Sujet Précédent Sujet Suivant

Pages publicitaires intempestives

ramin -  
gil le fantom Messages postés 2809 Statut Membre -
Bonjour,

Lors de mes connections à internet, je subis la présence de pages de publicité.
Pouvez-vous m'aider à analyser le rapport hijackthis suivant.
Merci d'avance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:09:01, on 21/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Softwin\BitDefender Professional Edition\bdswitch.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\documents and settings\aliche\local settings\application data\waeam.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
c:\program files\softwin\bitdefender professional edition\bdmcon.exe
C:\Program Files\Softwin\BitDefender Professional Edition\vsserv.exe
c:\program files\softwin\bitdefender professional edition\bdlite.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Aliche\Bureau\scanner.exe.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fmsger%2ftabs%2f_pictos%2fcoca%2fPictoCoke02.png%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender Professional Edition\bdswitch.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Stupid Data Dart Wave] C:\Documents and Settings\All Users\Application Data\flag ace stupid data\JUMP CHIC.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Downloadskip] C:\DOCUME~1\Aliche\APPLIC~1\INSIDE~1\PileMess.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [waeam] c:\documents and settings\aliche\local settings\application data\waeam.exe waeam
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Pool 2 - http://download2.games.yahoo.com/games/clients/y/poti_x.cab
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://quickplace.aipl.uhp-nancy.fr/qp2.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender Professional Edition\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

7 réponses

Réponse 1 / 7
gil le fantom Messages postés 2809 Statut Membre 25
 
bonjour

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
0
ramin
 
Bonjour,

Tout d'abord, je vous remercie ainsi que Chiquitine29 pour vos réponses.

Voici le rapport de Lop S&D:

-----------------------[ Lop S&D 4.2.1-6 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Aliche ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 21/06/2008 | 13:26:30,50 ] [ PC : MAISON ]
[ MAJ : 16-06-2008 | 23:01 ]

-------------[ Listing des dossiers dans Application Data ]------------

[29/04/2007|13:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[29/04/2007|13:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[03/02/2008|00:29] C:\DOCUME~1\Aliche\APPLIC~1\Adobe
[06/11/2007|19:35] C:\DOCUME~1\Aliche\APPLIC~1\Apple Computer
[21/06/2008|00:49] C:\DOCUME~1\Aliche\APPLIC~1\BitTorrent
[05/11/2007|13:01] C:\DOCUME~1\Aliche\APPLIC~1\Canon
[29/04/2007|13:59] C:\DOCUME~1\Aliche\APPLIC~1\desktop.ini
[21/06/2008|13:21] C:\DOCUME~1\Aliche\APPLIC~1\DNA
[16/04/2008|10:05] C:\DOCUME~1\Aliche\APPLIC~1\dvdcss
[03/02/2008|21:30] C:\DOCUME~1\Aliche\APPLIC~1\FastStone
[19/04/2008|14:17] C:\DOCUME~1\Aliche\APPLIC~1\fretsonfire
[21/05/2007|17:24] C:\DOCUME~1\Aliche\APPLIC~1\Google
[14/10/2007|14:35] C:\DOCUME~1\Aliche\APPLIC~1\Help
[30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Identities
[15/12/2007|13:29] C:\DOCUME~1\Aliche\APPLIC~1\InfraRecorder
[26/05/2008|08:42] C:\DOCUME~1\Aliche\APPLIC~1\inside free link
[30/11/2007|21:56] C:\DOCUME~1\Aliche\APPLIC~1\iWin
[16/03/2008|02:11] C:\DOCUME~1\Aliche\APPLIC~1\Kptic
[02/05/2007|10:19] C:\DOCUME~1\Aliche\APPLIC~1\Lavasoft
[29/04/2007|18:22] C:\DOCUME~1\Aliche\APPLIC~1\Macromedia
[28/06/2007|19:09] C:\DOCUME~1\Aliche\APPLIC~1\MAGIX
[06/06/2008|11:01] C:\DOCUME~1\Aliche\APPLIC~1\Microsoft
[01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Mozilla
[13/08/2007|19:56] C:\DOCUME~1\Aliche\APPLIC~1\MSN6
[29/04/2007|19:47] C:\DOCUME~1\Aliche\APPLIC~1\MusicIP
[16/03/2008|02:13] C:\DOCUME~1\Aliche\APPLIC~1\Neonumeric
[15/12/2007|01:15] C:\DOCUME~1\Aliche\APPLIC~1\Nero
[20/09/2007|22:34] C:\DOCUME~1\Aliche\APPLIC~1\PC Tools
[20/05/2007|20:48] C:\DOCUME~1\Aliche\APPLIC~1\Real
[26/04/2008|14:59] C:\DOCUME~1\Aliche\APPLIC~1\Samsung
[02/05/2007|19:39] C:\DOCUME~1\Aliche\APPLIC~1\Screenshot Sender
[31/05/2007|17:53] C:\DOCUME~1\Aliche\APPLIC~1\Sun
[01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Talkback
[19/10/2007|21:07] C:\DOCUME~1\Aliche\APPLIC~1\teamspeak2
[17/11/2007|18:59] C:\DOCUME~1\Aliche\APPLIC~1\TuneUp Software
[29/04/2007|19:41] C:\DOCUME~1\Aliche\APPLIC~1\VERITAS
[18/05/2008|13:58] C:\DOCUME~1\Aliche\APPLIC~1\vlc
[30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Zylom

