Menace Trojan Résolu/Fermé

Question

Bonsoir,

J'ai un problème depuis 3 jours sur mon PC : mon antivirus ( Symantec Antivirus ) détecte une menace sous le nom de "Trojan.adlickers" a peut prêt toute les 15 min. Je sais que c'est un cheval de troie , mon PC se redémarre régulièrement en navigant sur internet ou même en jouant ...        

Voila j'aimerai savoir si il existe un logiciel un patch qui pourrai enlever ce trojan de mon ordinateur ou juste le mettre en quarantaine pour qu'il ne fasse pas trop de dégâts  dans mon PC.

merci de me répondre !



tiflo

Destrio5 · Answer

Salut,

- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.

tiflo · Answer

merci de m'avoir répondu voila ce que ça a mit : 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:06:11, on 24/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\MMTrayLSI.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\DrvMon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Ahead\Nero
ero.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IE.Filter - {F65E955E-26C0-42FF-8EE2-443A05EA286A} - C:\WINDOWS\system32\IE_FIL~1.DLL (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Compcakegramburn] C:\Documents and Settings\All Users\Application Data	onsmailcompcake\Meet Inside.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [proxy ooze] C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\math byte poke.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

Destrio5 · Answer

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde dans le tutorial :
http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

tiflo · Answer

voila :



   --------------------\  Lop S&D 4.2.2-3  XP/Vista

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 24/07/2008 | 21:17:52,42 ] [ PC : SABIN_F ]
   [ MAJ : 22-07-2008 | 17:35 ]
 
   --------------------\  Listing des dossiers dans Application Data  

   [10/12/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [01/01/2005|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [01/01/2005|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [01/01/2005|11:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
   [22/02/2005|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [01/01/2005|12:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [01/01/2005|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
   [11/04/2005|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [21/04/2007|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [15/07/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/01/2005|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
   [21/02/2005|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [13/12/2006|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
   [07/06/2005|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [12/07/2008|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RTL Winter Sports 2008
   [10/12/2007|19:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
   [03/09/2007|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [06/06/2005|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [31/12/2007|10:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1	onsmailcompcake
   [21/07/2008|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [26/11/2005|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [24/11/2006|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [14/11/2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [01/01/2005|12:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [01/01/2005|11:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [01/01/2005|10:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [01/01/2005|12:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
   [01/01/2005|17:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [01/01/2005|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [01/01/2005|11:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [01/01/2005|14:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [15/12/2007|12:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [27/06/2008|08:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [05/03/2005|10:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
   [01/01/2005|12:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [08/06/2005|23:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
   [01/01/2005|11:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
   [24/12/2005|15:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
   [25/09/2006|14:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [22/02/2005|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [01/01/2005|10:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [30/06/2008|18:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
   [21/02/2005|23:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
   [23/02/2005|09:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [25/11/2006|18:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [04/12/2007|20:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [22/02/2005|10:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
   [25/09/2006|14:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [05/03/2005|10:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\NeroVision
   [31/12/2007|10:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove
   [01/01/2005|15:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [27/04/2007|15:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
   [11/12/2007|19:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skyline
   [11/07/2008|14:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
   [23/02/2005|09:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [01/01/2005|11:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [14/03/2005|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
   [24/05/2008|14:57] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemRequirementsLab
   [08/12/2007|13:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

   [01/10/2006|18:07] C:\DOCUME~1\HP_PRO~2\APPLIC~1\Macromedia

   [04/01/2007|17:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [01/12/2007|19:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [24/07/2008 21:00][--ah-----] C:\WINDOWS	asks\A466C33190DD7ED9.job
   [05/08/2004 12:00][-rah-----] C:\WINDOWS	asks\desktop.ini
   [24/07/2008 19:35][--ah-----] C:\WINDOWS	asks\SA.DAT

