Fenêtre cid sous vista

Fermé
coquelicot - 3 juin 2008 à 20:53
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 - 5 juin 2008 à 08:33
Bonjour,
j'ai depuis quelques temps des fenêtres cid qui s'ouvrent sans arrêt sur mon ordi..
J'ai désinstaller msn plus, installer des anti-spyware, a squared free et ad watch 2007 mais en vain..
Pourriez vous svp m'aider a supprimer ces fenêtres
merci d'avance
A voir également:

4 réponses

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
3 juin 2008 à 20:58
slt


tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---
0
je te poste le rapport :


-----------------------[ Lop S&D 4.2.1-2 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : Famille Bibi ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 04/06/2008 | 16:15:51,96 ] [ PC : PC-DE-FAMILLEBI ]
[ MAJ : 01-06-2008 | 15:51 ]
[ UAC => 0 ]

-------------[ Listing des dossiers dans Application Data ]------------

[26/02/2008|20:17] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Flash Player
[22/10/2007|19:06] C:\Users\FAMILL~1\AppData\Roaming\Adobe\ESD
[22/10/2007|18:49] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Acrobat


[01/05/2008|23:05] C:\Users\FAMILL~1\AppData\Roaming\Google\Local Search History

[07/05/2008|12:38] C:\Users\FAMILL~1\AppData\Roaming\Grisoft\AVG Antispyware 7.5

[27/03/2008|13:59] C:\Users\FAMILL~1\AppData\Roaming\HP\Digital Imaging
[26/03/2008|17:38] C:\Users\FAMILL~1\AppData\Roaming\HP\ScLogs


[10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Identities\{9F2A9E83-1A23-450A-89EC-81119A7AF663}

[22/10/2007|12:59] C:\Users\FAMILL~1\AppData\Roaming\InstallShield\ISEngine12.0

[27/02/2008|23:01] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.NetworkShare
[05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.AppSpecialShare
[05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\xml
[05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\themes

[14/11/2007|13:20] C:\Users\FAMILL~1\AppData\Roaming\Macromedia\Flash Player


[26/05/2008|19:40] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Templates
[11/05/2008|12:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Photo Gallery
[07/05/2008|12:05] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MMC
[18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Office
[18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\CLView
[01/02/2008|19:24] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\HTML Help
[16/01/2008|14:04] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\eHome
[09/01/2008|19:11] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\preuve
[05/12/2007|21:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Media Encoder
[05/12/2007|21:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Installer
[02/12/2007|17:31] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MSN Messenger
[10/11/2007|14:08] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Credentials
[24/10/2007|14:17] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\IdentityCRL
[22/10/2007|13:22] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Internet Explorer
[17/10/2007|11:35] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\UProof
[17/10/2007|11:34] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\OneNote
[17/10/2007|11:33] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Excel
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Proof
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Document Building Blocks
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Word
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\AddIns
[10/10/2007|14:06] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Speech
[10/10/2007|13:44] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows
[10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Protect
[10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Crypto
[10/10/2007|12:56] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\SystemCertificates

