problem de fenetre internet

Question

Bonjour,
quand je navigue sur internet avec mon navigateur principale(firefox) des fenetre publicitaire apparaisse avec mon internet explorer et je ne sait aps quoi faire pour empecher cela et celui qui apparais le plus souvent est un site nommer CID tv-bytes quelque chose du genre.. Quoi fairee?

Utilisateur anonyme · Answer

Salut,

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Vas dans "Démarrer" puis Panneau de configuration. 
- Double Clique sur l'icône Comptes d'utilisateurs et sur Activer ou désactiver le contrôle des comptes d'utilisateurs. 
- Clique sur Continuer. 
- Décoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur. 
- Valide par OK et redémarre. 

Tuto : https://forum.malekal.com/viewtopic.php?f=59&t=6517

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 

* Double-clique dessus pour lancer l'installation 
* Fais un clic droit sur le raccourci Lop S&D présent sur ton Bureau 
* Choisi executer en tant qu administrateur
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche) 
* Patiente jusqu'à la fin du scan 
* Poste le rapport généré (C:\lopR.txt)

patrick letoile · Answer

je ne peux pas car cette option napparais pas quand je double clik le compte utilisateur cest p-e a cause que je suis administrateur de lordinateur esce possible?

Utilisateur anonyme · Answer

fais juste clic droit executer en tant qu administrateur

patrick letoile · Answer

--------------------\  Lop S&D 4.2.4-4   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
   BIOS : Default System BIOS
   USER : Patrick ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total : 113 Go Free : 78 Go
   D:\ (Local Disk) - NTFS - Total : 170 Go Free : 162 Go
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)

   "C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
   Option : [1] ( 2008-09-23| 1:41 )

   [ UAC => 0 ]
 
   --------------------\  Listing des dossiers dans Local  

   [2008-09-06|16:03] C:\Users\Patrick\AppData\Local\Acer Arcade Live
   [2008-09-15|18:18] C:\Users\Patrick\AppData\Local\Adobe
   [2008-09-06|17:02] C:\Users\Patrick\AppData\Local\Apple
   [2008-09-17|14:04] C:\Users\Patrick\AppData\Local\Apple Computer
   [2008-09-06|15:17] C:\Users\Patrick\AppData\Local\Application Data 
   [2008-09-06|15:19] C:\Users\Patrick\AppData\Local\ATI
   [2008-09-06|17:13] C:\Users\Patrick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [2008-09-06|15:34] C:\Users\Patrick\AppData\Local\Downloaded Installations
   [2008-09-06|15:35] C:\Users\Patrick\AppData\Local\edsinstaller.txt-20080906.log
   [2008-09-18|20:25] C:\Users\Patrick\AppData\Local\GDIPFONTCACHEV1.DAT
   [2008-09-06|15:17] C:\Users\Patrick\AppData\Local\Historique 
   [2008-09-23|01:31] C:\Users\Patrick\AppData\Local\IconCache.db
   [2008-09-18|20:23] C:\Users\Patrick\AppData\Local\Linksys_LLC_-_A_Division_
   [2008-09-23|01:07] C:\Users\Patrick\AppData\Local\Microsoft
   [2008-09-08|13:28] C:\Users\Patrick\AppData\Local\Mozilla
   [2008-09-06|15:19] C:\Users\Patrick\AppData\Local\PowerCinema
   [2008-09-23|01:39] C:\Users\Patrick\AppData\Local\Temp
   [2008-09-06|15:17] C:\Users\Patrick\AppData\Local\Temporary Internet Files 
   [2008-09-19|20:16] C:\Users\Patrick\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [2008-09-22 14:42][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{51734A9F-FFF2-4FA1-B272-2F342BA173B2}.job
   [2008-03-15 19:16][--a------] C:\Windows	asks\McDefragTask.job
   [2008-03-15 19:16][--a------] C:\Windows	asks\McQcTask.job
   [2008-09-23 01:33][--ah-----] C:\Windows	asks\SA.DAT
   [2008-09-23 01:32][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [2008-03-15|19:12] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
   [2008-09-17|00:58] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [2008-03-15|18:57] C:\ProgramData\Acer GameZone Console
   [2008-03-15|18:56] C:\ProgramData\Adobe
   [2008-09-06|17:01] C:\ProgramData\Apple
   [2008-09-17|00:58] C:\ProgramData\Apple Computer
   [2006-11-02|09:02] C:\ProgramData\Application Data 
   [2008-09-06|15:19] C:\ProgramData\ATI
   [2008-09-06|15:13] C:\ProgramData\Bureau 
   [2008-09-06|16:03] C:\ProgramData\CyberLink
   [2006-11-02|09:02] C:\ProgramData\Desktop 
   [2006-11-02|09:02] C:\ProgramData\Documents 
   [2008-09-06|16:07] C:\ProgramData\eSobi
   [2008-09-06|15:13] C:\ProgramData\Favoris 
   [2006-11-02|09:02] C:\ProgramData\Favorites 
   [2008-03-15|18:57] C:\ProgramData\FloodLightGames
   [2008-09-18|20:22] C:\ProgramData\Linksys
   [2008-09-19|13:37] C:\ProgramData\LongAmenSixth
   [2008-09-09|00:56] C:\ProgramData\Malwarebytes
   [2008-03-15|18:49] C:\ProgramData\McAfee
   [2008-09-06|15:13] C:\ProgramData\Menu D‚marrer 
   [2008-09-07|13:15] C:\ProgramData\Messenger Plus!
   [2008-09-23|01:35] C:\ProgramData\Microsoft
   [2008-09-09|20:00] C:\ProgramData\Microsoft Help
   [2008-09-06|15:13] C:\ProgramData\ModŠles 
   [2008-09-07|13:13] C:\ProgramData\Poke admin tons bike
   [2008-09-13|20:52] C:\ProgramData\Pure More More.0u6mcuo
   [2008-09-13|17:42] C:\ProgramData\Pure More More.2gn7qan
   [2008-09-07|13:11] C:\ProgramData\Pure More More.3xva86
   [2008-09-13|21:14] C:\ProgramData\Pure More More.64w5j
   [2008-09-13|21:58] C:\ProgramData\Pure More More.6xlug4t
   [2008-09-07|13:12] C:\ProgramData\Pure More More.97nwm
   [2008-09-13|17:20] C:\ProgramData\Pure More More.bxiz7q
   [2008-09-13|20:30] C:\ProgramData\Pure More More.ohzo9ok
   [2008-09-07|13:12] C:\ProgramData\Pure More More.r5cfgu
   [2008-09-13|20:08] C:\ProgramData\Pure More More.tr1ve
   [2008-09-13|22:20] C:\ProgramData\Pure More More.ulbp4
   [2008-09-13|21:36] C:\ProgramData\Pure More More.zk1rqmr
   [2008-09-18|20:19] C:\ProgramData\Pure Networks
   [2008-09-07|13:13] C:\ProgramData\Settings User Ping.8vfknp0
   [2008-03-15|18:49] C:\ProgramData\SiteAdvisor
   [2008-09-07|23:59] C:\ProgramData\Spybot - Search & Destroy
   [2006-11-02|09:02] C:\ProgramData\Start Menu 
   [2008-09-13|12:57] C:\ProgramData\TEMP
   [2006-11-02|09:02] C:\ProgramData\Templates 
   [2008-09-19|14:47] C:\ProgramData\webex
   [2008-09-06|16:14] C:\ProgramData\WLInstaller
   [2008-09-06|15:42] C:\ProgramData\Yahoo! Companion

