Mon rapport HIJACKTHIS

Question

Bonjour,
voici mon rapport hijackthis pouvez vous vérifier qu'il n'y a pas d'anomalies dedans s'il vous plait, merci 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:10, on 01/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\System32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [AXIS TONS THE MP3] C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons\Log Wave.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Mess wait] C:\DOCUME~1\THIBAU~1\APPLIC~1\ADMIN6~1\Frag Logo.exe
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1006\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'MOUTERDE')
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1006\..\Run: [Mess wait] C:\DOCUME~1\MOUTERDE\APPLIC~1\ADMIN6~1\Frag Logo.exe (User 'MOUTERDE')
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Elodie')
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1008\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe (User 'Elodie')
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1008\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" (User 'Elodie')
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1010\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Master Sylvain')
O4 - HKUS\S-1-5-21-445195255-1869670714-2319047339-1010\..\Policies\Explorer\Run: [{7C261F79-0BFA-1036-0629-050428050021}] "C:\Program Files\Fichiers communs\{7C261F79-0BFA-1036-0629-050428050021}\Update.exe" mc-110-12-0000272 (User 'Master Sylvain')
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

ep44 · Answer

Bonsoir 

ton rapport et en effet infectés 

Télécharge LOP S&D d'Eric71 ici https://sites.google.com/site/eric71mespages/lop.sd.exe

Double-clique dessus pour lancer l'installation.
Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
Séléctionne la langue souhaitée , puis choisis l'Option 2 ( Suppression )
Patiente jusqu'à la fin du scan.
Poste le rapport généré (situé aussi ici C:\lopR.txt )

( Si le Bureau ne réapparaît pas, lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

thibautdu25 · Answer

voici mon rapport merci d'avance pour votre prochaine réponse :



   -----------------------[  Lop S&D 4.2.1-2  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : Thibaut_2 ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 01/06/2008 | 20:57:25,87 ] [ PC : PRINCIPAL ]
   [ MAJ : 01-06-2008 | 15:51 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons\Log Wave.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1\BAGS TWO ANTE DEFY.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1\Frag Logo.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1\hkbtrlsw.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1\kklxdfzq.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1\qiwaghvq.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1yfdtvkz.exe
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1\Settings Link Debug.exe
   Supprimé! - C:\DOCUME~1\MOUTERDE\APPLIC~1\admin6~1\Frag Logo.exe
   Supprimé! - C:\DOCUME~1\THIBAU~1\APPLIC~1\admin6~1\BAGS TWO ANTE DEFY.exe
   Supprimé! - C:\DOCUME~1\THIBAU~1\APPLIC~1\admin6~1\Frag Logo.exe
   Supprimé! - C:\DOCUME~1\THIBAU~1\APPLIC~1\admin6~1
xhbgcuh.exe
   Supprimé! - C:\DOCUME~1\THIBAU~1\APPLIC~1\admin6~1\Settings Link Debug.exe
   Supprimé! - C:\WINDOWS\Tasks\A758B85B918B2A87.job
   Supprimé! - C:\WINDOWS\Tasks\AFC6B2BC918523A4.job
   Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons
   Supprimé! - C:\DOCUME~1\Elodie\APPLIC~1\admin6~1
   Supprimé! - C:\DOCUME~1\MOUTERDE\APPLIC~1\admin6~1
   Supprimé! - C:\DOCUME~1\THIBAU~1\APPLIC~1\admin6~1
   Supprimé! - C:\Program Files\admin6~1
   Supprimé! - C:\Program Files\Circle Developement
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [25/08/2005|16:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [23/02/2008|14:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Grisoft
   [25/08/2005|14:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [25/08/2005|15:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\InterVideo
   [25/08/2005|15:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

