mon laptop est virusé par un virus dangereuxFermé

Question

Bonjour, depuis trois jours, quand j'étteind mon laptop hp NC 6400( 2G RAM) il reste un plus d'un quart d'heure pour qu"il s'éteint( il reste bloque sur la page bleue de win xp de fermeture), et quand je clique clic droit sur le C, a la place d'ouvrir; je trouve une ecriture bizzar, svp aider moi, je veut vraiment evité le formattage. merci

fiat500 · Answer

bonjour et bienvenu

telecharge hijackthis fais un scan et colle moi le log ici

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

tuto:

https://forums.cnetfrance.fr

ducci · Answer

merci de votre reponse, je vais le faire

fiat500 · Answer

ok

ducci · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:05:08, on 15/06/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\PrevxCSI\prevxcsi.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\PrevxCSI\prevxcsi.exe
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\iexplorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Symantec\LiveUpdate\luall.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\user\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.4.2:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {56F9B9E2-1152-4DB9-93BE-4F5E848C7E60} - C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (file missing)
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [IEXPLORER] C:\WINDOWS\system32\iexplorer.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F9C3DC9B-4A06-4432-A4A6-E4FAE52D943C}: NameServer = 192.168.4.2
O20 - AppInit_DLLs: APSHook.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: CSIScanner - Prevx - C:\Program Files\PrevxCSI\prevxcsi.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

fiat500 · Answer

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---

ducci · Answer

normalement c sa

fiat500 · Answer

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

ducci · Answer

SA VA VENIR 1MIN

fiat500 · Answer

ok

ducci · Answer

-----------------------[  Lop S&D 4.2.1-4  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : user ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 15/06/2002 | 14:13:57,45 ] [ PC : HPNC6400 ]
   [ MAJ : 13-06-2008 | 02:10 ]
 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [02/06/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [03/12/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [18/05/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [20/05/2008|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [18/05/2008|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [18/05/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kofax
   [08/12/2007|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [11/05/2008|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/06/2008|11:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [15/06/2002|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PrevxCSI
   [18/05/2008|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [15/06/2002|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [08/12/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [11/05/2008|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [03/12/2007|15:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [03/12/2007|14:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [16/04/2008|01:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [03/12/2007|14:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [03/12/2007|14:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [03/12/2007|15:45] C:\DOCUME~1\SESSIO~1\APPLIC~1\desktop.ini
   [05/12/2007|23:46] C:\DOCUME~1\SESSIO~1\APPLIC~1\Identities
   [05/12/2007|23:46] C:\DOCUME~1\SESSIO~1\APPLIC~1\Microsoft
   [05/12/2007|23:46] C:\DOCUME~1\SESSIO~1\APPLIC~1\Real

   [02/06/2008|15:53] C:\DOCUME~1\user\APPLIC~1\Adobe
   [30/05/2008|18:36] C:\DOCUME~1\user\APPLIC~1\AdobeUM
   [03/12/2007|15:46] C:\DOCUME~1\user\APPLIC~1\Ahead
   [03/12/2007|15:45] C:\DOCUME~1\user\APPLIC~1\desktop.ini
   [05/12/2007|12:14] C:\DOCUME~1\user\APPLIC~1\DivX
   [05/12/2007|12:05] C:\DOCUME~1\user\APPLIC~1\dvdcss
   [18/05/2008|17:10] C:\DOCUME~1\user\APPLIC~1\fontlst2.opf
   [20/05/2008|16:24] C:\DOCUME~1\user\APPLIC~1\HP
   [03/12/2007|15:24] C:\DOCUME~1\user\APPLIC~1\hpqLog
   [03/12/2007|15:08] C:\DOCUME~1\user\APPLIC~1\Identities
   [29/05/2008|14:47] C:\DOCUME~1\user\APPLIC~1\Image Zone Express
   [03/12/2007|15:19] C:\DOCUME~1\user\APPLIC~1\InstallShield
   [06/02/2008|22:12] C:\DOCUME~1\user\APPLIC~1\InterVideo
   [18/05/2008|16:33] C:\DOCUME~1\user\APPLIC~1\Kofax
   [06/05/2008|11:34] C:\DOCUME~1\user\APPLIC~1\Macromedia
   [18/05/2008|16:33] C:\DOCUME~1\user\APPLIC~1\Microsoft
   [27/03/2008|10:00] C:\DOCUME~1\user\APPLIC~1\Real
   [19/04/2008|23:00] C:\DOCUME~1\user\APPLIC~1\Sony Corporation
   [09/04/2008|11:16] C:\DOCUME~1\user\APPLIC~1\Symantec
   [05/12/2007|12:01] C:\DOCUME~1\user\APPLIC~1\WinRAR

