pub intempestive au cour d'une navigation Résolu

Question

Bonjour,

j'ai des pubs qui s'ouvre à chaque connexion sur internet.

voilà mon rapport hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:42:35, on 27/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - https://www.f-secure.com/en/home/support
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} (PowerLoader Class) - https://www.jeu.fr/?utm_source=spildomains&utm_medium=redirect&utm_campaign=powersoccer.jeu.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase370.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game02.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

Utilisateur anonyme · Answer

Salut

réouvre hijackthis
fais scan only
coches ces lignes :


O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') 


O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/ 
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - https://www.f-secure.com/en/home/support 
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab 
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSn­iff.cab 
O16 - DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} (PowerLoader Class) - https://www.jeu.fr/?utm_source=spildomains&utm_medium=redirect&utm_campaign=powersoccer.jeu.fr 
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab 
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab 
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/w­lscbase370.cab 
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/­cabsa.cab 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.ca­b31267.cab 
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/Ph­otoSwap/PhtPkMSN.cab 
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab 
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game02.zylom.com/activex/zylomgamesplayer.cab 
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader­.cab 
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/ 
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31­267.cab 


tu les coches et tu clic sur fix checked 


ensuite :

désinstal java car pas a jours et telechrage et instal cette version :


https://sdlc-esd.oracle.com/ESD44/JSCDL/jdk/6u7/jre-6u7-windows-i586-p-s.exe?GroupName=JSC&FilePath=/ESD44/JSCDL/jdk/6u7/jre-6u7-windows-i586-p-s.exe&BHost=javadl.sun.com&File=jre-6u7-windows-i586-p-s.exe&AuthParam=1580978146_46494a57fbc0e7c89e79cfb72e28cd3a&ext=.exe


ensuite :


Télécharge sur ton bureau DSS (ex Comboscan) de Deckard: 

http://deckard.geekstogo.com/dss.exe


(choisis enregistrer, puis Bureau comme emplacement) 

Ferme toutes les applications en cours. 

Double-clic sur DSS.exe pour lancer l'outil. 

Une fenêtre s'ouvre, invitant à fermer toutes les applications, clique sur OK. 

A la fin de l'analyse, une fenêtre s'ouvre, clique sur OK. 

Le rapport main.txt va s'afficher, copie le dans ta prochaine réponse. 
Si un rapport complémentaire a été créé ( extra.txt ), poste le aussi dans ta réponse. 

Les rapports sont ici : 
(!) C:\Deckard\System Scanner\main.txt 
(!) C:\Deckard\System Scanner\extra.txt 

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

titite_baby · Answer

voilà les rapports :


Run by Phanélie on 2008-07-27 16:46:30
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
49: 2008-07-27 14:46:35 UTC - RP58 - Deckard's System Scanner Restore Point
48: 2008-07-27 14:39:27 UTC - RP57 - Installé Java(TM) 6 Update 7
47: 2008-07-25 15:31:45 UTC - RP56 - Installé Pro Evolution Soccer 6
46: 2008-07-25 15:27:42 UTC - RP55 - DirectX est installé
45: 2008-07-25 06:47:31 UTC - RP54 - Software Distribution Service 3.0


-- First Restore Point -- 
1: 2008-04-25 07:22:21 UTC - RP10 - Software Distribution Service 3.0


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Phanélie.exe) --------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:50:29, on 27/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Phanélie\Local Settings\Temporary Internet Files\Content.IE5\F7V9B17W\dss[1].exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Phanélie.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

Utilisateur anonyme · Answer

Fais un clic droit sur ce lien : (IL-MAFIOSO) 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt) 


Tuto: http://www.malekal.com/Adware.Magic_Control.php

titite_baby · Answer

voilà le rapport:


Search Navipromo version 3.6.1 commencé le 27/07/2008 à 17:47:23,09

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Phanélie" 

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : FAT32

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudÉ~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Phanélie\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\MAGLOIRE\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\STÉPHA~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Phanélie\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\MAGLOIRE\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\STÉPHA~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Phanélie\menud+~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier Navipromo trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Phanélie\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\MAGLOIRE\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\STÉPHA~1\locals~1\applic~1" * 



*** Recherche fichiers *** 


C:\WINDOWS\system32
vs2.inf trouvé !

*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Phanélie\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\MAGLOIRE\locals~1\applic~1" : 

emaukom.dat trouvé !
emaukom_nav.dat trouvé !
emaukom_navps.dat trouvé !

* Dans "C:\DOCUME~1\STÉPHA~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 27/07/2008 à 17:50:25,12 ***

Utilisateur anonyme · Answer

Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 2 et valides. 
(ne fais pas le choix 3 ou 4 sans notre avis/accord) 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts 
Appuies sur une touche comme demandé. 
(si ton Pc ne redémarre pas automatiquement, fais le toi même) 
Au redémarrage de ton PC, choisis ta session habituelle. 

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le bloc-notes va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le bloc-notes. Ton bureau va réapparaitre 

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Celà te fera apparaitre ton bureau. 

Postes le rapport içi.

titite_baby · Answer

voici le rapport:


Clean Navipromo version 3.6.1 commencé le 27/07/2008 à 18:54:21,62

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Phanélie" 

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : FAT32

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Phanélie\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1\MAGLOIRE\locals~1\applic~1" * 

* Suppression dans "C:\DOCUME~1\STÉPHA~1\locals~1\applic~1" * 


*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudÉ~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudÉ~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Phanélie\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\MAGLOIRE\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\STÉPHA~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Phanélie\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\MAGLOIRE\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\STÉPHA~1\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Phanélie\menud+~1\progra~1" *** 



*** Suppression fichiers ***

C:\WINDOWS\system32
vs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Phan‚lie\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Phanélie\locals~1\applic~1" * 


* Dans "C:\DOCUME~1\MAGLOIRE\locals~1\applic~1" * 


emaukom.exe trouvé ! 
Copie emaukom.exe réalisée avec succès !
emaukom.exe supprimé !

emaukom.dat trouvé ! 
Copie emaukom.dat réalisée avec succès !
emaukom.dat supprimé !

emaukom_nav.dat trouvé ! 
Copie emaukom_nav.dat réalisée avec succès !
emaukom_nav.dat supprimé !

emaukom_navps.dat trouvé ! 
Copie emaukom_navps.dat réalisée avec succès !
emaukom_navps.dat supprimé !

C:\WINDOWS\prefetch\emaukom*.pf trouvé ! 
Copie C:\WINDOWS\prefetch\emaukom*.pf réalisée avec succès !
C:\WINDOWS\prefetch\emaukom*.pf supprimé !


* Dans "C:\DOCUME~1\STÉPHA~1\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 27/07/2008 à 18:59:27,39 ***

Utilisateur anonyme · Answer

-> Télécharge Ccleaner (n'installe pas la barre d'outil Yahoo): 

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

-> L´installer. 

-> Une fois installé et lancé : 

Dans la colonne de gauche, click sur : 

->"registre" : 

Coches toutes les cases sous"l´integrité du registre", puis click en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs", tu auras un message pour sauvegarder ta base de registre, tu click "oui" puis tu recommence jusqu'à ce qu'il ne trouve plus rien. 

ps : les sauvegardes que tu auras faites, pourront etre supprimées ulterieurement si tout va bien. 

->"nettoyeur" 

quitte ton navigateur avant de le lancer, dans les propriétés du nettoyeur de l´onglet "windows" et "applications"décoche la derniere case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" qunand il aura terminé le scan click en bas a droite sur "lancer le nettoyage" et accepte par oui. 

-> Tutoriel en image : 

https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php 


ensuite :

Télecharge et instal AVG anti spyware:

http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware


instal le et met le a jours

ensuite lance le scan et supprime

puis poste le rapport sur le forum stp

Tuto : https://kerio.probb.fr/t387-tuto-avg-anti-spyware-anti-spyware

Qu est ce que les cookies : https://kerio.probb.fr/t161-qu-est-ce-qu-un-cookie-tracking-cookie


ensuite :

* pour supprimer les outils/fix utilisés : 

Télécharge ToolsCleaner sur ton bureau. 
--> 
ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
http://pc-system.fr/ 

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

titite_baby · Answer

rapport AVG anti spiware :

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:29:08 28/07/2008

 + Résultat de l'analyse:	



C:\Documents and Settings\Phanélie\Cookies\phanélie@CAGVQEDB.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Phanélie\Cookies\phanélie@CAOCP85H.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Phanélie\Cookies\phanélie@CAAZLKCU.txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Phanélie\Cookies\phanélie@CA72CHSW.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Phanélie\Cookies\phanélie@CAZC6MII.txt -> TrackingCookie.Serving-sys : Nettoyé.


Fin du rapport

titite_baby · Answer

rapport Toolscleaners :
( faut il le supprimer du disque dur)
             merci

-->- Recherche: 

C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\Phanélie\Bureau\Navilog1.exe: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\Phanélie\Bureau\Navilog1.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !

Utilisateur anonyme · Answer

oui supprime le 

toujours des soucis ?

titite_baby · Answer

Bonsoir,

En ce moment j'ai encor plus de de pub qu'avant

Utilisateur anonyme · Answer

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 




-> Double clique sur combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

titite_baby · Answer

bonjour,
Je n'arrive pas à installer combofix
J'ai un msg d'erreur qui apparait

you cannot renam combofix as combofix [1]
please use another name, preferbely made up of alphanumeric characters.

comment renomer combofix

( à certaine pub il ya  écrit CiD en haut)

Utilisateur anonyme · Answer

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 

* Double-clique dessus pour lancer l'installation 
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau 
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche) 
* Patiente jusqu'à la fin du scan 
* Poste le rapport généré (C:\lopR.txt) 


Tutorial ( aide ) : http://bibou0007.com/outils-specifiques-f78/tuto-lop-sd-t956.htm

titite_baby · Answer

--------------------\  Lop S&D 4.2.2-4  XP/Vista

   [ Windows XP (NT 5.1) Build 2600, Service Pack 3 ]
   [ USER : Phan‚lie ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 29/07/2008 | 17:39:42,62 ] [ PC : DBARRAS ]
   [ MAJ : 25-07-2008 | 17:45 ]
 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [02/11/2005|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [02/11/2005|16:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [02/11/2005|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [02/11/2005|16:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [28/07/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
   [02/11/2005|16:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [11/03/2007|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [13/02/2008|18:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [27/07/2006|03:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [02/11/2005|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [10/09/2006|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eConsole
   [12/10/2007|19:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [12/10/2007|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
   [27/07/2006|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [10/03/2008|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [13/10/2007|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [17/07/2008|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
   [13/02/2008|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [28/07/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [08/03/2008|08:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
   [02/11/2005|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [03/11/2007|20:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
   [01/01/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
   [25/10/2006|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [24/03/2008|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [11/02/2007|17:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
   [13/02/2008|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [11/03/2007|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
   [12/08/2007|15:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
   [02/11/2005|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [12/08/2007|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
   [04/04/2007|17:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [08/06/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [07/08/2006|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [01/03/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [25/02/2008|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [10/11/2006|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [02/11/2005|15:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [02/11/2005|15:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [01/06/2007|12:29] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec
   [14/10/2007|11:48] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