   ( A466C33190DD7ED9.job )=( c:\docume~1\hp_pro~1\applic~1\plusmove\Wiperoamplatform.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [05/03/2005|09:49] C:\Program Files\ACE Mega CoDecS Pack
   [11/04/2005|10:58] C:\Program Files\Adobe
   [21/04/2007|10:44] C:\Program Files\Adverts
   [11/04/2005|10:45] C:\Program Files\Ahead
   [29/12/2006|21:45] C:\Program Files\Alcohol Soft
   [10/06/2005|01:50] C:\Program Files\ANPSEDIC
   [05/03/2006|15:28] C:\Program Files\Anti-Blaxx
   [08/06/2005|23:41] C:\Program Files\ArcSoft
   [04/02/2006|14:13] C:\Program Files\Atari
   [26/03/2008|14:58] C:\Program Files\Audacity
   [02/03/2005|09:55] C:\Program Files\Battlezone II
   [09/07/2004|09:13] C:\Program Files\BDA.cab
   [19/07/2004|22:58] C:\Program Files\BDANT.cab
   [19/07/2004|22:53] C:\Program Files\BDAXP.cab
   [24/11/2006|22:17] C:\Program Files\CCleaner
   [01/01/2005|10:42] C:\Program Files\ComPlus Applications
   [03/08/2007|15:33] C:\Program Files\Deus Ex - Invisible War
   [28/02/2005|18:21] C:\Program Files\directx
   [30/06/2008|18:32] C:\Program Files\DirectX.cab
   [05/03/2005|00:12] C:\Program Files\DivX
   [21/07/2008|15:36] C:\Program Files\EA GAMES
   [01/05/2007|20:32] C:\Program Files\EA SPORTS
   [03/04/2005|14:40] C:\Program Files\Easy Internet signup
   [09/02/2007|19:05] C:\Program Files\Electronic Arts
   [03/04/2008|22:52] C:\Program Files\epson
   [14/11/2007|15:09] C:\Program Files\Fichiers communs
   [13/11/2007|13:47] C:\Program Files\Google
   [01/01/2005|17:16] C:\Program Files\Help and Support Additions
   [01/01/2005|11:43] C:\Program Files\Hewlett-Packard
   [01/01/2005|11:58] C:\Program Files\HP
   [03/04/2008|22:52] C:\Program Files\InstallShield Installation Information
   [11/06/2008|07:30] C:\Program Files\Internet Explorer
   [21/02/2005|18:26] C:\Program Files\InterVideo
   [25/04/2008|11:04] C:\Program Files\Java
   [29/12/2006|21:47] C:\Program Files\JoWooD
   [20/12/2007|21:07] C:\Program Files\KONAMI
   [11/03/2008|17:24] C:\Program Files\log jeux
   [23/09/2006|18:27] C:\Program Files\Logitech
   [18/03/2006|14:52] C:\Program Files\LucasArts
   [26/06/2005|19:48] C:\Program Files\Macrovision Corp
   [28/02/2005|13:45] C:\Program Files\Maxis
   [07/06/2005|22:41] C:\Program Files\Messenger
   [05/04/2008|17:37] C:\Program Files\Messenger Plus! Live
   [06/04/2005|12:23] C:\Program Files\Microsoft AutoRoute
   [22/02/2005|10:24] C:\Program Files\Microsoft Encarta
   [01/01/2005|10:45] C:\Program Files\microsoft frontpage
   [14/01/2007|12:06] C:\Program Files\Microsoft LifeCam
   [22/02/2005|15:54] C:\Program Files\Microsoft Money 2005
   [07/07/2008|12:55] C:\Program Files\Microsoft Office
   [14/11/2007|15:20] C:\Program Files\Microsoft SQL Server Compact Edition
   [21/12/2007|00:45] C:\Program Files\Microsoft Works
   [22/02/2005|10:35] C:\Program Files\Microsoft Works Suite 2005
   [25/07/2007|11:18] C:\Program Files\Microsoft Xbox 360 Accessories
   [03/04/2005|14:22] C:\Program Files\Microsoft.NET
   [01/01/2005|10:43] C:\Program Files\Movie Maker
   [24/07/2008|20:06] C:\Program Files\Mozilla Firefox
   [07/07/2008|12:55] C:\Program Files\MSECache
   [01/01/2005|10:41] C:\Program Files\MSN
   [01/01/2005|10:41] C:\Program Files\MSN Gaming Zone
   [18/11/2006|23:36] C:\Program Files\MSXML 4.0
   [01/01/2005|10:33] C:\Program Files\NetMeeting
   [01/01/2005|10:42] C:\Program Files\Online Services
   [13/06/2007|18:55] C:\Program Files\Outlook Express
   [01/01/2005|17:18] C:\Program Files\PC-Doctor for Windows
   [28/02/2005|18:20] C:\Program Files\Pepsi
   [22/02/2005|11:09] C:\Program Files\Picture It! Premium 10
   [09/06/2007|16:30] C:\Program Files\plusmove
   [05/03/2005|09:50] C:\Program Files\QuickTime
   [12/07/2008|15:49] C:\Program Files\RTL Winter Sports 2008
   [25/09/2006|10:44] C:\Program Files\SAGEM
   [22/07/2007|15:53] C:\Program Files\Saitek
   [23/09/2006|17:25] C:\Program Files\Securitoo
   [05/03/2005|11:28] C:\Program Files\Sega
   [01/01/2005|17:25] C:\Program Files\Services en ligne
   [02/01/2005|01:27] C:\Program Files\SiS VGA Utilities V3.63
   [10/12/2007|19:50] C:\Program Files\Skyline
   [03/09/2007|20:01] C:\Program Files\Skype
   [01/01/2005|12:08] C:\Program Files\Sonic
   [01/01/2005|12:08] C:\Program Files\Sonic RecordNow!
   [02/11/2007|21:02] C:\Program Files\Stardock
   [13/07/2008|16:42] C:\Program Files\StuffPlug3
   [07/06/2005|22:36] C:\Program Files\Symantec
   [24/07/2008|19:36] C:\Program Files\Symantec AntiVirus
   [24/05/2008|14:57] C:\Program Files\SystemRequirementsLab
   [25/05/2008|10:28] C:\Program Files\TmNationsForever
   [24/07/2008|21:05] C:\Program Files\Trend Micro
   [01/01/2005|10:48] C:\Program Files\Uninstall Information
   [01/07/2008|18:26] C:\Program Files\vixy.net
   [24/07/2008|19:37] C:\Program Files\Wanadoo
   [18/07/2008|09:11] C:\Program Files\WarRock
   [27/02/2008|14:25] C:\Program Files\Windows Live
   [03/04/2008|22:50] C:\Program Files\Windows Live Toolbar
   [04/01/2007|17:36] C:\Program Files\Windows Media Connect 2
   [04/01/2007|17:36] C:\Program Files\Windows Media Player
   [01/01/2005|10:33] C:\Program Files\Windows NT
   [01/01/2005|10:43] C:\Program Files\WindowsUpdate
   [14/08/2007|14:22] C:\Program Files\WinRAR
   [29/12/2006|22:02] C:\Program Files\WinZip
   [01/01/2005|10:45] C:\Program Files\xerox

