Sujet Précédent Sujet Suivant

Supprimer un cheval de troie

Bbey -  
 Utilisateur anonyme -
Bonjour,
Je voudrais savoir comment supprimer un cheval de troie nommé Win32/swizzor[trj] dont je connais l'emplacement, je sais que vous avez déja eu des questions similaires mais j'espère que ça ne vous gènera pas de m'aider.. Merci
A voir également:

7 réponses

Réponse 1 / 7
Utilisateur anonyme
 
Tu parles D'hijackthis ?

Non pas du tout puisque c'est un outil d'analyse il va simplement scanner ton systeme.Utilitaire tres pratique puisque celui-ci genere un rapport apres avoir effectué un scan.C'est donc sur ce rapport que la plupart des infections se devoilent!

Donc aucun souci execute le scan et poste moi le rapport.
1
Réponse 2 / 7
Utilisateur anonyme
 
^^ non je ne suis pas informaticien, je n'ai que 16ans (ne t'inquiètes pas) je vois deja la peur arriver !

Je suis une formation a la desinfection.Tu peux cliquer sur mon pseudo regarde mes post pour t'assurer que je sais ce

que je fais-->regarde les reactions des victimes!<--Jamais de logiciel ou conseil au hasard!

C'est ma passion d'ailleurs-->regarde le nombre de messages que j'ai posté et la date depuis laquelle je suis inscrit<--

Rassure toi on va y arriver ^^.
1
Réponse 3 / 7
Utilisateur anonyme
 
-Telecharge MBAM--> Clique Ici

-Suis ce tuto--> Tuto Ici

-Execute un scan complet en mode sans echec

-Supprime tout ce qu'il te trouve a la fin du scan (liste en rouge)

-Redemarre le pc en mode normal

-Poste moi le rapport.

/!\ Le scan peut durer plusieurs heures suivant l'espace occupé sur ton ordinateur /!\ Laisse le travailler ne touche a

rien pendant qu'il scan /!\
1
Réponse 4 / 7
Utilisateur anonyme
 
Bonjour,

-Telecharge Hijackthis--> HiJackThis.exe !

-Clique sur le .exe puis sur "Do a system scan and save a logfile"

-Cela va generer un rapport

-Poste ce rapport ici ds ta prochaine reponse stp.
-1
bbey
 
D'accord mais il va pas rentrer en conflit avec spybot ou avast? merci de m'aider!
0
bbey
 
Voici le rapport..
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:54:54, on 13/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\InterVideo\Common\Bin\WinRemote.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Thomson\Lyra Jukebox\LyraHDTrayApp\LYRAHD2TrayApp.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\rundll32.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopOE.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\EMAD8SXL\HiJackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.fr.netscape.com/fr/home/winsearch200.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [PhilipsDM] "C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [LyraHD2TrayApp] "C:\Program Files\Thomson\Lyra Jukebox\LyraHDTrayApp\LYRAHD2TrayApp.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: skyDSL++ - {F7522CA2-3DDA-11d3-8560-0060977792B1} - C:\Program Files\TELES\skyDSL\sky2sky.exe (file missing)
O9 - Extra button: skyDSL- - - {F7522CA8-3DDA-11d3-8560-0060977792B1} - C:\Program Files\TELES\skyDSL\sky2fon.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Proxy skyDSL (tntcraxy) - Unknown owner - C:\Program Files\TELES\skyDSL\Proxy\craxy.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
Utilisateur anonyme
 
re,

-Télécharge LopS&D--> https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

-Installe le logiciel.

-Double clique sur l'icone du bureau pour lancer le logiciel.

-Choisis l'option 1 pour effectuer la recherche.

-Poste le rapport avant de continuer.
-1
bbey
 
Je l'ai déja envoyé mais a priori ça n'a pas marché..
Voila le rapport de LopS&D.
Si ça peut aidé le cheval de troie est d'après mon anti virus situé dans : C:\ystemVolumeInformation\_restore
... Voila Merci!