   [25/08/2006|18:19] C:\DOCUME~1\PHANLIE\APPLIC~1\Adobe
   [03/01/2007|17:29] C:\DOCUME~1\PHANLIE\APPLIC~1\AdobeUM
   [31/03/2007|17:03] C:\DOCUME~1\PHANLIE\APPLIC~1\Apple Computer
   [13/02/2008|18:43] C:\DOCUME~1\PHANLIE\APPLIC~1\Canon
   [31/07/2006|15:44] C:\DOCUME~1\PHANLIE\APPLIC~1\CyberLink
   [02/11/2005|15:47] C:\DOCUME~1\PHANLIE\APPLIC~1\desktop.ini
   [13/03/2003|16:56] C:\DOCUME~1\PHANLIE\APPLIC~1\Enregistrement Hachette
   [25/02/2008|20:07] C:\DOCUME~1\PHANLIE\APPLIC~1\EoRezo
   [12/10/2007|20:59] C:\DOCUME~1\PHANLIE\APPLIC~1\F-Secure
   [04/04/2007|16:53] C:\DOCUME~1\PHANLIE\APPLIC~1\FunWebProducts
   [13/04/2008|19:31] C:\DOCUME~1\PHANLIE\APPLIC~1\Gamelab
   [27/07/2006|16:33] C:\DOCUME~1\PHANLIE\APPLIC~1\Google
   [27/07/2008|22:34] C:\DOCUME~1\PHANLIE\APPLIC~1\Grisoft
   [07/10/2006|12:22] C:\DOCUME~1\PHANLIE\APPLIC~1\Help
   [02/11/2005|16:01] C:\DOCUME~1\PHANLIE\APPLIC~1\Identities
   [25/02/2008|20:14] C:\DOCUME~1\PHANLIE\APPLIC~1\ItsLabel
   [26/07/2007|17:53] C:\DOCUME~1\PHANLIE\APPLIC~1\iWin
   [15/07/2008|11:42] C:\DOCUME~1\PHANLIE\APPLIC~1\Jane s Hotel
   [30/09/2007|16:37] C:\DOCUME~1\PHANLIE\APPLIC~1\Leadertech
   [27/07/2006|16:33] C:\DOCUME~1\PHANLIE\APPLIC~1\Macromedia
   [03/11/2007|14:58] C:\DOCUME~1\PHANLIE\APPLIC~1\Magic Academy
   [09/09/2006|18:24] C:\DOCUME~1\PHANLIE\APPLIC~1\Media Player Classic
   [02/11/2005|15:47] C:\DOCUME~1\PHANLIE\APPLIC~1\Microsoft
   [25/02/2008|20:52] C:\DOCUME~1\PHANLIE\APPLIC~1\Mozilla
   [27/07/2006|22:44] C:\DOCUME~1\PHANLIE\APPLIC~1\MSNInstaller
   [29/07/2007|14:29] C:\DOCUME~1\PHANLIE\APPLIC~1\My Games
   [12/10/2007|23:13] C:\DOCUME~1\PHANLIE\APPLIC~1\OpenOffice.org2
   [21/08/2006|15:33] C:\DOCUME~1\PHANLIE\APPLIC~1\Passeport II Prefs
   [31/07/2006|23:51] C:\DOCUME~1\PHANLIE\APPLIC~1\Picajet.com
   [25/10/2006|11:20] C:\DOCUME~1\PHANLIE\APPLIC~1\PlayFirst
   [12/04/2008|10:32] C:\DOCUME~1\PHANLIE\APPLIC~1\PowerChallenge
   [25/02/2008|20:17] C:\DOCUME~1\PHANLIE\APPLIC~1\Real
   [13/02/2008|18:13] C:\DOCUME~1\PHANLIE\APPLIC~1\ScanSoft
   [12/08/2007|15:22] C:\DOCUME~1\PHANLIE\APPLIC~1\Sony Ericsson
   [27/07/2006|19:13] C:\DOCUME~1\PHANLIE\APPLIC~1\Sun
   [02/11/2005|16:09] C:\DOCUME~1\PHANLIE\APPLIC~1\Symantec
   [25/02/2008|20:53] C:\DOCUME~1\PHANLIE\APPLIC~1\Talkback
   [12/08/2007|15:23] C:\DOCUME~1\PHANLIE\APPLIC~1\Teleca
   [20/10/2006|17:57] C:\DOCUME~1\PHANLIE\APPLIC~1\update.log
   [13/10/2007|10:51] C:\DOCUME~1\PHANLIE\APPLIC~1\vlc
   [04/03/2008|14:59] C:\DOCUME~1\PHANLIE\APPLIC~1\Windows Live Writer
   [11/02/2007|14:55] C:\DOCUME~1\PHANLIE\APPLIC~1\Zylom

   [27/07/2006|03:52] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Adobe
   [03/01/2007|17:35] C:\DOCUME~1\MAGLOIRE\APPLIC~1\AdobeUM
   [24/03/2008|18:03] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Apple Computer
   [16/10/2006|17:53] C:\DOCUME~1\MAGLOIRE\APPLIC~1\ArcSoft
   [27/02/2008|17:08] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Canon
   [27/07/2006|03:44] C:\DOCUME~1\MAGLOIRE\APPLIC~1\CyberLink
   [02/11/2005|15:47] C:\DOCUME~1\MAGLOIRE\APPLIC~1\desktop.ini
   [29/07/2008|08:43] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Else plus
   [13/10/2007|02:23] C:\DOCUME~1\MAGLOIRE\APPLIC~1\F-Secure
   [27/07/2006|15:25] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Google
   [13/10/2007|17:39] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Grisoft
   [27/07/2006|02:35] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Help
   [02/11/2005|16:01] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Identities
   [26/02/2008|17:08] C:\DOCUME~1\MAGLOIRE\APPLIC~1\ItsLabel
   [05/08/2007|18:06] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Leadertech
   [27/07/2006|15:21] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Macromedia
   [27/07/2006|16:23] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Media Player Classic
   [02/11/2005|15:47] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Microsoft
   [08/05/2008|14:34] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Mozilla
   [02/03/2008|23:44] C:\DOCUME~1\MAGLOIRE\APPLIC~1\OpenOffice.org2
   [02/04/2008|11:15] C:\DOCUME~1\MAGLOIRE\APPLIC~1\PowerChallenge
   [16/08/2007|08:33] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Sony Ericsson
   [10/03/2008|12:13] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Spyware Terminator
   [24/08/2006|03:38] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Sun
   [02/11/2005|16:09] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Symantec
   [16/08/2007|08:41] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Teleca
   [24/12/2007|17:45] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Zylom

   [23/08/2006|22:02] C:\DOCUME~1\STPHA~1\APPLIC~1\Adobe
   [23/08/2006|22:02] C:\DOCUME~1\STPHA~1\APPLIC~1\AdobeUM
   [02/11/2005|15:47] C:\DOCUME~1\STPHA~1\APPLIC~1\desktop.ini
   [29/07/2008|08:39] C:\DOCUME~1\STPHA~1\APPLIC~1\Else plus
   [14/10/2007|18:50] C:\DOCUME~1\STPHA~1\APPLIC~1\F-Secure
   [28/07/2006|01:51] C:\DOCUME~1\STPHA~1\APPLIC~1\Google
   [14/10/2007|18:45] C:\DOCUME~1\STPHA~1\APPLIC~1\Grisoft
   [23/08/2006|20:05] C:\DOCUME~1\STPHA~1\APPLIC~1\Help
   [02/11/2005|16:01] C:\DOCUME~1\STPHA~1\APPLIC~1\Identities
   [05/08/2007|18:51] C:\DOCUME~1\STPHA~1\APPLIC~1\Leadertech
   [28/07/2006|01:52] C:\DOCUME~1\STPHA~1\APPLIC~1\Macromedia
   [12/02/2008|21:37] C:\DOCUME~1\STPHA~1\APPLIC~1\Media Player Classic
   [02/11/2005|15:47] C:\DOCUME~1\STPHA~1\APPLIC~1\Microsoft
   [08/05/2008|16:38] C:\DOCUME~1\STPHA~1\APPLIC~1\Mozilla
   [08/05/2008|18:35] C:\DOCUME~1\STPHA~1\APPLIC~1\PowerChallenge
   [17/08/2007|11:55] C:\DOCUME~1\STPHA~1\APPLIC~1\Sony Ericsson
   [13/03/2008|10:37] C:\DOCUME~1\STPHA~1\APPLIC~1\Spyware Terminator
   [19/03/2008|12:25] C:\DOCUME~1\STPHA~1\APPLIC~1\Sun
   [02/11/2005|16:09] C:\DOCUME~1\STPHA~1\APPLIC~1\Symantec
   [17/08/2007|11:55] C:\DOCUME~1\STPHA~1\APPLIC~1\Teleca

