Pages publicitaires intempestives

ramin -  
gil le fantom Messages postés 2809 Statut Membre -
Bonjour,

Lors de mes connections à internet, je subis la présence de pages de publicité.
Pouvez-vous m'aider à analyser le rapport hijackthis suivant.
Merci d'avance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:09:01, on 21/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Softwin\BitDefender Professional Edition\bdswitch.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\documents and settings\aliche\local settings\application data\waeam.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
c:\program files\softwin\bitdefender professional edition\bdmcon.exe
C:\Program Files\Softwin\BitDefender Professional Edition\vsserv.exe
c:\program files\softwin\bitdefender professional edition\bdlite.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Aliche\Bureau\scanner.exe.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fmsger%2ftabs%2f_pictos%2fcoca%2fPictoCoke02.png%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender Professional Edition\bdswitch.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Stupid Data Dart Wave] C:\Documents and Settings\All Users\Application Data\flag ace stupid data\JUMP CHIC.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Downloadskip] C:\DOCUME~1\Aliche\APPLIC~1\INSIDE~1\PileMess.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [waeam] c:\documents and settings\aliche\local settings\application data\waeam.exe waeam
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Pool 2 - http://download2.games.yahoo.com/games/clients/y/poti_x.cab
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://quickplace.aipl.uhp-nancy.fr/qp2.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender Professional Edition\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 10977 bytes
Configuration: Windows XP
Internet Explorer 7.0

7 réponses

  1.
    gil le fantom Messages postés 2809 Statut Membre 25
     
    bonjour

    tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    * Double-clique dessus pour lancer l'installation
    * Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
    * Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
    * Patiente jusqu'à la fin du scan
    * Poste le rapport généré (C:\lopR.txt)
    0
    1. ramin
       
      Bonjour,

      Tout d'abord, je vous remercie ainsi que Chiquitine29 pour vos réponses.

      Voici le rapport de Lop S&D:

      -----------------------[ Lop S&D 4.2.1-6 XP/Vista ]---------------------

      [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
      [ USER : Aliche ] [ "C:\Lop SD" ] [ Selection : 1 ]
      [ 21/06/2008 | 13:26:30,50 ] [ PC : MAISON ]
      [ MAJ : 16-06-2008 | 23:01 ]

      -------------[ Listing des dossiers dans Application Data ]------------

      [29/04/2007|13:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
      [29/04/2007|13:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

      [03/02/2008|00:29] C:\DOCUME~1\Aliche\APPLIC~1\Adobe
      [06/11/2007|19:35] C:\DOCUME~1\Aliche\APPLIC~1\Apple Computer
      [21/06/2008|00:49] C:\DOCUME~1\Aliche\APPLIC~1\BitTorrent
      [05/11/2007|13:01] C:\DOCUME~1\Aliche\APPLIC~1\Canon
      [29/04/2007|13:59] C:\DOCUME~1\Aliche\APPLIC~1\desktop.ini
      [21/06/2008|13:21] C:\DOCUME~1\Aliche\APPLIC~1\DNA
      [16/04/2008|10:05] C:\DOCUME~1\Aliche\APPLIC~1\dvdcss
      [03/02/2008|21:30] C:\DOCUME~1\Aliche\APPLIC~1\FastStone
      [19/04/2008|14:17] C:\DOCUME~1\Aliche\APPLIC~1\fretsonfire
      [21/05/2007|17:24] C:\DOCUME~1\Aliche\APPLIC~1\Google
      [14/10/2007|14:35] C:\DOCUME~1\Aliche\APPLIC~1\Help
      [30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Identities
      [15/12/2007|13:29] C:\DOCUME~1\Aliche\APPLIC~1\InfraRecorder
      [26/05/2008|08:42] C:\DOCUME~1\Aliche\APPLIC~1\inside free link
      [30/11/2007|21:56] C:\DOCUME~1\Aliche\APPLIC~1\iWin
      [16/03/2008|02:11] C:\DOCUME~1\Aliche\APPLIC~1\Kptic
      [02/05/2007|10:19] C:\DOCUME~1\Aliche\APPLIC~1\Lavasoft
      [29/04/2007|18:22] C:\DOCUME~1\Aliche\APPLIC~1\Macromedia
      [28/06/2007|19:09] C:\DOCUME~1\Aliche\APPLIC~1\MAGIX
      [06/06/2008|11:01] C:\DOCUME~1\Aliche\APPLIC~1\Microsoft
      [01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Mozilla
      [13/08/2007|19:56] C:\DOCUME~1\Aliche\APPLIC~1\MSN6
      [29/04/2007|19:47] C:\DOCUME~1\Aliche\APPLIC~1\MusicIP
      [16/03/2008|02:13] C:\DOCUME~1\Aliche\APPLIC~1\Neonumeric
      [15/12/2007|01:15] C:\DOCUME~1\Aliche\APPLIC~1\Nero
      [20/09/2007|22:34] C:\DOCUME~1\Aliche\APPLIC~1\PC Tools
      [20/05/2007|20:48] C:\DOCUME~1\Aliche\APPLIC~1\Real
      [26/04/2008|14:59] C:\DOCUME~1\Aliche\APPLIC~1\Samsung
      [02/05/2007|19:39] C:\DOCUME~1\Aliche\APPLIC~1\Screenshot Sender
      [31/05/2007|17:53] C:\DOCUME~1\Aliche\APPLIC~1\Sun
      [01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Talkback
      [19/10/2007|21:07] C:\DOCUME~1\Aliche\APPLIC~1\teamspeak2
      [17/11/2007|18:59] C:\DOCUME~1\Aliche\APPLIC~1\TuneUp Software
      [29/04/2007|19:41] C:\DOCUME~1\Aliche\APPLIC~1\VERITAS
      [18/05/2008|13:58] C:\DOCUME~1\Aliche\APPLIC~1\vlc
      [30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Zylom

