Probleme fenetre CID et explorer aidez moi sv
Résolu/Fermé
ludobern
Messages postés
191
Date d'inscription
mardi 8 mars 2005
Statut
Membre
Dernière intervention
30 novembre 2014
-
6 juil. 2008 à 09:52
Utilisateur anonyme - 29 août 2008 à 20:52
Utilisateur anonyme - 29 août 2008 à 20:52
A voir également:
- Probleme fenetre CID et explorer aidez moi sv
- Explorer patcher - Télécharger - Personnalisation
- Internet explorer 8 - Télécharger - Navigateurs
- Internet explorer 11 - Télécharger - Navigateurs
- Exe explorer - Télécharger - Divers Utilitaires
- Ouvrir internet explorer - Guide
2 réponses
Utilisateur anonyme
6 juil. 2008 à 10:02
6 juil. 2008 à 10:02
J ai resolu ce probleme avec ca:
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
j ai lancer l etape 1 puis la 2 et plus 1 pub...
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
j ai lancer l etape 1 puis la 2 et plus 1 pub...
ludobern
Messages postés
191
Date d'inscription
mardi 8 mars 2005
Statut
Membre
Dernière intervention
30 novembre 2014
53
6 juil. 2008 à 10:21
6 juil. 2008 à 10:21
merci je viend de faire ce que tu m'as dit on verra bien.pour le moment plus de pub.merci encore pour ton aide.
Bonjour, comme l'informe mon pseudo je suis nul en information et j'aimerai votre aide. J'ai beaucoup de feneter CID qui s'affiche et j'ai donc fait une analyse HIJACKTHIS et j'aurai besoin de votre aide pour la suite pour savoir quelle fichier supprimer. Merci d'avance. Voila le rapport HIJACKTHIS :
--------------------\\ Lop S&D 4.2.3-6 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Mobile AMD Sempron(tm) Processor 3400+ )
BIOS : BIOS Date: 01/22/07 14:53:08 Ver: 08.00.12
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 15.0.0.60 (Activated)
Firewall : Norton Internet Security 15.0.0.60 (Activated)
"C:\Lop SD" ( MAJ : 27-08-2008|22:40 )
Option : [1] ( 28/08/2008|20:49 )
--------------------\\ Listing des dossiers dans APPLIC~1
[11/07/2008|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[28/08/2008|04:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
[27/06/2008|18:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[25/07/2008|19:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Flaw Hide
[27/06/2008|17:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[28/08/2008|15:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
[11/07/2008|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[21/08/2008|23:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[20/07/2008|23:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[18/07/2008|04:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[11/07/2008|13:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[22/07/2008|02:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\TuneUp Software
[16/07/2008|20:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
[21/07/2008|00:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR
[28/08/2008|04:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[25/07/2008|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\beep axis mode free
[11/07/2008|13:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[27/06/2008|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[27/06/2008|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[12/07/2008|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[26/07/2008|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[28/08/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[22/07/2008|02:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[28/06/2008|11:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[11/07/2008|16:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[27/06/2008|18:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[27/06/2008|16:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[27/06/2008|17:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/06/2008|17:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[28/08/2008 19:00][--ah-----] C:\WINDOWS\tasks\AF39284D9162DB45.job
[28/08/2008 20:25][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[25/08/2008 21:00][--a------] C:\WINDOWS\tasks\Norton Internet Security - Effectuer une analyse complŠte du systŠme - Administrateur.job
[28/08/2008 20:25][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( AF39284D9162DB45.job )=( c:\docume~1\admini~1\applic~1\flawhi~1\Aimteamcomp.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|16:45] C:\Program Files\Adverts
