Fenetres CID Résolu

Question

Bonjour,

Depuis quelques semaines j' ai des fenetres CId qui apparaissent et qui me dérange beaucoup. Je ne sais plus quoi faire pour m' en débarasser ... à l' aide .... je ne peut plus les voirs.

Merci de votre aide !

Den360

Destrio5 · Answer

Salut,

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde dans le tutorial :
http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

Den360 · Answer

Voici mon rapport .... merci de m' aider !

# Rapport Lopxp fait le 2008-07-21 à 20:27:08
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.06 - Maj du 05/02/2008

  Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\iexplore.exe" (2704)
"C:\Program Files\Internet Explorer\iexplore.exe" (2728)
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"  (3444)
"C:\Program Files\Internet Explorer\iexplore.exe" (560)
"C:\Program Files\Internet Explorer\iexplore.exe" (3440)
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome (2976)
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"  (2204)


========== Listing des dossiers Application Data

+- C:\Documents and Settings\Administrateur\Application Data

 2005-06-16 à 00:10:42 - Lavasoft 
 2005-06-15 à 23:03:13 - Microsoft 

+- C:\Documents and Settings\Administrateur\Local Settings\Application Data

 2006-10-16 à 23:47:49 - IM 
 2005-06-15 à 23:04:17 - Microsoft 

+- C:\Documents and Settings\All Users\Application Data

 2004-06-20 à 16:10:33 - ACD Systems
 2008-03-10 à 23:19:21 - Adobe 
 2008-01-22 à 15:00:04 - Apple Computer
 2006-06-14 à 23:59:45 - Avery 
 2006-09-13 à 23:21:59 - Google 
 2007-08-30 à 00:08:45 - MailFrontier 
 2008-07-03 à 12:45:24 - Meal Memo Free View
 2006-08-03 à 23:33:57 - Microsoft 
 2006-07-28 à 10:00:30 - QuickTime 
 2008-07-07 à 19:56:20 - Spybot - Search & Destroy
 2004-03-12 à 00:39:30 - Symantec 
 2004-11-09 à 23:13:58 - Ulead Systems
 2005-03-25 à 19:02:53 - Viewpoint 
 2006-07-23 à 22:16:41 - Windows Genuine Advantage
 2007-09-17 à 02:55:44 - Windows Live Toolbar
 2005-06-22 à 01:39:06 - wsxs 
 2007-01-06 à 01:45:55 - yahoo! 

+- C:\Documents and Settings\Denis\Application Data

 2004-07-17 à 11:57:07 - ACD Systems
 2006-09-20 à 20:04:26 - Adobe 
 2007-02-09 à 01:52:35 - AdobeUM 
 2008-06-12 à 19:34:52 - Apple Computer
 2006-09-23 à 14:55:07 - ArcSoft 
 2008-02-19 à 01:41:37 - BudgetExpress 
 2004-03-11 à 02:52:31 - Dossier de téléchargement Share-to-Web
 2004-03-11 à 02:52:31 - Dossier de téléchargement Share-to-Web 
 2006-07-28 à 10:06:50 - FotoWire 
 2006-09-14 à 15:51:50 - Google 
 2004-06-24 à 13:13:03 - Help 
 2007-06-28 à 20:53:23 - ICAClient 
 2004-03-08 à 00:28:19 - Identities 
 2007-06-05 à 23:23:03 - IPC 
 2005-06-06 à 01:36:37 - Lavasoft 
 2004-11-09 à 01:06:35 - Leadertech 
 2004-11-30 à 01:08:12 - Macromedia 
 2008-04-28 à 20:08:14 - Microsoft 
 2004-03-08 à 00:33:55 - Microsoft Web Folders
 2004-12-17 à 16:03:27 - Mozilla 
 2007-01-31 à 01:06:24 - Netscape 
 2005-05-16 à 13:13:37 - ntoc 
 2008-06-03 à 00:09:20 - OWNS LOVE OKAY
 2008-06-14 à 19:02:48 - PPTminimizer 
 2005-02-09 à 00:35:25 - Real 
 2007-05-10 à 21:25:51 - Screenshot Sender
 2004-09-10 à 01:47:25 - Sun 
 2004-11-26 à 23:56:06 - Symantec 
 2008-03-25 à 02:20:04 - U3 
 2004-11-09 à 23:14:43 - Ulead Systems

+- C:\Documents and Settings\Denis\Local Settings\Application Data

 2006-08-29 à 00:07:15 - Adobe 
 2008-02-03 à 22:36:28 - Apple Computer
 2006-09-14 à 15:47:19 - Google 
 2004-03-12 à 00:40:37 - Help 
 2004-03-13 à 17:47:34 - Identities 
 2006-12-03 à 16:18:59 - IM 
 2006-07-28 à 10:13:41 - Logitech-LS 
 2008-06-20 à 01:57:22 - Microsoft 
 2008-01-22 à 15:01:54 - OLYMPUS 
 2004-11-05 à 23:26:02 - Rio 

+- C:\Documents and Settings\Joannie\Application Data

 2008-01-24 à 21:35:23 - ACD Systems
 2004-12-12 à 21:13:28 - Adobe 
 2006-06-29 à 14:52:59 - AdobeUM 
 2004-03-15 à 03:37:48 - Dossier de téléchargement Share-to-Web
 2006-12-05 à 16:45:40 - Google 
 2004-03-08 à 01:12:23 - Help 
 2004-03-08 à 01:09:20 - Identities 
 2004-11-06 à 01:12:17 - Lavasoft 
 2004-12-12 à 21:19:55 - Macromedia 
 2007-09-17 à 02:55:38 - Microsoft 
 2008-05-25 à 11:05:31 - OWNS LOVE OKAY
 2005-04-30 à 23:35:36 - Real 
 2004-11-20 à 03:01:17 - Sun 
 2005-12-05 à 23:22:46 - Symantec 

+- C:\Documents and Settings\Joannie\Local Settings\Application Data

 2006-12-31 à 20:24:26 - Adobe 
 2006-09-13 à 23:20:24 - Google 
 2004-03-08 à 01:12:23 - Help 
 2004-03-08 à 01:13:49 - Identities 
 2006-11-19 à 21:18:14 - IM 
 2006-08-03 à 18:36:02 - Logitech-LS 
 2006-07-06 à 16:38:38 - Microsoft 

+- C:\Documents and Settings\Maryse\Application Data

 2006-03-18 à 22:18:15 - ACD Systems
 2007-02-12 à 22:05:22 - Adobe 
 2007-04-11 à 00:19:29 - AdobeUM 
 2006-11-08 à 01:25:15 - ArcSoft 
 2004-03-14 à 18:41:24 - Dossier de téléchargement Share-to-Web
 2006-09-13 à 00:48:14 - Google 
 2004-05-03 à 01:42:59 - Help 
 2004-03-08 à 00:37:45 - Identities 
 2004-11-08 à 02:46:49 - Lavasoft 
 2005-01-13 à 01:57:58 - Macromedia 
 2007-09-18 à 23:26:56 - Microsoft 
 2005-04-03 à 23:30:16 - Mozilla 
 2008-07-03 à 12:45:33 - OWNS LOVE OKAY
 2006-01-22 à 20:50:37 - Real 
 2004-09-27 à 00:45:59 - Sun 
 2005-08-02 à 16:14:26 - Symantec 
 2008-01-22 à 02:16:37 - U3 
 2004-11-28 à 17:01:19 - Ulead Systems
 2007-01-06 à 01:47:58 - yahoo! 