[01/02/2008|18:39] C:\Users\FAMILL~1\AppData\Roaming\Symantec\Cleanup



----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[03/06/2008 17:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{63DC4B75-E61D-4984-8437-422E711AA80F}.job
[04/06/2008 16:14][--ah-----] C:\Windows\tasks\SA.DAT
[04/06/2008 16:12][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[18/05/2007|21:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[22/10/2007|20:10] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[10/10/2007|12:52] C:\ProgramData\Bureau
[26/02/2008|19:14] C:\ProgramData\Chic Dale Dale.2rcmo
[26/02/2008|19:14] C:\ProgramData\Chic Dale Dale.duvyt3
[02/08/2007|03:29] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[21/11/2007|18:46] C:\ProgramData\eMule
[10/10/2007|12:52] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[26/02/2008|19:15] C:\ProgramData\File dvd base road
[08/12/2007|11:34] C:\ProgramData\Google
[07/05/2008|12:38] C:\ProgramData\Grisoft
[26/03/2008|17:26] C:\ProgramData\Hewlett-Packard
[26/03/2008|21:04] C:\ProgramData\HP
[26/03/2008|17:18] C:\ProgramData\HP Product Assistant
[26/03/2008|17:21] C:\ProgramData\HPSSUPPLY
[03/06/2008|21:11] C:\ProgramData\hpzinstall.log
[03/06/2008|18:05] C:\ProgramData\Lavasoft
[16/01/2008|15:17] C:\ProgramData\LUUnInstall.LiveUpdate
[10/10/2007|12:52] C:\ProgramData\Menu D‚marrer
[16/05/2008|18:34] C:\ProgramData\Microsoft
[19/05/2008|19:58] C:\ProgramData\Microsoft Help
[10/10/2007|12:52] C:\ProgramData\ModŠles
[08/02/2008|21:34] C:\ProgramData\pixelStorm
[21/10/2007|13:01] C:\ProgramData\Sandlot Games
[16/05/2008|19:17] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[30/05/2008|20:48] C:\ProgramData\Symantec
[16/01/2008|15:08] C:\ProgramData\Symantec Temporary Files
[26/02/2008|19:15] C:\ProgramData\team stop stupid.i5hrq
[31/10/2007|19:06] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[26/03/2008|17:29] C:\ProgramData\WEBREG
[19/05/2008|12:53] C:\ProgramData\WLInstaller
[22/10/2007|13:24] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[02/08/2007|03:28] C:\Program Files\Acer Arcade Deluxe
[02/08/2007|03:23] C:\Program Files\ACER Crystal Eye webcam
[18/05/2007|19:52] C:\Program Files\Acer GameZone
[02/08/2007|03:29] C:\Program Files\Acer Inc
[18/05/2007|21:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[18/05/2007|19:52] C:\Program Files\Adobe
[02/08/2007|03:24] C:\Program Files\Apoint2K
[03/06/2008|19:07] C:\Program Files\a-squared Free
[27/01/2008|15:19] C:\Program Files\AvantGo Connect
[18/05/2007|19:36] C:\Program Files\Broadcom
[03/06/2008|18:00] C:\Program Files\Common Files
[18/05/2007|19:36] C:\Program Files\CONEXANT
[18/05/2007|19:43] C:\Program Files\CyberLink
[23/10/2007|12:12] C:\Program Files\desktop.ini
[21/11/2007|18:42] C:\Program Files\eMule
[10/10/2007|12:52] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[08/12/2007|11:47] C:\Program Files\Google
[07/05/2008|12:38] C:\Program Files\Grisoft
[26/03/2008|17:17] C:\Program Files\Hewlett-Packard
[26/03/2008|17:21] C:\Program Files\HP
[09/01/2008|20:11] C:\Program Files\InstallShield Installation Information
[18/05/2007|19:33] C:\Program Files\Intel
[10/04/2008|10:54] C:\Program Files\Internet Explorer
[08/12/2007|11:33] C:\Program Files\Java
[18/05/2007|19:38] C:\Program Files\Launch Manager
[03/06/2008|18:01] C:\Program Files\Lavasoft
[05/12/2007|19:57] C:\Program Files\LimeWire
[03/06/2008|19:19] C:\Program Files\Messenger Plus! Live
[27/01/2008|18:52] C:\Program Files\Microsoft ActiveSync
[23/10/2007|11:52] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[18/05/2007|21:25] C:\Program Files\Microsoft Office
[18/05/2007|21:25] C:\Program Files\Microsoft Works
[18/05/2007|21:22] C:\Program Files\Microsoft.NET
[02/11/2006|14:42] C:\Program Files\Movie Maker
[05/12/2007|21:49] C:\Program Files\MP3 Player Utilities 3.75
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[03/06/2008|19:19] C:\Program Files\MSN Messenger
[23/10/2007|11:43] C:\Program Files\MSXML 4.0
[18/05/2007|19:42] C:\Program Files\NewTech Infosystems
[28/04/2008|04:38] C:\Program Files\Norton 360
[16/01/2008|18:37] C:\Program Files\Norton Security Scan
[09/01/2008|20:11] C:\Program Files\Olympus
[22/10/2007|13:07] C:\Program Files\OrangeHSS
[18/05/2007|19:34] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[22/10/2007|13:00] C:\Program Files\SAGEM
[16/05/2008|19:17] C:\Program Files\Spybot - Search & Destroy
[02/08/2007|03:23] C:\Program Files\SUYIN
[31/05/2008|12:03] C:\Program Files\Symantec
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[23/10/2007|12:08] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[23/10/2007|12:08] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[16/05/2008|18:14] C:\Program Files\Windows Mail
[23/10/2007|12:08] C:\Program Files\Windows Media Player
[10/10/2007|12:52] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[09/01/2008|21:47] C:\Program Files\Windows Sidebar
[10/10/2007|12:57] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[22/10/2007|20:10] C:\Program Files\Common Files\Adobe
[18/05/2007|21:22] C:\Program Files\Common Files\DESIGNER
[22/10/2007|13:04] C:\Program Files\Common Files\France Telecom
[26/03/2008|17:17] C:\Program Files\Common Files\Hewlett-Packard
[26/03/2008|17:18] C:\Program Files\Common Files\HP
[18/05/2007|19:41] C:\Program Files\Common Files\InstallShield
[05/12/2007|19:54] C:\Program Files\Common Files\Java
[18/05/2007|19:42] C:\Program Files\Common Files\LightScribe
[19/05/2008|19:56] C:\Program Files\Common Files\microsoft shared
[18/05/2007|19:42] C:\Program Files\Common Files\muvee Technologies
[18/05/2007|19:42] C:\Program Files\Common Files\NewTech Infosystems
[18/05/2007|19:49] C:\Program Files\Common Files\Oberon Media
[21/10/2007|13:01] C:\Program Files\Common Files\Sandlot Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/08/2007|03:23] C:\Program Files\Common Files\snp2uvc
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[07/03/2008|12:15] C:\Program Files\Common Files\Symantec Shared
[23/10/2007|12:08] C:\Program Files\Common Files\System
[03/06/2008|18:00] C:\Program Files\Common Files\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 92

