Analyse hujackthis s'il vous plait a l'aide
Utilisateur anonyme
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
quelqu'un pourrais t'il analyse mon analyse hijackthis car j'ai des fenetres qui s'affichent me disans que je suis infectée de partout. Merci.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:50:33, on 07/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\tcntpkdm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\IMVU\IMVUClient.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\IMVU\IMVUQualityAgent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\laurence\Bureau\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Watch] C:\PROGRA~1\minitel\Watch.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\tcntpkdm.exe DWbrk01
O4 - HKLM\..\Run: [{C8-8B-B3-34-DW}] c:\windows\system32\rwwnw64d.exe DWbrk01
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\tcntpkdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\laurence\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {1D6E056F-D1BB-40F6-88E4-11EE98056FD2} (Oberon ActiveX Game Host) - http://jeuxenligne-beta.jeu.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: McAfee Application Installer Cleanup (0215341218117772) (0215341218117772mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP\021534~1.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
quelqu'un pourrais t'il analyse mon analyse hijackthis car j'ai des fenetres qui s'affichent me disans que je suis infectée de partout. Merci.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:50:33, on 07/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\tcntpkdm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\IMVU\IMVUClient.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\IMVU\IMVUQualityAgent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\laurence\Bureau\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Watch] C:\PROGRA~1\minitel\Watch.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\tcntpkdm.exe DWbrk01
O4 - HKLM\..\Run: [{C8-8B-B3-34-DW}] c:\windows\system32\rwwnw64d.exe DWbrk01
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\tcntpkdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\laurence\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {1D6E056F-D1BB-40F6-88E4-11EE98056FD2} (Oberon ActiveX Game Host) - http://jeuxenligne-beta.jeu.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: McAfee Application Installer Cleanup (0215341218117772) (0215341218117772mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP\021534~1.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
A voir également:
- Analyse hujackthis s'il vous plait a l'aide
- Analyse composant pc - Guide
- Analyse disque dur - Télécharger - Informations & Diagnostic
- Analyse performance pc - Guide
- Analyse et réparation disque dur externe - Guide
- Échec de l'analyse antivirus. ✓ - Forum Antivirus
6 réponses
Salut,
Telecharge malwarebytes
-> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tu l´instale; le programme va se mettre automatiquement a jour.
Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".
Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".
Puis click sur "rechercher".
Laisse le scanner le pc...
Si des elements on ete trouvés > click sur supprimer la selection.
si il t´es demandé de redemarrer > click sur "yes".
A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.
PS : les rapport sont aussi rangé dans l onglet rapport/log
Telecharge malwarebytes
-> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tu l´instale; le programme va se mettre automatiquement a jour.
Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".
Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".
Puis click sur "rechercher".
Laisse le scanner le pc...
Si des elements on ete trouvés > click sur supprimer la selection.
si il t´es demandé de redemarrer > click sur "yes".
A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.
PS : les rapport sont aussi rangé dans l onglet rapport/log
salut, déjà merci a toi chiquine d'avoir répondu si vite a ma demande, Ensuite j'ai refais une analyse hijackthis suite a ca, je te le post apres celui ci:
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 781
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 136876
Temps écoulé: 1 hour(s), 16 minute(s), 12 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deewoo Network Manager (Adware.Radio) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ExploreUpdSched (Trojan.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\WINDOWS\system32\winpfz33.sys (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tcntpkdm.exe (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\msnav32.ax (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\zxdnt3d.cfg (Malware.Trace) -> Quarantined and deleted successfully.
et le rapport hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:17:23, on 10/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IMVU\IMVUClient.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\IMVU\IMVUQualityAgent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\laurence\Bureau\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Watch] C:\PROGRA~1\minitel\Watch.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
O4 - HKLM\..\Run: [{C8-8B-B3-34-DW}] c:\windows\system32\rwwnw64d.exe DWbrk01
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\tcntpkdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\laurence\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {1D6E056F-D1BB-40F6-88E4-11EE98056FD2} (Oberon ActiveX Game Host) - http://jeuxenligne-beta.jeu.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 781
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 136876
Temps écoulé: 1 hour(s), 16 minute(s), 12 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deewoo Network Manager (Adware.Radio) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ExploreUpdSched (Trojan.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\WINDOWS\system32\winpfz33.sys (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tcntpkdm.exe (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\msnav32.ax (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\zxdnt3d.cfg (Malware.Trace) -> Quarantined and deleted successfully.