   [03/01/2007|17:41] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [29/07/2008 08:25][--a------] C:\WINDOWS	asks\Scheduled scanning task.job
   [29/07/2008 14:34][--ah-----] C:\WINDOWS	asks\MP Scheduled Scan.job
   [12/06/2007 20:11][--ah-----] C:\WINDOWS	asks\MP Scheduled Quick Scan.job
   [29/07/2008 17:39][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [25/07/2008 20:08][--a------] C:\WINDOWS	asks\Norton AntiVirus - Analyser mon ordinateur - Magloire.job
   [29/07/2008 00:00][--a------] C:\WINDOWS	asks\Symantec Drmc.job
   [28/07/2008 12:00][--a------] C:\WINDOWS	asks\Norton SystemWorks One Button Checkup.job
   [29/07/2008 14:31][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 05:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [27/07/2006|01:15] C:\Program Files\Acer
   [02/11/2005|16:04] C:\Program Files\Adobe
   [31/07/2006|15:14] C:\Program Files\Boonty
   [31/07/2006|15:14] C:\Program Files\BoontyGames
   [11/04/2008|22:34] C:\Program Files\Borland
   [10/12/2006|19:20] C:\Program Files\Canon
   [13/02/2008|18:04] C:\Program Files\CanonBJ
   [27/07/2008|21:16] C:\Program Files\CCleaner
   [01/01/2007|23:15] C:\Program Files\CDBurnerXP Pro 3
   [11/04/2008|22:34] C:\Program Files\CollŠge Multim‚dia
   [20/10/2006|17:57] C:\Program Files\Common Files
   [02/11/2005|15:51] C:\Program Files\ComPlus Applications
   [07/03/2008|11:38] C:\Program Files\Crawler
   [02/11/2005|16:07] C:\Program Files\CyberLink
   [27/07/2006|15:37] C:\Program Files\eMule
   [25/02/2008|20:07] C:\Program Files\EoRezo
   [02/11/2005|15:47] C:\Program Files\Fichiers communs
   [27/07/2006|15:25] C:\Program Files\Google
   [13/10/2007|14:36] C:\Program Files\Grisoft
   [31/05/2008|15:13] C:\Program Files\inKline Global
   [02/11/2005|16:00] C:\Program Files\InstallShield Installation Information
   [02/11/2005|15:52] C:\Program Files\Internet Explorer
   [27/07/2006|01:17] C:\Program Files\Java
   [27/07/2006|16:22] C:\Program Files\K-Lite Codec Pack
   [28/01/2008|17:06] C:\Program Files\KONAMI
   [31/07/2006|15:15] C:\Program Files\Mes Jeux T‚l‚charg‚s
   [02/11/2005|15:51] C:\Program Files\Messenger
   [28/07/2008|21:37] C:\Program Files\Messenger Plus! Live
   [09/05/2007|20:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [02/11/2005|15:53] C:\Program Files\microsoft frontpage
   [25/02/2008|17:26] C:\Program Files\Microsoft SQL Server Compact Edition
   [02/11/2005|15:52] C:\Program Files\Movie Maker
   [08/05/2008|14:34] C:\Program Files\Mozilla Firefox
   [02/11/2005|15:51] C:\Program Files\MSN
   [02/11/2005|15:51] C:\Program Files\MSN Gaming Zone
   [31/03/2007|19:41] C:\Program Files\MSXML 4.0
   [02/11/2005|15:52] C:\Program Files\NetMeeting
   [12/10/2007|18:12] C:\Program Files\Neuf
   [02/11/2005|16:07] C:\Program Files\NewTech Infosystems
   [20/01/2008|21:11] C:\Program Files\Norton Security Scan
   [03/01/2007|17:42] C:\Program Files\Norton SystemWorks
   [02/11/2005|15:51] C:\Program Files\Online Services
   [12/10/2007|21:41] C:\Program Files\OpenOffice.org 2.2
   [02/11/2005|15:52] C:\Program Files\Outlook Express
   [12/10/2007|19:18] C:\Program Files\Pack Securite
   [31/07/2006|23:49] C:\Program Files\PicaFr
   [28/03/2008|19:41] C:\Program Files\Picasa2
   [17/12/2006|14:48] C:\Program Files\QuickTime
   [25/02/2008|20:18] C:\Program Files\Real
   [02/11/2005|16:02] C:\Program Files\Realtek AC97
   [13/02/2008|18:13] C:\Program Files\ScanSoft
   [29/07/2006|23:17] C:\Program Files\SdLL
   [02/11/2005|15:52] C:\Program Files\Services en ligne
   [02/08/2007|14:16] C:\Program Files\Shareaza
   [27/07/2006|01:13] C:\Program Files\SiS VGA Utilities V3.68
   [02/11/2005|16:00] C:\Program Files\sisagp
   [04/04/2007|17:07] C:\Program Files\Smiley Arcade
   [12/08/2007|15:12] C:\Program Files\Sony Ericsson
   [02/11/2005|16:09] C:\Program Files\Symantec
   [27/07/2006|02:56] C:\Program Files\SymNetDrv
   [02/04/2008|20:51] C:\Program Files\Trend Micro
   [02/11/2005|16:01] C:\Program Files\Uninstall Information
   [10/09/2006|10:20] C:\Program Files\Virtools Web Player 3.5
   [14/10/2007|11:46] C:\Program Files\Webroot
   [08/07/2007|18:59] C:\Program Files\Windames
   [22/03/2008|13:52] C:\Program Files\Windows Defender
   [25/02/2008|17:19] C:\Program Files\Windows Live
   [29/11/2007|21:19] C:\Program Files\Windows Live Favorites
   [25/10/2006|10:57] C:\Program Files\Windows Live Safety Center
   [01/03/2007|17:54] C:\Program Files\Windows Live Toolbar
   [09/12/2006|19:11] C:\Program Files\Windows Media Connect 2
   [02/11/2005|15:51] C:\Program Files\Windows Media Player
   [02/11/2005|15:51] C:\Program Files\Windows NT
   [02/11/2005|15:52] C:\Program Files\WindowsUpdate
   [03/01/2007|18:06] C:\Program Files\WinRAR
   [02/11/2005|15:53] C:\Program Files\xerox
   [08/06/2007|17:59] C:\Program Files\ZEMNOTT
   [11/02/2007|14:55] C:\Program Files\Zylom Games

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [02/11/2005|16:04] C:\Program Files\Fichiers communs\Adobe
   [27/07/2006|01:15] C:\Program Files\Fichiers communs\ArcSoft
   [13/02/2008|18:09] C:\Program Files\Fichiers communs\CANON
   [02/11/2005|16:00] C:\Program Files\Fichiers communs\InstallShield
   [27/07/2006|01:16] C:\Program Files\Fichiers communs\Java
   [02/11/2005|15:47] C:\Program Files\Fichiers communs\Microsoft Shared
   [02/11/2005|15:52] C:\Program Files\Fichiers communs\MSSoap
   [02/11/2005|16:07] C:\Program Files\Fichiers communs\muvee Technologies
   [02/11/2005|16:07] C:\Program Files\Fichiers communs\NewTech Infosystems
   [02/11/2005|15:47] C:\Program Files\Fichiers communs\ODBC
   [25/02/2008|20:17] C:\Program Files\Fichiers communs\Real
   [13/02/2008|18:13] C:\Program Files\Fichiers communs\ScanSoft Shared
   [02/11/2005|15:52] C:\Program Files\Fichiers communs\Services
   [12/08/2007|15:12] C:\Program Files\Fichiers communs\Sony Ericsson Shared
   [02/11/2005|15:47] C:\Program Files\Fichiers communs\SpeechEngines
   [02/11/2005|16:09] C:\Program Files\Fichiers communs\Symantec Shared
   [02/11/2005|15:52] C:\Program Files\Fichiers communs\System
   [12/08/2007|15:12] C:\Program Files\Fichiers communs\Teleca Shared
   [25/02/2008|17:19] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 60 Processus )

   IEXPLORE.EXE ~ [820]
   IEXPLORE.EXE ~ [3432]

   --------------------\  Recherche avec S_Lop

   C:\DOCUME~1\PHANLIE\LOCALS~1\Temp\bis40E.exe
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\LIST ARMY.exe
   C:\DOCUME~1\MAGLOIRE\APPLIC~1\ELSE PLUS
   C:\DOCUME~1\MAGLOIRE\APPLIC~1\ELSE PLUS\AXISNEW.exe
   C:\DOCUME~1\STÉPHA~1\APPLIC~1\ELSE PLUS
   C:\DOCUME~1\STÉPHA~1\APPLIC~1\ELSE PLUS\AXISNEW.exe
   C:\DOCUME~1\PHANÉLIE\Cookies\phanélie@32vegas[1].txt
   C:\DOCUME~1\PHANÉLIE\Cookies\phanélie@banner.32vegas[2].txt
   C:\DOCUME~1\PHANÉLIE\Cookies\phanélie@888.orange[1].txt
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "1 mags 16 more"="C:\Documents and Settings\All Users\Application Data\Admin Inter 1 Mags\LIST ARMY.exe"

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-29 17:43:33
   Windows 5.1.2600 Service Pack 3 FAT NTAPI
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:52][D:5]-> C:\DOCUME~1\PHANLIE\LOCALS~1\Temp
   [F:192][D:0]-> C:\DOCUME~1\PHANLIE\Cookies
   [F:10199][D:13]-> C:\DOCUME~1\PHANLIE\LOCALS~1\TEMPOR~1\content.IE5
   [F:1535][D:3]-> C:\Recycled

   --------------------\  Fin du rapport a 17:44:43,07

Utilisateur anonyme · Answer

Relance Lop S&D 


* Choisis cette fois ci l'Option 2 (Suppression) 
* Ne ferme pas la fenêtre lors de la suppression ! 
* Poste le rapport généré (C:\lopR.txt)

titite_baby · Answer

--------------------\  Lop S&D 4.2.2-4  XP/Vista

   [ Windows XP (NT 5.1) Build 2600, Service Pack 3 ]
   [ USER : Phan‚lie ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 29/07/2008 | 18:10:24,06 ] [ PC : DBARRAS ]
   [ MAJ : 25-07-2008 | 17:45 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\LIST ARMY.exe
   Supprime! - C:\DOCUME~1\MAGLOIRE\APPLIC~1\ELSE PLUS\AXISNEW.exe
   Supprime! - C:\DOCUME~1\STÉPHA~1\APPLIC~1\ELSE PLUS\AXISNEW.exe
   Supprime! - C:\DOCUME~1\PHANÉLIE\Cookies\phanélie@32vegas[1].txt
   Supprime! - C:\DOCUME~1\PHANÉLIE\Cookies\phanélie@banner.32vegas[2].txt
   Supprime! - C:\DOCUME~1\PHANÉLIE\Cookies\phanélie@888.orange[1].txt
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
   Supprime! - C:\DOCUME~1\MAGLOIRE\APPLIC~1\ELSE PLUS
   Supprime! - C:\DOCUME~1\STÉPHA~1\APPLIC~1\ELSE PLUS
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [02/11/2005|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [02/11/2005|16:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [02/11/2005|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [02/11/2005|16:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [02/11/2005|16:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [11/03/2007|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [13/02/2008|18:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [27/07/2006|03:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [02/11/2005|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [10/09/2006|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eConsole
   [12/10/2007|19:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [12/10/2007|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
   [27/07/2006|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [10/03/2008|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [13/10/2007|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [17/07/2008|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
   [13/02/2008|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [28/07/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [08/03/2008|08:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
   [02/11/2005|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [03/11/2007|20:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
   [01/01/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
   [25/10/2006|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [24/03/2008|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [11/02/2007|17:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
   [13/02/2008|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [11/03/2007|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
   [12/08/2007|15:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
   [02/11/2005|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [12/08/2007|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
   [04/04/2007|17:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [08/06/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [07/08/2006|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [01/03/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [25/02/2008|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [10/11/2006|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [02/11/2005|15:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [02/11/2005|15:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [01/06/2007|12:29] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec
   [14/10/2007|11:48] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