--------------------\\ Lop S&D 4.2.4-2 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080912-1] 4.8.1229 (Activated)

"C:\Lop SD" ( MAJ : 08-09-2008|21:40 )
Option : [1] ( 13/09/2008|14:34 )

--------------------\\ Listing des dossiers dans APPLIC~1

[03/01/2005|05:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[25/11/2004|05:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[03/01/2005|05:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intervideo
[03/01/2005|06:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[03/01/2005|05:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
[03/01/2005|06:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[16/04/2008|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/10/2007|23:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[07/10/2006|23:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[23/12/2005|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[10/09/2008|10:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/06/2008|19:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Drv Audio Dog About
[09/12/2007|14:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Four Bleh Flaw Once
[06/09/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[30/07/2008|00:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[06/09/2008|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[03/01/2005|05:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[03/01/2005|05:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[10/09/2008|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[25/12/2006|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[12/10/2006|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[15/04/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[23/12/2005|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[09/05/2008|13:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Obj comp that free
[06/09/2008|09:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[22/08/2006|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[03/01/2005|05:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[11/02/2006|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/01/2005|05:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[06/09/2008|18:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/03/2006|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[22/03/2006|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[15/01/2006|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/10/2006|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[30/06/2006|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/07/2007|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[09/05/2008|21:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[03/01/2005|05:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[03/01/2005|05:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[03/01/2005|06:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/01/2005|05:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[03/01/2005|06:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/08/2008|22:13] C:\DOCUME~1\HP_PRO~2\APPLIC~1\SecondLife

[16/06/2007|16:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[12/01/2006|00:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[01/08/2008|22:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[15/02/2006|20:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[20/07/2008|22:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Axisdefault
[12/06/2008|13:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Canon
[27/01/2006|20:06] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Creative
[10/09/2008|10:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CyberLink
[09/09/2008|14:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
[03/06/2007|22:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\F-Secure
[03/11/2006|20:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[18/12/2005|00:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[20/12/2005|01:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[17/12/2005|17:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[28/01/2006|21:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[05/05/2007|17:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ispnews
[05/01/2006|20:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[19/12/2005|20:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[30/07/2008|19:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[03/11/2006|19:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
[10/12/2006|01:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[06/01/2006|20:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[11/08/2006|14:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Musicmatch
[25/12/2005|12:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OD2
[06/09/2008|14:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
[05/05/2007|19:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PEX
[03/01/2005|05:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[23/12/2005|16:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ScanSoft
[18/07/2007|21:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
[09/07/2007|16:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SecondLife
[05/01/2006|20:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[13/01/2006|17:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[09/12/2005|18:57] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[09/12/2005|22:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[15/10/2006|00:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ulead Systems

[03/01/2005|05:12] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/01/2008|16:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[13/01/2006|23:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[13/09/2008 14:28][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[12/09/2008 21:29][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ MsgPlus SPONSOR INSTALLED !

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]
"DisplayName"="Messenger Plus! 3 & Sponsor"
"SponsorInstalled"=dword:00000000