et le rapport hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:17:23, on 10/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IMVU\IMVUClient.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\IMVU\IMVUQualityAgent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\laurence\Bureau\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Watch] C:\PROGRA~1\minitel\Watch.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
O4 - HKLM\..\Run: [{C8-8B-B3-34-DW}] c:\windows\system32\rwwnw64d.exe DWbrk01
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Documents and Settings\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\tcntpkdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\laurence\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Documents and Settings\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - https://zone.msn.com/en/utility/handler404.aspx?404;http://zone.msn.com:80/binFrameWork/v10/StagingUI.cab55579.cab
O16 - DPF: {1D6E056F-D1BB-40F6-88E4-11EE98056FD2} (Oberon ActiveX Game Host) - http://jeuxenligne-beta.jeu.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
bonjour,
voici le rapport:
--------------------\\ Lop S&D 4.2.2-6 XP/Vista
[ Windows XP T 5.1) Build 2600, Service Pack 2 ]
[ USER : laurence ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 10/08/2008 | 10:38:42,21 ] [ PC : ACER-DC6C4D74B4 ]
[ MAJ : 09-08-2008 | 21:15 ]
--------------------\\ Listing des dossiers dans APPLIC~1
[08/09/2006|14:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[24/10/2006|18:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[17/06/2007|12:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[24/10/2006|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[31/05/2008|14:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[17/06/2007|12:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[10/07/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[04/03/2008|08:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Christmasville
[24/01/2007|06:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[08/09/2006|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[11/03/2008|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy
[18/02/2008|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames
[07/02/2008|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo
[16/02/2008|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Go Go Gourmet
[13/01/2008|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[29/04/2008|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[01/02/2008|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[05/04/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterAction studios
[24/02/2007|14:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
[22/04/2008|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[02/03/2008|09:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
[30/04/2008|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[23/05/2008|15:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[17/05/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[15/06/2008|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[03/06/2008|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/06/2008|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
[08/08/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[16/05/2007|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[09/02/2007|00:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[03/04/2007|20:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[18/02/2008|12:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[02/04/2008|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[21/01/2007|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
[21/01/2007|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[28/02/2008|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[22/02/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[28/03/2007|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[29/04/2008|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\reparateurdesysteme
[22/04/2008|14:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMon
[01/02/2008|13:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[03/04/2007|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScreenSeven
[26/01/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[08/04/2008|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[17/05/2008|19:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/05/2008|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[26/01/2008|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[08/04/2008|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