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [11/04/2005|11:00] C:\Program Files\Fichiers communs\Adobe
   [11/04/2005|11:01] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [05/03/2005|10:00] C:\Program Files\Fichiers communs\Ahead
   [03/04/2005|14:23] C:\Program Files\Fichiers communs\DESIGNER
   [01/01/2005|11:54] C:\Program Files\Fichiers communs\Hewlett-Packard
   [01/01/2005|12:19] C:\Program Files\Fichiers communs\InstallShield
   [01/01/2005|11:09] C:\Program Files\Fichiers communs\Java
   [23/09/2006|17:09] C:\Program Files\Fichiers communs\Logitech
   [07/07/2008|12:55] C:\Program Files\Fichiers communs\Microsoft Shared
   [01/01/2005|10:43] C:\Program Files\Fichiers communs\MSSoap
   [01/01/2005|11:38] C:\Program Files\Fichiers communs\ODBC
   [01/01/2005|10:33] C:\Program Files\Fichiers communs\Services
   [03/09/2007|20:01] C:\Program Files\Fichiers communs\Skype
   [01/01/2005|11:38] C:\Program Files\Fichiers communs\SpeechEngines
   [02/11/2007|21:02] C:\Program Files\Fichiers communs\Stardock
   [01/01/2005|12:09] C:\Program Files\Fichiers communs\SureThing Shared
   [06/07/2006|14:08] C:\Program Files\Fichiers communs\SWF Studio
   [21/07/2008|15:41] C:\Program Files\Fichiers communs\Symantec Shared
   [13/06/2007|18:55] C:\Program Files\Fichiers communs\System
   [14/11/2007|15:14] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 61 Processus )