   --------------------\  Listing des dossiers dans C:\Program Files

   [2008-09-06|15:17] C:\Program Files\Acer
   [2008-03-15|18:56] C:\Program Files\Acer Arcade Live
   [2008-03-15|19:07] C:\Program Files\Acer GameZone
   [2008-09-06|15:37] C:\Program Files\Acer Incorporated
   [2008-03-15|19:12] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [2008-03-15|18:56] C:\Program Files\Adobe
   [2008-09-17|00:59] C:\Program Files\Apple Software Update
   [2008-09-06|15:06] C:\Program Files\ATI
   [2008-09-06|15:07] C:\Program Files\ATI Technologies
   [2008-09-06|16:50] C:\Program Files\BitComet
   [2008-09-17|00:52] C:\Program Files\Bonjour
   [2008-09-07|13:10] C:\Program Files\Circle Developement
   [2008-09-18|20:19] C:\Program Files\Common Files
   [2008-03-15|18:52] C:\Program Files\CyberLink
   [2008-09-06|15:25] C:\Program Files\DIFX
   [2008-03-15|19:24] C:\Program Files\eSobi
   [2008-09-06|15:13] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [2008-09-18|20:19] C:\Program Files\InstallShield Installation Information
   [2008-09-06|17:02] C:\Program Files\Internet Explorer
   [2008-09-17|00:58] C:\Program Files\iPod
   [2008-09-17|00:58] C:\Program Files\iTunes
   [2008-09-18|20:21] C:\Program Files\Java
   [2008-09-06|16:35] C:\Program Files\LimeWire
   [2008-09-18|20:19] C:\Program Files\Linksys
   [2008-09-18|09:54] C:\Program Files\McAfee
   [2008-03-15|18:47] C:\Program Files\McAfee.com
   [2008-09-07|13:12] C:\Program Files\Messenger Plus! Live
   [2006-11-02|08:37] C:\Program Files\Microsoft Games
   [2008-03-15|19:12] C:\Program Files\Microsoft Office
   [2008-09-08|12:24] C:\Program Files\Microsoft Silverlight
   [2008-09-06|16:19] C:\Program Files\Microsoft SQL Server Compact Edition
   [2008-09-09|19:59] C:\Program Files\Microsoft Works
   [2008-03-15|19:10] C:\Program Files\Microsoft.NET
   [2008-01-20|22:35] C:\Program Files\Movie Maker
   [2008-09-23|01:36] C:\Program Files\Mozilla Firefox
   [2006-11-02|08:37] C:\Program Files\MSBuild
   [2008-09-06|15:45] C:\Program Files\MSXML 4.0
   [2008-03-15|19:23] C:\Program Files\NewTech Infosystems
   [2008-09-17|00:57] C:\Program Files\QuickTime
   [2008-03-15|18:43] C:\Program Files\Realtek
   [2006-11-02|08:37] C:\Program Files\Reference Assemblies
   [2008-09-17|00:52] C:\Program Files\Safari
   [2008-09-13|17:11] C:\Program Files\SiteAdvisor
   [2008-09-07|22:21] C:\Program Files\Spybot - Search & Destroy
   [2006-11-02|09:01] C:\Program Files\Uninstall Information
   [2008-01-20|22:35] C:\Program Files\Windows Calendar
   [2008-01-20|22:35] C:\Program Files\Windows Collaboration
   [2008-01-20|22:35] C:\Program Files\Windows Defender
   [2008-01-20|22:35] C:\Program Files\Windows Journal
   [2008-09-06|16:34] C:\Program Files\Windows Live
   [2008-09-06|15:54] C:\Program Files\Windows Mail
   [2008-01-20|22:35] C:\Program Files\Windows Media Player
   [2008-09-06|15:13] C:\Program Files\Windows NT
   [2008-01-20|22:35] C:\Program Files\Windows Photo Gallery
   [2008-01-20|22:35] C:\Program Files\Windows Sidebar
   [2008-03-15|19:18] C:\Program Files\Yahoo!
   [2008-09-06|15:24] C:\Program Files\YUAN

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [2008-03-15|18:56] C:\Program Files\Common Files\Adobe
   [2008-09-17|00:56] C:\Program Files\Common Files\Apple
   [2008-03-15|19:10] C:\Program Files\Common Files\DESIGNER
   [2008-03-15|18:45] C:\Program Files\Common Files\InstallShield
   [2008-09-06|16:37] C:\Program Files\Common Files\Java
   [2008-03-15|19:22] C:\Program Files\Common Files\LightScribe
   [2008-03-15|18:47] C:\Program Files\Common Files\McAfee
   [2008-09-06|16:32] C:\Program Files\Common Files\microsoft shared
   [2008-03-15|19:22] C:\Program Files\Common Files\muvee Technologies
   [2008-03-15|18:57] C:\Program Files\Common Files\Oberon Media
   [2008-09-18|20:19] C:\Program Files\Common Files\Pure Networks Shared
   [2006-11-02|07:18] C:\Program Files\Common Files\Services
   [2006-11-02|07:18] C:\Program Files\Common Files\SpeechEngines
   [2008-01-20|22:35] C:\Program Files\Common Files\System
   [2008-09-06|16:17] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 80 Processes )

   iexplore.exe ~ [PID:4344]

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\Pure More More.64w5j
   C:\ProgramData\Pure More More.97nwm
   C:\ProgramData\Pure More More.tr1ve
   C:\ProgramData\Pure More More.ulbp4
   C:\ProgramData\Pure More More.3xva86
   C:\ProgramData\Pure More More.bxiz7q
   C:\ProgramData\Pure More More.r5cfgu
   C:\ProgramData\Pure More More.0u6mcuo
   C:\ProgramData\Pure More More.2gn7qan
   C:\ProgramData\Pure More More.6xlug4t
   C:\ProgramData\Pure More More.ohzo9ok
   C:\ProgramData\Pure More More.zk1rqmr
   C:\ProgramData\Settings User Ping.8vfknp0
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "DoesWave"="\"C:\ProgramData\Pure More More.0u6mcuo\""
   "tons bike intra poll"="\"C:\ProgramData\Settings User Ping.8vfknp0\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-09-23 01:41:33
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:108][D:7]-> C:\Users\Patrick\AppData\Local\Temp
   [F:8][D:1]-> C:\Users\Patrick\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:158][D:5]-> C:\Users\Patrick\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:1][D:1]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 2008-09-23| 1:42 - Option : [1]

   --------------------\  Fin du rapport a  1:42:24
   [ UAC => 1 ]

Utilisateur anonyme · Answer

Relance Lop S&D 

* Fais un clic droit sur le raccourci Lop S&D présent sur ton Bureau 
* Choisi executer en tant qu administrateur
* Choisis cette fois ci l'Option 2 (Suppression) 
* Ne ferme pas la fenêtre lors de la suppression ! 
* Poste le rapport généré (C:\lopR.txt)

patrick letoile · Answer

--------------------\  Lop S&D 4.2.4-4   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
   BIOS : Default System BIOS
   USER : Patrick ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total : 113 Go Free : 78 Go
   D:\ (Local Disk) - NTFS - Total : 170 Go Free : 162 Go
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)

   "C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
   Option : [2] ( 2008-09-23| 1:53 )

   [ UAC => 1 ]