[23/04/2008|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[08/04/2007|22:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
[23/04/2007|10:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\The Game Equation
[20/01/2007|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[03/04/2008|08:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[27/01/2007|02:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[11/03/2008|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[31/05/2007|19:59] C:\DOCUME~1\APPLIC~1\APPLIC~1\Microsoft
[08/09/2006|14:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[24/10/2006|18:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[24/10/2006|18:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[26/01/2008|10:52] C:\DOCUME~1\laurence\APPLIC~1\Adobe
[18/01/2007|11:24] C:\DOCUME~1\laurence\APPLIC~1\AdobeUM
[14/02/2007|03:14] C:\DOCUME~1\laurence\APPLIC~1\Ahead
[07/07/2008|10:12] C:\DOCUME~1\laurence\APPLIC~1\Apple Computer
[29/02/2008|18:50] C:\DOCUME~1\laurence\APPLIC~1\Aquapark
[08/01/2007|21:58] C:\DOCUME~1\laurence\APPLIC~1\ArcSoft
[25/02/2007|14:01] C:\DOCUME~1\laurence\APPLIC~1\Balloon Express
[19/02/2008|21:17] C:\DOCUME~1\laurence\APPLIC~1\Big Fish Games
[03/03/2008|03:45] C:\DOCUME~1\laurence\APPLIC~1\CamfrogWEB
[29/04/2007|11:27] C:\DOCUME~1\laurence\APPLIC~1\cerasus.media
[30/03/2007|20:32] C:\DOCUME~1\laurence\APPLIC~1\Chicken Chase
[21/02/2007|00:28] C:\DOCUME~1\laurence\APPLIC~1\CyberLink
[08/09/2006|14:49] C:\DOCUME~1\laurence\APPLIC~1\desktop.ini
[19/04/2007|10:30] C:\DOCUME~1\laurence\APPLIC~1\DiVision Studios - Escaping Atlantis
[08/06/2008|11:53] C:\DOCUME~1\laurence\APPLIC~1\DivX
[10/08/2008|10:37] C:\DOCUME~1\laurence\APPLIC~1\EoRezo
[18/02/2008|16:24] C:\DOCUME~1\laurence\APPLIC~1\FloodLightGames
[07/05/2007|20:47] C:\DOCUME~1\laurence\APPLIC~1\funkitron
[08/04/2007|22:44] C:\DOCUME~1\laurence\APPLIC~1\Gaijin Ent
[18/01/2007|16:47] C:\DOCUME~1\laurence\APPLIC~1\Google
[29/04/2008|16:24] C:\DOCUME~1\laurence\APPLIC~1\Grisoft
[27/02/2007|21:57] C:\DOCUME~1\laurence\APPLIC~1\Help
[01/03/2007|21:19] C:\DOCUME~1\laurence\APPLIC~1\Hulabee
[08/07/2008|14:40] C:\DOCUME~1\laurence\APPLIC~1\Identities
[09/08/2008|23:57] C:\DOCUME~1\laurence\APPLIC~1\IMVU
[20/05/2008|19:01] C:\DOCUME~1\laurence\APPLIC~1\InstallShield
[12/02/2007|15:29] C:\DOCUME~1\laurence\APPLIC~1\InterTrust
[02/04/2008|14:40] C:\DOCUME~1\laurence\APPLIC~1\ItsLabel
[21/04/2007|14:05] C:\DOCUME~1\laurence\APPLIC~1\iWin
[27/01/2007|04:40] C:\DOCUME~1\laurence\APPLIC~1\Lavasoft
[23/02/2007|14:58] C:\DOCUME~1\laurence\APPLIC~1\Macromedia
[23/05/2008|15:30] C:\DOCUME~1\laurence\APPLIC~1\Malwarebytes
[17/05/2008|15:12] C:\DOCUME~1\laurence\APPLIC~1\McAfee
[25/07/2008|08:17] C:\DOCUME~1\laurence\APPLIC~1\Microsoft
[06/06/2008|09:58] C:\DOCUME~1\laurence\APPLIC~1\Microsoft Games
[25/01/2007|02:11] C:\DOCUME~1\laurence\APPLIC~1\Mozilla
[19/05/2007|03:37] C:\DOCUME~1\laurence\APPLIC~1\MSN6
[09/02/2007|00:20] C:\DOCUME~1\laurence\APPLIC~1\MSNInstaller
[31/05/2007|19:59] C:\DOCUME~1\laurence\APPLIC~1\MySpace
[29/02/2008|18:50] C:\DOCUME~1\laurence\APPLIC~1\MysteryStudio
[31/01/2008|18:56] C:\DOCUME~1\laurence\APPLIC~1\Oberon Games
[22/02/2008|16:33] C:\DOCUME~1\laurence\APPLIC~1\PlayFirst
[08/02/2008|10:42] C:\DOCUME~1\laurence\APPLIC~1\Real
[01/02/2008|20:20] C:\DOCUME~1\laurence\APPLIC~1\SiteAdvisor
[08/04/2008|11:47] C:\DOCUME~1\laurence\APPLIC~1\Sony Ericsson
[18/01/2007|13:44] C:\DOCUME~1\laurence\APPLIC~1\Sun
[25/01/2007|02:11] C:\DOCUME~1\laurence\APPLIC~1\Talkback
[26/05/2008|18:35] C:\DOCUME~1\laurence\APPLIC~1\TaoUSign
[05/06/2008|10:08] C:\DOCUME~1\laurence\APPLIC~1\Teleca
[29/04/2008|15:31] C:\DOCUME~1\laurence\APPLIC~1\update.log
[21/02/2008|14:51] C:\DOCUME~1\laurence\APPLIC~1\ViquaSoft
[02/05/2008|08:49] C:\DOCUME~1\laurence\APPLIC~1\vlc
[17/04/2008|09:04] C:\DOCUME~1\laurence\APPLIC~1\Windows Live Writer
[08/07/2008|14:40] C:\DOCUME~1\laurence\APPLIC~1\Zylom
[22/05/2008|10:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee
[17/06/2007|12:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[26/01/2008|12:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor
[17/06/2007|12:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[15/07/2008 01:02][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/07/2008 01:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[10/08/2008 00:08][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[30/05/2008|12:54] C:\Program Files\AbsoluteTransfer
[17/05/2008|18:10] C:\Program Files\Acceleration Software