+- C:\Documents and Settings\Maryse\Local Settings\Application Data

 2006-08-27 à 18:53:14 - Adobe 
 2008-02-27 à 13:03:14 - Apple Computer
 2006-09-13 à 00:12:31 - Google 
 2004-05-03 à 01:42:59 - Help 
 2004-03-08 à 01:03:30 - Identities 
 2006-12-14 à 22:30:44 - IM 
 2007-03-03 à 03:04:02 - Logitech-LS 
 2008-06-14 à 01:20:12 - Microsoft 

========== Listing du dossier Program Files

+- C:\Program Files

 2005-05-22 à 20:43:20 - Access 97 Runtime
 2004-06-20 à 16:10:33 - ACD Systems
 2004-03-09 à 23:19:42 - acrobat reader
 2008-03-10 à 23:14:54 - Adobe 
 2004-04-02 à 00:44:28 - Ahead 
 2006-09-23 à 14:25:01 - ArcSoft 
 2006-06-14 à 23:59:54 - Avery Dennison
 2008-02-19 à 00:56:55 - BudgetExpress 
 2005-06-22 à 01:39:19 - C2Media 
 2005-07-02 à 11:22:29 - CCleaner 
 2005-06-19 à 02:00:12 - ComPlus Applications
 2004-03-14 à 23:22:45 - Desktop Messenger
 2008-01-22 à 15:01:31 - DIFX 
 2005-06-21 à 22:32:58 - ewido 
 2008-07-21 à 23:27:22 - Fichiers communs
 2006-08-04 à 09:15:25 - Golden 
 2007-01-27 à 12:57:44 - Google 
 2004-03-11 à 02:52:27 - Hewlett-Packard 
 2006-11-15 à 22:10:14 - IncrediMail 
 2007-01-14 à 16:11:24 - InstallShield Installation Information
 2005-11-20 à 15:59:50 - Internet Explorer
 2007-10-16 à 23:18:15 - Java 
 2005-06-06 à 01:36:26 - Lavasoft 
 2006-07-28 à 10:06:47 - Logitech 
 2008-07-22 à 00:27:14 - Lopxp 
 2005-11-20 à 16:00:55 - Messenger 
 2005-06-06 à 01:38:46 - Messenger Plus! 3
 2004-03-08 à 00:19:07 - microsoft frontpage
 2007-01-31 à 01:08:23 - Microsoft Games
 2006-07-05 à 01:39:59 - Microsoft Hardware
 2006-09-23 à 15:31:36 - Microsoft Office
 2004-12-07 à 13:33:55 - mIRC 
 2004-03-08 à 00:16:14 - Movie Maker
 2004-03-08 à 00:14:06 - MSN Gaming Zone
 2006-08-02 à 02:24:37 - MSXML 4.0
 2004-03-14 à 23:23:26 - MUSICMATCH 
 2004-08-26 à 23:19:55 - NetMeeting 
 2006-09-19 à 17:14:14 - Netscape 
 2008-05-24 à 01:36:06 - Norton SystemWorks
 2008-01-22 à 14:57:02 - OLYMPUS 
 2005-06-21 à 21:41:17 - Outlook Express
 2008-07-03 à 12:45:20 - OWNS LOVE OKAY
 2005-05-17 à 00:24:03 - PolderbitS 
 2008-01-22 à 15:01:23 - QuickTime 
 2004-12-17 à 20:29:15 - Real 
 2006-08-04 à 08:57:44 - Registry Mechanic
 2008-01-22 à 14:42:16 - RescuePRO 
 2004-11-05 à 23:24:37 - Rio 
 2005-06-19 à 02:01:27 - Services en ligne
 2005-01-25 à 01:39:14 - Siber Systems
 2008-05-28 à 21:03:57 - Spybot - Search & Destroy
 2008-06-17 à 21:11:54 - SpywareBlaster 
 2004-11-05 à 00:59:52 - StreamCast 
 2006-12-26 à 02:41:11 - Symantec 
 2005-02-12 à 19:39:22 - SymNetDrv 
 2005-03-06 à 20:56:09 - TablEdit 
 2004-08-26 à 23:17:41 - Uninstall Information
 2004-12-17 à 20:35:14 - Winamp 
 2008-01-22 à 14:59:13 - Windows Media Player
 2004-03-08 à 00:14:06 - Windows NT
 2005-06-21 à 01:47:19 - WindowsUpdate 
 2005-05-22 à 22:14:14 - Wine Cellar
 2005-11-20 à 16:06:16 - WinZip 
 2004-03-08 à 00:19:07 - xerox 
 2004-12-08 à 18:50:15 - ZeusCDRipper 
 2005-12-10 à 19:20:35 - Zone Labs

========== Tâches planifiées

A5F334F19184A9A1.job: c:\docume~1\joannie\applic~1\ownslo~1\way move keep.exe 
A864E12E918F9872.job: c:\docume~1\maryse\applic~1\ownslo~1\way move keep.exe 
Norton AntiVirus - Scan my computer.job: C:\PROGRA~1\NORTON~1\NORTON~1\NAVW32.exe /task:C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec\NORTON~1\Tasks\mycomp.sca
Norton SystemWorks One Button Checkup.job: C:\Program Files\Norton SystemWorks\OBC.exe  /CUSTOM /SCHEDULE
Symantec NetDetect.job: C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE 

========== Clés registre

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FREE VIEW GRIM SOAP"="C:\Documents and Settings\All Users\Application Data\Meal Memo Free View\fast global.exe"


========== Bloqueur popups Internet Explorer

Blocage des popups non géré par cette version du navigateur.

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========

C:\Documents and Settings\All Users\Application Data\Meal Memo Free View
C:\Documents and Settings\Denis\Application Data\OWNS LOVE OKAY
C:\Documents and Settings\Joannie\Application Data\OWNS LOVE OKAY
C:\Documents and Settings\Maryse\Application Data\OWNS LOVE OKAY
C:\Program Files\C2Media
C:\Program Files\OWNS LOVE OKAY
C:\WINDOWS	asks\A5F334F19184A9A1.job
C:\WINDOWS	asks\A864E12E918F9872.job

+- Registre:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FREE VIEW GRIM SOAP"=-




- Fin du rapport -

Destrio5 · Answer

Utilise mon programme s'il te plaît, celui-là ne gère pas le fichier Hosts.

Den360 · Answer

voici le rapport !

 --------------------\  Lop S&D 4.2.2-2  XP/Vista

   [ Windows XP (NT 5.1) Build 2600 ]
   [ USER : Denis ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 2008-07-21 | 20:37:18,57 ] [ PC : BUREAU ]
   [ MAJ : 20-07-2008 | 12:15 ]
 
   --------------------\  Listing des dossiers dans Application Data  

   [2004-12-10|11:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [2005-06-19|22:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Install.dat
   [2005-06-15|20:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
   [2005-06-15|19:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

   [2004-06-20|12:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
   [2008-03-10|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [2008-01-22|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [2006-06-14|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avery
   [2005-06-18|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [2006-09-13|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [2007-08-29|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
   [2008-07-03|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Meal Memo Free View
   [2006-08-03|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [2008-06-12|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [2006-07-28|06:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [2008-07-07|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [2004-03-11|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [2004-11-09|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [2005-03-25|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [2006-07-23|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [2007-09-16|22:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [2005-06-21|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wsxs
   [2007-01-05|21:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!

