Rapport Lop S&D fenêtres publicitaires CiD

louloute -  
 louloute -
Bonsoir,

Voici mon rapport Lop S&D:

" -----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Fujitsu ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 09/07/2008 | 21:19:16,73 ] [ PC : FUJITSU-FDD01AC ]
[ MAJ : 09-07-2008 | 21:02 ]

-------------[ Listing des dossiers dans Application Data ]------------

[31/01/2008|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[13/12/2006|19:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[07/09/2006|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/04/2008|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag barb cake wipe
[01/10/2006|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[31/12/2007|14:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
[13/05/2008|11:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[05/05/2008|22:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/10/2006|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
[16/11/2007|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMonitor
[16/11/2007|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sansendommagement
[23/10/2007|16:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[21/10/2006|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SRS Labs
[21/11/2006|14:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[31/10/2007|18:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[11/01/2008|09:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[07/09/2006|18:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[07/09/2006|16:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[07/09/2006|16:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[05/02/2008|08:55] C:\DOCUME~1\Fujitsu\APPLIC~1\Adobe
[11/04/2008|18:19] C:\DOCUME~1\Fujitsu\APPLIC~1\Ahead
[03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\ConvertTemp
[21/04/2008|12:01] C:\DOCUME~1\Fujitsu\APPLIC~1\cool deaf size
[07/09/2006|18:20] C:\DOCUME~1\Fujitsu\APPLIC~1\desktop.ini
[13/02/2007|14:28] C:\DOCUME~1\Fujitsu\APPLIC~1\DivX
[31/01/2008|18:41] C:\DOCUME~1\Fujitsu\APPLIC~1\Google
[13/10/2006|21:48] C:\DOCUME~1\Fujitsu\APPLIC~1\Help
[07/09/2006|16:35] C:\DOCUME~1\Fujitsu\APPLIC~1\Identities
[13/12/2006|18:50] C:\DOCUME~1\Fujitsu\APPLIC~1\InterTrust
[25/05/2008|19:50] C:\DOCUME~1\Fujitsu\APPLIC~1\LimeWire
[02/10/2006|23:19] C:\DOCUME~1\Fujitsu\APPLIC~1\Macromedia
[22/11/2007|01:11] C:\DOCUME~1\Fujitsu\APPLIC~1\mdb.bin
[29/04/2008|10:28] C:\DOCUME~1\Fujitsu\APPLIC~1\Microsoft
[20/03/2007|11:27] C:\DOCUME~1\Fujitsu\APPLIC~1\Mozilla
[01/10/2006|19:58] C:\DOCUME~1\Fujitsu\APPLIC~1\MSN Search Toolbar
[03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\Samsung
[16/11/2007|12:57] C:\DOCUME~1\Fujitsu\APPLIC~1\sansendommagement
[20/05/2008|22:59] C:\DOCUME~1\Fujitsu\APPLIC~1\Skype
[07/09/2006|16:30] C:\DOCUME~1\Fujitsu\APPLIC~1\Sun
[20/03/2007|11:27] C:\DOCUME~1\Fujitsu\APPLIC~1\Talkback
[03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\Temporary
[03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\TransRender
[01/10/2006|18:04] C:\DOCUME~1\Fujitsu\APPLIC~1\TuneUp Software
[07/11/2006|12:10] C:\DOCUME~1\Fujitsu\APPLIC~1\vlc
[11/01/2008|09:01] C:\DOCUME~1\Fujitsu\APPLIC~1\Windows Live Writer

[07/09/2006|16:34] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/09/2006|16:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[09/07/2008 21:00][--ah-----] C:\WINDOWS\tasks\A1EF279D9198DEC1.job
[09/07/2008 20:43][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[30/12/2006 18:35][--a------] C:\WINDOWS\tasks\Low Battery Alarm Program.job
[06/06/2008 17:16][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[09/07/2008 18:38][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

