Sujet Précédent Sujet Suivant

Page cid intempestives

matitoon -  
 matitoon -
Bonjour,

Comme pas mal de personnes j'ai des pubs cid qui s'affichent tout le temps à l'écran. J'ai téléchargé un des logiciels préconisées et voici le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:04:23, on 20/06/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\matitoon\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.miely.free.fr/google_chti/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALuNotify.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [V0260Cfg.exe] V0260Cfg.exe /d:3
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"
O4 - HKCU\..\Run: [tiwci] c:\users\matitoon\appdata\local\tiwci.exe tiwci
O4 - HKCU\..\Run: [mpeg window] "C:\ProgramData\Third Body Body.2tvtn"
O4 - HKCU\..\Run: [1 mags 16 more] "C:\ProgramData\dash plan close.xme5e4"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
A voir également:

7 réponses

Réponse 1 / 7
Utilisateur anonyme
 
*Téléchargez lopS&D.exe sur votre bureau (Clique-droit sur le lien > Enregistrer la cible du lien sous)
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
*Désactivez votre antivirus au cas où (vous pourrez le réactiver après la fin du scan)
*Double-clique sur lopS&D pour lancer l'installation
*Une fois installé, double-clique sur Lop S&D
*Sélectionne la langue en appuyant sur la touche F, puis choisissez l'option 1 (Recherche)
*Si lopS&D vous demande de redémarrer acceptez et attendez la fin du scan.
0
Réponse 2 / 7
matitoon
 
voila la réponse obtenue

-----------------------[ Lop S&D 4.2.1-6 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : matitoon ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 20/06/2008 | 21:20:00,43 ] [ PC : PC-DE-MATITOON ]
[ MAJ : 16-06-2008 | 23:01 ]
[ UAC => 0 ]

-------------[ Listing des dossiers dans Application Data ]------------

[25/02/2008|01:35] C:\Users\matitoon\AppData\Roaming\Adobe\Linguistics
[27/01/2008|13:47] C:\Users\matitoon\AppData\Roaming\Adobe\Flash Player
[27/12/2007|01:31] C:\Users\matitoon\AppData\Roaming\Adobe\Acrobat

[06/05/2008|20:06] C:\Users\matitoon\AppData\Roaming\Azureus\active
[06/05/2008|20:06] C:\Users\matitoon\AppData\Roaming\Azureus\dht
[06/05/2008|20:06] C:\Users\matitoon\AppData\Roaming\Azureus\net
[06/05/2008|19:59] C:\Users\matitoon\AppData\Roaming\Azureus\logs
[06/05/2008|18:14] C:\Users\matitoon\AppData\Roaming\Azureus\tmp
[06/05/2008|18:11] C:\Users\matitoon\AppData\Roaming\Azureus\media
[06/05/2008|18:10] C:\Users\matitoon\AppData\Roaming\Azureus\updates
[06/05/2008|18:09] C:\Users\matitoon\AppData\Roaming\Azureus\torrents
[05/05/2008|19:09] C:\Users\matitoon\AppData\Roaming\Azureus\shares
[05/05/2008|19:09] C:\Users\matitoon\AppData\Roaming\Azureus\plugins

[29/12/2007|20:01] C:\Users\matitoon\AppData\Roaming\Command & Conquer 3 Les guerres du Tiberium\Profils

[30/12/2007|00:09] C:\Users\matitoon\AppData\Roaming\Creative\WebCam Center

[20/01/2008|01:01] C:\Users\matitoon\AppData\Roaming\DivX\DivX Codec
[20/01/2008|00:42] C:\Users\matitoon\AppData\Roaming\DivX\DivX Player

[14/05/2008|02:47] C:\Users\matitoon\AppData\Roaming\dvdcss\HP_AND_THE_PRISONER_OF_AZKABAN-2004090218055300-00000008a5
[21/04/2008|01:52] C:\Users\matitoon\AppData\Roaming\dvdcss\FROM_HELL-2002051413154800-2e90fef702

[25/02/2008|23:54] C:\Users\matitoon\AppData\Roaming\ESET\ESET Smart Security

[02/03/2008|04:00] C:\Users\matitoon\AppData\Roaming\Google\Local Search History

[27/12/2007|01:24] C:\Users\matitoon\AppData\Roaming\Hewlett-Packard\HP Software UI

[27/12/2007|01:30] C:\Users\matitoon\AppData\Roaming\Identities\{CCF8C0CE-7B2E-4617-9AF3-E4B0AB42D04C}

