Probleme pub CID

Fermé
pyro42 Messages postés 4 Date d'inscription vendredi 15 août 2008 Statut Membre Dernière intervention 15 août 2008 - 15 août 2008 à 16:08
geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 - 15 août 2008 à 17:03
bonjour,
Mon probleme est que depuis quelque temps je suis envahi par des Pub "CID" (casino, rencontres etc), et je n'arrive pas a les enlever.
Voici le rapport hijackthis.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:38:23, on 15/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
c:\windows\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\wanmpsvc.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\AOL\1141417782\ee\AOLSoftware.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Hercules\Hercules WiFi Controller Software\WiFiCtrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
c:\program files\fichiers communs\aol\1141417782\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
c:\program files\fichiers communs\aol\1141417782\ee\aolsoftware.exe
c:\program files\aol\aol toolbar 4.0\AolTbServer.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
c:\program files\fichiers communs\aol\1141417782\ee\anotify.exe
C:\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\system32\SiKernel.dll
O2 - BHO: (no name) - {136591B6-237F-2EAF-0210-5A00BBBA89BA} - (no file)
O2 - BHO: testCPV6 - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - C:\Program Files\CPV\CPV8.dll
O2 - BHO: LabelCommand module - {18CB1A7B-94CD-4582-8022-ADA16851E44B} - C:\Documents and Settings\All Users\Application Data\services\services.dll
O2 - BHO: Windows module - {2756BAD7-2F9F-47ef-AE6D-8D39CCEB396F} - C:\WINDOWS\system32\msvbcr40.dll
O2 - BHO: (no name) - {4139C4C4-2908-28DA-0613-5200BBC9819D} - (no file)
O2 - BHO: mxlivemedia browser optimizer - {42134492-b612-73ec-76e3-af0632f223bf} - C:\WINDOWS\system32\juoeohoccnmbopv.dll
O2 - BHO: (no name) - {5751C81B-F4BB-469C-990E-3548BA299761} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: (no name) - {AAF9D1E5-A5F8-4C20-B84F-78C4BEF95F87} - C:\WINDOWS\system32\ASUSW32N5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1141417782\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [WiFiCtrl] C:\Program Files\Hercules\Hercules WiFi Controller Software\WiFiCtrl.exe min
O4 - HKLM\..\Run: [SmartRAM] C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe /m
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Balm Inter First Four] C:\Documents and Settings\All Users\Application Data\mail grey balm inter\multi creative.exe
O4 - HKLM\..\Run: [{2949e598-bc92-2417-eb45-d4d77c9f34cd}] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\juoeohoccnmbopv.dll" DllStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSI Configuration] msiconf.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF60C024-40AA-4181-8E80-0898CA7A314A}: NameServer = 84.103.237.147 86.64.145.147
O20 - Winlogon Notify: Hints - C:\WINDOWS\
O20 - Winlogon Notify: SharedDlls - C:\WINDOWS\
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

aidez moi svp
A voir également:

16 réponses

geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 10
15 août 2008 à 16:10
Salut !!

Télécharger et enregistrer sur le Bureau LopSD à cette adresse (c est le numéro 4 en bas de la page) : https://www.androidworld.fr/


= Double-clic Lop S&D
= Faire l'installation
Fermer toutes les applications
= Le lancer par un double-clic sur le raccourci qui est sur le bureau
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
= Taper F pour français , puis presser entrée
= Taper 1
= Presser Entrée
= Le PC va redémarrer
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
= Attendre l'apparition du rapport
Copier le rapport et le coller dans la réponse
le rapport se trouve aussi à C:\lopR
---------
Relancer Lop S&D

= Choisir cette fois 2


note:
Si le Bureau ne réapparait pas
= Presser Ctrl Alt Suppr
= Dans Fichier => Nouvelle tâche
=> Ecrire: explorer => entrée

puis fait un nouveau rapport hijack stp
0
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:12
Non pas avec Hijack This !!! c'est que avec Windows Live Messenger Plus! ta installer les Sponsor et ta des pub tu peut les enlvez en allant dans pannaux de configuration Installe/desinstallé des programme desinstallé Msn Plus! et tu aura le choix de suprimmé uniquement le sponsor et le tour est joué bonne chance les pub CID ne sont pas des virus ! ce son des sponsor par Msn Plus!
0
geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 10
15 août 2008 à 16:15
lopSD fera le travail ;-)
0
pyro42 Messages postés 4 Date d'inscription vendredi 15 août 2008 Statut Membre Dernière intervention 15 août 2008
15 août 2008 à 16:28
rohail_93 j'ai supprimer msn plus et rien n'a changé
Geoffrey5 j'install lopsd et je t'envoi le rapport
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:29
le Sponsor ^^
0
geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 10
15 août 2008 à 16:29
ok..tu pourras aussi faire ceci avant de refaire un nouveau rapport hijackthis :

Télécharger sur le bureau malware bytes à cette adresse :

https://www.androidworld.fr/

Voici un tuto pour bien l installer et bien l utiliser :

https://www.androidworld.fr/


Après l analyse, redémarrer le pc et poste le rapport !!

Et refais un nouveau rapport hijackthis stp
0
geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 10
15 août 2008 à 16:30
laisse faire stp rohail ;-)
0
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:31
:-D
0
pyro42 Messages postés 4 Date d'inscription vendredi 15 août 2008 Statut Membre Dernière intervention 15 août 2008
15 août 2008 à 16:48
--------------------\\ Lop S&D 4.2.2-9 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Pyr› ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 15/08/2008 | 16:34:24 ] [ PC : ORDINATEUR (Proc:x86) ]
[ MAJ : 13-08-2008 | 21:02 ]