   [2005-06-18|21:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [2004-03-07|20:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [2004-07-17|07:57] C:\DOCUME~1\Denis\APPLIC~1\ACD Systems
   [2006-09-20|16:04] C:\DOCUME~1\Denis\APPLIC~1\Adobe
   [2007-02-08|21:52] C:\DOCUME~1\Denis\APPLIC~1\AdobeUM
   [2008-06-12|15:34] C:\DOCUME~1\Denis\APPLIC~1\Apple Computer
   [2006-09-23|10:55] C:\DOCUME~1\Denis\APPLIC~1\ArcSoft
   [2008-02-18|21:41] C:\DOCUME~1\Denis\APPLIC~1\BudgetExpress
   [2004-03-07|13:59] C:\DOCUME~1\Denis\APPLIC~1\desktop.ini
   [2004-03-10|22:52] C:\DOCUME~1\Denis\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [2004-03-10|22:52] C:\DOCUME~1\Denis\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [2006-07-28|06:06] C:\DOCUME~1\Denis\APPLIC~1\FotoWire
   [2006-09-14|11:51] C:\DOCUME~1\Denis\APPLIC~1\Google
   [2004-06-24|09:13] C:\DOCUME~1\Denis\APPLIC~1\Help
   [2007-06-28|16:53] C:\DOCUME~1\Denis\APPLIC~1\ICAClient
   [2004-03-07|20:28] C:\DOCUME~1\Denis\APPLIC~1\Identities
   [2007-06-05|19:23] C:\DOCUME~1\Denis\APPLIC~1\IPC
   [2005-06-05|21:36] C:\DOCUME~1\Denis\APPLIC~1\Lavasoft
   [2004-11-08|21:06] C:\DOCUME~1\Denis\APPLIC~1\Leadertech
   [2004-11-29|21:08] C:\DOCUME~1\Denis\APPLIC~1\Macromedia
   [2008-04-28|16:08] C:\DOCUME~1\Denis\APPLIC~1\Microsoft
   [2004-03-07|20:33] C:\DOCUME~1\Denis\APPLIC~1\Microsoft Web Folders
   [2004-12-17|12:03] C:\DOCUME~1\Denis\APPLIC~1\Mozilla
   [2007-01-30|21:06] C:\DOCUME~1\Denis\APPLIC~1\Netscape
   [2005-05-16|09:13] C:\DOCUME~1\Denis\APPLIC~1
toc
   [2008-06-02|20:09] C:\DOCUME~1\Denis\APPLIC~1\OWNS LOVE OKAY
   [2008-06-14|15:02] C:\DOCUME~1\Denis\APPLIC~1\PPTminimizer
   [2005-02-08|20:35] C:\DOCUME~1\Denis\APPLIC~1\Real
   [2007-05-10|17:25] C:\DOCUME~1\Denis\APPLIC~1\Screenshot Sender
   [2004-09-09|21:47] C:\DOCUME~1\Denis\APPLIC~1\Sun
   [2004-11-26|19:56] C:\DOCUME~1\Denis\APPLIC~1\Symantec
   [2004-12-09|21:00] C:\DOCUME~1\Denis\APPLIC~1	vmcwrd.dll
   [2004-12-09|20:43] C:\DOCUME~1\Denis\APPLIC~1	vmknwrd.dll
   [2008-03-24|22:20] C:\DOCUME~1\Denis\APPLIC~1\U3
   [2004-11-09|19:14] C:\DOCUME~1\Denis\APPLIC~1\Ulead Systems

   [2008-01-24|17:35] C:\DOCUME~1\Joannie\APPLIC~1\ACD Systems
   [2004-12-12|17:13] C:\DOCUME~1\Joannie\APPLIC~1\Adobe
   [2006-06-29|10:52] C:\DOCUME~1\Joannie\APPLIC~1\AdobeUM
   [2004-03-07|13:59] C:\DOCUME~1\Joannie\APPLIC~1\desktop.ini
   [2004-03-14|23:37] C:\DOCUME~1\Joannie\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [2006-12-05|12:45] C:\DOCUME~1\Joannie\APPLIC~1\Google
   [2004-03-07|21:12] C:\DOCUME~1\Joannie\APPLIC~1\Help
   [2004-03-07|21:09] C:\DOCUME~1\Joannie\APPLIC~1\Identities
   [2004-11-05|21:12] C:\DOCUME~1\Joannie\APPLIC~1\Lavasoft
   [2004-12-12|17:19] C:\DOCUME~1\Joannie\APPLIC~1\Macromedia
   [2007-09-16|22:55] C:\DOCUME~1\Joannie\APPLIC~1\Microsoft
   [2008-05-25|07:05] C:\DOCUME~1\Joannie\APPLIC~1\OWNS LOVE OKAY
   [2005-04-30|19:35] C:\DOCUME~1\Joannie\APPLIC~1\Real
   [2004-11-19|23:01] C:\DOCUME~1\Joannie\APPLIC~1\Sun
   [2005-12-05|19:22] C:\DOCUME~1\Joannie\APPLIC~1\Symantec

   [2004-03-09|22:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [2006-03-18|18:18] C:\DOCUME~1\Maryse\APPLIC~1\ACD Systems
   [2007-02-12|18:05] C:\DOCUME~1\Maryse\APPLIC~1\Adobe
   [2007-04-10|20:19] C:\DOCUME~1\Maryse\APPLIC~1\AdobeUM
   [2006-11-07|21:25] C:\DOCUME~1\Maryse\APPLIC~1\ArcSoft
   [2004-03-07|13:59] C:\DOCUME~1\Maryse\APPLIC~1\desktop.ini
   [2004-11-07|22:36] C:\DOCUME~1\Maryse\APPLIC~1\dm.ini
   [2004-03-14|14:41] C:\DOCUME~1\Maryse\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [2006-09-12|20:48] C:\DOCUME~1\Maryse\APPLIC~1\Google
   [2004-05-02|21:42] C:\DOCUME~1\Maryse\APPLIC~1\Help
   [2004-03-07|20:37] C:\DOCUME~1\Maryse\APPLIC~1\Identities
   [2004-11-07|22:46] C:\DOCUME~1\Maryse\APPLIC~1\Lavasoft
   [2005-01-12|21:57] C:\DOCUME~1\Maryse\APPLIC~1\Macromedia
   [2007-09-18|19:26] C:\DOCUME~1\Maryse\APPLIC~1\Microsoft
   [2005-04-03|19:30] C:\DOCUME~1\Maryse\APPLIC~1\Mozilla
   [2008-07-03|08:45] C:\DOCUME~1\Maryse\APPLIC~1\OWNS LOVE OKAY
   [2006-01-22|16:50] C:\DOCUME~1\Maryse\APPLIC~1\Real
   [2004-09-26|20:45] C:\DOCUME~1\Maryse\APPLIC~1\Sun
   [2005-08-02|12:14] C:\DOCUME~1\Maryse\APPLIC~1\Symantec
   [2008-01-21|22:16] C:\DOCUME~1\Maryse\APPLIC~1\U3
   [2004-11-28|13:01] C:\DOCUME~1\Maryse\APPLIC~1\Ulead Systems
   [2007-01-05|21:47] C:\DOCUME~1\Maryse\APPLIC~1\yahoo!

   [2004-03-07|20:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [2008-07-21 20:00][--ah-c---] C:\WINDOWS	asks\A864E12E918F9872.job
   [2008-05-25 18:00][--ah-c---] C:\WINDOWS	asks\A5F334F19184A9A1.job
   [2008-07-21 17:59][--a--c---] C:\WINDOWS	asks\Symantec NetDetect.job
   [2008-06-13 20:03][--a--c---] C:\WINDOWS	asks\Norton AntiVirus - Scan my computer.job
   [2008-06-13 19:29][--a--c---] C:\WINDOWS	asks\Norton SystemWorks One Button Checkup.job
   [2008-07-21 14:09][--ah-c---] C:\WINDOWS	asks\SA.DAT
   [2001-08-28 08:00][-r-h-c---] C:\WINDOWS	asks\desktop.ini

