Problème page de pub rapport NAVILOG

pascalou -  
 pascalou -
Bonjour,
je viens retenter ma chance pour que les pages de pub arrête de me harceler, je voudrais un avis à savoir si je peut passer à l'étape 2 de NAVILOG 1 je joint le rapport de son analyse MERCI d'avance
Search Navipromo version 3.6.5 commencé le 18/09/2008 à 20:16:32,04

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "pascal et nana"

Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6001
Internet Explorer : 7.0.6001.18000
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\Windows" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***

*** Recherche dossiers dans "C:\ProgramData" ***

*** Recherche dossiers dans "c:\users\pascal~1\appdata\roaming\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "C:\Users\pascal et nana\AppData\Local\virtualstore\Program Files" ***

*** Recherche dossiers dans "C:\Users\pascal et nana\AppData\Roaming" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\pascal et nana\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\pascal et nana\AppData\Local\virtualstore\windows\system32" *

* Recherche dans "C:\Users\pascal et nana\AppData\Local" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\Windows\system32" :

* Dans "C:\Users\pascal et nana\AppData\Local\Microsoft" :

* Dans "C:\Users\pascal et nana\AppData\Local\virtualstore\windows\system32" :

* Dans "C:\Users\pascal et nana\AppData\Local" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

*** Analyse terminée le 18/09/2008 à 20:22:29,08 ***
Configuration: Windows Vista
Internet Explorer 7.0

37 réponses

  • 1
  • 2
Résumé de la discussion

Le sujet porte sur l'évaluation d'un rapport NAVILOG/NAVIPROMO et la faisabilité de passer à l'étape 2 face à des pages publicitaires qui surgissent fréquemment dans le système. Des échanges montrent que NAVILOG n'a rien détecté ou identifie surtout des éléments potentiellement légitimes, et que HijackThis est recommandé pour clarifier les modifications sur le navigateur et le registre. Plusieurs rapports de réponse indiquent des outils tiers et des barres d'outils qui modifient les paramètres de démarrage et les pages d'accueil, nécessitant une vérification avant toute suppression manuelle. En cas de doute, certains recommandent d'éviter les suppressions manuelles et de solliciter un spécialiste, car certains éléments identifiés peuvent correspondre à des composants légitimes.

Bobot (l'IA à votre service)
  1. g!rly Messages postés 18462 Statut Contributeur 407
     
    salut,

    navilog n´a rien trouvé...

    Télécharge HijackThis ici :

    -> http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

    Tutoriel d´instalation : (Merci a Balltrap34 pour cette réalisation)

    -> http://pageperso.aol.fr/balltrap34/Hijenr.gif

    Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

    -> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

    Post le rapport généré ici stp...

    @+
    1
  2. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour à vous deux pour suivre @+
    0
  3. g!rly Messages postés 18462 Statut Contributeur 407
     
    Salut jacques.gache
    0
  4. pascalou
     
    merci, j'ai donc désinstaller NAVILOG et voici le rapport de hijack
    Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P_.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
    O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe
    O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
    O4 - HKLM\..\Run: [Setresolution] C:\ACERSW\config\1680x1050.cmd
    O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\NewSetApanel.cmd
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.911.3380\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [GreatLog] "C:\ProgramData\chingramgram.o26a411"
    O4 - HKCU\..\Run: [style cool 2 city] "C:\ProgramData\WIN LICENSE DRAW.38zdbe"
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Global Startup: ASETRES.EXE
    O4 - Global Startup: Empowering Technology Launcher.lnk = ?
    O4 - Global Startup: TEW-624UB & TEW-644UB Manager.lnk = C:\Program Files\TRENDnet\TEW-624UB_TEW-644UB\WlanCU.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?AuthParam=1221233562_e964e718fa30c2d836e90dd3ed12dabd&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab&File=jinstall-6u7-windows-i586-jc.cab
    O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
    O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. pascalou
     
    merci, j'ai donc désinstaller NAVILOG et voici le rapport de hijack
    Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P_.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
    O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe
    O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
    O4 - HKLM\..\Run: [Setresolution] C:\ACERSW\config\1680x1050.cmd
    O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\NewSetApanel.cmd
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.911.3380\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [GreatLog] "C:\ProgramData\chingramgram.o26a411"
    O4 - HKCU\..\Run: [style cool 2 city] "C:\ProgramData\WIN LICENSE DRAW.38zdbe"
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Global Startup: ASETRES.EXE
    O4 - Global Startup: Empowering Technology Launcher.lnk = ?
    O4 - Global Startup: TEW-624UB & TEW-644UB Manager.lnk = C:\Program Files\TRENDnet\TEW-624UB_TEW-644UB\WlanCU.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?AuthParam=1221233562_e964e718fa30c2d836e90dd3ed12dabd&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab&File=jinstall-6u7-windows-i586-jc.cab
    O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
    O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
    0
  7. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour, ton hijackthis n'est pas complet ? il manque tout le début
    0
  8. g!rly Messages postés 18462 Statut Contributeur 407
     
    On dirait bien que c´est du cid...

    Pascalou :

    Télécharge Lop S&D (de Angeldark et Eric71) sur le Bureau :
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    [*]Double-clique sur Lop S&D.exe pour lancer l'installation,
    [*]Puis double-clique sur le raccourci Lop S&D présent sur le Bureau.
    [*]Séléctionne la langue souhaitée , puis choisis l'Option 1 (Recherche)
    Le scan prend moins d'une minute.
    [*]A l'issue du scan, le bloc-notes va s'ouvrir avec le résultat de la recherche.
    [*]Enregistre le rapport LopR.txt sur le Bureau pour le retrouver facilement, sinon il sauvegardé à la racine de la partition système : C:\LopR.txt

    @+
    0
  9. pascalou
     
    oups !! pour repondre à jacque désolé le revoilà complet et en attendant j'essaie lop S&D
    e of Trend Micro HijackThis v2.0.2
    Scan saved at 21:13:32, on 18/09/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\RtHDVCpl.exe
    C:\Acer\Empowering Technology\SysMonitor.exe
    C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\System32\nvraidservice.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\TRENDnet\TEW-624UB_TEW-644UB\WlanCU.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
    C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
    C:\Windows\System32\mobsync.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\conime.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\notepad.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Mail\WinMail.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\pascal et nana\Desktop\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
    R3 - URLSearchHook: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P_.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
    O2 - BHO: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P_.dll
    O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
    O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
    O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P_.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
    O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe
    O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
    O4 - HKLM\..\Run: [Setresolution] C:\ACERSW\config\1680x1050.cmd
    O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\NewSetApanel.cmd
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.911.3380\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [GreatLog] "C:\ProgramData\chingramgram.o26a411"
    O4 - HKCU\..\Run: [style cool 2 city] "C:\ProgramData\WIN LICENSE DRAW.38zdbe"
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Global Startup: ASETRES.EXE
    O4 - Global Startup: Empowering Technology Launcher.lnk = ?
    O4 - Global Startup: TEW-624UB & TEW-644UB Manager.lnk = C:\Program Files\TRENDnet\TEW-624UB_TEW-644UB\WlanCU.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?AuthParam=1221233562_e964e718fa30c2d836e90dd3ed12dabd&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab&File=jinstall-6u7-windows-i586-jc.cab
    O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
    O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
    O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
    O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
    0
  10. g!rly Messages postés 18462 Statut Contributeur 407
     
    tu as deux antivirus !!!
    desinstalles avast
    et post le rapport lopsd stp
    @+
    0
  11. pascalou
     
