Problème virus "hopelessromantic"

Fermé
kijake - 14 juin 2008 à 14:06
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 - 22 juin 2008 à 18:33
Bonjour,

j'ai actuellement un problème avec une page "hopelessromantic" qui s'ouvre lorsque j'utilise internet explorer et je ne sais plus utiliser certains sites comme google ou Yaho. Cette page s'ouvre aussi sous le nom mediafilehost ou des jeux de poker.

J'ai utilisé hijackthis et voici le résultat

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:01:23, on 14/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\ESPNRunTime\DIGServices.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?p=us
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3CA60057-9277-49C0-8D64-280DBAD9C3E1} - C:\WINDOWS\system32\pmnnMgHw.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: {344b70ea-5b87-ef7b-3334-607a22a73216} - {61237a22-a706-4333-b7fe-78b5ae07b443} - C:\WINDOWS\system32\odtvfxmg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AB085C83-EA37-40B2-8A80-400FCDBC079B} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {D6285CBE-7CF0-4B34-9AB0-D30ACDE24FF9} - C:\WINDOWS\system32\geBqPHyW.dll (file missing)
O2 - BHO: (no name) - {EC64E8C7-DDF0-40D3-95CD-B423106A56E1} - (no file)
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [DIGServices] C:\Program Files\ESPNRunTime\DIGServices.exe /brand=ESPN /priority=0 /poll=24
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [f43322a0] rundll32.exe "C:\WINDOWS\system32\bfyfdkhw.dll",b
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [BMf700113c] Rundll32.exe "C:\WINDOWS\system32\edrhttte.dll",s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [SpybotDeletingA8934] command /c del "C:\WINDOWS\system32\geBqPHyW.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingC9604] cmd /c del "C:\WINDOWS\system32\geBqPHyW.dll_old"
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Thoosje Sidebar .lnk = C:\Program Files\Thoosje Sidebar V2.0\Thoosje Sidebar .exe
O4 - Global Startup: Image Transfer.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\befr.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.be/s/v/26.30/uploader2.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.dotphoto.com/DPImageUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} - http://ps.itv.mop.com/dn/files/pCastCtl-1.0.0.94_signed.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: pmnnMgHw - pmnnMgHw.dll (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
A voir également:

8 réponses

fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
14 juin 2008 à 14:10
bonjour et bienvenu

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---
0
voici le résultat

-----------------------[ Lop S&D 4.2.1-4 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Jake Q ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ sam. 14/06/2008 | 14:18:48,02 ] [ PC : JAKE ]
[ MAJ : 13-06-2008 | 02:10 ]

-------------[ Listing des dossiers dans Application Data ]------------

[14/06/2008|13:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[29/07/2007|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[19/11/2006|00:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[16/08/2004|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[18/09/2006|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DIGStream
[29/07/2007|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[09/04/2006|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESPN
[05/09/2007|02:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[07/09/2007|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/06/2008|13:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[27/03/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[23/02/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[29/07/2007|14:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[16/11/2007|22:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[28/05/2005|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[21/08/2006|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[29/05/2008|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[01/01/2006|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[14/06/2008|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/01/2008|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
[13/04/2006|00:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[16/03/2008|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[21/08/2006|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!

[16/08/2004|17:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[28/05/2005|19:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[28/05/2005|18:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[28/05/2005|19:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec


[02/03/2008|02:16] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Adobe
[11/05/2008|14:40] C:\DOCUME~1\JAKEQ~1\APPLIC~1\AdobeUM
[06/05/2006|21:49] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Ahead
[11/03/2006|22:53] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Apple Computer
[24/02/2008|01:38] C:\DOCUME~1\JAKEQ~1\APPLIC~1\AVIEncoder.wff
[12/06/2008|17:24] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Azureus
[13/07/2006|20:32] C:\DOCUME~1\JAKEQ~1\APPLIC~1\BitTorrent
[28/09/2005|18:23] C:\DOCUME~1\JAKEQ~1\APPLIC~1\CyberLink
[16/08/2004|17:55] C:\DOCUME~1\JAKEQ~1\APPLIC~1\desktop.ini
[16/11/2006|21:54] C:\DOCUME~1\JAKEQ~1\APPLIC~1\dvdcss
[14/10/2007|16:12] C:\DOCUME~1\JAKEQ~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[13/01/2008|00:46] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Google
[28/09/2005|21:41] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Help
[16/08/2004|18:19] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Identities
[19/09/2007|17:12] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Lavasoft
[04/10/2005|21:14] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Leadertech
[26/10/2006|15:21] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Lionhead Studios
[12/07/2006|22:55] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Macromedia
[13/06/2007|11:25] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Microsoft
[19/03/2006|13:55] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Microsoft Web Folders
[14/07/2006|23:37] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Mozilla
[25/09/2007|19:42] C:\DOCUME~1\JAKEQ~1\APPLIC~1\NMM-MetaData.db
[29/07/2007|14:20] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Nokia
[09/03/2008|23:58] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Nokia Multimedia Player
[29/07/2007|14:15] C:\DOCUME~1\JAKEQ~1\APPLIC~1\PC Suite
[01/01/2007|14:32] C:\DOCUME~1\JAKEQ~1\APPLIC~1\PPMate
[18/08/2007|15:53] C:\DOCUME~1\JAKEQ~1\APPLIC~1\ppStream
[01/01/2006|14:47] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Publish Providers
[19/11/2007|01:21] C:\DOCUME~1\JAKEQ~1\APPLIC~1\QuickZip45.ini
[20/04/2008|16:40] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Real
[21/08/2006|20:01] C:\DOCUME~1\JAKEQ~1\APPLIC~1\River Past G4
[31/05/2008|22:58] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Skype
[30/05/2008|17:22] C:\DOCUME~1\JAKEQ~1\APPLIC~1\skypePM
[04/10/2005|21:14] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sonic
[01/01/2006|14:46] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sony
[19/12/2007|21:52] C:\DOCUME~1\JAKEQ~1\APPLIC~1\SopCast
[21/10/2007|23:11] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sports Interactive
[28/05/2005|18:54] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sun
[28/05/2005|19:01] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Symantec
[07/09/2007|22:14] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Talkback
[28/08/2007|20:46] C:\DOCUME~1\JAKEQ~1\APPLIC~1\TVU networks
[25/01/2007|23:08] C:\DOCUME~1\JAKEQ~1\APPLIC~1\uTorrent
[07/01/2006|22:24] C:\DOCUME~1\JAKEQ~1\APPLIC~1\vlc
[25/05/2008|10:16] C:\DOCUME~1\JAKEQ~1\APPLIC~1\WAYN
[17/11/2007|00:59] C:\DOCUME~1\JAKEQ~1\APPLIC~1\WinRAR
[19/08/2007|13:22] C:\DOCUME~1\JAKEQ~1\APPLIC~1\yahoo!

[16/03/2007|18:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[16/03/2007|18:55] C:\DOCUME~1\LOCALS~1\APPLIC~1\MEGAUPLOADTOOLBAR
[09/03/2007|16:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[18/09/2006|19:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