   ( A5F334F19184A9A1.job )=( c:\docume~1\joannie\applic~1\ownslo~1\waymovekeep.exe )
   ( A864E12E918F9872.job )=( c:\docume~1\maryse\applic~1\ownslo~1\waymovekeep.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [2005-05-22|16:43] C:\Program Files\Access 97 Runtime
   [2004-06-20|12:10] C:\Program Files\ACD Systems
   [2004-03-09|19:19] C:\Program Files\acrobat reader
   [2008-03-10|19:14] C:\Program Files\Adobe
   [2004-04-01|20:44] C:\Program Files\Ahead
   [2006-09-23|10:25] C:\Program Files\ArcSoft
   [2006-06-14|19:59] C:\Program Files\Avery Dennison
   [2008-02-18|20:56] C:\Program Files\BudgetExpress
   [2005-06-21|21:39] C:\Program Files\C2Media
   [2005-07-02|07:22] C:\Program Files\CCleaner
   [2005-06-18|22:00] C:\Program Files\ComPlus Applications
   [2004-03-14|19:22] C:\Program Files\Desktop Messenger
   [2008-01-22|11:01] C:\Program Files\DIFX
   [2005-06-21|18:32] C:\Program Files\ewido
   [2008-07-21|19:27] C:\Program Files\Fichiers communs
   [2006-08-04|05:15] C:\Program Files\Golden
   [2007-01-27|08:57] C:\Program Files\Google
   [2004-03-10|22:52] C:\Program Files\Hewlett-Packard
   [2006-11-15|18:10] C:\Program Files\IncrediMail
   [2007-01-14|12:11] C:\Program Files\InstallShield Installation Information
   [2005-11-20|11:59] C:\Program Files\Internet Explorer
   [2007-10-16|19:18] C:\Program Files\Java
   [2005-06-05|21:36] C:\Program Files\Lavasoft
   [2006-07-28|06:06] C:\Program Files\Logitech
   [2008-07-21|20:27] C:\Program Files\Lopxp
   [2005-11-20|12:00] C:\Program Files\Messenger
   [2005-06-05|21:38] C:\Program Files\Messenger Plus! 3
   [2004-03-07|20:19] C:\Program Files\microsoft frontpage
   [2007-01-30|21:08] C:\Program Files\Microsoft Games
   [2006-07-04|21:39] C:\Program Files\Microsoft Hardware
   [2006-09-23|11:31] C:\Program Files\Microsoft Office
   [2004-12-07|09:33] C:\Program Files\mIRC
   [2004-03-07|20:16] C:\Program Files\Movie Maker
   [2004-03-07|20:14] C:\Program Files\MSN Gaming Zone
   [2006-08-01|22:24] C:\Program Files\MSXML 4.0
   [2004-03-14|19:23] C:\Program Files\MUSICMATCH
   [2004-08-26|19:19] C:\Program Files\NetMeeting
   [2006-09-19|13:14] C:\Program Files\Netscape
   [2008-05-23|21:36] C:\Program Files\Norton SystemWorks
   [2008-01-22|10:57] C:\Program Files\OLYMPUS
   [2005-06-21|17:41] C:\Program Files\Outlook Express
   [2008-07-03|08:45] C:\Program Files\OWNS LOVE OKAY
   [2005-05-16|20:24] C:\Program Files\PolderbitS
   [2008-01-22|11:01] C:\Program Files\QuickTime
   [2004-12-17|16:29] C:\Program Files\Real
   [2006-08-04|04:57] C:\Program Files\Registry Mechanic
   [2008-01-22|10:42] C:\Program Files\RescuePRO
   [2004-11-05|19:24] C:\Program Files\Rio
   [2005-06-18|22:01] C:\Program Files\Services en ligne
   [2005-01-24|21:39] C:\Program Files\Siber Systems
   [2008-05-28|17:03] C:\Program Files\Spybot - Search & Destroy
   [2008-06-17|17:11] C:\Program Files\SpywareBlaster
   [2004-11-04|20:59] C:\Program Files\StreamCast
   [2006-12-25|22:41] C:\Program Files\Symantec
   [2005-02-12|15:39] C:\Program Files\SymNetDrv
   [2005-03-06|16:56] C:\Program Files\TablEdit
   [2004-08-26|19:17] C:\Program Files\Uninstall Information
   [2004-12-17|16:35] C:\Program Files\Winamp
   [2008-01-22|10:59] C:\Program Files\Windows Media Player
   [2004-03-07|20:14] C:\Program Files\Windows NT
   [2005-06-20|21:47] C:\Program Files\WindowsUpdate
   [2005-05-22|18:14] C:\Program Files\Wine Cellar
   [2005-11-20|12:06] C:\Program Files\WinZip
   [2004-03-07|20:19] C:\Program Files\xerox
   [2004-12-08|14:50] C:\Program Files\ZeusCDRipper
   [2005-12-10|15:20] C:\Program Files\Zone Labs

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [2004-06-20|12:10] C:\Program Files\Fichiers communs\ACD Systems
   [2008-03-10|19:14] C:\Program Files\Fichiers communs\Adobe
   [2004-04-01|20:44] C:\Program Files\Fichiers communs\Ahead
   [2004-03-07|20:35] C:\Program Files\Fichiers communs\Designer
   [2006-07-28|06:06] C:\Program Files\Fichiers communs\FotoWire
   [2004-11-05|19:24] C:\Program Files\Fichiers communs\Gracenote
   [2004-03-10|22:52] C:\Program Files\Fichiers communs\Hewlett-Packard
   [2006-06-14|19:58] C:\Program Files\Fichiers communs\InstallShield
   [2004-09-09|21:46] C:\Program Files\Fichiers communs\Java
   [2006-07-28|06:03] C:\Program Files\Fichiers communs\Logitech
   [2008-06-05|16:22] C:\Program Files\Fichiers communs\Microsoft Shared
   [2005-03-15|10:04] C:\Program Files\Fichiers communs\mozilla.org
   [2005-03-11|14:32] C:\Program Files\Fichiers communs\MSSoap
   [2004-03-07|14:00] C:\Program Files\Fichiers communs\ODBC
   [2005-02-08|20:32] C:\Program Files\Fichiers communs\Real
   [2004-03-07|20:15] C:\Program Files\Fichiers communs\Services
   [2004-03-07|20:46] C:\Program Files\Fichiers communs\Sierra On-Line
   [2004-03-07|14:00] C:\Program Files\Fichiers communs\SpeechEngines
   [2008-07-21|19:28] C:\Program Files\Fichiers communs\Symantec Shared
   [2005-06-21|17:41] C:\Program Files\Fichiers communs\System
   [2004-11-09|19:11] C:\Program Files\Fichiers communs\Ulead Systems
   [2005-06-21|21:39] C:\Program Files\Fichiers communs\Uninstall Information
   [2005-02-08|20:32] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 70 Processus )

   IEXPLORE.EXE ~ [2260]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\Denis\APPLIC~1\ownslo~1
   C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1
   C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\BendDartStore.exe
   C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\jwhkwdsk.exe
   C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\The Copy Idle Program.exe
   C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\way move keep.exe
   C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1
   C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1\BendDartStore.exe
   C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1imtoves.exe
   C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1\The Copy Idle Program.exe
   C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1\way move keep.exe
   C:\Program Files\ownslo~1
   C:\Program Files\C2Media
   C:\DOCUME~1\Denis\Cookies\denis@adopt.euroclick[2].txt
   C:\WINDOWS\Tasks\A5F334F19184A9A1.job
   C:\WINDOWS\Tasks\A864E12E918F9872.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts MODIFIE