   [11/02/2008|22:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [28/03/2008|17:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Age of Empires 3
   [25/08/2005|14:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [23/07/2007|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [25/08/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [23/08/2007|16:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [16/03/2008|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CDTEST
   [12/04/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
   [25/08/2005|16:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [24/11/2007|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
   [23/06/2007|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [09/09/2006|18:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [23/02/2008|14:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [23/12/2005|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [22/02/2006|14:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
   [11/12/2005|12:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
   [11/12/2005|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [31/05/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [06/05/2008|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
   [08/10/2005|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [09/09/2007|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/03/2006|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
   [24/05/2008|14:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [05/10/2005|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
   [22/12/2006|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nikon
   [28/07/2006|21:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
   [25/08/2005|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [10/04/2008|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
   [02/02/2008|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PKP_DLec.DAT
   [14/10/2006|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [09/03/2008|16:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Recisio
   [25/03/2008|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMon
   [25/08/2005|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [22/10/2005|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [22/05/2008|11:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
   [16/01/2007|18:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [04/08/2006|01:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
   [31/05/2008|20:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [29/01/2006|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
   [18/09/2006|07:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
   [25/03/2008|19:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [01/08/2006|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [24/11/2007|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
   [08/01/2006|12:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [24/07/2007|22:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
   [31/05/2008|19:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [25/08/2005|16:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [25/08/2005|14:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [25/08/2005|15:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterVideo
   [25/08/2005|15:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [11/04/2008|11:12] C:\DOCUME~1\Elodie\APPLIC~1\Adobe
   [01/11/2005|18:46] C:\DOCUME~1\Elodie\APPLIC~1\AdobeUM
   [01/01/2007|17:15] C:\DOCUME~1\Elodie\APPLIC~1\Apple Computer
   [19/11/2007|21:13] C:\DOCUME~1\Elodie\APPLIC~1\ArcSoft
   [19/05/2007|15:59] C:\DOCUME~1\Elodie\APPLIC~1\Canon
   [10/03/2006|21:59] C:\DOCUME~1\Elodie\APPLIC~1\Corel
   [28/05/2008|19:19] C:\DOCUME~1\Elodie\APPLIC~1\Creative
   [25/08/2005|16:13] C:\DOCUME~1\Elodie\APPLIC~1\desktop.ini
   [06/03/2007|14:21] C:\DOCUME~1\Elodie\APPLIC~1\DivX
   [06/03/2007|14:11] C:\DOCUME~1\Elodie\APPLIC~1\dvdcss
   [15/01/2007|22:21] C:\DOCUME~1\Elodie\APPLIC~1\GDIPFONTCACHEV1.DAT
   [16/09/2007|15:09] C:\DOCUME~1\Elodie\APPLIC~1\Google
   [23/02/2008|14:23] C:\DOCUME~1\Elodie\APPLIC~1\Grisoft
   [01/11/2005|13:54] C:\DOCUME~1\Elodie\APPLIC~1\Help
   [23/09/2007|18:40] C:\DOCUME~1\Elodie\APPLIC~1\Identities
   [31/05/2008|19:31] C:\DOCUME~1\Elodie\APPLIC~1\inst.exe
   [25/08/2005|15:05] C:\DOCUME~1\Elodie\APPLIC~1\InterVideo
   [21/07/2006|20:24] C:\DOCUME~1\Elodie\APPLIC~1\Lavasoft
   [30/03/2008|12:19] C:\DOCUME~1\Elodie\APPLIC~1\LimeWire
   [29/08/2007|15:58] C:\DOCUME~1\Elodie\APPLIC~1\Macromedia
   [31/05/2008|20:49] C:\DOCUME~1\Elodie\APPLIC~1\Malwarebytes
   [22/01/2008|15:53] C:\DOCUME~1\Elodie\APPLIC~1\Microsoft
   [03/02/2008|14:27] C:\DOCUME~1\Elodie\APPLIC~1\Mozilla
   [07/10/2005|21:41] C:\DOCUME~1\Elodie\APPLIC~1\MSN Search Toolbar
   [22/12/2006|17:27] C:\DOCUME~1\Elodie\APPLIC~1\Nikon
   [31/05/2008|19:31] C:\DOCUME~1\Elodie\APPLIC~1\pcouffin.cat
   [31/05/2008|19:31] C:\DOCUME~1\Elodie\APPLIC~1\pcouffin.inf
   [31/05/2008|19:31] C:\DOCUME~1\Elodie\APPLIC~1\pcouffin.log
   [31/05/2008|19:31] C:\DOCUME~1\Elodie\APPLIC~1\pcouffin.sys
   [10/12/2006|15:09] C:\DOCUME~1\Elodie\APPLIC~1\Pic2Pic
   [03/02/2008|14:30] C:\DOCUME~1\Elodie\APPLIC~1\Real
   [22/10/2005|21:31] C:\DOCUME~1\Elodie\APPLIC~1\ScanSoft
   [07/05/2008|22:56] C:\DOCUME~1\Elodie\APPLIC~1\SiteAdvisor
   [13/01/2007|21:19] C:\DOCUME~1\Elodie\APPLIC~1\Skype
   [21/02/2006|23:13] C:\DOCUME~1\Elodie\APPLIC~1\Sun
   [03/02/2008|14:28] C:\DOCUME~1\Elodie\APPLIC~1\Talkback
   [22/01/2008|15:25] C:\DOCUME~1\Elodie\APPLIC~1\Template
   [10/08/2006|11:13] C:\DOCUME~1\Elodie\APPLIC~1\Ulead Systems
   [28/09/2007|21:20] C:\DOCUME~1\Elodie\APPLIC~1\vlc
   [31/05/2008|19:32] C:\DOCUME~1\Elodie\APPLIC~1\Vso
   [22/01/2008|15:25] C:\DOCUME~1\Elodie\APPLIC~1\wklnhst.dat