   [03/12/2007|15:45] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\desktop.ini
   [12/12/2007|15:26] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\Identities
   [12/12/2007|15:26] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\Microsoft
   [12/12/2007|15:26] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\Real
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [15/06/2002 13:12][--ah-----] C:\WINDOWS	asks\SA.DAT
   [07/09/2002 02:00][---h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [15/06/2002|13:14] C:\Program Files\0.pif
   [15/06/2002|13:14] C:\Program Files\1.pif
   [06/04/2008|16:50] C:\Program Files\ABBYY PDF Transformer 1.0
   [08/12/2007|21:11] C:\Program Files\Adobe
   [09/06/2008|14:50] C:\Program Files\AMT
   [03/12/2007|15:22] C:\Program Files\Analog Devices
   [06/04/2008|14:19] C:\Program Files\BlueSquad
   [03/12/2007|15:18] C:\Program Files\Broadcom
   [18/05/2008|16:30] C:\Program Files\Common Files
   [03/12/2007|14:53] C:\Program Files\ComPlus Applications
   [20/05/2008|16:22] C:\Program Files\Fichiers communs
   [03/12/2007|15:24] C:\Program Files\Fingerprint Sensor
   [20/05/2008|16:18] C:\Program Files\Hewlett-Packard
   [20/05/2008|16:22] C:\Program Files\HP
   [03/12/2007|15:37] C:\Program Files\HPQ
   [18/05/2008|16:33] C:\Program Files\InstallShield Installation Information
   [03/12/2007|15:16] C:\Program Files\Intel
   [18/05/2008|16:26] C:\Program Files\Internet Explorer
   [03/12/2007|15:29] C:\Program Files\InterVideo
   [18/05/2008|16:29] C:\Program Files\Kofax
   [18/05/2008|16:32] C:\Program Files\Kofax Image Products
   [04/12/2007|12:27] C:\Program Files\MATLAB71
   [08/04/2008|03:06] C:\Program Files\Messenger
   [03/12/2007|14:56] C:\Program Files\microsoft frontpage
   [03/12/2007|22:31] C:\Program Files\Microsoft Office
   [03/05/2008|13:55] C:\Program Files\Microsoft Visual Studio
   [03/12/2007|22:31] C:\Program Files\Microsoft Works
   [03/12/2007|14:54] C:\Program Files\Movie Maker
   [03/12/2007|22:31] C:\Program Files\MSBuild
   [03/12/2007|14:52] C:\Program Files\MSN
   [03/12/2007|14:52] C:\Program Files\MSN Gaming Zone
   [06/04/2008|11:58] C:\Program Files\MSN Messenger
   [03/12/2007|15:45] C:\Program Files\Nero
   [03/12/2007|14:54] C:\Program Files\NetMeeting
   [14/05/2008|20:42] C:\Program Files\Norton 360
   [03/12/2007|14:53] C:\Program Files\Online Services
   [08/04/2008|03:05] C:\Program Files\Outlook Express
   [15/06/2002|11:29] C:\Program Files\PrevxCSI
   [03/05/2008|13:52] C:\Program Files\Publication Web
   [05/12/2007|12:12] C:\Program Files\Real
   [18/05/2008|16:22] C:\Program Files\SDSS
   [03/12/2007|14:55] C:\Program Files\Services en ligne
   [18/04/2008|20:47] C:\Program Files\Sony
   [15/06/2002|14:07] C:\Program Files\Symantec
   [03/12/2007|15:38] C:\Program Files\Synaptics
   [03/12/2007|15:20] C:\Program Files\Texas Instruments Inc
   [03/12/2007|15:08] C:\Program Files\Uninstall Information
   [08/12/2007|21:13] C:\Program Files\Viewpoint
   [03/12/2007|15:30] C:\Program Files\WIDCOMM
   [11/05/2008|15:34] C:\Program Files\Windows Live
   [08/04/2008|03:05] C:\Program Files\Windows Media Player
   [03/12/2007|16:00] C:\Program Files\Windows NT
   [03/12/2007|14:55] C:\Program Files\WindowsUpdate
   [03/12/2007|14:56] C:\Program Files\xerox
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [08/12/2007|21:04] C:\Program Files\Fichiers communs\Adobe
   [08/12/2007|21:04] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [03/12/2007|15:45] C:\Program Files\Fichiers communs\Ahead
   [03/05/2008|13:51] C:\Program Files\Fichiers communs\DESIGNER
   [18/05/2008|16:20] C:\Program Files\Fichiers communs\Hewlett-Packard
   [20/05/2008|16:22] C:\Program Files\Fichiers communs\HP
   [18/05/2008|16:24] C:\Program Files\Fichiers communs\InstallShield
   [11/05/2008|15:37] C:\Program Files\Fichiers communs\Microsoft Shared
   [03/12/2007|14:54] C:\Program Files\Fichiers communs\MSSoap
   [03/12/2007|15:46] C:\Program Files\Fichiers communs\ODBC
   [05/12/2007|12:11] C:\Program Files\Fichiers communs\Real
   [18/05/2008|16:24] C:\Program Files\Fichiers communs\ScanSoft Shared
   [03/12/2007|14:54] C:\Program Files\Fichiers communs\Services
   [03/12/2007|15:46] C:\Program Files\Fichiers communs\SpeechEngines
   [15/06/2002|14:08] C:\Program Files\Fichiers communs\Symantec Shared
   [08/04/2008|03:05] C:\Program Files\Fichiers communs\System
   [11/05/2008|15:36] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [05/12/2007|12:12] C:\Program Files\Fichiers communs\xing shared