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
   Supprime! - C:\ProgramData\Pure More More.64w5j
   Supprime! - C:\ProgramData\Pure More More.97nwm
   Supprime! - C:\ProgramData\Pure More More.tr1ve
   Supprime! - C:\ProgramData\Pure More More.ulbp4
   Supprime! - C:\ProgramData\Pure More More.3xva86
   Supprime! - C:\ProgramData\Pure More More.bxiz7q
   Supprime! - C:\ProgramData\Pure More More.r5cfgu
   Supprime! - C:\ProgramData\Pure More More.0u6mcuo
   Supprime! - C:\ProgramData\Pure More More.2gn7qan
   Supprime! - C:\ProgramData\Pure More More.6xlug4t
   Supprime! - C:\ProgramData\Pure More More.ohzo9ok
   Supprime! - C:\ProgramData\Pure More More.zk1rqmr
   Supprime! - C:\ProgramData\Settings User Ping.8vfknp0
   Supprime! - C:\Program Files\Circle Developement
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans Local  

   [2008-09-06|16:03] C:\Users\Patrick\AppData\Local\Acer Arcade Live
   [2008-09-15|18:18] C:\Users\Patrick\AppData\Local\Adobe
   [2008-09-06|17:02] C:\Users\Patrick\AppData\Local\Apple
   [2008-09-17|14:04] C:\Users\Patrick\AppData\Local\Apple Computer
   [2008-09-06|15:17] C:\Users\Patrick\AppData\Local\Application Data 
   [2008-09-06|15:19] C:\Users\Patrick\AppData\Local\ATI
   [2008-09-06|17:13] C:\Users\Patrick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [2008-09-06|15:34] C:\Users\Patrick\AppData\Local\Downloaded Installations
   [2008-09-06|15:35] C:\Users\Patrick\AppData\Local\edsinstaller.txt-20080906.log
   [2008-09-18|20:25] C:\Users\Patrick\AppData\Local\GDIPFONTCACHEV1.DAT
   [2008-09-06|15:17] C:\Users\Patrick\AppData\Local\Historique 
   [2008-09-23|01:31] C:\Users\Patrick\AppData\Local\IconCache.db
   [2008-09-18|20:23] C:\Users\Patrick\AppData\Local\Linksys_LLC_-_A_Division_
   [2008-09-23|01:07] C:\Users\Patrick\AppData\Local\Microsoft
   [2008-09-08|13:28] C:\Users\Patrick\AppData\Local\Mozilla
   [2008-09-06|15:19] C:\Users\Patrick\AppData\Local\PowerCinema
   [2008-09-23|01:53] C:\Users\Patrick\AppData\Local\Temp
   [2008-09-06|15:17] C:\Users\Patrick\AppData\Local\Temporary Internet Files 
   [2008-09-19|20:16] C:\Users\Patrick\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [2008-09-22 14:42][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{51734A9F-FFF2-4FA1-B272-2F342BA173B2}.job
   [2008-03-15 19:16][--a------] C:\Windows	asks\McDefragTask.job
   [2008-03-15 19:16][--a------] C:\Windows	asks\McQcTask.job
   [2008-09-23 01:48][--ah-----] C:\Windows	asks\SA.DAT
   [2008-09-23 01:48][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [2008-03-15|19:12] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
   [2008-09-17|00:58] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [2008-03-15|18:57] C:\ProgramData\Acer GameZone Console
   [2008-03-15|18:56] C:\ProgramData\Adobe
   [2008-09-06|17:01] C:\ProgramData\Apple
   [2008-09-17|00:58] C:\ProgramData\Apple Computer
   [2006-11-02|09:02] C:\ProgramData\Application Data 
   [2008-09-06|15:19] C:\ProgramData\ATI
   [2008-09-06|15:13] C:\ProgramData\Bureau 
   [2008-09-06|16:03] C:\ProgramData\CyberLink
   [2006-11-02|09:02] C:\ProgramData\Desktop 
   [2006-11-02|09:02] C:\ProgramData\Documents 
   [2008-09-06|16:07] C:\ProgramData\eSobi
   [2008-09-06|15:13] C:\ProgramData\Favoris 
   [2006-11-02|09:02] C:\ProgramData\Favorites 
   [2008-03-15|18:57] C:\ProgramData\FloodLightGames
   [2008-09-18|20:22] C:\ProgramData\Linksys
   [2008-09-19|13:37] C:\ProgramData\LongAmenSixth
   [2008-09-09|00:56] C:\ProgramData\Malwarebytes
   [2008-03-15|18:49] C:\ProgramData\McAfee
   [2008-09-06|15:13] C:\ProgramData\Menu D‚marrer 
   [2008-09-07|13:15] C:\ProgramData\Messenger Plus!
   [2008-09-23|01:35] C:\ProgramData\Microsoft
   [2008-09-09|20:00] C:\ProgramData\Microsoft Help
   [2008-09-06|15:13] C:\ProgramData\ModŠles 
   [2008-09-07|13:13] C:\ProgramData\Poke admin tons bike
   [2008-09-18|20:19] C:\ProgramData\Pure Networks
   [2008-03-15|18:49] C:\ProgramData\SiteAdvisor
   [2008-09-07|23:59] C:\ProgramData\Spybot - Search & Destroy
   [2006-11-02|09:02] C:\ProgramData\Start Menu 
   [2008-09-13|12:57] C:\ProgramData\TEMP
   [2006-11-02|09:02] C:\ProgramData\Templates 
   [2008-09-19|14:47] C:\ProgramData\webex
   [2008-09-06|16:14] C:\ProgramData\WLInstaller
   [2008-09-06|15:42] C:\ProgramData\Yahoo! Companion

   --------------------\  Listing des dossiers dans C:\Program Files

   [2008-09-06|15:17] C:\Program Files\Acer
   [2008-03-15|18:56] C:\Program Files\Acer Arcade Live
   [2008-03-15|19:07] C:\Program Files\Acer GameZone
   [2008-09-06|15:37] C:\Program Files\Acer Incorporated
   [2008-03-15|19:12] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [2008-03-15|18:56] C:\Program Files\Adobe
   [2008-09-17|00:59] C:\Program Files\Apple Software Update
   [2008-09-06|15:06] C:\Program Files\ATI
   [2008-09-06|15:07] C:\Program Files\ATI Technologies
   [2008-09-06|16:50] C:\Program Files\BitComet
   [2008-09-17|00:52] C:\Program Files\Bonjour
   [2008-09-18|20:19] C:\Program Files\Common Files
   [2008-03-15|18:52] C:\Program Files\CyberLink
   [2008-09-06|15:25] C:\Program Files\DIFX
   [2008-03-15|19:24] C:\Program Files\eSobi
   [2008-09-06|15:13] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [2008-09-18|20:19] C:\Program Files\InstallShield Installation Information
   [2008-09-06|17:02] C:\Program Files\Internet Explorer
   [2008-09-17|00:58] C:\Program Files\iPod
   [2008-09-17|00:58] C:\Program Files\iTunes
   [2008-09-18|20:21] C:\Program Files\Java
   [2008-09-06|16:35] C:\Program Files\LimeWire
   [2008-09-18|20:19] C:\Program Files\Linksys
   [2008-09-18|09:54] C:\Program Files\McAfee
   [2008-03-15|18:47] C:\Program Files\McAfee.com
   [2008-09-07|13:12] C:\Program Files\Messenger Plus! Live
   [2006-11-02|08:37] C:\Program Files\Microsoft Games
   [2008-03-15|19:12] C:\Program Files\Microsoft Office
   [2008-09-08|12:24] C:\Program Files\Microsoft Silverlight
   [2008-09-06|16:19] C:\Program Files\Microsoft SQL Server Compact Edition
   [2008-09-09|19:59] C:\Program Files\Microsoft Works
   [2008-03-15|19:10] C:\Program Files\Microsoft.NET
   [2008-01-20|22:35] C:\Program Files\Movie Maker
   [2008-09-23|01:36] C:\Program Files\Mozilla Firefox
   [2006-11-02|08:37] C:\Program Files\MSBuild
   [2008-09-06|15:45] C:\Program Files\MSXML 4.0
   [2008-03-15|19:23] C:\Program Files\NewTech Infosystems
   [2008-09-17|00:57] C:\Program Files\QuickTime
   [2008-03-15|18:43] C:\Program Files\Realtek
   [2006-11-02|08:37] C:\Program Files\Reference Assemblies
   [2008-09-17|00:52] C:\Program Files\Safari
   [2008-09-13|17:11] C:\Program Files\SiteAdvisor
   [2008-09-07|22:21] C:\Program Files\Spybot - Search & Destroy
   [2006-11-02|09:01] C:\Program Files\Uninstall Information
   [2008-01-20|22:35] C:\Program Files\Windows Calendar
   [2008-01-20|22:35] C:\Program Files\Windows Collaboration
   [2008-01-20|22:35] C:\Program Files\Windows Defender
   [2008-01-20|22:35] C:\Program Files\Windows Journal
   [2008-09-06|16:34] C:\Program Files\Windows Live
   [2008-09-06|15:54] C:\Program Files\Windows Mail
   [2008-01-20|22:35] C:\Program Files\Windows Media Player
   [2008-09-06|15:13] C:\Program Files\Windows NT
   [2008-01-20|22:35] C:\Program Files\Windows Photo Gallery
   [2008-01-20|22:35] C:\Program Files\Windows Sidebar
   [2008-03-15|19:18] C:\Program Files\Yahoo!
   [2008-09-06|15:24] C:\Program Files\YUAN