   [25/08/2005|16:13] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
   [25/08/2005|14:21] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [25/08/2005|15:05] C:\DOCUME~1\INVIT~1\APPLIC~1\InterVideo
   [16/06/2006|08:51] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [16/06/2006|08:51] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [16/06/2006|08:51] C:\DOCUME~1\INVIT~1\APPLIC~1\MSN Search Toolbar


   [10/11/2007|14:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [22/05/2008|18:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor

   [10/04/2008|23:11] C:\DOCUME~1\MASTER~1\APPLIC~1\Adobe
   [28/01/2007|20:34] C:\DOCUME~1\MASTER~1\APPLIC~1\AdobeUM
   [25/02/2007|13:09] C:\DOCUME~1\MASTER~1\APPLIC~1\Ahead
   [25/12/2005|20:16] C:\DOCUME~1\MASTER~1\APPLIC~1\Alien Skin
   [23/07/2007|21:58] C:\DOCUME~1\MASTER~1\APPLIC~1\Apple Computer
   [12/09/2007|10:43] C:\DOCUME~1\MASTER~1\APPLIC~1\Canon
   [23/12/2005|22:10] C:\DOCUME~1\MASTER~1\APPLIC~1\Corel
   [25/08/2005|16:13] C:\DOCUME~1\MASTER~1\APPLIC~1\desktop.ini
   [22/10/2006|14:07] C:\DOCUME~1\MASTER~1\APPLIC~1\DivX
   [09/03/2007|15:29] C:\DOCUME~1\MASTER~1\APPLIC~1\GDIPFONTCACHEV1.DAT
   [18/11/2005|22:28] C:\DOCUME~1\MASTER~1\APPLIC~1\Google
   [23/02/2008|18:09] C:\DOCUME~1\MASTER~1\APPLIC~1\Grisoft
   [04/09/2006|21:09] C:\DOCUME~1\MASTER~1\APPLIC~1\Hamachi
   [03/03/2006|22:27] C:\DOCUME~1\MASTER~1\APPLIC~1\Help
   [25/08/2005|14:21] C:\DOCUME~1\MASTER~1\APPLIC~1\Identities
   [29/10/2006|19:26] C:\DOCUME~1\MASTER~1\APPLIC~1\InstallShield
   [25/08/2005|15:05] C:\DOCUME~1\MASTER~1\APPLIC~1\InterVideo
   [11/05/2006|18:59] C:\DOCUME~1\MASTER~1\APPLIC~1\La Bataille pour la Terre du Milieu
   [27/05/2006|14:28] C:\DOCUME~1\MASTER~1\APPLIC~1\Lavasoft
   [25/06/2007|11:05] C:\DOCUME~1\MASTER~1\APPLIC~1\Macromedia
   [30/12/2007|13:13] C:\DOCUME~1\MASTER~1\APPLIC~1\Microsoft
   [04/11/2006|17:10] C:\DOCUME~1\MASTER~1\APPLIC~1\Microsoft Games
   [16/06/2006|09:06] C:\DOCUME~1\MASTER~1\APPLIC~1\Mozilla
   [10/08/2006|13:44] C:\DOCUME~1\MASTER~1\APPLIC~1\Pic2Pic
   [10/02/2008|16:31] C:\DOCUME~1\MASTER~1\APPLIC~1\Real
   [25/07/2006|19:03] C:\DOCUME~1\MASTER~1\APPLIC~1\ScanSoft
   [24/05/2008|18:33] C:\DOCUME~1\MASTER~1\APPLIC~1\SiteAdvisor
   [17/07/2007|20:42] C:\DOCUME~1\MASTER~1\APPLIC~1\Skype
   [17/05/2006|11:22] C:\DOCUME~1\MASTER~1\APPLIC~1\Steganos Secure FileSharing 6
   [13/02/2006|15:18] C:\DOCUME~1\MASTER~1\APPLIC~1\Sun
   [14/05/2006|11:03] C:\DOCUME~1\MASTER~1\APPLIC~1\Symantec
   [19/11/2005|20:01] C:\DOCUME~1\MASTER~1\APPLIC~1\Template
   [01/08/2006|17:19] C:\DOCUME~1\MASTER~1\APPLIC~1\Ulead Systems
   [02/08/2006|20:20] C:\DOCUME~1\MASTER~1\APPLIC~1\vlc
   [17/12/2006|23:10] C:\DOCUME~1\MASTER~1\APPLIC~1\wklnhst.dat
   [07/08/2006|13:53] C:\DOCUME~1\MASTER~1\APPLIC~1\Xfire

