Fenêtre cid sous vista

coquelicot -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
j'ai depuis quelques temps des fenêtres cid qui s'ouvrent sans arrêt sur mon ordi..
J'ai désinstaller msn plus, installer des anti-spyware, a squared free et ad watch 2007 mais en vain..
Pourriez vous svp m'aider a supprimer ces fenêtres
merci d'avance
Configuration: Windows Vista
Internet Explorer 7.0

4 réponses

  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt

    tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    * Double-clique dessus pour lancer l'installation
    * Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
    * Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
    * Patiente jusqu'à la fin du scan
    * Poste le rapport généré (C:\lopR.txt)
    ---
    0
    1. coquelicot
       
      je te poste le rapport :


      -----------------------[ Lop S&D 4.2.1-2 XP/Vista ]---------------------

      [ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
      [ USER : Famille Bibi ] [ "C:\Lop SD" ] [ Selection : 1 ]
      [ 04/06/2008 | 16:15:51,96 ] [ PC : PC-DE-FAMILLEBI ]
      [ MAJ : 01-06-2008 | 15:51 ]
      [ UAC => 0 ]

      -------------[ Listing des dossiers dans Application Data ]------------

      [26/02/2008|20:17] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Flash Player
      [22/10/2007|19:06] C:\Users\FAMILL~1\AppData\Roaming\Adobe\ESD
      [22/10/2007|18:49] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Acrobat


      [01/05/2008|23:05] C:\Users\FAMILL~1\AppData\Roaming\Google\Local Search History

      [07/05/2008|12:38] C:\Users\FAMILL~1\AppData\Roaming\Grisoft\AVG Antispyware 7.5

      [27/03/2008|13:59] C:\Users\FAMILL~1\AppData\Roaming\HP\Digital Imaging
      [26/03/2008|17:38] C:\Users\FAMILL~1\AppData\Roaming\HP\ScLogs


      [10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Identities\{9F2A9E83-1A23-450A-89EC-81119A7AF663}

      [22/10/2007|12:59] C:\Users\FAMILL~1\AppData\Roaming\InstallShield\ISEngine12.0

      [27/02/2008|23:01] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.NetworkShare
      [05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.AppSpecialShare
      [05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\xml
      [05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\themes

      [14/11/2007|13:20] C:\Users\FAMILL~1\AppData\Roaming\Macromedia\Flash Player


      [26/05/2008|19:40] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Templates
      [11/05/2008|12:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Photo Gallery
      [07/05/2008|12:05] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MMC
      [18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Office
      [18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\CLView
      [01/02/2008|19:24] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\HTML Help
      [16/01/2008|14:04] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\eHome
      [09/01/2008|19:11] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\preuve
      [05/12/2007|21:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Media Encoder
      [05/12/2007|21:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Installer
      [02/12/2007|17:31] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MSN Messenger
      [10/11/2007|14:08] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Credentials
      [24/10/2007|14:17] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\IdentityCRL
      [22/10/2007|13:22] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Internet Explorer
      [17/10/2007|11:35] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\UProof
      [17/10/2007|11:34] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\OneNote
      [17/10/2007|11:33] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Excel
      [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Proof
      [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Document Building Blocks
      [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Word
      [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\AddIns
      [10/10/2007|14:06] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Speech
      [10/10/2007|13:44] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows
      [10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Protect
      [10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Crypto
      [10/10/2007|12:56] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\SystemCertificates

      [01/02/2008|18:39] C:\Users\FAMILL~1\AppData\Roaming\Symantec\Cleanup



      ----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

      [03/06/2008 17:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{63DC4B75-E61D-4984-8437-422E711AA80F}.job
      [04/06/2008 16:14][--ah-----] C:\Windows\tasks\SA.DAT
      [04/06/2008 16:12][--a------] C:\Windows\tasks\SCHEDLGU.TXT