[29/04/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[06/11/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[06/11/2007|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[29/04/2007|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[26/05/2008|08:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
[21/05/2008|13:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[21/06/2008|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar2
[26/04/2008|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[28/06/2007|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
[14/01/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/08/2007|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[13/08/2007|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[25/10/2007|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[14/01/2008|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[20/01/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[11/07/2007|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[21/06/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[25/05/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[27/06/2007|23:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[30/03/2008|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[27/02/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[19/11/2007|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[29/04/2007|13:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[29/04/2007|13:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[21/04/2008|23:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[29/04/2007|13:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[21/06/2008 10:41][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[21/06/2008 13:00][--ah-----] C:\WINDOWS\tasks\ACF4AFC6906B2516.job
[20/06/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[21/06/2008 10:50][--ah-----] C:\WINDOWS\tasks\SA.DAT
[01/11/2001 13:42][-r-h-----] C:\WINDOWS\tasks\desktop.ini

ACF4AFC6906B2516.job <--> c:\docume~1\aliche\applic~1\inside~1\blahstupidpart.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[29/04/2007|20:33] C:\Program Files\Adobe
[13/06/2008|22:18] C:\Program Files\adslTV
[26/12/2007|16:03] C:\Program Files\Alcohol Soft
[29/04/2007|13:31] C:\Program Files\bit defender 7.2 fr + Key
[17/06/2008|07:49] C:\Program Files\BitTorrent
[29/04/2007|19:22] C:\Program Files\Canon
[26/02/2008|23:47] C:\Program Files\CCleaner
[13/04/2008|19:02] C:\Program Files\Conduit
[16/06/2008|12:27] C:\Program Files\DivX
[23/12/2007|15:44] C:\Program Files\DNA
[21/05/2008|13:55] C:\Program Files\Fichiers communs
[15/06/2008|21:36] C:\Program Files\Frets on Fire
[08/07/2007|23:22] C:\Program Files\Guitar Pro 5
[15/12/2007|01:30] C:\Program Files\InfraRecorder
[08/06/2008|21:40] C:\Program Files\InstallShield Installation Information
[11/06/2008|03:25] C:\Program Files\Internet Explorer
[25/12/2007|14:53] C:\Program Files\Java
[02/05/2007|10:19] C:\Program Files\Lavasoft
[21/05/2008|13:55] C:\Program Files\Logitech
[04/08/2007|03:09] C:\Program Files\Messenger
[12/03/2008|17:16] C:\Program Files\Metin2_France
[03/05/2008|03:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[29/04/2007|13:12] C:\Program Files\microsoft frontpage
[30/04/2007|20:24] C:\Program Files\Microsoft Office
[14/01/2008|21:59] C:\Program Files\Microsoft SQL Server Compact Edition
[30/04/2007|20:23] C:\Program Files\Microsoft Visual Studio
[30/04/2007|20:23] C:\Program Files\Microsoft Works
[30/04/2007|20:25] C:\Program Files\Microsoft.NET
[03/08/2007|09:42] C:\Program Files\Movie Maker
[19/06/2008|20:18] C:\Program Files\Mozilla Firefox
[29/04/2007|13:08] C:\Program Files\MSN
[29/04/2007|13:08] C:\Program Files\MSN Gaming Zone
[16/05/2008|19:06] C:\Program Files\MSN Messenger
[15/12/2007|01:07] C:\Program Files\Nero
[03/08/2007|09:32] C:\Program Files\NetMeeting
[04/08/2007|03:07] C:\Program Files\Outlook Express
[20/05/2007|20:47] C:\Program Files\Real
[26/04/2008|14:54] C:\Program Files\Samsung
[29/04/2007|19:18] C:\Program Files\Softwin
[13/06/2008|00:07] C:\Program Files\Spyware Doctor
[29/04/2007|19:41] C:\Program Files\Stomp
[07/05/2008|20:17] C:\Program Files\StuffPlug3
[25/12/2007|15:49] C:\Program Files\Uninstall Information
[29/04/2007|19:41] C:\Program Files\VERITAS Software
[29/04/2007|13:43] C:\Program Files\VideoLAN
[29/04/2007|13:42] C:\Program Files\VLC
[16/04/2008|13:22] C:\Program Files\Windows Live
[15/12/2007|00:42] C:\Program Files\Windows Media Player
[03/08/2007|09:32] C:\Program Files\Windows NT
[30/04/2007|20:28] C:\Program Files\WindowsUpdate
[14/10/2007|14:35] C:\Program Files\WinRAR
[28/02/2008|15:58] C:\Program Files\WordBiz
[29/04/2007|13:12] C:\Program Files\xerox
[30/11/2007|22:58] C:\Program Files\Zylom Games