    Voici le rapport lopS&D en espérant que ça vous parle parce que moi !!! :-))
    --------------------\\ Lop S&D 4.2.4-3 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz )
    BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15
    USER : pascal et nana ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1229 [VPS 080918-0] 4.8.1229 (Activated)
    C:\ (Local Disk) - NTFS - Total : 144 Go Free : 84 Go
    D:\ (Local Disk) - NTFS - Total : 144 Go Free : 143 Go
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
    Option : [1] ( 18/09/2008|21:46 )

    [ UAC => 0 ]

    --------------------\\ Listing des dossiers dans Local

    [29/08/2008|18:34] C:\Users\PASCAL~1\AppData\Local\Adobe
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Application Data
    [17/09/2008|21:10] C:\Users\PASCAL~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [30/08/2008|17:11] C:\Users\PASCAL~1\AppData\Local\GDIPFONTCACHEV1.DAT
    [31/08/2008|09:06] C:\Users\PASCAL~1\AppData\Local\Google
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Historique
    [18/09/2008|20:11] C:\Users\PASCAL~1\AppData\Local\IconCache.db
    [30/08/2008|15:33] C:\Users\PASCAL~1\AppData\Local\IM
    [18/09/2008|20:22] C:\Users\PASCAL~1\AppData\Local\Microsoft
    [08/09/2008|20:37] C:\Users\PASCAL~1\AppData\Local\Microsoft Games
    [01/09/2008|18:55] C:\Users\PASCAL~1\AppData\Local\Microsoft Help
    [31/08/2008|09:00] C:\Users\PASCAL~1\AppData\Local\P2P_Energy
    [28/08/2008|16:39] C:\Users\PASCAL~1\AppData\Local\PowerCinema
    [18/09/2008|21:45] C:\Users\PASCAL~1\AppData\Local\Temp
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Temporary Internet Files
    [28/08/2008|16:55] C:\Users\PASCAL~1\AppData\Local\VirtualStore

    --------------------\\ Tâches planifiées dans C:\Windows\tasks

    [15/09/2008 01:00][--a------] C:\Windows\tasks\McDefragTask.job
    [21/03/2008 13:54][--a------] C:\Windows\tasks\McQcTask.job
    [18/09/2008 20:12][--ah-----] C:\Windows\tasks\SA.DAT
    [18/09/2008 20:11][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    --------------------\\ Listing des dossiers dans C:\ProgramData

    [21/03/2008|13:18] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    [21/03/2008|13:35] C:\ProgramData\Acer GameZone Console
    [30/08/2008|08:40] C:\ProgramData\Adobe
    [02/11/2006|15:02] C:\ProgramData\Application Data
    [31/08/2008|00:19] C:\ProgramData\Azureus
    [28/08/2008|16:35] C:\ProgramData\Bureau
    [13/09/2008|17:57] C:\ProgramData\byte loud style cool
    [13/09/2008|17:56] C:\ProgramData\chingramgram.o26a411
    [13/09/2008|17:56] C:\ProgramData\chingramgram.vi7ar3w
    [21/03/2008|13:34] C:\ProgramData\CyberLink
    [02/11/2006|15:02] C:\ProgramData\Desktop
    [02/11/2006|15:02] C:\ProgramData\Documents
    [21/03/2008|13:47] C:\ProgramData\eSobi
    [28/08/2008|16:35] C:\ProgramData\Favoris
    [02/11/2006|15:02] C:\ProgramData\Favorites
    [21/03/2008|13:36] C:\ProgramData\FloodLightGames
    [31/08/2008|09:04] C:\ProgramData\Google
    [30/08/2008|15:31] C:\ProgramData\IM
    [30/08/2008|15:29] C:\ProgramData\IncrediMail
    [14/09/2008|22:04] C:\ProgramData\LauncherAccess.dt
    [14/09/2008|11:59] C:\ProgramData\Malwarebytes
    [21/03/2008|13:53] C:\ProgramData\McAfee
    [28/08/2008|16:35] C:\ProgramData\Menu D‚marrer
    [16/09/2008|17:13] C:\ProgramData\Microsoft
    [10/09/2008|07:31] C:\ProgramData\Microsoft Help
    [28/08/2008|16:35] C:\ProgramData\ModŠles
    [18/06/2008|08:06] C:\ProgramData\NVIDIA
    [21/03/2008|13:52] C:\ProgramData\SiteAdvisor
    [18/09/2008|21:43] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|15:02] C:\ProgramData\Start Menu
    [02/11/2006|15:02] C:\ProgramData\Templates
    [13/09/2008|17:57] C:\ProgramData\traydead
    [13/09/2008|17:57] C:\ProgramData\WIN LICENSE DRAW.38zdbe
    [07/09/2008|09:22] C:\ProgramData\WLInstaller
    [30/08/2008|15:32] C:\ProgramData\Yahoo! Companion

