Google\GoogleEarth

[06/12/2007|14:44] C:\Users\TOMDINE\AppData\Roaming\Identities\{2E2DD65D-5573-4EC0-861C-2CCB5D8C9697}

[07/12/2007|12:52] C:\Users\TOMDINE\AppData\Roaming\InstallShield\ISEngine12.0

[12/04/2008|13:35] C:\Users\TOMDINE\AppData\Roaming\Macromedia\Flash Player

[07/05/2008|13:32] C:\Users\TOMDINE\AppData\Roaming\Microsoft\eHome
[23/03/2008|20:20] C:\Users\TOMDINE\AppData\Roaming\Microsoft\MSN Messenger
[23/03/2008|20:15] C:\Users\TOMDINE\AppData\Roaming\Microsoft\IdentityCRL
[17/12/2007|23:21] C:\Users\TOMDINE\AppData\Roaming\Microsoft\ModŠles
[17/12/2007|13:33] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Word
[12/12/2007|13:25] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Internet Explorer
[10/12/2007|19:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Office
[10/12/2007|19:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Excel
[09/12/2007|01:33] C:\Users\TOMDINE\AppData\Roaming\Microsoft\PowerPoint
[07/12/2007|17:17] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Outlook
[07/12/2007|15:49] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Signatures
[07/12/2007|15:14] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Stationery
[07/12/2007|11:20] C:\Users\TOMDINE\AppData\Roaming\Microsoft\preuve
[07/12/2007|11:20] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Macros compl‚mentaires
[07/12/2007|10:25] C:\Users\TOMDINE\AppData\Roaming\Microsoft\MMC
[06/12/2007|20:17] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Templates
[06/12/2007|20:15] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Document Building Blocks
[06/12/2007|20:07] C:\Users\TOMDINE\AppData\Roaming\Microsoft\AddIns
[06/12/2007|19:05] C:\Users\TOMDINE\AppData\Roaming\Microsoft\HTML Help
[06/12/2007|15:14] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Speech
[06/12/2007|15:05] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Windows
[06/12/2007|14:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Protect
[06/12/2007|14:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Crypto
[06/12/2007|14:42] C:\Users\TOMDINE\AppData\Roaming\Microsoft\SystemCertificates
[06/12/2007|14:42] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Credentials