   ---------------------------[ Process ]--------------------------

   ... 52

   iexplore.exe ~ [1400]
   iexplore.exe ~ [3180]

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2002-06-15 14:15:07
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   => C:\Documents and Settings\user\Recent\Xilisoft.DVD.to.DivX.Converter.v4.0.43.0317.WinAll.Inc.Keygen-LMi_TeamExtream.lnk


   [F:11][D:4]-> C:\DOCUME~1\user\LOCALS~1\Temp
   [F:17][D:0]-> C:\DOCUME~1\user\Cookies
   [F:606][D:12]-> C:\DOCUME~1\user\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 14:15:34,28  ]----------------------

fiat500 · Answer

pour virer ce qui est trouvé:

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)

puis :

fais un scan en ligne avec Internet Explorer stp:

BitDefender en ligne: http://www.bitdefender.fr/scan_fr/scan8/ie.html
Tutoriel BitDefender en ligne: http://cybersecurite.xooit.com/t201-Scan-en-ligne-BitDefender.htm

ducci · Answer

wé merci, je vais le faire

fiat500 · Answer

derien
ok

ducci · Answer

-----------------------[  Lop S&D 4.2.1-4  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : user ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 15/06/2002 | 14:20:53,60 ] [ PC : HPNC6400 ]
   [ MAJ : 13-06-2008 | 02:10 ]

 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

   Supprimé! - C:\Program Files\Viewpoint
   Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [02/06/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [03/12/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [18/05/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [20/05/2008|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [18/05/2008|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [18/05/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kofax
   [08/12/2007|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [11/05/2008|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/06/2008|11:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [15/06/2002|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PrevxCSI
   [18/05/2008|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [15/06/2002|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [11/05/2008|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [03/12/2007|15:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [03/12/2007|14:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [16/04/2008|01:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [03/12/2007|14:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [03/12/2007|14:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [03/12/2007|15:45] C:\DOCUME~1\SESSIO~1\APPLIC~1\desktop.ini
   [05/12/2007|23:46] C:\DOCUME~1\SESSIO~1\APPLIC~1\Identities
   [05/12/2007|23:46] C:\DOCUME~1\SESSIO~1\APPLIC~1\Microsoft
   [05/12/2007|23:46] C:\DOCUME~1\SESSIO~1\APPLIC~1\Real