[24/10/2006|18:18] C:\Program Files\Acer WLAN 11g USB Dongle
[12/02/2007|15:29] C:\Program Files\Adobe
[10/03/2008|12:15] C:\Program Files\AgeOfCastles_at
[17/07/2008|13:23] C:\Program Files\BitTorrent Fastest Tool
[10/07/2008|16:00] C:\Program Files\Boonty
[10/07/2008|16:05] C:\Program Files\BoontyGames
[13/05/2008|15:00] C:\Program Files\Cannon Smash
[29/05/2008|08:47] C:\Program Files\CCleaner
[08/09/2006|12:53] C:\Program Files\ComPlus Applications
[08/01/2007|19:58] C:\Program Files\comsummer
[24/10/2006|18:19] C:\Program Files\CyberLink
[11/06/2008|16:53] C:\Program Files\DivX
[22/01/2007|19:54] C:\Program Files\DivXCodec
[09/08/2008|16:48] C:\Program Files\eMule
[10/07/2008|15:31] C:\Program Files\EoRezo
[10/01/2007|18:31] C:\Program Files\epson
[10/07/2008|16:24] C:\Program Files\Fichiers communs
[18/01/2007|11:11] C:\Program Files\Free
[02/05/2008|08:44] C:\Program Files\Freeplayer
[07/02/2008|21:20] C:\Program Files\FrenchOtto
[22/01/2007|19:54] C:\Program Files\Gabest
[01/04/2007|21:09] C:\Program Files\Gamenext
[24/10/2006|18:19] C:\Program Files\GemMasterFrench
[14/01/2008|08:09] C:\Program Files\Google
[22/01/2007|19:54] C:\Program Files\GordianKnot
[29/04/2008|16:23] C:\Program Files\Grisoft
[08/01/2007|20:32] C:\Program Files\Hercules
[04/04/2008|15:28] C:\Program Files\IMVU
[06/06/2008|09:58] C:\Program Files\InstallShield Installation Information
[11/06/2008|14:03] C:\Program Files\Internet Explorer
[31/05/2008|14:20] C:\Program Files\iPod
[10/07/2008|15:31] C:\Program Files\ItsLabel
[31/05/2008|14:20] C:\Program Files\iTunes
[02/04/2008|15:24] C:\Program Files\Java
[27/01/2007|04:40] C:\Program Files\Lavasoft
[23/05/2008|14:58] C:\Program Files\Macrogaming
[23/05/2008|15:30] C:\Program Files\Malwarebytes' Anti-Malware
[09/08/2008|20:32] C:\Program Files\McAfee
[26/01/2008|12:39] C:\Program Files\McAfee.com
[21/07/2008|14:09] C:\Program Files\Messenger
[28/05/2008|10:39] C:\Program Files\Messenger Plus! Live
[27/01/2008|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[24/10/2006|18:19] C:\Program Files\microsoft frontpage
[06/06/2008|09:57] C:\Program Files\Microsoft Games
[26/01/2008|14:09] C:\Program Files\Microsoft Office
[26/01/2008|14:09] C:\Program Files\Microsoft Visual Studio
[26/01/2008|14:10] C:\Program Files\Microsoft Works
[26/01/2008|14:08] C:\Program Files\Microsoft.NET
[01/07/2008|23:56] C:\Program Files\minitel
[24/10/2006|18:19] C:\Program Files\Movie Maker
[09/08/2008|23:34] C:\Program Files\Mozilla Firefox
[03/02/2007|17:20] C:\Program Files\MSBuild
[11/02/2007|03:42] C:\Program Files\MSECache
[27/02/2007|00:13] C:\Program Files\MSN
[18/01/2007|11:41] C:\Program Files\MSN Apps
[24/10/2006|18:19] C:\Program Files\MSN Gaming Zone
[29/05/2008|09:01] C:\Program Files\MSN Messenger
[20/01/2007|15:22] C:\Program Files\MSXML 4.0
[27/01/2008|15:04] C:\Program Files\MSXML 6.0
[17/07/2008|13:20] C:\Program Files\Multi_Media_France
[31/05/2007|19:59] C:\Program Files\MySpace
[13/02/2007|22:59] C:\Program Files\Nero
[24/10/2006|18:19] C:\Program Files\NetMeeting
[24/10/2006|18:19] C:\Program Files\NewTech Infosystems
[26/01/2008|12:35] C:\Program Files\Norton AntiVirus
[24/10/2006|18:19] C:\Program Files\Oca History Tool
[24/10/2006|18:19] C:\Program Files\Online Services
[18/02/2007|05:42] C:\Program Files\orange
[14/06/2007|14:01] C:\Program Files\Outlook Express
[10/07/2008|15:31] C:\Program Files\Panda Security
[07/07/2008|11:52] C:\Program Files\Picasa2
[31/05/2008|14:19] C:\Program Files\QuickTime
[08/02/2008|10:34] C:\Program Files\Real
[24/10/2006|18:19] C:\Program Files\Realtek
[03/02/2007|17:17] C:\Program Files\Reference Assemblies
[22/04/2008|17:58] C:\Program Files\Samsung
[24/10/2006|18:19] C:\Program Files\Services en ligne
[17/07/2008|13:13] C:\Program Files\Share_Accelerator_MM
[27/01/2008|13:15] C:\Program Files\SiteAdvisor
[02/03/2008|06:07] C:\Program Files\Slayers Online
[08/04/2008|11:39] C:\Program Files\Sony Ericsson
[10/06/2008|11:51] C:\Program Files\Trend Micro
[08/09/2006|13:12] C:\Program Files\Uninstall Information
[17/05/2008|21:09] C:\Program Files\Vso
[04/04/2007|00:05] C:\Program Files\Wanadoo Jeux
[24/02/2008|18:07] C:\Program Files\Windows Live
[27/06/2008|12:01] C:\Program Files\Windows Live Safety Center
[20/01/2007|23:43] C:\Program Files\Windows Media Connect 2
[20/01/2007|23:43] C:\Program Files\Windows Media Player
[24/10/2006|18:19] C:\Program Files\Windows NT
[24/10/2006|18:19] C:\Program Files\Windows Plus
[08/09/2006|12:55] C:\Program Files\WindowsUpdate
[09/03/2007|19:12] C:\Program Files\WinRAR
[24/10/2006|18:19] C:\Program Files\xerox
[20/07/2008|13:32] C:\Program Files\Yahoo!