[11/07/2007|13:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[11/06/2008 22:02][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[14/06/2008 13:04][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[10/06/2008|00:34] C:\Program Files\7-Zip
[14/06/2008|13:47] C:\Program Files\Adobe
[14/06/2008|12:20] C:\Program Files\AdwareSpywareScannerDeleter
[20/08/2006|00:16] C:\Program Files\Ahead
[30/09/2007|22:08] C:\Program Files\Alwil Software
[04/06/2008|14:15] C:\Program Files\Apple Software Update
[28/05/2005|18:54] C:\Program Files\ATI Technologies
[27/10/2006|23:01] C:\Program Files\AviSynth 2.5
[18/04/2008|23:17] C:\Program Files\Azureus
[05/09/2007|01:54] C:\Program Files\Bonjour
[27/10/2006|22:35] C:\Program Files\Cucusoft
[28/05/2005|19:04] C:\Program Files\CyberLink
[29/07/2007|14:15] C:\Program Files\DIFX
[09/04/2006|22:03] C:\Program Files\DIGStream
[17/12/2007|21:57] C:\Program Files\DivX
[10/06/2008|17:30] C:\Program Files\DkZ Studio
[30/10/2006|20:45] C:\Program Files\DkZ Update
[02/10/2005|21:26] C:\Program Files\D-Tools
[01/05/2008|10:38] C:\Program Files\eRightSoft
[09/04/2006|22:03] C:\Program Files\ESPN
[09/04/2006|22:03] C:\Program Files\ESPNMotion
[09/04/2006|22:03] C:\Program Files\ESPNRunTime
[29/05/2008|14:53] C:\Program Files\Fichiers communs
[24/03/2008|14:20] C:\Program Files\FM Modifier 2.2
[13/01/2008|00:45] C:\Program Files\Google
[16/02/2007|13:37] C:\Program Files\Guitar Pro 5
[01/05/2008|12:45] C:\Program Files\InstallShield Installation Information
[28/05/2005|18:52] C:\Program Files\Intel
[12/06/2008|00:25] C:\Program Files\Internet Explorer
[04/06/2008|14:31] C:\Program Files\iPod
[04/06/2008|14:32] C:\Program Files\iTunes
[14/06/2008|13:41] C:\Program Files\Java
[29/12/2006|17:56] C:\Program Files\K-Lite Codec Pack
[07/06/2008|18:50] C:\Program Files\KONAMI
[21/01/2008|21:24] C:\Program Files\LimeWire
[21/01/2006|12:51] C:\Program Files\Messenger
[26/05/2008|12:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[19/03/2006|13:55] C:\Program Files\microsoft frontpage
[09/06/2006|23:55] C:\Program Files\microsoft office
[01/01/2006|14:34] C:\Program Files\Microsoft SQL Server
[28/05/2005|19:08] C:\Program Files\Microsoft Visual Studio
[01/01/2006|14:18] C:\Program Files\Movie Maker
[14/06/2008|12:04] C:\Program Files\Mozilla Firefox
[14/10/2007|19:52] C:\Program Files\mresreg
[08/03/2006|16:45] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[16/03/2008|20:56] C:\Program Files\MSN Messenger
[23/02/2008|11:32] C:\Program Files\NCH Software
[16/08/2004|18:06] C:\Program Files\NetMeeting
[29/07/2007|14:16] C:\Program Files\Nokia
[19/09/2007|21:35] C:\Program Files\OneStepSearch
[15/06/2007|00:31] C:\Program Files\Outlook Express
[29/07/2007|14:15] C:\Program Files\PC Connectivity Solution
[13/04/2008|00:28] C:\Program Files\Picasa2
[17/12/2007|00:06] C:\Program Files\PIXELA
[19/10/2007|00:14] C:\Program Files\podXP
[13/12/2007|16:55] C:\Program Files\ppStream
[04/06/2008|14:27] C:\Program Files\QuickTime
[28/05/2005|19:06] C:\Program Files\Real
[16/08/2004|18:07] C:\Program Files\Services en ligne
[29/05/2008|14:53] C:\Program Files\Skype
[15/10/2007|17:48] C:\Program Files\Slideshow pro
[16/02/2008|15:33] C:\Program Files\Smart Projects
[28/05/2005|19:06] C:\Program Files\Sonic
[19/03/2006|23:40] C:\Program Files\Sony
[17/12/2007|00:06] C:\Program Files\Sony Corporation
[01/01/2006|14:32] C:\Program Files\Sony Setup
[20/05/2008|04:38] C:\Program Files\SopCast
[22/10/2007|18:59] C:\Program Files\Sports Interactive
[14/06/2008|01:36] C:\Program Files\Spybot - Search & Destroy
[28/05/2005|18:46] C:\Program Files\Synaptics
[22/03/2007|21:16] C:\Program Files\TGTSoft
[14/06/2008|03:08] C:\Program Files\themexp
[27/04/2008|00:45] C:\Program Files\TVAnts
[21/01/2008|22:30] C:\Program Files\TVUPlayer
[01/01/2006|14:35] C:\Program Files\Uninstall Information
[26/01/2008|16:59] C:\Program Files\uusee
[09/12/2007|16:43] C:\Program Files\Veoh Networks
[07/01/2006|19:44] C:\Program Files\VideoLAN
[27/10/2006|23:32] C:\Program Files\VideoraiPodConverter
[17/09/2007|11:53] C:\Program Files\Vstplugins
[06/06/2008|21:55] C:\Program Files\WAYN
[16/03/2008|20:55] C:\Program Files\Windows Live
[17/02/2007|19:58] C:\Program Files\Windows Media Connect 2
[17/02/2007|20:16] C:\Program Files\Windows Media Player
[16/08/2004|18:03] C:\Program Files\Windows NT
[16/08/2004|18:07] C:\Program Files\WindowsUpdate
[10/06/2008|08:50] C:\Program Files\WinRAR
[27/10/2006|22:51] C:\Program Files\WinXMedia
[14/10/2007|22:55] C:\Program Files\Wondershare
[16/08/2004|18:11] C:\Program Files\xerox
[22/08/2007|18:02] C:\Program Files\Yahoo!
[21/10/2007|23:08] C:\Program Files\Zero G Registry

