Sujet Précédent Sujet Suivant

Infection de Trojan+ CID

Résolu/Fermé
Mateo52 Messages postés 12 Date d'inscription mardi 10 juin 2008 Statut Membre Dernière intervention 30 septembre 2008 - 10 juin 2008 à 19:30
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 - 11 juin 2008 à 12:08
Bonjour,
voila je viens vous demander de l'aide car Kaspersky me detecte un trojan "joy coal heck" mais il lui est impossible de le supprimer.
De plus, j'ai également un soucie concernant des fenêtres CID qui apparaissent... J'ai utiliser CCleaner et Spybot afin de faire un premier trie mais il semble que cela ne suffise pas.

Que dois-je faire?

merci pour votre précieuse aide

7 réponses

Réponse 1 / 7
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
10 juin 2008 à 19:32
bonsoir et bienvenu

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---
0
Utilisateur anonyme
10 juin 2008 à 19:32
Salut fais ceci:

Télécharge lopS&D.exe sur ton bureau (Clique-droit sur le lien > Enregister la cible du lien sous)
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Désactive ton antivirus au cas où (tu pourras le réactiver après la fin du scan)
Double-clique sur lopSD pour lancer l'installation
Une fois installé, double-clique Lop S&D
Sélectionne la langue en appuyant sur la touche F, puis choisis l'option 1 (Recherche)
Si lopSD te demande de redémarrer accepte et attends la fin du scan.
Copie/colle le contenu du rapport qui se situe à la racine du DD C:\lopR.txt
0
Réponse 2 / 7
soummam Messages postés 179 Date d'inscription vendredi 23 décembre 2005 Statut Membre Dernière intervention 19 février 2017 110
10 juin 2008 à 19:41
Concernant les fenêtres intempestives CID il faut supprimer ce répertoire BONE ABOUT BOOK BOWS qui se trouve dans :
C:\Documents and Settings\All Users\Application Data\BONE ABOUT BOOK BOWS

Attention Application Data est un répertoire caché
Ouvrir l'explorateur Windows
aller dans Outils\Options des dossiers
Onglet Affichage
Cocher Afficher les fichiers et dossiers cachés
0
Réponse 3 / 7
Mateo52 Messages postés 12 Date d'inscription mardi 10 juin 2008 Statut Membre Dernière intervention 30 septembre 2008
10 juin 2008 à 19:48
voici le résultat de l'analyse


-----------------------[ Lop S&D 4.2.1-3 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Xtine JUDEK ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 10/06/2008 | 19:36:02,96 ] [ PC : XTINE ]
[ MAJ : 07-06-2008 | 22:15 ]

-------------[ Listing des dossiers dans Application Data ]------------

[17/11/2005|13:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[17/11/2005|13:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[17/11/2005|13:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[17/11/2005|13:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[17/11/2005|13:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[17/11/2005|13:27] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[16/12/2007|16:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\5400 Series
[17/11/2005|13:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[29/03/2007|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[10/04/2007|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[29/12/2006|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[17/11/2005|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[11/09/2006|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[17/11/2005|13:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[13/01/2008|19:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck
[17/01/2008|11:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[26/11/2006|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/11/2005|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/06/2007|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[10/09/2007|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[27/02/2008|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[17/11/2005|13:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[20/11/2007|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[30/05/2008|17:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[18/02/2008|01:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[25/08/2006|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/08/2006|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar

[17/11/2005|13:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[09/03/2006|15:22] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[10/04/2008|16:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[17/11/2005|13:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[05/04/2006|08:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

