Jai un virus nomé Le Cid!!
Fermé
stephus
-
30 sept. 2008 à 10:10
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 - 30 sept. 2008 à 16:37
toptitbal Messages postés 25709 Date d'inscription samedi 8 juillet 2006 Statut Contributeur sécurité Dernière intervention 4 mars 2010 - 30 sept. 2008 à 16:37
A voir également:
- Jai un virus nomé Le Cid!!
- Youtu.be virus - Accueil - Guide virus
- Svchost.exe virus - Guide
- Operagxsetup virus ✓ - Forum Virus
- Impossible de terminer l'opération car le fichier contient un virus - Forum Virus
- Faux message virus ordinateur - Accueil - Arnaque
8 réponses
Voila le rappor !!
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Version 1.00
USER : station ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1098 [VPS 080619-0] 4.7.1098 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 76 Go Free : 38 Go
D:\ (CD or DVD)
Z:\ (Disque réseau) - NTFS - Total : 76 Go Free : 13 Go
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 30/09/2008|10:49 )
--------------------\\ Listing des dossiers dans APPLIC~1
[18/10/2005|16:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/04/2008|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[11/05/2006|13:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/12/2006|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7(2)
[13/08/2008|09:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[15/10/2007|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ChinMagsRdrLies
[23/07/2008|08:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
[14/03/2008|11:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft(2)
[28/08/2008|09:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[28/08/2008|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[25/02/2008|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[12/06/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/09/2008|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/08/2006|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[11/10/2005|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/09/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[18/04/2006|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[20/09/2004|10:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/08/2006|12:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[07/07/2005|12:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/10/2007|15:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/12/2006|12:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[27/05/2008|12:06] C:\DOCUME~1\station\APPLIC~1\Adobe
[14/05/2008|15:41] C:\DOCUME~1\station\APPLIC~1\AdobeUM
[26/11/2007|17:09] C:\DOCUME~1\station\APPLIC~1\Apple Computer
[15/12/2005|15:03] C:\DOCUME~1\station\APPLIC~1\Brother
[30/07/2008|14:09] C:\DOCUME~1\station\APPLIC~1\DAEMON Tools
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[28/05/2008|14:07] C:\DOCUME~1\station\APPLIC~1\EoRezo
[05/02/2008|15:47] C:\DOCUME~1\station\APPLIC~1\Google
[24/10/2005|17:10] C:\DOCUME~1\station\APPLIC~1\Help
[20/09/2004|10:30] C:\DOCUME~1\station\APPLIC~1\Identities
[21/04/2008|14:28] C:\DOCUME~1\station\APPLIC~1\ItsLabel
[30/01/2007|17:27] C:\DOCUME~1\station\APPLIC~1\Leadertech
[02/12/2004|14:38] C:\DOCUME~1\station\APPLIC~1\Macromedia
[06/07/2006|14:11] C:\DOCUME~1\station\APPLIC~1\Media Player Classic
[14/09/2007|19:17] C:\DOCUME~1\station\APPLIC~1\Micro Application
[29/09/2008|14:30] C:\DOCUME~1\station\APPLIC~1\Microsoft
[03/11/2004|17:44] C:\DOCUME~1\station\APPLIC~1\MSNInstaller
[13/08/2008|10:03] C:\DOCUME~1\station\APPLIC~1\PEAK RECT MIX
[03/03/2005|18:07] C:\DOCUME~1\station\APPLIC~1\Sun
[04/07/2006|10:14] C:\DOCUME~1\station\APPLIC~1\U3
[05/08/2005|12:05] C:\DOCUME~1\station\APPLIC~1\vlc
[13/09/2006|10:53] C:\DOCUME~1\station\APPLIC~1\Windows Live Safety Center
[14/03/2008|12:29] C:\DOCUME~1\station\APPLIC~1\WinRAR
[10/08/2005|16:32] C:\DOCUME~1\station\APPLIC~1\XnView
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[30/09/2008 10:00][--ah-----] C:\WINDOWS\tasks\AC1C5B31918BCDE9.job