[22/06/2007|16:07] C:\Program Files\YesMessenger
[17/07/2008|13:18] C:\Program Files\Zapu
[08/07/2008|19:00] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[24/10/2006|18:19] C:\Program Files\Fichiers communs\Adobe
[31/05/2008|14:18] C:\Program Files\Fichiers communs\Apple
[08/01/2007|20:33] C:\Program Files\Fichiers communs\ArcSoft
[18/04/2008|13:57] C:\Program Files\Fichiers communs\Blizzard Entertainment
[10/07/2008|16:24] C:\Program Files\Fichiers communs\BOONTY Shared
[26/01/2008|14:09] C:\Program Files\Fichiers communs\DESIGNER
[24/10/2006|18:19] C:\Program Files\Fichiers communs\InstallShield
[08/01/2007|19:50] C:\Program Files\Fichiers communs\Java
[24/10/2006|18:19] C:\Program Files\Fichiers communs\LightScribe
[26/01/2008|12:40] C:\Program Files\Fichiers communs\McAfee
[08/08/2008|14:02] C:\Program Files\Fichiers communs\Microsoft Shared
[24/10/2006|18:19] C:\Program Files\Fichiers communs\MSSoap
[24/10/2006|18:19] C:\Program Files\Fichiers communs\muvee Technologies
[24/10/2006|18:19] C:\Program Files\Fichiers communs\NewTech Infosystems
[24/10/2006|18:19] C:\Program Files\Fichiers communs\ODBC
[08/02/2008|10:34] C:\Program Files\Fichiers communs\Real
[06/03/2007|20:38] C:\Program Files\Fichiers communs\Sandlot Shared
[24/10/2006|18:19] C:\Program Files\Fichiers communs\Services
[08/04/2008|11:40] C:\Program Files\Fichiers communs\Sony Ericsson Shared
[24/10/2006|18:19] C:\Program Files\Fichiers communs\SpeechEngines
[26/01/2008|14:05] C:\Program Files\Fichiers communs\System
[08/04/2008|11:41] C:\Program Files\Fichiers communs\Teleca Shared
[24/02/2008|18:04] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[08/02/2008|10:35] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 56 Processus )
iexplore.exe ~ [4464]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\3wPlayer-2.0.0.0-setup.exe
C:\Program Files\BitTorrent Fastest Tool\BitP.exe
C:\Program Files\BitTorrent Fastest Tool\DWbrk01.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\Program Files\BitTorrent Fastest Tool\torrent_search1307.exe
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-10 10:40:01
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 126
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
=> C:\DOCUME~1\laurence\Application Data\IMVU\ProductFiles\product781613_crackingup.ogg
[F:11][D:2]-> C:\DOCUME~1\laurence\LOCALS~1\Temp
[F:85][D:0]-> C:\DOCUME~1\laurence\Cookies
[F:2022][D:9]-> C:\DOCUME~1\laurence\LOCALS~1\TEMPOR~1\content.IE5
--------------------\\ Fin du rapport a 10:41:41,14
voici le rapport:
--------------------\\ Lop S&D 4.2.2-6 XP/Vista
[ Windows XP T 5.1) Build 2600, Service Pack 2 ]
[ USER : laurence ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 10/08/2008 | 10:38:42,21 ] [ PC : ACER-DC6C4D74B4 ]
[ MAJ : 09-08-2008 | 21:15 ]
--------------------\\ Listing des dossiers dans APPLIC~1
[08/09/2006|14:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[24/10/2006|18:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[17/06/2007|12:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[24/10/2006|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[31/05/2008|14:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[17/06/2007|12:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[10/07/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[04/03/2008|08:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Christmasville
[24/01/2007|06:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[08/09/2006|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[11/03/2008|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy
[18/02/2008|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames
[07/02/2008|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo
[16/02/2008|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Go Go Gourmet
[13/01/2008|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[29/04/2008|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[01/02/2008|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[05/04/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterAction studios
[24/02/2007|14:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
[22/04/2008|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[02/03/2008|09:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
