CiD

Résolu
marwyl Messages postés 370 Statut Membre -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
Comme beaucoup d'internautes je suis envahie par des fenêtres intempestives Cid.

Voici le rapport Hiackthis :

Merci d'avanceLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:33:30, on 09/07/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16546)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\hp\KBD\kbd.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImage\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Users\Martine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62UQ3SUS\HiJackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchgateway.net/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchgateway.net/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchgateway.net/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImage\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Internet mix] "C:\ProgramData\dvd atom atom.xxzsx1"
O4 - HKLM\..\Run: [Amok Eggs Four Web] "C:\ProgramData\Thunk Deaf Settings.969ulz"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Envoyer l'image vers la bibliothèque - file://C:\Program Files\MGI\MGI PhotoSuite II\Temp\MGI00000.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O13 - Gopher Prefix:
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Intel DH Service (IntelDHSvcConf) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10739 bytes

A bientôt
Configuration: Windows Vista
Internet Explorer 7.0

10 réponses

  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt,

    tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    * Double-clique dessus pour lancer l'installation
    * Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
    * Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
    * Patiente jusqu'à la fin du scan
    * Poste le rapport généré (C:\lopR.txt)

    _____________

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Rebonjour,

      Voici le rapport Lop S&D :


      -----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

      [ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
      [ USER : Martine ] [ "C:\Lop SD" ] [ Selection : 1 ]
      [ 09/07/2008 | 14:47:59,23 ] [ PC : PC-DE-MARTINE ]
      [ MAJ : 06-07-2008 | 10:55 ]
      [ UAC => 0 ]

      -------------[ Listing des dossiers dans Roaming ]------------

      [16/01/2008|21:42] C:\Users\Martine\AppData\Roaming\Adobe\Flash Player
      [23/02/2007|20:38] C:\Users\Martine\AppData\Roaming\Adobe\Acrobat


      [13/04/2008|16:37] C:\Users\Martine\AppData\Roaming\Ahead\Nero Burning ROM
      [29/03/2008|14:12] C:\Users\Martine\AppData\Roaming\Ahead\NeroVision
      [07/12/2007|21:17] C:\Users\Martine\AppData\Roaming\Ahead\Nero BackItUp

      [02/04/2008|19:37] C:\Users\Martine\AppData\Roaming\AVS4YOU\AVSVideoConverter

      [19/10/2007|21:04] C:\Users\Martine\AppData\Roaming\CyberLink\PowerDVD
      [16/10/2007|22:58] C:\Users\Martine\AppData\Roaming\CyberLink\PowerCinema

      [26/05/2007|20:35] C:\Users\Martine\AppData\Roaming\DriveCleaner Free\Logs

      [09/12/2007|20:25] C:\Users\Martine\AppData\Roaming\Google\GoogleEarth
      [17/07/2007|13:48] C:\Users\Martine\AppData\Roaming\Google\Local Search History

      [22/02/2007|22:51] C:\Users\Martine\AppData\Roaming\Hewlett-Packard\HP Software UI

      [17/03/2007|19:19] C:\Users\Martine\AppData\Roaming\Identities\{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVIP}
      [22/02/2007|22:55] C:\Users\Martine\AppData\Roaming\Identities\{3974543C-A638-467A-9467-4D8094E64C7C}


      [22/07/2007|21:38] C:\Users\Martine\AppData\Roaming\InstallShield\ISEngine12.0

      [16/01/2008|21:41] C:\Users\Martine\AppData\Roaming\Macromedia\Flash Player
      [24/03/2007|14:57] C:\Users\Martine\AppData\Roaming\Macromedia\Shockwave Player



      [01/06/2008|18:42] C:\Users\Martine\AppData\Roaming\Microsoft\ModŠles
      [01/06/2008|18:41] C:\Users\Martine\AppData\Roaming\Microsoft\Word
      [13/05/2008|19:30] C:\Users\Martine\AppData\Roaming\Microsoft\MSN Messenger
      [12/05/2008|10:28] C:\Users\Martine\AppData\Roaming\Microsoft\preuve
      [16/03/2008|14:38] C:\Users\Martine\AppData\Roaming\Microsoft\eHome
      [14/03/2008|22:14] C:\Users\Martine\AppData\Roaming\Microsoft\Media Player
      [30/11/2007|00:03] C:\Users\Martine\AppData\Roaming\Microsoft\Office
      [24/07/2007|23:26] C:\Users\Martine\AppData\Roaming\Microsoft\Excel
      [23/07/2007|14:52] C:\Users\Martine\AppData\Roaming\Microsoft\HTML Help
      [23/07/2007|13:41] C:\Users\Martine\AppData\Roaming\Microsoft\PowerPoint
      [10/06/2007|13:51] C:\Users\Martine\AppData\Roaming\Microsoft\Media Catalog
      [04/06/2007|19:12] C:\Users\Martine\AppData\Roaming\Microsoft\SystemCertificates
      [04/06/2007|19:12] C:\Users\Martine\AppData\Roaming\Microsoft\Crypto
      [28/05/2007|12:03] C:\Users\Martine\AppData\Roaming\Microsoft\IdentityCRL
      [13/05/2007|12:32] C:\Users\Martine\AppData\Roaming\Microsoft\Internet Explorer
      [05/05/2007|13:45] C:\Users\Martine\AppData\Roaming\Microsoft\Macros compl‚mentaires
      [26/02/2007|20:40] C:\Users\Martine\AppData\Roaming\Microsoft\MSNIA
      [23/02/2007|20:55] C:\Users\Martine\AppData\Roaming\Microsoft\Network
      [23/02/2007|20:18] C:\Users\Martine\AppData\Roaming\Microsoft\MMC
      [22/02/2007|22:55] C:\Users\Martine\AppData\Roaming\Microsoft\Protect
      [22/02/2007|22:51] C:\Users\Martine\AppData\Roaming\Microsoft\CLR Security Config
      [22/02/2007|22:49] C:\Users\Martine\AppData\Roaming\Microsoft\Credentials
      [02/11/2006|13:18] C:\Users\Martine\AppData\Roaming\Microsoft\Windows


      [25/07/2007|19:52] C:\Users\Martine\AppData\Roaming\Mozilla\Firefox

      [21/07/2007|16:14] C:\Users\Martine\AppData\Roaming\MySpace\IM







      [28/10/2007|22:12] C:\Users\Martine\AppData\Roaming\Real\RealMediaSDK

      [01/08/2007|16:26] C:\Users\Martine\AppData\Roaming\Roxio\RoxioCentral
      [01/08/2007|16:25] C:\Users\Martine\AppData\Roaming\Roxio\RoxioCentral33

      [09/07/2008|14:17] C:\Users\Martine\AppData\Roaming\Shareaza\Collections
      [09/07/2008|14:17] C:\Users\Martine\AppData\Roaming\Shareaza\Torrents
      [08/07/2008|23:58] C:\Users\Martine\AppData\Roaming\Shareaza\Data

      [25/07/2007|19:52] C:\Users\Martine\AppData\Roaming\Talkback\MozillaOrg

      [11/05/2008|11:01] C:\Users\Martine\AppData\Roaming\TuneUp Software\TuneUp Utilities


      [31/05/2007|19:16] C:\Users\Martine\AppData\Roaming\WinBatch\Settings


      [17/03/2007|19:19] C:\Users\Martine\AppData\Roaming\Zylom\106

      ----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

      [04/07/2008 17:15][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
      [09/07/2008 14:44][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{898F2457-2A29-4261-8067-FDF0E3DB68E0}.job
      [09/07/2008 10:06][--ah-----] C:\Windows\tasks\SA.DAT
      [08/07/2008 23:58][--a------] C:\Windows\tasks\SCHEDLGU.TXT

