Sujet Précédent Sujet Suivant

Besoin d'assistance pour Lop S&D Vista

Fermé
michkette - 28 mai 2008 à 07:37
Le sioux Messages postés 4894 Date d'inscription dimanche 27 mai 2007 Statut Contributeur sécurité Dernière intervention 6 mars 2023 - 11 sept. 2008 à 01:18
Bonjour,
j'ai besoin d'aide pour chasser des lops qui m'ouvrent des fenêtres CID sans arrêt. Je voudrais utiliser Lop S& D pour Vista; un internaute aurait il la gentillesse pour m'assister, et m'éviter des bêtises ?
Merci notamment de me guider pour la suppression ou non de fichiers.
A voir également:

6 réponses

Réponse 1 / 6
Le sioux Messages postés 4894 Date d'inscription dimanche 27 mai 2007 Statut Contributeur sécurité Dernière intervention 6 mars 2023 496
28 mai 2008 à 10:15
Bonjour Michkette

C'est parti mon kiki ;)

1) Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

- Vas dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.

Un redémarrage sera nécessaire.

2) LOP S&D d'Eric71

Télécharge LOP S&D d'Eric71 ici https://sites.google.com/site/eric71mespages/lop.sd.exe

Double-clique dessus pour lancer l'installation.
Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )
Patiente jusqu'à la fin du scan.

Poste le rapport généré (situé aussi ici C:\lopR.txt )

( Si le Bureau ne réapparaît , lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

@ suivre
1
Réponse 2 / 6
Le sioux Messages postés 4894 Date d'inscription dimanche 27 mai 2007 Statut Contributeur sécurité Dernière intervention 6 mars 2023 496
7 sept. 2008 à 19:49
Bonjour kro

Relance LOP S&D d'Eric71

Choisis cette fois ci l'Option 2 ( Suppression )

/!\ Ne ferme pas la fenêtre lors de la suppression ! /!\

--> Sauvegarde le rapport généré sur ton Bureau.

2) OTMoveIt de Old_Timer

Télécharge OTMoveIt2 de Old_Timer sur ton Bureau. http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

Double clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :
Paste standard List of Files/Folders to be moved.

C:\Users\olive\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Antivirus 2008 PRO
C:\Users\olive\Documents\Mes fichiers re‡us\TuneUp 2006\TuneUp Utilities 2006\TuneUp Utilities 2006 (Build 5.0.2327)
C:\Users\olive\Documents\Mes fichiers re‡us\TuneUp 2006\TuneUp Utilities 2006\TuneUp Utilities 2006

Clique sur MoveIt! pour lancer la suppression.
Le résultat apparaîtra dans le cadre Results.
Clique sur Exit pour fermer.

Il te sera peut-être demander de faire redémarrer le PC pour achever la suppression.
si c'est le cas accepte par Yes.

Poste en réponse :
-- Le rapport d'OTMoveIt situé dans C:\_OTMoveIt\MovedFiles (contenu du fichier C:\_OTMoveIt\MovedFiles\********_******.log - les *** sont des chiffres représentant la date et l'heure)
-- Le rapport de LOP S&D que tu as sauvegardé sur ton Bureau.(il se trouve aussi ici C:\lopR.txt )

@ suivre

L'utilisation de cracks ou keygens est à proscrire, de même que le surf sur les sites de téléchargement de ceux-ci @ lire :
Les dangers des cracks : http://forum.malekal.com/ftopic893.php
Le crack dans toute sa splendeur, journal d'une infection attendue :
https://forum.zebulon.fr/topic/93281-pr%C3%A9vention-le-crack-dans-toute-sa-splendeur/
1
Réponse 3 / 6
Le sioux Messages postés 4894 Date d'inscription dimanche 27 mai 2007 Statut Contributeur sécurité Dernière intervention 6 mars 2023 496
11 sept. 2008 à 01:18
Bonsoir swifer94

* Commence par faire ce ptit scan en ligne : http://www.technicland.com/malpolitus.swf

* Puis , il serait plus que préférable que tu crées ton propre sujet.
Cela rendra le poste (ici) plus compréhensible, et nous pourrons traiter ton soucis avec plus d’efficacité.
Pour t'y aider, regarde ici :
http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm
http://pagesperso-orange.fr/rginformatique/section%20virus/demofairesontmessage.htm