[30/04/2008|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[23/05/2008|15:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[17/05/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[15/06/2008|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[03/06/2008|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/06/2008|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
[08/08/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[16/05/2007|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
[09/02/2007|00:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[03/04/2007|20:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[18/02/2008|12:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[02/04/2008|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[21/01/2007|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
[21/01/2007|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[28/02/2008|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[22/02/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[28/03/2007|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[29/04/2008|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\reparateurdesysteme
[22/04/2008|14:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMon
[01/02/2008|13:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[03/04/2007|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScreenSeven
[26/01/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[08/04/2008|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[17/05/2008|19:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/05/2008|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[26/01/2008|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[08/04/2008|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
[23/04/2008|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[08/04/2007|22:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
[23/04/2007|10:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\The Game Equation
[20/01/2007|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[03/04/2008|08:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[27/01/2007|02:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[11/03/2008|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[31/05/2007|19:59] C:\DOCUME~1\APPLIC~1\APPLIC~1\Microsoft
[08/09/2006|14:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[24/10/2006|18:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[24/10/2006|18:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[26/01/2008|10:52] C:\DOCUME~1\laurence\APPLIC~1\Adobe
[18/01/2007|11:24] C:\DOCUME~1\laurence\APPLIC~1\AdobeUM
[14/02/2007|03:14] C:\DOCUME~1\laurence\APPLIC~1\Ahead
[07/07/2008|10:12] C:\DOCUME~1\laurence\APPLIC~1\Apple Computer
[29/02/2008|18:50] C:\DOCUME~1\laurence\APPLIC~1\Aquapark
[08/01/2007|21:58] C:\DOCUME~1\laurence\APPLIC~1\ArcSoft
[25/02/2007|14:01] C:\DOCUME~1\laurence\APPLIC~1\Balloon Express
[19/02/2008|21:17] C:\DOCUME~1\laurence\APPLIC~1\Big Fish Games
[03/03/2008|03:45] C:\DOCUME~1\laurence\APPLIC~1\CamfrogWEB
[29/04/2007|11:27] C:\DOCUME~1\laurence\APPLIC~1\cerasus.media
[30/03/2007|20:32] C:\DOCUME~1\laurence\APPLIC~1\Chicken Chase
[21/02/2007|00:28] C:\DOCUME~1\laurence\APPLIC~1\CyberLink
[08/09/2006|14:49] C:\DOCUME~1\laurence\APPLIC~1\desktop.ini
[19/04/2007|10:30] C:\DOCUME~1\laurence\APPLIC~1\DiVision Studios - Escaping Atlantis
[08/06/2008|11:53] C:\DOCUME~1\laurence\APPLIC~1\DivX
[10/08/2008|10:37] C:\DOCUME~1\laurence\APPLIC~1\EoRezo
[18/02/2008|16:24] C:\DOCUME~1\laurence\APPLIC~1\FloodLightGames
[07/05/2007|20:47] C:\DOCUME~1\laurence\APPLIC~1\funkitron
[08/04/2007|22:44] C:\DOCUME~1\laurence\APPLIC~1\Gaijin Ent
[18/01/2007|16:47] C:\DOCUME~1\laurence\APPLIC~1\Google
[29/04/2008|16:24] C:\DOCUME~1\laurence\APPLIC~1\Grisoft
[27/02/2007|21:57] C:\DOCUME~1\laurence\APPLIC~1\Help
[01/03/2007|21:19] C:\DOCUME~1\laurence\APPLIC~1\Hulabee
[08/07/2008|14:40] C:\DOCUME~1\laurence\APPLIC~1\Identities
[09/08/2008|23:57] C:\DOCUME~1\laurence\APPLIC~1\IMVU
[20/05/2008|19:01] C:\DOCUME~1\laurence\APPLIC~1\InstallShield
[12/02/2007|15:29] C:\DOCUME~1\laurence\APPLIC~1\InterTrust
[02/04/2008|14:40] C:\DOCUME~1\laurence\APPLIC~1\ItsLabel
[21/04/2007|14:05] C:\DOCUME~1\laurence\APPLIC~1\iWin
[27/01/2007|04:40] C:\DOCUME~1\laurence\APPLIC~1\Lavasoft
[23/02/2007|14:58] C:\DOCUME~1\laurence\APPLIC~1\Macromedia
[23/05/2008|15:30] C:\DOCUME~1\laurence\APPLIC~1\Malwarebytes
[17/05/2008|15:12] C:\DOCUME~1\laurence\APPLIC~1\McAfee
[25/07/2008|08:17] C:\DOCUME~1\laurence\APPLIC~1\Microsoft
[06/06/2008|09:58] C:\DOCUME~1\laurence\APPLIC~1\Microsoft Games