A1EF279D9198DEC1.job <--> c:\docume~1\fujitsu\applic~1\coolde~1\locksgluemags.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[13/12/2006|18:50] C:\Program Files\Adobe
[01/10/2006|18:47] C:\Program Files\Ahead
[01/10/2006|17:10] C:\Program Files\Alwil Software
[07/09/2006|16:46] C:\Program Files\Apoint2K
[07/09/2006|16:46] C:\Program Files\AvRack
[13/12/2006|19:07] C:\Program Files\Boonty
[13/12/2006|19:07] C:\Program Files\BoontyGames
[09/07/2008|00:42] C:\Program Files\CCleaner
[07/09/2006|16:25] C:\Program Files\ComPlus Applications
[01/04/2008|09:58] C:\Program Files\cool deaf size
[21/11/2006|14:57] C:\Program Files\DFX
[26/12/2006|18:50] C:\Program Files\Eidos Interactive
[11/01/2008|18:40] C:\Program Files\eMule
[31/01/2008|18:28] C:\Program Files\Fichiers communs
[31/01/2008|18:40] C:\Program Files\Google
[03/09/2007|18:55] C:\Program Files\InstallShield Installation Information
[07/09/2006|16:45] C:\Program Files\Intel
[14/06/2008|12:19] C:\Program Files\Internet Explorer
[07/06/2008|21:53] C:\Program Files\Java
[25/05/2008|18:50] C:\Program Files\LimeWire
[01/10/2006|18:24] C:\Program Files\Messenger
[07/09/2006|16:30] C:\Program Files\microsoft frontpage
[01/10/2006|17:51] C:\Program Files\Microsoft Office
[13/11/2007|09:41] C:\Program Files\Microsoft SQL Server Compact Edition
[01/10/2006|17:50] C:\Program Files\Microsoft Visual Studio
[02/06/2008|22:34] C:\Program Files\Microsoft Works
[01/10/2006|17:48] C:\Program Files\Microsoft.NET
[07/09/2006|16:26] C:\Program Files\Movie Maker
[22/04/2008|11:42] C:\Program Files\Mozilla Firefox
[07/09/2006|16:24] C:\Program Files\MSN
[07/09/2006|16:24] C:\Program Files\MSN Gaming Zone
[01/10/2007|21:47] C:\Program Files\MSXML 4.0
[09/07/2008|02:06] C:\Program Files\Navilog1
[07/09/2006|16:26] C:\Program Files\NetMeeting
[07/09/2006|16:25] C:\Program Files\Online Services
[19/06/2007|16:10] C:\Program Files\Outlook Express
[07/09/2006|16:45] C:\Program Files\Power Manager
[31/01/2008|18:30] C:\Program Files\QuickTime
[14/06/2008|21:16] C:\Program Files\Radio Fr Solo
[07/09/2006|16:46] C:\Program Files\Realtek Sound Manager
[03/09/2007|18:42] C:\Program Files\Samsung
[18/11/2007|16:45] C:\Program Files\SansenDommagement
[07/09/2006|16:27] C:\Program Files\Services en ligne
[20/08/2007|00:12] C:\Program Files\Sierra On-Line
[23/10/2007|16:44] C:\Program Files\Skype
[21/10/2006|00:11] C:\Program Files\SRS Labs
[13/12/2006|19:09] C:\Program Files\T‚l‚chargeur de Moto Racer 3
[03/03/2007|13:16] C:\Program Files\TuneUp Utilities 2004
[07/09/2006|16:35] C:\Program Files\Uninstall Information
[04/11/2006|00:38] C:\Program Files\Wanadoo
[22/04/2008|11:42] C:\Program Files\Windows Live
[31/10/2007|18:39] C:\Program Files\Windows Live Favorites
[30/11/2007|00:34] C:\Program Files\Windows Live Toolbar
[21/11/2006|14:23] C:\Program Files\Windows Media Connect 2
[21/11/2006|15:01] C:\Program Files\Windows Media Player
[07/09/2006|16:24] C:\Program Files\Windows NT
[07/09/2006|16:27] C:\Program Files\WindowsUpdate
[09/05/2008|19:05] C:\Program Files\WinRAR
[07/09/2006|16:30] C:\Program Files\xerox
[14/02/2008|21:54] C:\Program Files\Xvid