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[14/06/2008|13:47] C:\Program Files\Fichiers communs\Adobe
[20/08/2006|00:16] C:\Program Files\Fichiers communs\Ahead
[29/07/2007|12:04] C:\Program Files\Fichiers communs\Apple
[28/05/2005|19:08] C:\Program Files\Fichiers communs\Designer
[07/10/2005|17:12] C:\Program Files\Fichiers communs\DirectX
[20/10/2006|22:54] C:\Program Files\Fichiers communs\InstallShield
[28/05/2005|18:54] C:\Program Files\Fichiers communs\Java
[05/09/2007|01:34] C:\Program Files\Fichiers communs\Macrovision Shared
[16/03/2008|20:54] C:\Program Files\Fichiers communs\Microsoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[29/07/2007|14:16] C:\Program Files\Fichiers communs\Nokia
[29/10/2006|15:18] C:\Program Files\Fichiers communs\Nullsoft
[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
[29/07/2007|14:16] C:\Program Files\Fichiers communs\PCSuite
[18/10/2007|22:48] C:\Program Files\Fichiers communs\Real
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[29/05/2008|14:53] C:\Program Files\Fichiers communs\Skype
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[28/05/2005|19:06] C:\Program Files\Fichiers communs\SureThing Shared
[25/03/2006|15:03] C:\Program Files\Fichiers communs\Synacast
[15/06/2007|00:31] C:\Program Files\Fichiers communs\System
[28/05/2005|19:03] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[16/03/2008|20:54] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[18/10/2007|22:48] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 51

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@adultfriendfinder[2].txt
C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@adopt.euroclick[1].txt
C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@partygaming.122.2o7[1].txt
C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@partypoker[2].txt
C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@commentcamarche[1].txt

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-14 14:19:41
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\pack.epk
C:\WINDOWS\system32\aadezogn_navps.dat
C:\WINDOWS\system32\aadezogn_nav.dat
C:\WINDOWS\system32\aadezogn.dat
[b]! EGDACCESS !/b

C:\WINDOWS\system32\WyHPqBeg.ini2
[b]! VUNDO Possible !/b

=> C:\Documents and Settings\Jake Q\Application Data\Azureus\torrents\ALCOHOL.120%_CloneCD_CloneDVD_AnyDVD.+.Crack.torrent
=> C:\Documents and Settings\Jake Q\Application Data\Azureus\torrents\NbaLive_2007_NO-CD_Crack_[vitality].rar_^mininova.org^'[1].torrent
=> C:\Documents and Settings\Jake Q\Application Data\Macromedia\Flash Player\#SharedObjects\GPEEJRJ8\crackle.com
=> C:\Documents and Settings\Jake Q\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com
=> C:\Documents and Settings\Jake Q\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com\settings.sol
=> C:\Documents and Settings\Jake Q\Mes documents\Music\Kanye_West-Late_Registration\08-kanye_west-crack_music_(feat_the_game).mp3


[F:14900][D:202]-> C:\DOCUME~1\JAKEQ~1\LOCALS~1\Temp
[F:537][D:0]-> C:\DOCUME~1\JAKEQ~1\Cookies
[F:1621][D:7]-> C:\DOCUME~1\JAKEQ~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 14:22:29,38 ]----------------------
0
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
14 juin 2008 à 14:25
pour virer ce qui est trouvé:

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)


puis:

Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
0
voici le lopr.txt:


-----------------------[ Lop S&D 4.2.1-4 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Jake Q ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ sam. 14/06/2008 | 14:26:51,83 ] [ PC : JAKE ]
[ MAJ : 13-06-2008 | 02:10 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@adultfriendfinder[2].txt
Supprimé! - C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@adopt.euroclick[1].txt
Supprimé! - C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@partygaming.122.2o7[1].txt
Supprimé! - C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@partypoker[2].txt
Supprimé! - C:\DOCUME~1\JAKEQ~1\Cookies\jake_q@commentcamarche[1].txt
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[14/06/2008|13:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[29/07/2007|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[19/11/2006|00:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[16/08/2004|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[18/09/2006|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DIGStream
[29/07/2007|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[09/04/2006|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESPN
[05/09/2007|02:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[07/09/2007|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/06/2008|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[27/03/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[23/02/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[29/07/2007|14:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[16/11/2007|22:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[28/05/2005|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[21/08/2006|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[29/05/2008|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[01/01/2006|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[14/06/2008|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/01/2008|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
[13/04/2006|00:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[16/03/2008|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[21/08/2006|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!