[30/09/2008 09:45][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( AC1C5B31918BCDE9.job )=( c:\docume~1\station\applic~1\peakre~1\Fordwindowbold.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[29/09/2008|15:16] C:\Program Files\Adobe
[26/09/2005|16:07] C:\Program Files\Ahead
[21/04/2008|13:22] C:\Program Files\Alwil Software
[11/04/2008|15:52] C:\Program Files\Avast4
[13/08/2008|09:21] C:\Program Files\Avira
[20/09/2004|10:54] C:\Program Files\AvRack
[10/09/2008|14:00] C:\Program Files\BankPerfect
[15/12/2005|14:42] C:\Program Files\Brother
[15/10/2007|14:35] C:\Program Files\CCleaner
[20/09/2004|10:21] C:\Program Files\ComPlus Applications
[13/09/2007|14:40] C:\Program Files\Dico TV5
[18/10/2005|16:30] C:\Program Files\Disneyland Resort Paris FR_AH0506
[28/10/2005|17:04] C:\Program Files\DivX
[09/03/2006|16:22] C:\Program Files\eMule
[28/05/2008|14:07] C:\Program Files\EoRezo
[21/04/2006|14:25] C:\Program Files\EZFace
[05/09/2008|12:11] C:\Program Files\Fichiers communs
[29/09/2008|14:32] C:\Program Files\FlashGet
[14/03/2008|12:07] C:\Program Files\Google
[18/10/2005|16:30] C:\Program Files\Grisoft(2)
[07/07/2005|12:04] C:\Program Files\Hewlett-Packard
[13/11/2006|10:10] C:\Program Files\HighMAT CD Writing Wizard
[05/08/2005|12:35] C:\Program Files\HT MPEG Encoder 7.0 Shareware
[28/08/2008|09:35] C:\Program Files\IncrediMail
[29/09/2008|14:51] C:\Program Files\InstallShield Installation Information
[20/09/2004|10:46] C:\Program Files\Intel
[13/08/2008|17:19] C:\Program Files\Internet Explorer
[15/10/2007|14:30] C:\Program Files\Java
[30/09/2008|09:36] C:\Program Files\Messenger
[29/09/2008|14:28] C:\Program Files\Messenger Plus! Live
[05/09/2006|14:18] C:\Program Files\MessengerPlus! 3
[14/09/2007|18:52] C:\Program Files\Micro Application
[22/09/2004|17:34] C:\Program Files\microsoft frontpage
[29/09/2008|15:21] C:\Program Files\Microsoft Office
[05/09/2008|12:13] C:\Program Files\Microsoft SQL Server Compact Edition
[18/04/2006|11:33] C:\Program Files\Microsoft Visual Studio
[15/09/2008|10:02] C:\Program Files\Microsoft Works
[30/09/2008|09:29] C:\Program Files\Movie Maker
[15/10/2007|15:53] C:\Program Files\MSBuild
[30/09/2008|09:29] C:\Program Files\msn
[20/09/2004|10:21] C:\Program Files\MSN Gaming Zone
[29/09/2008|15:23] C:\Program Files\MSN Messenger
[15/11/2006|13:01] C:\Program Files\MSXML 4.0
[17/10/2007|12:03] C:\Program Files\MSXML 6.0
[30/09/2008|09:21] C:\Program Files\NetMeeting
[18/04/2006|11:34] C:\Program Files\OfficeUpdate11
[20/09/2005|15:39] C:\Program Files\Online Services
[30/09/2008|09:21] C:\Program Files\Outlook Express
[25/10/2005|15:28] C:\Program Files\PDFCreator
[23/07/2008|08:55] C:\Program Files\PEAK RECT MIX
[14/09/2007|18:52] C:\Program Files\QuickTime
[20/09/2004|10:54] C:\Program Files\Realtek Sound Manager
[15/10/2007|15:48] C:\Program Files\Reference Assemblies
[15/12/2005|14:38] C:\Program Files\Scansoft
[20/09/2004|10:23] C:\Program Files\Services en ligne
[26/09/2008|13:42] C:\Program Files\Spybot - Search & Destroy
[20/09/2004|10:30] C:\Program Files\Uninstall Information
[18/04/2006|09:50] C:\Program Files\VideoLAN
[14/03/2008|11:54] C:\Program Files\WinAce
[30/09/2008|10:29] C:\Program Files\Windows Live
[17/09/2008|14:02] C:\Program Files\Windows Live Safety Center
[15/10/2007|15:46] C:\Program Files\Windows Media Connect 2
[30/09/2008|09:21] C:\Program Files\Windows Media Player
[30/09/2008|09:21] C:\Program Files\Windows NT
[20/09/2004|10:23] C:\Program Files\WindowsUpdate
[07/08/2008|10:39] C:\Program Files\WinRAR
[20/09/2004|10:25] C:\Program Files\xerox
[28/10/2005|17:04] C:\Program Files\XnView
[13/11/2006|10:06] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[15/10/2007|15:19] C:\Program Files\Fichiers communs\Adobe
[18/04/2006|11:33] C:\Program Files\Fichiers communs\DESIGNER
[29/08/2006|15:24] C:\Program Files\Fichiers communs\InstallShield
[03/03/2005|18:06] C:\Program Files\Fichiers communs\Java