   127.0.0.1 bin.errorprotector.com ## added by CiD
   127.0.0.1 br.errorsafe.com ## added by CiD
   127.0.0.1 br.winantivirus.com ## added by CiD
   127.0.0.1 br.winfixer.com ## added by CiD
   127.0.0.1 cdn.drivecleaner.com ## added by CiD
   127.0.0.1 cdn.errorsafe.com ## added by CiD
   127.0.0.1 cdn.winsoftware.com ## added by CiD
   127.0.0.1 de.errorsafe.com ## added by CiD
   127.0.0.1 de.winantivirus.com ## added by CiD
   127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
   127.0.0.1 download.cdn.errorsafe.com ## added by CiD
   127.0.0.1 download.cdn.winsoftware.com ## added by CiD
   127.0.0.1 download.errorsafe.com ## added by CiD
   127.0.0.1 download.systemdoctor.com ## added by CiD
   127.0.0.1 download.winantispyware.com ## added by CiD
   127.0.0.1 download.windrivecleaner.com ## added by CiD
   127.0.0.1 download.winfixer.com ## added by CiD
   127.0.0.1 drivecleaner.com ## added by CiD
   127.0.0.1 dynamique.drivecleaner.com ## added by CiD
   127.0.0.1 errorprotector.com ## added by CiD
   127.0.0.1 errorsafe.com ## added by CiD
   127.0.0.1 es.winantivirus.com ## added by CiD
   127.0.0.1 fr.winantivirus.com ## added by CiD
   127.0.0.1 fr.winfixer.com ## added by CiD
   127.0.0.1 go.drivecleaner.com ## added by CiD
   127.0.0.1 go.errorsafe.com ## added by CiD
   127.0.0.1 go.winantispyware.com ## added by CiD
   127.0.0.1 go.winantivirus.com ## added by CiD
   127.0.0.1 hk.winantivirus.com ## added by CiD
   127.0.0.1 instlog.errorsafe.com ## added by CiD
   127.0.0.1 instlog.winantivirus.com ## added by CiD
   127.0.0.1 instlog.winfixer.com ## added by CiD
   127.0.0.1 jsp.drivecleaner.com ## added by CiD
   127.0.0.1 kb.errorsafe.com ## added by CiD
   127.0.0.1 kb.winantivirus.com ## added by CiD
   127.0.0.1 nl.errorsafe.com ## added by CiD
   127.0.0.1 se.errorsafe.com ## added by CiD
   127.0.0.1 secure.drivecleaner.com ## added by CiD
   127.0.0.1 secure.errorsafe.com ## added by CiD
   127.0.0.1 secure.winantispam.com ## added by CiD
   127.0.0.1 secure.winantispy.com ## added by CiD
   127.0.0.1 secure.winantivirus.com ## added by CiD
   127.0.0.1 support.winantivirus.com ## added by CiD
   127.0.0.1 trial.updates.winsoftware.com ## added by CiD
   127.0.0.1 ulog.winantivirus.com ## added by CiD
   127.0.0.1 utils.errorsafe.com ## added by CiD
   127.0.0.1 utils.winantivirus.com ## added by CiD
   127.0.0.1 utils.winfixer.com ## added by CiD
   127.0.0.1 winantispyware.com ## added by CiD
   127.0.0.1 winantivirus.com ## added by CiD
   127.0.0.1 winfixer.com ## added by CiD
   127.0.0.1 winfixer2006.com ## added by CiD
   127.0.0.1 winsoftware.com ## added by CiD
   127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
   127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
   127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

   -> 8506 [ 70 ## added by CiD ]

   /!\ 1 Not 127.0.0.1  !!

   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-21 20:38:22
   Windows 5.1.2600  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 1
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   => C:\DOCUME~1\Denis\Favoris\download\AllSeek.iNFO  The Ultimate Cracks Search Engine.url
   => C:\DOCUME~1\Denis\Favoris\download\CRACKFOUND - SERIALS - CRACKS - KEYS - KEYGENS - ALL THE UNDERGROUND IS HERE.url
   => C:\DOCUME~1\Denis\Local Settings\Application Data\IM\Animation\firecracker.ima
   => C:\DOCUME~1\Denis\Local Settings\Application Data\IM\Letter\cracking_crackers.imf
   => C:\DOCUME~1\Denis\Local Settings\Application Data\IM\Runtime\EmoticonCenter\cracker.gif
   => C:\DOCUME~1\Denis\Favoris\download\CRACKFOUND - SERIALS - CRACKS - KEYS - KEYGENS - ALL THE UNDERGROUND IS HERE.url


   [F:5][D:2]-> C:\DOCUME~1\Denis\LOCALS~1\Temp
   [F:13][D:0]-> C:\DOCUME~1\Denis\Cookies
   [F:467][D:10]-> C:\DOCUME~1\Denis\LOCALS~1\TEMPOR~1\content.IE5

   --------------------\  Fin du rapport a 20:40:34,67

Destrio5 · Answer

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Den360 · Answer

Rapport avec option supperssion !


   --------------------\  Lop S&D 4.2.2-2  XP/Vista

   [ Windows XP (NT 5.1) Build 2600 ]
   [ USER : Denis ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 2008-07-21 | 20:47:27,70 ] [ PC : BUREAU ]
   [ MAJ : 20-07-2008 | 12:15 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\BendDartStore.exe
   Supprime! - C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\jwhkwdsk.exe
   Supprime! - C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\The Copy Idle Program.exe
   Supprime! - C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1\way move keep.exe
   Supprime! - C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1\BendDartStore.exe
   Supprime! - C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1imtoves.exe
   Supprime! - C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1\The Copy Idle Program.exe
   Supprime! - C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1\way move keep.exe
   Supprime! - C:\DOCUME~1\Denis\Cookies\denis@adopt.euroclick[2].txt
   Supprime! - C:\WINDOWS\Tasks\A5F334F19184A9A1.job 
   Supprime! - C:\WINDOWS\Tasks\A864E12E918F9872.job 
   Supprime! - C:\DOCUME~1\Denis\APPLIC~1\ownslo~1
   Supprime! - C:\DOCUME~1\Joannie\APPLIC~1\ownslo~1
   Supprime! - C:\DOCUME~1\Maryse\APPLIC~1\ownslo~1
   Supprime! - C:\Program Files\ownslo~1
   Supprime! - C:\Program Files\C2Media
   RestaurÚ! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\

 
   --------------------\  Listing des dossiers dans Application Data  

   [2004-12-10|11:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [2005-06-19|22:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Install.dat
   [2005-06-15|20:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
   [2005-06-15|19:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

   [2004-06-20|12:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
   [2008-03-10|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [2008-01-22|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [2006-06-14|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avery
   [2005-06-18|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [2006-09-13|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [2007-08-29|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
   [2008-07-03|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Meal Memo Free View
   [2006-08-03|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [2008-06-12|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [2006-07-28|06:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [2008-07-07|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [2004-03-11|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [2004-11-09|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [2006-07-23|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [2007-09-16|22:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [2005-06-21|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wsxs
   [2007-01-05|21:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!

   [2005-06-18|21:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [2004-03-07|20:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [2004-07-17|07:57] C:\DOCUME~1\Denis\APPLIC~1\ACD Systems
   [2006-09-20|16:04] C:\DOCUME~1\Denis\APPLIC~1\Adobe
   [2007-02-08|21:52] C:\DOCUME~1\Denis\APPLIC~1\AdobeUM
   [2008-06-12|15:34] C:\DOCUME~1\Denis\APPLIC~1\Apple Computer
   [2006-09-23|10:55] C:\DOCUME~1\Denis\APPLIC~1\ArcSoft
   [2008-02-18|21:41] C:\DOCUME~1\Denis\APPLIC~1\BudgetExpress
   [2004-03-07|13:59] C:\DOCUME~1\Denis\APPLIC~1\desktop.ini
   [2004-03-10|22:52] C:\DOCUME~1\Denis\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [2004-03-10|22:52] C:\DOCUME~1\Denis\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [2006-07-28|06:06] C:\DOCUME~1\Denis\APPLIC~1\FotoWire
   [2006-09-14|11:51] C:\DOCUME~1\Denis\APPLIC~1\Google
   [2004-06-24|09:13] C:\DOCUME~1\Denis\APPLIC~1\Help
   [2007-06-28|16:53] C:\DOCUME~1\Denis\APPLIC~1\ICAClient
   [2004-03-07|20:28] C:\DOCUME~1\Denis\APPLIC~1\Identities
   [2007-06-05|19:23] C:\DOCUME~1\Denis\APPLIC~1\IPC
   [2005-06-05|21:36] C:\DOCUME~1\Denis\APPLIC~1\Lavasoft
   [2004-11-08|21:06] C:\DOCUME~1\Denis\APPLIC~1\Leadertech
   [2004-11-29|21:08] C:\DOCUME~1\Denis\APPLIC~1\Macromedia
   [2008-04-28|16:08] C:\DOCUME~1\Denis\APPLIC~1\Microsoft
   [2004-03-07|20:33] C:\DOCUME~1\Denis\APPLIC~1\Microsoft Web Folders
   [2004-12-17|12:03] C:\DOCUME~1\Denis\APPLIC~1\Mozilla
   [2007-01-30|21:06] C:\DOCUME~1\Denis\APPLIC~1\Netscape
   [2005-05-16|09:13] C:\DOCUME~1\Denis\APPLIC~1
toc
   [2008-06-14|15:02] C:\DOCUME~1\Denis\APPLIC~1\PPTminimizer
   [2005-02-08|20:35] C:\DOCUME~1\Denis\APPLIC~1\Real
   [2007-05-10|17:25] C:\DOCUME~1\Denis\APPLIC~1\Screenshot Sender
   [2004-09-09|21:47] C:\DOCUME~1\Denis\APPLIC~1\Sun
   [2004-11-26|19:56] C:\DOCUME~1\Denis\APPLIC~1\Symantec
   [2004-12-09|21:00] C:\DOCUME~1\Denis\APPLIC~1	vmcwrd.dll
   [2004-12-09|20:43] C:\DOCUME~1\Denis\APPLIC~1	vmknwrd.dll
   [2008-03-24|22:20] C:\DOCUME~1\Denis\APPLIC~1\U3
   [2004-11-09|19:14] C:\DOCUME~1\Denis\APPLIC~1\Ulead Systems