[24/01/2008|00:06] C:\Users\matitoon\AppData\Roaming\InstallShield\ISEngine12.0

[24/01/2008|00:28] C:\Users\matitoon\AppData\Roaming\LG Electronics\UMTS

[30/03/2008|18:02] C:\Users\matitoon\AppData\Roaming\LimeWire\.NetworkShare
[28/12/2007|22:43] C:\Users\matitoon\AppData\Roaming\LimeWire\.AppSpecialShare
[28/12/2007|22:43] C:\Users\matitoon\AppData\Roaming\LimeWire\xml
[28/12/2007|22:43] C:\Users\matitoon\AppData\Roaming\LimeWire\themes

[01/01/2008|02:13] C:\Users\matitoon\AppData\Roaming\Macromedia\Director MX 2004
[27/12/2007|01:27] C:\Users\matitoon\AppData\Roaming\Macromedia\Flash Player

[19/06/2008|20:24] C:\Users\matitoon\AppData\Roaming\Microsoft\Windows Photo Gallery
[19/06/2008|00:37] C:\Users\matitoon\AppData\Roaming\Microsoft\ModŠles
[11/06/2008|21:12] C:\Users\matitoon\AppData\Roaming\Microsoft\MSN Messenger
[17/05/2008|14:06] C:\Users\matitoon\AppData\Roaming\Microsoft\preuve
[16/05/2008|18:05] C:\Users\matitoon\AppData\Roaming\Microsoft\Word
[30/04/2008|20:58] C:\Users\matitoon\AppData\Roaming\Microsoft\PowerPoint
[14/04/2008|20:45] C:\Users\matitoon\AppData\Roaming\Microsoft\Office
[27/03/2008|18:12] C:\Users\matitoon\AppData\Roaming\Microsoft\Macros compl‚mentaires
[22/03/2008|23:20] C:\Users\matitoon\AppData\Roaming\Microsoft\IdentityCRL
[21/03/2008|23:54] C:\Users\matitoon\AppData\Roaming\Microsoft\Network
[06/03/2008|17:59] C:\Users\matitoon\AppData\Roaming\Microsoft\Speech
[24/01/2008|00:06] C:\Users\matitoon\AppData\Roaming\Microsoft\HTML Help
[29/12/2007|22:47] C:\Users\matitoon\AppData\Roaming\Microsoft\Internet Explorer
[28/12/2007|22:36] C:\Users\matitoon\AppData\Roaming\Microsoft\Crypto
[27/12/2007|21:57] C:\Users\matitoon\AppData\Roaming\Microsoft\eHome
[27/12/2007|20:24] C:\Users\matitoon\AppData\Roaming\Microsoft\Windows
[27/12/2007|19:34] C:\Users\matitoon\AppData\Roaming\Microsoft\MMC
[27/12/2007|01:31] C:\Users\matitoon\AppData\Roaming\Microsoft\SystemCertificates
[27/12/2007|01:30] C:\Users\matitoon\AppData\Roaming\Microsoft\Protect
[27/12/2007|01:24] C:\Users\matitoon\AppData\Roaming\Microsoft\CLR Security Config
[27/12/2007|01:22] C:\Users\matitoon\AppData\Roaming\Microsoft\Credentials

[07/05/2008|14:55] C:\Users\matitoon\AppData\Roaming\Roxio\RoxioCentral
[04/05/2008|11:44] C:\Users\matitoon\AppData\Roaming\Roxio\MediaManager9
[04/04/2008|19:19] C:\Users\matitoon\AppData\Roaming\Roxio\Dragon
[24/03/2008|01:18] C:\Users\matitoon\AppData\Roaming\Roxio\MyDVD9
[24/03/2008|01:18] C:\Users\matitoon\AppData\Roaming\Roxio\VideoUI9
[30/01/2008|00:34] C:\Users\matitoon\AppData\Roaming\Roxio\RoxioCentral33