[28/08/2008|04:17] C:\Program Files\AskSBar
[11/07/2008|11:55] C:\Program Files\ASUS
[27/06/2008|18:22] C:\Program Files\Atheros
[25/07/2008|19:08] C:\Program Files\Circle Developement
[27/06/2008|16:49] C:\Program Files\ComPlus Applications
[27/06/2008|18:20] C:\Program Files\CONEXANT
[11/07/2008|13:09] C:\Program Files\CyberLink
[11/07/2008|12:02] C:\Program Files\DIFX
[22/07/2008|02:28] C:\Program Files\Fichiers communs
[25/07/2008|19:08] C:\Program Files\Flaw Hide
[11/07/2008|13:08] C:\Program Files\InstallShield Installation Information
[22/07/2008|03:26] C:\Program Files\Internet Explorer
[11/07/2008|12:02] C:\Program Files\ITECIR
[18/07/2008|04:56] C:\Program Files\Java
[18/07/2008|04:57] C:\Program Files\LimeWire
[27/06/2008|18:59] C:\Program Files\ma-config.com
[28/08/2008|04:16] C:\Program Files\Messenger
[25/07/2008|19:08] C:\Program Files\Messenger Plus! Live
[27/06/2008|16:56] C:\Program Files\microsoft frontpage
[27/06/2008|17:41] C:\Program Files\Movie Maker
[28/08/2008|20:35] C:\Program Files\Mozilla Firefox
[27/06/2008|16:43] C:\Program Files\MSN
[27/06/2008|16:43] C:\Program Files\MSN Gaming Zone
[27/06/2008|17:39] C:\Program Files\NetMeeting
[11/07/2008|16:29] C:\Program Files\Norton Internet Security
[27/06/2008|16:48] C:\Program Files\Online Services
[27/06/2008|17:39] C:\Program Files\Outlook Express
[27/06/2008|18:18] C:\Program Files\Realtek
[27/06/2008|16:54] C:\Program Files\Services en ligne
[14/07/2008|18:40] C:\Program Files\Symantec
[27/06/2008|18:21] C:\Program Files\Synaptics
[11/07/2008|11:51] C:\Program Files\Toshiba
[22/07/2008|02:30] C:\Program Files\TuneUp Utilities 2008
[27/06/2008|17:01] C:\Program Files\Uninstall Information
[16/07/2008|20:40] C:\Program Files\VideoLAN
[16/07/2008|20:40] C:\Program Files\vlc-0.8.6i-win32.exe
[11/07/2008|16:34] C:\Program Files\Windows Live
[27/06/2008|16:56] C:\Program Files\Windows Media Player
[27/06/2008|17:39] C:\Program Files\Windows NT
[27/06/2008|16:48] C:\Program Files\Windows Plus
[11/07/2008|13:29] C:\Program Files\Windows Sidebar
[27/06/2008|16:54] C:\Program Files\WindowsUpdate
[22/07/2008|02:09] C:\Program Files\WinRAR
[27/06/2008|16:56] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[27/06/2008|18:20] C:\Program Files\Fichiers communs\InstallShield
[18/07/2008|04:55] C:\Program Files\Fichiers communs\Java
[11/07/2008|16:31] C:\Program Files\Fichiers communs\Microsoft Shared
[27/06/2008|16:53] C:\Program Files\Fichiers communs\MSSoap
[27/06/2008|18:29] C:\Program Files\Fichiers communs\ODBC
[27/06/2008|16:53] C:\Program Files\Fichiers communs\Services
[27/06/2008|18:29] C:\Program Files\Fichiers communs\SpeechEngines
[28/08/2008|20:46] C:\Program Files\Fichiers communs\Symantec Shared
[27/06/2008|17:39] C:\Program Files\Fichiers communs\System
[11/07/2008|16:34] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[22/07/2008|02:28] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 44 Processus )
iexplore.exe ~ [PID:2844]
iexplore.exe ~ [PID:3364]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\beep axis mode free
C:\DOCUME~1\ALLUSE~1\APPLIC~1\beep axis mode free\inside settings.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\Aim team comp.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\eqmoreoneenc.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\moglnvqs.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\WAIT SOAP.exe
C:\Program Files\flawhi~1
C:\WINDOWS\system32\drivers\etc\hosts.pda
C:\Program Files\Adverts
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adopt.euroclick[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@sr2.livemediasrv[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@pacificpoker[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@32vegas[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@banner.32vegas[2].txt
C:\WINDOWS\Tasks\AF39284D9162DB45.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"linkbat"="C:\\DOCUME~1\\ADMINI~1\\APPLIC~1\\FLAWHI~1\\WAIT SOAP.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-28 20:51:18
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:45][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
[F:120][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
[F:1026][D:13]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------\\ Fin du rapport a 20:52:32