   [2008-01-24|17:35] C:\DOCUME~1\Joannie\APPLIC~1\ACD Systems
   [2004-12-12|17:13] C:\DOCUME~1\Joannie\APPLIC~1\Adobe
   [2006-06-29|10:52] C:\DOCUME~1\Joannie\APPLIC~1\AdobeUM
   [2004-03-07|13:59] C:\DOCUME~1\Joannie\APPLIC~1\desktop.ini
   [2004-03-14|23:37] C:\DOCUME~1\Joannie\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [2006-12-05|12:45] C:\DOCUME~1\Joannie\APPLIC~1\Google
   [2004-03-07|21:12] C:\DOCUME~1\Joannie\APPLIC~1\Help
   [2004-03-07|21:09] C:\DOCUME~1\Joannie\APPLIC~1\Identities
   [2004-11-05|21:12] C:\DOCUME~1\Joannie\APPLIC~1\Lavasoft
   [2004-12-12|17:19] C:\DOCUME~1\Joannie\APPLIC~1\Macromedia
   [2007-09-16|22:55] C:\DOCUME~1\Joannie\APPLIC~1\Microsoft
   [2005-04-30|19:35] C:\DOCUME~1\Joannie\APPLIC~1\Real
   [2004-11-19|23:01] C:\DOCUME~1\Joannie\APPLIC~1\Sun
   [2005-12-05|19:22] C:\DOCUME~1\Joannie\APPLIC~1\Symantec

   [2004-03-09|22:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [2006-03-18|18:18] C:\DOCUME~1\Maryse\APPLIC~1\ACD Systems
   [2007-02-12|18:05] C:\DOCUME~1\Maryse\APPLIC~1\Adobe
   [2007-04-10|20:19] C:\DOCUME~1\Maryse\APPLIC~1\AdobeUM
   [2006-11-07|21:25] C:\DOCUME~1\Maryse\APPLIC~1\ArcSoft
   [2004-03-07|13:59] C:\DOCUME~1\Maryse\APPLIC~1\desktop.ini
   [2004-11-07|22:36] C:\DOCUME~1\Maryse\APPLIC~1\dm.ini
   [2004-03-14|14:41] C:\DOCUME~1\Maryse\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [2006-09-12|20:48] C:\DOCUME~1\Maryse\APPLIC~1\Google
   [2004-05-02|21:42] C:\DOCUME~1\Maryse\APPLIC~1\Help
   [2004-03-07|20:37] C:\DOCUME~1\Maryse\APPLIC~1\Identities
   [2004-11-07|22:46] C:\DOCUME~1\Maryse\APPLIC~1\Lavasoft
   [2005-01-12|21:57] C:\DOCUME~1\Maryse\APPLIC~1\Macromedia
   [2007-09-18|19:26] C:\DOCUME~1\Maryse\APPLIC~1\Microsoft
   [2005-04-03|19:30] C:\DOCUME~1\Maryse\APPLIC~1\Mozilla
   [2006-01-22|16:50] C:\DOCUME~1\Maryse\APPLIC~1\Real
   [2004-09-26|20:45] C:\DOCUME~1\Maryse\APPLIC~1\Sun
   [2005-08-02|12:14] C:\DOCUME~1\Maryse\APPLIC~1\Symantec
   [2008-01-21|22:16] C:\DOCUME~1\Maryse\APPLIC~1\U3
   [2004-11-28|13:01] C:\DOCUME~1\Maryse\APPLIC~1\Ulead Systems
   [2007-01-05|21:47] C:\DOCUME~1\Maryse\APPLIC~1\yahoo!

   [2004-03-07|20:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [2008-07-21 17:59][--a--c---] C:\WINDOWS	asks\Symantec NetDetect.job
   [2008-06-13 20:03][--a--c---] C:\WINDOWS	asks\Norton AntiVirus - Scan my computer.job
   [2008-06-13 19:29][--a--c---] C:\WINDOWS	asks\Norton SystemWorks One Button Checkup.job
   [2008-07-21 14:09][--ah-c---] C:\WINDOWS	asks\SA.DAT
   [2001-08-28 08:00][-r-h-c---] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [2005-05-22|16:43] C:\Program Files\Access 97 Runtime
   [2004-06-20|12:10] C:\Program Files\ACD Systems
   [2004-03-09|19:19] C:\Program Files\acrobat reader
   [2008-03-10|19:14] C:\Program Files\Adobe
   [2004-04-01|20:44] C:\Program Files\Ahead
   [2006-09-23|10:25] C:\Program Files\ArcSoft
   [2006-06-14|19:59] C:\Program Files\Avery Dennison
   [2008-02-18|20:56] C:\Program Files\BudgetExpress
   [2005-07-02|07:22] C:\Program Files\CCleaner
   [2005-06-18|22:00] C:\Program Files\ComPlus Applications
   [2004-03-14|19:22] C:\Program Files\Desktop Messenger
   [2008-01-22|11:01] C:\Program Files\DIFX
   [2005-06-21|18:32] C:\Program Files\ewido
   [2008-07-21|19:27] C:\Program Files\Fichiers communs
   [2006-08-04|05:15] C:\Program Files\Golden
   [2007-01-27|08:57] C:\Program Files\Google
   [2004-03-10|22:52] C:\Program Files\Hewlett-Packard
   [2006-11-15|18:10] C:\Program Files\IncrediMail
   [2007-01-14|12:11] C:\Program Files\InstallShield Installation Information
   [2005-11-20|11:59] C:\Program Files\Internet Explorer
   [2007-10-16|19:18] C:\Program Files\Java
   [2005-06-05|21:36] C:\Program Files\Lavasoft
   [2006-07-28|06:06] C:\Program Files\Logitech
   [2008-07-21|20:27] C:\Program Files\Lopxp
   [2005-11-20|12:00] C:\Program Files\Messenger
   [2005-06-05|21:38] C:\Program Files\Messenger Plus! 3
   [2004-03-07|20:19] C:\Program Files\microsoft frontpage
   [2007-01-30|21:08] C:\Program Files\Microsoft Games
   [2006-07-04|21:39] C:\Program Files\Microsoft Hardware
   [2006-09-23|11:31] C:\Program Files\Microsoft Office
   [2004-12-07|09:33] C:\Program Files\mIRC
   [2004-03-07|20:16] C:\Program Files\Movie Maker
   [2004-03-07|20:14] C:\Program Files\MSN Gaming Zone
   [2006-08-01|22:24] C:\Program Files\MSXML 4.0
   [2004-03-14|19:23] C:\Program Files\MUSICMATCH
   [2004-08-26|19:19] C:\Program Files\NetMeeting
   [2006-09-19|13:14] C:\Program Files\Netscape
   [2008-05-23|21:36] C:\Program Files\Norton SystemWorks
   [2008-01-22|10:57] C:\Program Files\OLYMPUS
   [2005-06-21|17:41] C:\Program Files\Outlook Express
   [2005-05-16|20:24] C:\Program Files\PolderbitS
   [2008-01-22|11:01] C:\Program Files\QuickTime
   [2004-12-17|16:29] C:\Program Files\Real
   [2006-08-04|04:57] C:\Program Files\Registry Mechanic
   [2008-01-22|10:42] C:\Program Files\RescuePRO
   [2004-11-05|19:24] C:\Program Files\Rio
   [2005-06-18|22:01] C:\Program Files\Services en ligne
   [2005-01-24|21:39] C:\Program Files\Siber Systems
   [2008-05-28|17:03] C:\Program Files\Spybot - Search & Destroy
   [2008-06-17|17:11] C:\Program Files\SpywareBlaster
   [2004-11-04|20:59] C:\Program Files\StreamCast
   [2006-12-25|22:41] C:\Program Files\Symantec
   [2005-02-12|15:39] C:\Program Files\SymNetDrv
   [2005-03-06|16:56] C:\Program Files\TablEdit
   [2004-08-26|19:17] C:\Program Files\Uninstall Information
   [2004-12-17|16:35] C:\Program Files\Winamp
   [2008-01-22|10:59] C:\Program Files\Windows Media Player
   [2004-03-07|20:14] C:\Program Files\Windows NT
   [2005-06-20|21:47] C:\Program Files\WindowsUpdate
   [2005-05-22|18:14] C:\Program Files\Wine Cellar
   [2005-11-20|12:06] C:\Program Files\WinZip
   [2004-03-07|20:19] C:\Program Files\xerox
   [2004-12-08|14:50] C:\Program Files\ZeusCDRipper
   [2005-12-10|15:20] C:\Program Files\Zone Labs