[16/12/2007|17:03] C:\DOCUME~1\XTINEJ~1\APPLIC~1\5400 Series
[17/12/2006|15:59] C:\DOCUME~1\XTINEJ~1\APPLIC~1\acid type mode
[30/12/2005|19:27] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Adobe
[18/05/2006|15:07] C:\DOCUME~1\XTINEJ~1\APPLIC~1\AdobeAUM
[03/01/2006|17:00] C:\DOCUME~1\XTINEJ~1\APPLIC~1\AdobeUM
[10/04/2007|20:13] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Ahead
[29/12/2006|11:16] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Apple Computer
[27/03/2007|18:43] C:\DOCUME~1\XTINEJ~1\APPLIC~1\BitTorrent
[03/10/2006|18:40] C:\DOCUME~1\XTINEJ~1\APPLIC~1\CyberLink
[17/11/2005|13:01] C:\DOCUME~1\XTINEJ~1\APPLIC~1\desktop.ini
[15/06/2006|15:51] C:\DOCUME~1\XTINEJ~1\APPLIC~1\dvdcss
[07/01/2006|14:50] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Google
[16/01/2006|13:51] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Help
[17/11/2005|13:09] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Identities
[17/11/2005|13:36] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Intel
[13/05/2007|14:08] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Lavasoft
[18/05/2006|15:11] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Leadertech
[17/11/2005|13:34] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Macromedia
[17/11/2005|13:01] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Microsoft
[30/12/2005|02:23] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Microsoft Web Folders
[16/01/2006|20:23] C:\DOCUME~1\XTINEJ~1\APPLIC~1\MSNInstaller
[10/04/2008|16:43] C:\DOCUME~1\XTINEJ~1\APPLIC~1\PDFCreator
[01/04/2007|16:48] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Screenshot Sender
[13/02/2006|21:32] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Sun
[17/11/2005|13:27] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Symantec
[27/12/2006|10:32] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Syntrillium
[06/09/2007|12:45] C:\DOCUME~1\XTINEJ~1\APPLIC~1\U3
[24/04/2006|11:40] C:\DOCUME~1\XTINEJ~1\APPLIC~1\vlc

[27/03/2007|13:16] C:\DOCUME~1\INVIT\APPLIC~1\Adobe
[17/11/2005|13:01] C:\DOCUME~1\INVIT\APPLIC~1\desktop.ini
[16/01/2006|11:53] C:\DOCUME~1\INVIT\APPLIC~1\Help
[17/11/2005|13:09] C:\DOCUME~1\INVIT\APPLIC~1\Identities
[17/11/2005|13:36] C:\DOCUME~1\INVIT\APPLIC~1\Intel
[17/11/2005|13:34] C:\DOCUME~1\INVIT\APPLIC~1\Macromedia
[17/11/2005|13:01] C:\DOCUME~1\INVIT\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[10/06/2008 19:00][--ah-----] C:\WINDOWS\tasks\AE2A24809189D804.job
[10/06/2008 16:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