Salut.
1
Réponse 4 / 6
kro
7 sept. 2008 à 14:51
--------------------\\ Lop S&D 4.2.4-1 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2310 @ 1.46GHz )
BIOS : Default System BIOS
USER : olive ( Not Administrator ! )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080906-0] 4.8.1229 (Activated)

"C:\Lop SD" ( MAJ : 06-09-2008|22:02 )
Option : [1] ( 07/09/2008|14:48 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[30/08/2008|10:47] C:\Users\olive\AppData\Local\Acer Arcade Deluxe
[23/10/2007|19:21] C:\Users\olive\AppData\Local\acer eNM
[23/03/2008|00:09] C:\Users\olive\AppData\Local\Adobe
[01/08/2008|17:23] C:\Users\olive\AppData\Local\Apple
[01/08/2008|21:13] C:\Users\olive\AppData\Local\Apple Computer
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Application Data
[03/07/2008|22:41] C:\Users\olive\AppData\Local\d3d9caps.dat
[03/09/2008|18:16] C:\Users\olive\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[31/10/2007|10:14] C:\Users\olive\AppData\Local\GDIPFONTCACHEV1.DAT
[27/10/2007|19:24] C:\Users\olive\AppData\Local\Google
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Historique
[07/09/2008|14:01] C:\Users\olive\AppData\Local\IconCache.db
[20/06/2008|07:36] C:\Users\olive\AppData\Local\Microsoft
[08/05/2008|11:57] C:\Users\olive\AppData\Local\Microsoft Games
[18/06/2008|14:39] C:\Users\olive\AppData\Local\Microsoft Help
[23/10/2007|19:21] C:\Users\olive\AppData\Local\PlayMovie
[30/08/2008|10:47] C:\Users\olive\AppData\Local\PowerCinema
[07/09/2008|14:38] C:\Users\olive\AppData\Local\Temp
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Temporary Internet Files
[27/10/2007|19:54] C:\Users\olive\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[07/09/2008 14:04][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[07/09/2008 14:44][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[07/09/2008 14:04][--ah-----] C:\Windows\tasks\SA.DAT
[07/09/2008 14:02][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/08/2007|09:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[10/08/2007|09:51] C:\ProgramData\Adobe
[01/08/2008|17:22] C:\ProgramData\Apple
[01/08/2008|17:25] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[23/10/2007|19:15] C:\ProgramData\Bureau
[02/09/2008|22:01] C:\ProgramData\camp 4 blue.3zp71lj
[28/10/2007|18:32] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[23/06/2008|19:17] C:\ProgramData\EPSON
[23/10/2007|19:15] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[02/09/2008|22:01] C:\ProgramData\Ford drive four file
[27/10/2007|18:58] C:\ProgramData\Google
[23/10/2007|19:15] C:\ProgramData\Menu D‚marrer
[21/03/2008|12:21] C:\ProgramData\Microsoft
[24/08/2008|10:59] C:\ProgramData\Microsoft Help
[23/10/2007|19:15] C:\ProgramData\ModŠles
[02/11/2006|15:02] C:\ProgramData\Start Menu
[05/09/2008|16:50] C:\ProgramData\Store Name Math
[23/03/2008|11:43] C:\ProgramData\Symantec
[02/11/2006|15:02] C:\ProgramData\Templates
[02/09/2008|22:01] C:\ProgramData\Tool Software Software.n1p26
[02/09/2008|22:01] C:\ProgramData\Tool Software Software.qyq1728
[28/10/2007|14:25] C:\ProgramData\TuneUp Software
[23/06/2008|19:22] C:\ProgramData\UDL
[23/10/2007|20:23] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[23/06/2008|19:19] C:\Program Files\ABBYY FineReader 6.0 Sprint
[15/09/2007|03:33] C:\Program Files\Acer Arcade Deluxe
[10/08/2007|10:05] C:\Program Files\Acer GameZone
[15/09/2007|03:38] C:\Program Files\Acer Inc
[10/08/2007|09:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[10/08/2007|09:51] C:\Program Files\Adobe
[21/03/2008|12:09] C:\Program Files\Alwil Software
[15/09/2007|03:36] C:\Program Files\Apoint2K
[27/08/2008|15:40] C:\Program Files\Apple Software Update
[01/08/2008|17:25] C:\Program Files\Bonjour
[01/08/2008|17:22] C:\Program Files\Common Files
[10/08/2007|08:40] C:\Program Files\CONEXANT
[10/08/2007|09:43] C:\Program Files\CyberLink
[23/10/2007|20:14] C:\Program Files\DivX
[23/06/2008|19:20] C:\Program Files\epson
[23/10/2007|20:10] C:\Program Files\ffdshow