--------------------\\ Lop S&D 4.2.3-6 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Mobile AMD Sempron(tm) Processor 3400+ )
BIOS : BIOS Date: 01/22/07 14:53:08 Ver: 08.00.12
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 15.0.0.60 (Activated)
Firewall : Norton Internet Security 15.0.0.60 (Activated)
"C:\Lop SD" ( MAJ : 27-08-2008|22:40 )
Option : [1] ( 28/08/2008|20:49 )
--------------------\\ Listing des dossiers dans APPLIC~1
[11/07/2008|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[28/08/2008|04:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
[27/06/2008|18:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[25/07/2008|19:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Flaw Hide
[27/06/2008|17:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[28/08/2008|15:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
[11/07/2008|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[21/08/2008|23:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[20/07/2008|23:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[18/07/2008|04:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[11/07/2008|13:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[22/07/2008|02:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\TuneUp Software
[16/07/2008|20:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
[21/07/2008|00:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR
[28/08/2008|04:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[25/07/2008|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\beep axis mode free
[11/07/2008|13:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[27/06/2008|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[27/06/2008|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[12/07/2008|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[26/07/2008|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[28/08/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[22/07/2008|02:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[28/06/2008|11:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[11/07/2008|16:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[27/06/2008|18:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[27/06/2008|16:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[27/06/2008|17:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/06/2008|17:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[28/08/2008 19:00][--ah-----] C:\WINDOWS\tasks\AF39284D9162DB45.job
[28/08/2008 20:25][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[25/08/2008 21:00][--a------] C:\WINDOWS\tasks\Norton Internet Security - Effectuer une analyse complŠte du systŠme - Administrateur.job
[28/08/2008 20:25][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( AF39284D9162DB45.job )=( c:\docume~1\admini~1\applic~1\flawhi~1\Aimteamcomp.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|16:45] C:\Program Files\Adverts
[28/08/2008|04:17] C:\Program Files\AskSBar
[11/07/2008|11:55] C:\Program Files\ASUS
[27/06/2008|18:22] C:\Program Files\Atheros
[25/07/2008|19:08] C:\Program Files\Circle Developement
[27/06/2008|16:49] C:\Program Files\ComPlus Applications
[27/06/2008|18:20] C:\Program Files\CONEXANT
[11/07/2008|13:09] C:\Program Files\CyberLink
[11/07/2008|12:02] C:\Program Files\DIFX
[22/07/2008|02:28] C:\Program Files\Fichiers communs
[25/07/2008|19:08] C:\Program Files\Flaw Hide
[11/07/2008|13:08] C:\Program Files\InstallShield Installation Information
[22/07/2008|03:26] C:\Program Files\Internet Explorer
[11/07/2008|12:02] C:\Program Files\ITECIR
[18/07/2008|04:56] C:\Program Files\Java
[18/07/2008|04:57] C:\Program Files\LimeWire
[27/06/2008|18:59] C:\Program Files\ma-config.com
[28/08/2008|04:16] C:\Program Files\Messenger
[25/07/2008|19:08] C:\Program Files\Messenger Plus! Live
[27/06/2008|16:56] C:\Program Files\microsoft frontpage
[27/06/2008|17:41] C:\Program Files\Movie Maker
[28/08/2008|20:35] C:\Program Files\Mozilla Firefox
[27/06/2008|16:43] C:\Program Files\MSN
[27/06/2008|16:43] C:\Program Files\MSN Gaming Zone
[27/06/2008|17:39] C:\Program Files\NetMeeting
[11/07/2008|16:29] C:\Program Files\Norton Internet Security
[27/06/2008|16:48] C:\Program Files\Online Services
[27/06/2008|17:39] C:\Program Files\Outlook Express
[27/06/2008|18:18] C:\Program Files\Realtek