--------------------\\ Listing des dossiers dans C:\Program Files

[02/02/2006|15:17] C:\Program Files\3DO
[10/09/2008|10:01] C:\Program Files\AC3Filter
[15/07/2008|19:30] C:\Program Files\Adobe
[05/02/2007|22:49] C:\Program Files\Adverts
[29/12/2007|18:33] C:\Program Files\Alwil Software
[03/02/2008|12:34] C:\Program Files\Anti-Virus
[06/09/2008|17:55] C:\Program Files\Apple Software Update
[23/12/2005|16:45] C:\Program Files\ArcSoft
[26/06/2008|12:42] C:\Program Files\Axisdefault
[06/01/2006|22:08] C:\Program Files\Bethesda Softworks
[07/12/2005|19:30] C:\Program Files\Black Isle
[12/07/2008|01:03] C:\Program Files\Bonjour
[25/04/2008|19:02] C:\Program Files\Canon
[10/04/2007|18:33] C:\Program Files\CCleaner
[19/08/2008|14:00] C:\Program Files\Circle Developement
[05/09/2006|11:14] C:\Program Files\ColiPoste
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[25/12/2005|12:55] C:\Program Files\Creative
[10/09/2008|10:51] C:\Program Files\CyberLink
[06/01/2006|22:43] C:\Program Files\Davilex
[06/01/2006|22:43] C:\Program Files\directx
[10/09/2008|10:03] C:\Program Files\DivX
[07/12/2005|19:13] C:\Program Files\EA GAMES
[06/09/2008|14:36] C:\Program Files\Easy Internet signup
[06/09/2008|14:20] C:\Program Files\eMule
[12/09/2008|23:43] C:\Program Files\eMuleplus
[09/05/2008|21:36] C:\Program Files\Fichiers communs
[05/05/2007|16:13] C:\Program Files\F-Secure
[03/02/2008|12:38] C:\Program Files\FWES
[06/09/2008|18:36] C:\Program Files\Google
[09/09/2008|09:29] C:\Program Files\HP
[10/09/2008|10:51] C:\Program Files\InstallShield Installation Information
[14/10/2006|23:21] C:\Program Files\Intel
[22/08/2008|14:10] C:\Program Files\Internet Explorer
[06/09/2008|09:58] C:\Program Files\InterVideo
[01/08/2008|22:13] C:\Program Files\Inventel
[12/07/2008|01:10] C:\Program Files\iPod
[12/07/2008|01:12] C:\Program Files\iTunes
[11/09/2008|08:42] C:\Program Files\Java
[16/04/2006|12:57] C:\Program Files\Livecom
[06/09/2008|09:57] C:\Program Files\Logitech
[03/01/2005|05:47] C:\Program Files\Macrovision Corp
[07/12/2005|18:57] C:\Program Files\Maxis
[10/09/2008|09:24] C:\Program Files\Messenger
[12/09/2008|15:58] C:\Program Files\Messenger Plus! Live
[05/02/2007|22:46] C:\Program Files\MessengerPlus! 3
[08/07/2007|00:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/12/2006|11:59] C:\Program Files\Microsoft Encarta
[25/11/2004|05:27] C:\Program Files\microsoft frontpage
[11/06/2008|21:50] C:\Program Files\Microsoft Office
[03/01/2005|05:49] C:\Program Files\Microsoft Works
[08/12/2005|19:02] C:\Program Files\Monte Cristo
[10/09/2008|09:09] C:\Program Files\Movie Maker
[13/09/2008|11:21] C:\Program Files\Mozilla Firefox
[11/06/2008|21:48] C:\Program Files\MSECache
[17/12/2005|18:44] C:\Program Files\MSN
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[03/12/2006|00:16] C:\Program Files\MSXML 4.0
[09/09/2008|10:19] C:\Program Files\MSXML 6.0
[26/12/2005|14:34] C:\Program Files\Musicmatch
[03/01/2005|05:53] C:\Program Files\muvee Technologies
[10/09/2008|09:06] C:\Program Files\NetMeeting
[20/12/2005|00:01] C:\Program Files\Netscape
[25/11/2004|05:27] C:\Program Files\Online Services
[14/12/2006|19:28] C:\Program Files\OpenOffice.org 2.1
