Antivirus 2008

Bonjour,
j'ai un probléme avec Antivirus 2008

Voici le rapport de Navilog1:

Search Navipromo version 3.6.5 commencé le 23.08.2008 à 9:20:19.14

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Ricci"

Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : FAT32

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudÉ~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\RICCI\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\RICCI\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\RICCI\menud+~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\DOCUME~1\RICCI\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\DOCUME~1\RICCI\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 23.08.2008 à 9:22:37.03 ***

et le rapport de Lop Set D


--------------------\\ Lop S&D 4.2.3-3 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) CPU 3.06GHz )
Phoenix - AwardBIOS v6.00PG
BOOT : Normal boot

"C:\Lop SD" ( MAJ : 21-08-2008|11:16 )
Option : [1] ( 23.08.2008| 9:27 )

--------------------\\ Listing des dossiers dans APPLIC~1

[02.11.2005|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[02.11.2005|16:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02.11.2005|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02.11.2005|16:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[20.06.2008|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[17.08.2007|07:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Alternate
[01.10.2006|15:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Anti-Virus
[09.08.2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[09.08.2008|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[22.08.2008|05:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
[10.07.2008|06:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BMSEV
[18.06.2007|08:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\c9b086ce-4a3b-11db-8373-b622a1ef5492
[21.06.2008|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Canon
[30.09.2006|04:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\C-CHANNEL
[18.12.2006|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[02.11.2005|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[09.03.2007|08:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DiaetKontrolle
[27.04.2007|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DriveCleaner
[30.09.2006|09:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESTsoft
[12.10.2007|08:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[24.01.2007|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Huonker Softwaretechnik
[25.09.2007|05:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[30.10.2006|05:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01.10.2006|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
[02.11.2005|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21.06.2007|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[21.08.2007|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[22.08.2007|17:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[25.09.2007|05:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[08.06.2007|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[18.06.2007|08:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RapidSolution
[21.06.2007|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMonitor
[30.09.2006|11:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[20.08.2008|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\services
[08.05.2008|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[20.08.2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
[11.02.2007|08:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stundenerfassung
[02.11.2005|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[26.04.2008|06:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SystemDoctor
[26.04.2008|06:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SystemDoctor Free
[01.10.2006|08:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[01.10.2006|06:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[21.06.2007|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiSpyware 2007
[28.01.2008|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiVirus Pro 2007
[16.11.2006|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09.04.2007|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[29.07.2008|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[30.10.2006|05:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\zeon

[02.11.2005|15:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[08.12.2006|03:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\$_hpcst$.hpc
[02.11.2005|15:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[30.09.2006|04:29] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