[23/10/2007|19:15] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[27/10/2007|19:22] C:\Program Files\Google
[23/10/2007|20:20] C:\Program Files\Illustrate
[03/08/2008|15:57] C:\Program Files\Infogrames
[03/08/2008|16:09] C:\Program Files\InstallShield Installation Information
[15/09/2007|03:26] C:\Program Files\Intel
[11/06/2008|18:31] C:\Program Files\Intelore
[07/09/2008|13:27] C:\Program Files\Internet Explorer
[01/08/2008|17:25] C:\Program Files\iPod
[01/08/2008|17:26] C:\Program Files\iTunes
[15/09/2007|03:32] C:\Program Files\Launch Manager
[03/08/2008|16:03] C:\Program Files\Maxis
[07/09/2008|14:09] C:\Program Files\Messenger Plus! Live
[31/10/2007|10:22] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[28/10/2007|16:25] C:\Program Files\Microsoft Office
[28/10/2007|16:25] C:\Program Files\Microsoft Visual Studio
[28/10/2007|16:21] C:\Program Files\Microsoft Visual Studio 8
[14/11/2007|20:44] C:\Program Files\Microsoft Works
[28/10/2007|16:24] C:\Program Files\Microsoft.NET
[07/09/2008|13:27] C:\Program Files\Movie Maker
[28/10/2007|16:25] C:\Program Files\MSBuild
[07/09/2008|14:09] C:\Program Files\MSN Messenger
[31/10/2007|10:19] C:\Program Files\MSXML 4.0
[10/08/2007|09:18] C:\Program Files\NewTech Infosystems
[01/08/2008|17:24] C:\Program Files\QuickTime
[10/08/2007|08:31] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[27/08/2008|15:39] C:\Program Files\Safari
[03/08/2008|16:09] C:\Program Files\The Adventure Company
[23/10/2007|20:16] C:\Program Files\ToniArts
[28/10/2007|14:27] C:\Program Files\TuneUp Utilities 2007
[16/07/2008|17:37] C:\Program Files\TuneUp Utilities 2008
[24/11/2007|14:07] C:\Program Files\Ubisoft
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[28/10/2007|16:50] C:\Program Files\VideoLAN
[07/09/2008|13:27] C:\Program Files\Windows Calendar
[07/09/2008|13:27] C:\Program Files\Windows Collaboration
[07/09/2008|13:27] C:\Program Files\Windows Defender
[07/09/2008|13:27] C:\Program Files\Windows Journal
[20/01/2008|19:19] C:\Program Files\Windows Live Toolbar
[07/09/2008|13:27] C:\Program Files\Windows Mail
[07/09/2008|13:27] C:\Program Files\Windows Media Player
[23/10/2007|19:15] C:\Program Files\Windows NT
[07/09/2008|13:27] C:\Program Files\Windows Photo Gallery
[07/09/2008|13:27] C:\Program Files\Windows Sidebar
[28/10/2007|13:48] C:\Program Files\WinRAR
[23/10/2007|19:19] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[10/08/2007|09:51] C:\Program Files\Common Files\Adobe
[01/08/2008|17:22] C:\Program Files\Common Files\Apple
[28/10/2007|16:25] C:\Program Files\Common Files\DESIGNER
[23/06/2008|19:24] C:\Program Files\Common Files\InstallShield
[10/08/2007|09:18] C:\Program Files\Common Files\LightScribe
[02/07/2008|18:04] C:\Program Files\Common Files\microsoft shared
[10/08/2007|09:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|09:19] C:\Program Files\Common Files\NewTech Infosystems
[10/08/2007|10:01] C:\Program Files\Common Files\Oberon Media
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[23/03/2008|11:43] C:\Program Files\Common Files\Symantec Shared
[07/09/2008|13:27] C:\Program Files\Common Files\System
[23/03/2008|11:52] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 91 Processes )

iexplore.exe ~ [PID:3992]
iexplore.exe ~ [PID:4576]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\Tool Software Software.n1p26
C:\ProgramData\camp 4 blue.3zp71lj
C:\ProgramData\Tool Software Software.qyq1728

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Ford drive four file
C:\ProgramData\Ford drive four file\Bore grim.exe
C:\ProgramData\Store Name Math
C:\ProgramData\Store Name Math\blsvhpka.exe
C:\ProgramData\Store Name Math\flap amen admin coal.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Biasdelete"="\"C:\\ProgramData\\Tool Software Software.qyq1728\""
"Four file program mode"="\"C:\\ProgramData\\camp 4 blue.3zp71lj\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-07 14:49:04
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections

--------------------\\ ROGUES ..