      [29/04/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [06/11/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
      [06/11/2007|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
      [29/04/2007|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
      [26/05/2008|08:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
      [21/05/2008|13:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [21/06/2008|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar2
      [26/04/2008|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
      [28/06/2007|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
      [14/01/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [01/08/2007|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
      [13/08/2007|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
      [25/10/2007|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
      [14/01/2008|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
      [20/01/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
      [11/07/2007|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
      [21/06/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [25/05/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [27/06/2007|23:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
      [30/03/2008|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
      [27/02/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
      [19/11/2007|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

      [29/04/2007|13:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
      [29/04/2007|13:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

      [21/04/2008|23:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [29/04/2007|13:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

      [21/06/2008 10:41][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      [21/06/2008 13:00][--ah-----] C:\WINDOWS\tasks\ACF4AFC6906B2516.job
      [20/06/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
      [21/06/2008 10:50][--ah-----] C:\WINDOWS\tasks\SA.DAT
      [01/11/2001 13:42][-r-h-----] C:\WINDOWS\tasks\desktop.ini

      ACF4AFC6906B2516.job <--> c:\docume~1\aliche\applic~1\inside~1\blahstupidpart.exe

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [29/04/2007|20:33] C:\Program Files\Adobe
      [13/06/2008|22:18] C:\Program Files\adslTV
      [26/12/2007|16:03] C:\Program Files\Alcohol Soft
      [29/04/2007|13:31] C:\Program Files\bit defender 7.2 fr + Key
      [17/06/2008|07:49] C:\Program Files\BitTorrent
      [29/04/2007|19:22] C:\Program Files\Canon
      [26/02/2008|23:47] C:\Program Files\CCleaner
      [13/04/2008|19:02] C:\Program Files\Conduit
      [16/06/2008|12:27] C:\Program Files\DivX
      [23/12/2007|15:44] C:\Program Files\DNA
      [21/05/2008|13:55] C:\Program Files\Fichiers communs
      [15/06/2008|21:36] C:\Program Files\Frets on Fire
      [08/07/2007|23:22] C:\Program Files\Guitar Pro 5
      [15/12/2007|01:30] C:\Program Files\InfraRecorder
      [08/06/2008|21:40] C:\Program Files\InstallShield Installation Information
      [11/06/2008|03:25] C:\Program Files\Internet Explorer
      [25/12/2007|14:53] C:\Program Files\Java
      [02/05/2007|10:19] C:\Program Files\Lavasoft
      [21/05/2008|13:55] C:\Program Files\Logitech
      [04/08/2007|03:09] C:\Program Files\Messenger
      [12/03/2008|17:16] C:\Program Files\Metin2_France
      [03/05/2008|03:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [29/04/2007|13:12] C:\Program Files\microsoft frontpage