   [10/04/2008|14:14] C:\DOCUME~1\MOUTERDE\APPLIC~1\Adobe
   [16/05/2006|08:07] C:\DOCUME~1\MOUTERDE\APPLIC~1\AdobeUM
   [26/05/2008|19:47] C:\DOCUME~1\MOUTERDE\APPLIC~1\Apple Computer
   [17/05/2008|18:23] C:\DOCUME~1\MOUTERDE\APPLIC~1\Canon
   [24/12/2005|17:12] C:\DOCUME~1\MOUTERDE\APPLIC~1\Corel
   [25/08/2005|16:13] C:\DOCUME~1\MOUTERDE\APPLIC~1\desktop.ini
   [03/02/2007|16:23] C:\DOCUME~1\MOUTERDE\APPLIC~1\DivX
   [07/07/2006|21:13] C:\DOCUME~1\MOUTERDE\APPLIC~1\GDIPFONTCACHEV1.DAT
   [29/10/2007|17:24] C:\DOCUME~1\MOUTERDE\APPLIC~1\Google
   [08/10/2006|19:16] C:\DOCUME~1\MOUTERDE\APPLIC~1\Hamachi
   [07/10/2005|13:43] C:\DOCUME~1\MOUTERDE\APPLIC~1\Help
   [18/11/2005|21:59] C:\DOCUME~1\MOUTERDE\APPLIC~1\Identities
   [25/08/2005|15:05] C:\DOCUME~1\MOUTERDE\APPLIC~1\InterVideo
   [21/03/2006|19:43] C:\DOCUME~1\MOUTERDE\APPLIC~1\La Bataille pour la Terre du Milieu
   [24/08/2006|22:45] C:\DOCUME~1\MOUTERDE\APPLIC~1\Lavasoft
   [14/03/2006|13:14] C:\DOCUME~1\MOUTERDE\APPLIC~1\LimeWire
   [24/03/2006|21:57] C:\DOCUME~1\MOUTERDE\APPLIC~1\Macromedia
   [10/04/2008|16:09] C:\DOCUME~1\MOUTERDE\APPLIC~1\Microsoft
   [05/10/2005|21:52] C:\DOCUME~1\MOUTERDE\APPLIC~1\MSN Search Toolbar
   [05/10/2005|21:23] C:\DOCUME~1\MOUTERDE\APPLIC~1\MSNInstaller
   [14/03/2008|11:48] C:\DOCUME~1\MOUTERDE\APPLIC~1\Real
   [07/10/2005|17:23] C:\DOCUME~1\MOUTERDE\APPLIC~1\ScanSoft
   [01/06/2008|17:44] C:\DOCUME~1\MOUTERDE\APPLIC~1\SiteAdvisor
   [21/07/2006|11:48] C:\DOCUME~1\MOUTERDE\APPLIC~1\Skype
   [26/02/2006|17:06] C:\DOCUME~1\MOUTERDE\APPLIC~1\Sun
   [05/10/2005|18:58] C:\DOCUME~1\MOUTERDE\APPLIC~1\Symantec
   [10/10/2005|10:09] C:\DOCUME~1\MOUTERDE\APPLIC~1\Template
   [22/05/2006|07:42] C:\DOCUME~1\MOUTERDE\APPLIC~1\Ulead Systems
   [28/05/2008|08:36] C:\DOCUME~1\MOUTERDE\APPLIC~1\wklnhst.dat
   [28/08/2007|20:51] C:\DOCUME~1\MOUTERDE\APPLIC~1\Xfire