   [02/06/2008|15:53] C:\DOCUME~1\user\APPLIC~1\Adobe
   [30/05/2008|18:36] C:\DOCUME~1\user\APPLIC~1\AdobeUM
   [03/12/2007|15:46] C:\DOCUME~1\user\APPLIC~1\Ahead
   [03/12/2007|15:45] C:\DOCUME~1\user\APPLIC~1\desktop.ini
   [05/12/2007|12:14] C:\DOCUME~1\user\APPLIC~1\DivX
   [05/12/2007|12:05] C:\DOCUME~1\user\APPLIC~1\dvdcss
   [18/05/2008|17:10] C:\DOCUME~1\user\APPLIC~1\fontlst2.opf
   [20/05/2008|16:24] C:\DOCUME~1\user\APPLIC~1\HP
   [03/12/2007|15:24] C:\DOCUME~1\user\APPLIC~1\hpqLog
   [03/12/2007|15:08] C:\DOCUME~1\user\APPLIC~1\Identities
   [29/05/2008|14:47] C:\DOCUME~1\user\APPLIC~1\Image Zone Express
   [03/12/2007|15:19] C:\DOCUME~1\user\APPLIC~1\InstallShield
   [06/02/2008|22:12] C:\DOCUME~1\user\APPLIC~1\InterVideo
   [18/05/2008|16:33] C:\DOCUME~1\user\APPLIC~1\Kofax
   [06/05/2008|11:34] C:\DOCUME~1\user\APPLIC~1\Macromedia
   [18/05/2008|16:33] C:\DOCUME~1\user\APPLIC~1\Microsoft
   [27/03/2008|10:00] C:\DOCUME~1\user\APPLIC~1\Real
   [19/04/2008|23:00] C:\DOCUME~1\user\APPLIC~1\Sony Corporation
   [09/04/2008|11:16] C:\DOCUME~1\user\APPLIC~1\Symantec
   [05/12/2007|12:01] C:\DOCUME~1\user\APPLIC~1\WinRAR