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [2008-03-15|18:56] C:\Program Files\Common Files\Adobe
   [2008-09-17|00:56] C:\Program Files\Common Files\Apple
   [2008-03-15|19:10] C:\Program Files\Common Files\DESIGNER
   [2008-03-15|18:45] C:\Program Files\Common Files\InstallShield
   [2008-09-06|16:37] C:\Program Files\Common Files\Java
   [2008-03-15|19:22] C:\Program Files\Common Files\LightScribe
   [2008-03-15|18:47] C:\Program Files\Common Files\McAfee
   [2008-09-06|16:32] C:\Program Files\Common Files\microsoft shared
   [2008-03-15|19:22] C:\Program Files\Common Files\muvee Technologies
   [2008-03-15|18:57] C:\Program Files\Common Files\Oberon Media
   [2008-09-18|20:19] C:\Program Files\Common Files\Pure Networks Shared
   [2006-11-02|07:18] C:\Program Files\Common Files\Services
   [2006-11-02|07:18] C:\Program Files\Common Files\SpeechEngines
   [2008-01-20|22:35] C:\Program Files\Common Files\System
   [2008-09-06|16:17] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 82 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-09-23 01:53:36
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:109][D:7]-> C:\Users\Patrick\AppData\Local\Temp
   [F:12][D:1]-> C:\Users\Patrick\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:160][D:5]-> C:\Users\Patrick\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:1][D:1]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 2008-09-23| 1:42 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 2008-09-23| 1:54 - Option : [2]

   --------------------\  Fin du rapport a  1:54:25
   [ UAC => 1 ]

Utilisateur anonyme · Answer

Télécharge HijackThis (outils de dignostic) ici : 

->  Fais un clic droit sur un des liens et choisi enregistrer la cible sous .... le bureau
->  http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe 
->  ftp://ftp.commentcamarche.com/download/HJTInstall.exe

-> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation 

-> Clique sur Install ensuite sur I Accept 

-> Clique sur Do a scan system and save log file 

-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

patrick letoile · Answer

voila le scan!

O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [DoesWave] "C:\ProgramData\Pure More More.0u6mcuo"
O4 - HKCU\..\Run: [tons bike intra poll] "C:\ProgramData\Settings User Ping.8vfknp0"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform
msrvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

Utilisateur anonyme · Answer

post le rapport complet stp

patrick letoile · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:01:25, on 2008-09-23
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [DoesWave] "C:\ProgramData\Pure More More.0u6mcuo"
O4 - HKCU\..\Run: [tons bike intra poll] "C:\ProgramData\Settings User Ping.8vfknp0"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform
msrvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

Utilisateur anonyme · Answer

ton rapport n est pas bon : Scan saved at 02:01:25 il ets 2h du mat chez toi ?

Ferme hijackthis
fais un sclic droit sur hijackthis
choisi executer en tant qu administrateur
fais do a system scan and save a lofile et post le rapport

patrick letoile · Answer

oui jhabite au canada cest a cause du decalage horraire

Utilisateur anonyme · Answer

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. 
double-clique sur OTMoveIt.exe pour le lancer. 
Assure toi que la case Unregister Dll's and Ocx's soit bien cochée 
copie la liste qui se trouve en gras ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 

C:\ProgramData\Pure More More.0u6mcuo
C:\ProgramData\Settings User Ping.8vfknp0

clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

patrick letoile · Answer

File/Folder  not found.
File/Folder C:\ProgramData\Pure More More.0u6mcuo not found.
File/Folder C:\ProgramData\Settings User Ping.8vfknp0 not found.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09232008_022530

Utilisateur anonyme · Answer

Fix.reg 

Ouvre le bloc-notes (click droit sur le bureau > dans l´arborescence choisie nouveau et nouveau fichier texte) et fais un copier coller de ce qui est en citation ci-dessous (copie tout d'un trait-sans les barres(x)) : 

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 
Windows Registry Editor Version 5.00 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"DoesWave"=-
"tons bike intra poll"=-

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 
click sur "fichier"/"enregistrer sous" : 
dans : sur le bureau 
Nom du fichier : fix.reg 
Type de fichier : "tous les fichiers" 
clique sur "enregistrer" 

ca doit ressembler a ca une fois enrregistré : 

http://img520.imageshack.us/img520/4251/screenshot005ps2.png 

double clique sur fix.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?" 
Si c'est bien le cas, clique sur "oui" 


ensuiet refais un scan hijackthis en tant qu administrateur et post le rapport stp

patrick letoile · Answer

voila le rapport




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:01:25, on 2008-09-23
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [DoesWave] "C:\ProgramData\Pure More More.0u6mcuo"
O4 - HKCU\..\Run: [tons bike intra poll] "C:\ProgramData\Settings User Ping.8vfknp0"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform
msrvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

patrick letoile · Answer

non laisse faire ;e rapport precedant netais pas en tant quadministrateur ej recommence desoler

patrick letoile · Answer

non erreur desoler jetais bien en administrateur cest le bon 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:01:25, on 2008-09-23
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform
mctxth.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [DoesWave] "C:\ProgramData\Pure More More.0u6mcuo"
O4 - HKCU\..\Run: [tons bike intra poll] "C:\ProgramData\Settings User Ping.8vfknp0"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet	ools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform
msrvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

Utilisateur anonyme · Answer

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 




-> Double clique sur combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

patrick letoile · Answer

je croit que jen aurai pas besoin je croit que le problem cest deja regler car sa fait un petit bout que je nai pas eu de fenetre internet qui on ouverte devrai-je le faire pareil car je croit que le problem est vraimetn resolu?