--------------------\\ Listing des dossiers dans APPLIC~1

[15/10/2007|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[22/10/2005|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[28/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[01/11/2007|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[01/11/2007|12:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
[17/06/2007|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[12/08/2005|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[26/04/2008|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[15/06/2005|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[26/10/2005|16:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[28/05/2005|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[12/11/2005|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[08/09/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[27/03/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[12/08/2005|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[23/10/2005|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
[04/07/2007|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/11/2007|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[15/06/2005|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[27/07/2008|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\mail grey balm inter
[13/10/2005|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[17/04/2007|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[03/07/2007|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[12/08/2005|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[03/07/2007|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[03/07/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle Studio
[04/06/2005|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[12/10/2005|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G3
[08/11/2006|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[14/08/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\services
[14/08/2008|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
[07/06/2008|15:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[16/08/2006|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/06/2005|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[04/07/2007|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[03/10/2007|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[29/10/2005|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[09/10/2007|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[01/12/2007|23:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[27/06/2006|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WhiteCap (Holiday Edition)
[23/10/2005|18:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[18/04/2008|22:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[16/10/2005|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[28/05/2005|20:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[28/05/2005|18:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[12/08/2005|16:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[07/12/2005|15:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[03/01/2007|21:30] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[13/08/2005|10:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[28/10/2005|23:43] C:\DOCUME~1\PYR~1\APPLIC~1\Adobe
[28/10/2005|23:44] C:\DOCUME~1\PYR~1\APPLIC~1\AdobeUM
[27/10/2005|12:03] C:\DOCUME~1\PYR~1\APPLIC~1\AOL
[27/10/2005|12:02] C:\DOCUME~1\PYR~1\APPLIC~1\AVG7
[29/10/2005|20:22] C:\DOCUME~1\PYR~1\APPLIC~1\CyberLink
[20/11/2005|11:21] C:\DOCUME~1\PYR~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[30/06/2007|00:23] C:\DOCUME~1\PYR~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web

[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\Adobe
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\AdobeUM
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\AOL
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\AVG7
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\BitTorrent
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\BSplayer
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web

[17/11/2006|22:38] C:\DOCUME~1\PYRORD~1.000\APPLIC~1\AOL
[30/06/2007|00:09] C:\DOCUME~1\PYRORD~1.000\APPLIC~1\Microsoft

[07/05/2007|21:37] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\.ABC
[17/06/2007|18:29] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\ACAMPREF
[15/02/2007|19:18] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Adobe
[07/03/2007|15:20] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\AdobeUM
[12/02/2007|16:33] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\AOL
[07/06/2007|17:53] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Apple Computer
[12/02/2007|16:32] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\AVG7
[17/06/2007|18:12] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Dev-Cpp
[17/06/2007|18:28] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\DNA
[12/02/2007|16:32] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/02/2007|18:33] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[13/02/2007|18:17] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Ecran de veille
[27/03/2007|21:27] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Google
[16/02/2007|21:50] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Help
[12/02/2007|16:31] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Identities
[17/04/2007|23:56] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Lavasoft
[28/06/2007|22:06] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Macromedia
[30/06/2007|00:16] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Microsoft

[09/09/2007|12:01] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\.ABC
[21/02/2008|12:46] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\123 Free Solitaire
[23/05/2008|07:44] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Adobe
[31/05/2008|19:44] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AdobeUM
[06/06/2008|20:22] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AdsCleaner
[01/11/2007|12:28] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AOL
[29/06/2007|22:25] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AVG7
[26/04/2008|23:24] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Azureus
[02/10/2007|19:05] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\BitZipper
[03/07/2007|22:20] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Corel
[30/12/2007|20:36] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\DataCast
[28/05/2005|20:17] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\desktop.ini
[13/03/2008|23:32] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Dev-Cpp
[29/06/2007|22:25] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[29/06/2007|23:21] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[29/01/2008|19:34] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\F?nts
[13/03/2008|23:30] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Google
[07/12/2007|23:18] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Help
[03/07/2007|21:32] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Identities
[04/12/2007|17:53] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\InstallShield
[16/03/2008|19:48] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\IObit
[30/06/2007|23:05] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Lavasoft
[28/10/2007|23:54] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Macromedia
[07/06/2008|14:01] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Microsoft
[06/07/2008|22:34] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\mIRC
[30/06/2007|11:19] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\MoyeaFLV2Video
[24/06/2008|09:18] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Mozilla
[13/03/2008|22:27] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Notepad++
[30/06/2007|11:20] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Nvu
[15/03/2008|16:33] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Real
[05/06/2008|18:16] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\SoftInform
[07/06/2008|15:13] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Sony
[07/06/2008|13:47] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Sony Setup
[04/09/2007|15:40] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Sun
[03/10/2007|13:42] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\TuneUp Software
[14/08/2008|18:21] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\UpFirst
[15/08/2008|14:58] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\uTorrent
[10/08/2007|22:13] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\VadeRetro
[01/12/2007|23:54] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Viewpoint
[22/10/2007|16:58] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\vlc
[29/06/2007|22:27] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\VMNTOOLBAR
[29/06/2007|23:44] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\WinRAR
[20/04/2008|16:41] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\WinTouch
[04/07/2007|12:19] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\You've Got Pictures Screensaver
[04/07/2007|12:14] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Zylom
[15/02/2008|23:01] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\??crosoft

[29/08/2006|18:17] C:\DOCUME~1\UTILIS~1\APPLIC~1\123 Free Solitaire
[13/06/2008|11:00] C:\DOCUME~1\UTILIS~1\APPLIC~1\Adobe
[04/01/2006|20:18] C:\DOCUME~1\UTILIS~1\APPLIC~1\AdobeUM
[04/06/2005|11:10] C:\DOCUME~1\UTILIS~1\APPLIC~1\AOL
[23/07/2008|11:28] C:\DOCUME~1\UTILIS~1\APPLIC~1\Apple Computer
[12/08/2005|16:02] C:\DOCUME~1\UTILIS~1\APPLIC~1\AVG7
[25/02/2008|15:27] C:\DOCUME~1\UTILIS~1\APPLIC~1\Babylon
[28/05/2005|20:17] C:\DOCUME~1\UTILIS~1\APPLIC~1\desktop.ini
[08/06/2005|15:25] C:\DOCUME~1\UTILIS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[25/08/2006|00:33] C:\DOCUME~1\UTILIS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/07/2007|13:45] C:\DOCUME~1\UTILIS~1\APPLIC~1\dvdcss
[21/11/2005|18:26] C:\DOCUME~1\UTILIS~1\APPLIC~1\EoRezo
[06/04/2007|15:06] C:\DOCUME~1\UTILIS~1\APPLIC~1\Google
[13/12/2005|16:28] C:\DOCUME~1\UTILIS~1\APPLIC~1\GTek
[05/06/2005|16:34] C:\DOCUME~1\UTILIS~1\APPLIC~1\Help
[28/05/2005|18:32] C:\DOCUME~1\UTILIS~1\APPLIC~1\Identities
[23/03/2008|14:29] C:\DOCUME~1\UTILIS~1\APPLIC~1\IObit
[07/12/2005|15:52] C:\DOCUME~1\UTILIS~1\APPLIC~1\Lavasoft
[06/08/2008|14:03] C:\DOCUME~1\UTILIS~1\APPLIC~1\LimeWire
[21/12/2005|15:38] C:\DOCUME~1\UTILIS~1\APPLIC~1\Macromedia
[13/10/2006|09:56] C:\DOCUME~1\UTILIS~1\APPLIC~1\Media Player Classic
[05/07/2007|17:45] C:\DOCUME~1\UTILIS~1\APPLIC~1\Microsoft
[23/07/2008|11:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\Mozilla
[03/06/2005|21:30] C:\DOCUME~1\UTILIS~1\APPLIC~1\MSNInstaller
[14/12/2005|11:30] C:\DOCUME~1\UTILIS~1\APPLIC~1\OpenOffice.org2
[25/08/2006|12:51] C:\DOCUME~1\UTILIS~1\APPLIC~1\Real
[07/09/2005|13:39] C:\DOCUME~1\UTILIS~1\APPLIC~1\Sun
[30/09/2005|22:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\teamspeak2
[27/07/2008|19:34] C:\DOCUME~1\UTILIS~1\APPLIC~1\UpFirst
[07/12/2007|23:24] C:\DOCUME~1\UTILIS~1\APPLIC~1\Viewpoint
[09/10/2005|15:42] C:\DOCUME~1\UTILIS~1\APPLIC~1\vlc
[24/06/2007|19:12] C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNTOOLBAR
[05/09/2007|15:22] C:\DOCUME~1\UTILIS~1\APPLIC~1\WinRAR
[18/02/2007|19:59] C:\DOCUME~1\UTILIS~1\APPLIC~1\Xfire
[04/06/2005|11:10] C:\DOCUME~1\UTILIS~1\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[15/08/2008 16:00][--ah-----] C:\WINDOWS\tasks\AC39818590423631.job
[11/07/2008 17:15][--a--c---] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[30/06/2008 12:38][--a--c---] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[15/08/2008 16:32][--a--c---] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Morgane).job
[15/08/2008 16:31][--a--c---] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Pyro).job
[15/08/2008 16:33][--a------] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Utilisateur).job
[15/08/2008 16:31][--a------] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Pyr›).job
[07/10/2005 16:04][--a--c---] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2100 series#1118237257.job
[15/08/2008 15:00][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 14:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

( AC39818590423631.job )=( c:\docume~1\utilis~1\applic~1\upfirst\DebugNewLong.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[22/01/2008|18:20] C:\Program Files\.autoreg
[05/09/2007|15:08] C:\Program Files\123 Free Solitaire
[05/11/2007|16:54] C:\Program Files\30+ Free Patience
[28/10/2005|22:09] C:\Program Files\3B Software
[15/12/2007|21:36] C:\Program Files\Adobe
[28/10/2005|23:12] C:\Program Files\Ahead
[13/10/2007|19:03] C:\Program Files\Allok 3GP PSP MP4 iPod Video Converter
[17/04/2008|17:37] C:\Program Files\Alwil Software
[01/11/2007|12:26] C:\Program Files\AOL
[01/07/2006|19:45] C:\Program Files\AOL 8.0
[03/10/2007|14:11] C:\Program Files\AOL 9.0
[07/02/2008|23:16] C:\Program Files\AOL 9.0 VR
[06/04/2007|17:27] C:\Program Files\AOL 9.0a
[15/07/2007|18:34] C:\Program Files\AOL 9.0b
[30/06/2007|11:01] C:\Program Files\AviSynth 2.5
[27/04/2008|09:57] C:\Program Files\Azureus
[05/09/2007|09:26] C:\Program Files\Bonjour
[21/02/2006|12:43] C:\Program Files\ColiPoste
[20/08/2006|13:49] C:\Program Files\common files
[18/04/2008|10:20] C:\Program Files\CPV
[29/10/2005|21:02] C:\Program Files\CyberLink
[25/11/2006|09:57] C:\Program Files\Del.js
[09/10/2005|14:37] C:\Program Files\directx
[13/08/2008|22:03] C:\Program Files\eMule
[20/04/2008|16:41] C:\Program Files\Fichiers communs
[14/09/2005|12:48] C:\Program Files\Formation interactive Microsoft
[16/02/2008|12:57] C:\Program Files\GameSpy Arcade
[14/10/2006|16:24] C:\Program Files\GIMP-2.0
[12/08/2005|16:01] C:\Program Files\Grisoft
[23/01/2008|19:24] C:\Program Files\Guitar Pro 5
[04/12/2007|17:53] C:\Program Files\Hercules
[08/06/2005|15:25] C:\Program Files\Hewlett-Packard
[28/05/2005|18:56] C:\Program Files\HighMAT CD Writing Wizard
[23/05/2008|07:45] C:\Program Files\HP
[05/06/2008|20:23] C:\Program Files\InstallShield Installation Information
[04/03/2006|23:29] C:\Program Files\InterActual
[14/08/2008|00:23] C:\Program Files\Internet Explorer
[15/03/2008|17:17] C:\Program Files\IObit
[02/12/2007|19:29] C:\Program Files\Java
[20/04/2008|16:41] C:\Program Files\JavaCore
[17/04/2007|23:56] C:\Program Files\Lavasoft
[07/11/2006|21:54] C:\Program Files\Macromedia
[30/12/2007|20:36] C:\Program Files\MarkAny
[13/10/2005|22:19] C:\Program Files\McAfee.com
[14/06/2008|14:45] C:\Program Files\MediaMonkey
[14/08/2008|00:29] C:\Program Files\Messenger
[07/06/2008|16:23] C:\Program Files\M‚tronome - Version D‚mo
[20/08/2006|14:03] C:\Program Files\Micro Application
[28/05/2005|18:28] C:\Program Files\microsoft frontpage
[13/03/2008|22:26] C:\Program Files\Microsoft Office
[04/07/2007|12:14] C:\Program Files\Microsoft.NET
[06/07/2008|20:13] C:\Program Files\mIRC
[15/03/2008|16:49] C:\Program Files\Montorgueil
[30/06/2007|19:07] C:\Program Files\MOVAVI
[28/05/2005|18:25] C:\Program Files\Movie Maker
[15/08/2008|15:36] C:\Program Files\Mozilla Firefox
[27/01/2008|20:39] C:\Program Files\Mozilla Firefox 3 Beta 1
[06/02/2008|23:08] C:\Program Files\MSECache
[03/06/2005|21:30] C:\Program Files\MSN
[19/02/2006|22:30] C:\Program Files\MSN Apps
[28/05/2005|18:23] C:\Program Files\MSN Gaming Zone
[18/04/2008|22:14] C:\Program Files\MSN Messenger
[30/03/2008|12:18] C:\Program Files\MyFree Codec
[15/03/2008|16:50] C:\Program Files\NetMeeting
[17/06/2007|18:32] C:\Program Files\Outlook Express
[14/06/2007|21:55] C:\Program Files\page.html
[08/10/2005|16:15] C:\Program Files\Paltalk Messenger
[09/07/2007|10:41] C:\Program Files\Pinnacle
[15/08/2005|19:40] C:\Program Files\PowerShot
[07/06/2008|13:52] C:\Program Files\QuickTime
[15/03/2008|16:50] C:\Program Files\ReadIris
[15/09/2005|16:42] C:\Program Files\Real
[13/10/2007|18:13] C:\Program Files\RFA Platinum
[15/09/2005|16:42] C:\Program Files\RngInterstitial.dll
[17/04/2008|19:40] C:\Program Files\Router
[05/06/2008|20:23] C:\Program Files\Samsung
[05/08/2007|13:38] C:\Program Files\Sensormatic
[28/05/2005|18:27] C:\Program Files\Services en ligne
[26/10/2005|15:05] C:\Program Files\SlySoft
[04/07/2007|12:15] C:\Program Files\SmartSound Software Inc
[05/06/2008|18:09] C:\Program Files\SoftInform
[29/12/2005|18:24] C:\Program Files\Sokoban
[07/06/2008|13:59] C:\Program Files\Sony
[07/06/2008|13:47] C:\Program Files\Sony Setup
[05/07/2007|17:42] C:\Program Files\Steinberg
[04/06/2005|11:08] C:\Program Files\TechCity Solutions
[05/07/2007|13:17] C:\Program Files\Thomson
[01/07/2007|15:21] C:\Program Files\TimeGate Studios
[09/10/2007|21:24] C:\Program Files\TuneUp Utilities 2007
[20/04/2008|16:41] C:\Program Files\Twain.MSNFix
[29/10/2005|11:28] C:\Program Files\Ulead Systems
[28/05/2005|18:32] C:\Program Files\Uninstall Information
[27/07/2008|19:33] C:\Program Files\UpFirst
[02/05/2008|21:39] C:\Program Files\uTorrent
[22/10/2005|19:31] C:\Program Files\VIAudioi
[06/04/2006|18:31] C:\Program Files\VideoLAN
[17/10/2007|21:51] C:\Program Files\Viewpoint
[31/10/2005|19:39] C:\Program Files\Virtools Web Player 2.0
[06/09/2006|15:06] C:\Program Files\WildTangent
[16/04/2008|14:12] C:\Program Files\Windows Live
[20/08/2006|11:23] C:\Program Files\Windows Media Components
[02/04/2007|19:13] C:\Program Files\Windows Media Connect 2
[05/07/2007|09:22] C:\Program Files\Windows Media Player
[17/04/2008|13:28] C:\Program Files\Windows NT
[28/05/2005|18:27] C:\Program Files\WindowsUpdate
[09/10/2007|21:24] C:\Program Files\WinRAR
[03/04/2006|16:59] C:\Program Files\WinZip
[28/05/2005|18:28] C:\Program Files\xerox
[08/05/2008|19:25] C:\Program Files\Yahoo!
[03/07/2007|22:43] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/11/2007|23:36] C:\Program Files\Fichiers communs\Adobe
[28/10/2005|23:11] C:\Program Files\Fichiers communs\Ahead
[01/11/2007|12:27] C:\Program Files\Fichiers communs\AOL
[01/07/2006|19:57] C:\Program Files\Fichiers communs\aolback
[01/11/2007|12:26] C:\Program Files\Fichiers communs\aolshare
[20/08/2006|13:56] C:\Program Files\Fichiers communs\AVSMedia
[07/03/2006|18:33] C:\Program Files\Fichiers communs\Bcgsoft
[15/06/2005|16:42] C:\Program Files\Fichiers communs\BOONTY Shared
[05/07/2007|17:40] C:\Program Files\Fichiers communs\Designer
[28/10/2005|16:38] C:\Program Files\Fichiers communs\Droppix
[17/09/2006|20:20] C:\Program Files\Fichiers communs\GTK
[08/06/2005|15:26] C:\Program Files\Fichiers communs\Hewlett-Packard
[03/07/2007|19:54] C:\Program Files\Fichiers communs\InstallShield
[14/08/2005|22:09] C:\Program Files\Fichiers communs\Java
[07/11/2006|21:57] C:\Program Files\Fichiers communs\Macromedia
[05/09/2007|09:08] C:\Program Files\Fichiers communs\Macrovision Shared
[07/06/2008|13:49] C:\Program Files\Fichiers communs\Microsoft Shared
[28/05/2005|18:25] C:\Program Files\Fichiers communs\MSSoap
[26/01/2006|16:42] C:\Program Files\Fichiers communs\NSV
[04/06/2005|11:10] C:\Program Files\Fichiers communs\Nullsoft
[28/05/2005|20:18] C:\Program Files\Fichiers communs\ODBC
[15/03/2008|16:33] C:\Program Files\Fichiers communs\Real
[03/03/2006|22:30] C:\Program Files\Fichiers communs\Scanner
[28/05/2005|18:25] C:\Program Files\Fichiers communs\Services
[28/05/2005|20:18] C:\Program Files\Fichiers communs\SpeechEngines
[08/11/2006|18:26] C:\Program Files\Fichiers communs\SWF Studio
[22/06/2005|19:20] C:\Program Files\Fichiers communs\Symantec Shared
[04/07/2007|12:14] C:\Program Files\Fichiers communs\System
[29/01/2006|16:29] C:\Program Files\Fichiers communs\Vbox
[16/04/2008|14:27] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[22/01/2008|18:20] C:\Program Files\Fichiers communs\Yazzle1560OinUninstaller.MSNFix