C:\Users\olive\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Antivirus 2008 PRO

--------------------\\ Cracks & Keygens ..

C:\Users\olive\Documents\Mes fichiers re‡us\TuneUp 2006\TuneUp Utilities 2006\TuneUp Utilities 2006 (Build 5.0.2327) German Keygen.exe


[F:77][D:11]-> C:\Users\olive\AppData\Local\Temp
[F:89][D:1]-> C:\Users\olive\AppData\Roaming\MICROS~1\Windows\Cookies
[F:25][D:4]-> C:\Users\olive\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:17][D:228]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 07/09/2008|14:50 - Option : [1]

--------------------\\ Fin du rapport a 14:50:24
[ UAC => 1 ]
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 6
swifer94
10 sept. 2008 à 20:33
--------------------\\ Lop S&D 4.2.4-1 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2310 @ 1.46GHz )
BIOS : Default System BIOS
USER : olive ( Not Administrator ! )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080909-0] 4.8.1229 (Activated)

"C:\Lop SD" ( MAJ : 06-09-2008|22:02 )
Option : [1] ( 10/09/2008|20:30 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[30/08/2008|10:47] C:\Users\olive\AppData\Local\Acer Arcade Deluxe
[23/10/2007|19:21] C:\Users\olive\AppData\Local\acer eNM
[23/03/2008|00:09] C:\Users\olive\AppData\Local\Adobe
[01/08/2008|17:23] C:\Users\olive\AppData\Local\Apple
[01/08/2008|21:13] C:\Users\olive\AppData\Local\Apple Computer
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Application Data
[03/07/2008|22:41] C:\Users\olive\AppData\Local\d3d9caps.dat
[03/09/2008|18:16] C:\Users\olive\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[31/10/2007|10:14] C:\Users\olive\AppData\Local\GDIPFONTCACHEV1.DAT
[27/10/2007|19:24] C:\Users\olive\AppData\Local\Google
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Historique
[10/09/2008|20:04] C:\Users\olive\AppData\Local\IconCache.db
[20/06/2008|07:36] C:\Users\olive\AppData\Local\Microsoft
[08/05/2008|11:57] C:\Users\olive\AppData\Local\Microsoft Games
[18/06/2008|14:39] C:\Users\olive\AppData\Local\Microsoft Help
[23/10/2007|19:21] C:\Users\olive\AppData\Local\PlayMovie
[30/08/2008|10:47] C:\Users\olive\AppData\Local\PowerCinema
[10/09/2008|20:27] C:\Users\olive\AppData\Local\Temp
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Temporary Internet Files
[27/10/2007|19:54] C:\Users\olive\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[10/09/2008 20:06][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[10/09/2008 19:44][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[10/09/2008 20:06][--ah-----] C:\Windows\tasks\SA.DAT
[10/09/2008 20:05][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/08/2007|09:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[10/08/2007|09:51] C:\ProgramData\Adobe
[01/08/2008|17:22] C:\ProgramData\Apple
[01/08/2008|17:25] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[23/10/2007|19:15] C:\ProgramData\Bureau
[02/09/2008|22:01] C:\ProgramData\camp 4 blue.3zp71lj
[28/10/2007|18:32] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[23/06/2008|19:17] C:\ProgramData\EPSON
[23/10/2007|19:15] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[02/09/2008|22:01] C:\ProgramData\Ford drive four file
[27/10/2007|18:58] C:\ProgramData\Google
[23/10/2007|19:15] C:\ProgramData\Menu D‚marrer
[21/03/2008|12:21] C:\ProgramData\Microsoft
[24/08/2008|10:59] C:\ProgramData\Microsoft Help
[23/10/2007|19:15] C:\ProgramData\ModŠles
[02/11/2006|15:02] C:\ProgramData\Start Menu
[05/09/2008|16:50] C:\ProgramData\Store Name Math
[23/03/2008|11:43] C:\ProgramData\Symantec
[02/11/2006|15:02] C:\ProgramData\Templates
[02/09/2008|22:01] C:\ProgramData\Tool Software Software.n1p26
[02/09/2008|22:01] C:\ProgramData\Tool Software Software.qyq1728
[28/10/2007|14:25] C:\ProgramData\TuneUp Software
[23/06/2008|19:22] C:\ProgramData\UDL