[25/01/2007|02:11] C:\DOCUME~1\laurence\APPLIC~1\Mozilla
[19/05/2007|03:37] C:\DOCUME~1\laurence\APPLIC~1\MSN6
[09/02/2007|00:20] C:\DOCUME~1\laurence\APPLIC~1\MSNInstaller
[31/05/2007|19:59] C:\DOCUME~1\laurence\APPLIC~1\MySpace
[29/02/2008|18:50] C:\DOCUME~1\laurence\APPLIC~1\MysteryStudio
[31/01/2008|18:56] C:\DOCUME~1\laurence\APPLIC~1\Oberon Games
[22/02/2008|16:33] C:\DOCUME~1\laurence\APPLIC~1\PlayFirst
[08/02/2008|10:42] C:\DOCUME~1\laurence\APPLIC~1\Real
[01/02/2008|20:20] C:\DOCUME~1\laurence\APPLIC~1\SiteAdvisor
[08/04/2008|11:47] C:\DOCUME~1\laurence\APPLIC~1\Sony Ericsson
[18/01/2007|13:44] C:\DOCUME~1\laurence\APPLIC~1\Sun
[25/01/2007|02:11] C:\DOCUME~1\laurence\APPLIC~1\Talkback
[26/05/2008|18:35] C:\DOCUME~1\laurence\APPLIC~1\TaoUSign
[05/06/2008|10:08] C:\DOCUME~1\laurence\APPLIC~1\Teleca
[29/04/2008|15:31] C:\DOCUME~1\laurence\APPLIC~1\update.log
[21/02/2008|14:51] C:\DOCUME~1\laurence\APPLIC~1\ViquaSoft
[02/05/2008|08:49] C:\DOCUME~1\laurence\APPLIC~1\vlc
[17/04/2008|09:04] C:\DOCUME~1\laurence\APPLIC~1\Windows Live Writer
[08/07/2008|14:40] C:\DOCUME~1\laurence\APPLIC~1\Zylom
[22/05/2008|10:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee
[17/06/2007|12:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[26/01/2008|12:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor
[17/06/2007|12:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[15/07/2008 01:02][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/07/2008 01:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[10/08/2008 00:08][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[30/05/2008|12:54] C:\Program Files\AbsoluteTransfer
[17/05/2008|18:10] C:\Program Files\Acceleration Software
[24/10/2006|18:18] C:\Program Files\Acer WLAN 11g USB Dongle
[12/02/2007|15:29] C:\Program Files\Adobe
[10/03/2008|12:15] C:\Program Files\AgeOfCastles_at
[17/07/2008|13:23] C:\Program Files\BitTorrent Fastest Tool
[10/07/2008|16:00] C:\Program Files\Boonty
[10/07/2008|16:05] C:\Program Files\BoontyGames
[13/05/2008|15:00] C:\Program Files\Cannon Smash
[29/05/2008|08:47] C:\Program Files\CCleaner
[08/09/2006|12:53] C:\Program Files\ComPlus Applications
[08/01/2007|19:58] C:\Program Files\comsummer
[24/10/2006|18:19] C:\Program Files\CyberLink
[11/06/2008|16:53] C:\Program Files\DivX
[22/01/2007|19:54] C:\Program Files\DivXCodec
[09/08/2008|16:48] C:\Program Files\eMule
[10/07/2008|15:31] C:\Program Files\EoRezo
[10/01/2007|18:31] C:\Program Files\epson
[10/07/2008|16:24] C:\Program Files\Fichiers communs
[18/01/2007|11:11] C:\Program Files\Free
[02/05/2008|08:44] C:\Program Files\Freeplayer
[07/02/2008|21:20] C:\Program Files\FrenchOtto
[22/01/2007|19:54] C:\Program Files\Gabest
[01/04/2007|21:09] C:\Program Files\Gamenext
[24/10/2006|18:19] C:\Program Files\GemMasterFrench
[14/01/2008|08:09] C:\Program Files\Google
[22/01/2007|19:54] C:\Program Files\GordianKnot
[29/04/2008|16:23] C:\Program Files\Grisoft
[08/01/2007|20:32] C:\Program Files\Hercules
[04/04/2008|15:28] C:\Program Files\IMVU
[06/06/2008|09:58] C:\Program Files\InstallShield Installation Information
[11/06/2008|14:03] C:\Program Files\Internet Explorer
[31/05/2008|14:20] C:\Program Files\iPod
[10/07/2008|15:31] C:\Program Files\ItsLabel
[31/05/2008|14:20] C:\Program Files\iTunes
[02/04/2008|15:24] C:\Program Files\Java
[27/01/2007|04:40] C:\Program Files\Lavasoft
[23/05/2008|14:58] C:\Program Files\Macrogaming
[23/05/2008|15:30] C:\Program Files\Malwarebytes' Anti-Malware
[09/08/2008|20:32] C:\Program Files\McAfee
[26/01/2008|12:39] C:\Program Files\McAfee.com
[21/07/2008|14:09] C:\Program Files\Messenger
[28/05/2008|10:39] C:\Program Files\Messenger Plus! Live
[27/01/2008|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[24/10/2006|18:19] C:\Program Files\microsoft frontpage
[06/06/2008|09:57] C:\Program Files\Microsoft Games
[26/01/2008|14:09] C:\Program Files\Microsoft Office
[26/01/2008|14:09] C:\Program Files\Microsoft Visual Studio
[26/01/2008|14:10] C:\Program Files\Microsoft Works
[26/01/2008|14:08] C:\Program Files\Microsoft.NET
[01/07/2008|23:56] C:\Program Files\minitel
[24/10/2006|18:19] C:\Program Files\Movie Maker
[09/08/2008|23:34] C:\Program Files\Mozilla Firefox
[03/02/2007|17:20] C:\Program Files\MSBuild
[11/02/2007|03:42] C:\Program Files\MSECache
[27/02/2007|00:13] C:\Program Files\MSN
[18/01/2007|11:41] C:\Program Files\MSN Apps
[24/10/2006|18:19] C:\Program Files\MSN Gaming Zone
[29/05/2008|09:01] C:\Program Files\MSN Messenger