   [03/12/2007|15:45] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\desktop.ini
   [12/12/2007|15:26] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\Identities
   [12/12/2007|15:26] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\Microsoft
   [12/12/2007|15:26] C:\DOCUME~1\Y6684~1.ZER\APPLIC~1\Real
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [15/06/2002 13:12][--ah-----] C:\WINDOWS	asks\SA.DAT
   [07/09/2002 02:00][---h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [15/06/2002|13:14] C:\Program Files\0.pif
   [15/06/2002|13:14] C:\Program Files\1.pif
   [06/04/2008|16:50] C:\Program Files\ABBYY PDF Transformer 1.0
   [08/12/2007|21:11] C:\Program Files\Adobe
   [09/06/2008|14:50] C:\Program Files\AMT
   [03/12/2007|15:22] C:\Program Files\Analog Devices
   [06/04/2008|14:19] C:\Program Files\BlueSquad
   [03/12/2007|15:18] C:\Program Files\Broadcom
   [18/05/2008|16:30] C:\Program Files\Common Files
   [03/12/2007|14:53] C:\Program Files\ComPlus Applications
   [20/05/2008|16:22] C:\Program Files\Fichiers communs
   [03/12/2007|15:24] C:\Program Files\Fingerprint Sensor
   [20/05/2008|16:18] C:\Program Files\Hewlett-Packard
   [20/05/2008|16:22] C:\Program Files\HP
   [03/12/2007|15:37] C:\Program Files\HPQ
   [18/05/2008|16:33] C:\Program Files\InstallShield Installation Information
   [03/12/2007|15:16] C:\Program Files\Intel
   [18/05/2008|16:26] C:\Program Files\Internet Explorer
   [03/12/2007|15:29] C:\Program Files\InterVideo
   [18/05/2008|16:29] C:\Program Files\Kofax
   [18/05/2008|16:32] C:\Program Files\Kofax Image Products
   [04/12/2007|12:27] C:\Program Files\MATLAB71
   [08/04/2008|03:06] C:\Program Files\Messenger
   [03/12/2007|14:56] C:\Program Files\microsoft frontpage
   [03/12/2007|22:31] C:\Program Files\Microsoft Office
   [03/05/2008|13:55] C:\Program Files\Microsoft Visual Studio
   [03/12/2007|22:31] C:\Program Files\Microsoft Works
   [03/12/2007|14:54] C:\Program Files\Movie Maker
   [03/12/2007|22:31] C:\Program Files\MSBuild
   [03/12/2007|14:52] C:\Program Files\MSN
   [03/12/2007|14:52] C:\Program Files\MSN Gaming Zone
   [06/04/2008|11:58] C:\Program Files\MSN Messenger
   [03/12/2007|15:45] C:\Program Files\Nero
   [03/12/2007|14:54] C:\Program Files\NetMeeting
   [14/05/2008|20:42] C:\Program Files\Norton 360
   [03/12/2007|14:53] C:\Program Files\Online Services
   [08/04/2008|03:05] C:\Program Files\Outlook Express
   [15/06/2002|11:29] C:\Program Files\PrevxCSI
   [03/05/2008|13:52] C:\Program Files\Publication Web
   [05/12/2007|12:12] C:\Program Files\Real
   [18/05/2008|16:22] C:\Program Files\SDSS
   [03/12/2007|14:55] C:\Program Files\Services en ligne
   [18/04/2008|20:47] C:\Program Files\Sony
   [15/06/2002|14:07] C:\Program Files\Symantec
   [03/12/2007|15:38] C:\Program Files\Synaptics
   [03/12/2007|15:20] C:\Program Files\Texas Instruments Inc
   [03/12/2007|15:08] C:\Program Files\Uninstall Information
   [03/12/2007|15:30] C:\Program Files\WIDCOMM
   [11/05/2008|15:34] C:\Program Files\Windows Live
   [08/04/2008|03:05] C:\Program Files\Windows Media Player
   [03/12/2007|16:00] C:\Program Files\Windows NT
   [03/12/2007|14:55] C:\Program Files\WindowsUpdate
   [03/12/2007|14:56] C:\Program Files\xerox
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [08/12/2007|21:04] C:\Program Files\Fichiers communs\Adobe
   [08/12/2007|21:04] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [03/12/2007|15:45] C:\Program Files\Fichiers communs\Ahead
   [03/05/2008|13:51] C:\Program Files\Fichiers communs\DESIGNER
   [18/05/2008|16:20] C:\Program Files\Fichiers communs\Hewlett-Packard
   [20/05/2008|16:22] C:\Program Files\Fichiers communs\HP
   [18/05/2008|16:24] C:\Program Files\Fichiers communs\InstallShield
   [11/05/2008|15:37] C:\Program Files\Fichiers communs\Microsoft Shared
   [03/12/2007|14:54] C:\Program Files\Fichiers communs\MSSoap
   [03/12/2007|15:46] C:\Program Files\Fichiers communs\ODBC
   [05/12/2007|12:11] C:\Program Files\Fichiers communs\Real
   [18/05/2008|16:24] C:\Program Files\Fichiers communs\ScanSoft Shared
   [03/12/2007|14:54] C:\Program Files\Fichiers communs\Services
   [03/12/2007|15:46] C:\Program Files\Fichiers communs\SpeechEngines
   [15/06/2002|14:08] C:\Program Files\Fichiers communs\Symantec Shared
   [08/04/2008|03:05] C:\Program Files\Fichiers communs\System
   [11/05/2008|15:36] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [05/12/2007|12:12] C:\Program Files\Fichiers communs\xing shared

   ---------------------------[ Process ]--------------------------

   ... 49

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2002-06-15 14:22:52
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   => C:\Documents and Settings\user\Recent\Xilisoft.DVD.to.DivX.Converter.v4.0.43.0317.WinAll.Inc.Keygen-LMi_TeamExtream.lnk


   [F:11][D:4]-> C:\DOCUME~1\user\LOCALS~1\Temp
   [F:18][D:0]-> C:\DOCUME~1\user\Cookies
   [F:611][D:12]-> C:\DOCUME~1\user\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 14:23:14,96  ]----------------------

ducci · Answer

je suis entrain de faire le scan en ligne

fiat500 · Answer

ok

ducci · Answer

mais je cherche a comprendre pour koi mon laptop fait plus d'un quart d'heure pour kil s'etteint, depuis trois jour c la méme chose, pourtant il n'est pas charger; et il a 2G de ram!!

fiat500 · Answer

parce que trop d'historique ton pc na pas étais nettoyer etc..

fais ca:

https://www.malekal.com/tutoriel-ccleaner/

ducci · Answer

mais pas du jour au lendemain et en plus 10min pour s'etteindre c vraiment beaucoup

fiat500 · Answer

fais ca:

https://www.malekal.com/tutoriel-ccleaner/

Mon laptop est virusé par un virus dangereux

20 réponses

Discussions similaires

Newsletters