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[13/12/2006|18:50] C:\Program Files\Fichiers communs\Adobe
[01/10/2006|18:47] C:\Program Files\Fichiers communs\Ahead
[31/01/2008|18:28] C:\Program Files\Fichiers communs\Apple
[13/12/2006|19:07] C:\Program Files\Fichiers communs\BOONTY Shared
[01/10/2006|17:51] C:\Program Files\Fichiers communs\DESIGNER
[03/09/2007|18:41] C:\Program Files\Fichiers communs\InstallShield
[07/09/2006|16:30] C:\Program Files\Fichiers communs\Java
[02/06/2008|22:33] C:\Program Files\Fichiers communs\Microsoft Shared
[07/09/2006|16:26] C:\Program Files\Fichiers communs\MSSoap
[07/09/2006|18:21] C:\Program Files\Fichiers communs\ODBC
[16/11/2007|12:52] C:\Program Files\Fichiers communs\SansenDommagement
[07/09/2006|16:26] C:\Program Files\Fichiers communs\Services
[23/10/2007|16:44] C:\Program Files\Fichiers communs\Skype
[07/09/2006|18:21] C:\Program Files\Fichiers communs\SpeechEngines
[21/10/2006|00:12] C:\Program Files\Fichiers communs\SRS Labs Shared
[19/06/2007|16:10] C:\Program Files\Fichiers communs\System
[13/11/2007|09:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[21/11/2006|14:00] C:\Program Files\Fichiers communs\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 40

iexplore.exe ~ [1236]
iexplore.exe ~ [2052]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag barb cake wipe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag barb cake wipe\GREAT MEMO.exe
C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1
C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1\locks glue mags.exe
C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1\nzbowaev.exe
C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1\ownsmetaoozeexit.exe
C:\Program Files\coolde~1
C:\WINDOWS\Prefetch\LOCKS GLUE MAGS.EXE-2C73248C.pf
C:\DOCUME~1\Fujitsu\Cookies\fujitsu@www.adserver5[1].txt
C:\DOCUME~1\Fujitsu\Cookies\fujitsu@adopt.euroclick[2].txt
C:\DOCUME~1\Fujitsu\Cookies\fujitsu@32vegas[1].txt
C:\DOCUME~1\Fujitsu\Cookies\fujitsu@banner.32vegas[2].txt
C:\DOCUME~1\Fujitsu\Cookies\fujitsu@888[1].txt
C:\WINDOWS\Tasks\A1EF279D9198DEC1.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cake Wipe Inside Wma"="C:\\Documents and Settings\\All Users\\Application Data\\flag barb cake wipe\\GREAT MEMO.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 72 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-09 21:20:26
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Salestart"="\"C:\\Program Files\\Fichiers communs\\SansenDommagement\\strpmon.exe\" dm

[b]! EGDACCESS !/b

=> C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\Ciel Compta 2004\_Crack.exe
=> C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen
=> C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen.rar
=> C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen\Softex.MegaNet.Lt - daily soft news, forum, games, music, video....url
=> C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\Ciel Compta 2004\_Crack.exe
=> C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\nero\Nero.Keygen
=> C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\nero\Nero.Keygen.rar
=> C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\nero\Nero.Keygen\Softex.MegaNet.Lt - daily soft news, forum, games, music, video....url

[F:1][D:2]-> C:\DOCUME~1\Fujitsu\LOCALS~1\Temp
[F:161][D:0]-> C:\DOCUME~1\Fujitsu\Cookies
[F:2490][D:9]-> C:\DOCUME~1\Fujitsu\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 21:21:44,08 ]----------------------"

Une personne compétente pourrait-elle me dire ce que je dois faire afin que mon problème soit définitivement résolu?

Merci de me répondre!

Louloute.
Configuration: Windows XP

1 réponse

Résumé de la discussion

Un utilisateur demande des conseils pour résoudre une infection détectée par Lop S&D sur Windows XP, suite à un rapport détaillant des dossiers et tâches suspects et des exécutables malveillants. La meilleure réponse proposée explique l’utilisation de l’option n°2 pour supprimer les éléments identifiés, notamment des exécutables, des fichiers dans les répertoires AppData et Cookies, et des tâches planifiées associées. Le résumé de l’intervention mentionne aussi la suppression de fichiers suspects, la remise à zéro des éléments autorun du registre et l’état du fichier Hosts, qui devient propre après le nettoyage. En cas de besoin, des détails supplémentaires sur les chemins supprimés et les résultats des analyses post‑nettoyage peuvent être fournis pour confirmer la résolution et prévenir une réinfection.