[15/09/2008|10:02] C:\Program Files\Fichiers communs\Microsoft Shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\MSSoap
[20/09/2004|12:12] C:\Program Files\Fichiers communs\ODBC
[15/12/2005|14:38] C:\Program Files\Fichiers communs\scansoft shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\Services
[11/10/2004|17:27] C:\Program Files\Fichiers communs\Softwin
[20/09/2004|12:12] C:\Program Files\Fichiers communs\SpeechEngines
[09/06/2006|14:01] C:\Program Files\Fichiers communs\SWF Studio
[30/09/2008|09:21] C:\Program Files\Fichiers communs\System
[05/09/2008|12:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 41 Processes )
IEXPLORE.EXE ~ [PID:2644]
iexplore.exe ~ [PID:1892]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Hole That.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1
C:\DOCUME~1\station\APPLIC~1\peakre~1\auyaywtb.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\Bash Wave Option Live.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\fyllmbgc.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\mdwrpbbr.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\musowgzc.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\osnoocrt.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\oylkqojy.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\pdzwzcqg.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\uxunhlvl.exe
C:\Program Files\peakre~1
C:\WINDOWS\Tasks\AC1C5B31918BCDE9.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Dale Gpl"="C:\\DOCUME~1\\station\\APPLIC~1\\PEAKRE~1\\boltdeleteclose.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Stupid Data Dart Wave"="C:\\Documents and Settings\\All Users\\Application Data\\flag ace stupid data\\Hole That.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 9262 [ 70 ## added by CiD ]
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-30 10:50:57
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 34
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:34][D:9]-> C:\DOCUME~1\station\LOCALS~1\Temp
[F:61][D:0]-> C:\DOCUME~1\station\Cookies
[F:462][D:4]-> C:\DOCUME~1\station\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 30/09/2008|10:52 - Option : [1]
--------------------\\ Fin du rapport a 10:52:04
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Version 1.00
USER : station ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1098 [VPS 080619-0] 4.7.1098 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 76 Go Free : 38 Go
D:\ (CD or DVD)
Z:\ (Disque réseau) - NTFS - Total : 76 Go Free : 13 Go
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 30/09/2008|10:49 )
--------------------\\ Listing des dossiers dans APPLIC~1
[18/10/2005|16:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/04/2008|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[11/05/2006|13:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/12/2006|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7(2)
[13/08/2008|09:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[15/10/2007|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ChinMagsRdrLies
[23/07/2008|08:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
[14/03/2008|11:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft(2)
[28/08/2008|09:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[28/08/2008|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[25/02/2008|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[12/06/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/09/2008|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/08/2006|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[11/10/2005|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/09/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[18/04/2006|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[20/09/2004|10:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/08/2006|12:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[07/07/2005|12:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/10/2007|15:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/12/2006|12:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[27/05/2008|12:06] C:\DOCUME~1\station\APPLIC~1\Adobe