[29/12/2007|20:01] C:\Users\matitoon\AppData\Roaming\SecuROM\UserData

[09/06/2008|23:11] C:\Users\matitoon\AppData\Roaming\vlc\cache

[19/01/2008|21:00] C:\Users\matitoon\AppData\Roaming\Yahoo!\Companion

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[19/06/2008 22:06][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{C78EB617-5B6B-4DF0-95F2-F1105AE8124A}.job
[20/06/2008 21:19][--ah-----] C:\Windows\tasks\SA.DAT
[20/06/2008 21:18][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[19/06/2008|01:30] C:\ProgramData\Admin Inter 1 Mags
[11/05/2008|17:34] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[05/05/2008|19:09] C:\ProgramData\Azureus
[19/04/2008|22:29] C:\ProgramData\BOONTY
[24/11/2005|22:19] C:\ProgramData\Bureau
[20/12/2006|07:43] C:\ProgramData\CyberLink
[19/06/2008|01:30] C:\ProgramData\dash plan close.xme5e4
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[25/02/2008|23:51] C:\ProgramData\ESET
[24/11/2005|22:19] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[20/12/2006|07:48] C:\ProgramData\Google
[20/12/2006|08:01] C:\ProgramData\Hewlett-Packard
[29/12/2007|01:12] C:\ProgramData\HP
[29/12/2007|01:13] C:\ProgramData\hpzinstall.log
[20/12/2006|07:17] C:\ProgramData\InstallShield
[26/02/2008|00:10] C:\ProgramData\LUUnInstall.LiveUpdate
[03/01/2008|01:45] C:\ProgramData\MAGIX
[24/11/2005|22:19] C:\ProgramData\Menu D‚marrer
[20/06/2008|21:19] C:\ProgramData\Messenger Plus!
[24/01/2008|00:06] C:\ProgramData\Microsoft
[24/11/2005|22:19] C:\ProgramData\ModŠles
[15/05/2008|00:23] C:\ProgramData\Roxio
[27/03/2008|17:25] C:\ProgramData\SBT
[27/12/2007|19:55] C:\ProgramData\Skype
[19/06/2008|01:30] C:\ProgramData\Slow Internet 1
[30/01/2008|00:34] C:\ProgramData\Sonic
[02/11/2006|15:02] C:\ProgramData\Start Menu
[26/02/2008|00:10] C:\ProgramData\Symantec
[01/01/2008|03:13] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[19/06/2008|01:30] C:\ProgramData\Third Body Body.2qhgq3v
[19/06/2008|01:30] C:\ProgramData\Third Body Body.2tvtn
[19/06/2008|23:20] C:\ProgramData\WLInstaller

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[18/05/2008|12:17] C:\Program Files\Acro Software
[11/05/2008|17:33] C:\Program Files\Adobe
[10/06/2008|02:04] C:\Program Files\adslTV
[18/05/2008|12:23] C:\Program Files\Adzgalore Games Collection
[13/02/2008|14:15] C:\Program Files\Alwil Software
[06/05/2008|04:33] C:\Program Files\Azureus
[19/04/2008|23:31] C:\Program Files\BoontyGames
[27/01/2008|13:39] C:\Program Files\Broadcom
[11/05/2008|17:33] C:\Program Files\Common Files
[20/12/2006|07:05] C:\Program Files\CONEXANT
[14/05/2008|21:41] C:\Program Files\Creative
[29/12/2007|17:24] C:\Program Files\desktop.ini
[04/01/2008|00:10] C:\Program Files\directx
[19/06/2008|01:07] C:\Program Files\DivX
[04/01/2008|23:55] C:\Program Files\eMule
[24/11/2005|22:19] C:\Program Files\Fichiers communs [c:\Program Files\Common Files]
[18/05/2008|12:17] C:\Program Files\GNUGS
[31/12/2007|20:24] C:\Program Files\Google
[29/12/2007|01:12] C:\Program Files\Hewlett-Packard
[29/12/2007|01:13] C:\Program Files\HP
[18/05/2008|12:39] C:\Program Files\InstallShield Installation Information
[12/06/2008|03:10] C:\Program Files\Internet Explorer
[16/01/2008|16:59] C:\Program Files\Java
[14/04/2008|18:07] C:\Program Files\Kiwee Toolbar2
[24/01/2008|00:21] C:\Program Files\LG Electronics
[24/01/2008|00:15] C:\Program Files\LG PC Suite 2
[20/06/2008|21:00] C:\Program Files\LimeWire
[05/01/2008|21:04] C:\Program Files\Lionhead Studios Ltd
[19/06/2008|23:07] C:\Program Files\Lopxp
[03/01/2008|01:45] C:\Program Files\MAGIX
[19/06/2008|23:39] C:\Program Files\Messenger Plus! Live
[27/03/2008|17:24] C:\Program Files\Microsoft FrontPage
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[27/03/2008|17:26] C:\Program Files\Microsoft Office
[27/03/2008|17:19] C:\Program Files\Microsoft Visual Studio
[20/12/2006|07:39] C:\Program Files\Microsoft Works
[02/11/2006|14:42] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[29/12/2007|16:22] C:\Program Files\MSXML 4.0
[04/01/2008|01:11] C:\Program Files\QuickZip4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[20/12/2006|07:27] C:\Program Files\Roxio
[20/12/2006|07:49] C:\Program Files\Services en ligne
[27/03/2008|17:25] C:\Program Files\Snapshot Viewer
[26/02/2008|00:09] C:\Program Files\Symantec
[20/12/2006|07:05] C:\Program Files\Synaptics
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[25/01/2008|22:39] C:\Program Files\VideoLAN
[29/12/2007|17:19] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[29/12/2007|17:19] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[19/06/2008|23:26] C:\Program Files\Windows Live
[12/06/2008|03:10] C:\Program Files\Windows Mail
[29/12/2007|17:19] C:\Program Files\Windows Media Player
[24/11/2005|22:19] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[09/01/2008|13:32] C:\Program Files\Windows Sidebar
[20/06/2008|20:46] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[11/05/2008|17:34] C:\Program Files\Common Files\Adobe
[19/04/2008|22:28] C:\Program Files\Common Files\BOONTY Shared
[27/03/2008|17:19] C:\Program Files\Common Files\Designer
[29/12/2007|01:12] C:\Program Files\Common Files\HP
[20/12/2006|07:42] C:\Program Files\Common Files\InstallShield
[20/12/2006|08:00] C:\Program Files\Common Files\Java
[03/01/2008|01:44] C:\Program Files\Common Files\MAGIX Shared
[19/06/2008|23:16] C:\Program Files\Common Files\microsoft shared
[19/01/2008|21:01] C:\Program Files\Common Files\PX Storage Engine
[20/12/2006|07:24] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[20/12/2006|07:25] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[20/12/2006|07:27] C:\Program Files\Common Files\SureThing Shared
[26/02/2008|00:12] C:\Program Files\Common Files\Symantec Shared
[27/03/2008|17:25] C:\Program Files\Common Files\System
[28/12/2007|22:28] C:\Program Files\Common Files\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 54