iexplore.exe ~ [4484]

----------------------[ Recherche avec S_Lop ]---------------------

C:\ProgramData\Chic Dale Dale.2rcmo
C:\ProgramData\Chic Dale Dale.duvyt3
C:\ProgramData\team stop stupid.i5hrq
C:\ProgramData\Chic Dale Dale.2rcmo
C:\ProgramData\Chic Dale Dale.duvyt3
C:\ProgramData\team stop stupid.i5hrq

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\ProgramData\File dvd base road
C:\ProgramData\File dvd base road\Title Way.exe
C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[1].txt
C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[2].txt
C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@2xmoinscher[1].txt
C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@www.2xmoinscher[1].txt

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-04 16:17:09
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:32][D:8]-> C:\Users\FAMILL~1\AppData\Local\Temp
[F:308][D:1]-> C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:18][D:4]-> C:\Users\FAMILL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:10][D:6]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 16:18:45,93 ]----------------------
0
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
4 juin 2008 à 16:40
* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)


(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

_____________________


encore des pubs???




colle un rapport hijackthis


http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."
0
je te copie le nouveau rapport après suprresion a priori les pub n'apparaissent plus...
merci de ton aide ! ^^


-----------------------[ Lop S&D 4.2.1-2 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : Famille Bibi ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 04/06/2008 | 17:35:18,20 ] [ PC : PC-DE-FAMILLEBI ]
[ MAJ : 01-06-2008 | 15:51 ]
[ UAC => 0 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\ProgramData\File dvd base road\Title Way.exe
Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[1].txt
Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[2].txt
Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@2xmoinscher[1].txt
Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@www.2xmoinscher[1].txt
Supprimé! - C:\ProgramData\Chic Dale Dale.2rcmo
Supprimé! - C:\ProgramData\Chic Dale Dale.duvyt3
Supprimé! - C:\ProgramData\team stop stupid.i5hrq
Supprimé! - C:\ProgramData\File dvd base road
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[26/02/2008|20:17] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Flash Player
[22/10/2007|19:06] C:\Users\FAMILL~1\AppData\Roaming\Adobe\ESD
[22/10/2007|18:49] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Acrobat


[01/05/2008|23:05] C:\Users\FAMILL~1\AppData\Roaming\Google\Local Search History

[07/05/2008|12:38] C:\Users\FAMILL~1\AppData\Roaming\Grisoft\AVG Antispyware 7.5

[27/03/2008|13:59] C:\Users\FAMILL~1\AppData\Roaming\HP\Digital Imaging
[26/03/2008|17:38] C:\Users\FAMILL~1\AppData\Roaming\HP\ScLogs


[10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Identities\{9F2A9E83-1A23-450A-89EC-81119A7AF663}