   [25/08/2006|18:19] C:\DOCUME~1\PHANLIE\APPLIC~1\Adobe
   [03/01/2007|17:29] C:\DOCUME~1\PHANLIE\APPLIC~1\AdobeUM
   [31/03/2007|17:03] C:\DOCUME~1\PHANLIE\APPLIC~1\Apple Computer
   [13/02/2008|18:43] C:\DOCUME~1\PHANLIE\APPLIC~1\Canon
   [31/07/2006|15:44] C:\DOCUME~1\PHANLIE\APPLIC~1\CyberLink
   [02/11/2005|15:47] C:\DOCUME~1\PHANLIE\APPLIC~1\desktop.ini
   [13/03/2003|16:56] C:\DOCUME~1\PHANLIE\APPLIC~1\Enregistrement Hachette
   [25/02/2008|20:07] C:\DOCUME~1\PHANLIE\APPLIC~1\EoRezo
   [12/10/2007|20:59] C:\DOCUME~1\PHANLIE\APPLIC~1\F-Secure
   [04/04/2007|16:53] C:\DOCUME~1\PHANLIE\APPLIC~1\FunWebProducts
   [13/04/2008|19:31] C:\DOCUME~1\PHANLIE\APPLIC~1\Gamelab
   [27/07/2006|16:33] C:\DOCUME~1\PHANLIE\APPLIC~1\Google
   [27/07/2008|22:34] C:\DOCUME~1\PHANLIE\APPLIC~1\Grisoft
   [07/10/2006|12:22] C:\DOCUME~1\PHANLIE\APPLIC~1\Help
   [02/11/2005|16:01] C:\DOCUME~1\PHANLIE\APPLIC~1\Identities
   [25/02/2008|20:14] C:\DOCUME~1\PHANLIE\APPLIC~1\ItsLabel
   [26/07/2007|17:53] C:\DOCUME~1\PHANLIE\APPLIC~1\iWin
   [15/07/2008|11:42] C:\DOCUME~1\PHANLIE\APPLIC~1\Jane s Hotel
   [30/09/2007|16:37] C:\DOCUME~1\PHANLIE\APPLIC~1\Leadertech
   [27/07/2006|16:33] C:\DOCUME~1\PHANLIE\APPLIC~1\Macromedia
   [03/11/2007|14:58] C:\DOCUME~1\PHANLIE\APPLIC~1\Magic Academy
   [09/09/2006|18:24] C:\DOCUME~1\PHANLIE\APPLIC~1\Media Player Classic
   [02/11/2005|15:47] C:\DOCUME~1\PHANLIE\APPLIC~1\Microsoft
   [25/02/2008|20:52] C:\DOCUME~1\PHANLIE\APPLIC~1\Mozilla
   [27/07/2006|22:44] C:\DOCUME~1\PHANLIE\APPLIC~1\MSNInstaller
   [29/07/2007|14:29] C:\DOCUME~1\PHANLIE\APPLIC~1\My Games
   [12/10/2007|23:13] C:\DOCUME~1\PHANLIE\APPLIC~1\OpenOffice.org2
   [21/08/2006|15:33] C:\DOCUME~1\PHANLIE\APPLIC~1\Passeport II Prefs
   [31/07/2006|23:51] C:\DOCUME~1\PHANLIE\APPLIC~1\Picajet.com
   [25/10/2006|11:20] C:\DOCUME~1\PHANLIE\APPLIC~1\PlayFirst
   [12/04/2008|10:32] C:\DOCUME~1\PHANLIE\APPLIC~1\PowerChallenge
   [25/02/2008|20:17] C:\DOCUME~1\PHANLIE\APPLIC~1\Real
   [13/02/2008|18:13] C:\DOCUME~1\PHANLIE\APPLIC~1\ScanSoft
   [12/08/2007|15:22] C:\DOCUME~1\PHANLIE\APPLIC~1\Sony Ericsson
   [27/07/2006|19:13] C:\DOCUME~1\PHANLIE\APPLIC~1\Sun
   [02/11/2005|16:09] C:\DOCUME~1\PHANLIE\APPLIC~1\Symantec
   [25/02/2008|20:53] C:\DOCUME~1\PHANLIE\APPLIC~1\Talkback
   [12/08/2007|15:23] C:\DOCUME~1\PHANLIE\APPLIC~1\Teleca
   [20/10/2006|17:57] C:\DOCUME~1\PHANLIE\APPLIC~1\update.log
   [13/10/2007|10:51] C:\DOCUME~1\PHANLIE\APPLIC~1\vlc
   [04/03/2008|14:59] C:\DOCUME~1\PHANLIE\APPLIC~1\Windows Live Writer
   [11/02/2007|14:55] C:\DOCUME~1\PHANLIE\APPLIC~1\Zylom

   [27/07/2006|03:52] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Adobe
   [03/01/2007|17:35] C:\DOCUME~1\MAGLOIRE\APPLIC~1\AdobeUM
   [24/03/2008|18:03] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Apple Computer
   [16/10/2006|17:53] C:\DOCUME~1\MAGLOIRE\APPLIC~1\ArcSoft
   [27/02/2008|17:08] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Canon
   [27/07/2006|03:44] C:\DOCUME~1\MAGLOIRE\APPLIC~1\CyberLink
   [02/11/2005|15:47] C:\DOCUME~1\MAGLOIRE\APPLIC~1\desktop.ini
   [13/10/2007|02:23] C:\DOCUME~1\MAGLOIRE\APPLIC~1\F-Secure
   [27/07/2006|15:25] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Google
   [13/10/2007|17:39] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Grisoft
   [27/07/2006|02:35] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Help
   [02/11/2005|16:01] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Identities
   [26/02/2008|17:08] C:\DOCUME~1\MAGLOIRE\APPLIC~1\ItsLabel
   [05/08/2007|18:06] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Leadertech
   [27/07/2006|15:21] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Macromedia
   [27/07/2006|16:23] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Media Player Classic
   [02/11/2005|15:47] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Microsoft
   [08/05/2008|14:34] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Mozilla
   [02/03/2008|23:44] C:\DOCUME~1\MAGLOIRE\APPLIC~1\OpenOffice.org2
   [02/04/2008|11:15] C:\DOCUME~1\MAGLOIRE\APPLIC~1\PowerChallenge
   [16/08/2007|08:33] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Sony Ericsson
   [10/03/2008|12:13] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Spyware Terminator
   [24/08/2006|03:38] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Sun
   [02/11/2005|16:09] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Symantec
   [16/08/2007|08:41] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Teleca
   [24/12/2007|17:45] C:\DOCUME~1\MAGLOIRE\APPLIC~1\Zylom

   [23/08/2006|22:02] C:\DOCUME~1\STPHA~1\APPLIC~1\Adobe
   [23/08/2006|22:02] C:\DOCUME~1\STPHA~1\APPLIC~1\AdobeUM
   [02/11/2005|15:47] C:\DOCUME~1\STPHA~1\APPLIC~1\desktop.ini
   [14/10/2007|18:50] C:\DOCUME~1\STPHA~1\APPLIC~1\F-Secure
   [28/07/2006|01:51] C:\DOCUME~1\STPHA~1\APPLIC~1\Google
   [14/10/2007|18:45] C:\DOCUME~1\STPHA~1\APPLIC~1\Grisoft
   [23/08/2006|20:05] C:\DOCUME~1\STPHA~1\APPLIC~1\Help
   [02/11/2005|16:01] C:\DOCUME~1\STPHA~1\APPLIC~1\Identities
   [05/08/2007|18:51] C:\DOCUME~1\STPHA~1\APPLIC~1\Leadertech
   [28/07/2006|01:52] C:\DOCUME~1\STPHA~1\APPLIC~1\Macromedia
   [12/02/2008|21:37] C:\DOCUME~1\STPHA~1\APPLIC~1\Media Player Classic
   [02/11/2005|15:47] C:\DOCUME~1\STPHA~1\APPLIC~1\Microsoft
   [08/05/2008|16:38] C:\DOCUME~1\STPHA~1\APPLIC~1\Mozilla
   [08/05/2008|18:35] C:\DOCUME~1\STPHA~1\APPLIC~1\PowerChallenge
   [17/08/2007|11:55] C:\DOCUME~1\STPHA~1\APPLIC~1\Sony Ericsson
   [13/03/2008|10:37] C:\DOCUME~1\STPHA~1\APPLIC~1\Spyware Terminator
   [19/03/2008|12:25] C:\DOCUME~1\STPHA~1\APPLIC~1\Sun
   [02/11/2005|16:09] C:\DOCUME~1\STPHA~1\APPLIC~1\Symantec
   [17/08/2007|11:55] C:\DOCUME~1\STPHA~1\APPLIC~1\Teleca

