PUB CID

Salut,

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde dans le tutorial :
http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

slt,

colle un rapport hijackthis

http://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.ht(...)

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."

_____________

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

voici le rapport,

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:51:23, on 19/08/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Windows\vVX1000.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\taskeng.exe
C:\Users\Fabien\Desktop\eden.exe
C:\Windows\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Slow view] "C:\ProgramData\realwarnwarn.13nku"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\pnrpnsp.dll' missing
O13 - Gopher Prefix:
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

Voici le rapport généré :

--------------------\\ Lop S&D 4.2.3-1 XP/Vista

Microsoft® Windows Vista™ Édition Intégrale ( v6.0.6000 )
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ )
Award Modular BIOS v6.00PG
BOOT : Normal boot

"C:\Lop SD" ( MAJ : 19-08-2008|02:08 )
Option : [1] ( 19/08/2008|12:21 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[17/08/2008|17:04] C:\Users\Fabien\AppData\Local\Application Data
[18/08/2008|22:42] C:\Users\Fabien\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[17/08/2008|17:35] C:\Users\Fabien\AppData\Local\GDIPFONTCACHEV1.DAT
[17/08/2008|20:16] C:\Users\Fabien\AppData\Local\Google
[17/08/2008|17:04] C:\Users\Fabien\AppData\Local\Historique
[19/08/2008|10:32] C:\Users\Fabien\AppData\Local\IconCache.db
[17/08/2008|21:50] C:\Users\Fabien\AppData\Local\Microsoft
[17/08/2008|17:15] C:\Users\Fabien\AppData\Local\Microsoft Help
[17/08/2008|22:11] C:\Users\Fabien\AppData\Local\Mozilla
[18/08/2008|22:24] C:\Users\Fabien\AppData\Local\Paint.NET
[19/08/2008|12:20] C:\Users\Fabien\AppData\Local\Temp
[17/08/2008|17:04] C:\Users\Fabien\AppData\Local\Temporary Internet Files

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[19/08/2008 10:33][--ah-----] C:\Windows\tasks\SA.DAT
[19/08/2008 10:32][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[17/08/2008|16:54] C:\ProgramData\Apple Computer
[02/11/2006|15:00] C:\ProgramData\Application Data
[17/08/2008|20:28] C:\ProgramData\avg7
[17/08/2008|20:07] C:\ProgramData\Browse Dent Win Base
[17/08/2008|17:01] C:\ProgramData\Bureau
[17/08/2008|20:07] C:\ProgramData\cdrom face dog.yobwm
[02/11/2006|15:00] C:\ProgramData\Desktop
[02/11/2006|15:00] C:\ProgramData\Documents
[17/08/2008|17:01] C:\ProgramData\Favoris
[02/11/2006|15:00] C:\ProgramData\Favorites
[17/08/2008|20:16] C:\ProgramData\Google
[18/08/2008|22:20] C:\ProgramData\Google Updater
[17/08/2008|20:11] C:\ProgramData\Grisoft
[17/08/2008|17:01] C:\ProgramData\Menu D‚marrer
[17/08/2008|22:09] C:\ProgramData\Messenger Plus!
[18/08/2008|19:02] C:\ProgramData\Microsoft
[17/08/2008|17:21] C:\ProgramData\Microsoft Help
[17/08/2008|17:01] C:\ProgramData\ModŠles
[17/08/2008|16:54] C:\ProgramData\Real
[17/08/2008|23:38] C:\ProgramData\realwarnwarn.0e84tj
[19/08/2008|11:39] C:\ProgramData\realwarnwarn.13nku
[19/08/2008|10:55] C:\ProgramData\realwarnwarn.17z3r0
[18/08/2008|19:25] C:\ProgramData\realwarnwarn.1rbq3cb
[17/08/2008|22:54] C:\ProgramData\realwarnwarn.1xtfg
[18/08/2008|20:52] C:\ProgramData\realwarnwarn.2tlcz3c
[17/08/2008|20:29] C:\ProgramData\realwarnwarn.4bhklhb
[18/08/2008|21:14] C:\ProgramData\realwarnwarn.4mg78k
[18/08/2008|22:20] C:\ProgramData\realwarnwarn.54ampw
[18/08/2008|22:42] C:\ProgramData\realwarnwarn.9z25s
[18/08/2008|19:03] C:\ProgramData\realwarnwarn.bscto
[19/08/2008|12:01] C:\ProgramData\realwarnwarn.cgtocd
[18/08/2008|18:41] C:\ProgramData\realwarnwarn.emj859
[18/08/2008|20:30] C:\ProgramData\realwarnwarn.fmcgra
[18/08/2008|21:36] C:\ProgramData\realwarnwarn.fnlbjr
[17/08/2008|21:13] C:\ProgramData\realwarnwarn.il42d9u
[17/08/2008|20:51] C:\ProgramData\realwarnwarn.jbm0l9
[17/08/2008|20:06] C:\ProgramData\realwarnwarn.kb989
[18/08/2008|21:58] C:\ProgramData\realwarnwarn.ne7h2d
[17/08/2008|20:06] C:\ProgramData\realwarnwarn.oyhsmx5
[17/08/2008|22:33] C:\ProgramData\realwarnwarn.qd9djlc
[19/08/2008|11:17] C:\ProgramData\realwarnwarn.qogfl
[18/08/2008|19:47] C:\ProgramData\realwarnwarn.tl0iq7
[17/08/2008|22:11] C:\ProgramData\realwarnwarn.ubcwna
[18/08/2008|20:09] C:\ProgramData\realwarnwarn.v89yco
[17/08/2008|21:49] C:\ProgramData\realwarnwarn.xfv4ob
[17/08/2008|23:16] C:\ProgramData\realwarnwarn.z742qn
[17/08/2008|20:07] C:\ProgramData\Rectbitsroam
[02/11/2006|15:00] C:\ProgramData\Start Menu
[19/08/2008|11:42] C:\ProgramData\TEMP
[02/11/2006|15:00] C:\ProgramData\Templates
[21/06/2038|10:13] C:\ProgramData\Windows Genuine Advantage
[17/08/2008|17:38] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[18/08/2008|20:45] C:\Program Files\Academium 7x
[16/06/2007|22:51] C:\Program Files\Ad-Aware
[17/05/2007|15:04] C:\Program Files\AusLogics Disk Defrag
[17/08/2008|17:38] C:\Program Files\Common Files
[17/05/2007|15:25] C:\Program Files\Compare It!
[17/08/2008|16:52] C:\Program Files\desktop.ini
[17/05/2007|15:04] C:\Program Files\Everest
[17/08/2008|17:01] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[17/05/2007|15:12] C:\Program Files\FoxitReader
[17/08/2008|21:26] C:\Program Files\Google
[17/08/2008|20:11] C:\Program Files\Grisoft
[17/05/2007|15:25] C:\Program Files\IE Privacy Keeper
[17/08/2008|20:15] C:\Program Files\InstallShield Installation Information
[02/11/2006|14:41] C:\Program Files\Internet Explorer
[17/08/2008|16:56] C:\Program Files\Java
[17/05/2007|15:25] C:\Program Files\K-Lite Codec Pack
[14/06/2007|02:49] C:\Program Files\Maxthon2
[17/08/2008|21:29] C:\Program Files\Messenger Plus! Live
[02/11/2006|14:35] C:\Program Files\Microsoft Games
[17/08/2008|17:19] C:\Program Files\Microsoft Office
[17/08/2008|20:00] C:\Program Files\Microsoft SQL Server Compact Edition
[17/08/2008|17:19] C:\Program Files\Microsoft Visual Studio
[17/08/2008|17:16] C:\Program Files\Microsoft Visual Studio 8
[17/08/2008|17:19] C:\Program Files\Microsoft Works
[17/08/2008|17:18] C:\Program Files\Microsoft.NET
[02/11/2006|14:41] C:\Program Files\Movie Maker
[19/08/2008|10:36] C:\Program Files\Mozilla Firefox
[17/08/2008|17:19] C:\Program Files\MSBuild
[02/11/2006|14:35] C:\Program Files\MSN
[17/08/2008|16:54] C:\Program Files\Nero
[26/05/2007|13:26] C:\Program Files\Occtpt
[24/05/2007|12:04] C:\Program Files\Paint.NET
[17/08/2008|17:28] C:\Program Files\Realtek
[17/08/2008|20:06] C:\Program Files\Rectbitsroam
[02/11/2006|14:35] C:\Program Files\Reference Assemblies
[18/08/2008|18:49] C:\Program Files\Spyware Doctor
[17/08/2008|21:39] C:\Program Files\Trend Micro
[17/05/2007|15:25] C:\Program Files\UberIcon
[02/11/2006|15:00] C:\Program Files\Uninstall Information
[02/11/2006|14:41] C:\Program Files\Windows Calendar
[02/11/2006|14:41] C:\Program Files\Windows Defender
[17/08/2008|20:01] C:\Program Files\Windows Live
[02/11/2006|14:41] C:\Program Files\Windows Mail
[02/11/2006|14:41] C:\Program Files\Windows Media Player
[17/08/2008|17:01] C:\Program Files\Windows NT
[02/11/2006|14:41] C:\Program Files\Windows Photo Gallery
[02/11/2006|14:41] C:\Program Files\Windows Sidebar
[17/08/2008|16:54] C:\Program Files\WinRAR