Utilisateur anonyme · Answer

IL te reste des traces dans le registre

patrick letoile · Answer

ComboFix 08-09-20.05 - Patrick 2008-09-23 3:10:19.1 - NTFSx86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1027 [GMT -4:00] Lancé depuis: C:\Users\Patrick\Downloads\ComboFix.exe * Un nouveau point de restauration a été créé * Resident AV is active . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Users\Patrick\AppData\Roaming\.# . ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-23 au 2008-09-23 )))))))))))))))))))))))))))))))))))) . 2008-09-23 02:25 . 2008-09-23 02:25 d-------- C:\_OTMoveIt 2008-09-23 02:00 . 2008-09-23 02:00 d-------- C:\Program Files\Trend Micro 2008-09-23 01:39 . 2008-09-23 01:54 d-------- C:\Lop SD 2008-09-19 15:13 . 2008-09-19 15:13 d-------- C:\Windows\Sun 2008-09-18 20:22 . 2008-09-19 14:47 d-------- C:\Users\All Users\webex 2008-09-18 20:22 . 2008-09-19 14:47 d-------- C:\ProgramData\webex 2008-09-18 20:21 . 2008-09-18 20:22 d-------- C:\Users\All Users\Linksys 2008-09-18 20:21 . 2008-09-18 20:22 d-------- C:\ProgramData\Linksys 2008-09-18 20:20 . 2008-04-09 00:14 24,888 --a------ C:\Windows\System32\drivers\pnarp.sys 2008-09-18 20:19 . 2008-09-18 20:19 d-------- C:\Users\All Users\Pure Networks 2008-09-18 20:19 . 2008-09-18 20:19 d-------- C:\ProgramData\Pure Networks 2008-09-18 20:19 . 2008-09-18 20:19 d-------- C:\Program Files\Common Files\Pure Networks Shared 2008-09-18 20:19 . 2008-04-09 00:14 26,424 --a------ C:\Windows\System32\drivers\purendis.sys 2008-09-18 20:18 . 2008-09-18 20:19 d-------- C:\Program Files\Linksys 2008-09-18 14:45 . 2008-09-23 01:48 65,536 --------- C:\Windows\System32\Ikeext.etl 2008-09-18 14:09 . 2008-09-18 14:09 d-------- C:\Users\Patrick\AppData\Roaming\PeerNetworking 2008-09-17 13:18 . 2008-07-19 01:09 1,811,656 --a------ C:\Windows\System32\wuaueng.dll 2008-09-17 13:18 . 2008-07-18 23:44 1,524,736 --a------ C:\Windows\System32\wucltux.dll 2008-09-17 13:18 . 2008-07-19 01:10 53,448 --a------ C:\Windows\System32\wuauclt.exe 2008-09-17 13:18 . 2008-07-19 01:10 45,768 --a------ C:\Windows\System32\wups2.dll 2008-09-17 13:17 . 2008-07-19 01:09 563,912 --a------ C:\Windows\System32\wuapi.dll 2008-09-17 13:17 . 2008-07-18 22:08 163,904 --a------ C:\Windows\System32\wuwebv.dll 2008-09-17 13:17 . 2008-07-18 23:44 83,456 --a------ C:\Windows\System32\wudriver.dll 2008-09-17 13:17 . 2008-07-19 01:10 36,552 --a------ C:\Windows\System32\wups.dll 2008-09-17 13:17 . 2008-07-18 20:44 31,232 --a------ C:\Windows\System32\wuapp.exe 2008-09-17 00:59 . 2008-09-17 00:59 d-------- C:\Program Files\Apple Software Update 2008-09-17 00:58 . 2008-09-18 20:20 d----c--- C:\Windows\System32\DRVSTORE 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\Users\All Users\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\Program Files\iTunes 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\Program Files\iPod 2008-09-17 00:58 . 2008-04-17 13:12 107,368 --a------ C:\Windows\System32\GEARAspi.dll 2008-09-17 00:58 . 2008-04-17 13:12 15,464 --a------ C:\Windows\System32\drivers\GEARAspiWDM.sys 2008-09-17 00:56 . 2008-09-17 00:57 d-------- C:\Program Files\QuickTime