      ------[ Listing des dossiers dans C:\ProgramData ]------

      [18/05/2007|21:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
      [22/10/2007|20:10] C:\ProgramData\Adobe
      [02/11/2006|15:02] C:\ProgramData\Application Data
      [10/10/2007|12:52] C:\ProgramData\Bureau
      [26/02/2008|19:14] C:\ProgramData\Chic Dale Dale.2rcmo
      [26/02/2008|19:14] C:\ProgramData\Chic Dale Dale.duvyt3
      [02/08/2007|03:29] C:\ProgramData\CyberLink
      [02/11/2006|15:02] C:\ProgramData\Desktop
      [02/11/2006|15:02] C:\ProgramData\Documents
      [21/11/2007|18:46] C:\ProgramData\eMule
      [10/10/2007|12:52] C:\ProgramData\Favoris
      [02/11/2006|15:02] C:\ProgramData\Favorites
      [26/02/2008|19:15] C:\ProgramData\File dvd base road
      [08/12/2007|11:34] C:\ProgramData\Google
      [07/05/2008|12:38] C:\ProgramData\Grisoft
      [26/03/2008|17:26] C:\ProgramData\Hewlett-Packard
      [26/03/2008|21:04] C:\ProgramData\HP
      [26/03/2008|17:18] C:\ProgramData\HP Product Assistant
      [26/03/2008|17:21] C:\ProgramData\HPSSUPPLY
      [03/06/2008|21:11] C:\ProgramData\hpzinstall.log
      [03/06/2008|18:05] C:\ProgramData\Lavasoft
      [16/01/2008|15:17] C:\ProgramData\LUUnInstall.LiveUpdate
      [10/10/2007|12:52] C:\ProgramData\Menu D‚marrer
      [16/05/2008|18:34] C:\ProgramData\Microsoft
      [19/05/2008|19:58] C:\ProgramData\Microsoft Help
      [10/10/2007|12:52] C:\ProgramData\ModŠles
      [08/02/2008|21:34] C:\ProgramData\pixelStorm
      [21/10/2007|13:01] C:\ProgramData\Sandlot Games
      [16/05/2008|19:17] C:\ProgramData\Spybot - Search & Destroy
      [02/11/2006|15:02] C:\ProgramData\Start Menu
      [30/05/2008|20:48] C:\ProgramData\Symantec
      [16/01/2008|15:08] C:\ProgramData\Symantec Temporary Files
      [26/02/2008|19:15] C:\ProgramData\team stop stupid.i5hrq
      [31/10/2007|19:06] C:\ProgramData\TEMP
      [02/11/2006|15:02] C:\ProgramData\Templates
      [26/03/2008|17:29] C:\ProgramData\WEBREG
      [19/05/2008|12:53] C:\ProgramData\WLInstaller
      [22/10/2007|13:24] C:\ProgramData\Yahoo! Companion