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[17/08/2008|16:54] C:\Program Files\Common Files\Ahead
[17/08/2008|17:19] C:\Program Files\Common Files\DESIGNER
[17/08/2008|17:28] C:\Program Files\Common Files\InstallShield
[17/08/2008|16:56] C:\Program Files\Common Files\Java
[17/08/2008|19:51] C:\Program Files\Common Files\microsoft shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[17/08/2008|17:16] C:\Program Files\Common Files\System
[17/08/2008|19:51] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 56 Processus )

iexplore.exe ~ [PID:3368] ~ [Threads:5]
iexplore.exe ~ [PID:3508] ~ [Threads:9]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\cdrom face dog.yobwm
C:\ProgramData\realwarnwarn.13nku
C:\ProgramData\realwarnwarn.1xtfg
C:\ProgramData\realwarnwarn.9z25s
C:\ProgramData\realwarnwarn.bscto
C:\ProgramData\realwarnwarn.kb989
C:\ProgramData\realwarnwarn.qogfl
C:\ProgramData\realwarnwarn.0e84tj
C:\ProgramData\realwarnwarn.17z3r0
C:\ProgramData\realwarnwarn.4mg78k
C:\ProgramData\realwarnwarn.54ampw
C:\ProgramData\realwarnwarn.cgtocd
C:\ProgramData\realwarnwarn.emj859
C:\ProgramData\realwarnwarn.fmcgra
C:\ProgramData\realwarnwarn.fnlbjr
C:\ProgramData\realwarnwarn.jbm0l9
C:\ProgramData\realwarnwarn.ne7h2d
C:\ProgramData\realwarnwarn.tl0iq7
C:\ProgramData\realwarnwarn.ubcwna
C:\ProgramData\realwarnwarn.v89yco
C:\ProgramData\realwarnwarn.xfv4ob
C:\ProgramData\realwarnwarn.z742qn
C:\ProgramData\realwarnwarn.1rbq3cb
C:\ProgramData\realwarnwarn.2tlcz3c
C:\ProgramData\realwarnwarn.4bhklhb
C:\ProgramData\realwarnwarn.il42d9u
C:\ProgramData\realwarnwarn.oyhsmx5
C:\ProgramData\realwarnwarn.qd9djlc
C:\Users\Fabien\AppData\Local\Temp\bisD96F.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Browse Dent Win Base
C:\ProgramData\Browse Dent Win Base\glue fork.exe
C:\Users\Fabien\AppData\Roaming\MICROS~1\Windows\Cookies\fabien@advertising[2].txt
C:\Users\Fabien\AppData\Roaming\MICROS~1\Windows\Cookies\fabien@adopt.euroclick[1].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Slow view"="\"C:\\ProgramData\\realwarnwarn.cgtocd\""

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-19 12:21:39
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:104][D:19]-> C:\Users\Fabien\AppData\Local\Temp
[F:23][D:0]-> C:\Users\Fabien\AppData\Roaming\MICROS~1\Windows\Cookies
[F:399][D:9]-> C:\Users\Fabien\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:2][D:2]-> C:\$Recycle.Bin

--------------------\\ Fin du rapport a 12:22:24
[ UAC => 1 ]

relance lop sd et choisi l'option 2

______________

pour AVG tu as une version depassée! mets la version 8!

______________

spyware doctor si tu paye pas n'est pas terrible vire le et mets spybot a la place sans activer le tea timer si tu as windows defender sinon l'ordi va ramer

_________________

encore des soucis???

Voila,j'ai fait ce que tu ma dis de faire, j'ai installer spybot , j'ai aussi installer AVG8 avec une license, et j'ai surfer sur le net et j'ai pu de pub pr l'instant =) merci bc a jlpjlp!!!