   [03/01/2007|17:41] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [29/07/2008 08:25][--a------] C:\WINDOWS	asks\Scheduled scanning task.job
   [29/07/2008 14:34][--ah-----] C:\WINDOWS	asks\MP Scheduled Scan.job
   [12/06/2007 20:11][--ah-----] C:\WINDOWS	asks\MP Scheduled Quick Scan.job
   [29/07/2008 17:39][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [25/07/2008 20:08][--a------] C:\WINDOWS	asks\Norton AntiVirus - Analyser mon ordinateur - Magloire.job
   [29/07/2008 00:00][--a------] C:\WINDOWS	asks\Symantec Drmc.job
   [28/07/2008 12:00][--a------] C:\WINDOWS	asks\Norton SystemWorks One Button Checkup.job
   [29/07/2008 14:31][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 05:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [27/07/2006|01:15] C:\Program Files\Acer
   [02/11/2005|16:04] C:\Program Files\Adobe
   [31/07/2006|15:14] C:\Program Files\Boonty
   [31/07/2006|15:14] C:\Program Files\BoontyGames
   [11/04/2008|22:34] C:\Program Files\Borland
   [10/12/2006|19:20] C:\Program Files\Canon
   [13/02/2008|18:04] C:\Program Files\CanonBJ
   [27/07/2008|21:16] C:\Program Files\CCleaner
   [01/01/2007|23:15] C:\Program Files\CDBurnerXP Pro 3
   [11/04/2008|22:34] C:\Program Files\CollŠge Multim‚dia
   [20/10/2006|17:57] C:\Program Files\Common Files
   [02/11/2005|15:51] C:\Program Files\ComPlus Applications
   [07/03/2008|11:38] C:\Program Files\Crawler
   [02/11/2005|16:07] C:\Program Files\CyberLink
   [27/07/2006|15:37] C:\Program Files\eMule
   [25/02/2008|20:07] C:\Program Files\EoRezo
   [02/11/2005|15:47] C:\Program Files\Fichiers communs
   [27/07/2006|15:25] C:\Program Files\Google
   [13/10/2007|14:36] C:\Program Files\Grisoft
   [31/05/2008|15:13] C:\Program Files\inKline Global
   [02/11/2005|16:00] C:\Program Files\InstallShield Installation Information
   [02/11/2005|15:52] C:\Program Files\Internet Explorer
   [27/07/2006|01:17] C:\Program Files\Java
   [27/07/2006|16:22] C:\Program Files\K-Lite Codec Pack
   [28/01/2008|17:06] C:\Program Files\KONAMI
   [31/07/2006|15:15] C:\Program Files\Mes Jeux T‚l‚charg‚s
   [02/11/2005|15:51] C:\Program Files\Messenger
   [28/07/2008|21:37] C:\Program Files\Messenger Plus! Live
   [09/05/2007|20:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [02/11/2005|15:53] C:\Program Files\microsoft frontpage
   [25/02/2008|17:26] C:\Program Files\Microsoft SQL Server Compact Edition
   [02/11/2005|15:52] C:\Program Files\Movie Maker
   [08/05/2008|14:34] C:\Program Files\Mozilla Firefox
   [02/11/2005|15:51] C:\Program Files\MSN
   [02/11/2005|15:51] C:\Program Files\MSN Gaming Zone
   [31/03/2007|19:41] C:\Program Files\MSXML 4.0
   [02/11/2005|15:52] C:\Program Files\NetMeeting
   [12/10/2007|18:12] C:\Program Files\Neuf
   [02/11/2005|16:07] C:\Program Files\NewTech Infosystems
   [20/01/2008|21:11] C:\Program Files\Norton Security Scan
   [03/01/2007|17:42] C:\Program Files\Norton SystemWorks
   [02/11/2005|15:51] C:\Program Files\Online Services
   [12/10/2007|21:41] C:\Program Files\OpenOffice.org 2.2
   [02/11/2005|15:52] C:\Program Files\Outlook Express
   [12/10/2007|19:18] C:\Program Files\Pack Securite
   [31/07/2006|23:49] C:\Program Files\PicaFr
   [28/03/2008|19:41] C:\Program Files\Picasa2
   [17/12/2006|14:48] C:\Program Files\QuickTime
   [25/02/2008|20:18] C:\Program Files\Real
   [02/11/2005|16:02] C:\Program Files\Realtek AC97
   [13/02/2008|18:13] C:\Program Files\ScanSoft
   [29/07/2006|23:17] C:\Program Files\SdLL
   [02/11/2005|15:52] C:\Program Files\Services en ligne
   [02/08/2007|14:16] C:\Program Files\Shareaza
   [27/07/2006|01:13] C:\Program Files\SiS VGA Utilities V3.68
   [02/11/2005|16:00] C:\Program Files\sisagp
   [04/04/2007|17:07] C:\Program Files\Smiley Arcade
   [12/08/2007|15:12] C:\Program Files\Sony Ericsson
   [02/11/2005|16:09] C:\Program Files\Symantec
   [27/07/2006|02:56] C:\Program Files\SymNetDrv
   [02/04/2008|20:51] C:\Program Files\Trend Micro
   [02/11/2005|16:01] C:\Program Files\Uninstall Information
   [10/09/2006|10:20] C:\Program Files\Virtools Web Player 3.5
   [14/10/2007|11:46] C:\Program Files\Webroot
   [08/07/2007|18:59] C:\Program Files\Windames
   [22/03/2008|13:52] C:\Program Files\Windows Defender
   [25/02/2008|17:19] C:\Program Files\Windows Live
   [29/11/2007|21:19] C:\Program Files\Windows Live Favorites
   [25/10/2006|10:57] C:\Program Files\Windows Live Safety Center
   [01/03/2007|17:54] C:\Program Files\Windows Live Toolbar
   [09/12/2006|19:11] C:\Program Files\Windows Media Connect 2
   [02/11/2005|15:51] C:\Program Files\Windows Media Player
   [02/11/2005|15:51] C:\Program Files\Windows NT
   [02/11/2005|15:52] C:\Program Files\WindowsUpdate
   [03/01/2007|18:06] C:\Program Files\WinRAR
   [02/11/2005|15:53] C:\Program Files\xerox
   [08/06/2007|17:59] C:\Program Files\ZEMNOTT
   [11/02/2007|14:55] C:\Program Files\Zylom Games

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [02/11/2005|16:04] C:\Program Files\Fichiers communs\Adobe
   [27/07/2006|01:15] C:\Program Files\Fichiers communs\ArcSoft
   [13/02/2008|18:09] C:\Program Files\Fichiers communs\CANON
   [02/11/2005|16:00] C:\Program Files\Fichiers communs\InstallShield
   [27/07/2006|01:16] C:\Program Files\Fichiers communs\Java
   [02/11/2005|15:47] C:\Program Files\Fichiers communs\Microsoft Shared
   [02/11/2005|15:52] C:\Program Files\Fichiers communs\MSSoap
   [02/11/2005|16:07] C:\Program Files\Fichiers communs\muvee Technologies
   [02/11/2005|16:07] C:\Program Files\Fichiers communs\NewTech Infosystems
   [02/11/2005|15:47] C:\Program Files\Fichiers communs\ODBC
   [25/02/2008|20:17] C:\Program Files\Fichiers communs\Real
   [13/02/2008|18:13] C:\Program Files\Fichiers communs\ScanSoft Shared
   [02/11/2005|15:52] C:\Program Files\Fichiers communs\Services
   [12/08/2007|15:12] C:\Program Files\Fichiers communs\Sony Ericsson Shared
   [02/11/2005|15:47] C:\Program Files\Fichiers communs\SpeechEngines
   [02/11/2005|16:09] C:\Program Files\Fichiers communs\Symantec Shared
   [02/11/2005|15:52] C:\Program Files\Fichiers communs\System
   [12/08/2007|15:12] C:\Program Files\Fichiers communs\Teleca Shared
   [25/02/2008|17:19] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 57 Processus )

   ... OK !

   --------------------\  Recherche avec S_Lop

   C:\DOCUME~1\PHANLIE\LOCALS~1\Temp\bis40E.exe
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-29 18:12:54
   Windows 5.1.2600 Service Pack 3 FAT NTAPI
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:52][D:5]-> C:\DOCUME~1\PHANLIE\LOCALS~1\Temp
   [F:196][D:0]-> C:\DOCUME~1\PHANLIE\Cookies
   [F:10490][D:13]-> C:\DOCUME~1\PHANLIE\LOCALS~1\TEMPOR~1\content.IE5
   [F:1535][D:3]-> C:\Recycled

   --------------------\  Fin du rapport a 18:13:40,56


(je doit le supprimer)

Utilisateur anonyme · Answer

élécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

Avant de telecharger clic sur enregistrer renome le en killbagle et enregistre le sur le bureau 


-> Double clique sur killbagle.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 


Une fois fait, sur ton bureau double-clic sur killbagle.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 


