HELP!!!CID PUBS

Résolu
Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   -  
Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   -
Bonjour,
J'ai vu que certains nombres de topics repondaient au sujet mais il me faudrait une aide perso svp.
J'en peux plus de ces pubs estampillées CID ça me pourrit la vie.
Je rame trop.
Pourriez vous m'indiquer la marche à suivre?
Merci d'avance
Configuration: Windows XP
Internet Explorer 7.0

32 réponses

  • 1
  • 2
  1. Utilisateur anonyme
     
    Salut

    Télécharge ceci: (by Moe) :
    http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

    Double clic sur Lopxpsetup.exe pour lancer l'installation
    Au menu, choisir l'option 1
    Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
    Une rapport sera alors crée, à copie/colle en entier sur le forum.

    0
  2. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    J'ai mis 2 fois executer puis plus rien?!
    0
  3. Utilisateur anonyme
     
    ok

    Télécharge LOP S&D d'Eric71 ici https://sites.google.com/site/eric71mespages/lop.sd.exe

    Double-clique dessus pour lancer l'installation.
    Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
    Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )
    Patiente jusqu'à la fin du scan.

    Poste le rapport généré (situé aussi ici C:\lopR.txt )

    ( Si le Bureau ne réapparaît , lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

    0
    1. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
       
      -----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------

      [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
      [ USER : JONATHAN ] [ "C:\Lop SD" ] [ Selection : 1 ]
      [ 11/07/2008 | 2:32:25,76 ] [ PC : AMD2800 ]
      [ MAJ : 09-07-2008 | 21:02 ]

      -------------[ Listing des dossiers dans Application Data ]------------

      [10/03/2008|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [14/03/2006|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
      [27/02/2007|16:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
      [12/04/2008|09:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem
      [12/03/2006|12:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
      [19/12/2005|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
      [19/05/2007|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
      [31/03/2006|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EA
      [20/01/2007|02:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
      [12/12/2007|12:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\erreurchasseur
      [13/02/2007|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Friends Games
      [19/12/2006|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Genimo
      [02/10/2007|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [05/04/2008|09:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
      [29/06/2008|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
      [01/12/2006|08:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
      [10/07/2008|20:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
      [12/03/2006|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
      [10/06/2007|13:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MANSION
      [10/07/2008|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
      [23/06/2007|13:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [14/10/2006|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
      [17/01/2007|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norbyte
      [20/01/2007|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PKP_DLec.DAT
      [07/11/2007|00:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
      [29/03/2006|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
      [19/12/2005|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
      [12/12/2007|12:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMonitor
      [23/03/2006|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Samsung
      [12/12/2006|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
      [15/10/2006|19:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Smilebox
      [25/01/2007|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
      [02/05/2008|02:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
      [09/09/2007|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Starware370
      [07/01/2007|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SugarGames
      [03/02/2008|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [16/09/2007|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
      [16/03/2006|12:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
      [14/10/2006|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
      [20/01/2007|02:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
      [04/03/2006|20:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [24/08/2006|14:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
      [14/04/2008|19:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
      [09/08/2007|16:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

      [03/04/2006|18:40] C:\DOCUME~1\Arielle\APPLIC~1\7Wonders
      [24/02/2008|10:49] C:\DOCUME~1\Arielle\APPLIC~1\Adobe
      [03/07/2006|07:38] C:\DOCUME~1\Arielle\APPLIC~1\AdobeUM
      [02/04/2006|12:00] C:\DOCUME~1\Arielle\APPLIC~1\Ahead
      [26/03/2006|01:01] C:\DOCUME~1\Arielle\APPLIC~1\Alawar
      [03/01/2007|09:20] C:\DOCUME~1\Arielle\APPLIC~1\Angkor
      [05/11/2006|19:23] C:\DOCUME~1\Arielle\APPLIC~1\Beep Industries
      [23/11/2006|13:14] C:\DOCUME~1\Arielle\APPLIC~1\Bitbliss Studios
      [10/05/2007|06:32] C:\DOCUME~1\Arielle\APPLIC~1\Dealio
      [19/12/2005|16:51] C:\DOCUME~1\Arielle\APPLIC~1\desktop.ini
      [07/02/2007|18:57] C:\DOCUME~1\Arielle\APPLIC~1\DivX
      [08/05/2006|09:01] C:\DOCUME~1\Arielle\APPLIC~1\EA
      [12/01/2006|08:36] C:\DOCUME~1\Arielle\APPLIC~1\eConf
      [19/12/2005|21:22] C:\DOCUME~1\Arielle\APPLIC~1\eu
      [02/12/2006|12:26] C:\DOCUME~1\Arielle\APPLIC~1\funkitron
      [20/02/2008|22:41] C:\DOCUME~1\Arielle\APPLIC~1\Fuzzy Games
      [05/01/2007|09:24] C:\DOCUME~1\Arielle\APPLIC~1\Gaijin Ent
      [23/09/2006|09:26] C:\DOCUME~1\Arielle\APPLIC~1\Google
      [23/12/2005|13:44] C:\DOCUME~1\Arielle\APPLIC~1\Help
      [16/09/2006|19:15] C:\DOCUME~1\Arielle\APPLIC~1\Hulabee
      [12/04/2008|09:09] C:\DOCUME~1\Arielle\APPLIC~1\Identities
      [11/05/2006|09:06] C:\DOCUME~1\Arielle\APPLIC~1\Incredible Ink
      [23/12/2005|18:04] C:\DOCUME~1\Arielle\APPLIC~1\InterVideo
      [01/06/2008|07:35] C:\DOCUME~1\Arielle\APPLIC~1\ItsLabel
      [19/12/2005|16:38] C:\DOCUME~1\Arielle\APPLIC~1\Lavasoft
      [24/02/2008|10:49] C:\DOCUME~1\Arielle\APPLIC~1\Leadertech
      [14/03/2006|22:47] C:\DOCUME~1\Arielle\APPLIC~1\Macromedia
      [08/05/2006|08:42] C:\DOCUME~1\Arielle\APPLIC~1\Magic Match
      [08/05/2006|08:18] C:\DOCUME~1\Arielle\APPLIC~1\Microsoft
      [23/12/2005|16:35] C:\DOCUME~1\Arielle\APPLIC~1\Mozilla
      [24/10/2007|06:30] C:\DOCUME~1\Arielle\APPLIC~1\one idol dupe
      [03/05/2008|20:30] C:\DOCUME~1\Arielle\APPLIC~1\OpenOffice.org2
      [07/11/2007|00:07] C:\DOCUME~1\Arielle\APPLIC~1\PlayFirst
      [01/02/2007|07:58] C:\DOCUME~1\Arielle\APPLIC~1\Real
      [05/04/2008|06:10] C:\DOCUME~1\Arielle\APPLIC~1\SamsungLiveUpdateConfig.ini
      [21/07/2006|17:29] C:\DOCUME~1\Arielle\APPLIC~1\SecuROM
      [10/09/2007|06:16] C:\DOCUME~1\Arielle\APPLIC~1\ShoppingReport
      [13/01/2006|14:54] C:\DOCUME~1\Arielle\APPLIC~1\SlySoft
      [24/01/2006|21:11] C:\DOCUME~1\Arielle\APPLIC~1\Sun
      [23/12/2005|16:35] C:\DOCUME~1\Arielle\APPLIC~1\Talkback
      [06/04/2008|09:09] C:\DOCUME~1\Arielle\APPLIC~1\TheScruffs
      [23/12/2005|16:35] C:\DOCUME~1\Arielle\APPLIC~1\Thunderbird
      [23/12/2007|17:47] C:\DOCUME~1\Arielle\APPLIC~1\U3
      [04/07/2008|07:31] C:\DOCUME~1\Arielle\APPLIC~1\VMNTOOLBAR
      [13/08/2006|22:24] C:\DOCUME~1\Arielle\APPLIC~1\Wildfire
      [12/04/2008|09:09] C:\DOCUME~1\Arielle\APPLIC~1\Zylom

      [19/12/2005|16:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
      [05/10/2007|01:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
      [19/12/2005|15:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft


      [02/03/2006|21:31] C:\DOCUME~1\JEFF\APPLIC~1\.gaim
      [24/03/2006|14:19] C:\DOCUME~1\JEFF\APPLIC~1\7Wonders
      [30/01/2008|13:38] C:\DOCUME~1\JEFF\APPLIC~1\Adobe
      [18/01/2007|13:14] C:\DOCUME~1\JEFF\APPLIC~1\AdobeUM
      [09/03/2007|12:20] C:\DOCUME~1\JEFF\APPLIC~1\Ahead
      [10/03/2006|15:52] C:\DOCUME~1\JEFF\APPLIC~1\Alawar
      [17/01/2007|18:25] C:\DOCUME~1\JEFF\APPLIC~1\ArcSoft
      [19/11/2006|17:46] C:\DOCUME~1\JEFF\APPLIC~1\Bitbliss Studios
      [22/11/2007|19:46] C:\DOCUME~1\JEFF\APPLIC~1\BitDownload
      [10/12/2006|11:41] C:\DOCUME~1\JEFF\APPLIC~1\Boomzap
      [09/05/2007|19:07] C:\DOCUME~1\JEFF\APPLIC~1\Dealio
      [19/12/2005|16:51] C:\DOCUME~1\JEFF\APPLIC~1\desktop.ini
      [10/12/2006|11:09] C:\DOCUME~1\JEFF\APPLIC~1\DivX
      [31/03/2006|10:56] C:\DOCUME~1\JEFF\APPLIC~1\EA
      [05/07/2007|21:26] C:\DOCUME~1\JEFF\APPLIC~1\eMule
      [31/05/2008|19:20] C:\DOCUME~1\JEFF\APPLIC~1\EoRezo
      [23/10/2006|21:56] C:\DOCUME~1\JEFF\APPLIC~1\EPSON
      [12/12/2007|12:41] C:\DOCUME~1\JEFF\APPLIC~1\erreurchasseur
      [07/09/2006|19:09] C:\DOCUME~1\JEFF\APPLIC~1\eu
      [11/03/2006|17:28] C:\DOCUME~1\JEFF\APPLIC~1\froggy_scorebox
      [15/12/2007|18:35] C:\DOCUME~1\JEFF\APPLIC~1\funkitron
      [19/12/2006|21:52] C:\DOCUME~1\JEFF\APPLIC~1\Genimo
      [21/10/2006|07:59] C:\DOCUME~1\JEFF\APPLIC~1\Google
      [11/01/2006|19:53] C:\DOCUME~1\JEFF\APPLIC~1\Help
      [01/01/2008|15:17] C:\DOCUME~1\JEFF\APPLIC~1\Identities
      [17/05/2007|20:57] C:\DOCUME~1\JEFF\APPLIC~1\Internet Download Accelerator
      [31/01/2006|21:58] C:\DOCUME~1\JEFF\APPLIC~1\InterVideo
      [31/05/2008|17:59] C:\DOCUME~1\JEFF\APPLIC~1\ItsLabel
      [20/10/2006|20:01] C:\DOCUME~1\JEFF\APPLIC~1\iWin
      [19/02/2006|12:37] C:\DOCUME~1\JEFF\APPLIC~1\Lavasoft
      [30/01/2008|13:16] C:\DOCUME~1\JEFF\APPLIC~1\Leadertech
      [29/03/2006|13:09] C:\DOCUME~1\JEFF\APPLIC~1\Macromedia
      [09/10/2006|19:02] C:\DOCUME~1\JEFF\APPLIC~1\Magic Match
      [05/03/2006|19:31] C:\DOCUME~1\JEFF\APPLIC~1\Media Player Classic
      [28/01/2007|19:13] C:\DOCUME~1\JEFF\APPLIC~1\Microsoft
      [31/03/2007|13:18] C:\DOCUME~1\JEFF\APPLIC~1\Morpheus Software
      [20/01/2006|13:38] C:\DOCUME~1\JEFF\APPLIC~1\Mozilla
      [12/04/2006|21:58] C:\DOCUME~1\JEFF\APPLIC~1\MSNInstaller
      [28/12/2007|19:27] C:\DOCUME~1\JEFF\APPLIC~1\NASA
      [19/04/2008|21:52] C:\DOCUME~1\JEFF\APPLIC~1\Nikon
      [17/01/2007|16:42] C:\DOCUME~1\JEFF\APPLIC~1\Norbyte
      [06/07/2008|18:53] C:\DOCUME~1\JEFF\APPLIC~1\OpenOffice.org2
      [11/03/2006|17:28] C:\DOCUME~1\JEFF\APPLIC~1\pl_accounts.pl_acc
      [11/02/2007|22:08] C:\DOCUME~1\JEFF\APPLIC~1\PlayFirst
      [16/03/2007|13:43] C:\DOCUME~1\JEFF\APPLIC~1\PPMate
      [26/03/2008|15:02] C:\DOCUME~1\JEFF\APPLIC~1\Real
      [15/04/2006|13:27] C:\DOCUME~1\JEFF\APPLIC~1\RealArcade
      [10/07/2008|20:14] C:\DOCUME~1\JEFF\APPLIC~1\Samsung
      [23/07/2006|17:02] C:\DOCUME~1\JEFF\APPLIC~1\SecuROM
      [24/01/2008|20:55] C:\DOCUME~1\JEFF\APPLIC~1\sfdnwin.dll
      [09/09/2007|13:21] C:\DOCUME~1\JEFF\APPLIC~1\ShoppingReport
      [30/01/2006|18:13] C:\DOCUME~1\JEFF\APPLIC~1\SlySoft
      [14/01/2006|15:50] C:\DOCUME~1\JEFF\APPLIC~1\Sun
      [11/01/2006|23:00] C:\DOCUME~1\JEFF\APPLIC~1\Talkback
      [11/01/2006|23:00] C:\DOCUME~1\JEFF\APPLIC~1\Thunderbird
      [11/03/2006|17:28] C:\DOCUME~1\JEFF\APPLIC~1\Troll.options
      [05/01/2008|17:43] C:\DOCUME~1\JEFF\APPLIC~1\U3
      [30/06/2008|22:04] C:\DOCUME~1\JEFF\APPLIC~1\VMNTOOLBAR
      [08/10/2006|19:04] C:\DOCUME~1\JEFF\APPLIC~1\Wildfire
      [01/01/2008|15:17] C:\DOCUME~1\JEFF\APPLIC~1\Zylom

      [02/04/2008|17:10] C:\DOCUME~1\JONATHAN\APPLIC~1\Adobe
      [11/04/2006|17:27] C:\DOCUME~1\JONATHAN\APPLIC~1\AdobeUM
      [25/01/2007|23:34] C:\DOCUME~1\JONATHAN\APPLIC~1\Ahead
      [19/12/2005|16:51] C:\DOCUME~1\JONATHAN\APPLIC~1\desktop.ini
      [16/01/2007|20:10] C:\DOCUME~1\JONATHAN\APPLIC~1\DivX
      [24/09/2006|19:01] C:\DOCUME~1\JONATHAN\APPLIC~1\Google
      [31/05/2008|22:00] C:\DOCUME~1\JONATHAN\APPLIC~1\ItsLabel
      [11/01/2006|20:39] C:\DOCUME~1\JONATHAN\APPLIC~1\Macromedia
      [23/04/2008|13:32] C:\DOCUME~1\JONATHAN\APPLIC~1\Microsoft
      [21/01/2006|01:18] C:\DOCUME~1\JONATHAN\APPLIC~1\Mozilla
      [19/01/2007|19:53] C:\DOCUME~1\JONATHAN\APPLIC~1\Nikon
      [29/06/2008|19:14] C:\DOCUME~1\JONATHAN\APPLIC~1\one idol dupe
      [11/07/2008|01:07] C:\DOCUME~1\JONATHAN\APPLIC~1\OpenOffice.org2
      [05/02/2007|01:05] C:\DOCUME~1\JONATHAN\APPLIC~1\PPMate
      [11/02/2007|20:24] C:\DOCUME~1\JONATHAN\APPLIC~1\ppStream
      [28/03/2007|11:14] C:\DOCUME~1\JONATHAN\APPLIC~1\Real
      [08/01/2008|20:38] C:\DOCUME~1\JONATHAN\APPLIC~1\Samsung
      [02/04/2008|17:12] C:\DOCUME~1\JONATHAN\APPLIC~1\SamsungLiveUpdateConfig.ini
      [14/01/2006|02:12] C:\DOCUME~1\JONATHAN\APPLIC~1\Sun
      [18/01/2006|23:59] C:\DOCUME~1\JONATHAN\APPLIC~1\Talkback
      [18/01/2006|23:59] C:\DOCUME~1\JONATHAN\APPLIC~1\Thunderbird
      [03/07/2008|02:23] C:\DOCUME~1\JONATHAN\APPLIC~1\VMNTOOLBAR
      [01/11/2007|01:32] C:\DOCUME~1\JONATHAN\APPLIC~1\Weflirt

      [25/03/2007|21:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [19/12/2005|16:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      [16/05/2008|21:42] C:\DOCUME~1\olivier\APPLIC~1\Macromedia(2)
      [16/05/2008|21:42] C:\DOCUME~1\olivier\APPLIC~1\Microsoft(2)

      ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

      [11/07/2008 02:00][--ah-----] C:\WINDOWS\tasks\B728667597141BA5.job
      [11/07/2008 02:07][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
      [09/07/2008 20:48][--ah-----] C:\WINDOWS\tasks\SA.DAT
      [30/08/2002 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

      B728667597141BA5.job <--> c:\docume~1\jonathan\applic~1\oneido~1\64userford.exe

      ---------------[ Listing des dossiers dans C:\Program Files ]--------------

      [19/12/2005|16:06] C:\Program Files\7-Zip
      [06/07/2008|10:33] C:\Program Files\Adobe
      [22/03/2006|10:18] C:\Program Files\Ahead
      [19/02/2006|15:26] C:\Program Files\Alwil Software
      [29/12/2006|14:56] C:\Program Files\ArcSoft
      [27/02/2007|16:39] C:\Program Files\backburner 2
      [07/01/2007|16:05] C:\Program Files\BoontyGames
      [19/12/2005|16:10] C:\Program Files\CCleaner
      [23/12/2005|13:44] C:\Program Files\CDex_150
      [19/02/2006|20:08] C:\Program Files\Common Files
      [28/12/2005|21:53] C:\Program Files\directx
      [05/03/2008|11:18] C:\Program Files\Diskeeper Corporation
      [02/12/2007|17:16] C:\Program Files\DivX
      [14/10/2006|20:54] C:\Program Files\epson
      [04/03/2008|03:35] C:\Program Files\Executive Software
      [02/07/2008|15:25] C:\Program Files\Fichiers communs
      [18/02/2006|21:18] C:\Program Files\FreshDevices
      [18/02/2007|12:38] C:\Program Files\Gestionnaire_internetLB.exe
      [26/02/2006|23:00] C:\Program Files\Global.sw
      [07/10/2007|13:21] C:\Program Files\Google
      [17/05/2007|21:11] C:\Program Files\IDA
      [19/04/2008|20:37] C:\Program Files\InstallShield Installation Information
      [17/06/2008|20:00] C:\Program Files\Internet Explorer
      [11/02/2006|12:39] C:\Program Files\iPlayer Mass Storage Driver V2.0
      [06/07/2008|19:19] C:\Program Files\Java
      [24/12/2006|10:55] C:\Program Files\jv16 PowerTools
      [19/02/2006|17:37] C:\Program Files\KamaSutra
      [25/02/2007|16:04] C:\Program Files\Kjaerhus Audio
      [02/09/2007|19:16] C:\Program Files\Lavalys
      [19/12/2005|16:38] C:\Program Files\Lavasoft
      [11/07/2008|02:23] C:\Program Files\Lopxp
      [17/12/2006|17:33] C:\Program Files\Mes Jeux T‚l‚charg‚s
      [05/07/2008|19:17] C:\Program Files\Messenger Plus! Live
      [01/05/2008|18:58] C:\Program Files\MessengerDiscovery
      [16/02/2007|13:24] C:\Program Files\Micro Application
      [12/12/2007|17:45] C:\Program Files\Microsoft IntelliPoint
      [28/08/2007|20:46] C:\Program Files\Microsoft IntelliType Pro
      [19/12/2005|15:57] C:\Program Files\Movie Maker
      [10/07/2008|19:23] C:\Program Files\Mozilla Firefox
      [20/01/2006|20:34] C:\Program Files\MSN Apps
      [27/04/2008|16:44] C:\Program Files\MSN Messenger
      [01/03/2007|18:23] C:\Program Files\MuseTools
      [22/03/2006|10:22] C:\Program Files\Nero
      [19/01/2007|19:48] C:\Program Files\Nikon
      [19/12/2005|16:41] C:\Program Files\OpenOffice.org 2.0
      [12/02/2007|20:20] C:\Program Files\orange
      [01/11/2007|10:48] C:\Program Files\Picasa2
      [30/06/2008|22:07] C:\Program Files\PokerStars
      [24/08/2007|19:11] C:\Program Files\PopCap Games
      [29/12/2006|14:57] C:\Program Files\QuickTime
      [24/12/2006|10:47] C:\Program Files\regcleaner
      [26/03/2006|10:44] C:\Program Files\RngInterstitial.dll
      [11/01/2006|18:19] C:\Program Files\SAGEM
      [11/01/2006|18:20] C:\Program Files\SAGEM Wi-Fi USB 802.11g
      [01/05/2007|13:22] C:\Program Files\Samsung
      [17/01/2007|10:17] C:\Program Files\SereneScreen
      [19/09/2007|19:22] C:\Program Files\Share_Accelerator_MM
      [12/01/2007|08:32] C:\Program Files\Soliddocuments
      [17/08/2006|20:23] C:\Program Files\SpeedFan
      [01/05/2008|08:21] C:\Program Files\Spybot - Search & Destroy
      [19/12/2005|16:04] C:\Program Files\Uninstall Information
      [02/07/2006|19:16] C:\Program Files\USB Disk Win98 Driver
      [09/03/2007|20:42] C:\Program Files\videoview
      [11/07/2008|00:54] C:\Program Files\Wanadoo
      [19/02/2006|18:19] C:\Program Files\WinAce
      [14/04/2008|19:27] C:\Program Files\Windows Live
      [24/08/2006|14:39] C:\Program Files\Windows Live Toolbar
      [16/12/2006|17:26] C:\Program Files\Windows Media Connect 2
      [03/06/2007|11:06] C:\Program Files\Windows Media Player
      [19/12/2005|15:56] C:\Program Files\Windows NT
      [19/12/2005|15:58] C:\Program Files\WindowsUpdate
      [22/02/2007|13:34] C:\Program Files\WinZip
      [05/03/2006|19:27] C:\Program Files\XP Codec Pack
      [19/02/2006|04:33] C:\Program Files\XPRepairPro2006
      [03/07/2008|18:36] C:\Program Files\Zylom Games

      ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

      [10/03/2008|18:15] C:\Program Files\Fichiers communs\Adobe
      [22/03/2006|10:22] C:\Program Files\Fichiers communs\Ahead
      [02/07/2008|15:35] C:\Program Files\Fichiers communs\BitDefender
      [02/05/2008|02:56] C:\Program Files\Fichiers communs\Blizzard Entertainment
      [21/07/2006|23:59] C:\Program Files\Fichiers communs\BOONTY Shared
      [24/01/2006|21:36] C:\Program Files\Fichiers communs\ecjrpjnh
      [14/10/2006|20:57] C:\Program Files\Fichiers communs\InstallShield
      [09/05/2006|15:12] C:\Program Files\Fichiers communs\Java
      [12/03/2006|14:12] C:\Program Files\Fichiers communs\Macrovision Shared
      [14/04/2008|19:28] C:\Program Files\Fichiers communs\Microsoft Shared
      [19/12/2005|15:57] C:\Program Files\Fichiers communs\MSSoap
      [19/01/2007|19:52] C:\Program Files\Fichiers communs\muvee Technologies
      [19/01/2007|19:56] C:\Program Files\Fichiers communs\Nikon
      [19/12/2005|16:52] C:\Program Files\Fichiers communs\ODBC
      [26/03/2008|14:56] C:\Program Files\Fichiers communs\Real
      [19/12/2005|16:51] C:\Program Files\Fichiers communs\SpeechEngines
      [09/05/2007|18:32] C:\Program Files\Fichiers communs\SWF Studio
      [05/02/2007|01:04] C:\Program Files\Fichiers communs\Synacast
      [19/12/2005|15:57] C:\Program Files\Fichiers communs\System
      [14/04/2008|19:27] C:\Program Files\Fichiers communs\WindowsLiveInstaller
      [26/03/2008|14:56] C:\Program Files\Fichiers communs\xing shared

      ---------------------------[ Process ]--------------------------

      ... 37

      iexplore.exe ~ [5028]
      iexplore.exe ~ [4060]
      iexplore.exe ~ [5376]

      ----------------------[ Recherche avec S_Lop ]---------------------

      Aucun fichier / dossier Lop trouvé !

      -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\bits save.exe
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\Eq One.exe
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\One logo.exe
      C:\DOCUME~1\Arielle\APPLIC~1\oneido~1
      C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1
      C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\4armygram.exe
      C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\64 user ford.exe
      C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\atom coal open heck.exe
      C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\cjcajdgr.exe
      C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\gfcjecnb.exe
      C:\WINDOWS\Prefetch\ONE LOGO.EXE-1C2D252A.pf
      C:\WINDOWS\Prefetch\4ARMYGRAM.EXE-1C9C74E0.pf
      C:\WINDOWS\Prefetch\64 USER FORD.EXE-14AC21E7.pf
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@www.adserver5[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@adultfriendfinder[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@adin.bigpoint[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@bigpoint[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@fr1.seafight.bigpoint[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@banner.casinoking[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@casinoking[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@banner.cotedazurpalace[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@cotedazurpalace[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@adopt.euroclick[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@pacificpoker[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@partygaming.122.2o7[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@partypoker[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@fr1.seafight.bigpoint[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@32vegas[1].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@banner.32vegas[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@www.2xmoinscher[2].txt
      C:\DOCUME~1\JONATHAN\Cookies\jonathan@888[1].txt
      C:\WINDOWS\Tasks\B728667597141BA5.job

      ----------------------[ Verification du Registre ]----------------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Eggs Part"="C:\\DOCUME~1\\JONATHAN\\APPLIC~1\\ONEIDO~1\\4armygram.exe"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      --------------------[ Verification du fichier Hosts ]---------------------

      Fichier Hosts MODIFIE

      127.0.0.1 bin.errorprotector.com ## added by CiD
      127.0.0.1 br.errorsafe.com ## added by CiD
      127.0.0.1 br.winantivirus.com ## added by CiD
      127.0.0.1 br.winfixer.com ## added by CiD
      127.0.0.1 cdn.drivecleaner.com ## added by CiD
      127.0.0.1 cdn.errorsafe.com ## added by CiD
      127.0.0.1 cdn.winsoftware.com ## added by CiD
      127.0.0.1 de.errorsafe.com ## added by CiD
      127.0.0.1 de.winantivirus.com ## added by CiD
      127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
      127.0.0.1 download.cdn.errorsafe.com ## added by CiD
      127.0.0.1 download.cdn.winsoftware.com ## added by CiD
      127.0.0.1 download.errorsafe.com ## added by CiD
      127.0.0.1 download.systemdoctor.com ## added by CiD
      127.0.0.1 download.winantispyware.com ## added by CiD
      127.0.0.1 download.windrivecleaner.com ## added by CiD
      127.0.0.1 download.winfixer.com ## added by CiD
      127.0.0.1 drivecleaner.com ## added by CiD
      127.0.0.1 dynamique.drivecleaner.com ## added by CiD
      127.0.0.1 errorprotector.com ## added by CiD
      127.0.0.1 errorsafe.com ## added by CiD
      127.0.0.1 es.winantivirus.com ## added by CiD
      127.0.0.1 fr.winantivirus.com ## added by CiD
      127.0.0.1 fr.winfixer.com ## added by CiD
      127.0.0.1 go.drivecleaner.com ## added by CiD
      127.0.0.1 go.errorsafe.com ## added by CiD
      127.0.0.1 go.winantispyware.com ## added by CiD
      127.0.0.1 go.winantivirus.com ## added by CiD
      127.0.0.1 hk.winantivirus.com ## added by CiD
      127.0.0.1 instlog.errorsafe.com ## added by CiD
      127.0.0.1 instlog.winantivirus.com ## added by CiD
      127.0.0.1 instlog.winfixer.com ## added by CiD
      127.0.0.1 jsp.drivecleaner.com ## added by CiD
      127.0.0.1 kb.errorsafe.com ## added by CiD
      127.0.0.1 kb.winantivirus.com ## added by CiD
      127.0.0.1 nl.errorsafe.com ## added by CiD
      127.0.0.1 se.errorsafe.com ## added by CiD
      127.0.0.1 secure.drivecleaner.com ## added by CiD
      127.0.0.1 secure.errorsafe.com ## added by CiD
      127.0.0.1 secure.winantispam.com ## added by CiD
      127.0.0.1 secure.winantispy.com ## added by CiD
      127.0.0.1 secure.winantivirus.com ## added by CiD
      127.0.0.1 support.winantivirus.com ## added by CiD
      127.0.0.1 trial.updates.winsoftware.com ## added by CiD
      127.0.0.1 ulog.winantivirus.com ## added by CiD
      127.0.0.1 utils.errorsafe.com ## added by CiD
      127.0.0.1 utils.winantivirus.com ## added by CiD
      127.0.0.1 utils.winfixer.com ## added by CiD
      127.0.0.1 winantispyware.com ## added by CiD
      127.0.0.1 winantivirus.com ## added by CiD
      127.0.0.1 winfixer.com ## added by CiD
      127.0.0.1 winfixer2006.com ## added by CiD
      127.0.0.1 winsoftware.com ## added by CiD
      127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
      127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
      127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
      127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
      127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
      127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
      127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
      127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
      127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
      127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
      127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
      127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
      127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
      127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
      127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
      127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
      127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

      -> 120 ( 70 ## added by CiD )

      /!\ 49 Not 127.0.0.1 !!