AE2A24809189D804.job <--> c:\docume~1\xtinej~1\applic~1\acidty~1\Vcjumpsecond.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[24/06/2007|15:43] C:\Program Files\Abbyy FineReader 6.0 Sprint
[17/11/2005|13:15] C:\Program Files\Adobe
[04/03/2007|19:02] C:\Program Files\ahead
[11/04/2007|19:44] C:\Program Files\Alwil Software
[08/06/2007|13:41] C:\Program Files\a-squared
[08/06/2007|13:14] C:\Program Files\a-squared Free
[17/11/2005|13:19] C:\Program Files\ASUS
[03/10/2006|18:22] C:\Program Files\ASUSTeK
[21/02/2006|14:26] C:\Program Files\AviSynth 2.5
[30/05/2008|17:05] C:\Program Files\CCleaner
[13/01/2008|19:53] C:\Program Files\Circle Developement
[13/02/2008|10:58] C:\Program Files\Common Files
[17/11/2005|13:33] C:\Program Files\CONEXANT
[23/05/2006|17:24] C:\Program Files\DivX
[26/12/2006|22:48] C:\Program Files\eChanblard
[10/06/2008|19:03] C:\Program Files\EsetOnlineScanner
[17/11/2005|13:01] C:\Program Files\Fichiers communs
[02/05/2007|17:11] C:\Program Files\Free Easy Burner
[07/01/2006|14:37] C:\Program Files\Google
[23/04/2007|15:12] C:\Program Files\HT Video Splitter & Joiner 2.0 Shareware
[17/11/2005|13:16] C:\Program Files\InstallShield Installation Information
[17/11/2005|13:23] C:\Program Files\Intel
[17/11/2005|13:07] C:\Program Files\Internet Explorer
[13/02/2006|21:31] C:\Program Files\Java
[04/10/2007|10:53] C:\Program Files\Kaspersky Lab
[13/05/2007|14:08] C:\Program Files\Lavasoft
[24/06/2007|16:12] C:\Program Files\Lexmark 5400 Series
[16/12/2007|16:58] C:\Program Files\Lexmark Toolbar
[06/12/2007|22:32] C:\Program Files\LizardTech
[16/12/2007|17:01] C:\Program Files\Lx_cats
[19/03/2006|21:40] C:\Program Files\MDLChimeSP5.exe
[30/12/2005|20:09] C:\Program Files\Messager Wanadoo
[17/11/2005|13:06] C:\Program Files\Messenger
[26/11/2006|15:08] C:\Program Files\Messenger Plus! Live
[12/05/2007|08:41] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/11/2005|13:09] C:\Program Files\microsoft frontpage
[30/12/2005|02:23] C:\Program Files\Microsoft Office
[11/06/2007|01:06] C:\Program Files\Microsoft Visual Studio
[11/06/2007|01:06] C:\Program Files\Microsoft Works
[11/06/2007|01:05] C:\Program Files\Microsoft.NET
[17/11/2005|13:07] C:\Program Files\Movie Maker
[11/06/2007|01:06] C:\Program Files\MSBuild
[17/11/2005|13:06] C:\Program Files\MSN
[17/11/2005|13:06] C:\Program Files\MSN Gaming Zone
[01/01/2006|18:57] C:\Program Files\MSN Messenger
[15/10/2006|03:05] C:\Program Files\MSXML 4.0
[10/04/2007|20:13] C:\Program Files\NeroVision
[17/11/2005|13:07] C:\Program Files\NetMeeting
[17/11/2005|13:06] C:\Program Files\Online Services
[17/11/2005|13:07] C:\Program Files\Outlook Express
[10/04/2008|16:43] C:\Program Files\PDFCreator
[10/03/2007|18:02] C:\Program Files\Personal Media Manager
[29/12/2006|11:13] C:\Program Files\QuickTime
[17/11/2005|13:16] C:\Program Files\Realtek
[02/05/2008|21:13] C:\Program Files\SAGEM
[17/06/2007|16:05] C:\Program Files\Securitoo
[17/11/2005|13:08] C:\Program Files\Services en ligne
[20/11/2007|15:52] C:\Program Files\Skyline
[30/05/2008|17:00] C:\Program Files\Spybot - Search & Destroy
[17/04/2006|10:11] C:\Program Files\Support Tools
[17/11/2005|13:20] C:\Program Files\Synaptics
[23/01/2007|13:07] C:\Program Files\The Weather Channel FW
[10/06/2008|09:32] C:\Program Files\Trend Micro
[30/06/2006|19:08] C:\Program Files\TryMedia
[17/11/2005|13:30] C:\Program Files\Uninstall Information
[21/04/2006|17:01] C:\Program Files\VideoLAN
[30/12/2005|20:07] C:\Program Files\Wanadoo
[12/06/2007|20:37] C:\Program Files\Windows Live
[14/08/2006|22:08] C:\Program Files\Windows Live Toolbar
[23/06/2007|09:38] C:\Program Files\Windows Media Connect 2
[17/11/2005|13:06] C:\Program Files\Windows Media Player
[17/11/2005|13:06] C:\Program Files\Windows NT
[17/11/2005|13:08] C:\Program Files\WindowsUpdate
[03/11/2006|13:44] C:\Program Files\WinRAR
[17/11/2005|13:09] C:\Program Files\xerox
[25/01/2007|22:14] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[17/11/2005|13:15] C:\Program Files\Fichiers communs\Adobe
[11/06/2007|01:06] C:\Program Files\Fichiers communs\DESIGNER
[17/11/2005|13:16] C:\Program Files\Fichiers communs\InstallShield
[13/02/2006|21:29] C:\Program Files\Fichiers communs\Java
[17/11/2005|13:01] C:\Program Files\Fichiers communs\Microsoft Shared
[17/11/2005|13:07] C:\Program Files\Fichiers communs\MSSoap
[17/11/2005|13:01] C:\Program Files\Fichiers communs\ODBC
[17/11/2005|13:07] C:\Program Files\Fichiers communs\Services
[17/11/2005|13:01] C:\Program Files\Fichiers communs\SpeechEngines
[17/11/2005|13:26] C:\Program Files\Fichiers communs\Symantec Shared
[17/11/2005|13:07] C:\Program Files\Fichiers communs\System