[27/03/2008|20:15] C:\Users\TOMDINE\AppData\Roaming\Mozilla\Firefox

[18/03/2008|12:51] C:\Users\TOMDINE\AppData\Roaming\OpenOffice.org2\user

[26/05/2008|21:14] C:\Users\TOMDINE\AppData\Roaming\PC Tools\Spyware Doctor

[10/03/2008|17:49] C:\Users\TOMDINE\AppData\Roaming\Real\RealPlayer

[06/12/2007|19:43] C:\Users\TOMDINE\AppData\Roaming\Talkback\MozillaOrg

[10/03/2008|18:24] C:\Users\TOMDINE\AppData\Roaming\vlc\cache

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[27/05/2008 21:01][--ah-----] C:\Windows\tasks\SA.DAT
[27/05/2008 21:00][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[10/08/2007|09:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[27/03/2008|21:22] C:\ProgramData\Adobe
[04/04/2008|14:34] C:\ProgramData\Apple
[05/04/2008|15:11] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[06/12/2007|14:39] C:\ProgramData\Bureau
[07/12/2007|17:20] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[11/04/2008|16:29] C:\ProgramData\eMule
[06/12/2007|14:39] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[11/03/2008|16:01] C:\ProgramData\Google
[10/04/2008|11:57] C:\ProgramData\Grisoft
[06/12/2007|14:39] C:\ProgramData\Menu D‚marrer
[07/12/2007|11:18] C:\ProgramData\Microsoft
[07/12/2007|10:33] C:\ProgramData\Microsoft Help
[06/12/2007|14:39] C:\ProgramData\ModŠles
[19/05/2008|22:02] C:\ProgramData\MumboJumbo
[17/10/2007|00:08] C:\ProgramData\NVIDIA
[19/05/2008|21:27] C:\ProgramData\Sandlot Games
[12/03/2008|19:02] C:\ProgramData\Skyline
[02/11/2006|15:02] C:\ProgramData\Start Menu
[06/12/2007|18:53] C:\ProgramData\Symantec
[27/05/2008|21:02] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[23/03/2008|20:07] C:\ProgramData\WLInstaller
[06/12/2007|19:04] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[17/10/2007|00:10] C:\Program Files\Acer Arcade Deluxe
[10/08/2007|10:05] C:\Program Files\Acer GameZone
[17/10/2007|00:15] C:\Program Files\Acer Inc
[10/08/2007|09:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[27/03/2008|21:22] C:\Program Files\Adobe
[06/12/2007|15:55] C:\Program Files\Alice
[06/12/2007|19:00] C:\Program Files\Alwil Software
[17/10/2007|00:13] C:\Program Files\Apoint2K
[04/04/2008|14:34] C:\Program Files\Apple Software Update
[10/04/2008|14:52] C:\Program Files\Common Files
[10/08/2007|08:40] C:\Program Files\CONEXANT
[10/08/2007|09:43] C:\Program Files\CyberLink
[06/12/2007|18:00] C:\Program Files\desktop.ini
[11/04/2008|16:28] C:\Program Files\eMule
[06/12/2007|14:39] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/03/2008|16:00] C:\Program Files\Google
[07/12/2007|12:53] C:\Program Files\InstallShield Installation Information
[17/10/2007|00:03] C:\Program Files\Intel
[10/04/2008|09:42] C:\Program Files\Internet Explorer
[14/04/2008|10:16] C:\Program Files\Java
[17/10/2007|00:09] C:\Program Files\Launch Manager
[23/03/2008|21:37] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[07/12/2007|10:56] C:\Program Files\Microsoft FrontPage
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[07/12/2007|11:05] C:\Program Files\Microsoft Money
[11/03/2008|16:07] C:\Program Files\Microsoft Office
[23/03/2008|20:17] C:\Program Files\Microsoft SQL Server Compact Edition
[07/12/2007|10:33] C:\Program Files\Microsoft Works
[02/11/2006|14:42] C:\Program Files\Movie Maker
[06/05/2008|21:07] C:\Program Files\Mozilla Firefox
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[06/12/2007|16:55] C:\Program Files\MSXML 4.0
[10/08/2007|09:18] C:\Program Files\NewTech Infosystems
[14/04/2008|10:28] C:\Program Files\OpenOffice.org 2.3
[14/04/2008|10:28] C:\Program Files\OpenOffice.org 2.4
[04/04/2008|14:37] C:\Program Files\QuickTime
[07/12/2007|11:42] C:\Program Files\Real
[10/08/2007|08:31] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[12/03/2008|19:02] C:\Program Files\Skyline
[27/05/2008|11:49] C:\Program Files\Spyware Doctor
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[10/03/2008|18:21] C:\Program Files\VideoLAN
[06/12/2007|17:57] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[10/08/2007|09:22] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[23/03/2008|21:37] C:\Program Files\Windows Live
[15/05/2008|10:21] C:\Program Files\Windows Mail
[06/12/2007|17:56] C:\Program Files\Windows Media Player
[06/12/2007|14:39] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[10/03/2008|18:05] C:\Program Files\Windows Sidebar
[06/12/2007|14:43] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[27/03/2008|21:23] C:\Program Files\Common Files\Adobe
[10/08/2007|09:30] C:\Program Files\Common Files\InstallShield
[06/12/2007|21:38] C:\Program Files\Common Files\Java
[10/08/2007|09:18] C:\Program Files\Common Files\LightScribe
[23/03/2008|20:13] C:\Program Files\Common Files\microsoft shared
[10/08/2007|09:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|09:19] C:\Program Files\Common Files\NewTech Infosystems
[10/08/2007|10:01] C:\Program Files\Common Files\Oberon Media
[10/03/2008|17:49] C:\Program Files\Common Files\Real
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[06/12/2007|18:54] C:\Program Files\Common Files\Symantec Shared
[07/12/2007|10:56] C:\Program Files\Common Files\System
[23/03/2008|20:13] C:\Program Files\Common Files\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 75