Bobot (l'IA à votre service)
  1. verni29 Messages postés 6805 Statut Contributeur sécurité 180
     
    Bonsoir,

    1) Relance le logiciel LopS&D.
    Choisis l'option 2 pour supprimer l'infection et réinitialiser le fichier Hosts.
    Après redémarrage, choisis ton comte et laisse le logiciel travailler.
    A la fin du nettoyage, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
    Tu posteras ce rapport dans le prochain message ainsi qu’un nouveau rapport Hijackthis.
    Désinstalle LopS&D par la panneau de configuration et Ajout/Suppression de programmes.
    Puis redémarre l'ordinateur.

    2) télécharge et installe HijackThis .
    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
    Choisir « Download Hijackthis Installer »
    Après l'installation, un raccourci sera crée sur le bureau. Double-clique dessus pour le lancer ( si sous Vista  Click droit et executer en tant qu’administrateur )
    Choisir l'option Do a system scan and save a logfile.
    Le rapport va s'ouvrir. Tu copies/colles le contenu de ce rapport dans ton prochain message

    A+
    0
    1. louloute
       
      Merci de ta réponse.


      Voici mon rapport effectué avec l'option n°2:

      " -----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------

      [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
      [ USER : Fujitsu ] [ "C:\Lop SD" ] [ Selection : 2 ]
      [ 09/07/2008 | 22:03:46,43 ] [ PC : FUJITSU-FDD01AC ]
      [ MAJ : 09-07-2008 | 21:02 ]


      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

      Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag barb cake wipe\GREAT MEMO.exe
      Supprime! - C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1\locks glue mags.exe
      Supprime! - C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1\nzbowaev.exe
      Supprime! - C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1\ownsmetaoozeexit.exe
      Supprime! - C:\WINDOWS\Prefetch\LOCKS GLUE MAGS.EXE-2C73248C.pf
      Supprime! - C:\DOCUME~1\Fujitsu\Cookies\fujitsu@www.adserver5[1].txt
      Supprime! - C:\DOCUME~1\Fujitsu\Cookies\fujitsu@adopt.euroclick[2].txt
      Supprime! - C:\DOCUME~1\Fujitsu\Cookies\fujitsu@32vegas[1].txt
      Supprime! - C:\DOCUME~1\Fujitsu\Cookies\fujitsu@banner.32vegas[2].txt
      Supprime! - C:\DOCUME~1\Fujitsu\Cookies\fujitsu@888[1].txt
      Supprime! - C:\WINDOWS\Tasks\A1EF279D9198DEC1.job
      Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag barb cake wipe
      Supprime! - C:\DOCUME~1\Fujitsu\APPLIC~1\coolde~1
      Supprime! - C:\Program Files\coolde~1
      RestaurÚ! - Fichier Hosts

      //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

      Supprime! - C:\Program Files\Sansendommagement
      Supprime! - C:\DOCUME~1\Fujitsu\APPLIC~1\Sansendommagement
      Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sansendommagement

      //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


      -------------[ Listing des dossiers dans APPLIC~1 ]------------

      [31/01/2008|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
      [13/12/2006|19:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
      [07/09/2006|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
      [01/10/2006|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [31/12/2007|14:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
      [13/05/2008|11:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
      [05/05/2008|22:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [01/10/2006|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
      [16/11/2007|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMonitor
      [23/10/2007|16:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
      [21/10/2006|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SRS Labs
      [21/11/2006|14:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [31/10/2007|18:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
      [11/01/2008|09:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

      [07/09/2006|18:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
      [07/09/2006|16:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
      [07/09/2006|16:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