iexplore.exe ~ [2624]
iexplore.exe ~ [2852]

----------------------[ Recherche avec S_Lop ]---------------------

C:\ProgramData\dash plan close.xme5e4
C:\ProgramData\Third Body Body.2qhgq3v
C:\ProgramData\Third Body Body.2tvtn
C:\ProgramData\Third Body Body.2qhgq3v
C:\Users\matitoon\AppData\Local\Temp\bis7EE7.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\ProgramData\Admin Inter 1 Mags
C:\ProgramData\Admin Inter 1 Mags\move pile.exe
C:\Windows\Prefetch\MOVE PILE.EXE-6B78F75D.pf
C:\Users\matitoon\AppData\Roaming\MICROS~1\Windows\Cookies\matitoon@www.adserver5[1].txt

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"1 mags 16 more"="\"C:\\ProgramData\\dash plan close.xme5e4\""
"mpeg window"="\"C:\\ProgramData\\Third Body Body.2tvtn\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-20 21:21:09
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\Windows\system32\nvs2.inf
C:\Users\matitoon\AppData\Local\tiwci_navps.dat
C:\Users\matitoon\AppData\Local\tiwci_nav.dat
C:\Users\matitoon\AppData\Local\tiwci.dat
[b]! EGDACCESS !/b

[F:1433][D:74]-> C:\Users\matitoon\AppData\Local\Temp
[F:103][D:1]-> C:\Users\matitoon\AppData\Roaming\MICROS~1\Windows\Cookies
[F:194][D:15]-> C:\Users\matitoon\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:2][D:2]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 21:24:31,73 ]----------------------
0
Utilisateur anonyme
 
*Relance Lop S&D
· Choisis cette fois ci l'option 2 ( Suppression )
· Ne ferme pas la fenêtre lors de la suppression !
· Poste le rapport généré ( C:\lopR.txt )

*( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide).
0
Réponse 3 / 7
Mercurysoft Messages postés 30 Statut Membre 1
 
Tu as installé un programme piégé qui ouvre ces pubs. Evite d'installer des programmes qui le plus ouvent sont gratuits depuis des sites inconnus, via des banieres de pubs ou autres et prend tes programmes dépuis des sources surs.