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|13:47] C:\Program Files\Acer Arcade Live
    [21/03/2008|13:46] C:\Program Files\Acer GameZone
    [18/06/2008|08:12] C:\Program Files\Acer Incorporated
    [21/03/2008|13:18] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    [30/08/2008|08:41] C:\Program Files\Adobe
    [18/09/2008|18:14] C:\Program Files\Alwil Software
    [31/08/2008|00:19] C:\Program Files\AskSBar
    [18/06/2008|08:07] C:\Program Files\ATI
    [31/08/2008|00:20] C:\Program Files\Azureus
    [12/09/2008|17:32] C:\Program Files\Common Files
    [31/08/2008|08:59] C:\Program Files\Conduit
    [21/03/2008|13:33] C:\Program Files\CyberLink
    [28/08/2008|16:54] C:\Program Files\DIFX
    [21/03/2008|13:47] C:\Program Files\eSobi
    [28/08/2008|16:35] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [01/09/2008|07:13] C:\Program Files\Google
    [02/09/2008|17:28] C:\Program Files\InstallShield Installation Information
    [21/01/2008|04:35] C:\Program Files\Internet Explorer
    [12/09/2008|17:33] C:\Program Files\Java
    [12/09/2008|17:30] C:\Program Files\LimeWire
    [14/09/2008|11:59] C:\Program Files\Malwarebytes' Anti-Malware
    [14/09/2008|09:29] C:\Program Files\McAfee
    [21/03/2008|13:51] C:\Program Files\McAfee.com
    [02/11/2006|14:37] C:\Program Files\Microsoft Games
    [21/03/2008|13:17] C:\Program Files\Microsoft Office
    [10/09/2008|07:30] C:\Program Files\Microsoft Works
    [21/03/2008|13:15] C:\Program Files\Microsoft.NET
    [21/01/2008|04:35] C:\Program Files\Movie Maker
    [02/11/2006|14:37] C:\Program Files\MSBuild
    [28/08/2008|17:15] C:\Program Files\MSXML 4.0
    [18/09/2008|21:11] C:\Program Files\Navilog1
    [21/03/2008|13:22] C:\Program Files\NewTech Infosystems
    [31/08/2008|08:59] C:\Program Files\P2P_Energy
    [21/03/2008|13:11] C:\Program Files\Realtek
    [02/11/2006|14:37] C:\Program Files\Reference Assemblies
    [02/09/2008|17:28] C:\Program Files\Samsung
    [14/09/2008|08:37] C:\Program Files\SiteAdvisor
    [18/09/2008|21:43] C:\Program Files\Spybot - Search & Destroy
    [12/09/2008|17:33] C:\Program Files\Sun
    [28/08/2008|16:54] C:\Program Files\TRENDnet
    [02/11/2006|15:01] C:\Program Files\Uninstall Information
    [31/08/2008|12:55] C:\Program Files\VideoLAN
    [21/01/2008|04:35] C:\Program Files\Windows Calendar
    [21/01/2008|04:35] C:\Program Files\Windows Collaboration
    [21/01/2008|04:35] C:\Program Files\Windows Defender
    [21/01/2008|04:35] C:\Program Files\Windows Journal
    [07/09/2008|09:28] C:\Program Files\Windows Live
    [28/08/2008|18:16] C:\Program Files\Windows Mail
    [21/01/2008|04:35] C:\Program Files\Windows Media Player
    [28/08/2008|16:35] C:\Program Files\Windows NT
    [21/01/2008|04:35] C:\Program Files\Windows Photo Gallery
    [21/01/2008|04:35] C:\Program Files\Windows Sidebar
    [21/03/2008|13:48] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [30/08/2008|08:41] C:\Program Files\Common Files\Adobe
    [21/03/2008|13:16] C:\Program Files\Common Files\DESIGNER
    [21/03/2008|13:32] C:\Program Files\Common Files\InstallShield
    [12/09/2008|17:32] C:\Program Files\Common Files\Java
    [21/03/2008|13:21] C:\Program Files\Common Files\LightScribe
    [21/03/2008|13:52] C:\Program Files\Common Files\McAfee
    [07/09/2008|22:32] C:\Program Files\Common Files\microsoft shared
    [21/03/2008|13:21] C:\Program Files\Common Files\muvee Technologies
    [21/03/2008|13:22] C:\Program Files\Common Files\NewTech Infosystems
    [21/03/2008|13:36] C:\Program Files\Common Files\Oberon Media
    [02/11/2006|13:18] C:\Program Files\Common Files\Services
    [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
    [21/01/2008|04:35] C:\Program Files\Common Files\System
    [07/09/2008|09:26] C:\Program Files\Common Files\WindowsLiveInstaller

    --------------------\\ Process

    ( 81 Processes )

    iexplore.exe ~ [PID:2340]
    iexplore.exe ~ [PID:2524]
    iexplore.exe ~ [PID:4300]
    iexplore.exe ~ [PID:1752]

    --------------------\\ Recherche avec S_Lop

    C:\ProgramData\WIN LICENSE DRAW.38zdbe
    C:\ProgramData\chingramgram.o26a411
    C:\ProgramData\chingramgram.vi7ar3w

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\ProgramData\byte loud style cool
    C:\ProgramData\byte loud style cool\sign idol.exe
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adultfriendfinder[1].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adopt.euroclick[1].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@partypoker[2].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@32vegas[2].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@banner.32vegas[2].txt

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "style cool 2 city"="\"C:\\ProgramData\\WIN LICENSE DRAW.38zdbe\""
    "GreatLog"="\"C:\\ProgramData\\chingramgram.o26a411\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-18 21:46:30
    Windows 6.0.6001 Service Pack 1 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [F:250][D:14]-> C:\Users\PASCAL~1\AppData\Local\Temp
    [F:182][D:1]-> C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:2513][D:6]-> C:\Users\PASCAL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:27][D:5]-> C:\$Recycle.Bin

    1 - "C:\Lop SD\LopR_1.txt" - 18/09/2008|21:48 - Option : [1]

    --------------------\\ Fin du rapport a 21:48:05
    [ UAC => 1 ]
    0
  12. g!rly Messages postés 18462 Statut Contributeur 407
     
    oui ca me parle :)

    passe l´option 2 > netoyage et post le rapport stp

    d´une pierre deux coup :

    Télécharge Toolbar-S&D de Eric_71 :
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
    Sur ton bureau, impératif.

    **Recherche**

    Double clique sur le fichier ToolBar SD.exe, avec élévation des privilèges sous Vista.
    https://i45.servimg.com/u/f45/11/05/93/83/tb110.jpg
    Coche la case "Je suis d'accord...ci-dessus", accepter la création du répertoire par Oui, puis Suivant et Quitter
    Une icône sera crée sur le bureau ToolBar SD
    https://i45.servimg.com/u/f45/11/05/93/83/tb210.jpg
    Sous Vista, faire un clic droit et Exécuter en tant qu'administrateur (Elévation des privilèges.), puis Continuer.
    Dans la fenêtre DOS bleue, Tape F, Entrer.
    Ensuite tape 1 et Entrer.
    Le système va redémarrer et le scan prendra quelques minutes.
    Une fois terminé un rapport TB.txt va s'ouvrir.
    Tu cliques dessus et tu fais :
    CTRL+A pour tout sélectionner
    CTRL+C pour tout mettre dans le presse-papier
    Tu ouvres une réponse sur le forum et tu fais :
    CTRL+V pour coller le rapport dans cette réponse.
    Tu fermes le rapport sur ton bureau et tu attends les résultats de l'analyse.
    Ce rapport sera enregistré à la racine du système : C:\TB.txt

    donc post les deux rapports stp

    @+
    0
  13. pascalou
     
    voila avast déinstaller joint rapport après désinstallation et je télécharge toolbar,c'est l'option 2 ?