-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

titite_baby · Answer

ComboFix 08-07-28.6 - Phanélie 2008-07-29 18:36:41.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.448 [GMT 2:00] Endroit: C:\DOCUME~1\PHANÉLIE\Bureau\killbagle.exe * Création d'un nouveau point de restauration * Resident AV is active [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\DOCUME~1\PHANÉLIE\Application Data\FunWebProducts C:\DOCUME~1\PHANÉLIE\Application Data\FunWebProducts\Data\Phanélie\avatar.dat C:\DOCUME~1\PHANÉLIE\Application Data\FunWebProducts\Data\Phanélie egister.dat C:\DOCUME~1\PHANÉLIE\Application Data\FunWebProducts\Data\Phanélie\zbucks.dat C:\Documents and Settings\Magloire\Application Data\macromedia\Flash Player\#SharedObjects\ZD7LAELV\interclick.com C:\Documents and Settings\Magloire\Application Data\macromedia\Flash Player\#SharedObjects\ZD7LAELV\interclick.com\ud.sol C:\Documents and Settings\Magloire\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com C:\Documents and Settings\Magloire\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol C:\Documents and Settings\Stéphanie Moulébé\Menu Démarrer\Programmes\Spyware-Secure C:\Documents and Settings\Stéphanie Moulébé\Menu Démarrer\Programmes\Spyware-Secure\Website.lnk C:\WINDOWS\dialerexe.ini C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48 C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\dirty_dishes.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\foodtray.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\heart1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\heart2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\heart3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\menu_down.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\menu_up.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories\mop_prop.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\accessories icket.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\music\cafe\cafe_music_a1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\music\cafe\cafe_music_a2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\music\cafe\cafe_music_a3.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\music\cafe\cafe_music_a4.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\music\mainmenumusic.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\baby_cry.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\chef_cook1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\closing_time.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\customer_ditch.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\dialog_down.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\dialog_up.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\drink_table.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\expert.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\highchair_deliver.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\highchair_pickup.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\keystroke2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\level_lose.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\level_win.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\menu_click.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\menu_rollover.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\mop_pickup.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\mop_spill.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_bring_check_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_deliver_food_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_dropoff_drinks_1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_food_ready_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_gain_heart_1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_get_drinks_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_menu_down.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_party_arrive_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_pencil_write_2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_pickup_food_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\sfx_seat_people_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx\spill.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx able_drink.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\audio\sfx ip_2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\flo_lose.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\flo_win.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\fullscreendialog.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\high_score_menu_bg.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\levelintro.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\levelintro.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\levelover.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\longdialog.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\longdialog.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\mainmenu.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\mainmenu_logo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\popup.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\popup.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds extfield.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\backgrounds\upgrade_lines.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\arrowdown_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\arrowdown_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\arrowdown_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\arrowup_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\arrowup_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\arrowup_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\checkbox_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\checkbox_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\checkbox_rotated_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\checkbox_rotated_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\decor_highlight.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\decor_normal.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\decor_selected.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a_large_1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a_large_2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a_large_3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a_small_1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a_small_2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a_small_3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\dialog_button_a3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\left_arrow_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\left_arrow_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\left_arrow_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button1_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button1_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button1_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button1_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button2_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button2_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button2_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\main_menu_button2_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\map_button_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\map_button_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\map_button_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons ight_arrow_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons ight_arrow_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons ight_arrow_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\upgrade_down.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\upgrade_over.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\upgrade_up.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\buttons\welcome_player.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\config\actionpoints.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\config\career.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\config\customer.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\config\endless.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\config\global.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\config\powerups.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\cook\stove.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\cursor\arrow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\cursor\click.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\cursor\click2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\cursor\grab.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\cursor\open.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male ed.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\dad_male ed_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male ed.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\kid_male ed_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\baby.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\baby.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\blue_baby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female ed.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female ed_baby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\mom_female ed_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female ed.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\customers\young_female ed_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\flo\idle.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\flo\idle.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\flo\lower.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\flo\lower.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\flo\upper.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\flo\upper.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\fonts\mercurius.mvec C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\bench.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\bench.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\blue_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\chair.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\chair.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\dirt2top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\dirt4top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\dishcart.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\dishcart.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\green_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\highchair_prop_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\highchair_prop_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\highchairbaby.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\highchairbaby.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\luxury_bench.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\luxury_bench.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\mop_station_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\mop_station_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\mop_station_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\podium.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\podium_heart.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\podium_heart.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\purple_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture adio.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture ed_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\spill.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\spill.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\stereo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture icketstation.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture icketstation.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\furniture\yellow_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\family.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help_dividerline.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help1_colormatch1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help1_colormatch2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help1_noise.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help1_score.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help2_cleardishes.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help2_givecheck.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help2_pickupfood.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help2_servefood.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\help\help2_takeorder.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\hiscore\local-hs-bb.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\hiscore\p1icon.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\career_1_1.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\career_1_2.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\career_1_3.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\career_1_4.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\career_1_5.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\career_1_6.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\endless_1_1.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\endless_1_1_a.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\endless_1_1_b.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\layouts\endless_1_1_c.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\playfirstlogo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\background.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\chairs\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\chairs\green.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\chairs\green.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\chairs\grey.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\chairs ed.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\food\cup1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\food\food.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\food\food.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\frames\2_0.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\frames\2_1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\furniture\drinkstation1_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\furniture\drinkstation1_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\furniture\drinkstation1_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\people\cook.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\people\cook.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\props\cup_prop1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe ables\2top.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe ables\2top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe ables\4top.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe ables\4top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\upgrade_icons\cafe_icon_2_0.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\upgrade_icons\cafe_icon_2_1.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants\cafe\upgrades.xml C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets estaurants ableshadow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\careerupgrade.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\choosedifficulty.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\closeconfirm.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\entername.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\game.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\getmoregames.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\help1.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\help2.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\hiscore.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\hiscoreinfo.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\hiscoresubmit.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\levelintro.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\levelover.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\loading.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\mainloop.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\mainmenu.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\ok.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\pause.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\style.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\upgrade.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\upsell.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\scripts\yesno.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\splash\aol_logo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\splash\playfirst_logo.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\strings.xml C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\angersmoke.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\angersmoke.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\bubbles equest_bubble.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\bubbles equest_mop.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\bubbles equest_rejectmeal.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\chairflags.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\chairflags.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\check.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\checkmark.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\closed.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\coinflip.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\coinflip.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\decor_lines.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\dollar.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\expert.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\foodpoof.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\foodpoof.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\heartgrow.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\heartgrow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\jar.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\jar.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\lives_icon.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui oisering.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui otes\music_boost_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui otes\music_boost_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui otes\music_boost_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui otes\music_boost_d.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui otes\music_boost_e.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui otes\music_boost_f.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui ablenumber_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui ablenumber_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui raynumber.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui utorialarrow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui utorialbox.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\ui_base.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\ui_hand.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\ui_timer_off.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\ui_timer_on.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgradeanim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_bench_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_bench_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_bench_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_drink_station1_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_drink_station1_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_drink_station1_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_luxury_bench_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_luxury_bench_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_luxury_bench_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_oven_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_oven_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_oven_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_podium_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_podium_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_podium_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_powerbars_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_powerbars_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_powerbars_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_radio_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_radio_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_radio_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_stereo_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_stereo_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_stereo_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_table_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_table_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\ui\upgrades\icon_table_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\upsell\dd1.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\upsell\dd2.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\upsell\dd3.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\assets\upsell\dd4.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.48\dinerdash2.exe C:\WINDOWS\Downloaded Program Files\setup.inf C:\WINDOWS\system32\stera.job . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-28 to 2008-07-29 )))))))))))))))))))))))))))))))))))) . 2008-07-29 17:37 . 2008-07-29 17:37 d-------- C:\Lop SD 2008-07-28 21:38 . 2008-07-28 21:38 d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Messenger Plus! 2008-07-28 21:37 . 2008-07-28 21:37 d-------- C:\Program Files\Messenger Plus! Live 2008-07-27 22:33 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-07-27 21:16 . 2008-07-27 21:16 d-------- C:\Program Files\CCleaner 2008-07-27 16:38 . 2008-07-27 16:38 d-------- C:\Deckard 2008-07-26 12:38 . 2008-07-26 12:38 201 --a------ C:\Raccourci (5) vers Lecteur CD.lnk 2008-07-25 19:26 . 2008-07-25 19:26 d--hs---- C:\FOUND.030 2008-07-17 15:43 . 2008-07-17 15:44 d-------- C:\DOCUME~1\ALLUSE~1\Application Data\HipSoft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 17:47 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 17:47 147,968 ------w C:\WINDOWS\system32\dllcache\dnsapi.dll 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers cpip.sys 2008-06-20 11:51 361,600 ------w C:\WINDOWS\system32\dllcache cpip.sys 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 11:40 138,496 ------w C:\WINDOWS\system32\dllcache\afd.sys 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers cpip6.sys 2008-06-20 11:08 225,856 ------w C:\WINDOWS\system32\dllcache cpip6.sys 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys 2008-05-31 13:13 --------- d-----w C:\Program Files\inKline Global 2008-05-09 10:55 90,112 ----a-w C:\WINDOWS\system32\wshext.dll 2008-05-09 10:55 90,112 ------w C:\WINDOWS\system32\dllcache\wshext.dll 2008-05-09 10:55 512,000 ------w C:\WINDOWS\system32\dllcache\jscript.dll 2008-05-09 10:55 430,080 ----a-w C:\WINDOWS\system32\vbscript.dll 2008-05-09 10:55 430,080 ------w C:\WINDOWS\system32\dllcache\vbscript.dll 2008-05-09 10:55 180,224 ----a-w C:\WINDOWS\system32\scrobj.dll 2008-05-09 10:55 180,224 ------w C:\WINDOWS\system32\dllcache\scrobj.dll 2008-05-09 10:55 172,032 ----a-w C:\WINDOWS\system32\scrrun.dll 2008-05-09 10:55 172,032 ------w C:\WINDOWS\system32\dllcache\scrrun.dll 2008-05-08 14:02 203,136 ------w C:\WINDOWS\system32\dllcache mcast.sys 2008-05-08 11:24 155,648 ----a-w C:\WINDOWS\system32\wscript.exe 2008-05-08 11:24 155,648 ------w C:\WINDOWS\system32\dllcache\wscript.exe 2008-05-07 09:07 135,168 ----a-w C:\WINDOWS\system32\cscript.exe 2008-05-07 09:07 135,168 ------w C:\WINDOWS\system32\dllcache\cscript.exe 2008-05-07 05:11 1,294,336 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-07 05:11 1,294,336 ------w C:\WINDOWS\system32\dllcache\quartz.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 04:34 15360] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-10 21:52 68856] "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2008-02-26 02:23 443968] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "F-Secure Manager"="C:\Program Files\Pack Securite\Common\FSM32.EXE" [2007-04-26 18:12 183208] "F-Secure TNB"="C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" [2007-04-26 18:10 740208] "ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-21 16:29 58984] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.X264"= x264vfw.dll "VIDC.3iv2"= 3ivxVfWCodec.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\eMule\emule.exe"= "C:\Program Files\Neuf\Media Center\httpd\httpd.exe"= C:\Program Files\Neuf\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.2/255.255.255.255:Enabled:Serveur de partage Media Center (Player Neuf Cegetel) "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= R0 FSFW;F-Secure Firewall Driver;C:\WINDOWS\system32\drivers\fsdfw.sys [2008-03-17 21:29] R1 F-Secure HIPS;F-Secure HIPS;C:\Program Files\Pack Securite\HIPS\fshs.sys [2008-03-02 12:32] R2 int15.sys;int15.sys;C:\Acer\Empowering Technology\eRecovery\int15.sys [2005-01-13 14:46] R3 F-Secure Gatekeeper;F-Secure Gatekeeper;C:\Program Files\Pack Securite\Anti-Virus\minifilter\fsgk.sys [2007-04-26 18:07] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 20:45] S3 GoogleDesktopManager-091907-194040;Google Desktop Manager 5.1.709.19590;C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2007-11-19 12:34] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 20:45] S4 F-Secure Filter;F-Secure File System Filter;C:\Program Files\Pack Securite\Anti-Virus\Win2K\FSfilter.sys [2007-04-26 18:08] S4 F-Secure Recognizer;F-Secure File System Recognizer;C:\Program Files\Pack Securite\Anti-Virus\Win2K\FSrec.sys [2007-04-26 18:08] . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' 2007-06-12 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe [] 2008-07-28 C:\WINDOWS\Tasks\Norton SystemWorks One Button Checkup.job - C:\Program Files\Norton SystemWorks\OBC.exe [2004-11-19 16:32] 2008-07-28 C:\WINDOWS\Tasks\Symantec Drmc.job - C:\Program Files\Fichiers communs\Symantec Shared\SymDrmc.exe [2004-10-27 11:48] 2008-07-25 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - Magloire.job - C:\PROGRA~1\NORTON~2\NORTON~3\Navw32.exe [2005-11-22 11:04] 2008-07-29 C:\WINDOWS\Tasks\MP Scheduled Scan.job - C:\Program Files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20] 2008-07-29 C:\WINDOWS\Tasks\Scheduled scanning task.job - C:\PROGRA~1\PACKSE~1\ANTI-V~1\fsav.exe [2007-04-26 12:42] . . ------- Supplementary Scan ------- . R0 -: HKCU-Main,Start Page = hxxp://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8 R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 R0 -: HKCU-Main,Default_Search_URL = hxxp://www.google.com/ie R1 -: HKCU-Internet Connection Wizard,ShellNext = iexplore R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s O8 -: &Windows Live Search - C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 -: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-29 18:46:36 Windows 5.1.2600 Service Pack 3 FAT NTAPI Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\PROGRAM FILES\WINDOWS DEFENDER\MSMPENG.EXE C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCSETMGR.EXE C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.EXE C:\PROGRAM FILES\PACK SECURITE\ANTI-VIRUS\FSGK32ST.EXE C:\PROGRAM FILES\PACK SECURITE\ANTI-VIRUS\FSGK32.EXE C:\PROGRAM FILES\PACK SECURITE\COMMON\FSMA32.EXE C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE C:\PROGRAM FILES\PACK SECURITE\COMMON\FSMB32.EXE C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\NAVAPSVC.EXE C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE C:\PROGRAM FILES\PACK SECURITE\COMMON\FCH32.EXE C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE C:\PROGRAM FILES\PACK SECURITE\COMMON\FAMEH32.EXE C:\PROGRAM FILES\PACK SECURITE\ANTI-VIRUS\FSQH.EXE C:\PROGRAM FILES\PACK SECURITE\FSPC\FSPC.EXE C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\SAVSCAN.EXE C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\SPEED DISK\NOPDB.EXE C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe C:\Program Files\Pack Securite\FSAUA\program\fsus.exe C:\WINDOWS\system32\sistray.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Boonty\BoontyBox\BoontyBox.exe C:\Program Files\OpenOffice.org 2.2\program\soffice.exe C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN C:\Program Files\Pack Securite\FSGUI\fsguidll.exe C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE C:\WINDOWS\system32\imapi.exe . ************************************************************************** . Temps d'accomplissement: 2008-07-29 18:51:09 - machine was rebooted ComboFix-quarantined-files.txt 2008-07-29 16:50:56 Pre-Run: 16,188,375,040 octets libres Post-Run: 18,091,343,872 octets libres 521 --- E O F --- 2008-07-27 20:36:51