[22/10/2007|12:59] C:\Users\FAMILL~1\AppData\Roaming\InstallShield\ISEngine12.0

[27/02/2008|23:01] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.NetworkShare
[05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.AppSpecialShare
[05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\xml
[05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\themes

[14/11/2007|13:20] C:\Users\FAMILL~1\AppData\Roaming\Macromedia\Flash Player


[26/05/2008|19:40] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Templates
[11/05/2008|12:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Photo Gallery
[07/05/2008|12:05] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MMC
[18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Office
[18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\CLView
[01/02/2008|19:24] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\HTML Help
[16/01/2008|14:04] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\eHome
[09/01/2008|19:11] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\preuve
[05/12/2007|21:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Media Encoder
[05/12/2007|21:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Installer
[02/12/2007|17:31] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MSN Messenger
[10/11/2007|14:08] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Credentials
[24/10/2007|14:17] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\IdentityCRL
[22/10/2007|13:22] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Internet Explorer
[17/10/2007|11:35] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\UProof
[17/10/2007|11:34] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\OneNote
[17/10/2007|11:33] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Excel
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Proof
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Document Building Blocks
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Word
[10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\AddIns
[10/10/2007|14:06] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Speech
[10/10/2007|13:44] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows
[10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Protect
[10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Crypto
[10/10/2007|12:56] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\SystemCertificates