      ------[ Listing des dossiers dans C:\ProgramData ]------

      [06/12/2006|15:18] C:\ProgramData\Adobe
      [22/02/2007|22:45] C:\ProgramData\Application Data
      [02/04/2008|19:37] C:\ProgramData\AVS4YOU
      [22/02/2007|22:45] C:\ProgramData\Bureau
      [07/12/2007|21:27] C:\ProgramData\C9B086CE-4A3B-11DB-8373-B622A1EF5492
      [12/10/2007|20:38] C:\ProgramData\Ciel
      [16/10/2007|22:54] C:\ProgramData\CyberLink
      [04/07/2008|20:17] C:\ProgramData\dartbalmpile
      [22/02/2007|22:45] C:\ProgramData\Documents
      [06/07/2008|15:35] C:\ProgramData\dvd atom atom.0l5epr
      [05/07/2008|22:09] C:\ProgramData\dvd atom atom.0s168b4
      [05/07/2008|23:37] C:\ProgramData\dvd atom atom.0sp24
      [06/07/2008|17:48] C:\ProgramData\dvd atom atom.1gk4mc
      [06/07/2008|01:05] C:\ProgramData\dvd atom atom.2i2c9
      [06/07/2008|14:29] C:\ProgramData\dvd atom atom.2vkjtl
      [04/07/2008|22:42] C:\ProgramData\dvd atom atom.3att2
      [05/07/2008|16:58] C:\ProgramData\dvd atom atom.3zhq0d
      [04/07/2008|23:58] C:\ProgramData\dvd atom atom.4cssykj
      [05/07/2008|15:52] C:\ProgramData\dvd atom atom.4erprne
      [05/07/2008|21:02] C:\ProgramData\dvd atom atom.4mper9r
      [06/07/2008|15:58] C:\ProgramData\dvd atom atom.4ubox
      [05/07/2008|16:36] C:\ProgramData\dvd atom atom.5o9brf
      [05/07/2008|21:24] C:\ProgramData\dvd atom atom.5xs205c
      [06/07/2008|14:51] C:\ProgramData\dvd atom atom.6360y5
      [07/07/2008|00:26] C:\ProgramData\dvd atom atom.7cy2hd
      [04/07/2008|21:46] C:\ProgramData\dvd atom atom.7e81w7
      [06/07/2008|11:55] C:\ProgramData\dvd atom atom.7sbnw
      [06/07/2008|17:26] C:\ProgramData\dvd atom atom.7war0
      [05/07/2008|13:59] C:\ProgramData\dvd atom atom.7xeq8t
      [05/07/2008|14:22] C:\ProgramData\dvd atom atom.8fslw
      [07/07/2008|00:48] C:\ProgramData\dvd atom atom.8lhsp6
      [04/07/2008|21:24] C:\ProgramData\dvd atom atom.8uf0l0y
      [05/07/2008|13:37] C:\ProgramData\dvd atom atom.94unk
      [05/07/2008|22:31] C:\ProgramData\dvd atom atom.9reh56h
      [07/07/2008|00:04] C:\ProgramData\dvd atom atom.9rusva
      [08/07/2008|22:33] C:\ProgramData\dvd atom atom.9xhjd3a
      [05/07/2008|18:27] C:\ProgramData\dvd atom atom.afn5r
      [06/07/2008|17:04] C:\ProgramData\dvd atom atom.baas7
      [05/07/2008|23:15] C:\ProgramData\dvd atom atom.c5g95j
      [05/07/2008|11:01] C:\ProgramData\dvd atom atom.dgfjs
      [06/07/2008|23:43] C:\ProgramData\dvd atom atom.dv4ry
      [05/07/2008|18:04] C:\ProgramData\dvd atom atom.e98sd
      [05/07/2008|11:24] C:\ProgramData\dvd atom atom.fh631w5
      [09/07/2008|14:39] C:\ProgramData\dvd atom atom.g9qi4
      [04/07/2008|20:17] C:\ProgramData\dvd atom atom.gildv
      [04/07/2008|22:09] C:\ProgramData\dvd atom atom.gn6ftz2
      [05/07/2008|20:18] C:\ProgramData\dvd atom atom.gqqiw6
      [05/07/2008|14:45] C:\ProgramData\dvd atom atom.h1x0ut7
      [06/07/2008|12:16] C:\ProgramData\dvd atom atom.h59gw
      [05/07/2008|17:20] C:\ProgramData\dvd atom atom.hfluwi
      [06/07/2008|00:21] C:\ProgramData\dvd atom atom.hicnjrt
      [06/07/2008|13:45] C:\ProgramData\dvd atom atom.hlbd15q
      [05/07/2008|16:14] C:\ProgramData\dvd atom atom.i8xz7jx
      [06/07/2008|14:07] C:\ProgramData\dvd atom atom.ir2p8e8
      [04/07/2008|20:39] C:\ProgramData\dvd atom atom.j1kj59w
      [04/07/2008|22:30] C:\ProgramData\dvd atom atom.kbkgg
      [06/07/2008|16:42] C:\ProgramData\dvd atom atom.kkoivg
      [05/07/2008|20:40] C:\ProgramData\dvd atom atom.ky7nm4
      [06/07/2008|13:23] C:\ProgramData\dvd atom atom.l0bjl
      [05/07/2008|22:52] C:\ProgramData\dvd atom atom.l9eed
      [08/07/2008|22:11] C:\ProgramData\dvd atom atom.m68f1dm
      [04/07/2008|23:36] C:\ProgramData\dvd atom atom.m9ayn
      [06/07/2008|22:37] C:\ProgramData\dvd atom atom.mr56if
      [05/07/2008|15:30] C:\ProgramData\dvd atom atom.n46zf7m
      [06/07/2008|16:20] C:\ProgramData\dvd atom atom.nferm
      [04/07/2008|20:17] C:\ProgramData\dvd atom atom.ouwyy
      [06/07/2008|01:49] C:\ProgramData\dvd atom atom.p658r
      [08/07/2008|23:17] C:\ProgramData\dvd atom atom.q4ykmd
      [05/07/2008|12:30] C:\ProgramData\dvd atom atom.q840l
      [05/07/2008|21:46] C:\ProgramData\dvd atom atom.qhx8nus
      [05/07/2008|23:59] C:\ProgramData\dvd atom atom.r46lk
      [06/07/2008|00:43] C:\ProgramData\dvd atom atom.s3apuz
      [05/07/2008|19:11] C:\ProgramData\dvd atom atom.sulr2
      [08/07/2008|22:55] C:\ProgramData\dvd atom atom.sxf05
      [05/07/2008|10:39] C:\ProgramData\dvd atom atom.szmz9t
      [06/07/2008|01:27] C:\ProgramData\dvd atom atom.t9la2xm
      [05/07/2008|18:49] C:\ProgramData\dvd atom atom.th8vmf
      [04/07/2008|23:14] C:\ProgramData\dvd atom atom.trvxxmx
      [05/07/2008|19:33] C:\ProgramData\dvd atom atom.u1jnf
      [05/07/2008|17:42] C:\ProgramData\dvd atom atom.u31flt1
      [04/07/2008|21:01] C:\ProgramData\dvd atom atom.uo1u9hp
      [05/07/2008|12:53] C:\ProgramData\dvd atom atom.v6a3x
      [06/07/2008|15:13] C:\ProgramData\dvd atom atom.vbd2rh5
      [06/07/2008|22:15] C:\ProgramData\dvd atom atom.vd65cts
      [07/07/2008|01:10] C:\ProgramData\dvd atom atom.w49rkjd
      [06/07/2008|19:33] C:\ProgramData\dvd atom atom.ww0w8
      [06/07/2008|23:21] C:\ProgramData\dvd atom atom.wzh1vew
      [05/07/2008|15:07] C:\ProgramData\dvd atom atom.xduz8m
      [06/07/2008|13:00] C:\ProgramData\dvd atom atom.xr7m7
      [05/07/2008|13:15] C:\ProgramData\dvd atom atom.xvs63ap
      [08/07/2008|23:38] C:\ProgramData\dvd atom atom.xxzsx1
      [05/07/2008|12:08] C:\ProgramData\dvd atom atom.y04dj
      [05/07/2008|11:46] C:\ProgramData\dvd atom atom.ytna7l
      [06/07/2008|22:59] C:\ProgramData\dvd atom atom.yzcbg
      [06/07/2008|19:10] C:\ProgramData\dvd atom atom.ze5bzc
      [05/07/2008|19:56] C:\ProgramData\dvd atom atom.zgnk3l
      [04/07/2008|22:52] C:\ProgramData\dvd atom atom.zhj21
      [06/07/2008|12:38] C:\ProgramData\dvd atom atom.zrx453i
      [01/12/2007|15:05] C:\ProgramData\DVD Shrink
      [03/04/2008|20:22] C:\ProgramData\dyaniilw.kxq
      [09/06/2008|11:43] C:\ProgramData\eMule
      [22/02/2007|22:45] C:\ProgramData\Favoris
      [18/06/2007|19:13] C:\ProgramData\Friends Games
      [06/12/2006|15:24] C:\ProgramData\Google
      [06/12/2006|15:39] C:\ProgramData\Hewlett-Packard
      [06/12/2006|15:22] C:\ProgramData\InstallShield
      [06/12/2006|15:16] C:\ProgramData\Intel
      [04/06/2008|19:25] C:\ProgramData\LUUnInstall.LiveUpdate
      [22/02/2007|22:45] C:\ProgramData\Menu D‚marrer
      [07/04/2007|23:04] C:\ProgramData\Messenger Plus!
      [24/09/2007|20:08] C:\ProgramData\Microsoft
      [22/02/2007|22:45] C:\ProgramData\ModŠles
      [07/12/2007|21:14] C:\ProgramData\Nero
      [22/01/2008|23:35] C:\ProgramData\NVIDIA
      [04/07/2008|20:17] C:\ProgramData\part dead amok eggs
      [07/12/2007|21:27] C:\ProgramData\RapidSolution
      [14/10/2007|22:11] C:\ProgramData\Roxio
      [28/02/2007|12:16] C:\ProgramData\SBT
      [01/08/2007|16:25] C:\ProgramData\Sonic
      [04/03/2007|22:48] C:\ProgramData\Symantec
      [22/06/2007|22:28] C:\ProgramData\TEMP
      [04/07/2008|20:17] C:\ProgramData\Thunk Deaf Settings.969ulz
      [08/06/2007|22:35] C:\ProgramData\TuneUp Software
      [04/07/2007|18:58] C:\ProgramData\WindowsLiveInstaller
      [12/05/2008|23:35] C:\ProgramData\WinZip
      [19/01/2008|12:27] C:\ProgramData\WLInstaller
      [17/03/2007|19:18] C:\ProgramData\Zylom