      ----------------[ Recherche de fichiers avec Catchme ]-----------------

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-07-11 02:33:45
      Windows 5.1.2600 Service Pack 2 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------[ Recherche d'autres infections ]---------------------

      => C:\Documents and Settings\JONATHAN\Local Settings\Temporary Internet Files\Content.IE5\AUMCQTZU\AmyWineHouse-Smoking_Crack.avi_000099966[1].jpg
      => C:\Documents and Settings\JONATHAN\Local Settings\Temporary Internet Files\Content.IE5\FG2X00TV\AmyWineHouse-Smoking_Crack.avi_000109599[1].jpg
      => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\images\6-11-bonus-color-cracker.png
      => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\images\help-colorcracker.png
      => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\sounds\cached_color-cracker.wav
      => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\sounds\color-cracker.ogg


      [F:1863][D:204]-> C:\DOCUME~1\JONATHAN\LOCALS~1\Temp
      [F:2026][D:0]-> C:\DOCUME~1\JONATHAN\Cookies
      [F:24645][D:48]-> C:\DOCUME~1\JONATHAN\LOCALS~1\TEMPOR~1\content.IE5

      --------------------[ Fin du rapport a 2:35:41,93 ]----------------------
      0
  4. Utilisateur anonyme
     
    Relance Lop S&D

    * Choisis cette fois ci l'Option 2 (Suppression)
    * Ne ferme pas la fenêtre lors de la suppression !
    * Poste le rapport généré (C:\lopR.txt)

    ( Si le Bureau ne réapparaît , lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

    ensuite :

    Télécharge HijackThis ici :

    -> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

    Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)

    -> http://pageperso.aol.fr/balltrap34/Hijenr.gif

    Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

    -> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

    Post le rapport généré ici stp...

    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    -----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------

    [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
    [ USER : JONATHAN ] [ "C:\Lop SD" ] [ Selection : 2 ]
    [ 11/07/2008 | 2:47:05,23 ] [ PC : AMD2800 ]
    [ MAJ : 09-07-2008 | 21:02 ]

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\bits save.exe
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\Eq One.exe
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\One logo.exe
    Echec ! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\4armygram.exe
    Supprime! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\64 user ford.exe
    Supprime! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\atom coal open heck.exe
    Supprime! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\cjcajdgr.exe
    Supprime! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\gfcjecnb.exe
    Supprime! - C:\WINDOWS\Prefetch\ONE LOGO.EXE-1C2D252A.pf
    Supprime! - C:\WINDOWS\Prefetch\4ARMYGRAM.EXE-1C9C74E0.pf
    Supprime! - C:\WINDOWS\Prefetch\64 USER FORD.EXE-14AC21E7.pf
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@www.adserver5[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@adultfriendfinder[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@adin.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@bigpoint[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@fr1.seafight.bigpoint[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@banner.casinoking[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@casinoking[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@banner.cotedazurpalace[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@cotedazurpalace[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@adopt.euroclick[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@pacificpoker[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@partygaming.122.2o7[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@partypoker[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@32vegas[1].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@banner.32vegas[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@www.2xmoinscher[2].txt
    Supprime! - C:\DOCUME~1\JONATHAN\Cookies\jonathan@888[1].txt
    Supprime! - C:\WINDOWS\Tasks\B728667597141BA5.job
    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
    Supprime! - C:\DOCUME~1\Arielle\APPLIC~1\oneido~1
    Echec ! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1
    RestaurÚ! - Fichier Hosts

    \\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////

    Echec ! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\4armygram.exe
    Echec ! - C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1

    //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\ErreurChasseur
    Supprime! - C:\DOCUME~1\JONATHAN\APPLIC~1\vmntoolbar

    //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    -------------[ Listing des dossiers dans APPLIC~1 ]------------

    [10/03/2008|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [14/03/2006|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
    [27/02/2007|16:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
    [12/04/2008|09:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem
    [12/03/2006|12:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
    [19/12/2005|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
    [19/05/2007|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
    [31/03/2006|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EA
    [20/01/2007|02:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
    [13/02/2007|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Friends Games
    [19/12/2006|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Genimo
    [02/10/2007|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
    [05/04/2008|09:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
    [01/12/2006|08:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
    [10/07/2008|20:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
    [12/03/2006|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
    [10/06/2007|13:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MANSION
    [10/07/2008|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [23/06/2007|13:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [14/10/2006|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
    [17/01/2007|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norbyte
    [20/01/2007|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PKP_DLec.DAT
    [07/11/2007|00:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
    [29/03/2006|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
    [19/12/2005|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [12/12/2007|12:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMonitor
    [23/03/2006|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Samsung
    [12/12/2006|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
    [15/10/2006|19:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Smilebox
    [25/01/2007|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
    [02/05/2008|02:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [09/09/2007|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Starware370
    [07/01/2007|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SugarGames
    [03/02/2008|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
    [16/09/2007|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
    [16/03/2006|12:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
    [14/10/2006|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
    [20/01/2007|02:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
    [04/03/2006|20:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [24/08/2006|14:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
    [14/04/2008|19:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
    [09/08/2007|16:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

    [03/04/2006|18:40] C:\DOCUME~1\Arielle\APPLIC~1\7Wonders
    [24/02/2008|10:49] C:\DOCUME~1\Arielle\APPLIC~1\Adobe
    [03/07/2006|07:38] C:\DOCUME~1\Arielle\APPLIC~1\AdobeUM
    [02/04/2006|12:00] C:\DOCUME~1\Arielle\APPLIC~1\Ahead
    [26/03/2006|01:01] C:\DOCUME~1\Arielle\APPLIC~1\Alawar
    [03/01/2007|09:20] C:\DOCUME~1\Arielle\APPLIC~1\Angkor
    [05/11/2006|19:23] C:\DOCUME~1\Arielle\APPLIC~1\Beep Industries
    [23/11/2006|13:14] C:\DOCUME~1\Arielle\APPLIC~1\Bitbliss Studios
    [10/05/2007|06:32] C:\DOCUME~1\Arielle\APPLIC~1\Dealio
    [19/12/2005|16:51] C:\DOCUME~1\Arielle\APPLIC~1\desktop.ini
    [07/02/2007|18:57] C:\DOCUME~1\Arielle\APPLIC~1\DivX
    [08/05/2006|09:01] C:\DOCUME~1\Arielle\APPLIC~1\EA
    [12/01/2006|08:36] C:\DOCUME~1\Arielle\APPLIC~1\eConf
    [19/12/2005|21:22] C:\DOCUME~1\Arielle\APPLIC~1\eu
    [02/12/2006|12:26] C:\DOCUME~1\Arielle\APPLIC~1\funkitron
    [20/02/2008|22:41] C:\DOCUME~1\Arielle\APPLIC~1\Fuzzy Games
    [05/01/2007|09:24] C:\DOCUME~1\Arielle\APPLIC~1\Gaijin Ent
    [23/09/2006|09:26] C:\DOCUME~1\Arielle\APPLIC~1\Google
    [23/12/2005|13:44] C:\DOCUME~1\Arielle\APPLIC~1\Help
    [16/09/2006|19:15] C:\DOCUME~1\Arielle\APPLIC~1\Hulabee
    [12/04/2008|09:09] C:\DOCUME~1\Arielle\APPLIC~1\Identities
    [11/05/2006|09:06] C:\DOCUME~1\Arielle\APPLIC~1\Incredible Ink
    [23/12/2005|18:04] C:\DOCUME~1\Arielle\APPLIC~1\InterVideo
    [01/06/2008|07:35] C:\DOCUME~1\Arielle\APPLIC~1\ItsLabel
    [19/12/2005|16:38] C:\DOCUME~1\Arielle\APPLIC~1\Lavasoft
    [24/02/2008|10:49] C:\DOCUME~1\Arielle\APPLIC~1\Leadertech
    [14/03/2006|22:47] C:\DOCUME~1\Arielle\APPLIC~1\Macromedia
    [08/05/2006|08:42] C:\DOCUME~1\Arielle\APPLIC~1\Magic Match
    [08/05/2006|08:18] C:\DOCUME~1\Arielle\APPLIC~1\Microsoft
    [23/12/2005|16:35] C:\DOCUME~1\Arielle\APPLIC~1\Mozilla
    [03/05/2008|20:30] C:\DOCUME~1\Arielle\APPLIC~1\OpenOffice.org2
    [07/11/2007|00:07] C:\DOCUME~1\Arielle\APPLIC~1\PlayFirst
    [01/02/2007|07:58] C:\DOCUME~1\Arielle\APPLIC~1\Real
    [05/04/2008|06:10] C:\DOCUME~1\Arielle\APPLIC~1\SamsungLiveUpdateConfig.ini
    [21/07/2006|17:29] C:\DOCUME~1\Arielle\APPLIC~1\SecuROM
    [10/09/2007|06:16] C:\DOCUME~1\Arielle\APPLIC~1\ShoppingReport
    [13/01/2006|14:54] C:\DOCUME~1\Arielle\APPLIC~1\SlySoft
    [24/01/2006|21:11] C:\DOCUME~1\Arielle\APPLIC~1\Sun
    [23/12/2005|16:35] C:\DOCUME~1\Arielle\APPLIC~1\Talkback
    [06/04/2008|09:09] C:\DOCUME~1\Arielle\APPLIC~1\TheScruffs
    [23/12/2005|16:35] C:\DOCUME~1\Arielle\APPLIC~1\Thunderbird
    [23/12/2007|17:47] C:\DOCUME~1\Arielle\APPLIC~1\U3
    [04/07/2008|07:31] C:\DOCUME~1\Arielle\APPLIC~1\VMNTOOLBAR
    [13/08/2006|22:24] C:\DOCUME~1\Arielle\APPLIC~1\Wildfire
    [12/04/2008|09:09] C:\DOCUME~1\Arielle\APPLIC~1\Zylom