---------------------------[ Process ]--------------------------

... 61

IEXPLORE.EXE ~ [2904]
IEXPLORE.EXE ~ [2972]
IEXPLORE.EXE ~ [184]
IEXPLORE.EXE ~ [140]
IEXPLORE.EXE ~ [1684]
IEXPLORE.EXE ~ [3516]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\window locks.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\tdsbedci.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\Long style bore proc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\Vc jump second.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\mnxkvkyn.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\wmpuaxbb.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\tybydule.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\ugporglc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\wjjlgvmq.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\lirarffb.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\chgdwatd.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\gaegonfj.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\yjiduqdd.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\umnstuek.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\ovdvmnvt.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\qmklzqnu.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\qoarldpc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\taixlubc.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck\Readme vc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\window locks.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\tdsbedci.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\Long style bore proc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\Vc jump second.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\mnxkvkyn.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\wmpuaxbb.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\tybydule.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\ugporglc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\wjjlgvmq.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\lirarffb.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\chgdwatd.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\gaegonfj.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\yjiduqdd.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\umnstuek.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\ovdvmnvt.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\qmklzqnu.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\qoarldpc.exe
C:\DOCUME~1\XTINEJ~1\APPLIC~1\acidty~1\taixlubc.exe
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\WINDOWS\Prefetch\WINDOW LOCKS.EXE-0A0C50BB.pf
C:\WINDOWS\Prefetch\VC JUMP SECOND.EXE-075A34B1.pf
C:\WINDOWS\Prefetch\TAIXLUBC.EXE-153B991B.pf
C:\WINDOWS\Prefetch\README VC.EXE-2964CC04.pf
C:\WINDOWS\Tasks\AE2A24809189D804.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"site rule"="C:\\DOCUME~1\\XTINEJ~1\\APPLIC~1\\ACIDTY~1\\window locks.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mpeg heck log link"="C:\\Documents and Settings\\All Users\\Application Data\\Joy coal mpeg heck\\Readme vc.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE


-> 8504 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-10 19:45:13
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:647][D:12]-> C:\DOCUME~1\XTINEJ~1\LOCALS~1\Temp
[F:43][D:0]-> C:\DOCUME~1\XTINEJ~1\Cookies
[F:2545][D:14]-> C:\DOCUME~1\XTINEJ~1\LOCALS~1\TEMPOR~1\content.IE5
[F:5][D:0]-> C:\Recycled

--------------------[ Fin du rapport a 19:46:52,95 ]----------------------
0
Réponse 4 / 7
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
10 juin 2008 à 19:50
pour virer ce qui est trouvé:

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
Mateo52 Messages postés 12 Date d'inscription mardi 10 juin 2008 Statut Membre Dernière intervention 30 septembre 2008
10 juin 2008 à 20:41
-----------------------[ Lop S&D 4.2.1-3 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Xtine JUDEK ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 10/06/2008 | 20:36:05,71 ] [ PC : XTINE ]
[ MAJ : 07-06-2008 | 22:15 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\window locks.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\tdsbedci.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\Long style bore proc.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\Vc jump second.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\mnxkvkyn.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\wmpuaxbb.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\tybydule.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\ugporglc.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\wjjlgvmq.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\lirarffb.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\chgdwatd.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\gaegonfj.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\yjiduqdd.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\umnstuek.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\ovdvmnvt.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\qmklzqnu.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\qoarldpc.exe
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode\taixlubc.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck\Readme vc.exe
Supprimé! - C:\Program Files\Circle Developement\Uninstall.exe
Supprimé! - C:\WINDOWS\Prefetch\VC JUMP SECOND.EXE-075A34B1.pf
Supprimé! - C:\WINDOWS\Prefetch\README VC.EXE-2964CC04.pf
Supprimé! - C:\WINDOWS\Tasks\AE2A24809189D804.job
Supprimé! - C:\DOCUME~1\XTINEJ~1\APPLIC~1\Acid Type Mode
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck
Supprimé! - C:\Program Files\Circle Developement
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[17/11/2005|13:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[17/11/2005|13:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[17/11/2005|13:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
[17/11/2005|13:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[17/11/2005|13:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[17/11/2005|13:27] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[16/12/2007|16:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\5400 Series
[17/11/2005|13:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[29/03/2007|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[10/04/2007|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[29/12/2006|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[17/11/2005|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[11/09/2006|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[17/11/2005|13:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[17/01/2008|11:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[26/11/2006|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/11/2005|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/06/2007|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[10/09/2007|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[27/02/2008|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[17/11/2005|13:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[20/11/2007|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[30/05/2008|17:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[18/02/2008|01:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[25/08/2006|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/08/2006|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar

[17/11/2005|13:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[09/03/2006|15:22] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[10/04/2008|16:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[17/11/2005|13:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[05/04/2006|08:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

[16/12/2007|17:03] C:\DOCUME~1\XTINEJ~1\APPLIC~1\5400 Series
[30/12/2005|19:27] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Adobe
[18/05/2006|15:07] C:\DOCUME~1\XTINEJ~1\APPLIC~1\AdobeAUM
[03/01/2006|17:00] C:\DOCUME~1\XTINEJ~1\APPLIC~1\AdobeUM
[10/04/2007|20:13] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Ahead
[29/12/2006|11:16] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Apple Computer
[27/03/2007|18:43] C:\DOCUME~1\XTINEJ~1\APPLIC~1\BitTorrent
[03/10/2006|18:40] C:\DOCUME~1\XTINEJ~1\APPLIC~1\CyberLink
[17/11/2005|13:01] C:\DOCUME~1\XTINEJ~1\APPLIC~1\desktop.ini
[15/06/2006|15:51] C:\DOCUME~1\XTINEJ~1\APPLIC~1\dvdcss
[07/01/2006|14:50] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Google
[16/01/2006|13:51] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Help
[17/11/2005|13:09] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Identities
[17/11/2005|13:36] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Intel
[13/05/2007|14:08] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Lavasoft
[18/05/2006|15:11] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Leadertech
[17/11/2005|13:34] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Macromedia
[17/11/2005|13:01] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Microsoft
[30/12/2005|02:23] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Microsoft Web Folders
[16/01/2006|20:23] C:\DOCUME~1\XTINEJ~1\APPLIC~1\MSNInstaller
[10/04/2008|16:43] C:\DOCUME~1\XTINEJ~1\APPLIC~1\PDFCreator
[01/04/2007|16:48] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Screenshot Sender
[13/02/2006|21:32] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Sun
[17/11/2005|13:27] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Symantec
[27/12/2006|10:32] C:\DOCUME~1\XTINEJ~1\APPLIC~1\Syntrillium
[06/09/2007|12:45] C:\DOCUME~1\XTINEJ~1\APPLIC~1\U3
[24/04/2006|11:40] C:\DOCUME~1\XTINEJ~1\APPLIC~1\vlc