[30/07/2008|20:15] C:\Program Files\Orange
[10/09/2008|09:24] C:\Program Files\Outlook Express
[03/01/2005|06:02] C:\Program Files\PC-Doctor 5 for Windows
[25/12/2005|11:33] C:\Program Files\Philips
[12/07/2008|01:02] C:\Program Files\QuickTime
[18/12/2005|20:09] C:\Program Files\Real
[12/07/2008|00:35] C:\Program Files\Safari
[23/12/2005|16:47] C:\Program Files\ScanSoft
[06/09/2008|18:44] C:\Program Files\Securitoo
[18/05/2008|11:20] C:\Program Files\Services en ligne
[02/06/2007|17:14] C:\Program Files\Sierra On-Line
[03/01/2005|05:45] C:\Program Files\Sonic
[03/02/2008|12:38] C:\Program Files\Spam Control
[06/09/2008|18:10] C:\Program Files\Spybot - Search & Destroy
[15/01/2006|21:16] C:\Program Files\Symantec
[26/12/2005|14:32] C:\Program Files\Thomson
[28/01/2006|17:41] C:\Program Files\UIU
[14/10/2006|23:31] C:\Program Files\Ulead Systems
[24/11/2004|03:37] C:\Program Files\Uninstall Information
[02/08/2008|00:45] C:\Program Files\Wanadoo
[09/05/2008|22:32] C:\Program Files\Windows Live
[09/05/2008|22:41] C:\Program Files\Windows Live Favorites
[09/05/2008|22:44] C:\Program Files\Windows Live Toolbar
[14/10/2006|23:27] C:\Program Files\Windows Media Components
[30/07/2008|21:51] C:\Program Files\Windows Media Connect 2
[10/09/2008|09:06] C:\Program Files\Windows Media Player
[10/09/2008|09:06] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[02/08/2008|00:05] C:\Program Files\WinZip
[25/11/2004|05:28] C:\Program Files\xerox
[14/10/2006|23:28] C:\Program Files\XviD
[06/09/2008|14:38] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[16/04/2008|15:05] C:\Program Files\Fichiers communs\Adobe
[12/10/2007|23:17] C:\Program Files\Fichiers communs\Apple
[03/11/2006|19:54] C:\Program Files\Fichiers communs\Designer
[01/05/2008|21:27] C:\Program Files\Fichiers communs\France Telecom
[03/01/2005|05:40] C:\Program Files\Fichiers communs\Hewlett-Packard
[03/01/2005|05:38] C:\Program Files\Fichiers communs\HP
[03/01/2005|05:50] C:\Program Files\Fichiers communs\InstallShield
[03/01/2005|05:47] C:\Program Files\Fichiers communs\InterVideo
[03/03/2006|18:26] C:\Program Files\Fichiers communs\IviSDK
[03/01/2005|05:22] C:\Program Files\Fichiers communs\Java
[25/12/2006|12:18] C:\Program Files\Fichiers communs\Logitech
[11/06/2008|21:52] C:\Program Files\Fichiers communs\Microsoft Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[03/01/2005|05:53] C:\Program Files\Fichiers communs\muvee Technologies
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[11/02/2006|16:44] C:\Program Files\Fichiers communs\Real
[25/04/2008|19:08] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/02/2005|10:33] C:\Program Files\Fichiers communs\Services
[03/01/2005|05:44] C:\Program Files\Fichiers communs\Sonic Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[03/01/2005|05:44] C:\Program Files\Fichiers communs\SureThing Shared
[10/09/2008|09:06] C:\Program Files\Fichiers communs\System
[03/01/2005|05:45] C:\Program Files\Fichiers communs\TiVo Shared
[14/10/2006|23:26] C:\Program Files\Fichiers communs\Ulead Systems
[09/05/2008|22:25] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 72 Processes )