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[26/04/2008|14:52] C:\Program Files\Fichiers communs\Adobe
[23/05/2007|16:52] C:\Program Files\Fichiers communs\Blizzard Entertainment
[30/04/2007|20:23] C:\Program Files\Fichiers communs\DESIGNER
[22/02/2008|15:14] C:\Program Files\Fichiers communs\InstallShield
[31/05/2007|17:50] C:\Program Files\Fichiers communs\Java
[02/05/2008|17:45] C:\Program Files\Fichiers communs\Logitech
[28/06/2007|19:07] C:\Program Files\Fichiers communs\MAGIX Shared
[14/01/2008|21:56] C:\Program Files\Fichiers communs\Microsoft Shared
[29/04/2007|13:09] C:\Program Files\Fichiers communs\MSSoap
[29/04/2007|14:00] C:\Program Files\Fichiers communs\ODBC
[20/09/2007|23:35] C:\Program Files\Fichiers communs\Real
[29/04/2007|13:09] C:\Program Files\Fichiers communs\Services
[29/04/2007|19:18] C:\Program Files\Fichiers communs\Softwin
[29/04/2007|14:00] C:\Program Files\Fichiers communs\SpeechEngines
[21/12/2007|20:23] C:\Program Files\Fichiers communs\Symantec Shared
[04/08/2007|03:07] C:\Program Files\Fichiers communs\System
[14/01/2008|21:55] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[09/05/2008|12:04] C:\Program Files\Fichiers communs\Wise Installation Wizard
[20/09/2007|23:36] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 49

iexplore.exe ~ [1720]
iexplore.exe ~ [1996]
iexplore.exe ~ [3496]
iexplore.exe ~ [2380]
iexplore.exe ~ [3192]
iexplore.exe ~ [2444]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Base defy.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\JUMP CHIC.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\blahstupidpart.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\cfhlfeef.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\DEFYUSERLOUDISO.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\PileMess.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\uvxydrvp.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\xecpfetv.exe
C:\DOCUME~1\Aliche\APPLIC~1\inside~1\zxdcqdzz.exe
C:\WINDOWS\Prefetch\JUMP CHIC.EXE-0410FACF.pf
C:\WINDOWS\Prefetch\PILEMESS.EXE-09BCCF7F.pf
C:\DOCUME~1\Aliche\Cookies\aliche@www.adserver5[2].txt
C:\DOCUME~1\Aliche\Cookies\aliche@adin.bigpoint[2].txt
C:\DOCUME~1\Aliche\Cookies\aliche@bigpoint[1].txt
C:\DOCUME~1\Aliche\Cookies\aliche@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\Aliche\Cookies\aliche@banner.cotedazurpalace[2].txt
C:\DOCUME~1\Aliche\Cookies\aliche@cotedazurpalace[1].txt
C:\DOCUME~1\Aliche\Cookies\aliche@adopt.euroclick[1].txt
C:\DOCUME~1\Aliche\Cookies\aliche@fr1.seafight.bigpoint[1].txt
C:\WINDOWS\Tasks\ACF4AFC6906B2516.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Downloadskip"="C:\\DOCUME~1\\Aliche\\APPLIC~1\\INSIDE~1\\PileMess.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Stupid Data Dart Wave"="C:\\Documents and Settings\\All Users\\Application Data\\flag ace stupid data\\JUMP CHIC.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE


-> 72 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-21 13:29:06
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\system32\nvs2.inf
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_navps.dat
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.exe
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.dat
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_nav.dat
[b]! EGDACCESS !/b



[F:1120][D:8]-> C:\DOCUME~1\Aliche\LOCALS~1\Temp
[F:458][D:0]-> C:\DOCUME~1\Aliche\Cookies
[F:2554][D:9]-> C:\DOCUME~1\Aliche\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 13:30:25,50 ]----------------------
0
Réponse 2 / 7
Utilisateur anonyme
 
Salut,

Préalable
• Vider la corbeille
• Fermer toutes les applications

================NAVILOG====================

Télécharge ceci http://il.mafioso.pagesperso-orange.fr/Navifix/download.htm

prend navilog1.exe

Choisir option 1 uniquement

Ensuite suit ce tutorial :http://www.commentcamarche.net/faq/sujet 2490 popups ouverture de fenetres internet publicitaires pop up#premiere methode utiliser navilog d il mafioso sous xp

Et enfin post le rapport du scan navilog

0
Réponse 3 / 7
gil le fantom Messages postés 2809 Statut Membre 25
 
salut chiquitine

en duo
0
Réponse 4 / 7
Utilisateur anonyme
 
Salut

et oui ...

Je te laisse la main t étais le prem's

@++
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
gil le fantom Messages postés 2809 Statut Membre 25
 
pas etonnant que tu as beaucoup de pub

Relance Lop S&D

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)

aprés applique le message de chiquitine29
0
ramin
 
voici le nouveau rapport:


-----------------------[ Lop S&D 4.2.1-6 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Aliche ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 21/06/2008 | 13:43:00,06 ] [ PC : MAISON ]
[ MAJ : 16-06-2008 | 23:01 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Base defy.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\JUMP CHIC.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\blahstupidpart.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\cfhlfeef.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\DEFYUSERLOUDISO.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\PileMess.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\uvxydrvp.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\xecpfetv.exe
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1\zxdcqdzz.exe
Supprimé! - C:\WINDOWS\Prefetch\JUMP CHIC.EXE-0410FACF.pf
Supprimé! - C:\WINDOWS\Prefetch\PILEMESS.EXE-09BCCF7F.pf
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@www.adserver5[2].txt
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@adin.bigpoint[2].txt
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@bigpoint[1].txt
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@fr1.seafight.bigpoint[1].txt
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@banner.cotedazurpalace[2].txt
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@cotedazurpalace[1].txt
Supprimé! - C:\DOCUME~1\Aliche\Cookies\aliche@adopt.euroclick[1].txt
Supprimé! - C:\WINDOWS\Tasks\ACF4AFC6906B2516.job
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
Supprimé! - C:\DOCUME~1\Aliche\APPLIC~1\inside~1
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[29/04/2007|13:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[29/04/2007|13:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[03/02/2008|00:29] C:\DOCUME~1\Aliche\APPLIC~1\Adobe
[06/11/2007|19:35] C:\DOCUME~1\Aliche\APPLIC~1\Apple Computer
[21/06/2008|00:49] C:\DOCUME~1\Aliche\APPLIC~1\BitTorrent
[05/11/2007|13:01] C:\DOCUME~1\Aliche\APPLIC~1\Canon
[29/04/2007|13:59] C:\DOCUME~1\Aliche\APPLIC~1\desktop.ini
[21/06/2008|13:41] C:\DOCUME~1\Aliche\APPLIC~1\DNA
[16/04/2008|10:05] C:\DOCUME~1\Aliche\APPLIC~1\dvdcss
[03/02/2008|21:30] C:\DOCUME~1\Aliche\APPLIC~1\FastStone
[19/04/2008|14:17] C:\DOCUME~1\Aliche\APPLIC~1\fretsonfire
[21/05/2007|17:24] C:\DOCUME~1\Aliche\APPLIC~1\Google
[14/10/2007|14:35] C:\DOCUME~1\Aliche\APPLIC~1\Help
[30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Identities
[15/12/2007|13:29] C:\DOCUME~1\Aliche\APPLIC~1\InfraRecorder
[30/11/2007|21:56] C:\DOCUME~1\Aliche\APPLIC~1\iWin
[16/03/2008|02:11] C:\DOCUME~1\Aliche\APPLIC~1\Kptic
[02/05/2007|10:19] C:\DOCUME~1\Aliche\APPLIC~1\Lavasoft
[29/04/2007|18:22] C:\DOCUME~1\Aliche\APPLIC~1\Macromedia
[28/06/2007|19:09] C:\DOCUME~1\Aliche\APPLIC~1\MAGIX
[06/06/2008|11:01] C:\DOCUME~1\Aliche\APPLIC~1\Microsoft
[01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Mozilla
[13/08/2007|19:56] C:\DOCUME~1\Aliche\APPLIC~1\MSN6
[29/04/2007|19:47] C:\DOCUME~1\Aliche\APPLIC~1\MusicIP
[16/03/2008|02:13] C:\DOCUME~1\Aliche\APPLIC~1\Neonumeric
[15/12/2007|01:15] C:\DOCUME~1\Aliche\APPLIC~1\Nero
[20/09/2007|22:34] C:\DOCUME~1\Aliche\APPLIC~1\PC Tools
[20/05/2007|20:48] C:\DOCUME~1\Aliche\APPLIC~1\Real
[26/04/2008|14:59] C:\DOCUME~1\Aliche\APPLIC~1\Samsung
[02/05/2007|19:39] C:\DOCUME~1\Aliche\APPLIC~1\Screenshot Sender
[31/05/2007|17:53] C:\DOCUME~1\Aliche\APPLIC~1\Sun
[01/08/2007|21:49] C:\DOCUME~1\Aliche\APPLIC~1\Talkback
[19/10/2007|21:07] C:\DOCUME~1\Aliche\APPLIC~1\teamspeak2
[17/11/2007|18:59] C:\DOCUME~1\Aliche\APPLIC~1\TuneUp Software
[29/04/2007|19:41] C:\DOCUME~1\Aliche\APPLIC~1\VERITAS
[18/05/2008|13:58] C:\DOCUME~1\Aliche\APPLIC~1\vlc
[30/11/2007|21:55] C:\DOCUME~1\Aliche\APPLIC~1\Zylom