patrick letoile · Answer

oups il manquais une parti a mon rapport voila le rapport complet: ComboFix 08-09-20.05 - Patrick 2008-09-23 3:10:19.1 - NTFSx86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1027 [GMT -4:00] Lancé depuis: C:\Users\Patrick\Downloads\ComboFix.exe * Un nouveau point de restauration a été créé * Resident AV is active . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Users\Patrick\AppData\Roaming\.# . ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-23 au 2008-09-23 )))))))))))))))))))))))))))))))))))) . 2008-09-23 02:25 . 2008-09-23 02:25 d-------- C:\_OTMoveIt 2008-09-23 02:00 . 2008-09-23 02:00 d-------- C:\Program Files\Trend Micro 2008-09-23 01:39 . 2008-09-23 01:54 d-------- C:\Lop SD 2008-09-19 15:13 . 2008-09-19 15:13 d-------- C:\Windows\Sun 2008-09-18 20:22 . 2008-09-19 14:47 d-------- C:\Users\All Users\webex 2008-09-18 20:22 . 2008-09-19 14:47 d-------- C:\ProgramData\webex 2008-09-18 20:21 . 2008-09-18 20:22 d-------- C:\Users\All Users\Linksys 2008-09-18 20:21 . 2008-09-18 20:22 d-------- C:\ProgramData\Linksys 2008-09-18 20:20 . 2008-04-09 00:14 24,888 --a------ C:\Windows\System32\drivers\pnarp.sys 2008-09-18 20:19 . 2008-09-18 20:19 d-------- C:\Users\All Users\Pure Networks 2008-09-18 20:19 . 2008-09-18 20:19 d-------- C:\ProgramData\Pure Networks 2008-09-18 20:19 . 2008-09-18 20:19 d-------- C:\Program Files\Common Files\Pure Networks Shared 2008-09-18 20:19 . 2008-04-09 00:14 26,424 --a------ C:\Windows\System32\drivers\purendis.sys 2008-09-18 20:18 . 2008-09-18 20:19 d-------- C:\Program Files\Linksys 2008-09-18 14:45 . 2008-09-23 01:48 65,536 --------- C:\Windows\System32\Ikeext.etl 2008-09-18 14:09 . 2008-09-18 14:09 d-------- C:\Users\Patrick\AppData\Roaming\PeerNetworking 2008-09-17 13:18 . 2008-07-19 01:09 1,811,656 --a------ C:\Windows\System32\wuaueng.dll 2008-09-17 13:18 . 2008-07-18 23:44 1,524,736 --a------ C:\Windows\System32\wucltux.dll 2008-09-17 13:18 . 2008-07-19 01:10 53,448 --a------ C:\Windows\System32\wuauclt.exe 2008-09-17 13:18 . 2008-07-19 01:10 45,768 --a------ C:\Windows\System32\wups2.dll 2008-09-17 13:17 . 2008-07-19 01:09 563,912 --a------ C:\Windows\System32\wuapi.dll 2008-09-17 13:17 . 2008-07-18 22:08 163,904 --a------ C:\Windows\System32\wuwebv.dll 2008-09-17 13:17 . 2008-07-18 23:44 83,456 --a------ C:\Windows\System32\wudriver.dll 2008-09-17 13:17 . 2008-07-19 01:10 36,552 --a------ C:\Windows\System32\wups.dll 2008-09-17 13:17 . 2008-07-18 20:44 31,232 --a------ C:\Windows\System32\wuapp.exe 2008-09-17 00:59 . 2008-09-17 00:59 d-------- C:\Program Files\Apple Software Update 2008-09-17 00:58 . 2008-09-18 20:20 d----c--- C:\Windows\System32\DRVSTORE 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\Users\All Users\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\Program Files\iTunes 2008-09-17 00:58 . 2008-09-17 00:58 d-------- C:\Program Files\iPod 2008-09-17 00:58 . 2008-04-17 13:12 107,368 --a------ C:\Windows\System32\GEARAspi.dll 2008-09-17 00:58 . 2008-04-17 13:12 15,464 --a------ C:\Windows\System32\drivers\GEARAspiWDM.sys 2008-09-17 00:56 . 2008-09-17 00:57 d-------- C:\Program Files\QuickTime 2008-09-17 00:52 . 2008-09-17 00:52 d-------- C:\Program Files\Safari 2008-09-17 00:52 . 2008-09-17 00:52 d-------- C:\Program Files\Bonjour 2008-09-09 19:20 . 2008-07-30 21:13 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll 2008-09-09 19:20 . 2008-08-01 21:01 625,152 --a------ C:\Windows\System32\drivers\dxgkrnl.sys 2008-09-09 19:20 . 2008-06-25 23:29 565,248 --a------ C:\Windows\System32\emdmgmt.dll 2008-09-09 19:20 . 2008-06-25 23:29 303,616 --a------ C:\Windows\System32\wmpeffects.dll 2008-09-09 19:20 . 2008-05-08 15:21 211,968 --a------ C:\Windows\System32\drivers\mrxsmb10.sys 2008-09-09 19:20 . 2008-05-19 22:07 148,480 --a------ C:\Windows\System32\drivers wifi.sys 2008-09-09 19:20 . 2008-06-25 23:29 45,056 --a------ C:\Windows\System32\dataclen.dll 2008-09-09 19:20 . 2008-08-01 23:26 36,864 --a------ C:\Windows\System32\cdd.dll 2008-09-09 19:20 . 2008-07-30 23:32 28,160 --a------ C:\Windows\System32\Apphlpdm.dll 2008-09-09 00:56 . 2008-09-09 00:56 d-------- C:\Users\Patrick\AppData\Roaming\Malwarebytes 2008-09-09 00:56 . 2008-09-09 00:56 d-------- C:\Users\All Users\Malwarebytes 2008-09-09 00:56 . 2008-09-09 00:56 d-------- C:\ProgramData\Malwarebytes 2008-09-09 00:55 . 2008-09-09 00:55 d-------- C:\Users\Patrick\AppData\Roaming\Download Manager 2008-09-08 13:28 . 2008-09-08 13:28 0 --a------ C:\Windows sreg.dat 2008-09-08 12:24 . 2008-09-08 12:24 d-------- C:\Program Files\Microsoft Silverlight 2008-09-07 16:42 . 2008-09-07 16:42 d-------- C:\Users\Patrick\Option 2008-09-07 14:25 . 2008-09-07 23:59 d-------- C:\Users\All Users\Spybot - Search & Destroy 2008-09-07 14:25 . 2008-09-07 23:59 d-------- C:\ProgramData\Spybot - Search & Destroy 2008-09-07 14:25 . 2008-09-07 22:21 d-------- C:\Program Files\Spybot - Search & Destroy 2008-09-07 13:15 . 2008-09-07 13:15 d-------- C:\Users\All Users\Messenger Plus! 2008-09-07 13:15 . 2008-09-07 13:15 d-------- C:\ProgramData\Messenger Plus! 2008-09-07 13:11 . 2008-09-07 13:13 d-------- C:\Users\All Users\Poke admin tons bike 2008-09-07 13:11 . 2008-09-19 13:37 d-------- C:\Users\All Users\LongAmenSixth 2008-09-07 13:11 . 2008-09-07 13:13 d-------- C:\ProgramData\Poke admin tons bike 2008-09-07 13:11 . 2008-09-19 13:37 d-------- C:\ProgramData\LongAmenSixth 2008-09-07 13:10 . 2008-09-07 13:12 d-------- C:\Program Files\Messenger Plus! Live 2008-09-06 18:12 . 2008-09-06 18:12 d-------- C:\EGIS_Drive 2008-09-06 17:35 . 2008-09-22 20:16 d-------- C:\Users\Patrick\AppData\Roaming\LimeWire 2008-09-06 17:15 . 2008-09-13 12:57 d-a------ C:\Users\All Users\TEMP 2008-09-06 17:15 . 2008-09-13 12:57 d-a------ C:\ProgramData\TEMP 2008-09-06 17:03 . 2008-09-17 14:04 d-------- C:\Users\Patrick\AppData\Roaming\Apple Computer 2008-09-06 17:02 . 2008-09-17 00:58 d-------- C:\Users\All Users\Apple Computer 2008-09-06 17:02 . 2008-09-17 00:58 d-------- C:\ProgramData\Apple Computer 2008-09-06 17:01 . 2008-09-06 17:01 d-------- C:\Users\All Users\Apple 2008-09-06 17:01 . 2008-09-06 17:01 d-------- C:\ProgramData\Apple 2008-09-06 17:01 . 2008-09-17 00:56 d-------- C:\Program Files\Common Files\Apple 2008-09-06 16:50 . 2008-09-06 16:50 d-------- C:\Program Files\BitComet 2008-09-06 16:50 . 2008-09-14 18:04 d-------- C:\Downloads 2008-09-06 16:38 . 2008-09-18 20:21 d-------- C:\Program Files\Java 2008-09-06 16:37 . 2008-09-06 16:37 d-------- C:\Program Files\Common Files\Java 2008-09-06 16:35 . 2008-09-06 16:35 d-------- C:\Program Files\LimeWire 2008-09-06 16:19 . 2008-09-06 16:19 d-------- C:\Program Files\Microsoft SQL Server Compact Edition 2008-09-06 16:19 . 2006-11-29 13:06 3,426,072 --a------ C:\Windows\System32\d3dx9_32.dll 2008-09-06 16:15 . 2008-09-06 16:34 d-------- C:\Program Files\Windows Live 2008-09-06 16:15 . 2008-09-06 16:17 d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2008-09-06 16:14 . 2008-09-06 16:14 d-------- C:\Users\All Users\WLInstaller 2008-09-06 16:14 . 2008-09-06 16:14 d-------- C:\ProgramData\WLInstaller 2008-09-06 16:05 . 2008-09-06 16:06 d-------- C:\Users\Patrick\AppData\Roaming\eSobi 2008-09-06 16:03 . 2008-09-06 16:03 d-------- C:\Users\Patrick\AppData\Roaming\CyberLink 2008-09-06 15:51 . 2008-07-15 21:32 2,048 --a------ C:\Windows\System32 zres.dll 2008-09-06 15:45 . 2008-09-06 15:45 d-------- C:\Program Files\MSXML 4.0 2008-09-06 15:42 . 2008-09-06 15:42 d-------- C:\Users\Patrick\AppData\Roaming\Yahoo! 2008-09-06 15:42 . 2008-09-06 15:42 d-------- C:\Users\All Users\Yahoo! Companion 2008-09-06 15:42 . 2008-09-06 15:42 d-------- C:\ProgramData\Yahoo! Companion 2008-09-06 15:37 . 2008-09-06 15:37 d-------- C:\Windows\Acer_Wide 2008-09-06 15:37 . 2008-09-06 15:41 d-------- C:\Windows\Acer_Normal 2008-09-06 15:37 . 2008-09-06 15:37 d-------- C:\Program Files\Acer Incorporated 2008-09-06 15:37 . 2006-10-19 10:00 187,392 --a------ C:\Windows\Acer(Wide).scr 2008-09-06 15:37 . 2006-10-19 10:00 187,392 --a------ C:\Windows\Acer(Normal).scr 2008-09-06 15:37 . 2006-11-03 16:23 44 --a------ C:\Windows\Acer(Normal).ini 2008-09-06 15:37 . 2006-11-02 16:38 42 --a------ C:\Windows\Acer(Wide).ini 2008-09-06 15:29 . 2007-06-26 20:06 262,200 --a------ C:\Windows\System32\hcwpnp32_priv.dll 2008-09-06 15:29 . 2007-06-26 20:06 262,200 --a------ C:\Windows\System32\hcwpnp32.dll 2008-09-06 15:29 . 2007-05-15 16:46 98,360 --a------ C:\Windows\System32\hcwi2c32.dll 2008-09-06 15:29 . 2006-10-10 18:47 36,921 --a------ C:\Windows\System32\hcwutl32_priv.dll 2008-09-06 15:29 . 2006-10-10 18:47 36,921 --a------ C:\Windows\System32\hcwutl32.dll 2008-09-06 15:28 . 2008-09-23 01:48 0 --a------ C:\Windows\System32\LogConfigTemp.xml 2008-09-06 15:25 . 2008-09-06 15:25 d-------- C:\Program Files\DIFX 2008-09-06 15:25 . 2008-06-25 21:45 12,240,896 --a------ C:\Windows\System32\NlsLexicons0007.dll 2008-09-06 15:25 . 2008-06-25 21:45 2,644,480 --a------ C:\Windows\System32\NlsLexicons0009.dll 2008-09-06 15:25 . 2008-06-25 23:29 801,280 --a------ C:\Windows\System32\NaturalLanguage6.dll 2008-09-06 15:25 . 2008-04-23 00:42 428,544 --a------ C:\Windows\System32\EncDec.dll 2008-09-06 15:25 . 2008-04-23 00:42 293,376 --a------ C:\Windows\System32\psisdecd.dll 2008-09-06 15:25 . 2008-04-23 00:41 218,624 --a------ C:\Windows\System32\psisrndr.ax 2008-09-06 15:25 . 2008-04-23 00:41 57,856 --a------ C:\Windows\System32\MSDvbNP.ax 2008-09-06 15:24 . 2008-09-06 15:24 d-------- C:\Program Files\YUAN 2008-09-06 15:24 . 2008-02-22 01:05 110,136 --a------ C:\Windows\System32\drivers\ataport.sys 2008-09-06 15:24 . 2008-02-22 01:04 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys 2008-09-06 15:24 . 2008-02-22 01:03 21,560 --a------ C:\Windows\System32\drivers\atapi.sys 2008-09-06 15:24 . 2008-02-22 01:03 16,440 --a------ C:\Windows\System32\drivers\pciide.sys 2008-09-06 15:23 . 