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [02/08/2007|03:28] C:\Program Files\Acer Arcade Deluxe
      [02/08/2007|03:23] C:\Program Files\ACER Crystal Eye webcam
      [18/05/2007|19:52] C:\Program Files\Acer GameZone
      [02/08/2007|03:29] C:\Program Files\Acer Inc
      [18/05/2007|21:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
      [18/05/2007|19:52] C:\Program Files\Adobe
      [02/08/2007|03:24] C:\Program Files\Apoint2K
      [03/06/2008|19:07] C:\Program Files\a-squared Free
      [27/01/2008|15:19] C:\Program Files\AvantGo Connect
      [18/05/2007|19:36] C:\Program Files\Broadcom
      [03/06/2008|18:00] C:\Program Files\Common Files
      [18/05/2007|19:36] C:\Program Files\CONEXANT
      [18/05/2007|19:43] C:\Program Files\CyberLink
      [23/10/2007|12:12] C:\Program Files\desktop.ini
      [21/11/2007|18:42] C:\Program Files\eMule
      [10/10/2007|12:52] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
      [08/12/2007|11:47] C:\Program Files\Google
      [07/05/2008|12:38] C:\Program Files\Grisoft
      [26/03/2008|17:17] C:\Program Files\Hewlett-Packard
      [26/03/2008|17:21] C:\Program Files\HP
      [09/01/2008|20:11] C:\Program Files\InstallShield Installation Information
      [18/05/2007|19:33] C:\Program Files\Intel
      [10/04/2008|10:54] C:\Program Files\Internet Explorer
      [08/12/2007|11:33] C:\Program Files\Java
      [18/05/2007|19:38] C:\Program Files\Launch Manager
      [03/06/2008|18:01] C:\Program Files\Lavasoft
      [05/12/2007|19:57] C:\Program Files\LimeWire
      [03/06/2008|19:19] C:\Program Files\Messenger Plus! Live
      [27/01/2008|18:52] C:\Program Files\Microsoft ActiveSync
      [23/10/2007|11:52] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [02/11/2006|14:37] C:\Program Files\Microsoft Games
      [18/05/2007|21:25] C:\Program Files\Microsoft Office
      [18/05/2007|21:25] C:\Program Files\Microsoft Works
      [18/05/2007|21:22] C:\Program Files\Microsoft.NET
      [02/11/2006|14:42] C:\Program Files\Movie Maker
      [05/12/2007|21:49] C:\Program Files\MP3 Player Utilities 3.75
      [02/11/2006|14:37] C:\Program Files\MSBuild
      [02/11/2006|14:37] C:\Program Files\MSN
      [03/06/2008|19:19] C:\Program Files\MSN Messenger
      [23/10/2007|11:43] C:\Program Files\MSXML 4.0
      [18/05/2007|19:42] C:\Program Files\NewTech Infosystems
      [28/04/2008|04:38] C:\Program Files\Norton 360
      [16/01/2008|18:37] C:\Program Files\Norton Security Scan
      [09/01/2008|20:11] C:\Program Files\Olympus
      [22/10/2007|13:07] C:\Program Files\OrangeHSS
      [18/05/2007|19:34] C:\Program Files\Realtek
      [02/11/2006|14:37] C:\Program Files\Reference Assemblies
      [22/10/2007|13:00] C:\Program Files\SAGEM
      [16/05/2008|19:17] C:\Program Files\Spybot - Search & Destroy
      [02/08/2007|03:23] C:\Program Files\SUYIN
      [31/05/2008|12:03] C:\Program Files\Symantec
      [02/11/2006|15:01] C:\Program Files\Uninstall Information
      [23/10/2007|12:08] C:\Program Files\Windows Calendar
      [02/11/2006|14:42] C:\Program Files\Windows Collaboration
      [23/10/2007|12:08] C:\Program Files\Windows Defender
      [02/11/2006|14:42] C:\Program Files\Windows Journal
      [16/05/2008|18:14] C:\Program Files\Windows Mail
      [23/10/2007|12:08] C:\Program Files\Windows Media Player
      [10/10/2007|12:52] C:\Program Files\Windows NT
      [02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
      [09/01/2008|21:47] C:\Program Files\Windows Sidebar
      [10/10/2007|12:57] C:\Program Files\Yahoo!

      ------[ Listing des dossiers dans C:\Program Files\Common Files ]------

      [22/10/2007|20:10] C:\Program Files\Common Files\Adobe
      [18/05/2007|21:22] C:\Program Files\Common Files\DESIGNER
      [22/10/2007|13:04] C:\Program Files\Common Files\France Telecom
      [26/03/2008|17:17] C:\Program Files\Common Files\Hewlett-Packard
      [26/03/2008|17:18] C:\Program Files\Common Files\HP
      [18/05/2007|19:41] C:\Program Files\Common Files\InstallShield
      [05/12/2007|19:54] C:\Program Files\Common Files\Java
      [18/05/2007|19:42] C:\Program Files\Common Files\LightScribe
      [19/05/2008|19:56] C:\Program Files\Common Files\microsoft shared
      [18/05/2007|19:42] C:\Program Files\Common Files\muvee Technologies
      [18/05/2007|19:42] C:\Program Files\Common Files\NewTech Infosystems
      [18/05/2007|19:49] C:\Program Files\Common Files\Oberon Media
      [21/10/2007|13:01] C:\Program Files\Common Files\Sandlot Shared
      [02/11/2006|13:18] C:\Program Files\Common Files\Services
      [02/08/2007|03:23] C:\Program Files\Common Files\snp2uvc
      [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
      [07/03/2008|12:15] C:\Program Files\Common Files\Symantec Shared
      [23/10/2007|12:08] C:\Program Files\Common Files\System
      [03/06/2008|18:00] C:\Program Files\Common Files\Wise Installation Wizard