   [25/08/2005|14:21] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


   [10/02/2008|14:35] C:\DOCUME~1\THIBAU~1\APPLIC~1\Adobe
   [21/05/2007|18:58] C:\DOCUME~1\THIBAU~1\APPLIC~1\AdobeUM
   [31/08/2007|16:42] C:\DOCUME~1\THIBAU~1\APPLIC~1\Apple Computer
   [20/05/2007|17:04] C:\DOCUME~1\THIBAU~1\APPLIC~1\ArcSoft
   [10/05/2008|17:18] C:\DOCUME~1\THIBAU~1\APPLIC~1\BSplayer
   [08/05/2008|20:09] C:\DOCUME~1\THIBAU~1\APPLIC~1\BSplayer Pro
   [31/08/2007|16:43] C:\DOCUME~1\THIBAU~1\APPLIC~1\Corel
   [25/08/2005|16:13] C:\DOCUME~1\THIBAU~1\APPLIC~1\desktop.ini
   [24/02/2007|11:32] C:\DOCUME~1\THIBAU~1\APPLIC~1\DivX
   [22/02/2007|21:00] C:\DOCUME~1\THIBAU~1\APPLIC~1\GDIPFONTCACHEV1.DAT
   [13/09/2007|19:01] C:\DOCUME~1\THIBAU~1\APPLIC~1\Google
   [24/08/2007|10:58] C:\DOCUME~1\THIBAU~1\APPLIC~1\Hamachi
   [25/08/2005|14:21] C:\DOCUME~1\THIBAU~1\APPLIC~1\Identities
   [06/01/2008|14:00] C:\DOCUME~1\THIBAU~1\APPLIC~1\InstallShield Installation Information
   [25/08/2005|15:05] C:\DOCUME~1\THIBAU~1\APPLIC~1\InterVideo
   [12/01/2008|21:16] C:\DOCUME~1\THIBAU~1\APPLIC~1\Karaoke-Sing-n-Burn.INI
   [25/03/2008|21:27] C:\DOCUME~1\THIBAU~1\APPLIC~1\Lavasoft
   [02/03/2008|13:24] C:\DOCUME~1\THIBAU~1\APPLIC~1\LimeWire
   [01/07/2007|11:06] C:\DOCUME~1\THIBAU~1\APPLIC~1\Macromedia
   [10/04/2008|22:38] C:\DOCUME~1\THIBAU~1\APPLIC~1\Microsoft
   [10/02/2008|14:37] C:\DOCUME~1\THIBAU~1\APPLIC~1\Mozilla
   [01/06/2007|15:59] C:\DOCUME~1\THIBAU~1\APPLIC~1\My Battle for Middle-earth Files
   [24/11/2007|19:52] C:\DOCUME~1\THIBAU~1\APPLIC~1\Nikon
   [31/08/2007|16:51] C:\DOCUME~1\THIBAU~1\APPLIC~1\Pic2Pic
   [10/04/2008|22:37] C:\DOCUME~1\THIBAU~1\APPLIC~1\Real
   [22/03/2007|17:44] C:\DOCUME~1\THIBAU~1\APPLIC~1\Screenshot Sender
   [08/05/2008|11:38] C:\DOCUME~1\THIBAU~1\APPLIC~1\SiteAdvisor
   [28/04/2008|22:20] C:\DOCUME~1\THIBAU~1\APPLIC~1\Skype
   [18/02/2007|21:46] C:\DOCUME~1\THIBAU~1\APPLIC~1\Sun
   [10/02/2008|14:38] C:\DOCUME~1\THIBAU~1\APPLIC~1\Talkback
   [01/07/2007|21:55] C:\DOCUME~1\THIBAU~1\APPLIC~1\Template
   [24/11/2007|19:51] C:\DOCUME~1\THIBAU~1\APPLIC~1\Ulead Systems
   [02/05/2008|20:33] C:\DOCUME~1\THIBAU~1\APPLIC~1\Uniblue
   [28/03/2008|21:26] C:\DOCUME~1\THIBAU~1\APPLIC~1\UseNeXT
   [30/03/2008|21:30] C:\DOCUME~1\THIBAU~1\APPLIC~1\vlc
   [01/12/2007|15:52] C:\DOCUME~1\THIBAU~1\APPLIC~1\wklnhst.dat
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [06/05/2008 12:29][--a------] C:\WINDOWS	asks\McDefragTask.job
   [06/05/2008 12:29][--a------] C:\WINDOWS	asks\McQcTask.job
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
   [01/06/2008 19:56][--ah-----] C:\WINDOWS	asks\SA.DAT
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [22/12/2006|20:26] C:\Program Files\AC3Filter
   [05/04/2008|13:06] C:\Program Files\Activision
   [11/02/2008|22:43] C:\Program Files\Adobe
   [08/05/2008|20:09] C:\Program Files\AdVantage
   [06/01/2008|13:47] C:\Program Files\AGEIA Technologies
   [25/08/2005|14:51] C:\Program Files\Ahead
   [30/08/2007|19:50] C:\Program Files\Alcohol Soft
   [23/06/2007|23:18] C:\Program Files\Anno 1701
   [10/12/2006|11:36] C:\Program Files\Archos MP4SP
   [22/12/2006|17:24] C:\Program Files\ArcSoft
   [27/08/2007|10:38] C:\Program Files\Art Plus
   [05/04/2008|22:08] C:\Program Files\a-squared Free
   [26/01/2007|20:27] C:\Program Files\Audacity
   [25/05/2008|20:19] C:\Program Files\Audible
   [05/04/2008|20:21] C:\Program Files\Bloodstream
   [19/04/2008|17:32] C:\Program Files\Bluetooth Remote Control
   [24/02/2008|22:02] C:\Program Files\Bonjour
   [23/04/2006|09:54] C:\Program Files\Cannon Smash
   [02/09/2006|12:00] C:\Program Files\Canon
   [28/01/2008|21:23] C:\Program Files\capb2i
   [06/08/2006|02:42] C:\Program Files\CCleaner
   [27/08/2007|10:38] C:\Program Files\Common Files
   [23/12/2005|22:30] C:\Program Files\Corel
   [25/05/2008|19:32] C:\Program Files\Creative
   [25/05/2008|19:31] C:\Program Files\Creative Installation Information
   [31/08/2007|20:58] C:\Program Files\DAEMON Tools
   [14/03/2008|20:43] C:\Program Files\DelMp3Kok
   [17/06/2006|10:18] C:\Program Files\DIFX
   [22/12/2006|21:46] C:\Program Files\Digital Video Duplicator
   [25/07/2006|13:37] C:\Program Files\DiMAGE E500
   [15/07/2006|19:04] C:\Program Files\directx
   [29/08/2007|15:55] C:\Program Files\DivX
   [12/04/2008|20:53] C:\Program Files\EA GAMES