Suis la procédure avec navilog1 décrite ici : http://www.malekal.com/Adware.Magic_Control.html

Cette procédure doit être suivie à la lettre. et surout n'oublie pas de 'envoyer les rapports.
0
Utilisateur anonyme
 
Non ceci n'a rien avoir avec CID.
0
Réponse 4 / 7
matitoon
 
voilà la réponse

-----------------------[ Lop S&D 4.2.1-6 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : matitoon ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 20/06/2008 | 21:32:47,14 ] [ PC : PC-DE-MATITOON ]
[ MAJ : 16-06-2008 | 23:01 ]
[ UAC => 0 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Echec ! - C:\ProgramData\Admin Inter 1 Mags\move pile.exe
Supprimé! - C:\Windows\Prefetch\MOVE PILE.EXE-6B78F75D.pf
Supprimé! - C:\Users\matitoon\AppData\Roaming\MICROS~1\Windows\Cookies\matitoon@www.adserver5[1].txt
Supprimé! - C:\ProgramData\dash plan close.xme5e4
Supprimé! - C:\ProgramData\Third Body Body.2qhgq3v
Supprimé! - C:\ProgramData\Third Body Body.2tvtn
Supprimé! - C:\Users\matitoon\AppData\Local\Temp\bis7EE7.exe
Echec ! - C:\ProgramData\Admin Inter 1 Mags
Restauré! - Fichier Hosts

\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////

Supprimé! - C:\ProgramData\Admin Inter 1 Mags\move pile.exe
Supprimé! - C:\ProgramData\Admin Inter 1 Mags

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

-------------[ Listing des dossiers dans Application Data ]------------

[25/02/2008|01:35] C:\Users\matitoon\AppData\Roaming\Adobe\Linguistics
[27/01/2008|13:47] C:\Users\matitoon\AppData\Roaming\Adobe\Flash Player
[27/12/2007|01:31] C:\Users\matitoon\AppData\Roaming\Adobe\Acrobat

[06/05/2008|20:06] C:\Users\matitoon\AppData\Roaming\Azureus\active
[06/05/2008|20:06] C:\Users\matitoon\AppData\Roaming\Azureus\dht
[06/05/2008|20:06] C:\Users\matitoon\AppData\Roaming\Azureus\net
[06/05/2008|19:59] C:\Users\matitoon\AppData\Roaming\Azureus\logs
[06/05/2008|18:14] C:\Users\matitoon\AppData\Roaming\Azureus\tmp
[06/05/2008|18:11] C:\Users\matitoon\AppData\Roaming\Azureus\media
[06/05/2008|18:10] C:\Users\matitoon\AppData\Roaming\Azureus\updates
[06/05/2008|18:09] C:\Users\matitoon\AppData\Roaming\Azureus\torrents
[05/05/2008|19:09] C:\Users\matitoon\AppData\Roaming\Azureus\shares
[05/05/2008|19:09] C:\Users\matitoon\AppData\Roaming\Azureus\plugins

[29/12/2007|20:01] C:\Users\matitoon\AppData\Roaming\Command & Conquer 3 Les guerres du Tiberium\Profils

[30/12/2007|00:09] C:\Users\matitoon\AppData\Roaming\Creative\WebCam Center

[20/01/2008|01:01] C:\Users\matitoon\AppData\Roaming\DivX\DivX Codec
[20/01/2008|00:42] C:\Users\matitoon\AppData\Roaming\DivX\DivX Player

[14/05/2008|02:47] C:\Users\matitoon\AppData\Roaming\dvdcss\HP_AND_THE_PRISONER_OF_AZKABAN-2004090218055300-00000008a5
[21/04/2008|01:52] C:\Users\matitoon\AppData\Roaming\dvdcss\FROM_HELL-2002051413154800-2e90fef702

[25/02/2008|23:54] C:\Users\matitoon\AppData\Roaming\ESET\ESET Smart Security

[02/03/2008|04:00] C:\Users\matitoon\AppData\Roaming\Google\Local Search History

[27/12/2007|01:24] C:\Users\matitoon\AppData\Roaming\Hewlett-Packard\HP Software UI

[27/12/2007|01:30] C:\Users\matitoon\AppData\Roaming\Identities\{CCF8C0CE-7B2E-4617-9AF3-E4B0AB42D04C}