    [19/12/2005|16:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
    [05/10/2007|01:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
    [19/12/2005|15:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [02/03/2006|21:31] C:\DOCUME~1\JEFF\APPLIC~1\.gaim
    [24/03/2006|14:19] C:\DOCUME~1\JEFF\APPLIC~1\7Wonders
    [30/01/2008|13:38] C:\DOCUME~1\JEFF\APPLIC~1\Adobe
    [18/01/2007|13:14] C:\DOCUME~1\JEFF\APPLIC~1\AdobeUM
    [09/03/2007|12:20] C:\DOCUME~1\JEFF\APPLIC~1\Ahead
    [10/03/2006|15:52] C:\DOCUME~1\JEFF\APPLIC~1\Alawar
    [17/01/2007|18:25] C:\DOCUME~1\JEFF\APPLIC~1\ArcSoft
    [19/11/2006|17:46] C:\DOCUME~1\JEFF\APPLIC~1\Bitbliss Studios
    [22/11/2007|19:46] C:\DOCUME~1\JEFF\APPLIC~1\BitDownload
    [10/12/2006|11:41] C:\DOCUME~1\JEFF\APPLIC~1\Boomzap
    [09/05/2007|19:07] C:\DOCUME~1\JEFF\APPLIC~1\Dealio
    [19/12/2005|16:51] C:\DOCUME~1\JEFF\APPLIC~1\desktop.ini
    [10/12/2006|11:09] C:\DOCUME~1\JEFF\APPLIC~1\DivX
    [31/03/2006|10:56] C:\DOCUME~1\JEFF\APPLIC~1\EA
    [05/07/2007|21:26] C:\DOCUME~1\JEFF\APPLIC~1\eMule
    [31/05/2008|19:20] C:\DOCUME~1\JEFF\APPLIC~1\EoRezo
    [23/10/2006|21:56] C:\DOCUME~1\JEFF\APPLIC~1\EPSON
    [12/12/2007|12:41] C:\DOCUME~1\JEFF\APPLIC~1\erreurchasseur
    [07/09/2006|19:09] C:\DOCUME~1\JEFF\APPLIC~1\eu
    [11/03/2006|17:28] C:\DOCUME~1\JEFF\APPLIC~1\froggy_scorebox
    [15/12/2007|18:35] C:\DOCUME~1\JEFF\APPLIC~1\funkitron
    [19/12/2006|21:52] C:\DOCUME~1\JEFF\APPLIC~1\Genimo
    [21/10/2006|07:59] C:\DOCUME~1\JEFF\APPLIC~1\Google
    [11/01/2006|19:53] C:\DOCUME~1\JEFF\APPLIC~1\Help
    [01/01/2008|15:17] C:\DOCUME~1\JEFF\APPLIC~1\Identities
    [17/05/2007|20:57] C:\DOCUME~1\JEFF\APPLIC~1\Internet Download Accelerator
    [31/01/2006|21:58] C:\DOCUME~1\JEFF\APPLIC~1\InterVideo
    [31/05/2008|17:59] C:\DOCUME~1\JEFF\APPLIC~1\ItsLabel
    [20/10/2006|20:01] C:\DOCUME~1\JEFF\APPLIC~1\iWin
    [19/02/2006|12:37] C:\DOCUME~1\JEFF\APPLIC~1\Lavasoft
    [30/01/2008|13:16] C:\DOCUME~1\JEFF\APPLIC~1\Leadertech
    [29/03/2006|13:09] C:\DOCUME~1\JEFF\APPLIC~1\Macromedia
    [09/10/2006|19:02] C:\DOCUME~1\JEFF\APPLIC~1\Magic Match
    [05/03/2006|19:31] C:\DOCUME~1\JEFF\APPLIC~1\Media Player Classic
    [28/01/2007|19:13] C:\DOCUME~1\JEFF\APPLIC~1\Microsoft
    [31/03/2007|13:18] C:\DOCUME~1\JEFF\APPLIC~1\Morpheus Software
    [20/01/2006|13:38] C:\DOCUME~1\JEFF\APPLIC~1\Mozilla
    [12/04/2006|21:58] C:\DOCUME~1\JEFF\APPLIC~1\MSNInstaller
    [28/12/2007|19:27] C:\DOCUME~1\JEFF\APPLIC~1\NASA
    [19/04/2008|21:52] C:\DOCUME~1\JEFF\APPLIC~1\Nikon
    [17/01/2007|16:42] C:\DOCUME~1\JEFF\APPLIC~1\Norbyte
    [06/07/2008|18:53] C:\DOCUME~1\JEFF\APPLIC~1\OpenOffice.org2
    [11/03/2006|17:28] C:\DOCUME~1\JEFF\APPLIC~1\pl_accounts.pl_acc
    [11/02/2007|22:08] C:\DOCUME~1\JEFF\APPLIC~1\PlayFirst
    [16/03/2007|13:43] C:\DOCUME~1\JEFF\APPLIC~1\PPMate
    [26/03/2008|15:02] C:\DOCUME~1\JEFF\APPLIC~1\Real
    [15/04/2006|13:27] C:\DOCUME~1\JEFF\APPLIC~1\RealArcade
    [10/07/2008|20:14] C:\DOCUME~1\JEFF\APPLIC~1\Samsung
    [23/07/2006|17:02] C:\DOCUME~1\JEFF\APPLIC~1\SecuROM
    [24/01/2008|20:55] C:\DOCUME~1\JEFF\APPLIC~1\sfdnwin.dll
    [09/09/2007|13:21] C:\DOCUME~1\JEFF\APPLIC~1\ShoppingReport
    [30/01/2006|18:13] C:\DOCUME~1\JEFF\APPLIC~1\SlySoft
    [14/01/2006|15:50] C:\DOCUME~1\JEFF\APPLIC~1\Sun
    [11/01/2006|23:00] C:\DOCUME~1\JEFF\APPLIC~1\Talkback
    [11/01/2006|23:00] C:\DOCUME~1\JEFF\APPLIC~1\Thunderbird
    [11/03/2006|17:28] C:\DOCUME~1\JEFF\APPLIC~1\Troll.options
    [05/01/2008|17:43] C:\DOCUME~1\JEFF\APPLIC~1\U3
    [30/06/2008|22:04] C:\DOCUME~1\JEFF\APPLIC~1\VMNTOOLBAR
    [08/10/2006|19:04] C:\DOCUME~1\JEFF\APPLIC~1\Wildfire
    [01/01/2008|15:17] C:\DOCUME~1\JEFF\APPLIC~1\Zylom

    [02/04/2008|17:10] C:\DOCUME~1\JONATHAN\APPLIC~1\Adobe
    [11/04/2006|17:27] C:\DOCUME~1\JONATHAN\APPLIC~1\AdobeUM
    [25/01/2007|23:34] C:\DOCUME~1\JONATHAN\APPLIC~1\Ahead
    [19/12/2005|16:51] C:\DOCUME~1\JONATHAN\APPLIC~1\desktop.ini
    [16/01/2007|20:10] C:\DOCUME~1\JONATHAN\APPLIC~1\DivX
    [24/09/2006|19:01] C:\DOCUME~1\JONATHAN\APPLIC~1\Google
    [31/05/2008|22:00] C:\DOCUME~1\JONATHAN\APPLIC~1\ItsLabel
    [11/01/2006|20:39] C:\DOCUME~1\JONATHAN\APPLIC~1\Macromedia
    [23/04/2008|13:32] C:\DOCUME~1\JONATHAN\APPLIC~1\Microsoft
    [21/01/2006|01:18] C:\DOCUME~1\JONATHAN\APPLIC~1\Mozilla
    [19/01/2007|19:53] C:\DOCUME~1\JONATHAN\APPLIC~1\Nikon
    [11/07/2008|02:47] C:\DOCUME~1\JONATHAN\APPLIC~1\one idol dupe
    [11/07/2008|01:07] C:\DOCUME~1\JONATHAN\APPLIC~1\OpenOffice.org2
    [05/02/2007|01:05] C:\DOCUME~1\JONATHAN\APPLIC~1\PPMate
    [11/02/2007|20:24] C:\DOCUME~1\JONATHAN\APPLIC~1\ppStream
    [28/03/2007|11:14] C:\DOCUME~1\JONATHAN\APPLIC~1\Real
    [08/01/2008|20:38] C:\DOCUME~1\JONATHAN\APPLIC~1\Samsung
    [02/04/2008|17:12] C:\DOCUME~1\JONATHAN\APPLIC~1\SamsungLiveUpdateConfig.ini
    [14/01/2006|02:12] C:\DOCUME~1\JONATHAN\APPLIC~1\Sun
    [18/01/2006|23:59] C:\DOCUME~1\JONATHAN\APPLIC~1\Talkback
    [18/01/2006|23:59] C:\DOCUME~1\JONATHAN\APPLIC~1\Thunderbird
    [01/11/2007|01:32] C:\DOCUME~1\JONATHAN\APPLIC~1\Weflirt

    [25/03/2007|21:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [19/12/2005|16:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [16/05/2008|21:42] C:\DOCUME~1\olivier\APPLIC~1\Macromedia(2)
    [16/05/2008|21:42] C:\DOCUME~1\olivier\APPLIC~1\Microsoft(2)

    ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

    [11/07/2008 02:07][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
    [09/07/2008 20:48][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [30/08/2002 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