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [15/06/2008|21:02] C:\Program Files\Acoolsoft
      [13/05/2008|20:06] C:\Program Files\Acronis
      [06/12/2006|15:18] C:\Program Files\Adobe
      [08/07/2008|23:39] C:\Program Files\Antipub
      [15/11/2007|21:23] C:\Program Files\AskTBar
      [26/02/2007|13:50] C:\Program Files\Atlantis
      [05/04/2008|20:28] C:\Program Files\AviSynth 2.5
      [03/04/2008|19:36] C:\Program Files\AVS4YOU
      [26/02/2007|13:50] C:\Program Files\BFG
      [08/05/2008|12:12] C:\Program Files\Broderbund
      [04/07/2008|20:16] C:\Program Files\Circle Developement
      [11/05/2008|11:01] C:\Program Files\Common Files
      [16/10/2007|22:51] C:\Program Files\CyberLink
      [04/07/2008|20:17] C:\Program Files\dartbalmpile
      [30/08/2007|14:56] C:\Program Files\desktop.ini
      [25/11/2007|01:24] C:\Program Files\Digital Camera
      [26/10/2007|19:31] C:\Program Files\Disney Interactive
      [05/07/2007|15:57] C:\Program Files\Dofus-Arena
      [17/12/2007|22:24] C:\Program Files\EasyPhotoTools
      [09/06/2008|11:43] C:\Program Files\eMule
      [06/04/2008|22:12] C:\Program Files\eRightSoft
      [22/02/2007|22:45] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
      [05/04/2008|23:07] C:\Program Files\Free Audio Pack
      [20/10/2007|15:18] C:\Program Files\Free Easy Burner
      [10/11/2007|23:40] C:\Program Files\Google
      [13/05/2008|20:09] C:\Program Files\Guitar Pro 5
      [03/03/2007|15:37] C:\Program Files\Hercules
      [06/12/2006|15:22] C:\Program Files\Hewlett-Packard
      [06/12/2006|15:19] C:\Program Files\HP
      [13/05/2008|20:09] C:\Program Files\HT MPEG Encoder 7.0 Trial
      [23/08/2007|19:28] C:\Program Files\IMVU
      [12/05/2008|23:16] C:\Program Files\InstallShield Installation Information
      [22/07/2007|21:39] C:\Program Files\Intel
      [08/07/2008|21:28] C:\Program Files\Internet Explorer
      [04/06/2007|19:07] C:\Program Files\Java
      [13/05/2008|20:09] C:\Program Files\K-Lite Codec Pack
      [13/03/2007|22:22] C:\Program Files\Last.fm
      [26/02/2007|14:06] C:\Program Files\Magic Vines
      [04/07/2008|20:16] C:\Program Files\Messenger Plus! Live
      [05/07/2007|23:08] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [02/11/2006|14:37] C:\Program Files\Microsoft Games
      [28/02/2007|12:16] C:\Program Files\Microsoft Office
      [06/12/2006|15:20] C:\Program Files\Microsoft Works
      [23/12/2007|22:07] C:\Program Files\mIRC
      [06/12/2006|23:59] C:\Program Files\Movie Maker
      [04/06/2008|19:22] C:\Program Files\Mozilla Firefox
      [02/11/2006|14:37] C:\Program Files\MSBuild
      [26/02/2007|20:40] C:\Program Files\MSN
      [01/03/2007|00:55] C:\Program Files\MSXML 4.0
      [20/07/2007|13:37] C:\Program Files\MySpace
      [07/12/2007|21:14] C:\Program Files\Nero
      [27/04/2007|19:01] C:\Program Files\NewSoft
      [04/03/2007|22:47] C:\Program Files\Norton Internet Security
      [16/06/2007|22:03] C:\Program Files\Orange
      [13/05/2008|20:09] C:\Program Files\Packard Bell Magic Movie
      [06/12/2006|15:33] C:\Program Files\PC-Doctor 5 for Windows
      [10/06/2008|15:26] C:\Program Files\QuickMediaConverter
      [07/12/2007|21:33] C:\Program Files\Radiotracker
      [07/12/2007|21:26] C:\Program Files\Rapid Solution Software AG
      [06/12/2006|15:14] C:\Program Files\Realtek
      [02/11/2006|14:37] C:\Program Files\Reference Assemblies
      [06/12/2006|15:17] C:\Program Files\Roxio
      [28/02/2007|19:53] C:\Program Files\SAGEM
      [28/02/2007|19:48] C:\Program Files\Securitoo
      [06/12/2006|15:24] C:\Program Files\Services en ligne
      [15/06/2008|14:18] C:\Program Files\Shareaza
      [28/02/2007|12:16] C:\Program Files\Snapshot Viewer
      [12/05/2008|23:11] C:\Program Files\Symantec
      [04/03/2007|22:47] C:\Program Files\Thomson
      [08/05/2008|12:20] C:\Program Files\Ulead Systems
      [02/11/2006|15:01] C:\Program Files\Uninstall Information
      [28/02/2007|20:00] C:\Program Files\Wanadoo
      [30/08/2007|14:54] C:\Program Files\Windows Calendar
      [06/12/2006|23:59] C:\Program Files\Windows Collaboration
      [14/04/2007|12:49] C:\Program Files\Windows Defender
      [06/12/2006|23:59] C:\Program Files\Windows Journal
      [04/07/2007|18:58] C:\Program Files\Windows Live
      [08/07/2008|21:29] C:\Program Files\Windows Mail
      [12/10/2007|20:46] C:\Program Files\Windows Media Player
      [22/02/2007|22:45] C:\Program Files\Windows NT
      [06/12/2006|23:59] C:\Program Files\Windows Photo Gallery
      [08/07/2008|21:28] C:\Program Files\Windows Sidebar
      [24/02/2008|15:08] C:\Program Files\WinRAR
      [21/06/2008|18:37] C:\Program Files\Wondershare
      [08/05/2008|12:21] C:\Program Files\Zylom Games

      ------[ Listing des dossiers dans C:\Program Files\Common Files ]------

      [12/05/2008|23:09] C:\Program Files\Common Files\Acronis
      [06/12/2006|15:18] C:\Program Files\Common Files\Adobe
      [07/12/2007|21:16] C:\Program Files\Common Files\Ahead
      [03/04/2008|19:36] C:\Program Files\Common Files\AVSMedia
      [28/02/2007|12:08] C:\Program Files\Common Files\Designer
      [26/02/2007|20:09] C:\Program Files\Common Files\InstallShield
      [06/12/2006|15:16] C:\Program Files\Common Files\Intel
      [04/06/2007|19:05] C:\Program Files\Common Files\Java
      [15/12/2007|20:04] C:\Program Files\Common Files\LightScribe
      [06/12/2006|15:18] C:\Program Files\Common Files\LS Getting Started
      [05/04/2008|20:25] C:\Program Files\Common Files\microsoft shared
      [06/12/2006|15:17] C:\Program Files\Common Files\Roxio Shared
      [02/11/2006|13:18] C:\Program Files\Common Files\Services
      [06/12/2006|15:17] C:\Program Files\Common Files\Sonic Shared
      [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
      [06/12/2006|15:17] C:\Program Files\Common Files\SureThing Shared
      [04/03/2007|22:47] C:\Program Files\Common Files\Symantec Shared
      [16/06/2007|21:57] C:\Program Files\Common Files\System
      [08/05/2008|12:18] C:\Program Files\Common Files\Ulead Systems
      [19/01/2008|12:34] C:\Program Files\Common Files\WindowsLiveInstaller

      ---------------------------[ Process ]--------------------------

      ... 65

      iexplore.exe ~ [1400]
      iexplore.exe ~ [2888]
      iexplore.exe ~ [2212]