[23/10/2007|20:23] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[23/06/2008|19:19] C:\Program Files\ABBYY FineReader 6.0 Sprint
[15/09/2007|03:33] C:\Program Files\Acer Arcade Deluxe
[10/09/2008|19:48] C:\Program Files\Acer GameZone
[15/09/2007|03:38] C:\Program Files\Acer Inc
[10/08/2007|09:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[10/08/2007|09:51] C:\Program Files\Adobe
[21/03/2008|12:09] C:\Program Files\Alwil Software
[15/09/2007|03:36] C:\Program Files\Apoint2K
[27/08/2008|15:40] C:\Program Files\Apple Software Update
[01/08/2008|17:25] C:\Program Files\Bonjour
[10/09/2008|19:45] C:\Program Files\Common Files
[10/08/2007|08:40] C:\Program Files\CONEXANT
[10/08/2007|09:43] C:\Program Files\CyberLink
[23/10/2007|20:14] C:\Program Files\DivX
[23/06/2008|19:20] C:\Program Files\epson
[23/10/2007|20:10] C:\Program Files\ffdshow
[23/10/2007|19:15] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[27/10/2007|19:22] C:\Program Files\Google
[23/10/2007|20:20] C:\Program Files\Illustrate
[03/08/2008|15:57] C:\Program Files\Infogrames
[03/08/2008|16:09] C:\Program Files\InstallShield Installation Information
[15/09/2007|03:26] C:\Program Files\Intel
[11/06/2008|18:31] C:\Program Files\Intelore
[07/09/2008|13:27] C:\Program Files\Internet Explorer
[01/08/2008|17:25] C:\Program Files\iPod
[01/08/2008|17:26] C:\Program Files\iTunes
[15/09/2007|03:32] C:\Program Files\Launch Manager
[03/08/2008|16:03] C:\Program Files\Maxis
[31/10/2007|10:22] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[28/10/2007|16:25] C:\Program Files\Microsoft Office
[28/10/2007|16:25] C:\Program Files\Microsoft Visual Studio
[28/10/2007|16:21] C:\Program Files\Microsoft Visual Studio 8
[14/11/2007|20:44] C:\Program Files\Microsoft Works
[28/10/2007|16:24] C:\Program Files\Microsoft.NET
[07/09/2008|13:27] C:\Program Files\Movie Maker
[28/10/2007|16:25] C:\Program Files\MSBuild
[07/09/2008|14:09] C:\Program Files\MSN Messenger
[31/10/2007|10:19] C:\Program Files\MSXML 4.0
[10/08/2007|09:18] C:\Program Files\NewTech Infosystems
[01/08/2008|17:24] C:\Program Files\QuickTime
[10/08/2007|08:31] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[03/08/2008|16:09] C:\Program Files\The Adventure Company
[23/10/2007|20:16] C:\Program Files\ToniArts
[28/10/2007|14:27] C:\Program Files\TuneUp Utilities 2007
[16/07/2008|17:37] C:\Program Files\TuneUp Utilities 2008
[24/11/2007|14:07] C:\Program Files\Ubisoft
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[28/10/2007|16:50] C:\Program Files\VideoLAN
[07/09/2008|13:27] C:\Program Files\Windows Calendar
[07/09/2008|13:27] C:\Program Files\Windows Collaboration
[07/09/2008|13:27] C:\Program Files\Windows Defender
[07/09/2008|13:27] C:\Program Files\Windows Journal
[20/01/2008|19:19] C:\Program Files\Windows Live Toolbar
[07/09/2008|13:27] C:\Program Files\Windows Mail
[07/09/2008|13:27] C:\Program Files\Windows Media Player
[23/10/2007|19:15] C:\Program Files\Windows NT
[07/09/2008|13:27] C:\Program Files\Windows Photo Gallery
[07/09/2008|13:27] C:\Program Files\Windows Sidebar
[28/10/2007|13:48] C:\Program Files\WinRAR
[23/10/2007|19:19] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[10/08/2007|09:51] C:\Program Files\Common Files\Adobe
[01/08/2008|17:22] C:\Program Files\Common Files\Apple
[28/10/2007|16:25] C:\Program Files\Common Files\DESIGNER
[23/06/2008|19:24] C:\Program Files\Common Files\InstallShield
[10/08/2007|09:18] C:\Program Files\Common Files\LightScribe
[02/07/2008|18:04] C:\Program Files\Common Files\microsoft shared
[10/08/2007|09:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|09:19] C:\Program Files\Common Files\NewTech Infosystems
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[23/03/2008|11:43] C:\Program Files\Common Files\Symantec Shared
[07/09/2008|13:27] C:\Program Files\Common Files\System
[23/03/2008|11:52] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 94 Processes )