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [2004-06-20|12:10] C:\Program Files\Fichiers communs\ACD Systems
   [2008-03-10|19:14] C:\Program Files\Fichiers communs\Adobe
   [2004-04-01|20:44] C:\Program Files\Fichiers communs\Ahead
   [2004-03-07|20:35] C:\Program Files\Fichiers communs\Designer
   [2006-07-28|06:06] C:\Program Files\Fichiers communs\FotoWire
   [2004-11-05|19:24] C:\Program Files\Fichiers communs\Gracenote
   [2004-03-10|22:52] C:\Program Files\Fichiers communs\Hewlett-Packard
   [2006-06-14|19:58] C:\Program Files\Fichiers communs\InstallShield
   [2004-09-09|21:46] C:\Program Files\Fichiers communs\Java
   [2006-07-28|06:03] C:\Program Files\Fichiers communs\Logitech
   [2008-06-05|16:22] C:\Program Files\Fichiers communs\Microsoft Shared
   [2005-03-15|10:04] C:\Program Files\Fichiers communs\mozilla.org
   [2005-03-11|14:32] C:\Program Files\Fichiers communs\MSSoap
   [2004-03-07|14:00] C:\Program Files\Fichiers communs\ODBC
   [2005-02-08|20:32] C:\Program Files\Fichiers communs\Real
   [2004-03-07|20:15] C:\Program Files\Fichiers communs\Services
   [2004-03-07|20:46] C:\Program Files\Fichiers communs\Sierra On-Line
   [2004-03-07|14:00] C:\Program Files\Fichiers communs\SpeechEngines
   [2008-07-21|19:28] C:\Program Files\Fichiers communs\Symantec Shared
   [2005-06-21|17:41] C:\Program Files\Fichiers communs\System
   [2004-11-09|19:11] C:\Program Files\Fichiers communs\Ulead Systems
   [2005-06-21|21:39] C:\Program Files\Fichiers communs\Uninstall Information
   [2005-02-08|20:32] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 68 Processus )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-21 20:48:37
   Windows 5.1.2600  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 1
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   => C:\DOCUME~1\Denis\Favoris\download\AllSeek.iNFO  The Ultimate Cracks Search Engine.url
   => C:\DOCUME~1\Denis\Favoris\download\CRACKFOUND - SERIALS - CRACKS - KEYS - KEYGENS - ALL THE UNDERGROUND IS HERE.url
   => C:\DOCUME~1\Denis\Local Settings\Application Data\IM\Animation\firecracker.ima
   => C:\DOCUME~1\Denis\Local Settings\Application Data\IM\Letter\cracking_crackers.imf
   => C:\DOCUME~1\Denis\Local Settings\Application Data\IM\Runtime\EmoticonCenter\cracker.gif
   => C:\DOCUME~1\Denis\Favoris\download\CRACKFOUND - SERIALS - CRACKS - KEYS - KEYGENS - ALL THE UNDERGROUND IS HERE.url


   [F:5][D:2]-> C:\DOCUME~1\Denis\LOCALS~1\Temp
   [F:12][D:0]-> C:\DOCUME~1\Denis\Cookies
   [F:488][D:10]-> C:\DOCUME~1\Denis\LOCALS~1\TEMPOR~1\content.IE5

   --------------------\  Fin du rapport a 20:50:26,83

Destrio5 · Answer

---> Télécharge OTMoveIt2 à partir du lien ci-dessous : 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe 

---> Enregistre le fichier sur le Bureau.

---> Double-clique sur le fichier OTMoveIt2.exe pour lancer l'outil.
Assure-toi que la case Unregister Dll's and Ocx's soit bien cochée.

---> Copie l'intégralité du texte ci-dessous et colle-le dans la fenêtre intitulée Paste Standard List of Files/Folders to be moved.



C:\Documents and Settings\All Users\Application Data\Meal Memo Free View\



---> Clique sur MoveIt! pour lancer la suppression.
Lorsqu'un résultat apparaît dans le cadre Results, clique sur Exit.

Note : Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES. 

---> Poste le rapport de OTMoveIt qui se trouve dans C:\_OTMoveIt\MovedFiles.

Den360 · Answer

C:\Documents and Settings\All Users\Application Data\Meal Memo Free View moved successfully.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07212008_210439

Destrio5 · Answer

- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.

Den360 · Answer

et voila le rapport 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:11:24, on 2008-07-21
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\RioMSC.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1
opdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.lapresse.ca
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.netscape.fr"); (C:\Documents and Settings\DENIS\Application Data\Mozilla\Profiles\default
fw2teri.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\DENIS\Application Data\Mozilla\Profiles\default
fw2teri.slt\prefs.js)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [FREE VIEW GRIM SOAP] C:\Documents and Settings\All Users\Application Data\Meal Memo Free View\fast global.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus1.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Maryse')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Maryse')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [BindKnob] C:\DOCUME~1\Maryse\APPLIC~1\OWNSLO~1\BendDartStore.exe (User 'Maryse')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Barre RoboForm &2 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le &formulaire	[ - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le &menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire	] - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire	] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le &formulaire	[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {597F9140-0DC6-4657-A162-76EC0E7AEE81} (ActiveBroadcast Control) - http://www.meetstream.com/activex/28081/activebroadcast.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplates/securelogin-devel.cab
O16 - DPF: {BFD90062-6B5E-4F8F-87B1-5F022C14E32F} (ActiveReceiver Control) - http://www.meetstream.com/activex/28081/activereceiver.cab
O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: RIO Mass Storage C (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\System32\RioMSC.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1
opdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Destrio5 · Answer

Ton Windows n'est pas à jour, c'est pas bien du tout.