      ----------------------[ Recherche avec S_Lop ]---------------------

      C:\ProgramData\dvd atom atom.0l5epr
      C:\ProgramData\dvd atom atom.0s168b4
      C:\ProgramData\dvd atom atom.0sp24
      C:\ProgramData\dvd atom atom.1gk4mc
      C:\ProgramData\dvd atom atom.2i2c9
      C:\ProgramData\dvd atom atom.2vkjtl
      C:\ProgramData\dvd atom atom.3att2
      C:\ProgramData\dvd atom atom.3zhq0d
      C:\ProgramData\dvd atom atom.4cssykj
      C:\ProgramData\dvd atom atom.4erprne
      C:\ProgramData\dvd atom atom.4mper9r
      C:\ProgramData\dvd atom atom.4ubox
      C:\ProgramData\dvd atom atom.5o9brf
      C:\ProgramData\dvd atom atom.5xs205c
      C:\ProgramData\dvd atom atom.6360y5
      C:\ProgramData\dvd atom atom.7cy2hd
      C:\ProgramData\dvd atom atom.7e81w7
      C:\ProgramData\dvd atom atom.7sbnw
      C:\ProgramData\dvd atom atom.7war0
      C:\ProgramData\dvd atom atom.7xeq8t
      C:\ProgramData\dvd atom atom.8fslw
      C:\ProgramData\dvd atom atom.8lhsp6
      C:\ProgramData\dvd atom atom.8uf0l0y
      C:\ProgramData\dvd atom atom.94unk
      C:\ProgramData\dvd atom atom.9reh56h
      C:\ProgramData\dvd atom atom.9rusva
      C:\ProgramData\dvd atom atom.9xhjd3a
      C:\ProgramData\dvd atom atom.afn5r
      C:\ProgramData\dvd atom atom.baas7
      C:\ProgramData\dvd atom atom.c5g95j
      C:\ProgramData\dvd atom atom.dgfjs
      C:\ProgramData\dvd atom atom.dv4ry
      C:\ProgramData\dvd atom atom.e98sd
      C:\ProgramData\dvd atom atom.fh631w5
      C:\ProgramData\dvd atom atom.g9qi4
      C:\ProgramData\dvd atom atom.gildv
      C:\ProgramData\dvd atom atom.gn6ftz2
      C:\ProgramData\dvd atom atom.gqqiw6
      C:\ProgramData\dvd atom atom.h1x0ut7
      C:\ProgramData\dvd atom atom.h59gw
      C:\ProgramData\dvd atom atom.hfluwi
      C:\ProgramData\dvd atom atom.hicnjrt
      C:\ProgramData\dvd atom atom.hlbd15q
      C:\ProgramData\dvd atom atom.i8xz7jx
      C:\ProgramData\dvd atom atom.ir2p8e8
      C:\ProgramData\dvd atom atom.j1kj59w
      C:\ProgramData\dvd atom atom.kbkgg
      C:\ProgramData\dvd atom atom.kkoivg
      C:\ProgramData\dvd atom atom.ky7nm4
      C:\ProgramData\dvd atom atom.l0bjl
      C:\ProgramData\dvd atom atom.l9eed
      C:\ProgramData\dvd atom atom.m68f1dm
      C:\ProgramData\dvd atom atom.m9ayn
      C:\ProgramData\dvd atom atom.mr56if
      C:\ProgramData\dvd atom atom.n46zf7m
      C:\ProgramData\dvd atom atom.nferm
      C:\ProgramData\dvd atom atom.ouwyy
      C:\ProgramData\dvd atom atom.p658r
      C:\ProgramData\dvd atom atom.q4ykmd
      C:\ProgramData\dvd atom atom.q840l
      C:\ProgramData\dvd atom atom.qhx8nus
      C:\ProgramData\dvd atom atom.r46lk
      C:\ProgramData\dvd atom atom.s3apuz
      C:\ProgramData\dvd atom atom.sulr2
      C:\ProgramData\dvd atom atom.sxf05
      C:\ProgramData\dvd atom atom.szmz9t
      C:\ProgramData\dvd atom atom.t9la2xm
      C:\ProgramData\dvd atom atom.th8vmf
      C:\ProgramData\dvd atom atom.trvxxmx
      C:\ProgramData\dvd atom atom.u1jnf
      C:\ProgramData\dvd atom atom.u31flt1
      C:\ProgramData\dvd atom atom.uo1u9hp
      C:\ProgramData\dvd atom atom.v6a3x
      C:\ProgramData\dvd atom atom.vbd2rh5
      C:\ProgramData\dvd atom atom.vd65cts
      C:\ProgramData\dvd atom atom.w49rkjd
      C:\ProgramData\dvd atom atom.ww0w8
      C:\ProgramData\dvd atom atom.wzh1vew
      C:\ProgramData\dvd atom atom.xduz8m
      C:\ProgramData\dvd atom atom.xr7m7
      C:\ProgramData\dvd atom atom.xvs63ap
      C:\ProgramData\dvd atom atom.xxzsx1
      C:\ProgramData\dvd atom atom.y04dj
      C:\ProgramData\dvd atom atom.ytna7l
      C:\ProgramData\dvd atom atom.yzcbg
      C:\ProgramData\dvd atom atom.ze5bzc
      C:\ProgramData\dvd atom atom.zgnk3l
      C:\ProgramData\dvd atom atom.zhj21
      C:\ProgramData\dvd atom atom.zrx453i
      C:\ProgramData\Thunk Deaf Settings.969ulz
      C:\ProgramData\dvd atom atom.0l5epr
      C:\ProgramData\dvd atom atom.0s168b4
      C:\ProgramData\dvd atom atom.1gk4mc
      C:\ProgramData\dvd atom atom.2i2c9
      C:\ProgramData\dvd atom atom.3zhq0d
      C:\ProgramData\dvd atom atom.4erprne
      C:\ProgramData\dvd atom atom.4ubox
      C:\ProgramData\dvd atom atom.5o9brf
      C:\ProgramData\dvd atom atom.6360y5
      C:\ProgramData\dvd atom atom.7cy2hd
      C:\ProgramData\dvd atom atom.7e81w7
      C:\ProgramData\dvd atom atom.7sbnw
      C:\ProgramData\dvd atom atom.7war0
      C:\ProgramData\dvd atom atom.8fslw
      C:\ProgramData\dvd atom atom.8lhsp6
      C:\ProgramData\dvd atom atom.8uf0l0y
      C:\ProgramData\dvd atom atom.94unk
      C:\ProgramData\dvd atom atom.9reh56h
      C:\ProgramData\dvd atom atom.9rusva
      C:\ProgramData\dvd atom atom.9xhjd3a
      C:\ProgramData\dvd atom atom.c5g95j
      C:\ProgramData\dvd atom atom.dgfjs
      C:\ProgramData\dvd atom atom.fh631w5
      C:\ProgramData\dvd atom atom.g9qi4
      C:\ProgramData\dvd atom atom.gqqiw6
      C:\ProgramData\dvd atom atom.h1x0ut7
      C:\ProgramData\dvd atom atom.h59gw
      C:\ProgramData\dvd atom atom.hfluwi
      C:\ProgramData\dvd atom atom.hicnjrt
      C:\ProgramData\dvd atom atom.hlbd15q
      C:\ProgramData\dvd atom atom.ir2p8e8
      C:\ProgramData\dvd atom atom.j1kj59w
      C:\ProgramData\dvd atom atom.kbkgg
      C:\ProgramData\dvd atom atom.l0bjl
      C:\ProgramData\dvd atom atom.l9eed
      C:\ProgramData\dvd atom atom.m68f1dm
      C:\ProgramData\dvd atom atom.n46zf7m
      C:\ProgramData\dvd atom atom.ouwyy
      C:\ProgramData\dvd atom atom.p658r
      C:\ProgramData\dvd atom atom.q4ykmd
      C:\ProgramData\dvd atom atom.qhx8nus
      C:\ProgramData\dvd atom atom.s3apuz
      C:\ProgramData\dvd atom atom.sulr2
      C:\ProgramData\dvd atom atom.sxf05
      C:\ProgramData\dvd atom atom.t9la2xm
      C:\ProgramData\dvd atom atom.th8vmf
      C:\ProgramData\dvd atom atom.trvxxmx
      C:\ProgramData\dvd atom atom.u31flt1
      C:\ProgramData\dvd atom atom.uo1u9hp
      C:\ProgramData\dvd atom atom.ww0w8
      C:\ProgramData\dvd atom atom.wzh1vew
      C:\ProgramData\dvd atom atom.xr7m7
      C:\ProgramData\dvd atom atom.y04dj
      C:\ProgramData\dvd atom atom.ytna7l
      C:\ProgramData\dvd atom atom.yzcbg
      C:\ProgramData\dvd atom atom.zhj21
      C:\ProgramData\dvd atom atom.zrx453i
      C:\ProgramData\Thunk Deaf Settings.969ulz
      C:\Users\Martine\AppData\Local\Temp\bisC952.exe

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      C:\ProgramData\part dead amok eggs
      C:\ProgramData\part dead amok eggs\Inside great.exe
      C:\Program Files\Circle Developement
      C:\Program Files\Circle Developement\Uninstall.exe
      C:\Windows\Prefetch\INSIDE GREAT.EXE-0B11651E.pf
      C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@adopt.euroclick[2].txt
      C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@pacificpoker[1].txt
      C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@888[2].txt

      ----------------------[ Verification du Registre ]----------------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Internet mix"="\"C:\\ProgramData\\dvd atom atom.g9qi4\""
      "Amok Eggs Four Web"="\"C:\\ProgramData\\Thunk Deaf Settings.969ulz\""

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts PROPRE


      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-07-09 14:49:12
      Windows 6.0.6000 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------


      Aucune autre infection trouvée !