[27/06/2008|16:54] C:\Program Files\Services en ligne
[14/07/2008|18:40] C:\Program Files\Symantec
[27/06/2008|18:21] C:\Program Files\Synaptics
[11/07/2008|11:51] C:\Program Files\Toshiba
[22/07/2008|02:30] C:\Program Files\TuneUp Utilities 2008
[27/06/2008|17:01] C:\Program Files\Uninstall Information
[16/07/2008|20:40] C:\Program Files\VideoLAN
[16/07/2008|20:40] C:\Program Files\vlc-0.8.6i-win32.exe
[11/07/2008|16:34] C:\Program Files\Windows Live
[27/06/2008|16:56] C:\Program Files\Windows Media Player
[27/06/2008|17:39] C:\Program Files\Windows NT
[27/06/2008|16:48] C:\Program Files\Windows Plus
[11/07/2008|13:29] C:\Program Files\Windows Sidebar
[27/06/2008|16:54] C:\Program Files\WindowsUpdate
[22/07/2008|02:09] C:\Program Files\WinRAR
[27/06/2008|16:56] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[27/06/2008|18:20] C:\Program Files\Fichiers communs\InstallShield
[18/07/2008|04:55] C:\Program Files\Fichiers communs\Java
[11/07/2008|16:31] C:\Program Files\Fichiers communs\Microsoft Shared
[27/06/2008|16:53] C:\Program Files\Fichiers communs\MSSoap
[27/06/2008|18:29] C:\Program Files\Fichiers communs\ODBC
[27/06/2008|16:53] C:\Program Files\Fichiers communs\Services
[27/06/2008|18:29] C:\Program Files\Fichiers communs\SpeechEngines
[28/08/2008|20:46] C:\Program Files\Fichiers communs\Symantec Shared
[27/06/2008|17:39] C:\Program Files\Fichiers communs\System
[11/07/2008|16:34] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[22/07/2008|02:28] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 44 Processus )
iexplore.exe ~ [PID:2844]
iexplore.exe ~ [PID:3364]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\beep axis mode free
C:\DOCUME~1\ALLUSE~1\APPLIC~1\beep axis mode free\inside settings.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\Aim team comp.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\eqmoreoneenc.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\moglnvqs.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\flawhi~1\WAIT SOAP.exe
C:\Program Files\flawhi~1
C:\WINDOWS\system32\drivers\etc\hosts.pda
C:\Program Files\Adverts
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adopt.euroclick[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@sr2.livemediasrv[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@pacificpoker[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@32vegas[1].txt
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@banner.32vegas[2].txt
C:\WINDOWS\Tasks\AF39284D9162DB45.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"linkbat"="C:\\DOCUME~1\\ADMINI~1\\APPLIC~1\\FLAWHI~1\\WAIT SOAP.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-28 20:51:18
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:45][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
[F:120][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
[F:1026][D:13]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------\\ Fin du rapport a 20:52:32
Bon étant donné les problèmes a propos du fait de renommer j'ai stoppé cette étape et j'ai fait un scan hijackthis et voila le rapport :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:43:44, on 28/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ITECIR\RemoteControlService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: Afficher Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [linkbat] C:\DOCUME~1\ADMINI~1\APPLIC~1\FLAWHI~1\WAIT SOAP.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?e=1216349770481&h=54a8cf9f6e385e36e7d401f72c4f725a/&filename=jinstall-6u7-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: ITE Remote Control Service (ITECIRService) - ITE Tech. Inc. - C:\Program Files\ITECIR\RemoteControlService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:43:44, on 28/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ITECIR\RemoteControlService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: Afficher Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [linkbat] C:\DOCUME~1\ADMINI~1\APPLIC~1\FLAWHI~1\WAIT SOAP.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?e=1216349770481&h=54a8cf9f6e385e36e7d401f72c4f725a/&filename=jinstall-6u7-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: ITE Remote Control Service (ITECIRService) - ITE Tech. Inc. - C:\Program Files\ITECIR\RemoteControlService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe