Help contre fenetres intempestives
Résolu
lswhy
Messages postés
14
Statut
Membre
-
lswhy Messages postés 14 Statut Membre -
lswhy Messages postés 14 Statut Membre -
Bonjour,
le rapport hithisjack donne ça :
ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:43:18, on 24/09/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Users\lionel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BM1Q63GO\catchme[1].exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_~\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_~\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?e=1222187764734&h=30f01f52802e25ecfa997b9a68534ed0/&filename=jinstall-6u7-windows-i586-jc.cab
O16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} - http://www.trendsecure.com/easy_install/_activex/fr/TSEasyInstallX.CAB
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
le rapport hithisjack donne ça :
ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:43:18, on 24/09/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Users\lionel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BM1Q63GO\catchme[1].exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_~\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_~\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?e=1222187764734&h=30f01f52802e25ecfa997b9a68534ed0/&filename=jinstall-6u7-windows-i586-jc.cab
O16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} - http://www.trendsecure.com/easy_install/_activex/fr/TSEasyInstallX.CAB
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
A voir également:
- Help contre fenetres intempestives
- Fermer toutes les fenetres windows - Guide
- Afficher toutes les fenetres ouvertes windows 11 - Guide
- Ouvrir deux fenetres windows - Guide
- Des fenêtres s'ouvrent toutes seules ✓ - Forum Virus
- Mon pc ouvre des fenetres tout seul ✓ - Forum Antivirus
21 réponses
déjà traiter dans le forum regarde. http://www.commentcamarche.net/forum/affich 8558416 fenetres intempestives
j'ai le scan lopS&D qui donne ça :
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 24/09/2008| 9:50 )
[ UAC => 0 ]
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[15/08/2008|18:20] C:\Users\lionel\AppData\Local\live-player
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|09:48] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|09:49] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|09:49] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[15/08/2008|18:21] C:\Program Files\Live-Player
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 71 Processes )
iexplore.exe ~ [PID:2216]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[2].txt
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 09:50:18
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 4
--------------------\\ Recherche d'autres infections
C:\Program Files\Live-Player
C:\Program Files\Live-Player\data
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\skins
C:\Program Files\Live-Player\sqlite3.dll
C:\Program Files\Live-Player\uninst.exe
C:\Users\lionel\AppData\Local\live-player
C:\Users\lionel\AppData\Local\live-player\flv.swf
C:\Users\lionel\AppData\Local\live-player\liveplayer.s3db
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:17][D:4]-> C:\Users\lionel\AppData\Local\Temp
[F:163][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2724][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
--------------------\\ Fin du rapport a 9:53:05
[ UAC => 1 ]
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 24/09/2008| 9:50 )
[ UAC => 0 ]
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[15/08/2008|18:20] C:\Users\lionel\AppData\Local\live-player
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|09:48] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|09:49] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|09:49] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[15/08/2008|18:21] C:\Program Files\Live-Player
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 71 Processes )
iexplore.exe ~ [PID:2216]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[2].txt
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 09:50:18
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 4
--------------------\\ Recherche d'autres infections
C:\Program Files\Live-Player
C:\Program Files\Live-Player\data
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\skins
C:\Program Files\Live-Player\sqlite3.dll
C:\Program Files\Live-Player\uninst.exe
C:\Users\lionel\AppData\Local\live-player
C:\Users\lionel\AppData\Local\live-player\flv.swf
C:\Users\lionel\AppData\Local\live-player\liveplayer.s3db
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Conditions g‚n‚rales.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Confidentialit‚.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\D‚sinstaller.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Live-Player.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Live-Player\Website.url
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:17][D:4]-> C:\Users\lionel\AppData\Local\Temp
[F:163][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2724][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
--------------------\\ Fin du rapport a 9:53:05
[ UAC => 1 ]
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
le rapport donne ça :
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 24/09/2008|10:05 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|10:01] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 71 Processes )
iexplore.exe ~ [PID:5108]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[1].txt
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 10:05:39
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\4BEF7F83-000032E4.eml:OECustomProperty 189 bytes hidden from API
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 5
--------------------\\ Recherche d'autres infections
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:18][D:5]-> C:\Users\lionel\AppData\Local\Temp
[F:163][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2794][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/09/2008|10:08 - Option : [1]
--------------------\\ Fin du rapport a 10:08:22
[ UAC => 1 ]
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 24/09/2008|10:05 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|10:01] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 71 Processes )
iexplore.exe ~ [PID:5108]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[1].txt
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 10:05:39
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\4BEF7F83-000032E4.eml:OECustomProperty 189 bytes hidden from API
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 5
--------------------\\ Recherche d'autres infections
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:18][D:5]-> C:\Users\lionel\AppData\Local\Temp
[F:163][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2794][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/09/2008|10:08 - Option : [1]
--------------------\\ Fin du rapport a 10:08:22
[ UAC => 1 ]
fais la même chose que l'utilisateur "archet9" dis de faire, dans l lien que je t'ai envoyé, il faut lire un minimum!!!!