   [26/03/2008|17:00] C:\Program Files\EA SPORTS
   [03/12/2005|15:56] C:\Program Files\EHMINSTALL
   [20/12/2005|12:03] C:\Program Files\Electronic Arts
   [10/05/2008|17:19] C:\Program Files\eMule
   [06/05/2008|08:27] C:\Program Files\EsetOnlineScanner
   [11/02/2006|13:50] C:\Program Files\Every Toolbar 1.1
   [06/05/2008|12:28] C:\Program Files\Fichiers communs
   [04/01/2006|17:27] C:\Program Files\FileZilla
   [24/01/2008|20:45] C:\Program Files\Finale NotePad 2005a
   [22/12/2006|20:26] C:\Program Files\Gabest
   [03/02/2008|14:26] C:\Program Files\Google
   [23/02/2008|14:16] C:\Program Files\Grisoft
   [31/08/2006|11:09] C:\Program Files\Hamachi
   [19/11/2005|14:48] C:\Program Files\Hello
   [08/12/2006|13:31] C:\Program Files\ID3-TagIT
   [12/01/2008|21:13] C:\Program Files\IdolMusicStar
   [26/05/2008|07:27] C:\Program Files\InstallShield Installation Information
   [09/04/2008|16:35] C:\Program Files\Internet Explorer
   [25/08/2005|14:51] C:\Program Files\InterVideo
   [11/07/2007|12:55] C:\Program Files\Inventel
   [19/07/2006|10:49] C:\Program Files\IrfanView
   [07/01/2007|15:35] C:\Program Files\Java
   [03/12/2005|15:48] C:\Program Files\JavaSoft
   [31/08/2007|16:43] C:\Program Files\JPEG Compression
   [09/03/2008|16:06] C:\Program Files\KaraFun
   [05/10/2005|19:10] C:\Program Files\Kit ADSL
   [07/03/2006|18:54] C:\Program Files\Kodak
   [15/09/2007|21:55] C:\Program Files\KONAMI
   [02/11/2005|18:03] C:\Program Files\Labtec
   [27/05/2006|14:28] C:\Program Files\Lavasoft
   [01/08/2006|17:18] C:\Program Files\LimeWire
   [06/06/2006|20:01] C:\Program Files\Macromedia
   [10/12/2006|12:32] C:\Program Files\Magic MP3 Tagger
   [31/05/2008|20:49] C:\Program Files\Malwarebytes' Anti-Malware
   [01/06/2008|17:09] C:\Program Files\McAfee
   [06/05/2008|12:28] C:\Program Files\McAfee.com
   [25/02/2007|22:12] C:\Program Files\Messenger
   [05/04/2008|11:16] C:\Program Files\Messenger Plus! Live
   [21/04/2006|19:04] C:\Program Files\MessengerPlus! 3
   [24/01/2008|20:47] C:\Program Files\Metin2_France
   [15/07/2006|19:03] C:\Program Files\Microids
   [14/02/2008|12:53] C:\Program Files\Micro‹ds
   [24/07/2006|23:04] C:\Program Files\Microsoft AntiSpyware
   [17/05/2007|21:58] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [09/09/2007|12:32] C:\Program Files\Microsoft Etudes
   [25/08/2005|14:19] C:\Program Files\microsoft frontpage
   [23/04/2007|12:12] C:\Program Files\Microsoft Games
   [16/05/2007|13:42] C:\Program Files\Microsoft Office
   [18/05/2006|21:21] C:\Program Files\Microsoft R‚f‚rence
   [31/05/2008|20:00] C:\Program Files\Microsoft SQL Server Compact Edition
   [16/05/2007|13:42] C:\Program Files\Microsoft Visual Studio
   [16/05/2007|13:36] C:\Program Files\Microsoft Visual Studio 8
   [16/05/2007|13:43] C:\Program Files\Microsoft Works
   [16/05/2007|13:41] C:\Program Files\Microsoft.NET
   [21/04/2007|20:10] C:\Program Files\MIKSOFT
   [14/10/2006|11:20] C:\Program Files\Mjuice Media Player
   [30/12/2007|13:17] C:\Program Files\Morgan
   [22/06/2007|17:59] C:\Program Files\Movie Maker
   [22/02/2008|21:59] C:\Program Files\Mozilla Firefox
   [31/03/2006|17:28] C:\Program Files\MP3 Player Utilities 1.47
   [16/05/2007|13:42] C:\Program Files\MSBuild
   [05/10/2005|21:15] C:\Program Files\MSN
   [25/08/2005|14:16] C:\Program Files\MSN Gaming Zone
   [16/12/2007|20:39] C:\Program Files\MSN Messenger
   [18/11/2006|23:44] C:\Program Files\MSXML 4.0
   [09/09/2007|19:00] C:\Program Files\MSXML 6.0
   [07/12/2006|20:10] C:\Program Files\MusicBrainz Tagger
   [03/09/2006|16:05] C:\Program Files\MUSK Codec Pack v5
   [12/03/2008|20:01] C:\Program Files\NetMeeting
   [22/12/2006|17:26] C:\Program Files\Nikon
   [09/12/2006|21:05] C:\Program Files\Nouvelle Cible
   [04/11/2005|20:13] C:\Program Files\Oberon Media
   [25/08/2005|14:16] C:\Program Files\Online Services
   [22/06/2007|17:59] C:\Program Files\Outlook Express
   [10/08/2006|13:44] C:\Program Files\Pic2Pic 2
   [19/11/2005|15:22] C:\Program Files\Picasa2
   [13/02/2008|16:53] C:\Program Files\QuickTime
   [05/10/2005|18:55] C:\Program Files\Raccourcis de programmes
   [02/11/2005|18:04] C:\Program Files\Real
   [25/03/2008|22:43] C:\Program Files\RegCleaner
   [17/02/2007|23:38] C:\Program Files\RepareOE
   [07/10/2005|17:23] C:\Program Files\ScanSoft
   [12/07/2007|12:34] C:\Program Files\Securitoo