    ---------------[ Listing des dossiers dans C:\Program Files ]--------------

    [19/12/2005|16:06] C:\Program Files\7-Zip
    [06/07/2008|10:33] C:\Program Files\Adobe
    [22/03/2006|10:18] C:\Program Files\Ahead
    [19/02/2006|15:26] C:\Program Files\Alwil Software
    [29/12/2006|14:56] C:\Program Files\ArcSoft
    [27/02/2007|16:39] C:\Program Files\backburner 2
    [07/01/2007|16:05] C:\Program Files\BoontyGames
    [19/12/2005|16:10] C:\Program Files\CCleaner
    [23/12/2005|13:44] C:\Program Files\CDex_150
    [19/02/2006|20:08] C:\Program Files\Common Files
    [28/12/2005|21:53] C:\Program Files\directx
    [05/03/2008|11:18] C:\Program Files\Diskeeper Corporation
    [02/12/2007|17:16] C:\Program Files\DivX
    [14/10/2006|20:54] C:\Program Files\epson
    [04/03/2008|03:35] C:\Program Files\Executive Software
    [02/07/2008|15:25] C:\Program Files\Fichiers communs
    [18/02/2006|21:18] C:\Program Files\FreshDevices
    [18/02/2007|12:38] C:\Program Files\Gestionnaire_internetLB.exe
    [26/02/2006|23:00] C:\Program Files\Global.sw
    [07/10/2007|13:21] C:\Program Files\Google
    [17/05/2007|21:11] C:\Program Files\IDA
    [19/04/2008|20:37] C:\Program Files\InstallShield Installation Information
    [17/06/2008|20:00] C:\Program Files\Internet Explorer
    [11/02/2006|12:39] C:\Program Files\iPlayer Mass Storage Driver V2.0
    [06/07/2008|19:19] C:\Program Files\Java
    [24/12/2006|10:55] C:\Program Files\jv16 PowerTools
    [19/02/2006|17:37] C:\Program Files\KamaSutra
    [25/02/2007|16:04] C:\Program Files\Kjaerhus Audio
    [02/09/2007|19:16] C:\Program Files\Lavalys
    [19/12/2005|16:38] C:\Program Files\Lavasoft
    [11/07/2008|02:23] C:\Program Files\Lopxp
    [17/12/2006|17:33] C:\Program Files\Mes Jeux T‚l‚charg‚s
    [05/07/2008|19:17] C:\Program Files\Messenger Plus! Live
    [01/05/2008|18:58] C:\Program Files\MessengerDiscovery
    [16/02/2007|13:24] C:\Program Files\Micro Application
    [12/12/2007|17:45] C:\Program Files\Microsoft IntelliPoint
    [28/08/2007|20:46] C:\Program Files\Microsoft IntelliType Pro
    [19/12/2005|15:57] C:\Program Files\Movie Maker
    [10/07/2008|19:23] C:\Program Files\Mozilla Firefox
    [20/01/2006|20:34] C:\Program Files\MSN Apps
    [27/04/2008|16:44] C:\Program Files\MSN Messenger
    [01/03/2007|18:23] C:\Program Files\MuseTools
    [22/03/2006|10:22] C:\Program Files\Nero
    [19/01/2007|19:48] C:\Program Files\Nikon
    [19/12/2005|16:41] C:\Program Files\OpenOffice.org 2.0
    [12/02/2007|20:20] C:\Program Files\orange
    [01/11/2007|10:48] C:\Program Files\Picasa2
    [30/06/2008|22:07] C:\Program Files\PokerStars
    [24/08/2007|19:11] C:\Program Files\PopCap Games
    [29/12/2006|14:57] C:\Program Files\QuickTime
    [24/12/2006|10:47] C:\Program Files\regcleaner
    [26/03/2006|10:44] C:\Program Files\RngInterstitial.dll
    [11/01/2006|18:19] C:\Program Files\SAGEM
    [11/01/2006|18:20] C:\Program Files\SAGEM Wi-Fi USB 802.11g
    [01/05/2007|13:22] C:\Program Files\Samsung
    [17/01/2007|10:17] C:\Program Files\SereneScreen
    [19/09/2007|19:22] C:\Program Files\Share_Accelerator_MM
    [12/01/2007|08:32] C:\Program Files\Soliddocuments
    [17/08/2006|20:23] C:\Program Files\SpeedFan
    [01/05/2008|08:21] C:\Program Files\Spybot - Search & Destroy
    [19/12/2005|16:04] C:\Program Files\Uninstall Information
    [02/07/2006|19:16] C:\Program Files\USB Disk Win98 Driver
    [09/03/2007|20:42] C:\Program Files\videoview
    [11/07/2008|00:54] C:\Program Files\Wanadoo
    [19/02/2006|18:19] C:\Program Files\WinAce
    [14/04/2008|19:27] C:\Program Files\Windows Live
    [24/08/2006|14:39] C:\Program Files\Windows Live Toolbar
    [16/12/2006|17:26] C:\Program Files\Windows Media Connect 2
    [03/06/2007|11:06] C:\Program Files\Windows Media Player
    [19/12/2005|15:56] C:\Program Files\Windows NT
    [19/12/2005|15:58] C:\Program Files\WindowsUpdate
    [22/02/2007|13:34] C:\Program Files\WinZip
    [05/03/2006|19:27] C:\Program Files\XP Codec Pack
    [19/02/2006|04:33] C:\Program Files\XPRepairPro2006
    [03/07/2008|18:36] C:\Program Files\Zylom Games

    ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

    [10/03/2008|18:15] C:\Program Files\Fichiers communs\Adobe
    [22/03/2006|10:22] C:\Program Files\Fichiers communs\Ahead
    [02/07/2008|15:35] C:\Program Files\Fichiers communs\BitDefender
    [02/05/2008|02:56] C:\Program Files\Fichiers communs\Blizzard Entertainment
    [21/07/2006|23:59] C:\Program Files\Fichiers communs\BOONTY Shared
    [24/01/2006|21:36] C:\Program Files\Fichiers communs\ecjrpjnh
    [14/10/2006|20:57] C:\Program Files\Fichiers communs\InstallShield
    [09/05/2006|15:12] C:\Program Files\Fichiers communs\Java
    [12/03/2006|14:12] C:\Program Files\Fichiers communs\Macrovision Shared
    [14/04/2008|19:28] C:\Program Files\Fichiers communs\Microsoft Shared
    [19/12/2005|15:57] C:\Program Files\Fichiers communs\MSSoap
    [19/01/2007|19:52] C:\Program Files\Fichiers communs\muvee Technologies
    [19/01/2007|19:56] C:\Program Files\Fichiers communs\Nikon
    [19/12/2005|16:52] C:\Program Files\Fichiers communs\ODBC
    [26/03/2008|14:56] C:\Program Files\Fichiers communs\Real
    [19/12/2005|16:51] C:\Program Files\Fichiers communs\SpeechEngines
    [09/05/2007|18:32] C:\Program Files\Fichiers communs\SWF Studio
    [05/02/2007|01:04] C:\Program Files\Fichiers communs\Synacast
    [19/12/2005|15:57] C:\Program Files\Fichiers communs\System
    [14/04/2008|19:27] C:\Program Files\Fichiers communs\WindowsLiveInstaller
    [26/03/2008|14:56] C:\Program Files\Fichiers communs\xing shared

    ---------------------------[ Process ]--------------------------

    ... 35

    ... OK !

    ----------------------[ Recherche avec S_Lop ]---------------------

    Aucun fichier / dossier Lop trouvé !

    -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

    C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1
    C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\4armygram.exe

    ----------------------[ Verification du Registre ]----------------------

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    ..... OK !

    --------------------[ Verification du fichier Hosts ]---------------------

    Fichier Hosts PROPRE

    ----------------[ Recherche de fichiers avec Catchme ]-----------------

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-07-11 02:48:31
    Windows 5.1.2600 Service Pack 2 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------[ Recherche d'autres infections ]---------------------

    => C:\Documents and Settings\JONATHAN\Local Settings\Temporary Internet Files\Content.IE5\AUMCQTZU\AmyWineHouse-Smoking_Crack.avi_000099966[1].jpg
    => C:\Documents and Settings\JONATHAN\Local Settings\Temporary Internet Files\Content.IE5\FG2X00TV\AmyWineHouse-Smoking_Crack.avi_000109599[1].jpg
    => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\images\6-11-bonus-color-cracker.png
    => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\images\help-colorcracker.png
    => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\sounds\cached_color-cracker.wav
    => C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\Ribiba\fr-FR\sounds\color-cracker.ogg

    [F:1861][D:204]-> C:\DOCUME~1\JONATHAN\LOCALS~1\Temp
    [F:2011][D:0]-> C:\DOCUME~1\JONATHAN\Cookies
    [F:24697][D:48]-> C:\DOCUME~1\JONATHAN\LOCALS~1\TEMPOR~1\content.IE5

    --------------------[ Fin du rapport a 2:49:35,14 ]----------------------
    0
  7. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 02:55:11, on 11/07/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live Toolbar\msn_sl.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - (no file)
    O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing)
    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - (no file)
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing)
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
    O4 - HKCU\..\Run: [Error Safe] "C:\Program Files\Error Safe Free\ers.exe" /scan
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [Weflirt] "C:\Program Files\Weflirt\weflirt.exe" -background
    O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-21-1085031214-1292428093-839522115-1005\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM= (User 'ELISE')
    O4 - HKUS\S-1-5-21-1085031214-1292428093-839522115-1005\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'ELISE')
    O4 - HKUS\S-1-5-21-1085031214-1292428093-839522115-1005\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe (User 'ELISE')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
    O4 - S-1-5-21-1085031214-1292428093-839522115-1005 Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User 'ELISE')
    O4 - S-1-5-21-1085031214-1292428093-839522115-1005 User Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User 'ELISE')
    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\ELISE\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://www.ea.com/ea-studios/popcap
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F21D0FA-3F08-4086-9EF5-FD658E85F227}: NameServer = 80.10.246.3,80.10.246.130
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    0
  8. Utilisateur anonyme
     
    ok envoi le raport hijackthis

    fais ça aussi

    télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
    double-clique sur OTMoveIt.exe pour le lancer.
    copie la liste qui se trouve en gras ci-dessous,
    et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\4armygram.exe
    C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1

    clique sur MoveIt! pour lancer la suppression.
    le résultat apparaitra dans le cadre "Results".
    clique sur Exit pour fermer.
    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
    0
  9. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    File/Folder not found.
    C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1\4armygram.exe moved successfully.
    C:\DOCUME~1\JONATHAN\APPLIC~1\oneido~1 moved successfully.
    File/Folder not found.

    OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07112008_030010
    0
  10. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    C'est bien ça?
    0
  11. Utilisateur anonyme
     
    oui c est ça

    réouvre hijackthis
    fais scan only
    coche ces lignes :

    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)

    O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - (no file)
    O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing)
    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - (no file)

    O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing)

    O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')

    O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')

    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZS

    O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\ELISE\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)

    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://www.ea.com/ea-studios/popcap
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

    tu les coches toutes et tu clic sur fix checked

    ensuite :

    Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    -> Double clique combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    Avant d'utiliser ComboFix :

    -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

    -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

    - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

    -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    -> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    0
  12. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    ComboFix 08-07-10.1 - JONATHAN 2008-07-11 3:11:08.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.942 [GMT 2:00]
    Endroit: C:\Documents and Settings\JONATHAN\Bureau\ComboFix.exe
    * Création d'un nouveau point de restauration

    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\All Users\Application Data\salesmonitor
    C:\Documents and Settings\All Users\Application Data\Starware370
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\563_button_1b_def.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\563_button_1b_over.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\572_button_1b_def.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\572_button_1b_over.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\573_button_1b_def.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\573_button_1b_over.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\FindIt.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\FindItHot.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\findithotxp.png
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\finditxp.png
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\logo.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\buttons\logoxp.bmp
    C:\Documents and Settings\All Users\Application Data\Starware370\contexts\error.xml
    C:\Documents and Settings\All Users\Application Data\Starware370\contexts\related.xml
    C:\Documents and Settings\All Users\Application Data\Starware370\contexts\travel.xml
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\Config.xml
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\db\Aliases.dbs
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\db\Sites.dbs
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\dwld\WhiteList.xip
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\report\aggr_storage.xml
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\report\send_storage.xml
    C:\Documents and Settings\Arielle\Application Data\ShoppingReport\cs\res2\WhiteList.dbs
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\Config.xml
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\db\Aliases.dbs
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\db\Sites.dbs
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\dwld\WhiteList.xip
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\report\aggr_storage.xml
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\report\send_storage.xml
    C:\Documents and Settings\JEFF\Application Data\ShoppingReport\cs\res1(2)\WhiteList.dbs
    C:\WINDOWS\system32\uninstall.exe

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_WINDOWS_LOG

    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-11 to 2008-07-11 ))))))))))))))))))))))))))))))))))))
    .

    2008-07-11 03:15 . 2008-07-11 03:15 <REP> d-------- C:\WINDOWS\system32\xircom
    2008-07-11 03:15 . 2008-07-11 03:15 <REP> d-------- C:\WINDOWS\peernet
    2008-07-11 03:15 . 2008-07-11 03:15 <REP> d-------- C:\Program Files\microsoft frontpage
    2008-07-11 03:00 . 2008-07-11 03:00 <REP> d-------- C:\_OTMoveIt
    2008-07-11 02:54 . 2008-07-11 02:54 <REP> d-------- C:\Program Files\Trend Micro
    2008-07-11 02:31 . 2008-07-11 02:49 <REP> d-------- C:\Lop SD
    2008-07-11 02:23 . 2008-07-11 02:23 <REP> d-------- C:\Program Files\Lopxp
    2008-07-10 21:34 . 2008-07-10 21:34 <REP> d-------- C:\temp\WPDNSE
    2008-07-10 20:14 . 2008-07-10 20:14 <REP> d-------- C:\Documents and Settings\JEFF\Application Data\Samsung
    2008-07-08 07:20 . 2008-07-08 08:03 <REP> d-------- C:\temp\hsperfdata_Arielle
    2008-07-05 19:17 . 2008-07-05 19:17 <REP> d-------- C:\Program Files\Messenger Plus! Live
    2008-07-05 19:17 . 2008-07-10 17:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
    2008-07-03 19:33 . 2008-07-03 19:33 <REP> d-------- C:\temp\Google Toolbar
    2008-07-03 19:32 . 2008-07-03 19:32 <REP> d-------- C:\temp\_avast4_
    2008-07-03 19:31 . 2008-07-03 19:36 10,271,419 --a------ C:\WINDOWS\system32\FFHU
    2008-07-02 15:34 . 2008-07-02 15:34 121 --a------ C:\WINDOWS\bdagent.INI
    2008-07-02 15:25 . 2008-07-02 15:35 <REP> d-------- C:\Program Files\Fichiers communs\BitDefender
    2008-06-20 19:41 . 2008-06-20 19:41 247,808 --------- C:\WINDOWS\system32\DllCache\mswsock.dll
    2008-06-20 12:44 . 2008-06-20 12:44 138,368 --------- C:\WINDOWS\system32\DllCache\afd.sys
    2008-06-16 20:40 . 2008-06-16 20:40 <REP> d-------- C:\Documents and Settings\olivier\Application Data\Leadertech
    2008-06-11 08:27 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\DllCache\bthport.sys

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-07-10 23:07 --------- d-----w C:\Documents and Settings\JONATHAN\Application Data\OpenOffice.org2
    2008-07-10 22:54 --------- d-----w C:\Program Files\Wanadoo
    2008-07-06 17:19 --------- d-----w C:\Program Files\Java
    2008-07-06 16:53 --------- d-----w C:\Documents and Settings\JEFF\Application Data\OpenOffice.org2
    2008-07-04 05:31 --------- d-----w C:\Documents and Settings\Arielle\Application Data\VMNTOOLBAR
    2008-07-03 16:36 --------- d-----w C:\Program Files\Zylom Games
    2008-06-30 20:07 --------- d-----w C:\Program Files\PokerStars
    2008-06-30 20:04 --------- d-----w C:\Documents and Settings\JEFF\Application Data\VMNTOOLBAR
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    2008-06-14 17:59 272,768 ----a-w C:\WINDOWS\system32\drivers\bthport.sys
    2008-06-01 05:35 --------- d-----w C:\Documents and Settings\Arielle\Application Data\ItsLabel
    2008-05-31 20:00 --------- d-----w C:\Documents and Settings\JONATHAN\Application Data\ItsLabel
    2008-05-31 17:20 --------- d-----w C:\Documents and Settings\JEFF\Application Data\EoRezo
    2008-05-31 15:59 --------- d-----w C:\Documents and Settings\JEFF\Application Data\ItsLabel
    2008-01-24 18:55 769,536 ----a-w C:\Documents and Settings\JEFF\Application Data\sfdnwin.dll
    2007-04-10 14:19 32,768 -c--a-w C:\Documents and Settings\JONATHAN\jrvxos.exe
    2007-04-10 14:06 32,768 -c--a-w C:\Documents and Settings\JONATHAN\nmnylr.exe
    2007-02-18 10:38 7,020,185 -c--a-w C:\Program Files\Gestionnaire_internetLB.exe
    2007-01-20 12:45 20 -c-h--w C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
    2006-03-26 08:44 774,144 ----a-w C:\Program Files\RngInterstitial.dll
    2006-02-26 21:00 560 -c--a-w C:\Program Files\Global.sw
    2006-03-09 11:01 8,192 -csha-w C:\WINDOWS\o2cLicStore.bin
    2006-12-25 23:57 952 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 16:18 94208]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 16:09 15360]
    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-02 22:58 68856]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784]

    C:\DOCUME~1\JONATHAN\MENUDM~1\PROGRA~1\DMARRA~1\
    OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe [2005-09-23 14:36:42 61440]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "NoDesktopCleanupWizard"= 1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "vidc.ffds"= ffdshow.ax

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^InterVideo WinCinema Manager.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\InterVideo WinCinema Manager.lnk
    backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^NkbMonitor.exe.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\NkbMonitor.exe.lnk
    backup=C:\WINDOWS\pss\NkbMonitor.exe.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Outil de mise à jour Google.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk
    backup=C:\WINDOWS\pss\Outil de mise à jour Google.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk
    backup=C:\WINDOWS\pss\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^OLIVIER^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.0.lnk]
    path=C:\Documents and Settings\OLIVIER\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.0.lnk
    backup=C:\WINDOWS\pss\OpenOffice.org 2.0.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
    --a------ 2005-09-03 16:18 94208 C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    --a--c--- 2004-08-19 16:09 15360 C:\WINDOWS\system32\ctfmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiskeeperSystray]
    --a------ 2006-10-04 13:38 163840 C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus DX4800 Series]
    --a------ 2005-02-02 06:00 98304 C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATIADE.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
    --a------ 2006-07-08 01:15 600896 C:\Program Files\Microsoft IntelliPoint\ipoint.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype]
    --a------ 2006-07-08 01:14 576320 C:\Program Files\Microsoft IntelliType Pro\itype.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
    --a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    --a------ 2001-07-09 12:50 155648 C:\WINDOWS\system32\NeroCheck.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    --a------ 2005-12-19 21:17 98304 C:\Program Files\QuickTime\qttask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RamBoostXp]
    --a------ 2003-02-19 02:41 788992 C:\RamBoost XP\rambxpfr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    --a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    --a------ 2007-10-02 22:58 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    --a------ 2008-03-26 14:55 180269 C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
    --a------ 2005-09-14 20:44 65536 C:\Program Files\USB Disk Win98 Driver\Res.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT]
    --a------ 2004-08-23 15:50 122880 C:\PROGRA~1\Wanadoo\Shell.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH]
    --------- 2004-08-23 15:49 20480 C:\PROGRA~1\Wanadoo\Watch.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
    --a------ 2005-12-09 15:44 53248 C:\WINDOWS\system32\VTTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "WMPNetworkSvc"=3 (0x3)
    "usnjsvc"=3 (0x3)
    "LogoMedia TranslateDotNet Server"=3 (0x3)
    "gusvc"=2 (0x2)
    "GoogleDesktopManager"=3 (0x3)
    "Boonty Games"=3 (0x3)
    "C-DillaCdaC11BA"=2 (0x2)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\WINDOWS\\system32\\svchost.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "D:\\eMule\\emule.exe"=
    "C:\\Documents and Settings\\JONATHAN\\Bureau\\eMule\\emule.exe"=
    "E:\\jonathan\\eMule\\emule.exe"=

    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
    R3 StkMini;USB2.0 1.3M Web Cam;C:\WINDOWS\system32\Drivers\StkMini.sys [2005-04-06 19:27]
    R3 StkScan;USB2.0 1.3M Web Cam Still Image;C:\WINDOWS\system32\Drivers\StkScan.sys [2005-03-06 22:14]
    R3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;C:\WINDOWS\system32\DRIVERS\WlanUIG.sys [2005-06-17 11:27]
    S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 18:57]
    S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 18:58]
    S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 18:59]
    S4 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2006-07-21 23:59]
    S4 LogoMedia TranslateDotNet Server;LogoMedia TranslateDotNet Server;C:\Program Files\Power Translator\LogoMedia TranslateDotNet Server.exe []

    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    "2008-07-11 01:07:00 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
    - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
    .
    - - - - ORPHANS REMOVED - - - -

    HKCU-Run-Error Safe - C:\Program Files\Error Safe Free\ers.exe
    HKCU-Run-MessengerPlus3 - C:\Program Files\MessengerPlus! 3\MsgPlus.exe
    HKCU-Run-Weflirt - C:\Program Files\Weflirt\weflirt.exe
    MSConfigStartUp-Adobe Photo Downloader - C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
    MSConfigStartUp-Eggs Part - C:\DOCUME~1\OLIVIER\APPLIC~1\ONEIDO~1\4armygram.exe
    MSConfigStartUp-Magentic - C:\PROGRA~1\Magentic\bin\Magentic.exe
    MSConfigStartUp-MagicSpeed - C:\Program Files\SamsungODD\Magic Speed\MagicSL.exe
    MSConfigStartUp-memo site kind that - C:\Documents and Settings\All Users\Application Data\Grid Blue Memo Site\One logo.exe
    MSConfigStartUp-Name of App - C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe
    MSConfigStartUp-Cmaudio - cmicnfg.cpl
    MSConfigStartUp-VTTrayp - VTtrayp.exe

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-07-11 03:16:51
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cach‚s ...