iexplore.exe ~ [PID:4280]
iexplore.exe ~ [PID:3288]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\Tool Software Software.n1p26
C:\ProgramData\camp 4 blue.3zp71lj
C:\ProgramData\Tool Software Software.qyq1728

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Ford drive four file
C:\ProgramData\Ford drive four file\Bore grim.exe
C:\ProgramData\Store Name Math
C:\ProgramData\Store Name Math\blsvhpka.exe
C:\ProgramData\Store Name Math\flap amen admin coal.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Biasdelete"="\"C:\\ProgramData\\Tool Software Software.qyq1728\""
"Four file program mode"="\"C:\\ProgramData\\camp 4 blue.3zp71lj\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-10 20:31:08
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections

--------------------\\ ROGUES ..

C:\Users\olive\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Antivirus 2008 PRO

--------------------\\ Cracks & Keygens ..

C:\Users\olive\Documents\Mes fichiers re‡us\TuneUp 2006\TuneUp Utilities 2006\TuneUp Utilities 2006 (Build 5.0.2327) German Keygen.exe


[F:34][D:9]-> C:\Users\olive\AppData\Local\Temp
[F:98][D:1]-> C:\Users\olive\AppData\Roaming\MICROS~1\Windows\Cookies
[F:22][D:4]-> C:\Users\olive\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:233]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 07/09/2008|14:50 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 10/09/2008|19:57 - Option : [1]
3 - "C:\Lop SD\LopR_3.txt" - 10/09/2008|20:32 - Option : [1]

--------------------\\ Fin du rapport a 20:32:18
[ UAC => 1 ]
0
Réponse 6 / 6
swifer94
10 sept. 2008 à 20:33
--------------------\\ Lop S&D 4.2.4-1 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2310 @ 1.46GHz )
BIOS : Default System BIOS
USER : olive ( Not Administrator ! )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080909-0] 4.8.1229 (Activated)

"C:\Lop SD" ( MAJ : 06-09-2008|22:02 )
Option : [1] ( 10/09/2008|20:30 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[30/08/2008|10:47] C:\Users\olive\AppData\Local\Acer Arcade Deluxe
[23/10/2007|19:21] C:\Users\olive\AppData\Local\acer eNM
[23/03/2008|00:09] C:\Users\olive\AppData\Local\Adobe
[01/08/2008|17:23] C:\Users\olive\AppData\Local\Apple
[01/08/2008|21:13] C:\Users\olive\AppData\Local\Apple Computer
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Application Data
[03/07/2008|22:41] C:\Users\olive\AppData\Local\d3d9caps.dat
[03/09/2008|18:16] C:\Users\olive\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[31/10/2007|10:14] C:\Users\olive\AppData\Local\GDIPFONTCACHEV1.DAT
[27/10/2007|19:24] C:\Users\olive\AppData\Local\Google
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Historique
[10/09/2008|20:04] C:\Users\olive\AppData\Local\IconCache.db
[20/06/2008|07:36] C:\Users\olive\AppData\Local\Microsoft
[08/05/2008|11:57] C:\Users\olive\AppData\Local\Microsoft Games
[18/06/2008|14:39] C:\Users\olive\AppData\Local\Microsoft Help
[23/10/2007|19:21] C:\Users\olive\AppData\Local\PlayMovie
[30/08/2008|10:47] C:\Users\olive\AppData\Local\PowerCinema
[10/09/2008|20:27] C:\Users\olive\AppData\Local\Temp
[23/10/2007|19:19] C:\Users\olive\AppData\Local\Temporary Internet Files
[27/10/2007|19:54] C:\Users\olive\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[10/09/2008 20:06][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[10/09/2008 19:44][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[10/09/2008 20:06][--ah-----] C:\Windows\tasks\SA.DAT
[10/09/2008 20:05][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/08/2007|09:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[10/08/2007|09:51] C:\ProgramData\Adobe
[01/08/2008|17:22] C:\ProgramData\Apple
[01/08/2008|17:25] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[23/10/2007|19:15] C:\ProgramData\Bureau
[02/09/2008|22:01] C:\ProgramData\camp 4 blue.3zp71lj
[28/10/2007|18:32] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[23/06/2008|19:17] C:\ProgramData\EPSON
[23/10/2007|19:15] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[02/09/2008|22:01] C:\ProgramData\Ford drive four file
[27/10/2007|18:58] C:\ProgramData\Google
[23/10/2007|19:15] C:\ProgramData\Menu D‚marrer
[21/03/2008|12:21] C:\ProgramData\Microsoft
[24/08/2008|10:59] C:\ProgramData\Microsoft Help
[23/10/2007|19:15] C:\ProgramData\ModŠles
[02/11/2006|15:02] C:\ProgramData\Start Menu
[05/09/2008|16:50] C:\ProgramData\Store Name Math
[23/03/2008|11:43] C:\ProgramData\Symantec
[02/11/2006|15:02] C:\ProgramData\Templates
[02/09/2008|22:01] C:\ProgramData\Tool Software Software.n1p26
[02/09/2008|22:01] C:\ProgramData\Tool Software Software.qyq1728
[28/10/2007|14:25] C:\ProgramData\TuneUp Software
[23/06/2008|19:22] C:\ProgramData\UDL
[23/10/2007|20:23] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[23/06/2008|19:19] C:\Program Files\ABBYY FineReader 6.0 Sprint
[15/09/2007|03:33] C:\Program Files\Acer Arcade Deluxe
[10/09/2008|19:48] C:\Program Files\Acer GameZone
[15/09/2007|03:38] C:\Program Files\Acer Inc
[10/08/2007|09:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[10/08/2007|09:51] C:\Program Files\Adobe
[21/03/2008|12:09] C:\Program Files\Alwil Software
[15/09/2007|03:36] C:\Program Files\Apoint2K
[27/08/2008|15:40] C:\Program Files\Apple Software Update
[01/08/2008|17:25] C:\Program Files\Bonjour
[10/09/2008|19:45] C:\Program Files\Common Files
[10/08/2007|08:40] C:\Program Files\CONEXANT
[10/08/2007|09:43] C:\Program Files\CyberLink
[23/10/2007|20:14] C:\Program Files\DivX
[23/06/2008|19:20] C:\Program Files\epson
[23/10/2007|20:10] C:\Program Files\ffdshow
[23/10/2007|19:15] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[27/10/2007|19:22] C:\Program Files\Google
[23/10/2007|20:20] C:\Program Files\Illustrate
[03/08/2008|15:57] C:\Program Files\Infogrames
[03/08/2008|16:09] C:\Program Files\InstallShield Installation Information
[15/09/2007|03:26] C:\Program Files\Intel
[11/06/2008|18:31] C:\Program Files\Intelore
[07/09/2008|13:27] C:\Program Files\Internet Explorer
[01/08/2008|17:25] C:\Program Files\iPod
[01/08/2008|17:26] C:\Program Files\iTunes
[15/09/2007|03:32] C:\Program Files\Launch Manager
[03/08/2008|16:03] C:\Program Files\Maxis
[31/10/2007|10:22] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[28/10/2007|16:25] C:\Program Files\Microsoft Office
[28/10/2007|16:25] C:\Program Files\Microsoft Visual Studio
[28/10/2007|16:21] C:\Program Files\Microsoft Visual Studio 8
[14/11/2007|20:44] C:\Program Files\Microsoft Works
[28/10/2007|16:24] C:\Program Files\Microsoft.NET
[07/09/2008|13:27] C:\Program Files\Movie Maker
[28/10/2007|16:25] C:\Program Files\MSBuild
[07/09/2008|14:09] C:\Program Files\MSN Messenger
[31/10/2007|10:19] C:\Program Files\MSXML 4.0
[10/08/2007|09:18] C:\Program Files\NewTech Infosystems
[01/08/2008|17:24] C:\Program Files\QuickTime
[10/08/2007|08:31] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[03/08/2008|16:09] C:\Program Files\The Adventure Company
[23/10/2007|20:16] C:\Program Files\ToniArts
[28/10/2007|14:27] C:\Program Files\TuneUp Utilities 2007
[16/07/2008|17:37] C:\Program Files\TuneUp Utilities 2008
[24/11/2007|14:07] C:\Program Files\Ubisoft
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[28/10/2007|16:50] C:\Program Files\VideoLAN
[07/09/2008|13:27] C:\Program Files\Windows Calendar
[07/09/2008|13:27] C:\Program Files\Windows Collaboration
[07/09/2008|13:27] C:\Program Files\Windows Defender
[07/09/2008|13:27] C:\Program Files\Windows Journal
[20/01/2008|19:19] C:\Program Files\Windows Live Toolbar
[07/09/2008|13:27] C:\Program Files\Windows Mail
[07/09/2008|13:27] C:\Program Files\Windows Media Player
[23/10/2007|19:15] C:\Program Files\Windows NT
[07/09/2008|13:27] C:\Program Files\Windows Photo Gallery
[07/09/2008|13:27] C:\Program Files\Windows Sidebar
[28/10/2007|13:48] C:\Program Files\WinRAR
[23/10/2007|19:19] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[10/08/2007|09:51] C:\Program Files\Common Files\Adobe
[01/08/2008|17:22] C:\Program Files\Common Files\Apple
[28/10/2007|16:25] C:\Program Files\Common Files\DESIGNER
[23/06/2008|19:24] C:\Program Files\Common Files\InstallShield
[10/08/2007|09:18] C:\Program Files\Common Files\LightScribe
[02/07/2008|18:04] C:\Program Files\Common Files\microsoft shared
[10/08/2007|09:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|09:19] C:\Program Files\Common Files\NewTech Infosystems
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[23/03/2008|11:43] C:\Program Files\Common Files\Symantec Shared
[07/09/2008|13:27] C:\Program Files\Common Files\System
[23/03/2008|11:52] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 94 Processes )