   iexplore.exe ~ [2176]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove
   C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\zcnyyobq.exe
   C:\Program Files\plusmove
   C:\Program Files\Adverts
   C:\Program Files\Adverts\uninst.exe
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.casinoking[2].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@casinoking[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.cotedazurpalace[2].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@cotedazurpalace[2].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[2].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@32vegas[1].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.32vegas[2].txt
   C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@888[1].txt
   C:\WINDOWS\Tasks\A466C33190DD7ED9.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "proxy ooze"="C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\math byte poke.exe"

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-24 21:19:02
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 75
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack
   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack
   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack\antiblaxx116.exe
   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack\ccd-mgp3.nfo
   => C:\DOCUME~1\HP_PRO~1\Mes documents
fsMW_crack_rev2
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Artistes\No one is innocent\No One Is Innocent\05-Henry, serial killer.mp3
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Artistes\Pixies\Doolittle\09-Crackity Jones.mp3
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Artistes\Prodigy\Fat Of the Land\Prodigy - Serial Thrilla.mp3
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Zonealarm Pro\ZoneAlarm.Pro.v.6.5.731.000.Keygen.exe
   => C:\DOCUME~1\HP_PRO~1\Mes documents
fsMW_crack_rev2
fsMW.exe
   => C:\DOCUME~1\HP_PRO~1\Mes documents
fsMW_crack_rev2\speed.exe
   => C:\DOCUME~1\HP_PRO~1\Recent\Crack.lnk
   => C:\DOCUME~1\HP_PRO~1\Recent
eed.for.speed.most.wanted.keygen-tsrh (2).lnk
   => C:\DOCUME~1\HP_PRO~1\Recent
eed.for.speed.most.wanted.keygen-tsrh.lnk
   => C:\DOCUME~1\HP_PRO~1\Recent
fsMW_crack_rev2.lnk


   [F:218][D:16]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:96][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:4279][D:9]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------\  Fin du rapport a 21:21:02,35

Destrio5 · Answer

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

tiflo · Answer

voila : 


   --------------------\  Lop S&D 4.2.2-3  XP/Vista

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 24/07/2008 | 21:33:39,70 ] [ PC : SABIN_F ]
   [ MAJ : 22-07-2008 | 17:35 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove\zcnyyobq.exe
   Supprime! - C:\Program Files\Adverts\uninst.exe
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@advertising[1].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.casinoking[2].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@casinoking[1].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.cotedazurpalace[2].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@cotedazurpalace[2].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[2].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@32vegas[1].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.32vegas[2].txt
   Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@888[1].txt
   Supprime! - C:\WINDOWS\Tasks\A466C33190DD7ED9.job 
   Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\plusmove
   Supprime! - C:\Program Files\plusmove
   Supprime! - C:\Program Files\Adverts
   RestaurÚ! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [10/12/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [01/01/2005|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [01/01/2005|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [01/01/2005|11:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
   [22/02/2005|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [01/01/2005|12:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [01/01/2005|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
   [11/04/2005|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [21/04/2007|10:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [15/07/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/01/2005|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
   [21/02/2005|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [13/12/2006|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
   [07/06/2005|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [12/07/2008|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RTL Winter Sports 2008
   [10/12/2007|19:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
   [03/09/2007|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [06/06/2005|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [31/12/2007|10:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1	onsmailcompcake
   [21/07/2008|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [26/11/2005|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [24/11/2006|22:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [14/11/2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [01/01/2005|12:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [01/01/2005|11:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [01/01/2005|10:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [01/01/2005|12:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
   [01/01/2005|17:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [01/01/2005|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [01/01/2005|11:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [01/01/2005|14:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [15/12/2007|12:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [27/06/2008|08:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [05/03/2005|10:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
   [01/01/2005|12:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [08/06/2005|23:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
   [01/01/2005|11:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
   [24/12/2005|15:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
   [25/09/2006|14:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [22/02/2005|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [01/01/2005|10:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [30/06/2008|18:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
   [21/02/2005|23:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
   [23/02/2005|09:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [25/11/2006|18:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [04/12/2007|20:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [22/02/2005|10:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
   [25/09/2006|14:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [05/03/2005|10:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\NeroVision
   [01/01/2005|15:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [27/04/2007|15:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
   [11/12/2007|19:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skyline
   [11/07/2008|14:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
   [23/02/2005|09:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [01/01/2005|11:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [14/03/2005|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
   [24/05/2008|14:57] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SystemRequirementsLab
   [08/12/2007|13:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