      [F:2143][D:146]-> C:\Users\Martine\AppData\Local\Temp
      [F:439][D:1]-> C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies
      [F:4487][D:10]-> C:\Users\Martine\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
      [F:44][D:8]-> C:\$Recycle.Bin

      [ UAC => 1 ]

      --------------------[ Fin du rapport a 14:49:57,12 ]----------------------
      A +
      0
  2. jrmlpz Messages postés 455 Date d'inscription   Statut Membre Dernière intervention   50
     
    Salut,

    Fais un nettoyage complet avec CCLEANER, SPYBOT et MALWAREBYTE, ça devrait SUFFIRE
    http://www.commentcamarche.net/telecharger/logiciel 4 securite
    0
    1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
       
      slt pour cid lop sd marche bien sous vista
      0
    2. marwyl Messages postés 370 Statut Membre 10
       
      Bonjour,

      Faut-il télécharger ces 3 logiciels ou un seul peut suffire ?

      Merci, A +
      0
    3. jrmlpz Messages postés 455 Date d'inscription   Statut Membre Dernière intervention   50 > marwyl Messages postés 370 Statut Membre
       
      les 3 sont complementaires (1 anti adware, 1 anti spyware, et un nettoyeur)
      0
    4. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041 > jrmlpz Messages postés 455 Date d'inscription   Statut Membre Dernière intervention  
       
      spybot et malwarebyte's sont tous les deux des antispywares et anti adaware et antiespion....
      0
    5. jrmlpz Messages postés 455 Date d'inscription   Statut Membre Dernière intervention   50 > jlpjlp Messages postés 52399 Statut Contributeur sécurité
       
      fais comme tu veux, jlpjlp joue avec moi, ça ne m'interesse pas, je laisse tomber ce post
      0
  3. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    aucun des trois pour le moment lops sd a trouvé l'infection responsable des pubs cid!

    relance lop SD puis choisi l'option 2 pour nettoyer et colle le rapport:

    puis

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Voici le rapport lops sd :


      -----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

      [ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
      [ USER : Martine ] [ "C:\Lop SD" ] [ Selection : 2 ]
      [ 09/07/2008 | 15:07:01,37 ] [ PC : PC-DE-MARTINE ]
      [ MAJ : 06-07-2008 | 10:55 ]
      [ UAC => 0 ]


      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

      Supprime! - C:\ProgramData\part dead amok eggs\Inside great.exe
      Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
      Supprime! - C:\Windows\Prefetch\INSIDE GREAT.EXE-0B11651E.pf
      Supprime! - C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@pacificpoker[1].txt
      Supprime! - C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@888[2].txt
      Supprime! - C:\ProgramData\dvd atom atom.0l5epr
      Supprime! - C:\ProgramData\dvd atom atom.0s168b4
      Supprime! - C:\ProgramData\dvd atom atom.0sp24
      Supprime! - C:\ProgramData\dvd atom atom.1gk4mc
      Supprime! - C:\ProgramData\dvd atom atom.2i2c9
      Supprime! - C:\ProgramData\dvd atom atom.2vkjtl
      Supprime! - C:\ProgramData\dvd atom atom.3att2
      Supprime! - C:\ProgramData\dvd atom atom.3zhq0d
      Supprime! - C:\ProgramData\dvd atom atom.4cssykj
      Supprime! - C:\ProgramData\dvd atom atom.4erprne
      Supprime! - C:\ProgramData\dvd atom atom.4mper9r
      Supprime! - C:\ProgramData\dvd atom atom.4ubox
      Supprime! - C:\ProgramData\dvd atom atom.5o9brf
      Supprime! - C:\ProgramData\dvd atom atom.5xs205c
      Supprime! - C:\ProgramData\dvd atom atom.6360y5
      Supprime! - C:\ProgramData\dvd atom atom.7cy2hd
      Supprime! - C:\ProgramData\dvd atom atom.7e81w7
      Supprime! - C:\ProgramData\dvd atom atom.7sbnw
      Supprime! - C:\ProgramData\dvd atom atom.7war0
      Supprime! - C:\ProgramData\dvd atom atom.7xeq8t
      Supprime! - C:\ProgramData\dvd atom atom.8fslw
      Supprime! - C:\ProgramData\dvd atom atom.8lhsp6
      Supprime! - C:\ProgramData\dvd atom atom.8uf0l0y
      Supprime! - C:\ProgramData\dvd atom atom.94unk
      Supprime! - C:\ProgramData\dvd atom atom.9reh56h
      Supprime! - C:\ProgramData\dvd atom atom.9rusva
      Supprime! - C:\ProgramData\dvd atom atom.9xhjd3a
      Supprime! - C:\ProgramData\dvd atom atom.afn5r
      Supprime! - C:\ProgramData\dvd atom atom.baas7
      Supprime! - C:\ProgramData\dvd atom atom.c5g95j
      Supprime! - C:\ProgramData\dvd atom atom.dgfjs
      Supprime! - C:\ProgramData\dvd atom atom.dv4ry
      Supprime! - C:\ProgramData\dvd atom atom.e98sd
      Supprime! - C:\ProgramData\dvd atom atom.fh631w5
      Supprime! - C:\ProgramData\dvd atom atom.g9qi4
      Supprime! - C:\ProgramData\dvd atom atom.gildv
      Supprime! - C:\ProgramData\dvd atom atom.gn6ftz2
      Supprime! - C:\ProgramData\dvd atom atom.gqqiw6
      Supprime! - C:\ProgramData\dvd atom atom.h1x0ut7
      Supprime! - C:\ProgramData\dvd atom atom.h59gw
      Supprime! - C:\ProgramData\dvd atom atom.hfluwi
      Supprime! - C:\ProgramData\dvd atom atom.hicnjrt
      Supprime! - C:\ProgramData\dvd atom atom.hlbd15q
      Supprime! - C:\ProgramData\dvd atom atom.i8xz7jx
      Supprime! - C:\ProgramData\dvd atom atom.ir2p8e8
      Supprime! - C:\ProgramData\dvd atom atom.j1kj59w
      Supprime! - C:\ProgramData\dvd atom atom.kbkgg
      Supprime! - C:\ProgramData\dvd atom atom.kkoivg
      Supprime! - C:\ProgramData\dvd atom atom.ky7nm4
      Supprime! - C:\ProgramData\dvd atom atom.l0bjl
      Supprime! - C:\ProgramData\dvd atom atom.l9eed
      Supprime! - C:\ProgramData\dvd atom atom.m68f1dm
      Supprime! - C:\ProgramData\dvd atom atom.m9ayn
      Supprime! - C:\ProgramData\dvd atom atom.mr56if
      Supprime! - C:\ProgramData\dvd atom atom.n46zf7m
      Supprime! - C:\ProgramData\dvd atom atom.nferm
      Supprime! - C:\ProgramData\dvd atom atom.ouwyy
      Supprime! - C:\ProgramData\dvd atom atom.p658r
      Supprime! - C:\ProgramData\dvd atom atom.q4ykmd
      Supprime! - C:\ProgramData\dvd atom atom.q840l
      Supprime! - C:\ProgramData\dvd atom atom.qhx8nus
      Supprime! - C:\ProgramData\dvd atom atom.r46lk
      Supprime! - C:\ProgramData\dvd atom atom.s3apuz
      Supprime! - C:\ProgramData\dvd atom atom.sulr2
      Supprime! - C:\ProgramData\dvd atom atom.sxf05
      Supprime! - C:\ProgramData\dvd atom atom.szmz9t
      Supprime! - C:\ProgramData\dvd atom atom.t9la2xm
      Supprime! - C:\ProgramData\dvd atom atom.th8vmf
      Supprime! - C:\ProgramData\dvd atom atom.trvxxmx
      Supprime! - C:\ProgramData\dvd atom atom.u1jnf
      Supprime! - C:\ProgramData\dvd atom atom.u31flt1
      Supprime! - C:\ProgramData\dvd atom atom.uo1u9hp
      Supprime! - C:\ProgramData\dvd atom atom.v6a3x
      Supprime! - C:\ProgramData\dvd atom atom.vbd2rh5
      Supprime! - C:\ProgramData\dvd atom atom.vd65cts
      Supprime! - C:\ProgramData\dvd atom atom.w49rkjd
      Supprime! - C:\ProgramData\dvd atom atom.ww0w8
      Supprime! - C:\ProgramData\dvd atom atom.wzh1vew
      Supprime! - C:\ProgramData\dvd atom atom.xduz8m
      Supprime! - C:\ProgramData\dvd atom atom.xr7m7
      Supprime! - C:\ProgramData\dvd atom atom.xvs63ap
      Supprime! - C:\ProgramData\dvd atom atom.xxzsx1
      Supprime! - C:\ProgramData\dvd atom atom.y04dj
      Supprime! - C:\ProgramData\dvd atom atom.ytna7l
      Supprime! - C:\ProgramData\dvd atom atom.yzcbg
      Supprime! - C:\ProgramData\dvd atom atom.ze5bzc
      Supprime! - C:\ProgramData\dvd atom atom.zgnk3l
      Supprime! - C:\ProgramData\dvd atom atom.zhj21
      Supprime! - C:\ProgramData\dvd atom atom.zrx453i
      Supprime! - C:\ProgramData\Thunk Deaf Settings.969ulz
      Supprime! - C:\Users\Martine\AppData\Local\Temp\bisC952.exe
      Supprime! - C:\ProgramData\part dead amok eggs
      Supprime! - C:\Program Files\Circle Developement
      RestaurÚ! - Fichier Hosts