      [30/04/2007|20:24] C:\Program Files\Microsoft Office
      [14/01/2008|21:59] C:\Program Files\Microsoft SQL Server Compact Edition
      [30/04/2007|20:23] C:\Program Files\Microsoft Visual Studio
      [30/04/2007|20:23] C:\Program Files\Microsoft Works
      [30/04/2007|20:25] C:\Program Files\Microsoft.NET
      [03/08/2007|09:42] C:\Program Files\Movie Maker
      [19/06/2008|20:18] C:\Program Files\Mozilla Firefox
      [29/04/2007|13:08] C:\Program Files\MSN
      [29/04/2007|13:08] C:\Program Files\MSN Gaming Zone
      [16/05/2008|19:06] C:\Program Files\MSN Messenger
      [15/12/2007|01:07] C:\Program Files\Nero
      [03/08/2007|09:32] C:\Program Files\NetMeeting
      [04/08/2007|03:07] C:\Program Files\Outlook Express
      [20/05/2007|20:47] C:\Program Files\Real
      [26/04/2008|14:54] C:\Program Files\Samsung
      [29/04/2007|19:18] C:\Program Files\Softwin
      [13/06/2008|00:07] C:\Program Files\Spyware Doctor
      [29/04/2007|19:41] C:\Program Files\Stomp
      [07/05/2008|20:17] C:\Program Files\StuffPlug3
      [25/12/2007|15:49] C:\Program Files\Uninstall Information
      [29/04/2007|19:41] C:\Program Files\VERITAS Software
      [29/04/2007|13:43] C:\Program Files\VideoLAN
      [29/04/2007|13:42] C:\Program Files\VLC
      [16/04/2008|13:22] C:\Program Files\Windows Live
      [15/12/2007|00:42] C:\Program Files\Windows Media Player
      [03/08/2007|09:32] C:\Program Files\Windows NT
      [30/04/2007|20:28] C:\Program Files\WindowsUpdate
      [14/10/2007|14:35] C:\Program Files\WinRAR
      [28/02/2008|15:58] C:\Program Files\WordBiz
      [29/04/2007|13:12] C:\Program Files\xerox
      [30/11/2007|22:58] C:\Program Files\Zylom Games

      ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

      [26/04/2008|14:52] C:\Program Files\Fichiers communs\Adobe
      [23/05/2007|16:52] C:\Program Files\Fichiers communs\Blizzard Entertainment
      [30/04/2007|20:23] C:\Program Files\Fichiers communs\DESIGNER
      [22/02/2008|15:14] C:\Program Files\Fichiers communs\InstallShield
      [31/05/2007|17:50] C:\Program Files\Fichiers communs\Java
      [02/05/2008|17:45] C:\Program Files\Fichiers communs\Logitech
      [28/06/2007|19:07] C:\Program Files\Fichiers communs\MAGIX Shared
      [14/01/2008|21:56] C:\Program Files\Fichiers communs\Microsoft Shared
      [29/04/2007|13:09] C:\Program Files\Fichiers communs\MSSoap
      [29/04/2007|14:00] C:\Program Files\Fichiers communs\ODBC
      [20/09/2007|23:35] C:\Program Files\Fichiers communs\Real
      [29/04/2007|13:09] C:\Program Files\Fichiers communs\Services
      [29/04/2007|19:18] C:\Program Files\Fichiers communs\Softwin
      [29/04/2007|14:00] C:\Program Files\Fichiers communs\SpeechEngines
      [21/12/2007|20:23] C:\Program Files\Fichiers communs\Symantec Shared
      [04/08/2007|03:07] C:\Program Files\Fichiers communs\System
      [14/01/2008|21:55] C:\Program Files\Fichiers communs\WindowsLiveInstaller
      [09/05/2008|12:04] C:\Program Files\Fichiers communs\Wise Installation Wizard
      [20/09/2007|23:36] C:\Program Files\Fichiers communs\xing shared

      ---------------------------[ Process ]--------------------------

      ... 49

      iexplore.exe ~ [1720]
      iexplore.exe ~ [1996]
      iexplore.exe ~ [3496]
      iexplore.exe ~ [2380]
      iexplore.exe ~ [3192]
      iexplore.exe ~ [2444]

      ----------------------[ Recherche avec S_Lop ]---------------------

      Aucun fichier / dossier Lop trouvé !