[30.09.2006|04:56] C:\DOCUME~1\RICCI\APPLIC~1\$_hpcst$.hpc
[03.03.2007|14:02] C:\DOCUME~1\RICCI\APPLIC~1\.Kanton VS
[02.07.2008|13:22] C:\DOCUME~1\RICCI\APPLIC~1\~LM00001.tmp
[02.07.2008|13:23] C:\DOCUME~1\RICCI\APPLIC~1\~LM00002.tmp
[02.07.2008|13:23] C:\DOCUME~1\RICCI\APPLIC~1\~LM00003.tmp
[02.07.2008|13:23] C:\DOCUME~1\RICCI\APPLIC~1\~LM00004.tmp
[02.07.2008|13:42] C:\DOCUME~1\RICCI\APPLIC~1\~LM00005.tmp
[03.07.2008|05:54] C:\DOCUME~1\RICCI\APPLIC~1\~LM00006.tmp
[04.07.2008|05:30] C:\DOCUME~1\RICCI\APPLIC~1\~LM00007.tmp
[04.07.2008|05:33] C:\DOCUME~1\RICCI\APPLIC~1\~LM00008.tmp
[04.07.2008|05:33] C:\DOCUME~1\RICCI\APPLIC~1\~LM00009.tmp
[04.07.2008|05:35] C:\DOCUME~1\RICCI\APPLIC~1\~LM00010.tmp
[04.07.2008|05:43] C:\DOCUME~1\RICCI\APPLIC~1\~LM00011.tmp
[04.07.2008|05:44] C:\DOCUME~1\RICCI\APPLIC~1\~LM00012.tmp
[04.07.2008|05:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00013.tmp
[04.07.2008|05:49] C:\DOCUME~1\RICCI\APPLIC~1\~LM00014.tmp
[04.07.2008|05:57] C:\DOCUME~1\RICCI\APPLIC~1\~LM00015.tmp
[04.07.2008|06:15] C:\DOCUME~1\RICCI\APPLIC~1\~LM00016.tmp
[04.07.2008|06:18] C:\DOCUME~1\RICCI\APPLIC~1\~LM00017.tmp
[04.07.2008|06:18] C:\DOCUME~1\RICCI\APPLIC~1\~LM00018.tmp
[04.07.2008|06:30] C:\DOCUME~1\RICCI\APPLIC~1\~LM00019.tmp
[04.07.2008|09:53] C:\DOCUME~1\RICCI\APPLIC~1\~LM00020.tmp
[04.07.2008|09:54] C:\DOCUME~1\RICCI\APPLIC~1\~LM00021.tmp
[04.07.2008|09:54] C:\DOCUME~1\RICCI\APPLIC~1\~LM00022.tmp
[04.07.2008|09:55] C:\DOCUME~1\RICCI\APPLIC~1\~LM00023.tmp
[04.07.2008|09:56] C:\DOCUME~1\RICCI\APPLIC~1\~LM00024.tmp
[04.07.2008|10:00] C:\DOCUME~1\RICCI\APPLIC~1\~LM00025.tmp
[04.07.2008|10:01] C:\DOCUME~1\RICCI\APPLIC~1\~LM00026.tmp
[04.07.2008|10:26] C:\DOCUME~1\RICCI\APPLIC~1\~LM00027.tmp
[04.07.2008|10:26] C:\DOCUME~1\RICCI\APPLIC~1\~LM00028.tmp
[04.07.2008|10:34] C:\DOCUME~1\RICCI\APPLIC~1\~LM00029.tmp
[04.07.2008|10:35] C:\DOCUME~1\RICCI\APPLIC~1\~LM00030.tmp
[04.07.2008|10:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00031.tmp
[04.07.2008|10:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00032.tmp
[04.07.2008|10:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00033.tmp
[04.07.2008|10:56] C:\DOCUME~1\RICCI\APPLIC~1\~LM00034.tmp
[04.07.2008|11:00] C:\DOCUME~1\RICCI\APPLIC~1\~LM00035.tmp
[04.07.2008|11:01] C:\DOCUME~1\RICCI\APPLIC~1\~LM00036.tmp
[04.07.2008|11:02] C:\DOCUME~1\RICCI\APPLIC~1\~LM00037.tmp
[04.07.2008|11:02] C:\DOCUME~1\RICCI\APPLIC~1\~LM00038.tmp
[05.07.2008|06:23] C:\DOCUME~1\RICCI\APPLIC~1\~LM00039.tmp
[05.07.2008|06:24] C:\DOCUME~1\RICCI\APPLIC~1\~LM00040.tmp
[05.07.2008|06:33] C:\DOCUME~1\RICCI\APPLIC~1\~LM00041.tmp
[05.07.2008|06:33] C:\DOCUME~1\RICCI\APPLIC~1\~LM00042.tmp
[05.07.2008|14:55] C:\DOCUME~1\RICCI\APPLIC~1\~LM00043.tmp
[06.07.2008|06:29] C:\DOCUME~1\RICCI\APPLIC~1\~LM00044.tmp
[06.07.2008|06:30] C:\DOCUME~1\RICCI\APPLIC~1\~LM00045.tmp
[06.07.2008|06:35] C:\DOCUME~1\RICCI\APPLIC~1\~LM00046.tmp
[06.07.2008|06:39] C:\DOCUME~1\RICCI\APPLIC~1\~LM00047.tmp
[06.07.2008|08:18] C:\DOCUME~1\RICCI\APPLIC~1\~LM00048.tmp
[06.07.2008|08:18] C:\DOCUME~1\RICCI\APPLIC~1\~LM00049.tmp
[06.07.2008|08:18] C:\DOCUME~1\RICCI\APPLIC~1\~LM00050.tmp
[06.07.2008|08:19] C:\DOCUME~1\RICCI\APPLIC~1\~LM00051.tmp
[06.07.2008|08:20] C:\DOCUME~1\RICCI\APPLIC~1\~LM00052.tmp
[06.07.2008|08:20] C:\DOCUME~1\RICCI\APPLIC~1\~LM00053.tmp
[06.07.2008|08:20] C:\DOCUME~1\RICCI\APPLIC~1\~LM00054.tmp
[06.07.2008|08:21] C:\DOCUME~1\RICCI\APPLIC~1\~LM00055.tmp