      //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

      Supprime! - C:\Users\Martine\AppData\Roaming\DriveCleaner Free

      //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


      -------------[ Listing des dossiers dans Roaming ]------------

      [16/01/2008|21:42] C:\Users\Martine\AppData\Roaming\Adobe\Flash Player
      [23/02/2007|20:38] C:\Users\Martine\AppData\Roaming\Adobe\Acrobat


      [13/04/2008|16:37] C:\Users\Martine\AppData\Roaming\Ahead\Nero Burning ROM
      [29/03/2008|14:12] C:\Users\Martine\AppData\Roaming\Ahead\NeroVision
      [07/12/2007|21:17] C:\Users\Martine\AppData\Roaming\Ahead\Nero BackItUp

      [02/04/2008|19:37] C:\Users\Martine\AppData\Roaming\AVS4YOU\AVSVideoConverter

      [19/10/2007|21:04] C:\Users\Martine\AppData\Roaming\CyberLink\PowerDVD
      [16/10/2007|22:58] C:\Users\Martine\AppData\Roaming\CyberLink\PowerCinema

      [09/12/2007|20:25] C:\Users\Martine\AppData\Roaming\Google\GoogleEarth
      [17/07/2007|13:48] C:\Users\Martine\AppData\Roaming\Google\Local Search History

      [22/02/2007|22:51] C:\Users\Martine\AppData\Roaming\Hewlett-Packard\HP Software UI

      [17/03/2007|19:19] C:\Users\Martine\AppData\Roaming\Identities\{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVIP}
      [22/02/2007|22:55] C:\Users\Martine\AppData\Roaming\Identities\{3974543C-A638-467A-9467-4D8094E64C7C}


      [22/07/2007|21:38] C:\Users\Martine\AppData\Roaming\InstallShield\ISEngine12.0

      [16/01/2008|21:41] C:\Users\Martine\AppData\Roaming\Macromedia\Flash Player
      [24/03/2007|14:57] C:\Users\Martine\AppData\Roaming\Macromedia\Shockwave Player



      [01/06/2008|18:42] C:\Users\Martine\AppData\Roaming\Microsoft\ModŠles
      [01/06/2008|18:41] C:\Users\Martine\AppData\Roaming\Microsoft\Word
      [13/05/2008|19:30] C:\Users\Martine\AppData\Roaming\Microsoft\MSN Messenger
      [12/05/2008|10:28] C:\Users\Martine\AppData\Roaming\Microsoft\preuve
      [16/03/2008|14:38] C:\Users\Martine\AppData\Roaming\Microsoft\eHome
      [14/03/2008|22:14] C:\Users\Martine\AppData\Roaming\Microsoft\Media Player
      [30/11/2007|00:03] C:\Users\Martine\AppData\Roaming\Microsoft\Office
      [24/07/2007|23:26] C:\Users\Martine\AppData\Roaming\Microsoft\Excel
      [23/07/2007|14:52] C:\Users\Martine\AppData\Roaming\Microsoft\HTML Help
      [23/07/2007|13:41] C:\Users\Martine\AppData\Roaming\Microsoft\PowerPoint
      [10/06/2007|13:51] C:\Users\Martine\AppData\Roaming\Microsoft\Media Catalog
      [04/06/2007|19:12] C:\Users\Martine\AppData\Roaming\Microsoft\SystemCertificates
      [04/06/2007|19:12] C:\Users\Martine\AppData\Roaming\Microsoft\Crypto
      [28/05/2007|12:03] C:\Users\Martine\AppData\Roaming\Microsoft\IdentityCRL
      [13/05/2007|12:32] C:\Users\Martine\AppData\Roaming\Microsoft\Internet Explorer
      [05/05/2007|13:45] C:\Users\Martine\AppData\Roaming\Microsoft\Macros compl‚mentaires
      [26/02/2007|20:40] C:\Users\Martine\AppData\Roaming\Microsoft\MSNIA
      [23/02/2007|20:55] C:\Users\Martine\AppData\Roaming\Microsoft\Network
      [23/02/2007|20:18] C:\Users\Martine\AppData\Roaming\Microsoft\MMC
      [22/02/2007|22:55] C:\Users\Martine\AppData\Roaming\Microsoft\Protect
      [22/02/2007|22:51] C:\Users\Martine\AppData\Roaming\Microsoft\CLR Security Config
      [22/02/2007|22:49] C:\Users\Martine\AppData\Roaming\Microsoft\Credentials
      [02/11/2006|13:18] C:\Users\Martine\AppData\Roaming\Microsoft\Windows


      [25/07/2007|19:52] C:\Users\Martine\AppData\Roaming\Mozilla\Firefox

      [21/07/2007|16:14] C:\Users\Martine\AppData\Roaming\MySpace\IM







      [28/10/2007|22:12] C:\Users\Martine\AppData\Roaming\Real\RealMediaSDK

      [01/08/2007|16:26] C:\Users\Martine\AppData\Roaming\Roxio\RoxioCentral
      [01/08/2007|16:25] C:\Users\Martine\AppData\Roaming\Roxio\RoxioCentral33

      [09/07/2008|15:07] C:\Users\Martine\AppData\Roaming\Shareaza\Torrents
      [09/07/2008|15:07] C:\Users\Martine\AppData\Roaming\Shareaza\Collections
      [08/07/2008|23:58] C:\Users\Martine\AppData\Roaming\Shareaza\Data

      [25/07/2007|19:52] C:\Users\Martine\AppData\Roaming\Talkback\MozillaOrg

      [11/05/2008|11:01] C:\Users\Martine\AppData\Roaming\TuneUp Software\TuneUp Utilities


      [31/05/2007|19:16] C:\Users\Martine\AppData\Roaming\WinBatch\Settings


      [17/03/2007|19:19] C:\Users\Martine\AppData\Roaming\Zylom\106

      ----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

      [04/07/2008 17:15][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
      [09/07/2008 14:59][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{898F2457-2A29-4261-8067-FDF0E3DB68E0}.job
      [09/07/2008 15:05][--ah-----] C:\Windows\tasks\SA.DAT
      [09/07/2008 15:04][--a------] C:\Windows\tasks\SCHEDLGU.TXT