[16/08/2004|17:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[28/05/2005|19:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[28/05/2005|18:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[28/05/2005|19:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec


[02/03/2008|02:16] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Adobe
[11/05/2008|14:40] C:\DOCUME~1\JAKEQ~1\APPLIC~1\AdobeUM
[06/05/2006|21:49] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Ahead
[11/03/2006|22:53] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Apple Computer
[24/02/2008|01:38] C:\DOCUME~1\JAKEQ~1\APPLIC~1\AVIEncoder.wff
[12/06/2008|17:24] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Azureus
[13/07/2006|20:32] C:\DOCUME~1\JAKEQ~1\APPLIC~1\BitTorrent
[28/09/2005|18:23] C:\DOCUME~1\JAKEQ~1\APPLIC~1\CyberLink
[16/08/2004|17:55] C:\DOCUME~1\JAKEQ~1\APPLIC~1\desktop.ini
[16/11/2006|21:54] C:\DOCUME~1\JAKEQ~1\APPLIC~1\dvdcss
[14/10/2007|16:12] C:\DOCUME~1\JAKEQ~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[13/01/2008|00:46] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Google
[28/09/2005|21:41] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Help
[16/08/2004|18:19] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Identities
[19/09/2007|17:12] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Lavasoft
[04/10/2005|21:14] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Leadertech
[26/10/2006|15:21] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Lionhead Studios
[12/07/2006|22:55] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Macromedia
[13/06/2007|11:25] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Microsoft
[19/03/2006|13:55] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Microsoft Web Folders
[14/07/2006|23:37] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Mozilla
[25/09/2007|19:42] C:\DOCUME~1\JAKEQ~1\APPLIC~1\NMM-MetaData.db
[29/07/2007|14:20] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Nokia
[09/03/2008|23:58] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Nokia Multimedia Player
[29/07/2007|14:15] C:\DOCUME~1\JAKEQ~1\APPLIC~1\PC Suite
[01/01/2007|14:32] C:\DOCUME~1\JAKEQ~1\APPLIC~1\PPMate
[18/08/2007|15:53] C:\DOCUME~1\JAKEQ~1\APPLIC~1\ppStream
[01/01/2006|14:47] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Publish Providers
[19/11/2007|01:21] C:\DOCUME~1\JAKEQ~1\APPLIC~1\QuickZip45.ini
[20/04/2008|16:40] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Real
[21/08/2006|20:01] C:\DOCUME~1\JAKEQ~1\APPLIC~1\River Past G4
[31/05/2008|22:58] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Skype
[30/05/2008|17:22] C:\DOCUME~1\JAKEQ~1\APPLIC~1\skypePM
[04/10/2005|21:14] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sonic
[01/01/2006|14:46] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sony
[19/12/2007|21:52] C:\DOCUME~1\JAKEQ~1\APPLIC~1\SopCast
[21/10/2007|23:11] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sports Interactive
[28/05/2005|18:54] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Sun
[28/05/2005|19:01] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Symantec
[07/09/2007|22:14] C:\DOCUME~1\JAKEQ~1\APPLIC~1\Talkback
[28/08/2007|20:46] C:\DOCUME~1\JAKEQ~1\APPLIC~1\TVU networks
[25/01/2007|23:08] C:\DOCUME~1\JAKEQ~1\APPLIC~1\uTorrent
[07/01/2006|22:24] C:\DOCUME~1\JAKEQ~1\APPLIC~1\vlc
[25/05/2008|10:16] C:\DOCUME~1\JAKEQ~1\APPLIC~1\WAYN
[17/11/2007|00:59] C:\DOCUME~1\JAKEQ~1\APPLIC~1\WinRAR
[19/08/2007|13:22] C:\DOCUME~1\JAKEQ~1\APPLIC~1\yahoo!