[20/01/2007|15:22] C:\Program Files\MSXML 4.0
[27/01/2008|15:04] C:\Program Files\MSXML 6.0
[17/07/2008|13:20] C:\Program Files\Multi_Media_France
[31/05/2007|19:59] C:\Program Files\MySpace
[13/02/2007|22:59] C:\Program Files\Nero
[24/10/2006|18:19] C:\Program Files\NetMeeting
[24/10/2006|18:19] C:\Program Files\NewTech Infosystems
[26/01/2008|12:35] C:\Program Files\Norton AntiVirus
[24/10/2006|18:19] C:\Program Files\Oca History Tool
[24/10/2006|18:19] C:\Program Files\Online Services
[18/02/2007|05:42] C:\Program Files\orange
[14/06/2007|14:01] C:\Program Files\Outlook Express
[10/07/2008|15:31] C:\Program Files\Panda Security
[07/07/2008|11:52] C:\Program Files\Picasa2
[31/05/2008|14:19] C:\Program Files\QuickTime
[08/02/2008|10:34] C:\Program Files\Real
[24/10/2006|18:19] C:\Program Files\Realtek
[03/02/2007|17:17] C:\Program Files\Reference Assemblies
[22/04/2008|17:58] C:\Program Files\Samsung
[24/10/2006|18:19] C:\Program Files\Services en ligne
[17/07/2008|13:13] C:\Program Files\Share_Accelerator_MM
[27/01/2008|13:15] C:\Program Files\SiteAdvisor
[02/03/2008|06:07] C:\Program Files\Slayers Online
[08/04/2008|11:39] C:\Program Files\Sony Ericsson
[10/06/2008|11:51] C:\Program Files\Trend Micro
[08/09/2006|13:12] C:\Program Files\Uninstall Information
[17/05/2008|21:09] C:\Program Files\Vso
[04/04/2007|00:05] C:\Program Files\Wanadoo Jeux
[24/02/2008|18:07] C:\Program Files\Windows Live
[27/06/2008|12:01] C:\Program Files\Windows Live Safety Center
[20/01/2007|23:43] C:\Program Files\Windows Media Connect 2
[20/01/2007|23:43] C:\Program Files\Windows Media Player
[24/10/2006|18:19] C:\Program Files\Windows NT
[24/10/2006|18:19] C:\Program Files\Windows Plus
[08/09/2006|12:55] C:\Program Files\WindowsUpdate
[09/03/2007|19:12] C:\Program Files\WinRAR
[24/10/2006|18:19] C:\Program Files\xerox
[20/07/2008|13:32] C:\Program Files\Yahoo!
[22/06/2007|16:07] C:\Program Files\YesMessenger
[17/07/2008|13:18] C:\Program Files\Zapu
[08/07/2008|19:00] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[24/10/2006|18:19] C:\Program Files\Fichiers communs\Adobe
[31/05/2008|14:18] C:\Program Files\Fichiers communs\Apple
[08/01/2007|20:33] C:\Program Files\Fichiers communs\ArcSoft
[18/04/2008|13:57] C:\Program Files\Fichiers communs\Blizzard Entertainment
[10/07/2008|16:24] C:\Program Files\Fichiers communs\BOONTY Shared
[26/01/2008|14:09] C:\Program Files\Fichiers communs\DESIGNER
[24/10/2006|18:19] C:\Program Files\Fichiers communs\InstallShield
[08/01/2007|19:50] C:\Program Files\Fichiers communs\Java
[24/10/2006|18:19] C:\Program Files\Fichiers communs\LightScribe
[26/01/2008|12:40] C:\Program Files\Fichiers communs\McAfee
[08/08/2008|14:02] C:\Program Files\Fichiers communs\Microsoft Shared
[24/10/2006|18:19] C:\Program Files\Fichiers communs\MSSoap
[24/10/2006|18:19] C:\Program Files\Fichiers communs\muvee Technologies
[24/10/2006|18:19] C:\Program Files\Fichiers communs\NewTech Infosystems
[24/10/2006|18:19] C:\Program Files\Fichiers communs\ODBC
[08/02/2008|10:34] C:\Program Files\Fichiers communs\Real
[06/03/2007|20:38] C:\Program Files\Fichiers communs\Sandlot Shared
[24/10/2006|18:19] C:\Program Files\Fichiers communs\Services
[08/04/2008|11:40] C:\Program Files\Fichiers communs\Sony Ericsson Shared
[24/10/2006|18:19] C:\Program Files\Fichiers communs\SpeechEngines
[26/01/2008|14:05] C:\Program Files\Fichiers communs\System
[08/04/2008|11:41] C:\Program Files\Fichiers communs\Teleca Shared
[24/02/2008|18:04] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[08/02/2008|10:35] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 56 Processus )
iexplore.exe ~ [4464]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\3wPlayer-2.0.0.0-setup.exe
C:\Program Files\BitTorrent Fastest Tool\BitP.exe
C:\Program Files\BitTorrent Fastest Tool\DWbrk01.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\Program Files\BitTorrent Fastest Tool\torrent_search1307.exe
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-10 10:40:01
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 126
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
=> C:\DOCUME~1\laurence\Application Data\IMVU\ProductFiles\product781613_crackingup.ogg
[F:11][D:2]-> C:\DOCUME~1\laurence\LOCALS~1\Temp
[F:85][D:0]-> C:\DOCUME~1\laurence\Cookies
[F:2022][D:9]-> C:\DOCUME~1\laurence\LOCALS~1\TEMPOR~1\content.IE5
--------------------\\ Fin du rapport a 10:41:41,14
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