      ------[ Listing des dossiers dans C:\ProgramData ]------

      [06/12/2006|15:18] C:\ProgramData\Adobe
      [22/02/2007|22:45] C:\ProgramData\Application Data
      [02/04/2008|19:37] C:\ProgramData\AVS4YOU
      [22/02/2007|22:45] C:\ProgramData\Bureau
      [07/12/2007|21:27] C:\ProgramData\C9B086CE-4A3B-11DB-8373-B622A1EF5492
      [12/10/2007|20:38] C:\ProgramData\Ciel
      [16/10/2007|22:54] C:\ProgramData\CyberLink
      [04/07/2008|20:17] C:\ProgramData\dartbalmpile
      [22/02/2007|22:45] C:\ProgramData\Documents
      [09/07/2008|15:01] C:\ProgramData\dvd atom atom.elj9y
      [01/12/2007|15:05] C:\ProgramData\DVD Shrink
      [03/04/2008|20:22] C:\ProgramData\dyaniilw.kxq
      [09/06/2008|11:43] C:\ProgramData\eMule
      [22/02/2007|22:45] C:\ProgramData\Favoris
      [18/06/2007|19:13] C:\ProgramData\Friends Games
      [06/12/2006|15:24] C:\ProgramData\Google
      [06/12/2006|15:39] C:\ProgramData\Hewlett-Packard
      [06/12/2006|15:22] C:\ProgramData\InstallShield
      [06/12/2006|15:16] C:\ProgramData\Intel
      [04/06/2008|19:25] C:\ProgramData\LUUnInstall.LiveUpdate
      [22/02/2007|22:45] C:\ProgramData\Menu D‚marrer
      [07/04/2007|23:04] C:\ProgramData\Messenger Plus!
      [24/09/2007|20:08] C:\ProgramData\Microsoft
      [22/02/2007|22:45] C:\ProgramData\ModŠles
      [07/12/2007|21:14] C:\ProgramData\Nero
      [22/01/2008|23:35] C:\ProgramData\NVIDIA
      [07/12/2007|21:27] C:\ProgramData\RapidSolution
      [14/10/2007|22:11] C:\ProgramData\Roxio
      [28/02/2007|12:16] C:\ProgramData\SBT
      [01/08/2007|16:25] C:\ProgramData\Sonic
      [04/03/2007|22:48] C:\ProgramData\Symantec
      [22/06/2007|22:28] C:\ProgramData\TEMP
      [08/06/2007|22:35] C:\ProgramData\TuneUp Software
      [04/07/2007|18:58] C:\ProgramData\WindowsLiveInstaller
      [12/05/2008|23:35] C:\ProgramData\WinZip
      [19/01/2008|12:27] C:\ProgramData\WLInstaller
      [17/03/2007|19:18] C:\ProgramData\Zylom

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [15/06/2008|21:02] C:\Program Files\Acoolsoft
      [13/05/2008|20:06] C:\Program Files\Acronis
      [06/12/2006|15:18] C:\Program Files\Adobe
      [08/07/2008|23:39] C:\Program Files\Antipub
      [15/11/2007|21:23] C:\Program Files\AskTBar
      [26/02/2007|13:50] C:\Program Files\Atlantis
      [05/04/2008|20:28] C:\Program Files\AviSynth 2.5
      [03/04/2008|19:36] C:\Program Files\AVS4YOU
      [26/02/2007|13:50] C:\Program Files\BFG
      [08/05/2008|12:12] C:\Program Files\Broderbund
      [11/05/2008|11:01] C:\Program Files\Common Files
      [16/10/2007|22:51] C:\Program Files\CyberLink
      [04/07/2008|20:17] C:\Program Files\dartbalmpile
      [30/08/2007|14:56] C:\Program Files\desktop.ini
      [25/11/2007|01:24] C:\Program Files\Digital Camera
      [26/10/2007|19:31] C:\Program Files\Disney Interactive
      [05/07/2007|15:57] C:\Program Files\Dofus-Arena
      [17/12/2007|22:24] C:\Program Files\EasyPhotoTools
      [09/06/2008|11:43] C:\Program Files\eMule
      [06/04/2008|22:12] C:\Program Files\eRightSoft
      [22/02/2007|22:45] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
      [05/04/2008|23:07] C:\Program Files\Free Audio Pack
      [20/10/2007|15:18] C:\Program Files\Free Easy Burner
      [10/11/2007|23:40] C:\Program Files\Google
      [13/05/2008|20:09] C:\Program Files\Guitar Pro 5
      [03/03/2007|15:37] C:\Program Files\Hercules
      [06/12/2006|15:22] C:\Program Files\Hewlett-Packard
      [06/12/2006|15:19] C:\Program Files\HP
      [13/05/2008|20:09] C:\Program Files\HT MPEG Encoder 7.0 Trial
      [23/08/2007|19:28] C:\Program Files\IMVU
      [12/05/2008|23:16] C:\Program Files\InstallShield Installation Information
      [22/07/2007|21:39] C:\Program Files\Intel
      [08/07/2008|21:28] C:\Program Files\Internet Explorer
      [04/06/2007|19:07] C:\Program Files\Java
      [13/05/2008|20:09] C:\Program Files\K-Lite Codec Pack
      [13/03/2007|22:22] C:\Program Files\Last.fm
      [26/02/2007|14:06] C:\Program Files\Magic Vines
      [04/07/2008|20:16] C:\Program Files\Messenger Plus! Live
      [05/07/2007|23:08] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [02/11/2006|14:37] C:\Program Files\Microsoft Games
      [28/02/2007|12:16] C:\Program Files\Microsoft Office
      [06/12/2006|15:20] C:\Program Files\Microsoft Works
      [23/12/2007|22:07] C:\Program Files\mIRC
      [06/12/2006|23:59] C:\Program Files\Movie Maker
      [04/06/2008|19:22] C:\Program Files\Mozilla Firefox
      [02/11/2006|14:37] C:\Program Files\MSBuild
      [26/02/2007|20:40] C:\Program Files\MSN
      [01/03/2007|00:55] C:\Program Files\MSXML 4.0
      [20/07/2007|13:37] C:\Program Files\MySpace
      [07/12/2007|21:14] C:\Program Files\Nero
      [27/04/2007|19:01] C:\Program Files\NewSoft
      [04/03/2007|22:47] C:\Program Files\Norton Internet Security
      [16/06/2007|22:03] C:\Program Files\Orange
      [13/05/2008|20:09] C:\Program Files\Packard Bell Magic Movie
      [06/12/2006|15:33] C:\Program Files\PC-Doctor 5 for Windows
      [10/06/2008|15:26] C:\Program Files\QuickMediaConverter
      [07/12/2007|21:33] C:\Program Files\Radiotracker
      [07/12/2007|21:26] C:\Program Files\Rapid Solution Software AG
      [06/12/2006|15:14] C:\Program Files\Realtek
      [02/11/2006|14:37] C:\Program Files\Reference Assemblies
      [06/12/2006|15:17] C:\Program Files\Roxio
      [28/02/2007|19:53] C:\Program Files\SAGEM
      [28/02/2007|19:48] C:\Program Files\Securitoo
      [06/12/2006|15:24] C:\Program Files\Services en ligne
      [15/06/2008|14:18] C:\Program Files\Shareaza
      [28/02/2007|12:16] C:\Program Files\Snapshot Viewer
      [12/05/2008|23:11] C:\Program Files\Symantec
      [04/03/2007|22:47] C:\Program Files\Thomson
      [08/05/2008|12:20] C:\Program Files\Ulead Systems
      [02/11/2006|15:01] C:\Program Files\Uninstall Information
      [28/02/2007|20:00] C:\Program Files\Wanadoo
      [30/08/2007|14:54] C:\Program Files\Windows Calendar
      [06/12/2006|23:59] C:\Program Files\Windows Collaboration
      [14/04/2007|12:49] C:\Program Files\Windows Defender
      [06/12/2006|23:59] C:\Program Files\Windows Journal
      [04/07/2007|18:58] C:\Program Files\Windows Live
      [08/07/2008|21:29] C:\Program Files\Windows Mail
      [12/10/2007|20:46] C:\Program Files\Windows Media Player
      [22/02/2007|22:45] C:\Program Files\Windows NT
      [06/12/2006|23:59] C:\Program Files\Windows Photo Gallery
      [08/07/2008|21:28] C:\Program Files\Windows Sidebar
      [24/02/2008|15:08] C:\Program Files\WinRAR
      [21/06/2008|18:37] C:\Program Files\Wondershare
      [08/05/2008|12:21] C:\Program Files\Zylom Games

      ------[ Listing des dossiers dans C:\Program Files\Common Files ]------

      [12/05/2008|23:09] C:\Program Files\Common Files\Acronis
      [06/12/2006|15:18] C:\Program Files\Common Files\Adobe
      [07/12/2007|21:16] C:\Program Files\Common Files\Ahead
      [03/04/2008|19:36] C:\Program Files\Common Files\AVSMedia
      [28/02/2007|12:08] C:\Program Files\Common Files\Designer
      [26/02/2007|20:09] C:\Program Files\Common Files\InstallShield
      [06/12/2006|15:16] C:\Program Files\Common Files\Intel
      [04/06/2007|19:05] C:\Program Files\Common Files\Java
      [15/12/2007|20:04] C:\Program Files\Common Files\LightScribe
      [06/12/2006|15:18] C:\Program Files\Common Files\LS Getting Started
      [05/04/2008|20:25] C:\Program Files\Common Files\microsoft shared
      [06/12/2006|15:17] C:\Program Files\Common Files\Roxio Shared
      [02/11/2006|13:18] C:\Program Files\Common Files\Services
      [06/12/2006|15:17] C:\Program Files\Common Files\Sonic Shared
      [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
      [06/12/2006|15:17] C:\Program Files\Common Files\SureThing Shared
      [04/03/2007|22:47] C:\Program Files\Common Files\Symantec Shared
      [16/06/2007|21:57] C:\Program Files\Common Files\System
      [08/05/2008|12:18] C:\Program Files\Common Files\Ulead Systems
      [19/01/2008|12:34] C:\Program Files\Common Files\WindowsLiveInstaller

      ---------------------------[ Process ]--------------------------

      ... 60

      ... OK !