   [01/10/2006|18:07] C:\DOCUME~1\HP_PRO~2\APPLIC~1\Macromedia

   [04/01/2007|17:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [01/12/2007|19:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [05/08/2004 12:00][-rah-----] C:\WINDOWS	asks\desktop.ini
   [24/07/2008 19:35][--ah-----] C:\WINDOWS	asks\SA.DAT

   --------------------\  Listing des dossiers dans C:\Program Files

   [05/03/2005|09:49] C:\Program Files\ACE Mega CoDecS Pack
   [11/04/2005|10:58] C:\Program Files\Adobe
   [11/04/2005|10:45] C:\Program Files\Ahead
   [29/12/2006|21:45] C:\Program Files\Alcohol Soft
   [10/06/2005|01:50] C:\Program Files\ANPSEDIC
   [05/03/2006|15:28] C:\Program Files\Anti-Blaxx
   [08/06/2005|23:41] C:\Program Files\ArcSoft
   [04/02/2006|14:13] C:\Program Files\Atari
   [26/03/2008|14:58] C:\Program Files\Audacity
   [02/03/2005|09:55] C:\Program Files\Battlezone II
   [09/07/2004|09:13] C:\Program Files\BDA.cab
   [19/07/2004|22:58] C:\Program Files\BDANT.cab
   [19/07/2004|22:53] C:\Program Files\BDAXP.cab
   [24/11/2006|22:17] C:\Program Files\CCleaner
   [01/01/2005|10:42] C:\Program Files\ComPlus Applications
   [03/08/2007|15:33] C:\Program Files\Deus Ex - Invisible War
   [28/02/2005|18:21] C:\Program Files\directx
   [30/06/2008|18:32] C:\Program Files\DirectX.cab
   [05/03/2005|00:12] C:\Program Files\DivX
   [21/07/2008|15:36] C:\Program Files\EA GAMES
   [01/05/2007|20:32] C:\Program Files\EA SPORTS
   [03/04/2005|14:40] C:\Program Files\Easy Internet signup
   [09/02/2007|19:05] C:\Program Files\Electronic Arts
   [03/04/2008|22:52] C:\Program Files\epson
   [14/11/2007|15:09] C:\Program Files\Fichiers communs
   [13/11/2007|13:47] C:\Program Files\Google
   [01/01/2005|17:16] C:\Program Files\Help and Support Additions
   [01/01/2005|11:43] C:\Program Files\Hewlett-Packard
   [01/01/2005|11:58] C:\Program Files\HP
   [03/04/2008|22:52] C:\Program Files\InstallShield Installation Information
   [11/06/2008|07:30] C:\Program Files\Internet Explorer
   [21/02/2005|18:26] C:\Program Files\InterVideo
   [25/04/2008|11:04] C:\Program Files\Java
   [29/12/2006|21:47] C:\Program Files\JoWooD
   [20/12/2007|21:07] C:\Program Files\KONAMI
   [11/03/2008|17:24] C:\Program Files\log jeux
   [23/09/2006|18:27] C:\Program Files\Logitech
   [18/03/2006|14:52] C:\Program Files\LucasArts
   [26/06/2005|19:48] C:\Program Files\Macrovision Corp
   [28/02/2005|13:45] C:\Program Files\Maxis
   [07/06/2005|22:41] C:\Program Files\Messenger
   [05/04/2008|17:37] C:\Program Files\Messenger Plus! Live
   [06/04/2005|12:23] C:\Program Files\Microsoft AutoRoute
   [22/02/2005|10:24] C:\Program Files\Microsoft Encarta
   [01/01/2005|10:45] C:\Program Files\microsoft frontpage
   [14/01/2007|12:06] C:\Program Files\Microsoft LifeCam