      ---------------------------[ Process ]--------------------------

      ... 92

      iexplore.exe ~ [4484]

      ----------------------[ Recherche avec S_Lop ]---------------------

      C:\ProgramData\Chic Dale Dale.2rcmo
      C:\ProgramData\Chic Dale Dale.duvyt3
      C:\ProgramData\team stop stupid.i5hrq
      C:\ProgramData\Chic Dale Dale.2rcmo
      C:\ProgramData\Chic Dale Dale.duvyt3
      C:\ProgramData\team stop stupid.i5hrq

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      C:\ProgramData\File dvd base road
      C:\ProgramData\File dvd base road\Title Way.exe
      C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[1].txt
      C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[2].txt
      C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@2xmoinscher[1].txt
      C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@www.2xmoinscher[1].txt

      ----------------------[ Verification du Registre ]----------------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      ..... OK !

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts PROPRE


      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-06-04 16:17:09
      Windows 6.0.6000 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------


      Aucune autre infection trouvée !

      [F:32][D:8]-> C:\Users\FAMILL~1\AppData\Local\Temp
      [F:308][D:1]-> C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies
      [F:18][D:4]-> C:\Users\FAMILL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
      [F:10][D:6]-> C:\$Recycle.Bin

      [ UAC => 1 ]

      --------------------[ Fin du rapport a 16:18:45,93 ]----------------------
      0
  2. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    * Choisis cette fois ci l'Option 2 (Suppression)
    * Ne ferme pas la fenêtre lors de la suppression !
    * Poste le rapport généré (C:\lopR.txt)

    (Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

    _____________________

    encore des pubs???

    colle un rapport hijackthis

    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

    manuel :
    http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

    ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

    Ensuite avec Explorer créer un dossier c:\hijackthis
    Décompresser Hijackthis dans ce dossier.
    C'est important pour les sauvegardes."
    0
  3. coquelicot
     
    je te copie le nouveau rapport après suprresion a priori les pub n'apparaissent plus...
    merci de ton aide ! ^^

    -----------------------[ Lop S&D 4.2.1-2 XP/Vista ]---------------------

    [ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
    [ USER : Famille Bibi ] [ "C:\Lop SD" ] [ Selection : 2 ]
    [ 04/06/2008 | 17:35:18,20 ] [ PC : PC-DE-FAMILLEBI ]
    [ MAJ : 01-06-2008 | 15:51 ]
    [ UAC => 0 ]

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

    Supprimé! - C:\ProgramData\File dvd base road\Title Way.exe
    Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[1].txt
    Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@adopt.euroclick[2].txt
    Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@2xmoinscher[1].txt
    Supprimé! - C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies\famille_bibi@www.2xmoinscher[1].txt
    Supprimé! - C:\ProgramData\Chic Dale Dale.2rcmo
    Supprimé! - C:\ProgramData\Chic Dale Dale.duvyt3
    Supprimé! - C:\ProgramData\team stop stupid.i5hrq
    Supprimé! - C:\ProgramData\File dvd base road
    Restauré! - Fichier Hosts

    //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    -------------[ Listing des dossiers dans Application Data ]------------

    [26/02/2008|20:17] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Flash Player
    [22/10/2007|19:06] C:\Users\FAMILL~1\AppData\Roaming\Adobe\ESD
    [22/10/2007|18:49] C:\Users\FAMILL~1\AppData\Roaming\Adobe\Acrobat

    [01/05/2008|23:05] C:\Users\FAMILL~1\AppData\Roaming\Google\Local Search History

    [07/05/2008|12:38] C:\Users\FAMILL~1\AppData\Roaming\Grisoft\AVG Antispyware 7.5

    [27/03/2008|13:59] C:\Users\FAMILL~1\AppData\Roaming\HP\Digital Imaging
    [26/03/2008|17:38] C:\Users\FAMILL~1\AppData\Roaming\HP\ScLogs