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Base defy.exe
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\JUMP CHIC.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\blahstupidpart.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\cfhlfeef.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\DEFYUSERLOUDISO.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\PileMess.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\uvxydrvp.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\xecpfetv.exe
      C:\DOCUME~1\Aliche\APPLIC~1\inside~1\zxdcqdzz.exe
      C:\WINDOWS\Prefetch\JUMP CHIC.EXE-0410FACF.pf
      C:\WINDOWS\Prefetch\PILEMESS.EXE-09BCCF7F.pf
      C:\DOCUME~1\Aliche\Cookies\aliche@www.adserver5[2].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@adin.bigpoint[2].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@bigpoint[1].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@fr1.seafight.bigpoint[1].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@banner.cotedazurpalace[2].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@cotedazurpalace[1].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@adopt.euroclick[1].txt
      C:\DOCUME~1\Aliche\Cookies\aliche@fr1.seafight.bigpoint[1].txt
      C:\WINDOWS\Tasks\ACF4AFC6906B2516.job

      ----------------------[ Verification du Registre ]----------------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Downloadskip"="C:\\DOCUME~1\\Aliche\\APPLIC~1\\INSIDE~1\\PileMess.exe"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Stupid Data Dart Wave"="C:\\Documents and Settings\\All Users\\Application Data\\flag ace stupid data\\JUMP CHIC.exe"

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts MODIFIE


      -> 72 ( 70 ## added by CiD )

      /!\ 1 Not 127.0.0.1 !!

      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-06-21 13:29:06
      Windows 5.1.2600 Service Pack 2 NTFS
      detected NTDLL code modification:
      ZwClose
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------

      C:\WINDOWS\system32\nvs2.inf
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_navps.dat
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.exe
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.dat
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_nav.dat
      [b]! EGDACCESS !/b



      [F:1120][D:8]-> C:\DOCUME~1\Aliche\LOCALS~1\Temp
      [F:458][D:0]-> C:\DOCUME~1\Aliche\Cookies
      [F:2554][D:9]-> C:\DOCUME~1\Aliche\LOCALS~1\TEMPOR~1\content.IE5

      --------------------[ Fin du rapport a 13:30:25,50 ]----------------------
      0
  2. Utilisateur anonyme
     
    Salut,

    Préalable
    • Vider la corbeille
    • Fermer toutes les applications

    ================NAVILOG====================

    Télécharge ceci http://il.mafioso.pagesperso-orange.fr/Navifix/download.htm

    prend navilog1.exe

    Choisir option 1 uniquement

    Ensuite suit ce tutorial :http://www.commentcamarche.net/faq/sujet 2490 popups ouverture de fenetres internet publicitaires pop up#premiere methode utiliser navilog d il mafioso sous xp

    Et enfin post le rapport du scan navilog

    0
  3. gil le fantom Messages postés 2809 Statut Membre 25
     
    salut chiquitine

    en duo
    0
  4. Utilisateur anonyme
     
    Salut

    et oui ...

    Je te laisse la main t étais le prem's

    @++
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gil le fantom Messages postés 2809 Statut Membre 25
     
    pas etonnant que tu as beaucoup de pub

    Relance Lop S&D

    * Choisis cette fois ci l'Option 2 (Suppression)
    * Ne ferme pas la fenêtre lors de la suppression !
    * Poste le rapport généré (C:\lopR.txt)

    aprés applique le message de chiquitine29
    0
    1. ramin
       
      voici le nouveau rapport:


      -----------------------[ Lop S&D 4.2.1-6 XP/Vista ]---------------------

      [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
      [ USER : Aliche ] [ "C:\Lop SD" ] [ Selection : 2 ]
      [ 21/06/2008 | 13:43:00,06 ] [ PC : MAISON ]
      [ MAJ : 16-06-2008 | 23:01 ]