[06.07.2008|08:21] C:\DOCUME~1\RICCI\APPLIC~1\~LM00056.tmp
[06.07.2008|08:21] C:\DOCUME~1\RICCI\APPLIC~1\~LM00057.tmp
[06.07.2008|08:22] C:\DOCUME~1\RICCI\APPLIC~1\~LM00058.tmp
[06.07.2008|08:22] C:\DOCUME~1\RICCI\APPLIC~1\~LM00059.tmp
[06.07.2008|08:27] C:\DOCUME~1\RICCI\APPLIC~1\~LM00060.tmp
[06.07.2008|08:28] C:\DOCUME~1\RICCI\APPLIC~1\~LM00061.tmp
[06.07.2008|08:52] C:\DOCUME~1\RICCI\APPLIC~1\~LM00062.tmp
[06.07.2008|08:53] C:\DOCUME~1\RICCI\APPLIC~1\~LM00063.tmp
[06.07.2008|13:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00064.tmp
[06.07.2008|16:36] C:\DOCUME~1\RICCI\APPLIC~1\~LM00065.tmp
[06.07.2008|16:39] C:\DOCUME~1\RICCI\APPLIC~1\~LM00066.tmp
[06.07.2008|16:45] C:\DOCUME~1\RICCI\APPLIC~1\~LM00067.tmp
[06.07.2008|16:45] C:\DOCUME~1\RICCI\APPLIC~1\~LM00068.tmp
[06.07.2008|16:46] C:\DOCUME~1\RICCI\APPLIC~1\~LM00069.tmp
[06.07.2008|16:52] C:\DOCUME~1\RICCI\APPLIC~1\~LM00070.tmp
[07.07.2008|14:35] C:\DOCUME~1\RICCI\APPLIC~1\~LM00071.tmp
[07.07.2008|14:36] C:\DOCUME~1\RICCI\APPLIC~1\~LM00072.tmp
[07.07.2008|14:41] C:\DOCUME~1\RICCI\APPLIC~1\~LM00073.tmp
[07.07.2008|14:43] C:\DOCUME~1\RICCI\APPLIC~1\~LM00074.tmp
[07.07.2008|14:47] C:\DOCUME~1\RICCI\APPLIC~1\~LM00075.tmp
[07.07.2008|14:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00076.tmp
[07.07.2008|14:50] C:\DOCUME~1\RICCI\APPLIC~1\~LM00077.tmp
[07.07.2008|14:51] C:\DOCUME~1\RICCI\APPLIC~1\~LM00078.tmp
[07.07.2008|14:51] C:\DOCUME~1\RICCI\APPLIC~1\~LM00079.tmp
[07.07.2008|14:52] C:\DOCUME~1\RICCI\APPLIC~1\~LM00080.tmp
[07.07.2008|14:52] C:\DOCUME~1\RICCI\APPLIC~1\~LM00081.tmp
[07.07.2008|14:53] C:\DOCUME~1\RICCI\APPLIC~1\~LM00082.tmp
[07.07.2008|14:53] C:\DOCUME~1\RICCI\APPLIC~1\~LM00083.tmp
[07.07.2008|15:26] C:\DOCUME~1\RICCI\APPLIC~1\~LM00084.tmp
[07.07.2008|15:35] C:\DOCUME~1\RICCI\APPLIC~1\~LM00085.tmp
[07.07.2008|15:36] C:\DOCUME~1\RICCI\APPLIC~1\~LM00086.tmp
[07.07.2008|15:36] C:\DOCUME~1\RICCI\APPLIC~1\~LM00087.tmp
[07.07.2008|15:39] C:\DOCUME~1\RICCI\APPLIC~1\~LM00088.tmp
[07.07.2008|15:42] C:\DOCUME~1\RICCI\APPLIC~1\~LM00089.tmp
[08.07.2008|18:12] C:\DOCUME~1\RICCI\APPLIC~1\~LM00090.tmp
[08.07.2008|18:13] C:\DOCUME~1\RICCI\APPLIC~1\~LM00091.tmp
[08.07.2008|18:14] C:\DOCUME~1\RICCI\APPLIC~1\~LM00092.tmp
[08.07.2008|18:14] C:\DOCUME~1\RICCI\APPLIC~1\~LM00093.tmp
[09.07.2008|07:10] C:\DOCUME~1\RICCI\APPLIC~1\~LM00094.tmp
[09.07.2008|07:10] C:\DOCUME~1\RICCI\APPLIC~1\~LM00095.tmp
[09.07.2008|07:14] C:\DOCUME~1\RICCI\APPLIC~1\~LM00096.tmp
[09.07.2008|09:36] C:\DOCUME~1\RICCI\APPLIC~1\~LM00097.tmp
[09.07.2008|09:37] C:\DOCUME~1\RICCI\APPLIC~1\~LM00098.tmp
[09.07.2008|09:38] C:\DOCUME~1\RICCI\APPLIC~1\~LM00099.tmp
[09.07.2008|09:59] C:\DOCUME~1\RICCI\APPLIC~1\~LM00100.tmp
[09.07.2008|10:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00101.tmp
[09.07.2008|10:06] C:\DOCUME~1\RICCI\APPLIC~1\~LM00102.tmp
[09.07.2008|10:07] C:\DOCUME~1\RICCI\APPLIC~1\~LM00103.tmp
[10.07.2008|16:13] C:\DOCUME~1\RICCI\APPLIC~1\~LM00104.tmp
[11.07.2008|06:16] C:\DOCUME~1\RICCI\APPLIC~1\~LM00105.tmp
[11.07.2008|06:23] C:\DOCUME~1\RICCI\APPLIC~1\~LM00106.tmp
[11.07.2008|06:25] C:\DOCUME~1\RICCI\APPLIC~1\~LM00107.tmp
[11.07.2008|13:15] C:\DOCUME~1\RICCI\APPLIC~1\~LM00108.tmp
[11.07.2008|13:16] C:\DOCUME~1\RICCI\APPLIC~1\~LM00109.tmp
[11.07.2008|15:54] C:\DOCUME~1\RICCI\APPLIC~1\~LM00110.tmp
[12.07.2008|05:16] C:\DOCUME~1\RICCI\APPLIC~1\~LM00111.tmp
[12.07.2008|05:18] C:\DOCUME~1\RICCI\APPLIC~1\~LM00112.tmp
[12.07.2008|05:19] C:\DOCUME~1\RICCI\APPLIC~1\~LM00113.tmp
[12.07.2008|05:20] C:\DOCUME~1\RICCI\APPLIC~1\~LM00114.tmp
[12.07.2008|05:24] C:\DOCUME~1\RICCI\APPLIC~1\~LM00115.tmp
[12.07.2008|05:24] C:\DOCUME~1\RICCI\APPLIC~1\~LM00116.tmp
[12.07.2008|05:25] C:\DOCUME~1\RICCI\APPLIC~1\~LM00117.tmp
[12.07.2008|05:26] C:\DOCUME~1\RICCI\APPLIC~1\~LM00118.tmp
[12.07.2008|05:26] C:\DOCUME~1\RICCI\APPLIC~1\~LM00119.tmp
[12.07.2008|05:29] C:\DOCUME~1\RICCI\APPLIC~1\~LM00120.tmp
[12.07.2008|05:30] C:\DOCUME~1\RICCI\APPLIC~1\~LM00121.tmp
[12.07.2008|05:31] C:\DOCUME~1\RICCI\APPLIC~1\~LM00122.tmp
[12.07.2008|05:34] C:\DOCUME~1\RICCI\APPLIC~1\~LM00123.tmp
[12.07.2008|05:35] C:\DOCUME~1\RICCI\APPLIC~1\~LM00124.tmp
[12.07.2008|05:36] C:\DOCUME~1\RICCI\APPLIC~1\~LM00125.tmp
[12.07.2008|05:39] C:\DOCUME~1\RICCI\APPLIC~1\~LM00126.tmp
[12.07.2008|05:40] C:\DOCUME~1\RICCI\APPLIC~1\~LM00127.tmp
[12.07.2008|05:40] C:\DOCUME~1\RICCI\APPLIC~1\~LM00128.tmp
[12.07.2008|05:41] C:\DOCUME~1\RICCI\APPLIC~1\~LM00129.tmp
[12.07.2008|05:43] C:\DOCUME~1\RICCI\APPLIC~1\~LM00130.tmp
[12.07.2008|05:43] C:\DOCUME~1\RICCI\APPLIC~1\~LM00131.tmp
[12.07.2008|05:43] C:\DOCUME~1\RICCI\APPLIC~1\~LM00132.tmp
[12.07.2008|05:44] C:\DOCUME~1\RICCI\APPLIC~1\~LM00133.tmp
[12.07.2008|05:46] C:\DOCUME~1\RICCI\APPLIC~1\~LM00134.tmp
[12.07.2008|05:47] C:\DOCUME~1\RICCI\APPLIC~1\~LM00135.tmp
[12.07.2008|05:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00136.tmp
[12.07.2008|05:53] C:\DOCUME~1\RICCI\APPLIC~1\~LM00137.tmp
[12.07.2008|05:54] C:\DOCUME~1\RICCI\APPLIC~1\~LM00138.tmp
[12.07.2008|05:55] C:\DOCUME~1\RICCI\APPLIC~1\~LM00139.tmp
[12.07.2008|05:57] C:\DOCUME~1\RICCI\APPLIC~1\~LM00140.tmp
[12.07.2008|05:57] C:\DOCUME~1\RICCI\APPLIC~1\~LM00141.tmp
[12.07.2008|05:58] C:\DOCUME~1\RICCI\APPLIC~1\~LM00142.tmp
[12.07.2008|06:06] C:\DOCUME~1\RICCI\APPLIC~1\~LM00143.tmp
[12.07.2008|06:06] C:\DOCUME~1\RICCI\APPLIC~1\~LM00144.tmp
[12.07.2008|06:07] C:\DOCUME~1\RICCI\APPLIC~1\~LM00145.tmp
[12.07.2008|06:11] C:\DOCUME~1\RICCI\APPLIC~1\~LM00146.tmp
[12.07.2008|06:12] C:\DOCUME~1\RICCI\APPLIC~1\~LM00147.tmp
[12.07.2008|06:12] C:\DOCUME~1\RICCI\APPLIC~1\~LM00148.tmp
[12.07.2008|06:21] C:\DOCUME~1\RICCI\APPLIC~1\~LM00149.tmp
[12.07.2008|06:22] C:\DOCUME~1\RICCI\APPLIC~1\~LM00150.tmp
[12.07.2008|06:22] C:\DOCUME~1\RICCI\APPLIC~1\~LM00151.tmp
[13.07.2008|18:19] C:\DOCUME~1\RICCI\APPLIC~1\~LM00152.tmp
[13.07.2008|18:19] C:\DOCUME~1\RICCI\APPLIC~1\~LM00153.tmp
[13.07.2008|18:21] C:\DOCUME~1\RICCI\APPLIC~1\~LM00154.tmp
[13.07.2008|18:23] C:\DOCUME~1\RICCI\APPLIC~1\~LM00155.tmp
[13.07.2008|18:24] C:\DOCUME~1\RICCI\APPLIC~1\~LM00156.tmp
[14.07.2008|05:46] C:\DOCUME~1\RICCI\APPLIC~1\~LM00157.tmp
[14.07.2008|05:47] C:\DOCUME~1\RICCI\APPLIC~1\~LM00158.tmp
[14.07.2008|05:47] C:\DOCUME~1\RICCI\APPLIC~1\~LM00159.tmp
[14.07.2008|05:47] C:\DOCUME~1\RICCI\APPLIC~1\~LM00160.tmp
[14.07.2008|05:47] C:\DOCUME~1\RICCI\APPLIC~1\~LM00161.tmp
[14.07.2008|05:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00162.tmp
[14.07.2008|05:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00163.tmp
[14.07.2008|05:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00164.tmp
[14.07.2008|05:48] C:\DOCUME~1\RICCI\APPLIC~1\~LM00165.tmp
[14.07.2008|05:49] C:\DOCUME~1\RICCI\APPLIC~1\~LM00166.tmp
[14.07.2008|05:49] C:\DOCUME~1\RICCI\APPLIC~1\~LM00167.tmp
[14.07.2008|06:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00168.tmp
[14.07.2008|06:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00169.tmp
[14.07.2008|06:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00170.tmp
[14.07.2008|06:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00171.tmp
[14.07.2008|06:04] C:\DOCUME~1\RICCI\APPLIC~1\~LM00172.tmp
[14.07.2008|06:05] C:\DOCUME~1\RICCI\APPLIC~1\~LM00173.tmp
[14.07.2008|06:05] C:\DOCUME~1\RICCI\APPLIC~1\~LM00174.tmp
[14.07.2008|06:05] C:\DOCUME~1\RICCI\APPLIC~1\~LM00175.tmp
[14.07.2008|06:05] C:\DOCUME~1\RICCI\APPLIC~1\~LM00176.tmp
[14.07.2008|06:06] C:\DOCUME~1\RICCI\APPLIC~1\~LM00177.tmp
[30.09.2006|11:21] C:\DOCUME~1\RICCI\APPLIC~1\Adobe
[01.10.2006|06:31] C:\DOCUME~1\RICCI\APPLIC~1\AdobeUM
[30.03.2008|05:36] C:\DOCUME~1\RICCI\APPLIC~1\AlauxSoft
[20.08.2008|19:56] C:\DOCUME~1\RICCI\APPLIC~1\Antivirus2008y
[09.08.2008|17:08] C:\DOCUME~1\RICCI\APPLIC~1\Apple Computer
[22.08.2008|06:03] C:\DOCUME~1\RICCI\APPLIC~1\Bitdefender
[10.07.2008|06:13] C:\DOCUME~1\RICCI\APPLIC~1\BMSEV
[18.12.2006|19:25] C:\DOCUME~1\RICCI\APPLIC~1\CyberLink
[02.11.2005|15:47] C:\DOCUME~1\RICCI\APPLIC~1\desktop.ini
[07.12.2007|08:45] C:\DOCUME~1\RICCI\APPLIC~1\Download Manager
[27.04.2007|08:32] C:\DOCUME~1\RICCI\APPLIC~1\DriveCleaner
[21.12.2006|05:42] C:\DOCUME~1\RICCI\APPLIC~1\DriveCleaner 2006
[21.12.2006|05:35] C:\DOCUME~1\RICCI\APPLIC~1\DriveCleaner 2006 Free
[30.09.2006|09:47] C:\DOCUME~1\RICCI\APPLIC~1\ESTsoft
[25.01.2008|18:10] C:\DOCUME~1\RICCI\APPLIC~1\FileMaker
[12.10.2007|08:01] C:\DOCUME~1\RICCI\APPLIC~1\Google
[22.10.2007|19:15] C:\DOCUME~1\RICCI\APPLIC~1\gourmet
[29.03.2007|17:00] C:\DOCUME~1\RICCI\APPLIC~1\Grisbi
[04.11.2006|04:09] C:\DOCUME~1\RICCI\APPLIC~1\Help
[02.11.2005|16:01] C:\DOCUME~1\RICCI\APPLIC~1\Identities
[23.10.2006|05:13] C:\DOCUME~1\RICCI\APPLIC~1\iRotate.INI
[16.06.2007|05:11] C:\DOCUME~1\RICCI\APPLIC~1\Kazaa Lite
[30.09.2006|09:55] C:\DOCUME~1\RICCI\APPLIC~1\Macromedia
[02.11.2005|15:47] C:\DOCUME~1\RICCI\APPLIC~1\Microsoft
[30.09.2006|12:09] C:\DOCUME~1\RICCI\APPLIC~1\Microsoft Web Folders
[18.06.2007|10:47] C:\DOCUME~1\RICCI\APPLIC~1\Mozilla
[22.08.2007|17:05] C:\DOCUME~1\RICCI\APPLIC~1\NCH Swift Sound
[25.09.2007|05:09] C:\DOCUME~1\RICCI\APPLIC~1\Nokia
[08.06.2007|17:18] C:\DOCUME~1\RICCI\APPLIC~1\OLYMPUS
[19.05.2008|16:16] C:\DOCUME~1\RICCI\APPLIC~1\OpenOffice.org2
[18.11.2007|15:48] C:\DOCUME~1\RICCI\APPLIC~1\OTVREG
[25.09.2007|05:08] C:\DOCUME~1\RICCI\APPLIC~1\PC Suite
[19.11.2007|06:13] C:\DOCUME~1\RICCI\APPLIC~1\Real
[22.08.2007|17:05] C:\DOCUME~1\RICCI\APPLIC~1\RecordPad
[17.06.2008|16:53] C:\DOCUME~1\RICCI\APPLIC~1\RhinoSoft.com
[21.08.2007|18:18] C:\DOCUME~1\RICCI\APPLIC~1\Roxio
[18.06.2007|08:29] C:\DOCUME~1\RICCI\APPLIC~1\RTPlayer
[30.10.2006|18:12] C:\DOCUME~1\RICCI\APPLIC~1\ScanSoft
[08.05.2008|16:44] C:\DOCUME~1\RICCI\APPLIC~1\Skype
[13.05.2008|15:38] C:\DOCUME~1\RICCI\APPLIC~1\skypePM
[05.11.2006|05:39] C:\DOCUME~1\RICCI\APPLIC~1\Sun
[02.11.2005|16:09] C:\DOCUME~1\RICCI\APPLIC~1\Symantec
[26.04.2008|06:27] C:\DOCUME~1\RICCI\APPLIC~1\SystemDoctor
[26.04.2008|06:20] C:\DOCUME~1\RICCI\APPLIC~1\SystemDoctor Free
[01.10.2006|08:42] C:\DOCUME~1\RICCI\APPLIC~1\TuneUp Software
[10.07.2007|18:01] C:\DOCUME~1\RICCI\APPLIC~1\U3
[01.10.2006|06:38] C:\DOCUME~1\RICCI\APPLIC~1\Ulead Systems
[21.06.2007|08:02] C:\DOCUME~1\RICCI\APPLIC~1\WinAntiSpyware 2007
[28.01.2008|16:24] C:\DOCUME~1\RICCI\APPLIC~1\WinAntiVirus Pro 2007
[12.07.2008|10:42] C:\DOCUME~1\RICCI\APPLIC~1\WinRAR
[30.10.2006|05:54] C:\DOCUME~1\RICCI\APPLIC~1\Zeon