Mets à jour Java et poste un nouveau rapport HijackThis :
https://www.java.com/fr/download/manual.jsp

Den360 · Answer

j ai fais mon update java et voici le rapport de hijackthis


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:31:25, on 2008-07-21
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\RioMSC.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1
opdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.lapresse.ca
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.netscape.fr"); (C:\Documents and Settings\DENIS\Application Data\Mozilla\Profiles\default
fw2teri.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\DENIS\Application Data\Mozilla\Profiles\default
fw2teri.slt\prefs.js)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [FREE VIEW GRIM SOAP] C:\Documents and Settings\All Users\Application Data\Meal Memo Free View\fast global.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus1.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Maryse')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Maryse')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [BindKnob] C:\DOCUME~1\Maryse\APPLIC~1\OWNSLO~1\BendDartStore.exe (User 'Maryse')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Barre RoboForm &2 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le &formulaire	[ - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le &menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire	] - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire	] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le &formulaire	[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {597F9140-0DC6-4657-A162-76EC0E7AEE81} (ActiveBroadcast Control) - http://www.meetstream.com/activex/28081/activebroadcast.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplates/securelogin-devel.cab
O16 - DPF: {BFD90062-6B5E-4F8F-87B1-5F022C14E32F} (ActiveReceiver Control) - http://www.meetstream.com/activex/28081/activereceiver.cab
O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: RIO Mass Storage C (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\System32\RioMSC.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1
opdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Destrio5 · Answer

---> Relance HijackThis et choisis Do a system scan only

---> Coche les cases qui sont devant les lignes suivantes :

R3 - Default URLSearchHook is missing 

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot 

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE 

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" 

O4 - HKLM\..\Run: [FREE VIEW GRIM SOAP] C:\Documents and Settings\All Users\Application Data\Meal Memo Free View\fast global.exe 

O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [BindKnob] C:\DOCUME~1\Maryse\APPLIC~1\OWNSLO~1\BendDartStore.exe (User 'Maryse') 

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Poste un nouveau rapport HijackThis.

Je pourrais te virer des logiciels qui se lancent au démarrage mais je sais pas si tu en as besoin.

Den360 · Answer

et voila c est fait !


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:48:06, on 2008-07-21
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\RioMSC.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1
opdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.lapresse.ca
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.netscape.fr"); (C:\Documents and Settings\DENIS\Application Data\Mozilla\Profiles\default
fw2teri.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\DENIS\Application Data\Mozilla\Profiles\default
fw2teri.slt\prefs.js)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus1.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Maryse')
O4 - HKUS\S-1-5-21-1801674531-920026266-854245398-1004\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Maryse')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Barre RoboForm &2 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le &formulaire	[ - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le &menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire	] - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire	] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le &formulaire	[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {597F9140-0DC6-4657-A162-76EC0E7AEE81} (ActiveBroadcast Control) - http://www.meetstream.com/activex/28081/activebroadcast.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplates/securelogin-devel.cab
O16 - DPF: {BFD90062-6B5E-4F8F-87B1-5F022C14E32F} (ActiveReceiver Control) - http://www.meetstream.com/activex/28081/activereceiver.cab
O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: RIO Mass Storage C (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\System32\RioMSC.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1
opdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Destrio5 · Answer

Plus de trace d'infection. 

Je vais aller me coucher alors je vais te faire un pavé.

Télécharge Tools Cleaner sur ton bureau.
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
Clique sur Recherche et laisse le scan agir.
Clique sur Suppression pour finaliser. 
Tu peux, si tu le souhaites, te servir des Options facultatives.
Clique sur Quitter pour obtenir le rapport. 
Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

---> Télécharge CCleaner (N'installe pas la Yahoo Toolbar) :
https://www.ccleaner.com/ccleaner/download

---> Lance-le. Va dans "Options" puis "Avancé", tu décoches la case "Effacer uniquement les fichiers etc...". Tu vas dans "Nettoyeur", tu fais "Analyse". Une fois terminé, tu lances le nettoyage. Puis tu vas dans "Registre", tu fais "Chercher des erreurs". Une fois terminé, tu répares toutes les erreurs sans sauvegarder la base de registre.

---> Il est nécessaire de désactiver puis réactiver la restauration système, fais-le :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php

- Télécharge et installe MalwareByte's Anti-Malware :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

- Mets-le à jour

- Redémarre en mode sans échec (Recommandé mais pas obligatoire) :
https://www.malekal.com/demarrer-windows-mode-sans-echec/

- Choisis ta session habituelle

- Fais un scan complet avec MalwareByte's Anti-Malware

- Supprime tout ce que le logiciel trouve, enregistre le rapport

- Redémarre en mode normal et poste le rapport ici

Tutorial :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Den360 · Answer

merci beaucoup , moi aussi je vais me coucher ... je vais continuer demain soir.

Bonne Nuit !

Den 360

Den360 · Answer

rapport de tool cleaner

-->- Recherche: 

C:\Lop SD: trouvé !
C:\HijackThis: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Denis\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Denis\Bureau\Lop S&D.lnk: trouvé !
C:\Documents and Settings\Denis\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\Denis\Bureau\KillBox.exe: trouvé !
C:\Documents and Settings\Denis\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\Denis\Menu Démarrer\Programmes\Lop S&D: trouvé !
C:\hijackthis\HijackThis.exe: trouvé !
C:\Lop SD\Lop S&D.lnk: trouvé !
C:\Program Files\Logitech\iTouch\Drivers\Clean: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Denis\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Denis\Bureau\Lop S&D.lnk: supprimé !
C:\Documents and Settings\Denis\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\Denis\Bureau\KillBox.exe: supprimé !
C:\Documents and Settings\Denis\Bureau\HJTInstall.exe: supprimé !
C:\hijackthis\HijackThis.exe: supprimé !
C:\Lop SD\Lop S&D.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Lop SD: supprimé !
C:\HijackThis: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\Denis\Menu Démarrer\Programmes\Lop S&D: supprimé !
C:\Program Files\Logitech\iTouch\Drivers\Clean: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Corbeille vidée!
Fichiers temporaires nettoyés !

Den360 · Answer

rapport 

Malwarebytes' Anti-Malware 1.22
Version de la base de données: 980
Windows 5.1.2600 

20:01:16 2008-07-22
mbam-log-7-22-2008 (20-01-16).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|)
Eléments examinés: 127800
Temps écoulé: 38 minute(s), 20 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\The Weather Channel (Adware.Hotbar) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS	mlpcert2005 (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings\Denis\Application Data	vmknwrd.dll (Trojan.Agent) -> Quarantined and deleted successfully.

Est-ce que tu crois qu'il me reste de cette saloperie ?

Merci encore pour ton aide !

Destrio5 · Answer

Le rapport MBAM montre une infection. On va utiliser Navilog1 :

- Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le bureau : 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 

- Double-clique sur Navilog1.exe afin de lancer l'installation

- Si le fix ne lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le bureau

- Appuie sur F ou f  puis valide par Entrée

- Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options

- Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix

- Patiente jusqu'au message : *** Analyse Termine le ..... ***

- Le scan fini, le bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse

- Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

Den360 · Answer

rapport completé


Search Navipromo version 3.6.1 commencé le 2008-07-22 à 20:27:34,61

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Denis" 

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2600.0000 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Denis\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Joannie\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Maryse\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Denis\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Joannie\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Maryse\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Denis\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Joannie\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Maryse\menudm~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier Navipromo trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Denis\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\Joannie\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\Maryse\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Denis\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\Joannie\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\Maryse\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 2008-07-22 à 20:41:45,83 ***

Destrio5 · Answer

Tu peux désinstaller Navilog1, il n'a rien trouvé.

Relance MBAM, va dans Quarantaine et supprime tout.

Si tu n'as plus de problème, c'est ok.

Den360 · Answer

Ok ! Merci beaucoup pour ton aide , Je crois que tout est ok.

Fenetres CID

22 réponses

Votre réponse

Discussions similaires

Newsletters