[16/03/2007|18:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[16/03/2007|18:55] C:\DOCUME~1\LOCALS~1\APPLIC~1\MEGAUPLOADTOOLBAR
[09/03/2007|16:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[18/09/2006|19:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

[11/07/2007|13:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[11/06/2008 22:02][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[14/06/2008 13:04][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[10/06/2008|00:34] C:\Program Files\7-Zip
[14/06/2008|13:47] C:\Program Files\Adobe
[14/06/2008|12:20] C:\Program Files\AdwareSpywareScannerDeleter
[20/08/2006|00:16] C:\Program Files\Ahead
[30/09/2007|22:08] C:\Program Files\Alwil Software
[04/06/2008|14:15] C:\Program Files\Apple Software Update
[28/05/2005|18:54] C:\Program Files\ATI Technologies
[27/10/2006|23:01] C:\Program Files\AviSynth 2.5
[18/04/2008|23:17] C:\Program Files\Azureus
[05/09/2007|01:54] C:\Program Files\Bonjour
[27/10/2006|22:35] C:\Program Files\Cucusoft
[28/05/2005|19:04] C:\Program Files\CyberLink
[29/07/2007|14:15] C:\Program Files\DIFX
[09/04/2006|22:03] C:\Program Files\DIGStream
[17/12/2007|21:57] C:\Program Files\DivX
[10/06/2008|17:30] C:\Program Files\DkZ Studio
[30/10/2006|20:45] C:\Program Files\DkZ Update
[02/10/2005|21:26] C:\Program Files\D-Tools
[01/05/2008|10:38] C:\Program Files\eRightSoft
[09/04/2006|22:03] C:\Program Files\ESPN
[09/04/2006|22:03] C:\Program Files\ESPNMotion
[09/04/2006|22:03] C:\Program Files\ESPNRunTime
[29/05/2008|14:53] C:\Program Files\Fichiers communs
[24/03/2008|14:20] C:\Program Files\FM Modifier 2.2
[13/01/2008|00:45] C:\Program Files\Google
[16/02/2007|13:37] C:\Program Files\Guitar Pro 5
[01/05/2008|12:45] C:\Program Files\InstallShield Installation Information
[28/05/2005|18:52] C:\Program Files\Intel
[12/06/2008|00:25] C:\Program Files\Internet Explorer
[04/06/2008|14:31] C:\Program Files\iPod
[04/06/2008|14:32] C:\Program Files\iTunes
[14/06/2008|13:41] C:\Program Files\Java
[29/12/2006|17:56] C:\Program Files\K-Lite Codec Pack
[07/06/2008|18:50] C:\Program Files\KONAMI
[21/01/2008|21:24] C:\Program Files\LimeWire
[21/01/2006|12:51] C:\Program Files\Messenger
[26/05/2008|12:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[19/03/2006|13:55] C:\Program Files\microsoft frontpage
[09/06/2006|23:55] C:\Program Files\microsoft office
[01/01/2006|14:34] C:\Program Files\Microsoft SQL Server
[28/05/2005|19:08] C:\Program Files\Microsoft Visual Studio
[01/01/2006|14:18] C:\Program Files\Movie Maker
[14/06/2008|12:04] C:\Program Files\Mozilla Firefox
[14/10/2007|19:52] C:\Program Files\mresreg
[08/03/2006|16:45] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[16/03/2008|20:56] C:\Program Files\MSN Messenger
[23/02/2008|11:32] C:\Program Files\NCH Software
[16/08/2004|18:06] C:\Program Files\NetMeeting
[29/07/2007|14:16] C:\Program Files\Nokia
[19/09/2007|21:35] C:\Program Files\OneStepSearch
[15/06/2007|00:31] C:\Program Files\Outlook Express
[29/07/2007|14:15] C:\Program Files\PC Connectivity Solution
[13/04/2008|00:28] C:\Program Files\Picasa2
[17/12/2007|00:06] C:\Program Files\PIXELA
[19/10/2007|00:14] C:\Program Files\podXP
[13/12/2007|16:55] C:\Program Files\ppStream
[04/06/2008|14:27] C:\Program Files\QuickTime
[28/05/2005|19:06] C:\Program Files\Real
[16/08/2004|18:07] C:\Program Files\Services en ligne
[29/05/2008|14:53] C:\Program Files\Skype
[15/10/2007|17:48] C:\Program Files\Slideshow pro
[16/02/2008|15:33] C:\Program Files\Smart Projects
[28/05/2005|19:06] C:\Program Files\Sonic
[19/03/2006|23:40] C:\Program Files\Sony
[17/12/2007|00:06] C:\Program Files\Sony Corporation
[01/01/2006|14:32] C:\Program Files\Sony Setup
[20/05/2008|04:38] C:\Program Files\SopCast
[22/10/2007|18:59] C:\Program Files\Sports Interactive
[14/06/2008|01:36] C:\Program Files\Spybot - Search & Destroy
[28/05/2005|18:46] C:\Program Files\Synaptics
[22/03/2007|21:16] C:\Program Files\TGTSoft
[14/06/2008|03:08] C:\Program Files\themexp
[27/04/2008|00:45] C:\Program Files\TVAnts
[21/01/2008|22:30] C:\Program Files\TVUPlayer
[01/01/2006|14:35] C:\Program Files\Uninstall Information
[26/01/2008|16:59] C:\Program Files\uusee
[09/12/2007|16:43] C:\Program Files\Veoh Networks
[07/01/2006|19:44] C:\Program Files\VideoLAN
[27/10/2006|23:32] C:\Program Files\VideoraiPodConverter
[17/09/2007|11:53] C:\Program Files\Vstplugins
[06/06/2008|21:55] C:\Program Files\WAYN
[16/03/2008|20:55] C:\Program Files\Windows Live
[17/02/2007|19:58] C:\Program Files\Windows Media Connect 2
[17/02/2007|20:16] C:\Program Files\Windows Media Player
[16/08/2004|18:03] C:\Program Files\Windows NT
[16/08/2004|18:07] C:\Program Files\WindowsUpdate
[10/06/2008|08:50] C:\Program Files\WinRAR
[27/10/2006|22:51] C:\Program Files\WinXMedia
[14/10/2007|22:55] C:\Program Files\Wondershare
[16/08/2004|18:11] C:\Program Files\xerox
[22/08/2007|18:02] C:\Program Files\Yahoo!
[21/10/2007|23:08] C:\Program Files\Zero G Registry