Utilisateur anonyme · Answer

Télécharge HijackThis ici : 

->  http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe 


Tutoriel d´instalation : 

-> https://forums.cnetfrance.fr

Tutoriel d´utilisation :  

-> https://forums.cnetfrance.fr

Post le rapport généré ici stp...

titite_baby · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:01:23, on 29/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

Utilisateur anonyme · Answer

tu as 2 antivirus fsecure et norton :

désinstal norton :


pour désinstaller norton telcharge cet outil


http://service1.symantec.com/support/inter/tsgeninfointl.nsf/fr_docid/20050414110429924?OpenDocument&seg=hm&lg=fr&ct=fr

titite_baby · Answer

j'ai désinstaller norton
j'ai encor des virus stp ?
merci

Utilisateur anonyme · Answer

refais un scan hijackthis et post le rapport por les virus ça devrait etre bon

titite_baby · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:59:33, on 29/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

titite_baby · Answer

Est ce que je dois purger la restauration du système ? stp.

Utilisateur anonyme · Answer

Démarrer > executer > tape : services.msc 

- Clic droit sur le service cité - Planificateur LiveUpdate automatique 
- propriétés 
- et dans "type de démarrage" et mets le sur « désactivé ». 
- Ensuite si le "Status du service" est sur "Démarré" faire : « arrêté » 

Tutorial : https://www.zebulon.fr/dossiers/windows/31-services.html 

Rends toi sur ce site : 

https://www.virustotal.com/gui/ 

Clique sur parcourir et cherche ce fichier : C:\Program Files\Boonty\BoontyBox\BoontyBox.exe 


Clique sur Send File. 

Un rapport va s'élaborer ligne à ligne. 

Attends la fin. Il doit comprendre la taille du fichier envoyé. 

Sauvegarde le rapport avec le bloc-note. 

Copie le dans ta réponse.

Utilisateur anonyme · Answer

Est ce que je dois purger la restauration du système ? stp.


oui mais attend encore un peux

titite_baby · Answer

j'ai des alertes de sécurité qui vienne quand je visite des sites 
c normal ?
quant  à virus total il est en train de charger les informations du serveur

titite_baby · Answer

Fichier BoontyBox.exe reçu le 2008.07.29 20:26:20 (CET)
Situation actuelle: terminé 

Résultat: 0/35 (0.00%)
 Formaté Impression des résultats  
Antivirus Version Dernière mise à jour Résultat 
AhnLab-V3 2008.7.29.1 2008.07.29 - 
AntiVir 7.8.1.12 2008.07.29 - 
Authentium 5.1.0.4 2008.07.29 - 
Avast 4.8.1195.0 2008.07.29 - 
AVG 8.0.0.130 2008.07.29 - 
BitDefender 7.2 2008.07.29 - 
CAT-QuickHeal 9.50 2008.07.29 - 
ClamAV 0.93.1 2008.07.29 - 
DrWeb 4.44.0.09170 2008.07.29 - 
eSafe 7.0.17.0 2008.07.29 - 
eTrust-Vet 31.6.5992 2008.07.29 - 
Ewido 4.0 2008.07.29 - 
F-Prot 4.4.4.56 2008.07.28 - 
F-Secure 7.60.13501.0 2008.07.29 - 
Fortinet 3.14.0.0 2008.07.29 - 
GData 2.0.7306.1023 2008.07.29 - 
Ikarus T3.1.1.34.0 2008.07.29 - 
Kaspersky 7.0.0.125 2008.07.29 - 
McAfee 5349 2008.07.29 - 
Microsoft 1.3704 2008.07.28 - 
NOD32v2 3307 2008.07.29 - 
Norman 5.80.02 2008.07.28 - 
Panda 9.0.0.4 2008.07.29 - 
PCTools 4.4.2.0 2008.07.29 - 
Prevx1 V2 2008.07.29 - 
Rising 20.55.12.00 2008.07.29 - 
Sophos 4.31.0 2008.07.29 - 
Sunbelt 3.1.1537.1 2008.07.29 - 
Symantec 10 2008.07.29 - 
TheHacker 6.2.96.389 2008.07.25 - 
TrendMicro 8.700.0.1004 2008.07.29 - 
VBA32 3.12.8.1 2008.07.29 - 
ViRobot 2008.7.29.1315 2008.07.29 - 
VirusBuster 4.5.11.0 2008.07.29 - 
Webwasher-Gateway 6.6.2 2008.07.29 - 
Information additionnelle 
File size: 857696 bytes 
MD5...: 8c97a57d7a89b5bf69fdf49eda113b03 
SHA1..: d9a76bde86a7b62cd53db04335985ad82ff26695 
SHA256: cc705fd582426b325ebfd51e729c73b458d30330ddde3dfcecbd9e184857523d 
SHA512: 260c291aa064fa0ba8ae492412616d4dc68ba13bc08bfa81b7fae9658031c95d
f93d6dce6f3791549f036ae1db0398fc7085a09e5e8f5127a80266868ca895cb 
PEiD..: - 
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4853e0
timedatestamp.....: 0x447c4f4d (Tue May 30 13:57:33 2006)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x90829 0x91000 5.93 32113ea847ec3d3888425f9363d87a42
.rdata 0x92000 0x2ba78 0x2c000 4.47 5de8a4b6247ab6759a2a85f160c34d40
.data 0xbe000 0x5cd4 0x1000 0.44 be066d3b572ccad0b1fc4cd2b8f79db8
.rsrc 0xc4000 0x10b08 0x11000 4.97 7c020d369fb690811440466dda6567b1