[14/05/2008|15:41] C:\DOCUME~1\station\APPLIC~1\AdobeUM
[26/11/2007|17:09] C:\DOCUME~1\station\APPLIC~1\Apple Computer
[15/12/2005|15:03] C:\DOCUME~1\station\APPLIC~1\Brother
[30/07/2008|14:09] C:\DOCUME~1\station\APPLIC~1\DAEMON Tools
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[28/05/2008|14:07] C:\DOCUME~1\station\APPLIC~1\EoRezo
[05/02/2008|15:47] C:\DOCUME~1\station\APPLIC~1\Google
[24/10/2005|17:10] C:\DOCUME~1\station\APPLIC~1\Help
[20/09/2004|10:30] C:\DOCUME~1\station\APPLIC~1\Identities
[21/04/2008|14:28] C:\DOCUME~1\station\APPLIC~1\ItsLabel
[30/01/2007|17:27] C:\DOCUME~1\station\APPLIC~1\Leadertech
[02/12/2004|14:38] C:\DOCUME~1\station\APPLIC~1\Macromedia
[06/07/2006|14:11] C:\DOCUME~1\station\APPLIC~1\Media Player Classic
[14/09/2007|19:17] C:\DOCUME~1\station\APPLIC~1\Micro Application
[29/09/2008|14:30] C:\DOCUME~1\station\APPLIC~1\Microsoft
[03/11/2004|17:44] C:\DOCUME~1\station\APPLIC~1\MSNInstaller
[13/08/2008|10:03] C:\DOCUME~1\station\APPLIC~1\PEAK RECT MIX
[03/03/2005|18:07] C:\DOCUME~1\station\APPLIC~1\Sun
[04/07/2006|10:14] C:\DOCUME~1\station\APPLIC~1\U3
[05/08/2005|12:05] C:\DOCUME~1\station\APPLIC~1\vlc
[13/09/2006|10:53] C:\DOCUME~1\station\APPLIC~1\Windows Live Safety Center
[14/03/2008|12:29] C:\DOCUME~1\station\APPLIC~1\WinRAR
[10/08/2005|16:32] C:\DOCUME~1\station\APPLIC~1\XnView
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[30/09/2008 10:00][--ah-----] C:\WINDOWS\tasks\AC1C5B31918BCDE9.job
[30/09/2008 09:45][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( AC1C5B31918BCDE9.job )=( c:\docume~1\station\applic~1\peakre~1\Fordwindowbold.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[29/09/2008|15:16] C:\Program Files\Adobe
[26/09/2005|16:07] C:\Program Files\Ahead
[21/04/2008|13:22] C:\Program Files\Alwil Software
[11/04/2008|15:52] C:\Program Files\Avast4
[13/08/2008|09:21] C:\Program Files\Avira
[20/09/2004|10:54] C:\Program Files\AvRack
[10/09/2008|14:00] C:\Program Files\BankPerfect
[15/12/2005|14:42] C:\Program Files\Brother
[15/10/2007|14:35] C:\Program Files\CCleaner
[20/09/2004|10:21] C:\Program Files\ComPlus Applications
[13/09/2007|14:40] C:\Program Files\Dico TV5
[18/10/2005|16:30] C:\Program Files\Disneyland Resort Paris FR_AH0506
[28/10/2005|17:04] C:\Program Files\DivX
[09/03/2006|16:22] C:\Program Files\eMule
[28/05/2008|14:07] C:\Program Files\EoRezo
[21/04/2006|14:25] C:\Program Files\EZFace
[05/09/2008|12:11] C:\Program Files\Fichiers communs
[29/09/2008|14:32] C:\Program Files\FlashGet
[14/03/2008|12:07] C:\Program Files\Google
[18/10/2005|16:30] C:\Program Files\Grisoft(2)
[07/07/2005|12:04] C:\Program Files\Hewlett-Packard
[13/11/2006|10:10] C:\Program Files\HighMAT CD Writing Wizard
[05/08/2005|12:35] C:\Program Files\HT MPEG Encoder 7.0 Shareware
[28/08/2008|09:35] C:\Program Files\IncrediMail
[29/09/2008|14:51] C:\Program Files\InstallShield Installation Information
[20/09/2004|10:46] C:\Program Files\Intel
[13/08/2008|17:19] C:\Program Files\Internet Explorer
[15/10/2007|14:30] C:\Program Files\Java
[30/09/2008|09:36] C:\Program Files\Messenger
[29/09/2008|14:28] C:\Program Files\Messenger Plus! Live
[05/09/2006|14:18] C:\Program Files\MessengerPlus! 3
[14/09/2007|18:52] C:\Program Files\Micro Application
[22/09/2004|17:34] C:\Program Files\microsoft frontpage
[29/09/2008|15:21] C:\Program Files\Microsoft Office
[05/09/2008|12:13] C:\Program Files\Microsoft SQL Server Compact Edition
[18/04/2006|11:33] C:\Program Files\Microsoft Visual Studio
[15/09/2008|10:02] C:\Program Files\Microsoft Works
[30/09/2008|09:29] C:\Program Files\Movie Maker
[15/10/2007|15:53] C:\Program Files\MSBuild
[30/09/2008|09:29] C:\Program Files\msn
[20/09/2004|10:21] C:\Program Files\MSN Gaming Zone