      [05/02/2008|08:55] C:\DOCUME~1\Fujitsu\APPLIC~1\Adobe
      [11/04/2008|18:19] C:\DOCUME~1\Fujitsu\APPLIC~1\Ahead
      [03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\ConvertTemp
      [07/09/2006|18:20] C:\DOCUME~1\Fujitsu\APPLIC~1\desktop.ini
      [13/02/2007|14:28] C:\DOCUME~1\Fujitsu\APPLIC~1\DivX
      [31/01/2008|18:41] C:\DOCUME~1\Fujitsu\APPLIC~1\Google
      [13/10/2006|21:48] C:\DOCUME~1\Fujitsu\APPLIC~1\Help
      [07/09/2006|16:35] C:\DOCUME~1\Fujitsu\APPLIC~1\Identities
      [13/12/2006|18:50] C:\DOCUME~1\Fujitsu\APPLIC~1\InterTrust
      [25/05/2008|19:50] C:\DOCUME~1\Fujitsu\APPLIC~1\LimeWire
      [02/10/2006|23:19] C:\DOCUME~1\Fujitsu\APPLIC~1\Macromedia
      [22/11/2007|01:11] C:\DOCUME~1\Fujitsu\APPLIC~1\mdb.bin
      [29/04/2008|10:28] C:\DOCUME~1\Fujitsu\APPLIC~1\Microsoft
      [20/03/2007|11:27] C:\DOCUME~1\Fujitsu\APPLIC~1\Mozilla
      [01/10/2006|19:58] C:\DOCUME~1\Fujitsu\APPLIC~1\MSN Search Toolbar
      [03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\Samsung
      [20/05/2008|22:59] C:\DOCUME~1\Fujitsu\APPLIC~1\Skype
      [07/09/2006|16:30] C:\DOCUME~1\Fujitsu\APPLIC~1\Sun
      [20/03/2007|11:27] C:\DOCUME~1\Fujitsu\APPLIC~1\Talkback
      [03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\Temporary
      [03/09/2007|18:54] C:\DOCUME~1\Fujitsu\APPLIC~1\TransRender
      [01/10/2006|18:04] C:\DOCUME~1\Fujitsu\APPLIC~1\TuneUp Software
      [07/11/2006|12:10] C:\DOCUME~1\Fujitsu\APPLIC~1\vlc
      [11/01/2008|09:01] C:\DOCUME~1\Fujitsu\APPLIC~1\Windows Live Writer

      [07/09/2006|16:34] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [07/09/2006|16:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

      [09/07/2008 21:43][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
      [30/12/2006 18:35][--a------] C:\WINDOWS\tasks\Low Battery Alarm Program.job
      [06/06/2008 17:16][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
      [09/07/2008 18:38][--ah-----] C:\WINDOWS\tasks\SA.DAT
      [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [13/12/2006|18:50] C:\Program Files\Adobe
      [01/10/2006|18:47] C:\Program Files\Ahead
      [01/10/2006|17:10] C:\Program Files\Alwil Software
      [07/09/2006|16:46] C:\Program Files\Apoint2K
      [07/09/2006|16:46] C:\Program Files\AvRack
      [13/12/2006|19:07] C:\Program Files\Boonty
      [13/12/2006|19:07] C:\Program Files\BoontyGames
      [09/07/2008|00:42] C:\Program Files\CCleaner
      [07/09/2006|16:25] C:\Program Files\ComPlus Applications
      [21/11/2006|14:57] C:\Program Files\DFX
      [26/12/2006|18:50] C:\Program Files\Eidos Interactive
      [11/01/2008|18:40] C:\Program Files\eMule
      [31/01/2008|18:28] C:\Program Files\Fichiers communs
      [31/01/2008|18:40] C:\Program Files\Google
      [03/09/2007|18:55] C:\Program Files\InstallShield Installation Information
      [07/09/2006|16:45] C:\Program Files\Intel
      [14/06/2008|12:19] C:\Program Files\Internet Explorer
      [07/06/2008|21:53] C:\Program Files\Java
      [25/05/2008|18:50] C:\Program Files\LimeWire
      [01/10/2006|18:24] C:\Program Files\Messenger
      [07/09/2006|16:30] C:\Program Files\microsoft frontpage
      [01/10/2006|17:51] C:\Program Files\Microsoft Office
      [13/11/2007|09:41] C:\Program Files\Microsoft SQL Server Compact Edition
      [01/10/2006|17:50] C:\Program Files\Microsoft Visual Studio
      [02/06/2008|22:34] C:\Program Files\Microsoft Works
      [01/10/2006|17:48] C:\Program Files\Microsoft.NET
      [07/09/2006|16:26] C:\Program Files\Movie Maker
      [22/04/2008|11:42] C:\Program Files\Mozilla Firefox
      [07/09/2006|16:24] C:\Program Files\MSN
      [07/09/2006|16:24] C:\Program Files\MSN Gaming Zone
      [01/10/2007|21:47] C:\Program Files\MSXML 4.0
      [09/07/2008|02:06] C:\Program Files\Navilog1
      [07/09/2006|16:26] C:\Program Files\NetMeeting
      [07/09/2006|16:25] C:\Program Files\Online Services
      [19/06/2007|16:10] C:\Program Files\Outlook Express
      [07/09/2006|16:45] C:\Program Files\Power Manager
      [31/01/2008|18:30] C:\Program Files\QuickTime
      [14/06/2008|21:16] C:\Program Files\Radio Fr Solo
      [07/09/2006|16:46] C:\Program Files\Realtek Sound Manager
      [03/09/2007|18:42] C:\Program Files\Samsung
      [07/09/2006|16:27] C:\Program Files\Services en ligne
      [20/08/2007|00:12] C:\Program Files\Sierra On-Line
      [23/10/2007|16:44] C:\Program Files\Skype
      [21/10/2006|00:11] C:\Program Files\SRS Labs
      [13/12/2006|19:09] C:\Program Files\T‚l‚chargeur de Moto Racer 3
      [03/03/2007|13:16] C:\Program Files\TuneUp Utilities 2004
      [07/09/2006|16:35] C:\Program Files\Uninstall Information
      [04/11/2006|00:38] C:\Program Files\Wanadoo
      [22/04/2008|11:42] C:\Program Files\Windows Live
      [31/10/2007|18:39] C:\Program Files\Windows Live Favorites
      [30/11/2007|00:34] C:\Program Files\Windows Live Toolbar
      [21/11/2006|14:23] C:\Program Files\Windows Media Connect 2
      [21/11/2006|15:01] C:\Program Files\Windows Media Player
      [07/09/2006|16:24] C:\Program Files\Windows NT
      [07/09/2006|16:27] C:\Program Files\WindowsUpdate
      [09/05/2008|19:05] C:\Program Files\WinRAR
      [07/09/2006|16:30] C:\Program Files\xerox
      [14/02/2008|21:54] C:\Program Files\Xvid

      ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

      [13/12/2006|18:50] C:\Program Files\Fichiers communs\Adobe
      [01/10/2006|18:47] C:\Program Files\Fichiers communs\Ahead
      [31/01/2008|18:28] C:\Program Files\Fichiers communs\Apple
      [13/12/2006|19:07] C:\Program Files\Fichiers communs\BOONTY Shared
      [01/10/2006|17:51] C:\Program Files\Fichiers communs\DESIGNER
      [03/09/2007|18:41] C:\Program Files\Fichiers communs\InstallShield
      [07/09/2006|16:30] C:\Program Files\Fichiers communs\Java
      [02/06/2008|22:33] C:\Program Files\Fichiers communs\Microsoft Shared
      [07/09/2006|16:26] C:\Program Files\Fichiers communs\MSSoap
      [07/09/2006|18:21] C:\Program Files\Fichiers communs\ODBC
      [16/11/2007|12:52] C:\Program Files\Fichiers communs\SansenDommagement
      [07/09/2006|16:26] C:\Program Files\Fichiers communs\Services
      [23/10/2007|16:44] C:\Program Files\Fichiers communs\Skype
      [07/09/2006|18:21] C:\Program Files\Fichiers communs\SpeechEngines
      [21/10/2006|00:12] C:\Program Files\Fichiers communs\SRS Labs Shared
      [19/06/2007|16:10] C:\Program Files\Fichiers communs\System
      [13/11/2007|09:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller
      [21/11/2006|14:00] C:\Program Files\Fichiers communs\Wise Installation Wizard

      ---------------------------[ Process ]--------------------------

      ... 38

      ... OK !

      ----------------------[ Recherche avec S_Lop ]---------------------

      Aucun fichier / dossier Lop trouvé !

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      Aucun fichier / dossier Lop trouvé !

      ----------------------[ Verification du Registre ]----------------------

      ..... OK !