      ----------------------[ Recherche avec S_Lop ]---------------------

      C:\ProgramData\dvd atom atom.elj9y
      C:\ProgramData\dvd atom atom.elj9y

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@adopt.euroclick[1].txt

      ----------------------[ Verification du Registre ]----------------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      ..... OK !

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts PROPRE


      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-07-09 15:09:30
      Windows 6.0.6000 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------


      Aucune autre infection trouvée !

      [F:2141][D:146]-> C:\Users\Martine\AppData\Local\Temp
      [F:441][D:1]-> C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies
      [F:4576][D:10]-> C:\Users\Martine\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
      [F:44][D:8]-> C:\$Recycle.Bin

      [ UAC => 1 ]

      --------------------[ Fin du rapport a 15:10:20,27 ]----------------------

      et voici le rapport Toolbar-S&D :

      -----------\\ ToolBar S&D 1.0.3 XP/Vista

      [ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
      [ USER : Martine ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
      [ 09/07/2008 | 15:15:08,98 ] [ PC : PC-DE-MARTINE ]
      [ MAJ : 08-07-2008 | 22:24 ]
      [ UAC => 0 ]

      -----------\\ Recherche de Fichiers / Dossiers ...

      C:\Program Files\AskTBar
      C:\Program Files\AskTBar\bar
      C:\Program Files\AskTBar\PopSwatr
      C:\Program Files\AskTBar\SrchAstt
      C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@mysearch[1].txt

      -----------\\ [HKCU\..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]


      [ UAC => 1 ]

      -----------\\ Fin du rapport a 15:15:37,64


      D'avance, merci
      0
  4. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    parfait tu ne devrait plus avoir de pub CID

    ________________

    Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
    ! Ne ferme pas la fenêtre lors de la suppression !
    Un rapport sera généré, poste son contenu ici.

    NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
    Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
    Tape explorer puis valide.

    _________________

    recolle un rapport hijackthis et dis tes soucis actuels
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Voici le rapport Toolbar-S&D :


      -----------\\ ToolBar S&D 1.0.3 XP/Vista

      [ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
      [ USER : Martine ] [ "C:\Toolbar SD" ] [ Selection : 2 ]
      [ 09/07/2008 | 15:44:14,58 ] [ PC : PC-DE-MARTINE ]
      [ MAJ : 08-07-2008 | 22:24 ]
      [ UAC => 0 ]

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\AskTBar\bar
      Supprime! - C:\Program Files\AskTBar\PopSwatr
      Supprime! - C:\Program Files\AskTBar\SrchAstt
      Supprime! - C:\Users\Martine\AppData\Roaming\MICROS~1\Windows\Cookies\martine@mysearch[1].txt
      Supprime! - C:\Program Files\AskTBar

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [HKCU\..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]


      [ UAC => 1 ]

      -----------\\ Fin du rapport a 15:45:19,06
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    recolle un rapport hijackthis et dis tes soucis actuels
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Voici le rapport HiJackThis :

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 15:56:33, on 09/07/2008
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16546)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\hp\support\hpsysdrv.exe
      C:\hp\KBD\kbd.exe
      C:\WINDOWS\RtHDVCpl.exe
      C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
      C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
      C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
      C:\Program Files\Acronis\TrueImage\TimounterMonitor.exe
      C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\WINDOWS\ehome\ehtray.exe
      C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
      C:\Program Files\Shareaza\Shareaza.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
      C:\Windows\explorer.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Users\Martine\Desktop\HiJackThis.exe
      C:\Windows\system32\WerCon.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchgateway.net/search/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchgateway.net/search/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
      O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
      O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImage\TimounterMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: Envoyer l'image vers la bibliothèque - file://C:\Program Files\MGI\MGI PhotoSuite II\Temp\MGI00000.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
      O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
      O13 - Gopher Prefix:
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
      O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
      O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
      O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Intel DH Service (IntelDHSvcConf) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
      O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
      O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
      O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
      O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
      0
    2. marwyl Messages postés 370 Statut Membre 10
       
      une petite question :

      Est-ce que les deux programmes Lop S&D et toolbar S&D sont des antivirus ou servent-ils à supprimer que les fenêtres intempestives de type publicitaires ?
      0
      1. marwyl Messages postés 370 Statut Membre 10 > marwyl Messages postés 370 Statut Membre
         
        Depuis presqu'une demi-heure je n'ai plus de fenêtres publicitaires....

        MERCI
        0
  7. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    lop sd n'est qu'un logiciel pour virer les infection entrainant des pubs de type CID

    ____________

    relance hijakchits ,fais do as system scan only et fix ces lignes (fix cheked)

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchgateway.net/search/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchgateway.net/search/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
    R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
    O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)

    ________________

    mets a jour java:

    https://www.malekal.com/maintenir-java-adobe-reader-et-le-player-flash-a-jour/

    mets a jour windows en mettant le sp1 sur le site windows update

    bonne suite
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      bonjour,

      J'ai relancé HiJackThis en fxant les lignes que tu m'as indiquée et les mises à jours ont été effectuées.

      Voici un nouveau rapport HiJackThis.

      A+
      0
  8. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    où il est ?
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Oh excuse-moi !!!!!!!!!!



      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:17:45, on 10/07/2008
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16546)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Windows\system32\taskeng.exe
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\hp\support\hpsysdrv.exe
      C:\hp\KBD\kbd.exe
      C:\WINDOWS\RtHDVCpl.exe
      C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
      C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Program Files\Acronis\TrueImage\TimounterMonitor.exe
      C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\WINDOWS\ehome\ehtray.exe
      C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
      C:\Program Files\Shareaza\Shareaza.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
      C:\Program Files\Internet Explorer\ieuser.exe
      C:\Windows\system32\conime.exe
      C:\Windows\system32\wuauclt.exe
      C:\Users\Martine\Desktop\HiJackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
      O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
      O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImage\TimounterMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
      O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: Envoyer l'image vers la bibliothèque - file://C:\Program Files\MGI\MGI PhotoSuite II\Temp\MGI00000.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
      O13 - Gopher Prefix:
      O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?AuthParam=1215700923_dc76a8bae4bce085ea7a1e67173a596b&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab&File=jinstall-6u7-windows-i586-jc.cab
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
      O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
      O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
      O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Intel DH Service (IntelDHSvcConf) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
      O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
      O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
      O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
      O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
      O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
      0
  9. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    tu n'as pas mis le sp1 de windows via windows up date

    et
    mets a jour java:

    https://www.malekal.com/maintenir-java-adobe-reader-et-le-player-flash-a-jour/

    sinon tu peux fixer ceci et c'est bon!

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Bonjour,

      Hier, j'ai téléchargé le SP1 pour WINDOWS VISTA sur le site de microsoft. Je me suis absentée pendant le téléchargement.

      A mon retour, l'écran était en veille ainsi que le pc. J'ai "réveillé" le pc mais aucune réaction. J'ai donc éteint manuellement le pc. Mais au démarrage, un écran noir s'affiche sur lequel est inscrit :

      !! 0xc0000034 !!267/69224 (program_files_windows_mediaplayer_da4e5f6...)

      Si peux m'aider ce serait sympa d'autant plus que j'ai une partie de mes vidéos numériques ainsi que des photos dans le but d'en faire des DVD!!!!!!!!

      J'espère ne pas devoir réinstaller le système.

      D'avance merci
      0
  10. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    essaye de demarrer en mode sans echec : (appuyer plusieurs fois sur F8 ou f5 ou suppr ou esc au demarrage)

    choisi la derniere bonne configuration connue

    ______________

    ou alors le mode sans echec et restaure ensuite ton ordi avant l'installation du SP1

    http://www.libellules.ch/restauration_system_vista.php

    ________________

    ou sinon repare windows

    http://www.vista-xp.fr/forum/topic39.html
    0
    1. marwyl Messages postés 370 Statut Membre 10
       
      Je viens de redémarrer en mode sans échec :
      il charge windows.....
      puis réparation du démarrage.....
      une fenêtre s'affiche :
      L'outil de redémarrage système ne peut pas réparer automatiquement l'ordinateur....
      J'ai lancé la demande d'information sur le problème dont voici le détail :

      C:/windows/systeme32/LogFiles/Srt/SrtTrail.txt........
      C:/windows/system32/LogFiles/Srt/StartupRepair/etl

      je n'ai pas la touche "/" incliné vers la gauche car je suis sur un MAC
      puis j'ai l'adreese pour lire la déclaration de confidentialité de microsoft
      0