      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

      Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Base defy.exe
      Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\JUMP CHIC.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\blahstupidpart.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\cfhlfeef.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\DEFYUSERLOUDISO.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\PileMess.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\uvxydrvp.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\xecpfetv.exe
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\zxdcqdzz.exe
      Supprimé! - C:\WINDOWS\Prefetch\JUMP CHIC.EXE-0410FACF.pf
      Supprimé! - C:\WINDOWS\Prefetch\PILEMESS.EXE-09BCCF7F.pf
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@www.adserver5[2].txt
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@adin.bigpoint[2].txt
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@bigpoint[1].txt
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@fr1.seafight.bigpoint[1].txt
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@banner.cotedazurpalace[2].txt
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@cotedazurpalace[1].txt
      Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@adopt.euroclick[1].txt
      Supprimé! - C:\WINDOWS\Tasks\ACF4AFC6906B2516.job
      Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
      Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1
      Restauré! - Fichier Hosts

      //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


      -------------[ Listing des dossiers dans Application Data ]------------

      [29/04/2007|13:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
      [29/04/2007|13:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

      [03/02/2008|00:29] C:\DOCUME~1\Aliche\APPLIC~1\Adobe
      [06/11/2007|19:35] C:\DOCUME~1\Aliche\APPLIC~1\Apple Computer
      [21/06/2008|00:49] C:\DOCUME~1\Aliche\APPLIC~1\BitTorrent
      [05/11/2007|13:01] C:\DOCUME~1\Aliche\APPLIC~1\Canon
      [29/04/2007|13:59] C:\DOCUME~1\Aliche\APPLIC~1\desktop.ini
      [21/06/2008|13:41] C:\DOCUME~1\Aliche\APPLIC~1\DNA
      [16/04/2008|10:05] C:\DOCUME~1\Aliche\APPLIC~1\dvdcss
      [03/02/2008|21:30] C:\DOCUME~1\Aliche\APPLIC~1\FastStone
      [19/04/2008|14:17] C:\DOCUME~1\Aliche\APPLIC~1\fretsonfire
      [21/05/2007|17:24] C:\DOCUME~1\Aliche\APPLIC~1\Google
      [14/10/2007|14:35] C:\DOCUME~1\Aliche\APPLIC~1\Help
      [30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Identities
      [15/12/2007|13:29] C:\DOCUME~1\Aliche\APPLIC~1\InfraRecorder
      [30/11/2007|21:56] C:\DOCUME~1\Aliche\APPLIC~1\iWin
      [16/03/2008|02:11] C:\DOCUME~1\Aliche\APPLIC~1\Kptic
      [02/05/2007|10:19] C:\DOCUME~1\Aliche\APPLIC~1\Lavasoft
      [29/04/2007|18:22] C:\DOCUME~1\Aliche\APPLIC~1\Macromedia
      [28/06/2007|19:09] C:\DOCUME~1\Aliche\APPLIC~1\MAGIX
      [06/06/2008|11:01] C:\DOCUME~1\Aliche\APPLIC~1\Microsoft
      [01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Mozilla
      [13/08/2007|19:56] C:\DOCUME~1\Aliche\APPLIC~1\MSN6
      [29/04/2007|19:47] C:\DOCUME~1\Aliche\APPLIC~1\MusicIP
      [16/03/2008|02:13] C:\DOCUME~1\Aliche\APPLIC~1\Neonumeric
      [15/12/2007|01:15] C:\DOCUME~1\Aliche\APPLIC~1\Nero
      [20/09/2007|22:34] C:\DOCUME~1\Aliche\APPLIC~1\PC Tools
      [20/05/2007|20:48] C:\DOCUME~1\Aliche\APPLIC~1\Real
      [26/04/2008|14:59] C:\DOCUME~1\Aliche\APPLIC~1\Samsung
      [02/05/2007|19:39] C:\DOCUME~1\Aliche\APPLIC~1\Screenshot Sender
      [31/05/2007|17:53] C:\DOCUME~1\Aliche\APPLIC~1\Sun
      [01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Talkback
      [19/10/2007|21:07] C:\DOCUME~1\Aliche\APPLIC~1\teamspeak2
      [17/11/2007|18:59] C:\DOCUME~1\Aliche\APPLIC~1\TuneUp Software
      [29/04/2007|19:41] C:\DOCUME~1\Aliche\APPLIC~1\VERITAS
      [18/05/2008|13:58] C:\DOCUME~1\Aliche\APPLIC~1\vlc
      [30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Zylom