2008-04-26 04:25 3,600,952 --a------ C:\Windows\System32 tkrnlpa.exe 2008-09-06 15:23 . 2008-04-26 04:25 3,549,240 --a------ C:\Windows\System32 toskrnl.exe 2008-09-06 15:23 . 2008-04-26 04:08 1,314,816 --a------ C:\Windows\System32\quartz.dll 2008-09-06 15:23 . 2008-04-26 04:26 891,448 --a------ C:\Windows\System32\drivers cpip.sys 2008-09-06 15:23 . 2008-04-11 23:32 784,896 --a------ C:\Windows\System32 pcrt4.dll 2008-09-06 15:23 . 2008-06-18 23:31 361,984 --a------ C:\Windows\System32\IPSECSVC.DLL 2008-09-06 15:23 . 2008-04-04 21:21 72,192 --a------ C:\Windows\System32\drivers\pacer.sys 2008-09-06 15:23 . 2008-04-04 23:34 15,360 --a------ C:\Windows\System32\pacerprf.dll 2008-09-06 15:22 . 2008-03-08 00:21 1,695,744 --a------ C:\Windows\System32\gameux.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-19 00:19 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-18 13:54 --------- d-----w C:\Program Files\McAfee 2008-09-13 21:11 --------- d-----w C:\Program Files\SiteAdvisor 2008-09-10 00:00 --------- d-----w C:\ProgramData\Microsoft Help 2008-09-09 23:59 --------- d-----w C:\Program Files\Microsoft Works 2008-09-06 20:07 --------- d-----w C:\ProgramData\eSobi 2008-09-06 20:03 --------- d-----w C:\ProgramData\CyberLink 2008-09-06 19:54 --------- d-----w C:\Program Files\Windows Mail 2008-09-06 19:17 --------- d-----w C:\Program Files\Acer 2008-09-06 19:13 --------- d-sh--w C:\ProgramData\Modèles 2008-09-06 19:13 --------- d-sh--w C:\ProgramData\Menu Démarrer 2008-09-06 19:13 --------- d-sh--w C:\ProgramData\Favoris 2008-09-06 19:13 --------- d-sh--w C:\ProgramData\Bureau 2008-09-06 19:13 --------- d-sh--w C:\Program Files\Fichiers communs 2008-07-31 03:32 460,288 ----a-w C:\Windows\AppPatch\AcSpecfc.dll 2008-07-31 03:32 2,154,496 ----a-w C:\Windows\AppPatch\AcGenral.dll 2008-07-31 03:32 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll 2008-07-18 18:39 587,264 ----a-w C:\Windows\WLXPGSS.SCR 2008-06-27 04:15 827,392 ----a-w C:\Windows\System32\wininet.dll 2008-01-21 02:43 174 --sha-w C:\Program Files\desktop.ini . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 23:38 121392 --a------ C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-20 1233920] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-20 125952] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 1832272] "AdobeUpdater"="C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2007-03-01 2321600] "WindowsWelcomeCenter"="oobefldr.dll" [2008-01-20 C:\Windows\System32\oobefldr.dll] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-20 1008184] "Acer Empowering Technology Monitor"="C:\Program Files\Acer\Empowering Technology\SysMonitor.exe" [2008-04-25 319488] "EmpoweringTechnology"="C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe" [2008-04-25 319488] "mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-03 582992] "SiteAdvisor"="C:\Program Files\SiteAdvisor\6261\SiteAdv.exe" [2007-08-24 36640] "eDataSecurity Loader"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896] "PCMMediaSharing"="C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-10 40048] "BkupTray"="C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-02-25 34040] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440] "Acer Product Registration"="C:\Program Files\Acer\Acer Registration\ACE1.exe" [2007-11-26 3387392] "Acer Assist Launcher"="C:\Program Files\Acer\Acer Assist\launcher.exe" [2007-11-19 1261568] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-09-06 413696] "AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-09-03 111936] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-09-10 289576] "LELA"="C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" [2008-05-01 131072] "nmctxth"="C:\Program Files\Common Files\Pure Networks Shared\Platform mctxth.exe" [2008-04-09 648504] "RtHDVCpl"="RtHDVCpl.exe" [2008-01-29 C:\Windows\RtHDVCpl.exe] "Skytel"="Skytel.exe" [2007-11-20 C:\Windows\SkyTel.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "FilterAdministratorToken"= 1 (0x1) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.mkdmp3enc"= C:\PROGRA~1\ACERAR~1\ACERVI~1\Kernel\Burner\MKDMP3Enc.ACM [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UacDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{39483AF4-6277-434A-8C81-EEA2C2461D24}"= C:\Program Files\Acer Arcade Live\Acer Arcade Live Main Page\Acer Arcade Live.exe:Acer Arcade Live "{1C6DC239-351A-46F8-84E8-1616F9D79B91}"= Profile=Private|Profile=Public|C:\Program Files\Common Files\Mcafee\MNA\McNaSvc.exe:McAfee Network Agent "{8719D5E1-793E-4F9D-88DD-78C00BCDF5D7}"= C:\Program Files\Acer Arcade Live\Acer DV Magician\Acer DV Magician.exe:Acer DV Magician "{4D7E353C-F160-4D1E-B45D-FBAF340ED2ED}"= C:\Program Files\Acer Arcade Live\Acer SlideShow DVD\Acer SlideShow DVD.exe:Acer SlideShow DVD "{3F1AC602-C49C-4B07-AAC9-F573A6DE6DDB}"= C:\Program Files\Acer Arcade Live\Acer VideoMagician\Acer VideoMagician.exe:Acer VideoMagician "{366F7CF6-4D0E-4110-8DF8-4D6586841F01}"= C:\Program Files\Acer Arcade Live\Acer DVDivine\Acer DVDivine.exe:Acer DVDivine "{BD637667-56BC-43ED-9884-B9B585628618}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia\Acer HomeMedia.exe:Acer HomeMedia "{01FF3703-8975-429B-875A-AB12919BCBC8}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Acer HomeMedia Connect.exe:Acer HomeMedia Connect "{473DFFBF-F989-48BF-8937-0650C5A6DB8B}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.EXE:Acer HomeMedia Connect Service "{E2448DCF-9832-4280-BA97-EF6465FCD0C1}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Trial Creator\Acer HomeMedia Trial Creator.exe:Acer HomeMedia Trial Creator "{4BCF4F26-3C87-4277-8A74-8C44A0937428}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{F3999426-D4E3-4478-9A91-60B4A8E796FA}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{2FB1E4DC-655B-4D66-BC5F-35F864C3CAF8}"= UDP:C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe "{4801CD5B-F558-4808-9CD9-4DFB2F24AC55}"= TCP:C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe "{616AABAB-E816-4AAD-8898-F38B1255D749}"= UDP:C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe "{FD0915E6-9BAD-4C0E-98F8-71A181A5E87C}"= TCP:C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe "{EAC16019-5FFD-4479-9BD1-FF44C6A1B94C}"= UDP:C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe "{41BD57FF-08B7-4BBF-9C4D-841047B98225}"= TCP:C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe "{7B5D3F7D-F2E5-4ED6-9B8E-4F0635717CBA}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "TCP Query User{6581E08B-0A93-42F0-B5BF-15D3D08664D4}C:\program files\bitcomet\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client "UDP Query User{E5D45FFC-021E-407C-A8FE-B4F31C8FEB4F}C:\program files\bitcomet\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client "TCP Query User{7B67E92E-DF2A-41BE-AF97-C92190A1DA3A}C:\program files\limewire\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire "UDP Query User{AD162974-5759-4D60-BE1D-E28970AD2C33}C:\program files\limewire\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire "{7B5C6282-A721-4ACB-BF94-48588F9F0940}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour "{405647E8-C571-4FA8-BD0D-37CD26785ABA}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour "{1D234831-7739-46DF-8880-82C754CD63EF}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes "{25A78448-34D7-4CE6-A950-6221509E256A}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes "{E44598EF-4D95-452A-BD6C-96371DC03773}"= UDP:C:\Program Files\Common Files\Pure Networks Shared\Platform msrvc.exe:Pure Networks Platform Service "{1EDE1921-AC17-4FAA-BD2B-482A3A71790C}"= TCP:C:\Program Files\Common Files\Pure Networks Shared\Platform msrvc.exe:Pure Networks Platform Service "{7B624EFB-B43D-41A8-863B-8D93AF76E35C}"= TCP:67:0.0.0.0:DHCP Discovery Service [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "DoNotAllowExceptions"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "DoNotAllowExceptions"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe"= C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-29 7680] R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448] R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-02-25 21752] R2 ETService;Empowering Technology Service;C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-04-25 24576] R2 LinksysUpdater;Linksys Updater;C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe [2008-04-18 204800] R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-02-24 49152] R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-02-25 131072] R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-09 3533824] R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x86.sys [2007-12-27 298496] S4 ahcix86s;ahcix86s;C:\Windows\system32\drivers\ahcix86s.sys [2007-12-19 170000] S4 ErrDev;Microsoft Hardware Error Device Driver;C:\Windows\system32\drivers\errdev.sys [2008-01-20 6656] S4 MegaSR;MegaSR;C:\Windows\system32\drivers\megasr.sys [2008-01-20 386616] *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Contenu du dossier 'Tâches planifiées' . - - - - ORPHELINS SUPPRIMES - - - - HKLM-Run-eRecoveryService - (no file) . ------- Examen supplémentaire ------- . FireFox -: Profile - C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\oisui8g8.default\ FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins pitunes.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-23 03:12:54 Windows 6.0.6001 Service Pack 1 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- PROCESSUS: C:\Windows\Explorer.exe -> C:\Program Files\SiteAdvisor\6261\saHook.dll . Heure de fin: 2008-09-23 3:14:27 ComboFix-quarantined-files.txt 2008-09-23 07:14:22 Avant-CF: 84ÿ550ÿ189ÿ056 octets libres Après-CF: 84,312,576,000 octets libres 299 --- E O F --- 2008-09-10 00:02:34