    Balayage cach‚ autostart entries ...

    Balayage des fichiers cach‚s ...

    **************************************************************************
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\WINDOWS\system32\FTRTSVC.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    .
    **************************************************************************
    .
    Temps d'accomplissement: 2008-07-11 3:21:33 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-07-11 01:20:29

    Pre-Run: 19,367,768,064 octets libres
    Post-Run: 20,579,987,456 octets libres

    235 --- E O F --- 2008-07-10 16:54:16
    0
  13. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    Est ce que c'est terminé?
    Parce que la ça marche impeccable
    0
  14. Utilisateur anonyme
     
    double-clique sur OTMoveIt.exe pour le lancer.
    copie la liste qui se trouve en gras ci-dessous,
    et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    C:\Documents and Settings\JEFF\Application Data\EoRezo
    C:\Documents and Settings\JEFF\Application Data\ItsLabel
    C:\Documents and Settings\Arielle\Application Data\ItsLabel
    C:\Documents and Settings\JONATHAN\Application Data\ItsLabel
    C:\Program Files\Fichiers communs\BOONTY Shared

    clique sur MoveIt! pour lancer la suppression.
    le résultat apparaitra dans le cadre "Results".
    clique sur Exit pour fermer.
    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

    ENSUITE :

    Telecharge malwarebytes

    -> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

    Tu l´instale; le programme va se mettre automatiquement a jour.

    Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

    Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

    Puis click sur "rechercher".

    Laisse le scanner le pc...

    Si des elements on ete trouvés > click sur supprimer la selection.

    si il t´es demandé de redemarrer > click sur "yes".

    A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

    Copie et colle le rapport stp.

    ps : les rapport sont aussi rangé dans l onglet rapport/log

    bonne nuit a demain
    0
  15. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    File/Folder not found.
    C:\Documents and Settings\JEFF\Application Data\EoRezo\eoDesktop moved successfully.
    C:\Documents and Settings\JEFF\Application Data\EoRezo\db moved successfully.
    C:\Documents and Settings\JEFF\Application Data\EoRezo moved successfully.
    C:\Documents and Settings\JEFF\Application Data\ItsLabel\ItsTV moved successfully.
    C:\Documents and Settings\JEFF\Application Data\ItsLabel moved successfully.
    C:\Documents and Settings\Arielle\Application Data\ItsLabel\ItsTV moved successfully.
    C:\Documents and Settings\Arielle\Application Data\ItsLabel moved successfully.
    C:\Documents and Settings\JONATHAN\Application Data\ItsLabel\ItsTV moved successfully.
    C:\Documents and Settings\JONATHAN\Application Data\ItsLabel moved successfully.
    C:\Program Files\Fichiers communs\BOONTY Shared\Service moved successfully.
    C:\Program Files\Fichiers communs\BOONTY Shared moved successfully.
    File/Folder not found.

    OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07112008_034003
    0
  16. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    Malwarebytes' Anti-Malware 1.20
    Version de la base de données: 938
    Windows 5.1.2600 Service Pack 2

    04:29:42 11/07/2008
    mbam-log-7-11-2008 (04-29-42).txt

    Type de recherche: Examen complet (A:\|C:\|D:\|E:\|F:\|)
    Eléments examinés: 149691
    Temps écoulé: 43 minute(s), 16 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 5
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 7
    Fichier(s) infecté(s): 8

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\xprepairpro2006 (Rogue.XPRepairPro2007) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\bfgtoolbar (Adware.OneToolBar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    C:\Casino (Adware.Casino) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\db (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\dwld (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\report (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\res1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    D:\JEFFERSON\NERO7\keygen 6&7\Nero 6.6.0.18-Keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\Config.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    C:\Documents and Settings\ELISE\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
    0
  17. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    Merci bien.
    Bonne nuit a demain
    0
  18. Utilisateur anonyme
     
    de rien

    réouvre malewarebyte
    va sur quarantaine
    supprime tout

    ensuite refais un scan hijackthis et post le rapport

    a demain
    0
    1. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
       
      Salut,
      je scan koi dans hijackthis?
      0
  19. Utilisateur anonyme
     
    tu ouvre hijackthis
    tu clic sur do a system scan and save a logfile

    tu post le rapport stp et on termine
    0
  20. Jah_Bobby Messages postés 80 Date d'inscription   Statut Membre Dernière intervention   7
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:15:46, on 11/07/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Windows Live Toolbar\msn_sl.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F21D0FA-3F08-4086-9EF5-FD658E85F227}: NameServer = 80.10.246.3,80.10.246.130
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    0
  21. Utilisateur anonyme
     
    ok c est clean on termine

    désinstal java car pas a jours et telecharg et instal cette version :

    https://www.java.com/fr/download/manual.jsp

    a lire : http://forum.malekal.com/ftopic3452.php

    ensuite :

    regarde ceci concernant avast :

    antivir vs avast :

    -> http://forum.malekal.com/ftopic3528.php

    alors je te conseille de le desinstaller et d´installer antivir a la place

    Telecharge et instales l'antivirus Antivir Personal Edition Classic :

    ->https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html

    tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59

    Pour désinstaller Avast telecharge cet outil

    https://www.avast.com/fr-fr/uninstall-utility

    ensuite tu n as pas de parefeu :

    pare-feu gratuits

    télécharger la version gratuite de Zone alarm
    https://www.pcastuces.com/logitheque/zonealarm.htm
    TUTO
    http://securite-facile.ovh.org/zonealarm.php
    http://forum.telecharger.01net.com/forum/

    ou

    télécharger la version gratuite de Kerio
    Kerio (parefeu)
    https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
    TUTO
    https://kerio.probb.fr/
    SITE de Kerio
    https://kerio.probb.fr/

    ou

    ComodoFirewallPro 2.4 téléchargement
    http://www.personalfirewall.comodo.com/
    Tuto pour la 2.4
    https://infomars.fr/forum/index.php?s=908072e48ff7cf0359366440cb26c93f&showtopic=389
    Tuto pour la 2.4
    http://www.nordicnature.net/tutorials/comodo/cf24wiz.htm
    Attention la 3.0 est en anglais uniquement et est plus difficile a paramétrer
    Tuto pour la 3.0
    https://infomars.fr/forum/index.php?showtopic=1225

    ou

    OnlineArmor :
    téléchargement:https://www.commentcamarche.net/telecharger/ 34055356 online armor personal firewall

    tutoriels:https://forum.pcastuces.com/sujet.asp?f=25&s=35606
    :https://www.malekal.com/tutorial-online-armor-free/

    A lire :

    https://www.commentcamarche.net/contents/992-firewall-pare-feu

    ensuite :

    -> Télécharge Ccleaner (n'installe pas la barre d'outil Yahoo):

    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

    -> L´installer.

    -> Une fois installé et lancé :

    Dans la colonne de gauche, click sur :

    ->"registre" :

    Coches toutes les cases sous"l´integrité du registre", puis click en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs", tu auras un message pour sauvegarder ta base de registre, tu click "oui" puis tu recommence jusqu'à ce qu'il ne trouve plus rien.

    ps : les sauvegardes que tu auras faites, pourront etre supprimées ulterieurement si tout va bien.

    ->"nettoyeur"

    quitte ton navigateur avant de le lancer, dans les propriétés du nettoyeur de l´onglet "windows" et "applications"décoche la derniere case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" qunand il aura terminé le scan click en bas a droite sur "lancer le nettoyage" et accepte par oui.

    -> Tutoriel en image :

    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    ensuite :

    Télecharge et instal AVG anti spyware:

    http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware

    instal le et met le a jours

    ensuite lance le scan et supprime

    puis poste le rapport sur le forum stp

    ensuite :

    telecharge et instal regcleaner:

    http://www.01net.com/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/4894.html

    tutorial :

    https://forums.cnetfrance.fr

    http://www.softastuces.com/tuto/maint/regcleaner/

    et pour finir :

    * pour supprimer les outils/fix utilisés :

    Télécharge ToolsCleaner sur ton bureau.
    -->
    http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

    # Clique sur Recherche et laisse le scan agir ...
    # Clique sur Suppression pour finaliser.
    # Tu peux, si tu le souhaites, te servir des Options facultatives.
    # Clique sur Quitter pour obtenir le rapport.
    # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    et :

    Clic sur "démarrer", cliques droit sur "poste de travail", "propriétés", onglet "restauration du système"

    ¤ coche la case "désactiver la Restauration du systéme sur tous les lecteurs", puis clic sur "appliquer"
    ¤ décoche la case et clic sur "appliquer" puis "ok".

    Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

    Clic sur "démarrer", "tous les programmes", "accessoires", "outils système", "restauration du système", choisis "créer un point de restauration" nommes le " ccm" par exemple, cliques sur "créer" puis "ok".
    Voilà, maintenant le point de restauration est créé. Si un jour tu décides tu pourras revenir en arrière à la date créée.

    Tuto : http://www.libellules.ch/desactiver_restauration.php

    0
  • 1
  • 2

Discussions similaires

publicité intempestive
alost -
HelpiOS -

5 réponses
Pub intempestive sur smartphone Android.
Camitte -
Yoyo -

31 réponses
Encore les CiD
doudoudim -
doudoudim -

18 réponses
Publicités : même son coupé, elles sont à fond
Leboss104 -
loisou17 -

5 réponses
apparation intempestives de pub type site de rencontre et photo dans le même ton
Crokino -
Crokino -

6 réponses