   [22/02/2005|15:54] C:\Program Files\Microsoft Money 2005
   [07/07/2008|12:55] C:\Program Files\Microsoft Office
   [14/11/2007|15:20] C:\Program Files\Microsoft SQL Server Compact Edition
   [21/12/2007|00:45] C:\Program Files\Microsoft Works
   [22/02/2005|10:35] C:\Program Files\Microsoft Works Suite 2005
   [25/07/2007|11:18] C:\Program Files\Microsoft Xbox 360 Accessories
   [03/04/2005|14:22] C:\Program Files\Microsoft.NET
   [01/01/2005|10:43] C:\Program Files\Movie Maker
   [24/07/2008|20:06] C:\Program Files\Mozilla Firefox
   [07/07/2008|12:55] C:\Program Files\MSECache
   [01/01/2005|10:41] C:\Program Files\MSN
   [01/01/2005|10:41] C:\Program Files\MSN Gaming Zone
   [18/11/2006|23:36] C:\Program Files\MSXML 4.0
   [01/01/2005|10:33] C:\Program Files\NetMeeting
   [01/01/2005|10:42] C:\Program Files\Online Services
   [13/06/2007|18:55] C:\Program Files\Outlook Express
   [01/01/2005|17:18] C:\Program Files\PC-Doctor for Windows
   [28/02/2005|18:20] C:\Program Files\Pepsi
   [22/02/2005|11:09] C:\Program Files\Picture It! Premium 10
   [05/03/2005|09:50] C:\Program Files\QuickTime
   [12/07/2008|15:49] C:\Program Files\RTL Winter Sports 2008
   [25/09/2006|10:44] C:\Program Files\SAGEM
   [22/07/2007|15:53] C:\Program Files\Saitek
   [23/09/2006|17:25] C:\Program Files\Securitoo
   [05/03/2005|11:28] C:\Program Files\Sega
   [01/01/2005|17:25] C:\Program Files\Services en ligne
   [02/01/2005|01:27] C:\Program Files\SiS VGA Utilities V3.63
   [10/12/2007|19:50] C:\Program Files\Skyline
   [03/09/2007|20:01] C:\Program Files\Skype
   [01/01/2005|12:08] C:\Program Files\Sonic
   [01/01/2005|12:08] C:\Program Files\Sonic RecordNow!
   [02/11/2007|21:02] C:\Program Files\Stardock
   [13/07/2008|16:42] C:\Program Files\StuffPlug3
   [07/06/2005|22:36] C:\Program Files\Symantec
   [24/07/2008|19:36] C:\Program Files\Symantec AntiVirus
   [24/05/2008|14:57] C:\Program Files\SystemRequirementsLab
   [25/05/2008|10:28] C:\Program Files\TmNationsForever
   [24/07/2008|21:05] C:\Program Files\Trend Micro
   [01/01/2005|10:48] C:\Program Files\Uninstall Information
   [01/07/2008|18:26] C:\Program Files\vixy.net
   [24/07/2008|19:37] C:\Program Files\Wanadoo
   [18/07/2008|09:11] C:\Program Files\WarRock
   [27/02/2008|14:25] C:\Program Files\Windows Live
   [03/04/2008|22:50] C:\Program Files\Windows Live Toolbar
   [04/01/2007|17:36] C:\Program Files\Windows Media Connect 2
   [04/01/2007|17:36] C:\Program Files\Windows Media Player
   [01/01/2005|10:33] C:\Program Files\Windows NT
   [01/01/2005|10:43] C:\Program Files\WindowsUpdate
   [14/08/2007|14:22] C:\Program Files\WinRAR
   [29/12/2006|22:02] C:\Program Files\WinZip
   [01/01/2005|10:45] C:\Program Files\xerox