IEXPLORE.EXE ~ [PID:2328]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Drv Audio Dog About
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Obj comp that free
C:\Program Files\Adverts
C:\Program Files\Circle Developement

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 72 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-13 14:35:12
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 227

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:25][D:2]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:19][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:169][D:4]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 13/09/2008|14:37 - Option : [1]

--------------------\\ Fin du rapport a 14:37:06
0
bbey
 
Le scanner de mon anti virus était en pause puisque je ne n'arrivais a réaliser aucune action vis a vis du cheval de troie , finalement j'ai réussi a le renommer et du coup le scanner a pu reprendre. Est ce que le fait que je renomme le cheval de troie a pu changer quelque chose? Merci de me répondre, je vais faire ce que tu me dis en attendant. Encore merci!
0
bbey
 
re,
Je me doutais bien que le renommer ne changerai pas grand chose..
Je suis en train de faire ce que tu m'as dit plus haut mais dis tu es informaticien pour pouvoir me conseiller comme ça?
Merci :)
0
bbey
 
Voici le rapport de LOP S&D:
--------------------\\ Lop S&D 4.2.4-2 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080912-1] 4.8.1229 (Activated)

"C:\Lop SD" ( MAJ : 08-09-2008|21:40 )
Option : [2] ( 13/09/2008|16:44 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Drv Audio Dog About
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Obj comp that free
Supprime! - C:\Program Files\Adverts
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[03/01/2005|05:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[25/11/2004|05:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[03/01/2005|05:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intervideo
[03/01/2005|06:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[03/01/2005|05:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
[03/01/2005|06:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[16/04/2008|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/10/2007|23:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[07/10/2006|23:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[23/12/2005|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[10/09/2008|10:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[09/12/2007|14:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Four Bleh Flaw Once
[06/09/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[30/07/2008|00:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[06/09/2008|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[03/01/2005|05:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[03/01/2005|05:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[10/09/2008|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[25/12/2006|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[12/10/2006|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[15/04/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[23/12/2005|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[06/09/2008|09:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[22/08/2006|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[03/01/2005|05:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[11/02/2006|19:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/01/2005|05:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[06/09/2008|18:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/03/2006|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[22/03/2006|20:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[15/01/2006|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/10/2006|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[30/06/2006|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/07/2007|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[09/05/2008|21:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[03/01/2005|05:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[03/01/2005|05:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[03/01/2005|06:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/01/2005|05:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[03/01/2005|06:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/08/2008|22:13] C:\DOCUME~1\HP_PRO~2\APPLIC~1\SecondLife

[16/06/2007|16:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[12/01/2006|00:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[01/08/2008|22:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[15/02/2006|20:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[20/07/2008|22:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Axisdefault
[12/06/2008|13:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Canon
[27/01/2006|20:06] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Creative
[10/09/2008|10:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CyberLink
[09/09/2008|14:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
[03/06/2007|22:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\F-Secure
[03/11/2006|20:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[18/12/2005|00:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[20/12/2005|01:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[17/12/2005|17:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[28/01/2006|21:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[05/05/2007|17:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ispnews
[05/01/2006|20:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[19/12/2005|20:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[30/07/2008|19:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[03/11/2006|19:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
[10/12/2006|01:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[06/01/2006|20:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[11/08/2006|14:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Musicmatch
[25/12/2005|12:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OD2
[06/09/2008|14:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
[05/05/2007|19:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PEX
[03/01/2005|05:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[23/12/2005|16:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ScanSoft
[18/07/2007|21:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Screenshot Sender
[09/07/2007|16:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SecondLife
[05/01/2006|20:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[13/01/2006|17:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[09/12/2005|18:57] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[09/12/2005|22:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[15/10/2006|00:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ulead Systems

[03/01/2005|05:12] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/01/2008|16:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[13/01/2006|23:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[13/09/2008 16:28][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[12/09/2008 21:29][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ MsgPlus SPONSOR INSTALLED !

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]
"SponsorInstalled"=dword:00000000