[24/01/2008|00:06] C:\Users\matitoon\AppData\Roaming\InstallShield\ISEngine12.0

[24/01/2008|00:28] C:\Users\matitoon\AppData\Roaming\LG Electronics\UMTS

[30/03/2008|18:02] C:\Users\matitoon\AppData\Roaming\LimeWire\.NetworkShare
[28/12/2007|22:43] C:\Users\matitoon\AppData\Roaming\LimeWire\.AppSpecialShare
[28/12/2007|22:43] C:\Users\matitoon\AppData\Roaming\LimeWire\xml
[28/12/2007|22:43] C:\Users\matitoon\AppData\Roaming\LimeWire\themes

[01/01/2008|02:13] C:\Users\matitoon\AppData\Roaming\Macromedia\Director MX 2004
[27/12/2007|01:27] C:\Users\matitoon\AppData\Roaming\Macromedia\Flash Player

[19/06/2008|20:24] C:\Users\matitoon\AppData\Roaming\Microsoft\Windows Photo Gallery
[19/06/2008|00:37] C:\Users\matitoon\AppData\Roaming\Microsoft\ModŠles
[11/06/2008|21:12] C:\Users\matitoon\AppData\Roaming\Microsoft\MSN Messenger
[17/05/2008|14:06] C:\Users\matitoon\AppData\Roaming\Microsoft\preuve
[16/05/2008|18:05] C:\Users\matitoon\AppData\Roaming\Microsoft\Word
[30/04/2008|20:58] C:\Users\matitoon\AppData\Roaming\Microsoft\PowerPoint
[14/04/2008|20:45] C:\Users\matitoon\AppData\Roaming\Microsoft\Office
[27/03/2008|18:12] C:\Users\matitoon\AppData\Roaming\Microsoft\Macros compl‚mentaires
[22/03/2008|23:20] C:\Users\matitoon\AppData\Roaming\Microsoft\IdentityCRL
[21/03/2008|23:54] C:\Users\matitoon\AppData\Roaming\Microsoft\Network
[06/03/2008|17:59] C:\Users\matitoon\AppData\Roaming\Microsoft\Speech
[24/01/2008|00:06] C:\Users\matitoon\AppData\Roaming\Microsoft\HTML Help
[29/12/2007|22:47] C:\Users\matitoon\AppData\Roaming\Microsoft\Internet Explorer
[28/12/2007|22:36] C:\Users\matitoon\AppData\Roaming\Microsoft\Crypto
[27/12/2007|21:57] C:\Users\matitoon\AppData\Roaming\Microsoft\eHome
[27/12/2007|20:24] C:\Users\matitoon\AppData\Roaming\Microsoft\Windows
[27/12/2007|19:34] C:\Users\matitoon\AppData\Roaming\Microsoft\MMC
[27/12/2007|01:31] C:\Users\matitoon\AppData\Roaming\Microsoft\SystemCertificates
[27/12/2007|01:30] C:\Users\matitoon\AppData\Roaming\Microsoft\Protect
[27/12/2007|01:24] C:\Users\matitoon\AppData\Roaming\Microsoft\CLR Security Config
[27/12/2007|01:22] C:\Users\matitoon\AppData\Roaming\Microsoft\Credentials

[07/05/2008|14:55] C:\Users\matitoon\AppData\Roaming\Roxio\RoxioCentral
[04/05/2008|11:44] C:\Users\matitoon\AppData\Roaming\Roxio\MediaManager9
[04/04/2008|19:19] C:\Users\matitoon\AppData\Roaming\Roxio\Dragon
[24/03/2008|01:18] C:\Users\matitoon\AppData\Roaming\Roxio\MyDVD9
[24/03/2008|01:18] C:\Users\matitoon\AppData\Roaming\Roxio\VideoUI9
[30/01/2008|00:34] C:\Users\matitoon\AppData\Roaming\Roxio\RoxioCentral33