Utilisateur anonyme · Answer

double-clique sur OTMoveIt.exe pour le lancer. 
Assure toi que la case Unregister Dll's and Ocx's soit bien cochée 
copie la liste qui se trouve en gras ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 

C:\Users\All Users\Poke admin tons bike 
C:\Users\All Users\Poke admin tons bike 
C:\ProgramData\Poke admin tons bike 


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 


* pour supprimer les outils/fix utilisés : 

Télécharge ToolsCleaner sur ton bureau. 
--> 
ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
http://pc-system.fr/ 
# Fais un clic droit sur toolcleaner
# Choisi executer en tant qu administrateur
# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

patrick letoile · Answer

voila le rapport de ot move it


C:\Users\All Users\Poke admin tons bike moved successfully.
File/Folder C:\Users\All Users\Poke admin tons bike not found.
File/Folder C:\ProgramData\Poke admin tons bike not found.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09232008_032945

patrick letoile · Answer

il me dise impossible de de crreer le fichier C:/Tcleaner.txt    Acces refuser

Utilisateur anonyme · Answer

Dis moi si hijackthis combofix etc ont disparu

patrick letoile · Answer

non sa me disais des truc comme erreur de suppresion a hijack alors je vienne de le desinstaller et je vais refaire le test pour voir

patrick letoile · Answer

je ne peu pas quitter avec le rapport alors je te poste ceci p-e que tu comprendra kelke chose la dedans car moi je ny comprend rien 


[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\Combofix: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\Users\Patrick\Downloads\ComboFix.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: ERREUR DE SUPPRESSION !!
C:\Users\Patrick\Downloads\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: ERREUR DE SUPPRESSION !!
C:\Combofix: ERREUR DE SUPPRESSION !!
C:\Program Files\Trend Micro\HijackThis: ERREUR DE SUPPRESSION !!

Utilisateur anonyme · Answer

Tu vas devoir supprimer les outils manuellement ou passer toolcneaner en mode san echec

voila @+

Problem de fenetre internet

30 réponses

Discussions similaires

Newsletters