[29/09/2008|15:23] C:\Program Files\MSN Messenger
[15/11/2006|13:01] C:\Program Files\MSXML 4.0
[17/10/2007|12:03] C:\Program Files\MSXML 6.0
[30/09/2008|09:21] C:\Program Files\NetMeeting
[18/04/2006|11:34] C:\Program Files\OfficeUpdate11
[20/09/2005|15:39] C:\Program Files\Online Services
[30/09/2008|09:21] C:\Program Files\Outlook Express
[25/10/2005|15:28] C:\Program Files\PDFCreator
[23/07/2008|08:55] C:\Program Files\PEAK RECT MIX
[14/09/2007|18:52] C:\Program Files\QuickTime
[20/09/2004|10:54] C:\Program Files\Realtek Sound Manager
[15/10/2007|15:48] C:\Program Files\Reference Assemblies
[15/12/2005|14:38] C:\Program Files\Scansoft
[20/09/2004|10:23] C:\Program Files\Services en ligne
[26/09/2008|13:42] C:\Program Files\Spybot - Search & Destroy
[20/09/2004|10:30] C:\Program Files\Uninstall Information
[18/04/2006|09:50] C:\Program Files\VideoLAN
[14/03/2008|11:54] C:\Program Files\WinAce
[30/09/2008|10:29] C:\Program Files\Windows Live
[17/09/2008|14:02] C:\Program Files\Windows Live Safety Center
[15/10/2007|15:46] C:\Program Files\Windows Media Connect 2
[30/09/2008|09:21] C:\Program Files\Windows Media Player
[30/09/2008|09:21] C:\Program Files\Windows NT
[20/09/2004|10:23] C:\Program Files\WindowsUpdate
[07/08/2008|10:39] C:\Program Files\WinRAR
[20/09/2004|10:25] C:\Program Files\xerox
[28/10/2005|17:04] C:\Program Files\XnView
[13/11/2006|10:06] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[15/10/2007|15:19] C:\Program Files\Fichiers communs\Adobe
[18/04/2006|11:33] C:\Program Files\Fichiers communs\DESIGNER
[29/08/2006|15:24] C:\Program Files\Fichiers communs\InstallShield
[03/03/2005|18:06] C:\Program Files\Fichiers communs\Java
[15/09/2008|10:02] C:\Program Files\Fichiers communs\Microsoft Shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\MSSoap
[20/09/2004|12:12] C:\Program Files\Fichiers communs\ODBC
[15/12/2005|14:38] C:\Program Files\Fichiers communs\scansoft shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\Services
[11/10/2004|17:27] C:\Program Files\Fichiers communs\Softwin
[20/09/2004|12:12] C:\Program Files\Fichiers communs\SpeechEngines
[09/06/2006|14:01] C:\Program Files\Fichiers communs\SWF Studio
[30/09/2008|09:21] C:\Program Files\Fichiers communs\System
[05/09/2008|12:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 41 Processes )
IEXPLORE.EXE ~ [PID:2644]
iexplore.exe ~ [PID:1892]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Hole That.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1
C:\DOCUME~1\station\APPLIC~1\peakre~1\auyaywtb.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\Bash Wave Option Live.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\fyllmbgc.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\mdwrpbbr.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\musowgzc.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\osnoocrt.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\oylkqojy.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\pdzwzcqg.exe
C:\DOCUME~1\station\APPLIC~1\peakre~1\uxunhlvl.exe
C:\Program Files\peakre~1
C:\WINDOWS\Tasks\AC1C5B31918BCDE9.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Dale Gpl"="C:\\DOCUME~1\\station\\APPLIC~1\\PEAKRE~1\\boltdeleteclose.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Stupid Data Dart Wave"="C:\\Documents and Settings\\All Users\\Application Data\\flag ace stupid data\\Hole That.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 9262 [ 70 ## added by CiD ]
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-30 10:50:57
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 34
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:34][D:9]-> C:\DOCUME~1\station\LOCALS~1\Temp
[F:61][D:0]-> C:\DOCUME~1\station\Cookies
[F:462][D:4]-> C:\DOCUME~1\station\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 30/09/2008|10:52 - Option : [1]
--------------------\\ Fin du rapport a 10:52:04
Et voici le dernier rapport, j'ai eu du mal avec mon antivirus!!