--------------------\\ Listing des dossiers dans C:\Program Files

[02/02/2006|15:17] C:\Program Files\3DO
[10/09/2008|10:01] C:\Program Files\AC3Filter
[15/07/2008|19:30] C:\Program Files\Adobe
[29/12/2007|18:33] C:\Program Files\Alwil Software
[03/02/2008|12:34] C:\Program Files\Anti-Virus
[06/09/2008|17:55] C:\Program Files\Apple Software Update
[23/12/2005|16:45] C:\Program Files\ArcSoft
[26/06/2008|12:42] C:\Program Files\Axisdefault
[06/01/2006|22:08] C:\Program Files\Bethesda Softworks
[07/12/2005|19:30] C:\Program Files\Black Isle
[12/07/2008|01:03] C:\Program Files\Bonjour
[25/04/2008|19:02] C:\Program Files\Canon
[10/04/2007|18:33] C:\Program Files\CCleaner
[05/09/2006|11:14] C:\Program Files\ColiPoste
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[25/12/2005|12:55] C:\Program Files\Creative
[10/09/2008|10:51] C:\Program Files\CyberLink
[06/01/2006|22:43] C:\Program Files\Davilex
[06/01/2006|22:43] C:\Program Files\directx
[10/09/2008|10:03] C:\Program Files\DivX
[07/12/2005|19:13] C:\Program Files\EA GAMES
[06/09/2008|14:36] C:\Program Files\Easy Internet signup
[06/09/2008|14:20] C:\Program Files\eMule
[12/09/2008|23:43] C:\Program Files\eMuleplus
[09/05/2008|21:36] C:\Program Files\Fichiers communs
[05/05/2007|16:13] C:\Program Files\F-Secure
[03/02/2008|12:38] C:\Program Files\FWES
[06/09/2008|18:36] C:\Program Files\Google
[09/09/2008|09:29] C:\Program Files\HP
[10/09/2008|10:51] C:\Program Files\InstallShield Installation Information
[14/10/2006|23:21] C:\Program Files\Intel
[22/08/2008|14:10] C:\Program Files\Internet Explorer
[06/09/2008|09:58] C:\Program Files\InterVideo
[01/08/2008|22:13] C:\Program Files\Inventel
[12/07/2008|01:10] C:\Program Files\iPod
[12/07/2008|01:12] C:\Program Files\iTunes
[11/09/2008|08:42] C:\Program Files\Java
[16/04/2006|12:57] C:\Program Files\Livecom
[06/09/2008|09:57] C:\Program Files\Logitech
[03/01/2005|05:47] C:\Program Files\Macrovision Corp
[07/12/2005|18:57] C:\Program Files\Maxis
[10/09/2008|09:24] C:\Program Files\Messenger
[12/09/2008|15:58] C:\Program Files\Messenger Plus! Live
[05/02/2007|22:46] C:\Program Files\MessengerPlus! 3
[08/07/2007|00:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/12/2006|11:59] C:\Program Files\Microsoft Encarta
[25/11/2004|05:27] C:\Program Files\microsoft frontpage
[11/06/2008|21:50] C:\Program Files\Microsoft Office
[03/01/2005|05:49] C:\Program Files\Microsoft Works
[08/12/2005|19:02] C:\Program Files\Monte Cristo
[10/09/2008|09:09] C:\Program Files\Movie Maker
[13/09/2008|14:54] C:\Program Files\Mozilla Firefox
[11/06/2008|21:48] C:\Program Files\MSECache
[17/12/2005|18:44] C:\Program Files\MSN
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[03/12/2006|00:16] C:\Program Files\MSXML 4.0
[09/09/2008|10:19] C:\Program Files\MSXML 6.0
[26/12/2005|14:34] C:\Program Files\Musicmatch
[03/01/2005|05:53] C:\Program Files\muvee Technologies
[10/09/2008|09:06] C:\Program Files\NetMeeting
[20/12/2005|00:01] C:\Program Files\Netscape
[25/11/2004|05:27] C:\Program Files\Online Services
[14/12/2006|19:28] C:\Program Files\OpenOffice.org 2.1
[30/07/2008|20:15] C:\Program Files\Orange
[10/09/2008|09:24] C:\Program Files\Outlook Express
[03/01/2005|06:02] C:\Program Files\PC-Doctor 5 for Windows
[25/12/2005|11:33] C:\Program Files\Philips
[12/07/2008|01:02] C:\Program Files\QuickTime
[18/12/2005|20:09] C:\Program Files\Real
[12/07/2008|00:35] C:\Program Files\Safari
[23/12/2005|16:47] C:\Program Files\ScanSoft
[06/09/2008|18:44] C:\Program Files\Securitoo
[18/05/2008|11:20] C:\Program Files\Services en ligne
[02/06/2007|17:14] C:\Program Files\Sierra On-Line
[03/01/2005|05:45] C:\Program Files\Sonic
[03/02/2008|12:38] C:\Program Files\Spam Control
[06/09/2008|18:10] C:\Program Files\Spybot - Search & Destroy
[15/01/2006|21:16] C:\Program Files\Symantec
[26/12/2005|14:32] C:\Program Files\Thomson
[28/01/2006|17:41] C:\Program Files\UIU
[14/10/2006|23:31] C:\Program Files\Ulead Systems
[24/11/2004|03:37] C:\Program Files\Uninstall Information
[02/08/2008|00:45] C:\Program Files\Wanadoo
[09/05/2008|22:32] C:\Program Files\Windows Live
[09/05/2008|22:41] C:\Program Files\Windows Live Favorites
[09/05/2008|22:44] C:\Program Files\Windows Live Toolbar
[14/10/2006|23:27] C:\Program Files\Windows Media Components
[30/07/2008|21:51] C:\Program Files\Windows Media Connect 2
[10/09/2008|09:06] C:\Program Files\Windows Media Player
[10/09/2008|09:06] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[02/08/2008|00:05] C:\Program Files\WinZip
[25/11/2004|05:28] C:\Program Files\xerox
[14/10/2006|23:28] C:\Program Files\XviD
[06/09/2008|14:38] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[16/04/2008|15:05] C:\Program Files\Fichiers communs\Adobe
[12/10/2007|23:17] C:\Program Files\Fichiers communs\Apple
[03/11/2006|19:54] C:\Program Files\Fichiers communs\Designer
[01/05/2008|21:27] C:\Program Files\Fichiers communs\France Telecom
[03/01/2005|05:40] C:\Program Files\Fichiers communs\Hewlett-Packard
[03/01/2005|05:38] C:\Program Files\Fichiers communs\HP
[03/01/2005|05:50] C:\Program Files\Fichiers communs\InstallShield
[03/01/2005|05:47] C:\Program Files\Fichiers communs\InterVideo
[03/03/2006|18:26] C:\Program Files\Fichiers communs\IviSDK
[03/01/2005|05:22] C:\Program Files\Fichiers communs\Java
[25/12/2006|12:18] C:\Program Files\Fichiers communs\Logitech
[11/06/2008|21:52] C:\Program Files\Fichiers communs\Microsoft Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[03/01/2005|05:53] C:\Program Files\Fichiers communs\muvee Technologies
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[11/02/2006|16:44] C:\Program Files\Fichiers communs\Real
[25/04/2008|19:08] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/02/2005|10:33] C:\Program Files\Fichiers communs\Services
[03/01/2005|05:44] C:\Program Files\Fichiers communs\Sonic Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[03/01/2005|05:44] C:\Program Files\Fichiers communs\SureThing Shared
[10/09/2008|09:06] C:\Program Files\Fichiers communs\System
[03/01/2005|05:45] C:\Program Files\Fichiers communs\TiVo Shared
[14/10/2006|23:26] C:\Program Files\Fichiers communs\Ulead Systems
[09/05/2008|22:25] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 72 Processes )