[29/12/2007|20:01] C:\Users\matitoon\AppData\Roaming\SecuROM\UserData

[09/06/2008|23:11] C:\Users\matitoon\AppData\Roaming\vlc\cache

[19/01/2008|21:00] C:\Users\matitoon\AppData\Roaming\Yahoo!\Companion

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[19/06/2008 22:06][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{C78EB617-5B6B-4DF0-95F2-F1105AE8124A}.job
[20/06/2008 21:32][--ah-----] C:\Windows\tasks\SA.DAT
[20/06/2008 21:31][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[11/05/2008|17:34] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[05/05/2008|19:09] C:\ProgramData\Azureus
[19/04/2008|22:29] C:\ProgramData\BOONTY
[24/11/2005|22:19] C:\ProgramData\Bureau
[20/12/2006|07:43] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[25/02/2008|23:51] C:\ProgramData\ESET
[24/11/2005|22:19] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[20/12/2006|07:48] C:\ProgramData\Google
[20/12/2006|08:01] C:\ProgramData\Hewlett-Packard
[29/12/2007|01:12] C:\ProgramData\HP
[29/12/2007|01:13] C:\ProgramData\hpzinstall.log
[20/12/2006|07:17] C:\ProgramData\InstallShield
[26/02/2008|00:10] C:\ProgramData\LUUnInstall.LiveUpdate
[03/01/2008|01:45] C:\ProgramData\MAGIX
[24/11/2005|22:19] C:\ProgramData\Menu D‚marrer
[20/06/2008|21:19] C:\ProgramData\Messenger Plus!
[24/01/2008|00:06] C:\ProgramData\Microsoft
[24/11/2005|22:19] C:\ProgramData\ModŠles
[15/05/2008|00:23] C:\ProgramData\Roxio
[27/03/2008|17:25] C:\ProgramData\SBT
[27/12/2007|19:55] C:\ProgramData\Skype
[19/06/2008|01:30] C:\ProgramData\Slow Internet 1
[30/01/2008|00:34] C:\ProgramData\Sonic
[02/11/2006|15:02] C:\ProgramData\Start Menu
[26/02/2008|00:10] C:\ProgramData\Symantec
[01/01/2008|03:13] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[19/06/2008|23:20] C:\ProgramData\WLInstaller

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[18/05/2008|12:17] C:\Program Files\Acro Software
[11/05/2008|17:33] C:\Program Files\Adobe
[10/06/2008|02:04] C:\Program Files\adslTV
[18/05/2008|12:23] C:\Program Files\Adzgalore Games Collection
[13/02/2008|14:15] C:\Program Files\Alwil Software
[06/05/2008|04:33] C:\Program Files\Azureus
[19/04/2008|23:31] C:\Program Files\BoontyGames
[27/01/2008|13:39] C:\Program Files\Broadcom
[11/05/2008|17:33] C:\Program Files\Common Files
[20/12/2006|07:05] C:\Program Files\CONEXANT
[14/05/2008|21:41] C:\Program Files\Creative
[29/12/2007|17:24] C:\Program Files\desktop.ini
[04/01/2008|00:10] C:\Program Files\directx
[19/06/2008|01:07] C:\Program Files\DivX
[04/01/2008|23:55] C:\Program Files\eMule
[24/11/2005|22:19] C:\Program Files\Fichiers communs [c:\Program Files\Common Files]
[18/05/2008|12:17] C:\Program Files\GNUGS
[31/12/2007|20:24] C:\Program Files\Google
[29/12/2007|01:12] C:\Program Files\Hewlett-Packard
[29/12/2007|01:13] C:\Program Files\HP
[18/05/2008|12:39] C:\Program Files\InstallShield Installation Information
[12/06/2008|03:10] C:\Program Files\Internet Explorer
[16/01/2008|16:59] C:\Program Files\Java
[14/04/2008|18:07] C:\Program Files\Kiwee Toolbar2
[24/01/2008|00:21] C:\Program Files\LG Electronics
[24/01/2008|00:15] C:\Program Files\LG PC Suite 2
[20/06/2008|21:00] C:\Program Files\LimeWire
[05/01/2008|21:04] C:\Program Files\Lionhead Studios Ltd
[19/06/2008|23:07] C:\Program Files\Lopxp
[03/01/2008|01:45] C:\Program Files\MAGIX
[19/06/2008|23:39] C:\Program Files\Messenger Plus! Live
[27/03/2008|17:24] C:\Program Files\Microsoft FrontPage
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[27/03/2008|17:26] C:\Program Files\Microsoft Office
[27/03/2008|17:19] C:\Program Files\Microsoft Visual Studio
[20/12/2006|07:39] C:\Program Files\Microsoft Works
[02/11/2006|14:42] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[29/12/2007|16:22] C:\Program Files\MSXML 4.0
[04/01/2008|01:11] C:\Program Files\QuickZip4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[20/12/2006|07:27] C:\Program Files\Roxio
[20/12/2006|07:49] C:\Program Files\Services en ligne
[27/03/2008|17:25] C:\Program Files\Snapshot Viewer
[26/02/2008|00:09] C:\Program Files\Symantec
[20/12/2006|07:05] C:\Program Files\Synaptics
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[25/01/2008|22:39] C:\Program Files\VideoLAN
[29/12/2007|17:19] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[29/12/2007|17:19] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[19/06/2008|23:26] C:\Program Files\Windows Live
[12/06/2008|03:10] C:\Program Files\Windows Mail
[29/12/2007|17:19] C:\Program Files\Windows Media Player
[24/11/2005|22:19] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[09/01/2008|13:32] C:\Program Files\Windows Sidebar
[20/06/2008|20:46] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[11/05/2008|17:34] C:\Program Files\Common Files\Adobe
[19/04/2008|22:28] C:\Program Files\Common Files\BOONTY Shared
[27/03/2008|17:19] C:\Program Files\Common Files\Designer
[29/12/2007|01:12] C:\Program Files\Common Files\HP
[20/12/2006|07:42] C:\Program Files\Common Files\InstallShield
[20/12/2006|08:00] C:\Program Files\Common Files\Java
[03/01/2008|01:44] C:\Program Files\Common Files\MAGIX Shared
[19/06/2008|23:16] C:\Program Files\Common Files\microsoft shared
[19/01/2008|21:01] C:\Program Files\Common Files\PX Storage Engine
[20/12/2006|07:24] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[20/12/2006|07:25] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[20/12/2006|07:27] C:\Program Files\Common Files\SureThing Shared
[26/02/2008|00:12] C:\Program Files\Common Files\Symantec Shared
[27/03/2008|17:25] C:\Program Files\Common Files\System
[28/12/2007|22:28] C:\Program Files\Common Files\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 54