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [11/04/2005|11:00] C:\Program Files\Fichiers communs\Adobe
   [11/04/2005|11:01] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [05/03/2005|10:00] C:\Program Files\Fichiers communs\Ahead
   [03/04/2005|14:23] C:\Program Files\Fichiers communs\DESIGNER
   [01/01/2005|11:54] C:\Program Files\Fichiers communs\Hewlett-Packard
   [01/01/2005|12:19] C:\Program Files\Fichiers communs\InstallShield
   [01/01/2005|11:09] C:\Program Files\Fichiers communs\Java
   [23/09/2006|17:09] C:\Program Files\Fichiers communs\Logitech
   [07/07/2008|12:55] C:\Program Files\Fichiers communs\Microsoft Shared
   [01/01/2005|10:43] C:\Program Files\Fichiers communs\MSSoap
   [01/01/2005|11:38] C:\Program Files\Fichiers communs\ODBC
   [01/01/2005|10:33] C:\Program Files\Fichiers communs\Services
   [03/09/2007|20:01] C:\Program Files\Fichiers communs\Skype
   [01/01/2005|11:38] C:\Program Files\Fichiers communs\SpeechEngines
   [02/11/2007|21:02] C:\Program Files\Fichiers communs\Stardock
   [01/01/2005|12:09] C:\Program Files\Fichiers communs\SureThing Shared
   [06/07/2006|14:08] C:\Program Files\Fichiers communs\SWF Studio
   [21/07/2008|15:41] C:\Program Files\Fichiers communs\Symantec Shared
   [13/06/2007|18:55] C:\Program Files\Fichiers communs\System
   [14/11/2007|15:14] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 59 Processus )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-24 21:34:49
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 75
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack
   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack
   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack\antiblaxx116.exe
   => C:\DOCUME~1\HP_PRO~1\Bureau\Jeux\NEED\Antiblaxx1.16 + new blacklist crack\Anti-Blaxx new crack\ccd-mgp3.nfo
   => C:\DOCUME~1\HP_PRO~1\Mes documents
fsMW_crack_rev2
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Artistes\No one is innocent\No One Is Innocent\05-Henry, serial killer.mp3
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Artistes\Pixies\Doolittle\09-Crackity Jones.mp3
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Artistes\Prodigy\Fat Of the Land\Prodigy - Serial Thrilla.mp3
   => C:\DOCUME~1\HP_PRO~1\Mes documents\Guillaume\Zonealarm Pro\ZoneAlarm.Pro.v.6.5.731.000.Keygen.exe
   => C:\DOCUME~1\HP_PRO~1\Mes documents
fsMW_crack_rev2
fsMW.exe
   => C:\DOCUME~1\HP_PRO~1\Mes documents
fsMW_crack_rev2\speed.exe
   => C:\DOCUME~1\HP_PRO~1\Recent\Crack.lnk
   => C:\DOCUME~1\HP_PRO~1\Recent
eed.for.speed.most.wanted.keygen-tsrh (2).lnk
   => C:\DOCUME~1\HP_PRO~1\Recent
eed.for.speed.most.wanted.keygen-tsrh.lnk
   => C:\DOCUME~1\HP_PRO~1\Recent
fsMW_crack_rev2.lnk


   [F:219][D:16]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:87][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:4279][D:9]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------\  Fin du rapport a 21:36:00,87

Destrio5 · Answer

Poste un nouveau rapport HijackThis.

tiflo · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:47:04, on 24/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\MMTrayLSI.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32undll32.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\DrvMon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IE.Filter - {F65E955E-26C0-42FF-8EE2-443A05EA286A} - C:\WINDOWS\system32\IE_FIL~1.DLL (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Compcakegramburn] C:\Documents and Settings\All Users\Application Data	onsmailcompcake\Meet Inside.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

Destrio5 · Answer

---> Mets à jour Java :
https://www.java.com/fr/download/manual.jsp

---> Relance HijackThis et choisis Do a system scan only

---> Coche les cases qui sont devant les lignes suivantes :

O2 - BHO: IE.Filter - {F65E955E-26C0-42FF-8EE2-443A05EA286A} - C:\WINDOWS\system32\IE_FIL~1.DLL (file missing) 

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" 

O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start 

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect 

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE 

O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime 

O4 - HKLM\..\Run: [Compcakegramburn] C:\Documents and Settings\All Users\Application Data	onsmailcompcake\Meet Inside.exe 

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') 

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Télécharge OTMoveIt2 à partir du lien ci-dessous : 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe 

---> Enregistre le fichier sur le Bureau.