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts PROPRE


      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-07-09 22:04:46
      Windows 5.1.2600 Service Pack 2 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Salestart"="\"C:\\Program Files\\Fichiers communs\\SansenDommagement\\strpmon.exe\" dm

      [b]! EGDACCESS !/b

      => C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\Ciel Compta 2004\_Crack.exe
      => C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen
      => C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen.rar
      => C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen\Softex.MegaNet.Lt - daily soft news, forum, games, music, video....url
      => C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\Ciel Compta 2004\_Crack.exe
      => C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\nero\Nero.Keygen
      => C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\nero\Nero.Keygen.rar
      => C:\Documents and Settings\Fujitsu\Mes documents\Mes logiciels\nero\Nero.Keygen\Softex.MegaNet.Lt - daily soft news, forum, games, music, video....url


      [F:1][D:2]-> C:\DOCUME~1\Fujitsu\LOCALS~1\Temp
      [F:174][D:0]-> C:\DOCUME~1\Fujitsu\Cookies
      [F:1227][D:9]-> C:\DOCUME~1\Fujitsu\LOCALS~1\TEMPOR~1\content.IE5

      --------------------[ Fin du rapport a 22:05:31,73 ]----------------------"



      La suite vient...
      0
    2. louloute > louloute
       
      Maintenant, voici le rapport publié par Hijacthis:

      "Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:16:24, on 09/07/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Fichiers communs\SansenDommagement\strpmon.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
      C:\Program Files\Power Manager\PM.exe
      C:\WINDOWS\system32\igfxtray.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\Apoint2K\Apoint.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
      C:\Program Files\Apoint2K\Apntex.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 10.137.20.177:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Fichiers communs\SansenDommagement\strpmon.exe" dm=http://sansendommagement.com; ad=http://sansendommagement.com
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
      O4 - HKLM\..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [nlhr] RunDll32.exe %SystemRoot%\System32\AdvPack.Dll,LaunchINFSection %SystemRoot%\inf\nlite.inf,C (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-20\..\RunOnce: [nlhr] RunDll32.exe %SystemRoot%\System32\AdvPack.Dll,LaunchINFSection %SystemRoot%\inf\nlite.inf,C (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\S-1-5-18\..\RunOnce: [nlhr] RunDll32.exe %SystemRoot%\System32\AdvPack.Dll,LaunchINFSection %SystemRoot%\inf\nlite.inf,C (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [nlhr] RunDll32.exe %SystemRoot%\System32\AdvPack.Dll,LaunchINFSection %SystemRoot%\inf\nlite.inf,C (User 'Default user')
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload Manager Class) - http://www.kodakgallery.fr/
      O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/5.0.15.0/ImageUploader5.cab
      O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/FacebookPhotoUploader4_5.cab
      O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp06.photoprintit.de/microsite/1979/defaults/activex/IPSUploader.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: SRS Labs License Service - SRS Labs - C:\Program Files\Fichiers communs\SRS Labs Shared\Service\srslabslicenseservice.exe
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
      0
    3. louloute > louloute
       
      Je pense que Verni29 s'est déconnecté.


      Quelqu'un pourrait me dire ce que je dois faire?


      Merci de me répondre!
      0
    4. verni29 Messages postés 6805 Statut Contributeur sécurité 180 > louloute
       
      Louloute,

      je t'explique comment tu as obtenu cette infection : Via le P2P.
      Il te faut supprimer ceux qui sont présents sur ton ordinateur car ils sont infectés.

      Je t'indique l'endroit où ils se trouvent :

      C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\Ciel Compta 2004\_Crack.exe
      C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen
      C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen.rar
      C:\DOCUME~1\Fujitsu\MESDOC~1\Mes logiciels\nero\Nero.Keygen\Softex.MegaNet.Lt - daily soft news, forum, games, music, video....url

      Ton ordinateur est encore infecté.

      tu télécharge smitfraudfix sur ton bureau.
      http://siri.urz.free.fr/Fix/SmitfraudFix.php

      fais un click droit sur l'éxecutable que tu as téléchargé et choisis " éxecuter en tant qu'administrateur".

      tu choisis l' option 1 pour la recherche.
      Un rapport sera crée.
      Copie/colle le rapport dans ton prochain message

      A+
      0
    5. louloute > verni29 Messages postés 6805 Statut Contributeur sécurité
       
      C'est quoi le P2P? :-|
      0

Discussions similaires

Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
Utilisateur anonyme -
TomH. -

13 réponses
impossible d'afficher le tableau dynamique sur un rapport existant
Pierre -
Adrien71 -

3 réponses
rapport de visite commercial
antcho -
@nnie -

3 réponses
Rapport audit parc informatique
It administrateur -
alpha -

9 réponses
Problème de clavier, des fenêtre s'ouvrent !!
Lyon691D -
tanteelise -

5 réponses