      [29/04/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [06/11/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
      [06/11/2007|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
      [29/04/2007|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
      [21/05/2008|13:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [21/06/2008|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar2
      [26/04/2008|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
      [28/06/2007|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
      [14/01/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [01/08/2007|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
      [13/08/2007|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
      [25/10/2007|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
      [14/01/2008|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
      [20/01/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
      [11/07/2007|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
      [21/06/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [25/05/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [27/06/2007|23:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
      [30/03/2008|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
      [27/02/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
      [19/11/2007|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

      [29/04/2007|13:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
      [29/04/2007|13:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

      [21/04/2008|23:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [29/04/2007|13:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

      [21/06/2008 10:41][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      [20/06/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
      [21/06/2008 10:50][--ah-----] C:\WINDOWS\tasks\SA.DAT
      [01/11/2001 13:42][-r-h-----] C:\WINDOWS\tasks\desktop.ini

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [29/04/2007|20:33] C:\Program Files\Adobe
      [13/06/2008|22:18] C:\Program Files\adslTV
      [26/12/2007|16:03] C:\Program Files\Alcohol Soft
      [29/04/2007|13:31] C:\Program Files\bit defender 7.2 fr + Key
      [17/06/2008|07:49] C:\Program Files\BitTorrent
      [29/04/2007|19:22] C:\Program Files\Canon
      [26/02/2008|23:47] C:\Program Files\CCleaner
      [13/04/2008|19:02] C:\Program Files\Conduit
      [16/06/2008|12:27] C:\Program Files\DivX
      [23/12/2007|15:44] C:\Program Files\DNA
      [21/05/2008|13:55] C:\Program Files\Fichiers communs
      [15/06/2008|21:36] C:\Program Files\Frets on Fire
      [08/07/2007|23:22] C:\Program Files\Guitar Pro 5
      [15/12/2007|01:30] C:\Program Files\InfraRecorder
      [08/06/2008|21:40] C:\Program Files\InstallShield Installation Information
      [11/06/2008|03:25] C:\Program Files\Internet Explorer
      [25/12/2007|14:53] C:\Program Files\Java
      [02/05/2007|10:19] C:\Program Files\Lavasoft
      [21/05/2008|13:55] C:\Program Files\Logitech
      [04/08/2007|03:09] C:\Program Files\Messenger
      [12/03/2008|17:16] C:\Program Files\Metin2_France
      [03/05/2008|03:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [29/04/2007|13:12] C:\Program Files\microsoft frontpage
      [30/04/2007|20:24] C:\Program Files\Microsoft Office
      [14/01/2008|21:59] C:\Program Files\Microsoft SQL Server Compact Edition
      [30/04/2007|20:23] C:\Program Files\Microsoft Visual Studio
      [30/04/2007|20:23] C:\Program Files\Microsoft Works
      [30/04/2007|20:25] C:\Program Files\Microsoft.NET
      [03/08/2007|09:42] C:\Program Files\Movie Maker
      [19/06/2008|20:18] C:\Program Files\Mozilla Firefox
      [29/04/2007|13:08] C:\Program Files\MSN
      [29/04/2007|13:08] C:\Program Files\MSN Gaming Zone
      [16/05/2008|19:06] C:\Program Files\MSN Messenger
      [15/12/2007|01:07] C:\Program Files\Nero
      [03/08/2007|09:32] C:\Program Files\NetMeeting
      [04/08/2007|03:07] C:\Program Files\Outlook Express
      [20/05/2007|20:47] C:\Program Files\Real
      [26/04/2008|14:54] C:\Program Files\Samsung
      [29/04/2007|19:18] C:\Program Files\Softwin
      [13/06/2008|00:07] C:\Program Files\Spyware Doctor
      [29/04/2007|19:41] C:\Program Files\Stomp
      [07/05/2008|20:17] C:\Program Files\StuffPlug3
      [25/12/2007|15:49] C:\Program Files\Uninstall Information
      [29/04/2007|19:41] C:\Program Files\VERITAS Software
      [29/04/2007|13:43] C:\Program Files\VideoLAN
      [29/04/2007|13:42] C:\Program Files\VLC
      [16/04/2008|13:22] C:\Program Files\Windows Live
      [15/12/2007|00:42] C:\Program Files\Windows Media Player
      [03/08/2007|09:32] C:\Program Files\Windows NT
      [30/04/2007|20:28] C:\Program Files\WindowsUpdate
      [14/10/2007|14:35] C:\Program Files\WinRAR
      [28/02/2008|15:58] C:\Program Files\WordBiz
      [29/04/2007|13:12] C:\Program Files\xerox
      [30/11/2007|22:58] C:\Program Files\Zylom Games

      ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

      [26/04/2008|14:52] C:\Program Files\Fichiers communs\Adobe
      [23/05/2007|16:52] C:\Program Files\Fichiers communs\Blizzard Entertainment
      [30/04/2007|20:23] C:\Program Files\Fichiers communs\DESIGNER
      [22/02/2008|15:14] C:\Program Files\Fichiers communs\InstallShield
      [31/05/2007|17:50] C:\Program Files\Fichiers communs\Java
      [02/05/2008|17:45] C:\Program Files\Fichiers communs\Logitech
      [28/06/2007|19:07] C:\Program Files\Fichiers communs\MAGIX Shared
      [14/01/2008|21:56] C:\Program Files\Fichiers communs\Microsoft Shared
      [29/04/2007|13:09] C:\Program Files\Fichiers communs\MSSoap
      [29/04/2007|14:00] C:\Program Files\Fichiers communs\ODBC
      [20/09/2007|23:35] C:\Program Files\Fichiers communs\Real
      [29/04/2007|13:09] C:\Program Files\Fichiers communs\Services
      [29/04/2007|19:18] C:\Program Files\Fichiers communs\Softwin
      [29/04/2007|14:00] C:\Program Files\Fichiers communs\SpeechEngines
      [21/12/2007|20:23] C:\Program Files\Fichiers communs\Symantec Shared
      [04/08/2007|03:07] C:\Program Files\Fichiers communs\System
      [14/01/2008|21:55] C:\Program Files\Fichiers communs\WindowsLiveInstaller
      [09/05/2008|12:04] C:\Program Files\Fichiers communs\Wise Installation Wizard
      [20/09/2007|23:36] C:\Program Files\Fichiers communs\xing shared

      ---------------------------[ Process ]--------------------------

      ... 43

      ... OK !

      ----------------------[ Recherche avec S_Lop ]---------------------

      Aucun fichier / dossier Lop trouvé !

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      Aucun fichier / dossier Lop trouvé !

      ----------------------[ Verification du Registre ]----------------------

      ..... OK !

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts PROPRE


      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-06-21 13:45:21
      Windows 5.1.2600 Service Pack 2 NTFS
      detected NTDLL code modification:
      ZwClose
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------

      C:\WINDOWS\system32\nvs2.inf
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_navps.dat
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.exe
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.dat
      C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_nav.dat
      [b]! EGDACCESS !/b



      [F:1120][D:8]-> C:\DOCUME~1\Aliche\LOCALS~1\Temp
      [F:453][D:0]-> C:\DOCUME~1\Aliche\Cookies
      [F:2754][D:9]-> C:\DOCUME~1\Aliche\LOCALS~1\TEMPOR~1\content.IE5

      --------------------[ Fin du rapport a 13:45:57,57 ]----------------------
      0
  7. ramin
     
    j'ai suivi les consignes du tutorial.
    Il est précisé d'etre prudent avant la supression et de contacter le forum virus/sécurité.
    Ci-dessous le rapport après l'etape de recherche:

    Search Navipromo version 3.5.8 commencé le 21/06/2008 à 13:55:07,39

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Session actuelle : "Aliche"

    Mise à jour le 06.06.2008 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.13
    Système de fichiers : NTFS

    Recherche executé en mode normal

    *** Recherche Programmes installés ***

    Favorit

    *** Recherche dossiers dans "C:\WINDOWS" ***

    *** Recherche dossiers dans "C:\Program Files" ***

    *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

    *** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Aliche\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Aliche\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Aliche\menudm~1\progra~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***

    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net
    0
  8. gil le fantom Messages postés 2809 Statut Membre 25
     
    ton rapport navilog n'est pas complet
    0

Discussions similaires

comment changer la couleur du surlignage sur MacBook
tournicou -
Aliboron Martin -

2 réponses
Retour en arrière avec Pages sur Mac ?
alex 2510 -
emma.plv -

13 réponses
À combien de pages équivaut 25 000 caractères ?
-Romane- -
kergad -

16 réponses