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[14/06/2008|13:47] C:\Program Files\Fichiers communs\Adobe
[20/08/2006|00:16] C:\Program Files\Fichiers communs\Ahead
[29/07/2007|12:04] C:\Program Files\Fichiers communs\Apple
[28/05/2005|19:08] C:\Program Files\Fichiers communs\Designer
[07/10/2005|17:12] C:\Program Files\Fichiers communs\DirectX
[20/10/2006|22:54] C:\Program Files\Fichiers communs\InstallShield
[28/05/2005|18:54] C:\Program Files\Fichiers communs\Java
[05/09/2007|01:34] C:\Program Files\Fichiers communs\Macrovision Shared
[16/03/2008|20:54] C:\Program Files\Fichiers communs\Microsoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[29/07/2007|14:16] C:\Program Files\Fichiers communs\Nokia
[29/10/2006|15:18] C:\Program Files\Fichiers communs\Nullsoft
[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
[29/07/2007|14:16] C:\Program Files\Fichiers communs\PCSuite
[18/10/2007|22:48] C:\Program Files\Fichiers communs\Real
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[29/05/2008|14:53] C:\Program Files\Fichiers communs\Skype
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[28/05/2005|19:06] C:\Program Files\Fichiers communs\SureThing Shared
[25/03/2006|15:03] C:\Program Files\Fichiers communs\Synacast
[15/06/2007|00:31] C:\Program Files\Fichiers communs\System
[28/05/2005|19:03] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[16/03/2008|20:54] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[18/10/2007|22:48] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 51

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-14 14:27:44
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\pack.epk
C:\WINDOWS\system32\aadezogn_navps.dat
C:\WINDOWS\system32\aadezogn_nav.dat
C:\WINDOWS\system32\aadezogn.dat
[b]! EGDACCESS !/b

C:\WINDOWS\system32\WyHPqBeg.ini2
[b]! VUNDO Possible !/b

=> C:\Documents and Settings\Jake Q\Application Data\Azureus\torrents\ALCOHOL.120%_CloneCD_CloneDVD_AnyDVD.+.Crack.torrent
=> C:\Documents and Settings\Jake Q\Application Data\Azureus\torrents\NbaLive_2007_NO-CD_Crack_[vitality].rar_^mininova.org^'[1].torrent
=> C:\Documents and Settings\Jake Q\Application Data\Macromedia\Flash Player\#SharedObjects\GPEEJRJ8\crackle.com
=> C:\Documents and Settings\Jake Q\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com
=> C:\Documents and Settings\Jake Q\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com\settings.sol
=> C:\Documents and Settings\Jake Q\Mes documents\Music\Kanye_West-Late_Registration\08-kanye_west-crack_music_(feat_the_game).mp3