    [10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Identities\{9F2A9E83-1A23-450A-89EC-81119A7AF663}

    [22/10/2007|12:59] C:\Users\FAMILL~1\AppData\Roaming\InstallShield\ISEngine12.0

    [27/02/2008|23:01] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.NetworkShare
    [05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\.AppSpecialShare
    [05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\xml
    [05/12/2007|20:00] C:\Users\FAMILL~1\AppData\Roaming\LimeWire\themes

    [14/11/2007|13:20] C:\Users\FAMILL~1\AppData\Roaming\Macromedia\Flash Player

    [26/05/2008|19:40] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Templates
    [11/05/2008|12:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Photo Gallery
    [07/05/2008|12:05] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MMC
    [18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Office
    [18/04/2008|20:02] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\CLView
    [01/02/2008|19:24] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\HTML Help
    [16/01/2008|14:04] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\eHome
    [09/01/2008|19:11] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\preuve
    [05/12/2007|21:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows Media Encoder
    [05/12/2007|21:49] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Installer
    [02/12/2007|17:31] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\MSN Messenger
    [10/11/2007|14:08] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Credentials
    [24/10/2007|14:17] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\IdentityCRL
    [22/10/2007|13:22] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Internet Explorer
    [17/10/2007|11:35] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\UProof
    [17/10/2007|11:34] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\OneNote
    [17/10/2007|11:33] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Excel
    [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Proof
    [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Document Building Blocks
    [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Word
    [10/10/2007|16:16] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\AddIns
    [10/10/2007|14:06] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Speech
    [10/10/2007|13:44] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Windows
    [10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Protect
    [10/10/2007|12:57] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\Crypto
    [10/10/2007|12:56] C:\Users\FAMILL~1\AppData\Roaming\Microsoft\SystemCertificates

    [01/02/2008|18:39] C:\Users\FAMILL~1\AppData\Roaming\Symantec\Cleanup

    ----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

    [03/06/2008 17:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{63DC4B75-E61D-4984-8437-422E711AA80F}.job
    [04/06/2008 17:33][--ah-----] C:\Windows\tasks\SA.DAT
    [04/06/2008 17:32][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    ------[ Listing des dossiers dans C:\ProgramData ]------

    [18/05/2007|21:25] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    [22/10/2007|20:10] C:\ProgramData\Adobe
    [02/11/2006|15:02] C:\ProgramData\Application Data
    [10/10/2007|12:52] C:\ProgramData\Bureau
    [02/08/2007|03:29] C:\ProgramData\CyberLink
    [02/11/2006|15:02] C:\ProgramData\Desktop
    [02/11/2006|15:02] C:\ProgramData\Documents
    [21/11/2007|18:46] C:\ProgramData\eMule
    [10/10/2007|12:52] C:\ProgramData\Favoris
    [02/11/2006|15:02] C:\ProgramData\Favorites
    [08/12/2007|11:34] C:\ProgramData\Google
    [07/05/2008|12:38] C:\ProgramData\Grisoft
    [26/03/2008|17:26] C:\ProgramData\Hewlett-Packard
    [26/03/2008|21:04] C:\ProgramData\HP
    [26/03/2008|17:18] C:\ProgramData\HP Product Assistant
    [26/03/2008|17:21] C:\ProgramData\HPSSUPPLY
    [03/06/2008|21:11] C:\ProgramData\hpzinstall.log
    [03/06/2008|18:05] C:\ProgramData\Lavasoft
    [16/01/2008|15:17] C:\ProgramData\LUUnInstall.LiveUpdate
    [10/10/2007|12:52] C:\ProgramData\Menu D‚marrer
    [16/05/2008|18:34] C:\ProgramData\Microsoft
    [19/05/2008|19:58] C:\ProgramData\Microsoft Help
    [10/10/2007|12:52] C:\ProgramData\ModŠles
    [08/02/2008|21:34] C:\ProgramData\pixelStorm
    [21/10/2007|13:01] C:\ProgramData\Sandlot Games
    [16/05/2008|19:17] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|15:02] C:\ProgramData\Start Menu
    [04/06/2008|17:23] C:\ProgramData\Symantec
    [16/01/2008|15:08] C:\ProgramData\Symantec Temporary Files
    [31/10/2007|19:06] C:\ProgramData\TEMP
    [02/11/2006|15:02] C:\ProgramData\Templates
    [26/03/2008|17:29] C:\ProgramData\WEBREG
    [19/05/2008|12:53] C:\ProgramData\WLInstaller
    [22/10/2007|13:24] C:\ProgramData\Yahoo! Companion