( 17 imports ) 
> MFC71U.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> MSVCR71.dll: __wgetmainargs, _amsg_exit, _wcmdln, exit, _cexit, _XcptFilter, _exit, _c_exit, wcsncpy, memcpy, strncpy, strcat, fgets, strchr, strcpy, sprintf, vsprintf, _wsetlocale, _wtol, time, srand, rand, memcmp, _initterm, __setusermatherr, _wtof, _wtoi64, _wtoi, _time64, sscanf, _setjmp3, fread, ceil, _ftime, ctime, fopen, fprintf, fclose, malloc, strlen, div, _localtime64, wcsftime, _wsplitpath, strncmp, localeconv, wcscmp, swscanf, mktime, gmtime, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, __security_error_handler, _terminate@@YAXXZ, __dllonexit, _onexit, __1type_info@@UAE@XZ, _controlfp, _mktime64, wprintf, wcscpy, wcscat, wcslen, swprintf, sin, _purecall, free, __CxxFrameHandler, _except_handler3, memset
> KERNEL32.dll: RemoveDirectoryW, DeleteFileW, FindNextFileW, FindClose, CreateThread, ResumeThread, Sleep, GetCurrentThreadId, WaitForSingleObject, CreateMutexW, CloseHandle, RaiseException, DeleteCriticalSection, InitializeCriticalSection, GetThreadLocale, HeapAlloc, SetFileAttributesW, InterlockedExchange, GetVersionExW, DeleteFileA, CreateProcessA, IsDebuggerPresent, SetProcessWorkingSetSize, GetExitCodeThread, QueryPerformanceCounter, QueryPerformanceFrequency, GetSystemDirectoryW, GetModuleHandleA, GetStartupInfoW, ExitProcess, GetVersionExA, FindFirstFileW, LocalFree, HeapReAlloc, LocalAlloc, lstrcpyW, GetLastError, lstrcmpA, FileTimeToSystemTime, FileTimeToLocalFileTime, GetTempFileNameW, GlobalMemoryStatus, GetDiskFreeSpaceExW, GetDriveTypeW, GetCurrentProcess, MulDiv, GlobalFree, GlobalUnlock, GlobalLock, GlobalAlloc, ReadFile, SetFilePointer, GetFileSize, CreateFileW, lstrlenW, GetProcAddress, GetModuleHandleW, HeapFree, GetACP, HeapCreate, GetSystemInfo, WideCharToMultiByte, GetFileAttributesW, MoveFileExW, CopyFileW, FreeLibrary, LoadLibraryW, GetPrivateProfileIntW, GetPrivateProfileStringW, GetLogicalDrives, GetExitCodeProcess, SetThreadPriority, CreateProcessW, WriteFile, GetLocaleInfoW, GetModuleFileNameW, MultiByteToWideChar, ExitThread, EnterCriticalSection, LeaveCriticalSection, CreateDirectoryW, GetTickCount, LockResource, LoadResource, SizeofResource, FindResourceW, GetCommandLineW, TerminateProcess, GetCurrentProcessId, OutputDebugStringA, FileTimeToDosDateTime, GetFileTime, CreateFileA, GetModuleFileNameA, VirtualQuery, GetLocaleInfoA, GetSystemTimeAsFileTime
> USER32.dll: GetClientRect, ClientToScreen, SetWindowRgn, LoadCursorW, GetKeyState, SetCursor, GetWindowLongW, PostMessageW, SetWindowPos, MapWindowPoints, GetDC, ReleaseDC, IsWindowVisible, RedrawWindow, GetWindow, GetParent, UpdateLayeredWindow, SetRectEmpty, DefWindowProcW, SetRect, SystemParametersInfoW, DestroyMenu, EnableWindow, GetWindowRect, InvalidateRect, GetCursorPos, InsertMenuW, SetMenuItemInfoW, GetMenuItemCount, GetMenuItemInfoW, GetSysColor, FillRect, DrawTextW, IsIconic, DrawIcon, GetSystemMetrics, SendDlgItemMessageW, RegisterWindowMessageW, wsprintfW, MessageBoxW, CreatePopupMenu, SetWindowLongW, CloseWindow, PostThreadMessageW, CreateIconFromResource, LoadCursorFromFileW, FindWindowW, DestroyIcon, CopyIcon, DestroyCursor, SetParent, PeekMessageW, TranslateMessage, DispatchMessageW, TrackPopupMenu, PostQuitMessage, SetFocus, IsWindow, KillTimer, SetTimer, ShowWindow, SetForegroundWindow, CreateIconIndirect, GetWindowDC, DrawIconEx, LoadImageW, GetIconInfo, RemoveMenu, ModifyMenuW, AppendMenuW, GetSystemMenu, CopyRect, MessageBeep, IsRectEmpty, UpdateWindow, SetCapture, EqualRect, ReleaseCapture, InflateRect, SendMessageW, PtInRect, GetPropW, SetPropW
> GDI32.dll: DeleteObject, SetBkMode, GetStockObject, CreateSolidBrush, SetTextColor, CreateFontIndirectW, OffsetRgn, SetPixel, CreateDIBSection, BitBlt, ExtCreateRegion, GetDIBits, StretchBlt, CreateCompatibleBitmap, GetPixel, DeleteDC, GetDeviceCaps, PatBlt, Rectangle, CreatePen, GetTextExtentPoint32W, SelectObject, CreateCompatibleDC, GetObjectW, CreateRectRgnIndirect, CreateRectRgn, CombineRgn
> MSIMG32.dll: AlphaBlend
> ADVAPI32.dll: CryptHashData, RegCloseKey, RegOpenKeyExW, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, GetUserNameW, FreeSid, EqualSid, AllocateAndInitializeSid, GetTokenInformation, OpenProcessToken, GetUserNameA, RegOpenKeyExA, RegQueryValueExA, CryptAcquireContextW, CryptCreateHash, RegSetValueExW, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, RegQueryValueExW, RegEnumKeyExW, RegEnumValueW
> SHELL32.dll: ShellExecuteW, SHGetDesktopFolder, SHGetPathFromIDListW, SHBrowseForFolderW, DuplicateIcon, SHGetMalloc, SHGetSpecialFolderLocation, Shell_NotifyIconW, SHGetFileInfoW
> COMCTL32.dll: -, ImageList_AddMasked, _TrackMouseEvent
> SHLWAPI.dll: PathFileExistsW, PathIsDirectoryW, PathAddBackslashW
> ole32.dll: CoInitialize, CreateStreamOnHGlobal, CoTaskMemFree, CoCreateInstance, CoUninitialize
> OLEAUT32.dll: -, -, -, -, -, -
> CRYPT32.dll: CryptDecodeObject, CertGetNameStringW, CryptQueryObject, CryptMsgGetParam, CertFindCertificateInStore, CertFreeCertificateContext, CryptMsgClose, CertCloseStore
> libpng13.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> MSVCP71.dll: _c_str@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEPBDXZ, _str@_$basic_stringstream@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBE_AV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@2@XZ, __6_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV01@G@Z, __1_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __$_6U_$char_traits@D@std@@@std@@YAAAV_$basic_ostream@DU_$char_traits@D@std@@@0@AAV10@PBD@Z, _setw@std@@YA_AU_$_Smanip@H@1@H@Z, __0_$basic_stringstream@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@H@Z, _setf@ios_base@std@@QAEHHH@Z, ___D_$basic_stringstream@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEXXZ, __6_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z, _fill@_$basic_ios@DU_$char_traits@D@std@@@std@@QAEDD@Z
> WININET.dll: HttpQueryInfoW, InternetQueryDataAvailable, InternetAutodial, HttpAddRequestHeadersW, FtpCommandW, InternetGetLastResponseInfoW, InternetSetOptionW, InternetGetConnectedState, InternetCrackUrlW, InternetOpenW, InternetConnectW, HttpOpenRequestW, HttpSendRequestW, InternetReadFile, InternetCloseHandle
> VERSION.dll: GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoS

titite_baby · Answer

bonjour, mon anti virus à détecté un vers et n'a pas pu le nettoyer car il à été renomé. info sur le vers :worn.win32.autorun.dlz voici l'analyse !-- ack=0--> Pack Securite Plus 7.00 - Rapport d'analyse - mercredi 30 juillet 2008 14:30:46

Rapport d'analyse

mercredi 30 juillet 2008 14:30:39 - 14:30:46

Nom de l'ordinateur: DÉBARRAS
Type d'analyse: Analyse de la cible
Cible : J:\autorun.inf

Résultat: 1 antiprogramme(s) détecté(s)

Worm.Win32.AutoRun.dkz (virus)

J:\autorun.inf Action : renommé

Statistiques

Analysés:

Fichiers: 1
Non analysés: 0

Résultat:

Virus: 1
Spyware: 0
Eléments suspects: 0
Programme à risque: 0

Actions:

Nettoyés: 0
Renommés: 1
Supprimés: 0
Quarantaine: 0
Echec: 0

Secteurs d'amorçage:

Analysés: 1
Infectés: 0
Eléments suspects: 0
Nettoyés: 0

Options

Version des définitions:

Virus: 2008-07-30_04
Spyware: 2008-07-30_02

Moteurs d'analyse :

F-Secure AVP: 7.00.171, 2008-07-30
F-Secure Libra: 2.04.04, 2008-07-30
F-Secure Orion: 1.02.37, 2008-07-30
F-Secure Draco: 1.00.35, 2008-07-08

Options d'analyse :

Analyser les fichiers définis : COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
Analyser le contenu des archives

Actions:

Virus: Nettoyer les fichiers infectés
Spyware: Interroger après analyse

c'est grave ou pas ? merci

Utilisateur anonyme · Answer

c pas tres grave 

 Télécharge RavAntivirus d'Evosla sur ton bureau : http://ww25.evosla.com/compteur.php?soft=rav_antivirus 
- Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir avant de lancer ce FIX 
- Clique droit sur le fichier .ZIP, puis "Extraire vers" Bureau. 
- Doucle-clique sur "RAV.exe" pour lancer le fix. 
- Laisse le programme agir : il scanne automatiquement tout les lecteurs (disques fixes et amovibles) 
- En cas d'infections un rapport sera généré : poste le dans ta prochaine réponse stp. 
- Ensuite : retire tes disques amovibles et redémarre le PC.

titite_baby · Answer

bonsoir ,

Ca fait 8 heure que Rav Antivirus analyse mon ordi 
c'est écri en bleu en bas "votre ordinateur est sain"
Est ce que je dois arretter l'analyse stp?
merci.

titite_baby · Answer

bonjour,

je n'arrive pas à analyser avec rav antivurus

je n'est pas de clé USB ni de disque dur externe.
merci

Utilisateur anonyme · Answer

Telecharge malwarebytes 

-> http://www.malwarebytes.org/mbam/program/mbam-setup.exe 

Tu l´instale; le programme va se mettre automatiquement a jour. 

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression". 

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet". 

Puis click sur "rechercher". 

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum. 

Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log

titite_baby · Answer

bonsoir,

voilà le rapport malwarebytes :


Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1015
Windows 5.1.2600 Service Pack 3

22:50:33 01/08/2008
mbam-log-8-1-2008 (22-50-33).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 162234
Temps écoulé: 1 hour(s), 21 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 10
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

titite_baby · Answer

Mon anti virus à détecté un cheval de troie
Trojan.Win32.Obfuscated.gen

Je les supprimés

l'ordi est beaucoup plus rapide maintenant.

Utilisateur anonyme · Answer

toujours des pubs ??


post un nouveau rapport hijackthis stp

titite_baby · Answer

Non plus de pubs, merci.

voilà mon rapport hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:10:32, on 02/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

Utilisateur anonyme · Answer

ton antivirus a certainement detecté un outil que nous avons utilisé


-> Télécharge Ccleaner (n'installe pas la barre d'outil Yahoo): 

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

-> L´installer. 

-> Une fois installé et lancé : 

Dans la colonne de gauche, click sur : 

->"registre" : 

Coches toutes les cases sous"l´integrité du registre", puis click en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs", tu auras un message pour sauvegarder ta base de registre, tu click "oui" puis tu recommence jusqu'à ce qu'il ne trouve plus rien. 

ps : les sauvegardes que tu auras faites, pourront etre supprimées ulterieurement si tout va bien. 

->"nettoyeur" 

quitte ton navigateur avant de le lancer, dans les propriétés du nettoyeur de l´onglet "windows" et "applications"décoche la derniere case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" qunand il aura terminé le scan click en bas a droite sur "lancer le nettoyage" et accepte par oui. 

-> Tutoriel en image : 

https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php 


ensuite

* pour supprimer les outils/fix utilisés : 

Télécharge ToolsCleaner sur ton bureau. 
--> 
ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
http://pc-system.fr/ 

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

titite_baby · Answer

-->- Recherche: 

C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Phanélie\Menu Démarrer\Programmes\Lop S&D: trouvé !
C:\Documents and Settings\Phanélie\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Phanélie\Bureau\Lop S&D.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Lop SD\Lop S&D.lnk: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Phanélie\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Phanélie\Bureau\Lop S&D.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Lop SD\Lop S&D.lnk: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\Phanélie\Menu Démarrer\Programmes\Lop S&D: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Utilisateur anonyme · Answer

salut

toujours des soucis ?

titite_baby · Answer

salut , non plus de soucis .
merci beaucoup.

Utilisateur anonyme · Answer

ok, cool

penses a mettre résolu

bonne vacances

@++

titite_baby · Answer

salut,

Je n'arrive pas à supprimer winrar et killbagle.exe. Il n'y est pas dans ajouter ou supprimer des programmes

merci.

Utilisateur anonyme · Answer

kill bagle 

tu supprime le raccourci sur le bureau et tu vas dans poste de travail entre dans le disque C et tu supprime le dossier combofix et/ou killbagle

winrar est dans ajout et suppression

titite_baby · Answer

Ce site un vraiment génial.Merci beaucoup Chiquitine29 , pour ton aide et ta patience grace à toi je n'est plus de pubs et l'ordi est plus rapide.
Bonne vacances.
@++

Utilisateur anonyme · Answer

thanks

@++

Pub intempestive au cour d'une navigation

48 réponses

Votre réponse

Discussions similaires

Newsletters