--------------------\\ Process

( 52 Processus )

IEXPLORE.EXE ~ [PID:3216] ~ [Threads:15]
IEXPLORE.EXE ~ [PID:2828] ~ [Threads:3]
IEXPLORE.EXE ~ [PID:976] ~ [Threads:23]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst
C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\dart wma dog gpl.exe
C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\DebugNewLong.exe
C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\DupeEqSoftware.exe
C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\jpdgmvkv.exe
C:\Program Files\upfirst
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@banner.cotedazurpalace[2].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@cotedazurpalace[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@adopt.euroclick[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@pacificpoker[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@32vegas[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@banner.32vegas[2].txt
C:\WINDOWS\Tasks\AC39818590423631.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 168 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-15 16:36:48
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 238

--------------------\\ Recherche d'autres infections

--------------------\\ Possible ROGUE ..

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Antivirus 2008 XP

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Crack Ov Dawn
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Cracknell, Debbie
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Crack Ov Dawn\Crack Ov Dawn - Miss Suicide.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Crack Ov Dawn\Crack Ov Dawn - Rise And Fall.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Cracknell, Debbie\Cracknell, Debbie - Guitar Talk.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\f\Faith No More\Faith No More - Crack Hitler.gp3
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack\Leftover Crack - Gang Control.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack\Leftover Crack - Nazi White Trash.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack\Leftover Crack - Operation Mouve.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Limp Bizkit\Limp Bizkit - Crack Addict (2).gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Limp Bizkit\Limp Bizkit - Crack Addict (3).gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Limp Bizkit\Limp Bizkit - Crack Addict.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\m\Malmsteen, Yngwie\Malmsteen, Yngwie - Cracking The Whip.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\p\Pixies\Pixies - Crackity Jones.gp3
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\s\Soliz, David\Soliz, David - Crack Kills.gp4


[F:2591][D:17]-> C:\DOCUME~1\PYRORD~1.002\LOCALS~1\Temp
[F:262][D:0]-> C:\DOCUME~1\PYRORD~1.002\Cookies
[F:15149][D:17]-> C:\DOCUME~1\PYRORD~1.002\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 16:43:48,56
0
geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 10
15 août 2008 à 16:51
ok maintenant :

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

et ensuite fais malwarebytes et hijackthis stp
0
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:52
Voili Voilou
0
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:52
Voili Voilou
0
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:52
Voili Voilou
0
rohail_93 Messages postés 126 Date d'inscription mercredi 25 juin 2008 Statut Membre Dernière intervention 2 juillet 2009 22
15 août 2008 à 16:52
Voili Voilou
0
pyro42 Messages postés 4 Date d'inscription vendredi 15 août 2008 Statut Membre Dernière intervention 15 août 2008
15 août 2008 à 16:58
--------------------\\ Lop S&D 4.2.2-9 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Pyr› ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 15/08/2008 | 16:49:52 ] [ PC : ORDINATEUR (Proc:x86) ]
[ MAJ : 13-08-2008 | 21:02 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\dart wma dog gpl.exe
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\DebugNewLong.exe
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\DupeEqSoftware.exe
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst\jpdgmvkv.exe
Supprime! - C:\WINDOWS\Tasks\AC39818590423631.job
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\upfirst
Supprime! - C:\Program Files\upfirst
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\Program Files\Viewpoint
Supprime! - C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Viewpoint
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
Supprime! - C:\DOCUME~1\PYRORD~1.002\APPLIC~1\vmntoolbar

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[15/10/2007|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[22/10/2005|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[28/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[01/11/2007|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[01/11/2007|12:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
[17/06/2007|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[12/08/2005|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[26/04/2008|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[15/06/2005|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[26/10/2005|16:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[28/05/2005|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[12/11/2005|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[08/09/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[27/03/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[12/08/2005|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[23/10/2005|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GTek
[04/07/2007|12:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/11/2007|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[15/06/2005|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[27/07/2008|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\mail grey balm inter
[13/10/2005|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[17/04/2007|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[03/07/2007|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[12/08/2005|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[03/07/2007|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[03/07/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle Studio
[04/06/2005|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[12/10/2005|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G3
[08/11/2006|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[14/08/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\services
[14/08/2008|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
[07/06/2008|15:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[16/08/2006|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/06/2005|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[04/07/2007|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[03/10/2007|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[29/10/2005|21:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[09/10/2007|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[27/06/2006|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WhiteCap (Holiday Edition)
[23/10/2005|18:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[18/04/2008|22:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[16/10/2005|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[28/05/2005|20:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[28/05/2005|18:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[12/08/2005|16:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[07/12/2005|15:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[03/01/2007|21:30] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[13/08/2005|10:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[28/10/2005|23:43] C:\DOCUME~1\PYR~1\APPLIC~1\Adobe
[28/10/2005|23:44] C:\DOCUME~1\PYR~1\APPLIC~1\AdobeUM
[27/10/2005|12:03] C:\DOCUME~1\PYR~1\APPLIC~1\AOL
[27/10/2005|12:02] C:\DOCUME~1\PYR~1\APPLIC~1\AVG7
[29/10/2005|20:22] C:\DOCUME~1\PYR~1\APPLIC~1\CyberLink
[20/11/2005|11:21] C:\DOCUME~1\PYR~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[30/06/2007|00:23] C:\DOCUME~1\PYR~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web

[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\Adobe
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\AdobeUM
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\AOL
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\AVG7
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\BitTorrent
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\BSplayer
[18/11/2006|13:06] C:\DOCUME~1\PYR~1.ORD\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web