    ---------------[ Listing des dossiers dans C:\Program Files ]--------------

    [02/08/2007|03:28] C:\Program Files\Acer Arcade Deluxe
    [02/08/2007|03:23] C:\Program Files\ACER Crystal Eye webcam
    [18/05/2007|19:52] C:\Program Files\Acer GameZone
    [02/08/2007|03:29] C:\Program Files\Acer Inc
    [18/05/2007|21:25] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    [18/05/2007|19:52] C:\Program Files\Adobe
    [02/08/2007|03:24] C:\Program Files\Apoint2K
    [03/06/2008|19:07] C:\Program Files\a-squared Free
    [27/01/2008|15:19] C:\Program Files\AvantGo Connect
    [18/05/2007|19:36] C:\Program Files\Broadcom
    [03/06/2008|18:00] C:\Program Files\Common Files
    [18/05/2007|19:36] C:\Program Files\CONEXANT
    [18/05/2007|19:43] C:\Program Files\CyberLink
    [23/10/2007|12:12] C:\Program Files\desktop.ini
    [21/11/2007|18:42] C:\Program Files\eMule
    [10/10/2007|12:52] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [08/12/2007|11:47] C:\Program Files\Google
    [07/05/2008|12:38] C:\Program Files\Grisoft
    [26/03/2008|17:17] C:\Program Files\Hewlett-Packard
    [26/03/2008|17:21] C:\Program Files\HP
    [09/01/2008|20:11] C:\Program Files\InstallShield Installation Information
    [18/05/2007|19:33] C:\Program Files\Intel
    [10/04/2008|10:54] C:\Program Files\Internet Explorer
    [08/12/2007|11:33] C:\Program Files\Java
    [18/05/2007|19:38] C:\Program Files\Launch Manager
    [03/06/2008|18:01] C:\Program Files\Lavasoft
    [05/12/2007|19:57] C:\Program Files\LimeWire
    [03/06/2008|19:19] C:\Program Files\Messenger Plus! Live
    [27/01/2008|18:52] C:\Program Files\Microsoft ActiveSync
    [23/10/2007|11:52] C:\Program Files\Microsoft CAPICOM 2.1.0.2
    [02/11/2006|14:37] C:\Program Files\Microsoft Games
    [18/05/2007|21:25] C:\Program Files\Microsoft Office
    [18/05/2007|21:25] C:\Program Files\Microsoft Works
    [18/05/2007|21:22] C:\Program Files\Microsoft.NET
    [02/11/2006|14:42] C:\Program Files\Movie Maker
    [05/12/2007|21:49] C:\Program Files\MP3 Player Utilities 3.75
    [02/11/2006|14:37] C:\Program Files\MSBuild
    [02/11/2006|14:37] C:\Program Files\MSN
    [03/06/2008|19:19] C:\Program Files\MSN Messenger
    [23/10/2007|11:43] C:\Program Files\MSXML 4.0
    [18/05/2007|19:42] C:\Program Files\NewTech Infosystems
    [28/04/2008|04:38] C:\Program Files\Norton 360
    [16/01/2008|18:37] C:\Program Files\Norton Security Scan
    [09/01/2008|20:11] C:\Program Files\Olympus
    [22/10/2007|13:07] C:\Program Files\OrangeHSS
    [18/05/2007|19:34] C:\Program Files\Realtek
    [02/11/2006|14:37] C:\Program Files\Reference Assemblies
    [22/10/2007|13:00] C:\Program Files\SAGEM
    [16/05/2008|19:17] C:\Program Files\Spybot - Search & Destroy
    [02/08/2007|03:23] C:\Program Files\SUYIN
    [31/05/2008|12:03] C:\Program Files\Symantec
    [02/11/2006|15:01] C:\Program Files\Uninstall Information
    [23/10/2007|12:08] C:\Program Files\Windows Calendar
    [02/11/2006|14:42] C:\Program Files\Windows Collaboration
    [23/10/2007|12:08] C:\Program Files\Windows Defender
    [02/11/2006|14:42] C:\Program Files\Windows Journal
    [16/05/2008|18:14] C:\Program Files\Windows Mail
    [23/10/2007|12:08] C:\Program Files\Windows Media Player
    [10/10/2007|12:52] C:\Program Files\Windows NT
    [02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
    [09/01/2008|21:47] C:\Program Files\Windows Sidebar
    [10/10/2007|12:57] C:\Program Files\Yahoo!