--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[20.08.2008 15:32][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[23.08.2008 08:47][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[23.08.2008 01:23][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{92CBBC4F-21F3-4863-B7BE-107F666AD9C9}.job
[23.08.2008 07:35][--a------] C:\WINDOWS\tasks\Anni.job
[22.08.2008 01:16][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[22.08.2008 19:55][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05.08.2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[20.06.2008|16:22] C:\Program Files\Adobe
[03.10.2006|05:15] C:\Program Files\Apache Group
[09.08.2008|17:05] C:\Program Files\Apple Software Update
[10.07.2008|06:13] C:\Program Files\BMSEV
[09.08.2008|17:08] C:\Program Files\Bonjour
[21.06.2008|20:00] C:\Program Files\Canon
[08.07.2008|05:02] C:\Program Files\C-CHANNEL
[21.06.2007|13:53] C:\Program Files\Comptes et Budget V5.0
[21.12.2006|05:41] C:\Program Files\DriveCleaner 2006
[22.08.2008|13:19] C:\Program Files\Enigma Software Group
[02.11.2005|15:47] C:\Program Files\Fichiers communs
[21.07.2008|04:36] C:\Program Files\Google
[30.09.2006|09:52] C:\Program Files\IncrediMail
[02.11.2005|16:00] C:\Program Files\InstallShield Installation Information
[02.11.2005|15:52] C:\Program Files\Internet Explorer
[29.09.2006|19:50] C:\Program Files\Java
[28.07.2007|05:49] C:\Program Files\listac
[02.11.2005|15:51] C:\Program Files\Messenger
[01.10.2006|06:49] C:\Program Files\Micro Application
[02.11.2005|15:53] C:\Program Files\microsoft frontpage
[30.09.2006|04:52] C:\Program Files\Microsoft Office
[29.07.2008|12:22] C:\Program Files\Microsoft SQL Server Compact Edition
[22.08.2008|05:23] C:\Program Files\Microsoft Visual Studio
[12.08.2008|16:50] C:\Program Files\Microsoft Works
[08.07.2008|05:01] C:\Program Files\Microsoft WSE
[12.08.2008|16:50] C:\Program Files\Microsoft.NET
[01.07.2008|16:06] C:\Program Files\Mindscape
[20.06.2008|16:25] C:\Program Files\Moffsoft Calculator 2
[02.11.2005|15:52] C:\Program Files\Movie Maker
[20.08.2008|19:44] C:\Program Files\Mozilla Firefox
[02.11.2005|15:51] C:\Program Files\MSN
[02.11.2005|15:51] C:\Program Files\MSN Gaming Zone
[22.08.2008|19:35] C:\Program Files\Navilog1
[02.11.2005|15:52] C:\Program Files\NetMeeting
[02.11.2005|15:51] C:\Program Files\Online Services
[02.11.2005|15:52] C:\Program Files\Outlook Express
[20.06.2008|16:26] C:\Program Files\PHP Designer 2005
[09.08.2008|17:07] C:\Program Files\QuickTime
[29.09.2006|21:09] C:\Program Files\ScanSoft
[26.06.2008|06:26] C:\Program Files\Sligger PHP Tipps
[13.08.2008|18:23] C:\Program Files\SoftMaker Viewer
[22.08.2008|05:41] C:\Program Files\Softwin
[01.10.2006|08:42] C:\Program Files\TuneUp Utilities 2006
[03.03.2007|14:01] C:\Program Files\VSTax 2006
[23.03.2008|17:54] C:\Program Files\VSTax 2007
[29.07.2008|12:18] C:\Program Files\Windows Live
[29.07.2008|12:24] C:\Program Files\Windows Live Favorites
[29.07.2008|12:24] C:\Program Files\Windows Live Toolbar
[02.11.2005|15:51] C:\Program Files\Windows Media Player
[02.11.2005|15:51] C:\Program Files\Windows NT
[12.07.2008|10:42] C:\Program Files\WinRAR
[20.06.2008|16:27] C:\Program Files\WinZip
[02.11.2005|15:53] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[01.10.2006|09:10] C:\Program Files\Fichiers communs\Acronis
[30.10.2006|05:40] C:\Program Files\Fichiers communs\Adobe
[01.10.2006|06:49] C:\Program Files\Fichiers communs\Anti-Hacker
[09.08.2008|17:04] C:\Program Files\Fichiers communs\Apple
[30.09.2006|04:42] C:\Program Files\Fichiers communs\C-CHANNEL
[10.11.2007|12:59] C:\Program Files\Fichiers communs\Designer
[27.04.2007|08:32] C:\Program Files\Fichiers communs\DriveCleaner
[21.12.2006|05:25] C:\Program Files\Fichiers communs\DriveCleaner 2006 Free
[22.10.2007|19:11] C:\Program Files\Fichiers communs\GTK
[02.11.2005|16:00] C:\Program Files\Fichiers communs\InstallShield
[29.09.2006|19:50] C:\Program Files\Fichiers communs\Java
[01.10.2006|09:10] C:\Program Files\Fichiers communs\Micro Application
[02.11.2005|15:47] C:\Program Files\Fichiers communs\Microsoft Shared
[02.11.2005|15:52] C:\Program Files\Fichiers communs\MSSoap
[02.11.2005|16:07] C:\Program Files\Fichiers communs\muvee Technologies
[02.11.2005|15:47] C:\Program Files\Fichiers communs\ODBC
[19.11.2007|06:15] C:\Program Files\Fichiers communs\Real
[29.09.2006|21:09] C:\Program Files\Fichiers communs\ScanSoft Shared
[02.11.2005|15:52] C:\Program Files\Fichiers communs\Services
[20.06.2008|14:06] C:\Program Files\Fichiers communs\Skype
[23.06.2007|06:32] C:\Program Files\Fichiers communs\Softwin
[02.11.2005|15:47] C:\Program Files\Fichiers communs\SpeechEngines
[02.11.2005|15:52] C:\Program Files\Fichiers communs\System
[26.04.2008|06:10] C:\Program Files\Fichiers communs\SystemDoctor
[21.06.2007|08:02] C:\Program Files\Fichiers communs\WinAntiSpyware 2007
[28.01.2008|16:24] C:\Program Files\Fichiers communs\WinAntiVirus Pro 2007
[29.07.2008|12:18] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 44 Processus )