    --------------------\\ Lop S&D 4.2.4-3 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz )
    BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15
    USER : pascal et nana ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total : 144 Go Free : 84 Go
    D:\ (Local Disk) - NTFS - Total : 144 Go Free : 143 Go
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
    Option : [1] ( 18/09/2008|22:03 )

    [ UAC => 1 ]

    --------------------\\ Listing des dossiers dans Local

    [29/08/2008|18:34] C:\Users\PASCAL~1\AppData\Local\Adobe
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Application Data
    [17/09/2008|21:10] C:\Users\PASCAL~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [30/08/2008|17:11] C:\Users\PASCAL~1\AppData\Local\GDIPFONTCACHEV1.DAT
    [31/08/2008|09:06] C:\Users\PASCAL~1\AppData\Local\Google
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Historique
    [18/09/2008|21:59] C:\Users\PASCAL~1\AppData\Local\IconCache.db
    [30/08/2008|15:33] C:\Users\PASCAL~1\AppData\Local\IM
    [18/09/2008|20:22] C:\Users\PASCAL~1\AppData\Local\Microsoft
    [08/09/2008|20:37] C:\Users\PASCAL~1\AppData\Local\Microsoft Games
    [01/09/2008|18:55] C:\Users\PASCAL~1\AppData\Local\Microsoft Help
    [31/08/2008|09:00] C:\Users\PASCAL~1\AppData\Local\P2P_Energy
    [28/08/2008|16:39] C:\Users\PASCAL~1\AppData\Local\PowerCinema
    [18/09/2008|22:02] C:\Users\PASCAL~1\AppData\Local\Temp
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Temporary Internet Files
    [28/08/2008|16:55] C:\Users\PASCAL~1\AppData\Local\VirtualStore

    --------------------\\ Tâches planifiées dans C:\Windows\tasks

    [15/09/2008 01:00][--a------] C:\Windows\tasks\McDefragTask.job
    [21/03/2008 13:54][--a------] C:\Windows\tasks\McQcTask.job
    [18/09/2008 22:00][--ah-----] C:\Windows\tasks\SA.DAT
    [18/09/2008 21:59][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    --------------------\\ Listing des dossiers dans C:\ProgramData

    [21/03/2008|13:18] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    [21/03/2008|13:35] C:\ProgramData\Acer GameZone Console
    [30/08/2008|08:40] C:\ProgramData\Adobe
    [02/11/2006|15:02] C:\ProgramData\Application Data
    [31/08/2008|00:19] C:\ProgramData\Azureus
    [28/08/2008|16:35] C:\ProgramData\Bureau
    [13/09/2008|17:57] C:\ProgramData\byte loud style cool
    [13/09/2008|17:56] C:\ProgramData\chingramgram.o26a411
    [13/09/2008|17:56] C:\ProgramData\chingramgram.vi7ar3w
    [21/03/2008|13:34] C:\ProgramData\CyberLink
    [02/11/2006|15:02] C:\ProgramData\Desktop
    [02/11/2006|15:02] C:\ProgramData\Documents
    [21/03/2008|13:47] C:\ProgramData\eSobi
    [28/08/2008|16:35] C:\ProgramData\Favoris
    [02/11/2006|15:02] C:\ProgramData\Favorites
    [21/03/2008|13:36] C:\ProgramData\FloodLightGames
    [31/08/2008|09:04] C:\ProgramData\Google
    [30/08/2008|15:31] C:\ProgramData\IM
    [30/08/2008|15:29] C:\ProgramData\IncrediMail
    [14/09/2008|22:04] C:\ProgramData\LauncherAccess.dt
    [14/09/2008|11:59] C:\ProgramData\Malwarebytes
    [21/03/2008|13:53] C:\ProgramData\McAfee
    [28/08/2008|16:35] C:\ProgramData\Menu D‚marrer
    [16/09/2008|17:13] C:\ProgramData\Microsoft
    [10/09/2008|07:31] C:\ProgramData\Microsoft Help
    [28/08/2008|16:35] C:\ProgramData\ModŠles
    [18/06/2008|08:06] C:\ProgramData\NVIDIA
    [21/03/2008|13:52] C:\ProgramData\SiteAdvisor
    [18/09/2008|21:43] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|15:02] C:\ProgramData\Start Menu
    [02/11/2006|15:02] C:\ProgramData\Templates
    [13/09/2008|17:57] C:\ProgramData\traydead
    [13/09/2008|17:57] C:\ProgramData\WIN LICENSE DRAW.38zdbe
    [07/09/2008|09:22] C:\ProgramData\WLInstaller
    [30/08/2008|15:32] C:\ProgramData\Yahoo! Companion

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|13:47] C:\Program Files\Acer Arcade Live
    [21/03/2008|13:46] C:\Program Files\Acer GameZone
    [18/06/2008|08:12] C:\Program Files\Acer Incorporated
    [21/03/2008|13:18] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    [30/08/2008|08:41] C:\Program Files\Adobe
    [18/09/2008|18:14] C:\Program Files\Alwil Software
    [31/08/2008|00:19] C:\Program Files\AskSBar
    [18/06/2008|08:07] C:\Program Files\ATI
    [31/08/2008|00:20] C:\Program Files\Azureus
    [12/09/2008|17:32] C:\Program Files\Common Files
    [31/08/2008|08:59] C:\Program Files\Conduit
    [21/03/2008|13:33] C:\Program Files\CyberLink
    [28/08/2008|16:54] C:\Program Files\DIFX
    [21/03/2008|13:47] C:\Program Files\eSobi
    [28/08/2008|16:35] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [01/09/2008|07:13] C:\Program Files\Google
    [02/09/2008|17:28] C:\Program Files\InstallShield Installation Information
    [21/01/2008|04:35] C:\Program Files\Internet Explorer
    [12/09/2008|17:33] C:\Program Files\Java
    [12/09/2008|17:30] C:\Program Files\LimeWire
    [14/09/2008|11:59] C:\Program Files\Malwarebytes' Anti-Malware
    [14/09/2008|09:29] C:\Program Files\McAfee
    [21/03/2008|13:51] C:\Program Files\McAfee.com
    [02/11/2006|14:37] C:\Program Files\Microsoft Games
    [21/03/2008|13:17] C:\Program Files\Microsoft Office
    [10/09/2008|07:30] C:\Program Files\Microsoft Works
    [21/03/2008|13:15] C:\Program Files\Microsoft.NET
    [21/01/2008|04:35] C:\Program Files\Movie Maker
    [02/11/2006|14:37] C:\Program Files\MSBuild
    [28/08/2008|17:15] C:\Program Files\MSXML 4.0
    [18/09/2008|21:11] C:\Program Files\Navilog1
    [21/03/2008|13:22] C:\Program Files\NewTech Infosystems
    [31/08/2008|08:59] C:\Program Files\P2P_Energy
    [21/03/2008|13:11] C:\Program Files\Realtek
    [02/11/2006|14:37] C:\Program Files\Reference Assemblies
    [02/09/2008|17:28] C:\Program Files\Samsung
    [14/09/2008|08:37] C:\Program Files\SiteAdvisor
    [18/09/2008|22:00] C:\Program Files\Spybot - Search & Destroy
    [12/09/2008|17:33] C:\Program Files\Sun
    [28/08/2008|16:54] C:\Program Files\TRENDnet
    [02/11/2006|15:01] C:\Program Files\Uninstall Information
    [31/08/2008|12:55] C:\Program Files\VideoLAN
    [21/01/2008|04:35] C:\Program Files\Windows Calendar
    [21/01/2008|04:35] C:\Program Files\Windows Collaboration
    [21/01/2008|04:35] C:\Program Files\Windows Defender
    [21/01/2008|04:35] C:\Program Files\Windows Journal
    [07/09/2008|09:28] C:\Program Files\Windows Live
    [28/08/2008|18:16] C:\Program Files\Windows Mail
    [21/01/2008|04:35] C:\Program Files\Windows Media Player
    [28/08/2008|16:35] C:\Program Files\Windows NT
    [21/01/2008|04:35] C:\Program Files\Windows Photo Gallery
    [21/01/2008|04:35] C:\Program Files\Windows Sidebar
    [21/03/2008|13:48] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [30/08/2008|08:41] C:\Program Files\Common Files\Adobe
    [21/03/2008|13:16] C:\Program Files\Common Files\DESIGNER
    [21/03/2008|13:32] C:\Program Files\Common Files\InstallShield
    [12/09/2008|17:32] C:\Program Files\Common Files\Java
    [21/03/2008|13:21] C:\Program Files\Common Files\LightScribe
    [21/03/2008|13:52] C:\Program Files\Common Files\McAfee
    [07/09/2008|22:32] C:\Program Files\Common Files\microsoft shared
    [21/03/2008|13:21] C:\Program Files\Common Files\muvee Technologies
    [21/03/2008|13:22] C:\Program Files\Common Files\NewTech Infosystems
    [21/03/2008|13:36] C:\Program Files\Common Files\Oberon Media
    [02/11/2006|13:18] C:\Program Files\Common Files\Services
    [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
    [21/01/2008|04:35] C:\Program Files\Common Files\System
    [07/09/2008|09:26] C:\Program Files\Common Files\WindowsLiveInstaller

    --------------------\\ Process

    ( 69 Processes )

    iexplore.exe ~ [PID:576]
    iexplore.exe ~ [PID:3964]

    --------------------\\ Recherche avec S_Lop

    C:\ProgramData\WIN LICENSE DRAW.38zdbe
    C:\ProgramData\chingramgram.o26a411
    C:\ProgramData\chingramgram.vi7ar3w

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\ProgramData\byte loud style cool
    C:\ProgramData\byte loud style cool\sign idol.exe
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adultfriendfinder[1].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adopt.euroclick[1].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@partypoker[2].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@32vegas[2].txt
    C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@banner.32vegas[2].txt

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "style cool 2 city"="\"C:\\ProgramData\\WIN LICENSE DRAW.38zdbe\""
    "GreatLog"="\"C:\\ProgramData\\chingramgram.o26a411\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-18 22:03:39
    Windows 6.0.6001 Service Pack 1 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [F:245][D:13]-> C:\Users\PASCAL~1\AppData\Local\Temp
    [F:185][D:1]-> C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:2717][D:6]-> C:\Users\PASCAL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:27][D:5]-> C:\$Recycle.Bin

    1 - "C:\Lop SD\LopR_1.txt" - 18/09/2008|21:48 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 18/09/2008|22:05 - Option : [1]

    --------------------\\ Fin du rapport a 22:05:14
    [ UAC => 1 ]
    0
  14. g!rly Messages postés 18462 Statut Contributeur 407
     
    Là c´est encore le rapport de l´option 1 de lop sd ?
    post le rapport de l´option 2 stp
    ps : je vais trop vite > on va faire un truc a la fois ;)
    0
  15. pascalou
     
    Oui oui un peut vite :-)) voici le rapport de toolbar et je passe à l'option 2 de celui-ci?

    -----------\\ ToolBar S&D 1.2.0 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz )
    BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15
    USER : pascal et nana ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total : 144 Go Free : 84 Go
    D:\ (Local Disk) - NTFS - Total : 144 Go Free : 143 Go
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\ToolBar SD" ( MAJ : 14-09-2008|23:30 )
    Option : [1] ( 18/09/2008|22:20 )

    [ UAC => 1 ]

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\Program Files\AskSBar
    C:\Program Files\AskSBar\bar
    C:\Program Files\AskSBar\SrchAstt
    C:\Program Files\P2P_Energy
    C:\Program Files\P2P_Energy\INSTALL.LOG
    C:\Program Files\P2P_Energy\P2P_EnergyToolbarHelper.exe
    C:\Program Files\P2P_Energy\tbP2P_.dll
    C:\Program Files\P2P_Energy\toolbar.cfg
    C:\Program Files\P2P_Energy\UNWISE.EXE

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\Windows\\system32\\blank.htm"
    "Search Page"="https://www.google.com/?gws_rd=ssl"
    "Start Page"="https://www.google.fr/?gws_rd=ssl"
    "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
    "Start Page Restore"="https://www.google.fr/?gws_rd=ssl"
    "Url"="https://www.msn.com/fr-fr/actualite/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Start Page"="https://fr.yahoo.com/"
    "Default_Page_URL"="https://fr.yahoo.com/"
    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [ UAC => 1 ]

    1 - "C:\ToolBar SD\TB_1.txt" - 18/09/2008|22:20 - Option : [1]

    -----------\\ Fin du rapport a 22:20:42,96
    0
  16. g!rly Messages postés 18462 Statut Contributeur 407
     
    oui passe l´option 2 de celui ci et post le rapport
    0
  17. pascalou
     
    voila le rapport de l'option 2 de lopSD, je m'embrouille un peu entre toolbar et lopSD désolé!

    --------------------\\ Lop S&D 4.2.4-3 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz )
    BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15
    USER : pascal et nana ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total : 144 Go Free : 84 Go
    D:\ (Local Disk) - NTFS - Total : 144 Go Free : 143 Go
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
    Option : [2] ( 18/09/2008|22:29 )

    [ UAC => 1 ]

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\ProgramData\byte loud style cool\sign idol.exe
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adultfriendfinder[1].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adopt.euroclick[1].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@partypoker[2].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@32vegas[2].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@banner.32vegas[2].txt
    Supprime! - C:\ProgramData\WIN LICENSE DRAW.38zdbe
    Supprime! - C:\ProgramData\chingramgram.o26a411
    Supprime! - C:\ProgramData\chingramgram.vi7ar3w
    Supprime! - C:\ProgramData\byte loud style cool
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans Local

    [29/08/2008|18:34] C:\Users\PASCAL~1\AppData\Local\Adobe
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Application Data
    [17/09/2008|21:10] C:\Users\PASCAL~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [30/08/2008|17:11] C:\Users\PASCAL~1\AppData\Local\GDIPFONTCACHEV1.DAT
    [31/08/2008|09:06] C:\Users\PASCAL~1\AppData\Local\Google
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Historique
    [18/09/2008|21:59] C:\Users\PASCAL~1\AppData\Local\IconCache.db
    [30/08/2008|15:33] C:\Users\PASCAL~1\AppData\Local\IM
    [18/09/2008|20:22] C:\Users\PASCAL~1\AppData\Local\Microsoft
    [08/09/2008|20:37] C:\Users\PASCAL~1\AppData\Local\Microsoft Games
    [01/09/2008|18:55] C:\Users\PASCAL~1\AppData\Local\Microsoft Help
    [31/08/2008|09:00] C:\Users\PASCAL~1\AppData\Local\P2P_Energy
    [28/08/2008|16:39] C:\Users\PASCAL~1\AppData\Local\PowerCinema
    [18/09/2008|22:29] C:\Users\PASCAL~1\AppData\Local\Temp
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Temporary Internet Files
    [28/08/2008|16:55] C:\Users\PASCAL~1\AppData\Local\VirtualStore

    --------------------\\ Tâches planifiées dans C:\Windows\tasks

    [15/09/2008 01:00][--a------] C:\Windows\tasks\McDefragTask.job
    [21/03/2008 13:54][--a------] C:\Windows\tasks\McQcTask.job
    [18/09/2008 22:00][--ah-----] C:\Windows\tasks\SA.DAT
    [18/09/2008 21:59][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    --------------------\\ Listing des dossiers dans C:\ProgramData

    [21/03/2008|13:18] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    [21/03/2008|13:35] C:\ProgramData\Acer GameZone Console
    [30/08/2008|08:40] C:\ProgramData\Adobe
    [02/11/2006|15:02] C:\ProgramData\Application Data
    [31/08/2008|00:19] C:\ProgramData\Azureus
    [28/08/2008|16:35] C:\ProgramData\Bureau
    [21/03/2008|13:34] C:\ProgramData\CyberLink
    [02/11/2006|15:02] C:\ProgramData\Desktop
    [02/11/2006|15:02] C:\ProgramData\Documents
    [21/03/2008|13:47] C:\ProgramData\eSobi
    [28/08/2008|16:35] C:\ProgramData\Favoris
    [02/11/2006|15:02] C:\ProgramData\Favorites
    [21/03/2008|13:36] C:\ProgramData\FloodLightGames
    [31/08/2008|09:04] C:\ProgramData\Google
    [30/08/2008|15:31] C:\ProgramData\IM
    [30/08/2008|15:29] C:\ProgramData\IncrediMail
    [14/09/2008|22:04] C:\ProgramData\LauncherAccess.dt
    [14/09/2008|11:59] C:\ProgramData\Malwarebytes
    [21/03/2008|13:53] C:\ProgramData\McAfee
    [28/08/2008|16:35] C:\ProgramData\Menu D‚marrer
    [16/09/2008|17:13] C:\ProgramData\Microsoft
    [10/09/2008|07:31] C:\ProgramData\Microsoft Help
    [28/08/2008|16:35] C:\ProgramData\ModŠles
    [18/06/2008|08:06] C:\ProgramData\NVIDIA
    [21/03/2008|13:52] C:\ProgramData\SiteAdvisor
    [18/09/2008|21:43] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|15:02] C:\ProgramData\Start Menu
    [02/11/2006|15:02] C:\ProgramData\Templates
    [13/09/2008|17:57] C:\ProgramData\traydead
    [07/09/2008|09:22] C:\ProgramData\WLInstaller
    [30/08/2008|15:32] C:\ProgramData\Yahoo! Companion

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|13:47] C:\Program Files\Acer Arcade Live
    [21/03/2008|13:46] C:\Program Files\Acer GameZone
    [18/06/2008|08:12] C:\Program Files\Acer Incorporated
    [21/03/2008|13:18] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    [30/08/2008|08:41] C:\Program Files\Adobe
    [18/09/2008|18:14] C:\Program Files\Alwil Software
    [31/08/2008|00:19] C:\Program Files\AskSBar
    [18/06/2008|08:07] C:\Program Files\ATI
    [31/08/2008|00:20] C:\Program Files\Azureus
    [12/09/2008|17:32] C:\Program Files\Common Files
    [31/08/2008|08:59] C:\Program Files\Conduit
    [21/03/2008|13:33] C:\Program Files\CyberLink
    [28/08/2008|16:54] C:\Program Files\DIFX
    [21/03/2008|13:47] C:\Program Files\eSobi
    [28/08/2008|16:35] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [01/09/2008|07:13] C:\Program Files\Google
    [02/09/2008|17:28] C:\Program Files\InstallShield Installation Information
    [21/01/2008|04:35] C:\Program Files\Internet Explorer
    [12/09/2008|17:33] C:\Program Files\Java
    [12/09/2008|17:30] C:\Program Files\LimeWire
    [14/09/2008|11:59] C:\Program Files\Malwarebytes' Anti-Malware
    [14/09/2008|09:29] C:\Program Files\McAfee
    [21/03/2008|13:51] C:\Program Files\McAfee.com
    [02/11/2006|14:37] C:\Program Files\Microsoft Games
    [21/03/2008|13:17] C:\Program Files\Microsoft Office
    [10/09/2008|07:30] C:\Program Files\Microsoft Works
    [21/03/2008|13:15] C:\Program Files\Microsoft.NET
    [21/01/2008|04:35] C:\Program Files\Movie Maker
    [02/11/2006|14:37] C:\Program Files\MSBuild
    [28/08/2008|17:15] C:\Program Files\MSXML 4.0
    [18/09/2008|21:11] C:\Program Files\Navilog1
    [21/03/2008|13:22] C:\Program Files\NewTech Infosystems
    [31/08/2008|08:59] C:\Program Files\P2P_Energy
    [21/03/2008|13:11] C:\Program Files\Realtek
    [02/11/2006|14:37] C:\Program Files\Reference Assemblies
    [02/09/2008|17:28] C:\Program Files\Samsung
    [14/09/2008|08:37] C:\Program Files\SiteAdvisor
    [18/09/2008|22:00] C:\Program Files\Spybot - Search & Destroy
    [12/09/2008|17:33] C:\Program Files\Sun
    [28/08/2008|16:54] C:\Program Files\TRENDnet
    [02/11/2006|15:01] C:\Program Files\Uninstall Information
    [31/08/2008|12:55] C:\Program Files\VideoLAN
    [21/01/2008|04:35] C:\Program Files\Windows Calendar
    [21/01/2008|04:35] C:\Program Files\Windows Collaboration
    [21/01/2008|04:35] C:\Program Files\Windows Defender
    [21/01/2008|04:35] C:\Program Files\Windows Journal
    [07/09/2008|09:28] C:\Program Files\Windows Live
    [28/08/2008|18:16] C:\Program Files\Windows Mail
    [21/01/2008|04:35] C:\Program Files\Windows Media Player
    [28/08/2008|16:35] C:\Program Files\Windows NT
    [21/01/2008|04:35] C:\Program Files\Windows Photo Gallery
    [21/01/2008|04:35] C:\Program Files\Windows Sidebar
    [21/03/2008|13:48] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [30/08/2008|08:41] C:\Program Files\Common Files\Adobe
    [21/03/2008|13:16] C:\Program Files\Common Files\DESIGNER
    [21/03/2008|13:32] C:\Program Files\Common Files\InstallShield
    [12/09/2008|17:32] C:\Program Files\Common Files\Java
    [21/03/2008|13:21] C:\Program Files\Common Files\LightScribe
    [21/03/2008|13:52] C:\Program Files\Common Files\McAfee
    [07/09/2008|22:32] C:\Program Files\Common Files\microsoft shared
    [21/03/2008|13:21] C:\Program Files\Common Files\muvee Technologies
    [21/03/2008|13:22] C:\Program Files\Common Files\NewTech Infosystems
    [21/03/2008|13:36] C:\Program Files\Common Files\Oberon Media
    [02/11/2006|13:18] C:\Program Files\Common Files\Services
    [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
    [21/01/2008|04:35] C:\Program Files\Common Files\System
    [07/09/2008|09:26] C:\Program Files\Common Files\WindowsLiveInstaller

    --------------------\\ Process

    ( 70 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-18 22:29:23
    Windows 6.0.6001 Service Pack 1 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [F:258][D:14]-> C:\Users\PASCAL~1\AppData\Local\Temp
    [F:186][D:1]-> C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:2726][D:6]-> C:\Users\PASCAL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:27][D:5]-> C:\$Recycle.Bin

    1 - "C:\Lop SD\LopR_1.txt" - 18/09/2008|21:48 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 18/09/2008|22:05 - Option : [1]
    3 - "C:\Lop SD\LopR_3.txt" - 18/09/2008|22:30 - Option : [2]

    --------------------\\ Fin du rapport a 22:30:52
    [ UAC => 1 ]
    0
  18. pascalou
     
    et voici le rapport de l'option de toolbar

    --------------------\\ Lop S&D 4.2.4-3 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz )
    BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15
    USER : pascal et nana ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total : 144 Go Free : 84 Go
    D:\ (Local Disk) - NTFS - Total : 144 Go Free : 143 Go
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)

    "C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
    Option : [2] ( 18/09/2008|22:29 )

    [ UAC => 1 ]

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\ProgramData\byte loud style cool\sign idol.exe
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adultfriendfinder[1].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@adopt.euroclick[1].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@partypoker[2].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@32vegas[2].txt
    Supprime! - C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies\pascal_et_nana@banner.32vegas[2].txt
    Supprime! - C:\ProgramData\WIN LICENSE DRAW.38zdbe
    Supprime! - C:\ProgramData\chingramgram.o26a411
    Supprime! - C:\ProgramData\chingramgram.vi7ar3w
    Supprime! - C:\ProgramData\byte loud style cool
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans Local

    [29/08/2008|18:34] C:\Users\PASCAL~1\AppData\Local\Adobe
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Application Data
    [17/09/2008|21:10] C:\Users\PASCAL~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [30/08/2008|17:11] C:\Users\PASCAL~1\AppData\Local\GDIPFONTCACHEV1.DAT
    [31/08/2008|09:06] C:\Users\PASCAL~1\AppData\Local\Google
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Historique
    [18/09/2008|21:59] C:\Users\PASCAL~1\AppData\Local\IconCache.db
    [30/08/2008|15:33] C:\Users\PASCAL~1\AppData\Local\IM
    [18/09/2008|20:22] C:\Users\PASCAL~1\AppData\Local\Microsoft
    [08/09/2008|20:37] C:\Users\PASCAL~1\AppData\Local\Microsoft Games
    [01/09/2008|18:55] C:\Users\PASCAL~1\AppData\Local\Microsoft Help
    [31/08/2008|09:00] C:\Users\PASCAL~1\AppData\Local\P2P_Energy
    [28/08/2008|16:39] C:\Users\PASCAL~1\AppData\Local\PowerCinema
    [18/09/2008|22:29] C:\Users\PASCAL~1\AppData\Local\Temp
    [28/08/2008|16:38] C:\Users\PASCAL~1\AppData\Local\Temporary Internet Files
    [28/08/2008|16:55] C:\Users\PASCAL~1\AppData\Local\VirtualStore

    --------------------\\ Tâches planifiées dans C:\Windows\tasks

    [15/09/2008 01:00][--a------] C:\Windows\tasks\McDefragTask.job
    [21/03/2008 13:54][--a------] C:\Windows\tasks\McQcTask.job
    [18/09/2008 22:00][--ah-----] C:\Windows\tasks\SA.DAT
    [18/09/2008 21:59][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    --------------------\\ Listing des dossiers dans C:\ProgramData

    [21/03/2008|13:18] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
    [21/03/2008|13:35] C:\ProgramData\Acer GameZone Console
    [30/08/2008|08:40] C:\ProgramData\Adobe
    [02/11/2006|15:02] C:\ProgramData\Application Data
    [31/08/2008|00:19] C:\ProgramData\Azureus
    [28/08/2008|16:35] C:\ProgramData\Bureau
    [21/03/2008|13:34] C:\ProgramData\CyberLink
    [02/11/2006|15:02] C:\ProgramData\Desktop
    [02/11/2006|15:02] C:\ProgramData\Documents
    [21/03/2008|13:47] C:\ProgramData\eSobi
    [28/08/2008|16:35] C:\ProgramData\Favoris
    [02/11/2006|15:02] C:\ProgramData\Favorites
    [21/03/2008|13:36] C:\ProgramData\FloodLightGames
    [31/08/2008|09:04] C:\ProgramData\Google
    [30/08/2008|15:31] C:\ProgramData\IM
    [30/08/2008|15:29] C:\ProgramData\IncrediMail
    [14/09/2008|22:04] C:\ProgramData\LauncherAccess.dt
    [14/09/2008|11:59] C:\ProgramData\Malwarebytes
    [21/03/2008|13:53] C:\ProgramData\McAfee
    [28/08/2008|16:35] C:\ProgramData\Menu D‚marrer
    [16/09/2008|17:13] C:\ProgramData\Microsoft
    [10/09/2008|07:31] C:\ProgramData\Microsoft Help
    [28/08/2008|16:35] C:\ProgramData\ModŠles
    [18/06/2008|08:06] C:\ProgramData\NVIDIA
    [21/03/2008|13:52] C:\ProgramData\SiteAdvisor
    [18/09/2008|21:43] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|15:02] C:\ProgramData\Start Menu
    [02/11/2006|15:02] C:\ProgramData\Templates
    [13/09/2008|17:57] C:\ProgramData\traydead
    [07/09/2008|09:22] C:\ProgramData\WLInstaller
    [30/08/2008|15:32] C:\ProgramData\Yahoo! Companion