[29/04/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[06/11/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[06/11/2007|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[29/04/2007|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[21/05/2008|13:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[21/06/2008|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar2
[26/04/2008|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[28/06/2007|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
[14/01/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/08/2007|21:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[13/08/2007|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[25/10/2007|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[14/01/2008|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[20/01/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[11/07/2007|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[21/06/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[25/05/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[27/06/2007|23:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[30/03/2008|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[27/02/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[19/11/2007|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[29/04/2007|13:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[29/04/2007|13:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[21/04/2008|23:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[29/04/2007|13:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[21/06/2008 10:41][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[20/06/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[21/06/2008 10:50][--ah-----] C:\WINDOWS\tasks\SA.DAT
[01/11/2001 13:42][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[29/04/2007|20:33] C:\Program Files\Adobe
[13/06/2008|22:18] C:\Program Files\adslTV
[26/12/2007|16:03] C:\Program Files\Alcohol Soft
[29/04/2007|13:31] C:\Program Files\bit defender 7.2 fr + Key
[17/06/2008|07:49] C:\Program Files\BitTorrent
[29/04/2007|19:22] C:\Program Files\Canon
[26/02/2008|23:47] C:\Program Files\CCleaner
[13/04/2008|19:02] C:\Program Files\Conduit
[16/06/2008|12:27] C:\Program Files\DivX
[23/12/2007|15:44] C:\Program Files\DNA
[21/05/2008|13:55] C:\Program Files\Fichiers communs
[15/06/2008|21:36] C:\Program Files\Frets on Fire
[08/07/2007|23:22] C:\Program Files\Guitar Pro 5
[15/12/2007|01:30] C:\Program Files\InfraRecorder
[08/06/2008|21:40] C:\Program Files\InstallShield Installation Information
[11/06/2008|03:25] C:\Program Files\Internet Explorer
[25/12/2007|14:53] C:\Program Files\Java
[02/05/2007|10:19] C:\Program Files\Lavasoft
[21/05/2008|13:55] C:\Program Files\Logitech
[04/08/2007|03:09] C:\Program Files\Messenger
[12/03/2008|17:16] C:\Program Files\Metin2_France
[03/05/2008|03:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[29/04/2007|13:12] C:\Program Files\microsoft frontpage
[30/04/2007|20:24] C:\Program Files\Microsoft Office
[14/01/2008|21:59] C:\Program Files\Microsoft SQL Server Compact Edition
[30/04/2007|20:23] C:\Program Files\Microsoft Visual Studio
[30/04/2007|20:23] C:\Program Files\Microsoft Works
[30/04/2007|20:25] C:\Program Files\Microsoft.NET
[03/08/2007|09:42] C:\Program Files\Movie Maker
[19/06/2008|20:18] C:\Program Files\Mozilla Firefox
[29/04/2007|13:08] C:\Program Files\MSN
[29/04/2007|13:08] C:\Program Files\MSN Gaming Zone
[16/05/2008|19:06] C:\Program Files\MSN Messenger
[15/12/2007|01:07] C:\Program Files\Nero
[03/08/2007|09:32] C:\Program Files\NetMeeting
[04/08/2007|03:07] C:\Program Files\Outlook Express
[20/05/2007|20:47] C:\Program Files\Real
[26/04/2008|14:54] C:\Program Files\Samsung
[29/04/2007|19:18] C:\Program Files\Softwin
[13/06/2008|00:07] C:\Program Files\Spyware Doctor
[29/04/2007|19:41] C:\Program Files\Stomp
[07/05/2008|20:17] C:\Program Files\StuffPlug3
[25/12/2007|15:49] C:\Program Files\Uninstall Information
[29/04/2007|19:41] C:\Program Files\VERITAS Software
[29/04/2007|13:43] C:\Program Files\VideoLAN
[29/04/2007|13:42] C:\Program Files\VLC
[16/04/2008|13:22] C:\Program Files\Windows Live
[15/12/2007|00:42] C:\Program Files\Windows Media Player
[03/08/2007|09:32] C:\Program Files\Windows NT
[30/04/2007|20:28] C:\Program Files\WindowsUpdate
[14/10/2007|14:35] C:\Program Files\WinRAR
[28/02/2008|15:58] C:\Program Files\WordBiz
[29/04/2007|13:12] C:\Program Files\xerox
[30/11/2007|22:58] C:\Program Files\Zylom Games