IEXPLORE.EXE ~ [PID:3932] ~ [Threads:25]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-23 09:32:18
Windows 5.1.2600 Service Pack 3 FAT NTAPI
detected NTDLL code modification:
ZwQueryDirectoryFile
scanning hidden processes ...
scanning hidden files ...
C:\WINDOWS\System32\kdyww.exe 98304 bytes
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections

[HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
NameServer REG_SZ 85.255.113.147 85.255.112.100
[HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters]
NameServer REG_SZ 85.255.113.147 85.255.112.100
[HKLM\SYSTEM\ControlSet002\Services\Tcpip\Parameters]
NameServer REG_SZ 85.255.113.147 85.255.112.100
[HKLM\SYSTEM\CurrentControlSet\..\{64B20149-47A4-406F-98AD-7F7C7975D521}]
NameServer REG_SZ 85.255.113.147,85.255.112.100
[HKLM\SYSTEM\CurrentControlSet\..\{D3464F6D-22DB-4A71-BE2B-1CEBE7ED6E51}]
DhcpNameServer REG_SZ 85.255.113.147,85.255.112.100
[HKLM\SYSTEM\ControlSet001\..\{64B20149-47A4-406F-98AD-7F7C7975D521}]
NameServer REG_SZ 85.255.113.147,85.255.112.100
[HKLM\SYSTEM\ControlSet001\..\{D3464F6D-22DB-4A71-BE2B-1CEBE7ED6E51}]
DhcpNameServer REG_SZ 85.255.113.147,85.255.112.100
[HKLM\SYSTEM\ControlSet002\..\{64B20149-47A4-406F-98AD-7F7C7975D521}]
NameServer REG_SZ 85.255.113.147,85.255.112.100
[HKLM\SYSTEM\ControlSet002\..\{D3464F6D-22DB-4A71-BE2B-1CEBE7ED6E51}]
DhcpNameServer REG_SZ 85.255.113.147,85.255.112.100
[b]==> WAREOUT <==/b