celui-ci ils expliquent comment faire!!!!!!!
http://www.commentcamarche.net/forum/affich 8558416 fenetres intempestives
http://www.commentcamarche.net/forum/affich 8558416 fenetres intempestives
lerapport lop
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 24/09/2008|10:05 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|10:01] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 71 Processes )
iexplore.exe ~ [PID:5108]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[1].txt
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 10:05:39
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\4BEF7F83-000032E4.eml:OECustomProperty 189 bytes hidden from API
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 5
--------------------\\ Recherche d'autres infections
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:18][D:5]-> C:\Users\lionel\AppData\Local\Temp
[F:163][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2794][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/09/2008|10:08 - Option : [1]
--------------------\\ Fin du rapport a 10:08:22
[ UAC => 1 ]
et now je fais quoi please ?
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 24/09/2008|10:05 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|10:01] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|10:05] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 71 Processes )
iexplore.exe ~ [PID:5108]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[1].txt
C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 10:05:39
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\4BEF7F83-000032E4.eml:OECustomProperty 189 bytes hidden from API
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 5
--------------------\\ Recherche d'autres infections
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:18][D:5]-> C:\Users\lionel\AppData\Local\Temp
[F:163][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:2794][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/09/2008|10:08 - Option : [1]
--------------------\\ Fin du rapport a 10:08:22
[ UAC => 1 ]
et now je fais quoi please ?
oui j'ai fait l"étape 2 qui donne ça
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 24/09/2008|10:36 )
[ UAC => 1 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[1].txt
Supprime! - C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[2].txt
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|10:36] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|10:35] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|10:36] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 70 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 10:36:21
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 4
--------------------\\ Recherche d'autres infections
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:11][D:4]-> C:\Users\lionel\AppData\Local\Temp
[F:162][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:3120][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/09/2008|10:08 - Option : [1]
3 - "C:\Lop SD\LopR_3.txt" - 24/09/2008|10:30 - Option : [1]
4 - "C:\Lop SD\LopR_4.txt" - 24/09/2008|10:39 - Option : [2]
--------------------\\ Fin du rapport a 10:39:22
[ UAC => 1 ]
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : PhoenixBIOS 4.0 Release 6.1
USER : lionel ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 143 Go Free : 101 Go
D:\ (Local Disk) - NTFS - Total : 5 Go Free : 1 Go
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 24/09/2008|10:36 )
[ UAC => 1 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@advertising[1].txt
Supprime! - C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies\lionel@adopt.euroclick[2].txt
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[09/09/2008|14:32] C:\Users\lionel\AppData\Local\Adobe
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Application Data
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\AtStart.txt
[08/09/2008|06:14] C:\Users\lionel\AppData\Local\d3d9caps.dat
[20/07/2008|21:17] C:\Users\lionel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14/09/2008|18:47] C:\Users\lionel\AppData\Local\DNA