[F:14900][D:202]-> C:\DOCUME~1\JAKEQ~1\LOCALS~1\Temp
[F:532][D:0]-> C:\DOCUME~1\JAKEQ~1\Cookies
[F:1621][D:7]-> C:\DOCUME~1\JAKEQ~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 14:28:31,24 ]----------------------
0
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
14 juin 2008 à 14:33
et navilog?
0
il est en cours...
0
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
14 juin 2008 à 14:35
ok
0
voici le fixnavi.txt:

Search Navipromo version 3.5.8 commencé le sam. 14/06/2008 à 14:34:23,16

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Jake Q"

Mise à jour le 06.06.2008 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Jake Q\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Jake Q\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Jake Q\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

Fichiers suspects :

ribcxmyom.exe trouvé !

* Recherche dans "C:\Documents and Settings\Jake Q\locals~1\applic~1" *



*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

aadezogn.dat trouvé !
aadezogn_nav.dat trouvé !
aadezogn_navps.dat trouvé !

* Dans "C:\Documents and Settings\Jake Q\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\WyHPqBeg.ini2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le sam. 14/06/2008 à 14:44:12,75 ***
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
14 juin 2008 à 14:48
lance l'option 2
0
Clean Navipromo version 3.5.8 commencé le sam. 14/06/2008 à 14:48:43,35

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Jake Q"

Mise à jour le 06.06.2008 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Jake Q\locals~1\applic~1" *



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Jake Q\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Jake Q\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Jake Q\menudm~1\progra~1" ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Jake Q\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *

aadezogn.dat trouvé !
Copie aadezogn.dat réalisée avec succès !
aadezogn.dat supprimé !

aadezogn_nav.dat trouvé !
Copie aadezogn_nav.dat réalisée avec succès !
aadezogn_nav.dat supprimé !

aadezogn_navps.dat trouvé !
Copie aadezogn_navps.dat réalisée avec succès !
aadezogn_navps.dat supprimé !


* Dans "C:\Documents and Settings\Jake Q\locals~1\applic~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Fichiers suspects non supprimés par Navilog1 ***
!! Fichiers légitimes possibles, à contrôler avant suppression !!

Fichiers suspects dans "C:\WINDOWS\system32" :

ribcxmyom.exe trouvé !

*** Nettoyage terminé le sam. 14/06/2008 à 14:57:07,02 ***
0
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
14 juin 2008 à 15:02
telecharge malwarebytes mes le a jour puis lance un scan complet et supprime tous se qu'il trouve
aide:

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
0
Est-ce que c'est ok après ceci??



Malwarebytes' Anti-Malware 1.17
Version de la base de données: 854

16:11:02 14/06/2008
mbam-log-6-14-2008 (16-11-02).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 165251
Temps écoulé: 1 hour(s), 4 minute(s), 38 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\bfyfdkhw.dll (Trojan.Vundo) -> Unloaded module successfully.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5b4c3b43-49b6-42a7-a602-f7acdca0d409} (Adware.OneStepSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5b4c3b43-49b6-42a7-a602-f7acdca0d409} (Adware.OneStepSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\f43322a0 (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{3ca60057-9277-49c0-8d64-280dbad9c3e1} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BMf700113c (Trojan.Agent) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\OneStepSearch (Adware.OneStepSearch) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\bfyfdkhw.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\whkdfyfb.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP656\A0156720.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ugecihvi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\edrhttte.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
0
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
15 juin 2008 à 09:35
reposte un log hijackthis stp
0
risu72 Messages postés 1 Date d'inscription dimanche 22 juin 2008 Statut Membre Dernière intervention 22 juin 2008
22 juin 2008 à 13:08
J'ai le même problème que dois-je faire? Pouvez vous m'aidez svp ? Merci
0
fiat500 Messages postés 2621 Date d'inscription vendredi 30 mai 2008 Statut Membre Dernière intervention 25 mars 2009 82
22 juin 2008 à 18:33
bonjour risu72 cree ton propre sujet!
0