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-27 21:03:51
Windows 6.0.6000 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

[F:3269][D:50]-> C:\Users\TOMDINE\AppData\Local\Temp
[F:40][D:1]-> C:\Users\TOMDINE\AppData\Roaming\MICROS~1\Windows\Cookies
[F:30][D:4]-> C:\Users\TOMDINE\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 21:05:45,73 ]----------------------

Réponse 2 / 5

jessydu54870 Messages postés 176 Statut Membre 5

telecharge hijackthis fais un scan et colle moi le log ici

pour telecharger hijackthis :

https://www.01net.com/telecharger/

Titom65 Messages postés 4 Statut Membre

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:33:55, on 28/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\System32\rundll32.exe
C:\Windows\BR040286.exe
C:\Windows\System32\rundll32.exe
C:\Users\TOMDINE\AppData\Local\Temp\RtkBtMnt.exe
C:\Acer\ALaunch\ALaunchSvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Users\TOMDINE\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BisonInst0402] C:\Windows\BR040286.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [SetPanel] C:\Acer\APanel\APanel.cmd
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ieservicegate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ieservicegate.com/redirect.php (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Réponse 3 / 5

jessydu54870 Messages postés 176 Statut Membre 5

tu na rien d'apres le rapport

fais un scan en ligne chez kaspersky

https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

tuto du scan en ligne :

https://kerio.probb.fr/t678-kaspersky-antivirus-en-ligne

Titom65 Messages postés 4 Statut Membre

Merci, pour l'aide...
C'est bizard, Spyware doctor a pourtant trouvé un Trojan Popuper.
Pour le scan en ligne tu n'aurais pas un autre lien parceque ma configue avec Win Vista n'est pas prise en charge...
A+

Réponse 4 / 5

jessydu54870 Messages postés 176 Statut Membre 5

non dsl aucun autre scan en ligne n'est compatible avec vista mes kaspersky oui !!

parce que moi j'ai vista et je fais des scan en ligne et ca marche !!

Titom65 Messages postés 4 Statut Membre

Le scan en ligne n'a pas fonctionné. J'ai télécharger la version gratuite 30jrs
detectio de:
-> Trojan-Downloader.Win32.Zlob.lar dans 3 fichiers .tmp
-> not-virus:Hoax.Win32.Renos.bmq dans 1 fichier .tmp

Réponse 5 / 5

jessydu54870 Messages postés 176 Statut Membre 5

ok supprime les fichier detecter a tu bien desinstaller avast

je te conseille maintenant de supprimer kaspersky et avast

puis de mettre antivir mes le a jour puis fais un scan et supprime tous se qu'il trouve (delete)

aide antivir :

https://www.malekal.com/avira-free-security-antivirus-gratuit/

Réglages pour AntiVir:

*Ouvre "AntiVir" puis clique sur "Configuration" et coche la case "Expert Mode" puis sur l´onglet "Scanner" dans la fenêtre du dessous tu va voir:
*Vas dans l'onglet "Scanner" puis coche "All Files" et en dessous dans l'onglet "Scanner Priority" tu mets "High".
*Puis toujours dans l'onglet "Scanner" dans l'encadrer "Scan proces" coche "Allow stopping the scanner"cela te permettra de faire une pause pendant l' analyse si tu le souhaite.

*Puis toujours dans l'onglet "Scanner" dans l'encadre "Additionnal Setting" coches ces lignes:

*"Scan boot sectors of selected drives"
*"Scan master boot sectors"
*"Scan memory"
*"Search foe rootkit before scan"

Et maintenant décoche:

*"Ignore off line files"

*Puis dans l'onglet "Scanner" vas dans le sous-onglet "Scan" puis "Heurestic" puis coche "Macrovirus Heuristic" puis coche "Win32 flie heuristic" puis sur "High detection level"
"
*Puis aussi clique sur l'onglet "Guard" puis coche "Scan archive" puis tu décoche les 3 case en dessous puis "Ok".

Trojan popuper

5 réponses

Discussions similaires

Newsletters