    ------[ Listing des dossiers dans C:\Program Files\Common Files ]------

    [22/10/2007|20:10] C:\Program Files\Common Files\Adobe
    [18/05/2007|21:22] C:\Program Files\Common Files\DESIGNER
    [22/10/2007|13:04] C:\Program Files\Common Files\France Telecom
    [26/03/2008|17:17] C:\Program Files\Common Files\Hewlett-Packard
    [26/03/2008|17:18] C:\Program Files\Common Files\HP
    [18/05/2007|19:41] C:\Program Files\Common Files\InstallShield
    [05/12/2007|19:54] C:\Program Files\Common Files\Java
    [18/05/2007|19:42] C:\Program Files\Common Files\LightScribe
    [19/05/2008|19:56] C:\Program Files\Common Files\microsoft shared
    [18/05/2007|19:42] C:\Program Files\Common Files\muvee Technologies
    [18/05/2007|19:42] C:\Program Files\Common Files\NewTech Infosystems
    [18/05/2007|19:49] C:\Program Files\Common Files\Oberon Media
    [21/10/2007|13:01] C:\Program Files\Common Files\Sandlot Shared
    [02/11/2006|13:18] C:\Program Files\Common Files\Services
    [02/08/2007|03:23] C:\Program Files\Common Files\snp2uvc
    [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
    [07/03/2008|12:15] C:\Program Files\Common Files\Symantec Shared
    [23/10/2007|12:08] C:\Program Files\Common Files\System
    [03/06/2008|18:00] C:\Program Files\Common Files\Wise Installation Wizard

    ---------------------------[ Process ]--------------------------

    ... 91

    ... OK !

    ----------------------[ Recherche avec S_Lop ]---------------------

    Aucun fichier / dossier Lop trouvé !

    -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

    Aucun fichier / dossier Lop trouvé !

    ----------------------[ Verification du Registre ]----------------------

    ..... OK !

    --------------------[ Verification du fichier Hosts ]---------------------

    Fichier Hosts PROPRE

    ----------------[ Recherche de fichiers avec Catchme ]-----------------

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-06-04 17:36:38
    Windows 6.0.6000 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------[ Recherche d'autres infections ]---------------------

    Aucune autre infection trouvée !

    [F:35][D:9]-> C:\Users\FAMILL~1\AppData\Local\Temp
    [F:312][D:1]-> C:\Users\FAMILL~1\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:645][D:4]-> C:\Users\FAMILL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:10][D:6]-> C:\$Recycle.Bin

    [ UAC => 1 ]

    --------------------[ Fin du rapport a 17:38:10,23 ]----------------------
    0
    1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
       
      colle un rapport hijackthis


      http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

      manuel :
      http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
      https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

      Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

      ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

      Ensuite avec Explorer créer un dossier c:\hijackthis
      Décompresser Hijackthis dans ce dossier.
      C'est important pour les sauvegardes."
      0
  4. mimi_princy
     
    j'ai le meme probleme, je peu poster mon rapport également ?
    0