[01/02/2008|18:39] C:\Users\FAMILL~1\AppData\Roaming\Symantec\Cleanup



----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[03/06/2008 17:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{63DC4B75-E61D-4984-8437-422E711AA80F}.job
[04/06/2008 17:33][--ah-----] C:\Windows\tasks\SA.DAT
[04/06/2008 17:32][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[18/05/2007|21:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[22/10/2007|20:10] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[10/10/2007|12:52] C:\ProgramData\Bureau
[02/08/2007|03:29] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[21/11/2007|18:46] C:\ProgramData\eMule
[10/10/2007|12:52] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[08/12/2007|11:34] C:\ProgramData\Google
[07/05/2008|12:38] C:\ProgramData\Grisoft
[26/03/2008|17:26] C:\ProgramData\Hewlett-Packard
[26/03/2008|21:04] C:\ProgramData\HP
[26/03/2008|17:18] C:\ProgramData\HP Product Assistant
[26/03/2008|17:21] C:\ProgramData\HPSSUPPLY
[03/06/2008|21:11] C:\ProgramData\hpzinstall.log
[03/06/2008|18:05] C:\ProgramData\Lavasoft
[16/01/2008|15:17] C:\ProgramData\LUUnInstall.LiveUpdate
[10/10/2007|12:52] C:\ProgramData\Menu D‚marrer
[16/05/2008|18:34] C:\ProgramData\Microsoft
[19/05/2008|19:58] C:\ProgramData\Microsoft Help
[10/10/2007|12:52] C:\ProgramData\ModŠles
[08/02/2008|21:34] C:\ProgramData\pixelStorm
[21/10/2007|13:01] C:\ProgramData\Sandlot Games
[16/05/2008|19:17] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[04/06/2008|17:23] C:\ProgramData\Symantec
[16/01/2008|15:08] C:\ProgramData\Symantec Temporary Files
[31/10/2007|19:06] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[26/03/2008|17:29] C:\ProgramData\WEBREG
[19/05/2008|12:53] C:\ProgramData\WLInstaller
[22/10/2007|13:24] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[02/08/2007|03:28] C:\Program Files\Acer Arcade Deluxe
[02/08/2007|03:23] C:\Program Files\ACER Crystal Eye webcam
[18/05/2007|19:52] C:\Program Files\Acer GameZone
[02/08/2007|03:29] C:\Program Files\Acer Inc
[18/05/2007|21:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[18/05/2007|19:52] C:\Program Files\Adobe
[02/08/2007|03:24] C:\Program Files\Apoint2K
[03/06/2008|19:07] C:\Program Files\a-squared Free
[27/01/2008|15:19] C:\Program Files\AvantGo Connect
[18/05/2007|19:36] C:\Program Files\Broadcom
[03/06/2008|18:00] C:\Program Files\Common Files
[18/05/2007|19:36] C:\Program Files\CONEXANT
[18/05/2007|19:43] C:\Program Files\CyberLink
[23/10/2007|12:12] C:\Program Files\desktop.ini
[21/11/2007|18:42] C:\Program Files\eMule
[10/10/2007|12:52] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[08/12/2007|11:47] C:\Program Files\Google
[07/05/2008|12:38] C:\Program Files\Grisoft
[26/03/2008|17:17] C:\Program Files\Hewlett-Packard
[26/03/2008|17:21] C:\Program Files\HP
[09/01/2008|20:11] C:\Program Files\InstallShield Installation Information
[18/05/2007|19:33] C:\Program Files\Intel
[10/04/2008|10:54] C:\Program Files\Internet Explorer
[08/12/2007|11:33] C:\Program Files\Java
[18/05/2007|19:38] C:\Program Files\Launch Manager
[03/06/2008|18:01] C:\Program Files\Lavasoft
[05/12/2007|19:57] C:\Program Files\LimeWire
[03/06/2008|19:19] C:\Program Files\Messenger Plus! Live
[27/01/2008|18:52] C:\Program Files\Microsoft ActiveSync
[23/10/2007|11:52] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[18/05/2007|21:25] C:\Program Files\Microsoft Office
[18/05/2007|21:25] C:\Program Files\Microsoft Works
[18/05/2007|21:22] C:\Program Files\Microsoft.NET
[02/11/2006|14:42] C:\Program Files\Movie Maker
[05/12/2007|21:49] C:\Program Files\MP3 Player Utilities 3.75
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[03/06/2008|19:19] C:\Program Files\MSN Messenger
[23/10/2007|11:43] C:\Program Files\MSXML 4.0
[18/05/2007|19:42] C:\Program Files\NewTech Infosystems
[28/04/2008|04:38] C:\Program Files\Norton 360
[16/01/2008|18:37] C:\Program Files\Norton Security Scan
[09/01/2008|20:11] C:\Program Files\Olympus
[22/10/2007|13:07] C:\Program Files\OrangeHSS
[18/05/2007|19:34] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[22/10/2007|13:00] C:\Program Files\SAGEM
[16/05/2008|19:17] C:\Program Files\Spybot - Search & Destroy
[02/08/2007|03:23] C:\Program Files\SUYIN
[31/05/2008|12:03] C:\Program Files\Symantec
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[23/10/2007|12:08] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[23/10/2007|12:08] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[16/05/2008|18:14] C:\Program Files\Windows Mail
[23/10/2007|12:08] C:\Program Files\Windows Media Player
[10/10/2007|12:52] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[09/01/2008|21:47] C:\Program Files\Windows Sidebar
[10/10/2007|12:57] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[22/10/2007|20:10] C:\Program Files\Common Files\Adobe
[18/05/2007|21:22] C:\Program Files\Common Files\DESIGNER
[22/10/2007|13:04] C:\Program Files\Common Files\France Telecom
[26/03/2008|17:17] C:\Program Files\Common Files\Hewlett-Packard
[26/03/2008|17:18] C:\Program Files\Common Files\HP
[18/05/2007|19:41] C:\Program Files\Common Files\InstallShield
[05/12/2007|19:54] C:\Program Files\Common Files\Java
[18/05/2007|19:42] C:\Program Files\Common Files\LightScribe
[19/05/2008|19:56] C:\Program Files\Common Files\microsoft shared
[18/05/2007|19:42] C:\Program Files\Common Files\muvee Technologies
[18/05/2007|19:42] C:\Program Files\Common Files\NewTech Infosystems
[18/05/2007|19:49] C:\Program Files\Common Files\Oberon Media
[21/10/2007|13:01] C:\Program Files\Common Files\Sandlot Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/08/2007|03:23] C:\Program Files\Common Files\snp2uvc
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[07/03/2008|12:15] C:\Program Files\Common Files\Symantec Shared
[23/10/2007|12:08] C:\Program Files\Common Files\System
[03/06/2008|18:00] C:\Program Files\Common Files\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 91

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-04 17:36:38
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:35][D:9]-> C:\Users\FAMILL~1\AppData\Local\Temp
[F:312][D:1]-> C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:645][D:4]-> C:\Users\FAMILL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:10][D:6]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 17:38:10,23 ]----------------------
0
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
5 juin 2008 à 08:33
colle un rapport hijackthis


http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."
0
j'ai le meme probleme, je peu poster mon rapport également ?
0