[17/11/2006|22:38] C:\DOCUME~1\PYRORD~1.000\APPLIC~1\AOL
[30/06/2007|00:09] C:\DOCUME~1\PYRORD~1.000\APPLIC~1\Microsoft

[07/05/2007|21:37] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\.ABC
[17/06/2007|18:29] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\ACAMPREF
[15/02/2007|19:18] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Adobe
[07/03/2007|15:20] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\AdobeUM
[12/02/2007|16:33] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\AOL
[07/06/2007|17:53] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Apple Computer
[12/02/2007|16:32] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\AVG7
[17/06/2007|18:12] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Dev-Cpp
[17/06/2007|18:28] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\DNA
[12/02/2007|16:32] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/02/2007|18:33] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[13/02/2007|18:17] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Ecran de veille
[27/03/2007|21:27] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Google
[16/02/2007|21:50] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Help
[12/02/2007|16:31] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Identities
[17/04/2007|23:56] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Lavasoft
[28/06/2007|22:06] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Macromedia
[30/06/2007|00:16] C:\DOCUME~1\PYRORD~1.001\APPLIC~1\Microsoft

[09/09/2007|12:01] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\.ABC
[21/02/2008|12:46] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\123 Free Solitaire
[23/05/2008|07:44] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Adobe
[31/05/2008|19:44] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AdobeUM
[06/06/2008|20:22] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AdsCleaner
[01/11/2007|12:28] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AOL
[29/06/2007|22:25] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\AVG7
[26/04/2008|23:24] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Azureus
[02/10/2007|19:05] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\BitZipper
[03/07/2007|22:20] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Corel
[30/12/2007|20:36] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\DataCast
[28/05/2005|20:17] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\desktop.ini
[13/03/2008|23:32] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Dev-Cpp
[29/06/2007|22:25] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[29/06/2007|23:21] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[29/01/2008|19:34] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\F?nts
[13/03/2008|23:30] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Google
[07/12/2007|23:18] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Help
[03/07/2007|21:32] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Identities
[04/12/2007|17:53] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\InstallShield
[16/03/2008|19:48] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\IObit
[30/06/2007|23:05] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Lavasoft
[28/10/2007|23:54] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Macromedia
[07/06/2008|14:01] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Microsoft
[06/07/2008|22:34] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\mIRC
[30/06/2007|11:19] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\MoyeaFLV2Video
[24/06/2008|09:18] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Mozilla
[13/03/2008|22:27] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Notepad++
[30/06/2007|11:20] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Nvu
[15/03/2008|16:33] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Real
[05/06/2008|18:16] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\SoftInform
[07/06/2008|15:13] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Sony
[07/06/2008|13:47] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Sony Setup
[04/09/2007|15:40] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Sun
[03/10/2007|13:42] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\TuneUp Software
[14/08/2008|18:21] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\UpFirst
[15/08/2008|14:58] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\uTorrent
[10/08/2007|22:13] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\VadeRetro
[22/10/2007|16:58] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\vlc
[29/06/2007|23:44] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\WinRAR
[20/04/2008|16:41] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\WinTouch
[04/07/2007|12:19] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\You've Got Pictures Screensaver
[04/07/2007|12:14] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\Zylom
[15/02/2008|23:01] C:\DOCUME~1\PYRORD~1.002\APPLIC~1\??crosoft