   [06/08/2006|19:23] C:\Program Files\Serious Sam 2
   [25/08/2005|14:17] C:\Program Files\Services en ligne
   [23/08/2007|20:51] C:\Program Files\SETI
   [29/10/2006|19:27] C:\Program Files\Sierra
   [24/07/2006|23:12] C:\Program Files\Sierra On-Line
   [24/02/2007|11:21] C:\Program Files\SigmaTel
   [22/05/2008|18:47] C:\Program Files\SiteAdvisor
   [16/01/2007|18:56] C:\Program Files\Skype
   [18/07/2006|19:36] C:\Program Files\SLD Codec Pack
   [01/08/2006|17:02] C:\Program Files\SmartSound Software
   [22/02/2008|21:54] C:\Program Files\Spybot - Search & Destroy
   [10/02/2008|16:43] C:\Program Files\Steam
   [28/08/2006|12:32] C:\Program Files\THQ
   [25/03/2008|20:31] C:\Program Files\Trend Micro
   [04/11/2006|15:06] C:\Program Files\Trust
   [01/08/2006|16:51] C:\Program Files\Ulead Systems
   [02/05/2008|20:33] C:\Program Files\Uniblue
   [25/08/2005|14:21] C:\Program Files\Uninstall Information
   [06/01/2008|13:47] C:\Program Files\Unreal Tournament 3
   [05/10/2005|19:10] C:\Program Files\USB Driver-Express
   [28/03/2008|21:25] C:\Program Files\UseNeXT
   [18/03/2008|18:35] C:\Program Files\vanBasco's Karaoke Player
   [02/08/2006|20:20] C:\Program Files\VideoLAN
   [10/12/2006|11:38] C:\Program Files\VirtualDub
   [31/05/2008|19:31] C:\Program Files\vso
   [01/06/2008|20:55] C:\Program Files\Wanadoo
   [08/05/2008|20:09] C:\Program Files\Webteh
   [14/10/2006|11:22] C:\Program Files\Winamp
   [01/06/2008|15:14] C:\Program Files\Windows Live
   [30/12/2007|13:13] C:\Program Files\Windows Live Toolbar
   [01/08/2006|16:52] C:\Program Files\Windows Media Components
   [06/12/2006|16:02] C:\Program Files\Windows Media Connect 2
   [06/12/2006|16:12] C:\Program Files\Windows Media Player
   [21/12/2005|20:52] C:\Program Files\Windows Messaging
   [25/08/2005|14:16] C:\Program Files\Windows NT
   [25/08/2005|14:17] C:\Program Files\WindowsUpdate
   [21/03/2008|21:56] C:\Program Files\WinHTTrack
   [12/07/2007|20:19] C:\Program Files\WinRAR
   [12/07/2007|20:19] C:\Program Files\WinZip
   [07/08/2006|15:38] C:\Program Files\Wolfenstein - Enemy Territory
   [25/08/2005|14:19] C:\Program Files\xerox
   [31/08/2006|18:06] C:\Program Files\Xfire
   [22/12/2006|20:55] C:\Program Files\XviD
   [01/01/2007|14:55] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [11/02/2008|22:43] C:\Program Files\Fichiers communs\Adobe
   [25/08/2005|14:50] C:\Program Files\Fichiers communs\Ahead
   [07/01/2006|18:58] C:\Program Files\Fichiers communs\ArcSoft
   [23/12/2005|22:30] C:\Program Files\Fichiers communs\Corel
   [12/04/2008|15:21] C:\Program Files\Fichiers communs\Creative
   [16/05/2007|13:42] C:\Program Files\Fichiers communs\DESIGNER
   [07/10/2005|13:33] C:\Program Files\Fichiers communs\EPSON
   [11/07/2007|12:55] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
   [23/12/2005|22:09] C:\Program Files\Fichiers communs\InstallShield
   [13/02/2006|15:14] C:\Program Files\Fichiers communs\Java
   [07/03/2006|18:51] C:\Program Files\Fichiers communs\Kodak
   [02/11/2005|18:04] C:\Program Files\Fichiers communs\Logitech
   [11/12/2005|12:02] C:\Program Files\Fichiers communs\Macromedia
   [11/12/2005|12:00] C:\Program Files\Fichiers communs\Macromedia Shared
   [23/06/2007|11:13] C:\Program Files\Fichiers communs\Macrovision Shared
   [11/05/2008|17:45] C:\Program Files\Fichiers communs\McAfee
   [13/11/2007|17:54] C:\Program Files\Fichiers communs\Microsoft Shared
   [25/08/2005|14:17] C:\Program Files\Fichiers communs\MSSoap
   [22/12/2006|17:26] C:\Program Files\Fichiers communs\muvee Technologies
   [22/12/2006|17:27] C:\Program Files\Fichiers communs\Nikon
   [25/08/2005|16:14] C:\Program Files\Fichiers communs\ODBC
   [03/02/2008|14:27] C:\Program Files\Fichiers communs\Real
   [03/12/2006|17:10] C:\Program Files\Fichiers communs\ScanSoft Shared
   [25/08/2005|14:17] C:\Program Files\Fichiers communs\Services
   [16/01/2007|18:56] C:\Program Files\Fichiers communs\Skype
   [25/08/2005|16:14] C:\Program Files\Fichiers communs\SpeechEngines
   [13/06/2007|17:39] C:\Program Files\Fichiers communs\System
   [01/08/2006|16:51] C:\Program Files\Fichiers communs\Ulead Systems
   [13/11/2007|17:54] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [14/03/2008|20:43] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [03/02/2008|14:26] C:\Program Files\Fichiers communs\xing shared