---> Double-clique sur le fichier OTMoveIt2.exe pour lancer l'outil.
Assure-toi que la case Unregister Dll's and Ocx's soit bien cochée.

---> Copie l'intégralité du texte ci-dessous et colle-le dans la fenêtre intitulée Paste Standard List of Files/Folders to be moved.



C:\Documents and Settings\All Users\Application Data	onsmailcompcake\



---> Clique sur MoveIt! pour lancer la suppression.
Lorsqu'un résultat apparaît dans le cadre Results, clique sur Exit.

Note : Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES. 

---> Poste le rapport de OTMoveIt qui se trouve dans C:\_OTMoveIt\MovedFiles. 

---> Poste un nouveau rapport HijackThis

tiflo · Answer

voila le rapport de OTMoveIt ( je ne suis pas sur si c'est bien ça ) :

Folder move failed. C:\Documents and Settings\All Users\Application Data	onsmailcompcake scheduled to be moved on reboot.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07242008_221753

Files moved on Reboot...
C:\Documents and Settings\All Users\Application Data	onsmailcompcake moved successfully.


voila le rapport de HijackThis : 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:26:25, on 24/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\WINDOWS\system32\DrvMon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

Destrio5 · Answer

---> Désinstalle Lop S&D

---> Fais un scan rapide avec MBAM et poste le rapport :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

tiflo · Answer

ça va mettre combien de temps cette analyse ?

tiflo · Answer

ça y est c'est terminer mais comment te donner le rapport ?

tiflo · Answer

dsl c'est bon : 






Malwarebytes' Anti-Malware 1.23
Version de la base de données: 987
Windows 5.1.2600 Service Pack 2

22:52:01 24/07/2008
mbam-log-7-24-2008 (22-51-51).txt

Type de recherche: Examen rapide
Eléments examinés: 44778
Temps écoulé: 9 minute(s), 8 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{4937d5d1-2039-409a-bd83-fec9b39b2356} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{caf9d798-c659-4b9b-8e19-ee27c3d04ee7} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{15c7d7ad-a87a-4c0d-9d8b-637fcd3488ef} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\bhonew.bho (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\bhonew.bho.1 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Destrio5 · Answer

Tu as bien supprimé la sélection ?

tiflo · Answer

oui !!

Destrio5 · Answer

As-tu encore des problèmes ?

Dis-moi, quelle version de Norton as-tu ?

tiflo · Answer

Je n'ai pas norton j'ai symantec Antivirus ! C'est lequel le meilleur antivirus entre norton et symantec ?

sinon je voudrait savoir si toute les menace de trojan sont plus dans mon PC ?

Destrio5 · Answer

"Je n'ai pas norton j'ai symantec Antivirus ! C'est lequel le meilleur antivirus entre norton et symantec ? "
---> C'est la même chose, antivirus qui vaut pas grand chose.

tiflo · Answer

sinon pour trojan ? il y est tjr ou pas ? il faut peut etre que je fasse une analyse de l'ordinateur par l'antivirus ?

Destrio5 · Answer

Télécharge Tools Cleaner sur ton bureau.
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
Clique sur Recherche et laisse le scan agir.
Clique sur Suppression pour finaliser. 
Tu peux, si tu le souhaites, te servir des Options facultatives.
Clique sur Quitter pour obtenir le rapport. 
Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

---> Télécharge CCleaner (N'installe pas la Yahoo Toolbar) :
https://www.ccleaner.com/ccleaner/download

---> Lance-le. Va dans "Options" puis "Avancé", tu décoches la case "Effacer uniquement les fichiers etc...". Tu vas dans "Nettoyeur", tu fais "Analyse". Une fois terminé, tu lances le nettoyage. Puis tu vas dans "Registre", tu fais "Chercher des erreurs". Une fois terminé, tu répares toutes les erreurs sans sauvegarder la base de registre.

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger car des infections peuvent être dedans :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php

tiflo · Answer

je ferai la désactivation et la restauration du système demain est que ça peut attendre ?

Destrio5 · Answer

Oui.

tiflo · Answer

merci pour tous !

Menace Trojan

24 réponses

Discussions similaires

Newsletters