[27/03/2007|13:16] C:\DOCUME~1\INVIT\APPLIC~1\Adobe
[17/11/2005|13:01] C:\DOCUME~1\INVIT\APPLIC~1\desktop.ini
[16/01/2006|11:53] C:\DOCUME~1\INVIT\APPLIC~1\Help
[17/11/2005|13:09] C:\DOCUME~1\INVIT\APPLIC~1\Identities
[17/11/2005|13:36] C:\DOCUME~1\INVIT\APPLIC~1\Intel
[17/11/2005|13:34] C:\DOCUME~1\INVIT\APPLIC~1\Macromedia
[17/11/2005|13:01] C:\DOCUME~1\INVIT\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[10/06/2008 16:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[24/06/2007|15:43] C:\Program Files\Abbyy FineReader 6.0 Sprint
[17/11/2005|13:15] C:\Program Files\Adobe
[04/03/2007|19:02] C:\Program Files\ahead
[11/04/2007|19:44] C:\Program Files\Alwil Software
[08/06/2007|13:41] C:\Program Files\a-squared
[08/06/2007|13:14] C:\Program Files\a-squared Free
[17/11/2005|13:19] C:\Program Files\ASUS
[03/10/2006|18:22] C:\Program Files\ASUSTeK
[21/02/2006|14:26] C:\Program Files\AviSynth 2.5
[30/05/2008|17:05] C:\Program Files\CCleaner
[13/02/2008|10:58] C:\Program Files\Common Files
[17/11/2005|13:33] C:\Program Files\CONEXANT
[23/05/2006|17:24] C:\Program Files\DivX
[26/12/2006|22:48] C:\Program Files\eChanblard
[10/06/2008|19:03] C:\Program Files\EsetOnlineScanner
[17/11/2005|13:01] C:\Program Files\Fichiers communs
[02/05/2007|17:11] C:\Program Files\Free Easy Burner
[07/01/2006|14:37] C:\Program Files\Google
[23/04/2007|15:12] C:\Program Files\HT Video Splitter & Joiner 2.0 Shareware
[17/11/2005|13:16] C:\Program Files\InstallShield Installation Information
[17/11/2005|13:23] C:\Program Files\Intel
[17/11/2005|13:07] C:\Program Files\Internet Explorer
[13/02/2006|21:31] C:\Program Files\Java
[04/10/2007|10:53] C:\Program Files\Kaspersky Lab
[13/05/2007|14:08] C:\Program Files\Lavasoft
[24/06/2007|16:12] C:\Program Files\Lexmark 5400 Series
[16/12/2007|16:58] C:\Program Files\Lexmark Toolbar
[06/12/2007|22:32] C:\Program Files\LizardTech
[16/12/2007|17:01] C:\Program Files\Lx_cats
[19/03/2006|21:40] C:\Program Files\MDLChimeSP5.exe
[30/12/2005|20:09] C:\Program Files\Messager Wanadoo
[17/11/2005|13:06] C:\Program Files\Messenger
[26/11/2006|15:08] C:\Program Files\Messenger Plus! Live
[12/05/2007|08:41] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/11/2005|13:09] C:\Program Files\microsoft frontpage
[30/12/2005|02:23] C:\Program Files\Microsoft Office
[11/06/2007|01:06] C:\Program Files\Microsoft Visual Studio
[11/06/2007|01:06] C:\Program Files\Microsoft Works
[11/06/2007|01:05] C:\Program Files\Microsoft.NET
[17/11/2005|13:07] C:\Program Files\Movie Maker
[11/06/2007|01:06] C:\Program Files\MSBuild
[17/11/2005|13:06] C:\Program Files\MSN
[17/11/2005|13:06] C:\Program Files\MSN Gaming Zone
[01/01/2006|18:57] C:\Program Files\MSN Messenger
[15/10/2006|03:05] C:\Program Files\MSXML 4.0
[10/04/2007|20:13] C:\Program Files\NeroVision
[17/11/2005|13:07] C:\Program Files\NetMeeting
[17/11/2005|13:06] C:\Program Files\Online Services
[17/11/2005|13:07] C:\Program Files\Outlook Express
[10/04/2008|16:43] C:\Program Files\PDFCreator
[10/03/2007|18:02] C:\Program Files\Personal Media Manager
[29/12/2006|11:13] C:\Program Files\QuickTime
[17/11/2005|13:16] C:\Program Files\Realtek
[02/05/2008|21:13] C:\Program Files\SAGEM
[17/06/2007|16:05] C:\Program Files\Securitoo
[17/11/2005|13:08] C:\Program Files\Services en ligne
[20/11/2007|15:52] C:\Program Files\Skyline
[30/05/2008|17:00] C:\Program Files\Spybot - Search & Destroy
[17/04/2006|10:11] C:\Program Files\Support Tools
[17/11/2005|13:20] C:\Program Files\Synaptics
[23/01/2007|13:07] C:\Program Files\The Weather Channel FW
[10/06/2008|09:32] C:\Program Files\Trend Micro
[30/06/2006|19:08] C:\Program Files\TryMedia
[17/11/2005|13:30] C:\Program Files\Uninstall Information
[21/04/2006|17:01] C:\Program Files\VideoLAN
[30/12/2005|20:07] C:\Program Files\Wanadoo
[12/06/2007|20:37] C:\Program Files\Windows Live
[14/08/2006|22:08] C:\Program Files\Windows Live Toolbar
[23/06/2007|09:38] C:\Program Files\Windows Media Connect 2
[17/11/2005|13:06] C:\Program Files\Windows Media Player
[17/11/2005|13:06] C:\Program Files\Windows NT
[17/11/2005|13:08] C:\Program Files\WindowsUpdate
[03/11/2006|13:44] C:\Program Files\WinRAR
[17/11/2005|13:09] C:\Program Files\xerox
[25/01/2007|22:14] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[17/11/2005|13:15] C:\Program Files\Fichiers communs\Adobe
[11/06/2007|01:06] C:\Program Files\Fichiers communs\DESIGNER
[17/11/2005|13:16] C:\Program Files\Fichiers communs\InstallShield
[13/02/2006|21:29] C:\Program Files\Fichiers communs\Java
[17/11/2005|13:01] C:\Program Files\Fichiers communs\Microsoft Shared
[17/11/2005|13:07] C:\Program Files\Fichiers communs\MSSoap
[17/11/2005|13:01] C:\Program Files\Fichiers communs\ODBC
[17/11/2005|13:07] C:\Program Files\Fichiers communs\Services
[17/11/2005|13:01] C:\Program Files\Fichiers communs\SpeechEngines
[17/11/2005|13:26] C:\Program Files\Fichiers communs\Symantec Shared
[17/11/2005|13:07] C:\Program Files\Fichiers communs\System