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[26/04/2008|14:52] C:\Program Files\Fichiers communs\Adobe
[23/05/2007|16:52] C:\Program Files\Fichiers communs\Blizzard Entertainment
[30/04/2007|20:23] C:\Program Files\Fichiers communs\DESIGNER
[22/02/2008|15:14] C:\Program Files\Fichiers communs\InstallShield
[31/05/2007|17:50] C:\Program Files\Fichiers communs\Java
[02/05/2008|17:45] C:\Program Files\Fichiers communs\Logitech
[28/06/2007|19:07] C:\Program Files\Fichiers communs\MAGIX Shared
[14/01/2008|21:56] C:\Program Files\Fichiers communs\Microsoft Shared
[29/04/2007|13:09] C:\Program Files\Fichiers communs\MSSoap
[29/04/2007|14:00] C:\Program Files\Fichiers communs\ODBC
[20/09/2007|23:35] C:\Program Files\Fichiers communs\Real
[29/04/2007|13:09] C:\Program Files\Fichiers communs\Services
[29/04/2007|19:18] C:\Program Files\Fichiers communs\Softwin
[29/04/2007|14:00] C:\Program Files\Fichiers communs\SpeechEngines
[21/12/2007|20:23] C:\Program Files\Fichiers communs\Symantec Shared
[04/08/2007|03:07] C:\Program Files\Fichiers communs\System
[14/01/2008|21:55] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[09/05/2008|12:04] C:\Program Files\Fichiers communs\Wise Installation Wizard
[20/09/2007|23:36] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 43

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-21 13:45:21
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\system32\nvs2.inf
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_navps.dat
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.exe
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam.dat
C:\DOCUME~1\Aliche\LOCALS~1\APPLIC~1\waeam_nav.dat
[b]! EGDACCESS !/b



[F:1120][D:8]-> C:\DOCUME~1\Aliche\LOCALS~1\Temp
[F:453][D:0]-> C:\DOCUME~1\Aliche\Cookies
[F:2754][D:9]-> C:\DOCUME~1\Aliche\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 13:45:57,57 ]----------------------
0
Réponse 6 / 7
ramin
 
j'ai suivi les consignes du tutorial.
Il est précisé d'etre prudent avant la supression et de contacter le forum virus/sécurité.
Ci-dessous le rapport après l'etape de recherche:

Search Navipromo version 3.5.8 commencé le 21/06/2008 à 13:55:07,39

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Aliche"

Mise à jour le 06.06.2008 à 18h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Aliche\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Aliche\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Aliche\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net
0
Réponse 7 / 7
gil le fantom Messages postés 2809 Statut Membre 25
 
ton rapport navilog n'est pas complet
0

Discussions similaires

Retour en arrière avec Pages sur Mac ?
alex 2510 -
emma.plv -

13 réponses