--------------------\\ ROGUES ..

C:\DOCUME~1\RICCI\APPLIC~1\Antivirus2008y
C:\DOCUME~1\RICCI\MENUD~1\Antivirus 2009
C:\DOCUME~1\ALLUSE~1\APPLIC~1\DriveCleaner
C:\DOCUME~1\RICCI\APPLIC~1\DriveCleaner 2006 Free
C:\DOCUME~1\RICCI\APPLIC~1\DriveCleaner 2006
C:\DOCUME~1\RICCI\APPLIC~1\DriveCleaner
C:\PROGRA~1\FICHIE~1\DriveCleaner 2006 Free
C:\PROGRA~1\FICHIE~1\DriveCleaner
C:\PROGRA~1\DriveCleaner 2006
C:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
C:\DOCUME~1\ALLUSE~1\APPLIC~1\SystemDoctor Free
C:\DOCUME~1\ALLUSE~1\APPLIC~1\SystemDoctor
C:\DOCUME~1\RICCI\APPLIC~1\SystemDoctor Free
C:\DOCUME~1\RICCI\APPLIC~1\SystemDoctor
C:\PROGRA~1\FICHIE~1\SystemDoctor
C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiSpyware 2007
C:\DOCUME~1\RICCI\APPLIC~1\WinAntiSpyware 2007
C:\PROGRA~1\FICHIE~1\WinAntiSpyware 2007
C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiVirus Pro 2007
C:\DOCUME~1\RICCI\APPLIC~1\WinAntiVirus Pro 2007
C:\PROGRA~1\FICHIE~1\WinAntiVirus Pro 2007



[F:322][D:2]-> C:\DOCUME~1\Ricci\LOCALS~1\Temp
[F:108][D:0]-> C:\DOCUME~1\Ricci\Cookies
[F:724][D:6]-> C:\DOCUME~1\Ricci\LOCALS~1\TEMPOR~1\content.IE5
[F:4][D:0]-> C:\Recycled

--------------------\\ Fin du rapport a 9:35:02

Merci de m'aider