---------------------------[ Process ]--------------------------

... 55

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-10 20:39:15
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:647][D:12]-> C:\DOCUME~1\XTINEJ~1\LOCALS~1\Temp
[F:43][D:0]-> C:\DOCUME~1\XTINEJ~1\Cookies
[F:2548][D:14]-> C:\DOCUME~1\XTINEJ~1\LOCALS~1\TEMPOR~1\content.IE5
[F:5][D:0]-> C:\Recycled

--------------------[ Fin du rapport a 20:39:59,14 ]----------------------
0
Réponse 6 / 7
Mateo52 Messages postés 12 Date d'inscription mardi 10 juin 2008 Statut Membre Dernière intervention 30 septembre 2008
11 juin 2008 à 08:37
Merci a vous tous pour m'avoir aider.
0
Réponse 7 / 7
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
11 juin 2008 à 12:08
derien
a+
0

Discussions similaires

Comment supprimer le virus Trojan
vitsou -
vitsou -

18 réponses
Aide pour un virus
cerise92700 -
MisteryBean -

41 réponses
Trojan impossible à supprimer!
Gridouu -
Malekal_morte- -

12 réponses
Virus : trojan:win32/wacatac.h!ml
Alky09 -
bazfile -

8 réponses
Comment éliminer manuellement virus trojan?
ballag -
RClog -

12 réponses