   ---------------------------[ Process ]--------------------------

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-06-01 21:01:20
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------


   Aucune autre infection trouvée  !

   [F:14][D:1]-> C:\DOCUME~1\THIBAU~1\LOCALS~1\Temp
   [F:57][D:0]-> C:\DOCUME~1\THIBAU~1\Cookies
   [F:706][D:5]-> C:\DOCUME~1\THIBAU~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 21:02:26,62  ]----------------------

ep44 · Answer

Télécharge malwarebytes
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

=> Installe le 
=> Ensuite va en mode sans echec 


   Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
   Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel


=> Lance malwarebytes
=> Coche "Executer un examen complet"
=> Si tu es en présence d'une infection à la fin de l'examen clique sur "ok"
=> Clique sur Supprimer la sélection
=> Pour poster le rapport Clique sur l'onglet Rapports/Logs, sélectionne celui t'intéresse et clique sur Ouvrir
=> Fait copier coller et poste le rapport 

--------------------------

ensuite 

* Télécharge CCleaner 
https://filehippo.com/download_ccleaner/
=> Aide toi de ce tuto pour l'utiliser 
https://www.malekal.com/tutoriel-ccleaner/

--------------------------

Ensuite 
refais un nouveau Hijackthis

thibautdu25 · Answer

Voici mon rapport Malware:

Malwarebytes' Anti-Malware 1.14
Version de la base de données: 810

15:03:04 04/06/2008
mbam-log-6-4-2008 (15-03-04).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Eléments examinés: 287897
Temps écoulé: 2 hour(s), 38 minute(s), 13 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\WinAnonymous (Rogue.WinAnonymous) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\NetProject (Trojan.Zlob) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


Et voici mon rapport hijackthis:

Malwarebytes' Anti-Malware 1.14
Version de la base de données: 810

15:03:04 04/06/2008
mbam-log-6-4-2008 (15-03-04).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Eléments examinés: 287897
Temps écoulé: 2 hour(s), 38 minute(s), 13 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\WinAnonymous (Rogue.WinAnonymous) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\NetProject (Trojan.Zlob) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Ai je encore un problème... lanalyse de malware je ne l'ai pas fait en mode sans échec, céest grave ?
Voila dite moi si ya encore un blème merci...

ep44 · Answer

Bonjour 

on va vérifier 
par un scan en ligne ;-)

 fait un scan en ligne

avec bitdefender et colle le rapport

https://www.bitdefender.com/toolbox/

Scan à faire sous Internet Explorer

un tuto
http://pageperso.aol.fr/rginformatique/mapage/defender.htm

ensuite un nouveau rapport hijack stp
@+

Mon rapport HIJACKTHIS

5 réponses

Discussions similaires

Newsletters