[29/08/2006|18:17] C:\DOCUME~1\UTILIS~1\APPLIC~1\123 Free Solitaire
[13/06/2008|11:00] C:\DOCUME~1\UTILIS~1\APPLIC~1\Adobe
[04/01/2006|20:18] C:\DOCUME~1\UTILIS~1\APPLIC~1\AdobeUM
[04/06/2005|11:10] C:\DOCUME~1\UTILIS~1\APPLIC~1\AOL
[23/07/2008|11:28] C:\DOCUME~1\UTILIS~1\APPLIC~1\Apple Computer
[12/08/2005|16:02] C:\DOCUME~1\UTILIS~1\APPLIC~1\AVG7
[25/02/2008|15:27] C:\DOCUME~1\UTILIS~1\APPLIC~1\Babylon
[28/05/2005|20:17] C:\DOCUME~1\UTILIS~1\APPLIC~1\desktop.ini
[08/06/2005|15:25] C:\DOCUME~1\UTILIS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[25/08/2006|00:33] C:\DOCUME~1\UTILIS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/07/2007|13:45] C:\DOCUME~1\UTILIS~1\APPLIC~1\dvdcss
[21/11/2005|18:26] C:\DOCUME~1\UTILIS~1\APPLIC~1\EoRezo
[06/04/2007|15:06] C:\DOCUME~1\UTILIS~1\APPLIC~1\Google
[13/12/2005|16:28] C:\DOCUME~1\UTILIS~1\APPLIC~1\GTek
[05/06/2005|16:34] C:\DOCUME~1\UTILIS~1\APPLIC~1\Help
[28/05/2005|18:32] C:\DOCUME~1\UTILIS~1\APPLIC~1\Identities
[23/03/2008|14:29] C:\DOCUME~1\UTILIS~1\APPLIC~1\IObit
[07/12/2005|15:52] C:\DOCUME~1\UTILIS~1\APPLIC~1\Lavasoft
[06/08/2008|14:03] C:\DOCUME~1\UTILIS~1\APPLIC~1\LimeWire
[21/12/2005|15:38] C:\DOCUME~1\UTILIS~1\APPLIC~1\Macromedia
[13/10/2006|09:56] C:\DOCUME~1\UTILIS~1\APPLIC~1\Media Player Classic
[05/07/2007|17:45] C:\DOCUME~1\UTILIS~1\APPLIC~1\Microsoft
[23/07/2008|11:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\Mozilla
[03/06/2005|21:30] C:\DOCUME~1\UTILIS~1\APPLIC~1\MSNInstaller
[14/12/2005|11:30] C:\DOCUME~1\UTILIS~1\APPLIC~1\OpenOffice.org2
[25/08/2006|12:51] C:\DOCUME~1\UTILIS~1\APPLIC~1\Real
[07/09/2005|13:39] C:\DOCUME~1\UTILIS~1\APPLIC~1\Sun
[30/09/2005|22:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\teamspeak2
[07/12/2007|23:24] C:\DOCUME~1\UTILIS~1\APPLIC~1\Viewpoint
[09/10/2005|15:42] C:\DOCUME~1\UTILIS~1\APPLIC~1\vlc
[24/06/2007|19:12] C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNTOOLBAR
[05/09/2007|15:22] C:\DOCUME~1\UTILIS~1\APPLIC~1\WinRAR
[18/02/2007|19:59] C:\DOCUME~1\UTILIS~1\APPLIC~1\Xfire
[04/06/2005|11:10] C:\DOCUME~1\UTILIS~1\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[11/07/2008 17:15][--a--c---] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[30/06/2008 12:38][--a--c---] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[15/08/2008 16:47][--a--c---] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Morgane).job
[15/08/2008 16:46][--a--c---] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Pyro).job
[15/08/2008 16:48][--a------] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Utilisateur).job
[15/08/2008 16:46][--a------] C:\WINDOWS\tasks\Recherche de mises … jour sur McAfee.com (ORDINATEUR-Pyr›).job
[07/10/2005 16:04][--a--c---] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2100 series#1118237257.job
[15/08/2008 15:00][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 14:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/01/2008|18:20] C:\Program Files\.autoreg
[05/09/2007|15:08] C:\Program Files\123 Free Solitaire
[05/11/2007|16:54] C:\Program Files\30+ Free Patience
[28/10/2005|22:09] C:\Program Files\3B Software
[15/12/2007|21:36] C:\Program Files\Adobe
[28/10/2005|23:12] C:\Program Files\Ahead
[13/10/2007|19:03] C:\Program Files\Allok 3GP PSP MP4 iPod Video Converter
[17/04/2008|17:37] C:\Program Files\Alwil Software
[01/11/2007|12:26] C:\Program Files\AOL
[01/07/2006|19:45] C:\Program Files\AOL 8.0
[03/10/2007|14:11] C:\Program Files\AOL 9.0
[07/02/2008|23:16] C:\Program Files\AOL 9.0 VR
[06/04/2007|17:27] C:\Program Files\AOL 9.0a
[15/07/2007|18:34] C:\Program Files\AOL 9.0b
[30/06/2007|11:01] C:\Program Files\AviSynth 2.5
[27/04/2008|09:57] C:\Program Files\Azureus
[05/09/2007|09:26] C:\Program Files\Bonjour
[21/02/2006|12:43] C:\Program Files\ColiPoste
[20/08/2006|13:49] C:\Program Files\common files
[18/04/2008|10:20] C:\Program Files\CPV
[29/10/2005|21:02] C:\Program Files\CyberLink
[25/11/2006|09:57] C:\Program Files\Del.js
[09/10/2005|14:37] C:\Program Files\directx
[13/08/2008|22:03] C:\Program Files\eMule
[20/04/2008|16:41] C:\Program Files\Fichiers communs
[14/09/2005|12:48] C:\Program Files\Formation interactive Microsoft
[16/02/2008|12:57] C:\Program Files\GameSpy Arcade
[14/10/2006|16:24] C:\Program Files\GIMP-2.0
[12/08/2005|16:01] C:\Program Files\Grisoft
[23/01/2008|19:24] C:\Program Files\Guitar Pro 5
[04/12/2007|17:53] C:\Program Files\Hercules
[08/06/2005|15:25] C:\Program Files\Hewlett-Packard
[28/05/2005|18:56] C:\Program Files\HighMAT CD Writing Wizard
[23/05/2008|07:45] C:\Program Files\HP
[05/06/2008|20:23] C:\Program Files\InstallShield Installation Information
[04/03/2006|23:29] C:\Program Files\InterActual
[14/08/2008|00:23] C:\Program Files\Internet Explorer
[15/03/2008|17:17] C:\Program Files\IObit
[02/12/2007|19:29] C:\Program Files\Java
[20/04/2008|16:41] C:\Program Files\JavaCore
[17/04/2007|23:56] C:\Program Files\Lavasoft
[07/11/2006|21:54] C:\Program Files\Macromedia
[30/12/2007|20:36] C:\Program Files\MarkAny
[13/10/2005|22:19] C:\Program Files\McAfee.com
[14/06/2008|14:45] C:\Program Files\MediaMonkey
[14/08/2008|00:29] C:\Program Files\Messenger
[07/06/2008|16:23] C:\Program Files\M‚tronome - Version D‚mo
[20/08/2006|14:03] C:\Program Files\Micro Application
[28/05/2005|18:28] C:\Program Files\microsoft frontpage
[13/03/2008|22:26] C:\Program Files\Microsoft Office
[04/07/2007|12:14] C:\Program Files\Microsoft.NET
[06/07/2008|20:13] C:\Program Files\mIRC
[15/03/2008|16:49] C:\Program Files\Montorgueil
[30/06/2007|19:07] C:\Program Files\MOVAVI
[28/05/2005|18:25] C:\Program Files\Movie Maker
[15/08/2008|16:45] C:\Program Files\Mozilla Firefox
[27/01/2008|20:39] C:\Program Files\Mozilla Firefox 3 Beta 1
[06/02/2008|23:08] C:\Program Files\MSECache
[03/06/2005|21:30] C:\Program Files\MSN
[19/02/2006|22:30] C:\Program Files\MSN Apps
[28/05/2005|18:23] C:\Program Files\MSN Gaming Zone
[18/04/2008|22:14] C:\Program Files\MSN Messenger
[30/03/2008|12:18] C:\Program Files\MyFree Codec
[15/03/2008|16:50] C:\Program Files\NetMeeting
[17/06/2007|18:32] C:\Program Files\Outlook Express
[14/06/2007|21:55] C:\Program Files\page.html
[08/10/2005|16:15] C:\Program Files\Paltalk Messenger
[09/07/2007|10:41] C:\Program Files\Pinnacle
[15/08/2005|19:40] C:\Program Files\PowerShot
[07/06/2008|13:52] C:\Program Files\QuickTime
[15/03/2008|16:50] C:\Program Files\ReadIris
[15/09/2005|16:42] C:\Program Files\Real
[13/10/2007|18:13] C:\Program Files\RFA Platinum
[15/09/2005|16:42] C:\Program Files\RngInterstitial.dll
[17/04/2008|19:40] C:\Program Files\Router
[05/06/2008|20:23] C:\Program Files\Samsung
[05/08/2007|13:38] C:\Program Files\Sensormatic
[28/05/2005|18:27] C:\Program Files\Services en ligne
[26/10/2005|15:05] C:\Program Files\SlySoft
[04/07/2007|12:15] C:\Program Files\SmartSound Software Inc
[05/06/2008|18:09] C:\Program Files\SoftInform
[29/12/2005|18:24] C:\Program Files\Sokoban
[07/06/2008|13:59] C:\Program Files\Sony
[07/06/2008|13:47] C:\Program Files\Sony Setup
[05/07/2007|17:42] C:\Program Files\Steinberg
[04/06/2005|11:08] C:\Program Files\TechCity Solutions
[05/07/2007|13:17] C:\Program Files\Thomson
[01/07/2007|15:21] C:\Program Files\TimeGate Studios
[09/10/2007|21:24] C:\Program Files\TuneUp Utilities 2007
[20/04/2008|16:41] C:\Program Files\Twain.MSNFix
[29/10/2005|11:28] C:\Program Files\Ulead Systems
[28/05/2005|18:32] C:\Program Files\Uninstall Information
[02/05/2008|21:39] C:\Program Files\uTorrent
[22/10/2005|19:31] C:\Program Files\VIAudioi
[06/04/2006|18:31] C:\Program Files\VideoLAN
[31/10/2005|19:39] C:\Program Files\Virtools Web Player 2.0
[06/09/2006|15:06] C:\Program Files\WildTangent
[16/04/2008|14:12] C:\Program Files\Windows Live
[20/08/2006|11:23] C:\Program Files\Windows Media Components
[02/04/2007|19:13] C:\Program Files\Windows Media Connect 2
[05/07/2007|09:22] C:\Program Files\Windows Media Player
[17/04/2008|13:28] C:\Program Files\Windows NT
[28/05/2005|18:27] C:\Program Files\WindowsUpdate
[09/10/2007|21:24] C:\Program Files\WinRAR
[03/04/2006|16:59] C:\Program Files\WinZip
[28/05/2005|18:28] C:\Program Files\xerox
[08/05/2008|19:25] C:\Program Files\Yahoo!
[03/07/2007|22:43] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/11/2007|23:36] C:\Program Files\Fichiers communs\Adobe
[28/10/2005|23:11] C:\Program Files\Fichiers communs\Ahead
[01/11/2007|12:27] C:\Program Files\Fichiers communs\AOL
[01/07/2006|19:57] C:\Program Files\Fichiers communs\aolback
[01/11/2007|12:26] C:\Program Files\Fichiers communs\aolshare
[20/08/2006|13:56] C:\Program Files\Fichiers communs\AVSMedia
[07/03/2006|18:33] C:\Program Files\Fichiers communs\Bcgsoft
[15/06/2005|16:42] C:\Program Files\Fichiers communs\BOONTY Shared
[05/07/2007|17:40] C:\Program Files\Fichiers communs\Designer
[28/10/2005|16:38] C:\Program Files\Fichiers communs\Droppix
[17/09/2006|20:20] C:\Program Files\Fichiers communs\GTK
[08/06/2005|15:26] C:\Program Files\Fichiers communs\Hewlett-Packard
[03/07/2007|19:54] C:\Program Files\Fichiers communs\InstallShield
[14/08/2005|22:09] C:\Program Files\Fichiers communs\Java
[07/11/2006|21:57] C:\Program Files\Fichiers communs\Macromedia
[05/09/2007|09:08] C:\Program Files\Fichiers communs\Macrovision Shared
[07/06/2008|13:49] C:\Program Files\Fichiers communs\Microsoft Shared
[28/05/2005|18:25] C:\Program Files\Fichiers communs\MSSoap
[26/01/2006|16:42] C:\Program Files\Fichiers communs\NSV
[04/06/2005|11:10] C:\Program Files\Fichiers communs\Nullsoft
[28/05/2005|20:18] C:\Program Files\Fichiers communs\ODBC
[15/03/2008|16:33] C:\Program Files\Fichiers communs\Real
[03/03/2006|22:30] C:\Program Files\Fichiers communs\Scanner
[28/05/2005|18:25] C:\Program Files\Fichiers communs\Services
[28/05/2005|20:18] C:\Program Files\Fichiers communs\SpeechEngines
[08/11/2006|18:26] C:\Program Files\Fichiers communs\SWF Studio
[22/06/2005|19:20] C:\Program Files\Fichiers communs\Symantec Shared
[04/07/2007|12:14] C:\Program Files\Fichiers communs\System
[29/01/2006|16:29] C:\Program Files\Fichiers communs\Vbox
[16/04/2008|14:27] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[22/01/2008|18:20] C:\Program Files\Fichiers communs\Yazzle1560OinUninstaller.MSNFix