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\DSwitch.txt
[14/09/2008|11:26] C:\Users\lionel\AppData\Local\eMule
[12/07/2008|13:27] C:\Users\lionel\AppData\Local\GDIPFONTCACHEV1.DAT
[23/08/2008|14:04] C:\Users\lionel\AppData\Local\Google
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Historique
[23/09/2008|22:22] C:\Users\lionel\AppData\Local\IconCache.db
[20/07/2008|22:54] C:\Users\lionel\AppData\Local\Last.fm
[08/09/2008|09:57] C:\Users\lionel\AppData\Local\Microsoft
[13/09/2008|08:43] C:\Users\lionel\AppData\Local\qmwsc.bat
[06/04/2008|22:14] C:\Users\lionel\AppData\Local\QSwitch.txt
[21/09/2008|20:43] C:\Users\lionel\AppData\Local\QuickPlay
[24/09/2008|10:36] C:\Users\lionel\AppData\Local\Temp
[06/04/2008|22:06] C:\Users\lionel\AppData\Local\Temporary Internet Files
[07/04/2008|18:23] C:\Users\lionel\AppData\Local\VirtualStore
[14/09/2008|12:17] C:\Users\lionel\AppData\Local\Wyzo
[24/09/2008|10:35] C:\Users\lionel\AppData\Local\yuqmsqi.dat
[17/09/2008|12:19] C:\Users\lionel\AppData\Local\yuqmsqi.exe
[15/09/2008|09:13] C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
[24/09/2008|10:36] C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[23/09/2008 11:17][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{7A5B5D39-F9E2-4F67-8B58-982115346F75}.job
[12/09/2008 21:37][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
[24/09/2008 08:42][--a------] C:\Windows\tasks\GlaryInitialize.job
[24/09/2008 08:42][--ah-----] C:\Windows\tasks\SA.DAT
[23/09/2008 22:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[14/04/2008|13:37] C:\ProgramData\Adobe
[06/04/2008|22:02] C:\ProgramData\Application Data
[06/04/2008|22:02] C:\ProgramData\Bureau
[10/08/2008|15:18] C:\ProgramData\CyberLink
[06/04/2008|22:02] C:\ProgramData\Documents
[14/09/2008|11:27] C:\ProgramData\eMule
[06/04/2008|22:02] C:\ProgramData\Favoris
[23/09/2008|18:45] C:\ProgramData\Google
[24/09/2008|08:56] C:\ProgramData\Google Updater
[15/06/2008|13:59] C:\ProgramData\Grisoft
[18/12/2006|17:29] C:\ProgramData\Hewlett-Packard
[16/09/2008|10:07] C:\ProgramData\HP
[18/12/2006|16:47] C:\ProgramData\InstallShield
[11/05/2008|19:49] C:\ProgramData\Last.fm
[16/09/2008|14:27] C:\ProgramData\Lavasoft
[08/04/2008|17:34] C:\ProgramData\Logitech
[23/09/2008|20:12] C:\ProgramData\Malwarebytes
[06/04/2008|22:02] C:\ProgramData\Menu D‚marrer
[14/09/2008|12:11] C:\ProgramData\Microsoft
[06/04/2008|22:02] C:\ProgramData\ModŠles
[11/04/2008|18:17] C:\ProgramData\NVIDIA
[20/07/2008|20:18] C:\ProgramData\Roxio
[20/07/2008|20:16] C:\ProgramData\Sonic
[19/09/2008|13:43] C:\ProgramData\Spybot - Search & Destroy
[21/09/2008|20:48] C:\ProgramData\Spyware Terminator
[31/07/2008|21:17] C:\ProgramData\Symantec
[07/04/2008|20:07] C:\ProgramData\TuneUp Software
[15/09/2008|11:08] C:\ProgramData\WindowsSearch
[08/09/2008|09:45] C:\ProgramData\WLInstaller
[08/09/2008|21:29] C:\ProgramData\wmp
--------------------\\ Listing des dossiers dans C:\Program Files
[11/07/2008|13:51] C:\Program Files\Adobe
[09/04/2008|14:18] C:\Program Files\Alwil Software
[20/09/2008|21:31] C:\Program Files\a-squared Free
[23/09/2008|13:19] C:\Program Files\BeClean
[13/07/2008|14:26] C:\Program Files\CCleaner
[24/08/2008|14:08] C:\Program Files\Common Files
[18/12/2006|16:36] C:\Program Files\CONEXANT
[05/08/2008|14:54] C:\Program Files\Driver-Soft
[15/09/2008|09:30] C:\Program Files\eMule
[06/04/2008|22:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/09/2008|17:48] C:\Program Files\Glary Utilities
[23/09/2008|18:45] C:\Program Files\Google
[20/09/2008|11:03] C:\Program Files\Grisoft
[02/09/2008|19:05] C:\Program Files\Hewlett-Packard
[18/12/2006|17:12] C:\Program Files\HP
[15/06/2008|13:52] C:\Program Files\inKline Global
[10/08/2008|14:38] C:\Program Files\InstallShield Installation Information
[22/09/2008|14:28] C:\Program Files\Internet Explorer
[23/09/2008|18:35] C:\Program Files\Java
[14/09/2008|18:07] C:\Program Files\KAZAA LITE TOOLS K++
[23/06/2008|20:14] C:\Program Files\Last.fm
[09/06/2008|14:27] C:\Program Files\Lavalys
[16/09/2008|14:25] C:\Program Files\Lavasoft
[15/09/2008|15:28] C:\Program Files\LimeWire
[10/08/2008|15:17] C:\Program Files\Logitech