IEXPLORE.EXE ~ [PID:15712]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-13 16:48:45
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 227

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:29][D:3]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:29][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:443][D:4]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 13/09/2008|14:37 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 13/09/2008|16:52 - Option : [2]

--------------------\\ Fin du rapport a 16:52:56
0
bbey
 
Je vais te faire confiance alors et essayer de ne pas trop avoir peur! :)
J'ai 16ans aussi au passage et si ça ne te gène de me passer ton adresse msn (si tu en a une) je pourrais te demander des conseils si j'ai de petits soucis avec mon pc.. Si tu le veux bien biensur!
merci
0
Réponse 6 / 7
Utilisateur anonyme
 
Ok,

1/Eradication:

-Relance le logiciel LopS&D.

-Choisis l'option 2, a la fin du nettoyage un rapport va apparaitre ds le bloc-notes.

-Poste ce rapport stp.

-Désinstalle LopS&D-->panneau de configuration-->Ajout/Suppression de

programmes.

-Redémarre l'ordinateur.

2/Analyse apres suppression:

-Poste un nouveau rapport Hijackthis.
-1
Réponse 7 / 7
Utilisateur anonyme
 
Re,

Non, en plus tu as avast si j'ai bien compris tu as par l'intermédiaire de celui-ci changé le nom du virus ?

Fait ce que je t'ai dit plus haut--> si l'on pouvait supprimé des infections juste en les renommants, les forums d'entraide informatique n'existeraient pas ;-)
-1

Discussions similaires

Supprimer compte facebook sans mail
Joris77 -
Mollygwen -

24 réponses