--------------------\\ Process

( 49 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@banner.cotedazurpalace[2].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@cotedazurpalace[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@adopt.euroclick[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@pacificpoker[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@32vegas[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@banner.32vegas[2].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@888[1].txt
C:\DOCUME~1\PYRORD~1.002\Cookies\pyro@888[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-15 16:52:01
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 238

--------------------\\ Recherche d'autres infections

--------------------\\ Possible ROGUE ..

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Antivirus 2008 XP

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Crack Ov Dawn
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Cracknell, Debbie
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Crack Ov Dawn\Crack Ov Dawn - Miss Suicide.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Crack Ov Dawn\Crack Ov Dawn - Rise And Fall.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\c\Cracknell, Debbie\Cracknell, Debbie - Guitar Talk.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\f\Faith No More\Faith No More - Crack Hitler.gp3
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack\Leftover Crack - Gang Control.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack\Leftover Crack - Nazi White Trash.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Leftover Crack\Leftover Crack - Operation Mouve.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Limp Bizkit\Limp Bizkit - Crack Addict (2).gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Limp Bizkit\Limp Bizkit - Crack Addict (3).gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\l\Limp Bizkit\Limp Bizkit - Crack Addict.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\m\Malmsteen, Yngwie\Malmsteen, Yngwie - Cracking The Whip.gp4
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\p\Pixies\Pixies - Crackity Jones.gp3
C:\DOCUME~1\PYRORD~1.002\Bureau\Guitar Pro Tabs\s\Soliz, David\Soliz, David - Crack Kills.gp4


[F:2591][D:17]-> C:\DOCUME~1\PYRORD~1.002\LOCALS~1\Temp
[F:265][D:0]-> C:\DOCUME~1\PYRORD~1.002\Cookies
[F:15269][D:17]-> C:\DOCUME~1\PYRORD~1.002\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 16:57:26,00
0
geoffrey5 Messages postés 13732 Date d'inscription dimanche 20 mai 2007 Statut Contributeur sécurité Dernière intervention 21 mai 2010 10
15 août 2008 à 17:03
ok...tu peux faire malwarebytes et ensuite hijackthis
0