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-20 21:33:37
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\Windows\system32\nvs2.inf
C:\Users\matitoon\AppData\Local\tiwci_navps.dat
C:\Users\matitoon\AppData\Local\tiwci_nav.dat
C:\Users\matitoon\AppData\Local\tiwci.dat
[b]! EGDACCESS !/b

[F:1432][D:74]-> C:\Users\matitoon\AppData\Local\Temp
[F:108][D:1]-> C:\Users\matitoon\AppData\Roaming\MICROS~1\Windows\Cookies
[F:278][D:15]-> C:\Users\matitoon\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:2][D:2]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 21:36:11,39 ]----------------------
0
Utilisateur anonyme
 
1) Télécharge Malwarebytes' Anti-Malware.

*Télécharge et installe Malwarebyte's Anti-Malware
*http://www.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware
*A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée. >>> clique sur OK
*Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur ton Bureau.
*Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur OK
*Laisse les Mises à jour se télécharger

*** Referme le programme ***

2) Redémarre en "Mode sans échec"

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm

Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

3) Scan avec Malwarebyte's Anti-Malware

*Lance Malwarebyte's Anti-Malware
*Puis vs dans l'onglet "Recherche" puis coche "Exécuter un examen complet" puis "Rechercher sélectionne tes disques durs" puis clique sur "Lancer l’examen"
*A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
*Suppression des éléments détectés >>>> clique sur Supprimer la sélection
*S'il t'es demandé de redémarrer >>> clique sur "Yes"

*--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
matitoon
 
voilà la réponse

Malwarebytes' Anti-Malware 1.18
Version de la base de données: 872

22:27:16 20/06/2008
mbam-log-6-20-2008 (22-27-16).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 125836
Temps écoulé: 25 minute(s), 7 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure (Rogue.Spyware-Secure) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Spyware-Secure trial.lnk (Rogue.Spyware-Secure) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Website.lnk (Rogue.Spyware-Secure) -> Quarantined and deleted successfully.
C:\Windows\System32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
0
Utilisateur anonyme
 
Ok fais une analyse avec "Avast" en mode sans échec. En mode sans échec tu ouvres "Avast" puis tu cliques sur le "Disque Dur" tu choisi "Scan Standard" + "Scan des archives" puis tu lance le scan. Si pendant le scan il détecte des virus tu fais "Supprimer". Quand tu as fini le scan tu redémarre en mode normal. Puis tu me dit si Avast a détecté des virus ou autre.

Comment redémarrer en mode sans échec:

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparait rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm
0
Réponse 6 / 7
matitoon
 
non avast n'a rien détecté. Cela veut il dire que c'est bon?
0
Utilisateur anonyme
 
Oui
0
Réponse 7 / 7
matitoon
 
merci
0

Discussions similaires

Jeux d'aventure
Rafy68 -
Arcadium -

76 réponses
Code erreur 80710A06
LeJoeurTriste -
Petibond -

27 réponses