[23/09/2008|20:12] C:\Program Files\Malwarebytes' Anti-Malware
[20/09/2008|11:10] C:\Program Files\Microsoft AntiSpyware
[09/04/2008|21:47] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[03/05/2008|13:46] C:\Program Files\Microsoft Office
[15/08/2008|18:06] C:\Program Files\Microsoft Silverlight
[08/09/2008|09:53] C:\Program Files\Microsoft SQL Server Compact Edition
[10/09/2008|09:13] C:\Program Files\Microsoft Works
[03/05/2008|13:44] C:\Program Files\Microsoft.NET
[11/04/2008|17:25] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[22/04/2008|12:47] C:\Program Files\MSECache
[08/04/2008|15:43] C:\Program Files\OpenOffice.org 2.4
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[23/06/2008|20:14] C:\Program Files\RegCleaner
[18/12/2006|16:56] C:\Program Files\Roxio
[18/12/2006|17:18] C:\Program Files\Services en ligne
[18/09/2008|09:46] C:\Program Files\Spybot - Search & Destroy
[22/09/2008|21:27] C:\Program Files\Spyware Terminator
[09/04/2008|15:58] C:\Program Files\Symantec
[18/12/2006|16:34] C:\Program Files\Synaptics
[22/09/2008|10:05] C:\Program Files\Trend Micro
[21/09/2008|20:31] C:\Program Files\Trojan Killer
[24/08/2008|14:10] C:\Program Files\TuneUp Utilities 2007
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[11/04/2008|17:25] C:\Program Files\Windows Calendar
[11/04/2008|17:25] C:\Program Files\Windows Collaboration
[11/04/2008|17:25] C:\Program Files\Windows Defender
[11/04/2008|17:25] C:\Program Files\Windows Journal
[09/09/2008|10:34] C:\Program Files\Windows Live
[14/08/2008|11:03] C:\Program Files\Windows Mail
[02/09/2008|19:05] C:\Program Files\Windows Media Player
[06/04/2008|22:02] C:\Program Files\Windows NT
[11/04/2008|17:25] C:\Program Files\Windows Photo Gallery
[11/04/2008|17:25] C:\Program Files\Windows Sidebar
[23/09/2008|09:52] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[14/04/2008|13:37] C:\Program Files\Common Files\Adobe
[03/05/2008|13:46] C:\Program Files\Common Files\DESIGNER
[18/12/2006|17:10] C:\Program Files\Common Files\InstallShield
[18/12/2006|17:28] C:\Program Files\Common Files\Java
[18/12/2006|17:20] C:\Program Files\Common Files\LightScribe
[02/05/2008|20:23] C:\Program Files\Common Files\logishrd
[15/08/2008|18:21] C:\Program Files\Common Files\microsoft shared
[18/12/2006|16:53] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[18/12/2006|16:54] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[18/12/2006|16:56] C:\Program Files\Common Files\SureThing Shared
[03/05/2008|13:45] C:\Program Files\Common Files\System
[09/04/2008|20:09] C:\Program Files\Common Files\WindowsLiveInstaller
[16/09/2008|14:22] C:\Program Files\Common Files\Wise Installation Wizard
--------------------\\ Process
( 70 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 10:36:21
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Users\lionel\AppData\Local\yuqmsqi.dat 9996 bytes
C:\Users\lionel\AppData\Local\yuqmsqi.exe 290816 bytes executable
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat 284105 bytes
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat 2122 bytes
scan completed successfully
hidden processes: 0
hidden files: 4
--------------------\\ Recherche d'autres infections
C:\Users\lionel\AppData\Local\yuqmsqi.dat
C:\Users\lionel\AppData\Local\yuqmsqi.exe
C:\Users\lionel\AppData\Local\yuqmsqi_nav.dat
C:\Users\lionel\AppData\Local\yuqmsqi_navps.dat
[b]==> EGDACCESS <==/b
--------------------\\ Cracks & Keygens ..
C:\Users\lionel\Documents\Downloads\_crack_ ya ho 51.zip
C:\Users\lionel\Documents\Downloads\Metadata\_crack_ ya ho 51.zip.xml
[F:11][D:4]-> C:\Users\lionel\AppData\Local\Temp
[F:162][D:0]-> C:\Users\lionel\AppData\Roaming\MICROS~1\Windows\Cookies
[F:3120][D:17]-> C:\Users\lionel\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 24/09/2008| 9:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 24/09/2008|10:08 - Option : [1]
3 - "C:\Lop SD\LopR_3.txt" - 24/09/2008|10:30 - Option : [1]
4 - "C:\Lop SD\LopR_4.txt" - 24/09/2008|10:39 - Option : [2]
--------------------\\ Fin du rapport a 10:39:22
[ UAC => 1 ]
je vais voir en renaviguant sur le net....par avance merci pour l'aide si c'est reglé , je te tiens au courant...thks..