    --------------------\\ Listing des dossiers dans C:\Program Files

    [21/03/2008|13:47] C:\Program Files\Acer Arcade Live
    [21/03/2008|13:46] C:\Program Files\Acer GameZone
    [18/06/2008|08:12] C:\Program Files\Acer Incorporated
    [21/03/2008|13:18] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
    [30/08/2008|08:41] C:\Program Files\Adobe
    [18/09/2008|18:14] C:\Program Files\Alwil Software
    [31/08/2008|00:19] C:\Program Files\AskSBar
    [18/06/2008|08:07] C:\Program Files\ATI
    [31/08/2008|00:20] C:\Program Files\Azureus
    [12/09/2008|17:32] C:\Program Files\Common Files
    [31/08/2008|08:59] C:\Program Files\Conduit
    [21/03/2008|13:33] C:\Program Files\CyberLink
    [28/08/2008|16:54] C:\Program Files\DIFX
    [21/03/2008|13:47] C:\Program Files\eSobi
    [28/08/2008|16:35] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [01/09/2008|07:13] C:\Program Files\Google
    [02/09/2008|17:28] C:\Program Files\InstallShield Installation Information
    [21/01/2008|04:35] C:\Program Files\Internet Explorer
    [12/09/2008|17:33] C:\Program Files\Java
    [12/09/2008|17:30] C:\Program Files\LimeWire
    [14/09/2008|11:59] C:\Program Files\Malwarebytes' Anti-Malware
    [14/09/2008|09:29] C:\Program Files\McAfee
    [21/03/2008|13:51] C:\Program Files\McAfee.com
    [02/11/2006|14:37] C:\Program Files\Microsoft Games
    [21/03/2008|13:17] C:\Program Files\Microsoft Office
    [10/09/2008|07:30] C:\Program Files\Microsoft Works
    [21/03/2008|13:15] C:\Program Files\Microsoft.NET
    [21/01/2008|04:35] C:\Program Files\Movie Maker
    [02/11/2006|14:37] C:\Program Files\MSBuild
    [28/08/2008|17:15] C:\Program Files\MSXML 4.0
    [18/09/2008|21:11] C:\Program Files\Navilog1
    [21/03/2008|13:22] C:\Program Files\NewTech Infosystems
    [31/08/2008|08:59] C:\Program Files\P2P_Energy
    [21/03/2008|13:11] C:\Program Files\Realtek
    [02/11/2006|14:37] C:\Program Files\Reference Assemblies
    [02/09/2008|17:28] C:\Program Files\Samsung
    [14/09/2008|08:37] C:\Program Files\SiteAdvisor
    [18/09/2008|22:00] C:\Program Files\Spybot - Search & Destroy
    [12/09/2008|17:33] C:\Program Files\Sun
    [28/08/2008|16:54] C:\Program Files\TRENDnet
    [02/11/2006|15:01] C:\Program Files\Uninstall Information
    [31/08/2008|12:55] C:\Program Files\VideoLAN
    [21/01/2008|04:35] C:\Program Files\Windows Calendar
    [21/01/2008|04:35] C:\Program Files\Windows Collaboration
    [21/01/2008|04:35] C:\Program Files\Windows Defender
    [21/01/2008|04:35] C:\Program Files\Windows Journal
    [07/09/2008|09:28] C:\Program Files\Windows Live
    [28/08/2008|18:16] C:\Program Files\Windows Mail
    [21/01/2008|04:35] C:\Program Files\Windows Media Player
    [28/08/2008|16:35] C:\Program Files\Windows NT
    [21/01/2008|04:35] C:\Program Files\Windows Photo Gallery
    [21/01/2008|04:35] C:\Program Files\Windows Sidebar
    [21/03/2008|13:48] C:\Program Files\Yahoo!

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [30/08/2008|08:41] C:\Program Files\Common Files\Adobe
    [21/03/2008|13:16] C:\Program Files\Common Files\DESIGNER
    [21/03/2008|13:32] C:\Program Files\Common Files\InstallShield
    [12/09/2008|17:32] C:\Program Files\Common Files\Java
    [21/03/2008|13:21] C:\Program Files\Common Files\LightScribe
    [21/03/2008|13:52] C:\Program Files\Common Files\McAfee
    [07/09/2008|22:32] C:\Program Files\Common Files\microsoft shared
    [21/03/2008|13:21] C:\Program Files\Common Files\muvee Technologies
    [21/03/2008|13:22] C:\Program Files\Common Files\NewTech Infosystems
    [21/03/2008|13:36] C:\Program Files\Common Files\Oberon Media
    [02/11/2006|13:18] C:\Program Files\Common Files\Services
    [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
    [21/01/2008|04:35] C:\Program Files\Common Files\System
    [07/09/2008|09:26] C:\Program Files\Common Files\WindowsLiveInstaller

    --------------------\\ Process

    ( 70 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-18 22:29:23
    Windows 6.0.6001 Service Pack 1 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    [F:258][D:14]-> C:\Users\PASCAL~1\AppData\Local\Temp
    [F:186][D:1]-> C:\Users\PASCAL~1\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:2726][D:6]-> C:\Users\PASCAL~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:27][D:5]-> C:\$Recycle.Bin

    1 - "C:\Lop SD\LopR_1.txt" - 18/09/2008|21:48 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 18/09/2008|22:05 - Option : [1]
    3 - "C:\Lop SD\LopR_3.txt" - 18/09/2008|22:30 - Option : [2]

    --------------------\\ Fin du rapport a 22:30:52
    [ UAC => 1 ]
    0
  19. g!rly Messages postés 18462 Statut Contributeur 407
     
    oui je voie ça...

    bon celui la; c´était lopsd option 2 il te reste a passer toolbar sd option 2 maintenant et a poster le rapport :)

    @+
    0
  20. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,
    c´est ma faute; j´ai reussi a t´embrouiller...
    post un rapport nouveau hijack this stp
    0
  21. pascalou
     
    ca y est tu à les deux juste avant ton dernier message je ne vais pas assez vite lol alors ça donne quoi?
    0
  • 1
  • 2

Discussions similaires

Ouvrir un fichier .pub sans Publisher
baissaoui -
baissaoui -

0 réponse
Ouvrir document Publisher sans Publisher
Curtis Hayes -
Curtis Hayes -

7 réponses
Code source couleur de fond
Mehdi-Amg -
Techno01 -

9 réponses