iexplore.exe ~ [PID:4280]
iexplore.exe ~ [PID:3288]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\Tool Software Software.n1p26
C:\ProgramData\camp 4 blue.3zp71lj
C:\ProgramData\Tool Software Software.qyq1728

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Ford drive four file
C:\ProgramData\Ford drive four file\Bore grim.exe
C:\ProgramData\Store Name Math
C:\ProgramData\Store Name Math\blsvhpka.exe
C:\ProgramData\Store Name Math\flap amen admin coal.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Biasdelete"="\"C:\\ProgramData\\Tool Software Software.qyq1728\""
"Four file program mode"="\"C:\\ProgramData\\camp 4 blue.3zp71lj\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-10 20:31:08
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections

--------------------\\ ROGUES ..

C:\Users\olive\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Antivirus 2008 PRO

--------------------\\ Cracks & Keygens ..

C:\Users\olive\Documents\Mes fichiers re‡us\TuneUp 2006\TuneUp Utilities 2006\TuneUp Utilities 2006 (Build 5.0.2327) German Keygen.exe


[F:34][D:9]-> C:\Users\olive\AppData\Local\Temp
[F:98][D:1]-> C:\Users\olive\AppData\Roaming\MICROS~1\Windows\Cookies
[F:22][D:4]-> C:\Users\olive\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:233]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 07/09/2008|14:50 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 10/09/2008|19:57 - Option : [1]
3 - "C:\Lop SD\LopR_3.txt" - 10/09/2008|20:32 - Option : [1]

--------------------\\ Fin du rapport a 20:32:18
[ UAC => 1 ]
0

Discussions similaires

Veuillez contactez l'assistance itunes pour finaliser la transaction
chico -
Panth33ra -

1 réponse
Compte Snapchat bloqué temporairement
LeEL -
bazfile -

3 réponses
Tampons d'encre en fin de vie
koubilai -
allpages -

24 réponses
ERREUR 0x80070643
StellaChris -
brucine -

1 réponse
Assistance pour le "ITUNES"
LYL -
odi153 -

1 réponse