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Version 1.00
USER : station ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1098 [VPS 080619-0] 4.7.1098 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 76 Go Free : 38 Go
D:\ (CD or DVD)
Z:\ (Disque réseau) - NTFS - Total : 76 Go Free : 13 Go
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 30/09/2008|11:09 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Hole That.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\auyaywtb.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\Bash Wave Option Live.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\fyllmbgc.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\mdwrpbbr.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\musowgzc.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\osnoocrt.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\oylkqojy.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\pdzwzcqg.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\uxunhlvl.exe
Supprime! - C:\WINDOWS\Tasks\AC1C5B31918BCDE9.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1
Supprime! - C:\Program Files\peakre~1
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[18/10/2005|16:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/04/2008|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[11/05/2006|13:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/12/2006|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7(2)
[13/08/2008|09:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[15/10/2007|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ChinMagsRdrLies
[14/03/2008|11:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft(2)
[28/08/2008|09:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[28/08/2008|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[25/02/2008|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[12/06/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/09/2008|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/08/2006|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[11/10/2005|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/09/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[18/04/2006|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[20/09/2004|10:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/08/2006|12:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[07/07/2005|12:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/10/2007|15:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/12/2006|12:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[27/05/2008|12:06] C:\DOCUME~1\station\APPLIC~1\Adobe
[14/05/2008|15:41] C:\DOCUME~1\station\APPLIC~1\AdobeUM
[26/11/2007|17:09] C:\DOCUME~1\station\APPLIC~1\Apple Computer
[15/12/2005|15:03] C:\DOCUME~1\station\APPLIC~1\Brother
[30/07/2008|14:09] C:\DOCUME~1\station\APPLIC~1\DAEMON Tools
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[28/05/2008|14:07] C:\DOCUME~1\station\APPLIC~1\EoRezo
[05/02/2008|15:47] C:\DOCUME~1\station\APPLIC~1\Google
[24/10/2005|17:10] C:\DOCUME~1\station\APPLIC~1\Help
[20/09/2004|10:30] C:\DOCUME~1\station\APPLIC~1\Identities
[21/04/2008|14:28] C:\DOCUME~1\station\APPLIC~1\ItsLabel
[30/01/2007|17:27] C:\DOCUME~1\station\APPLIC~1\Leadertech
[02/12/2004|14:38] C:\DOCUME~1\station\APPLIC~1\Macromedia
[06/07/2006|14:11] C:\DOCUME~1\station\APPLIC~1\Media Player Classic
[14/09/2007|19:17] C:\DOCUME~1\station\APPLIC~1\Micro Application
[29/09/2008|14:30] C:\DOCUME~1\station\APPLIC~1\Microsoft
[03/11/2004|17:44] C:\DOCUME~1\station\APPLIC~1\MSNInstaller
[03/03/2005|18:07] C:\DOCUME~1\station\APPLIC~1\Sun
[04/07/2006|10:14] C:\DOCUME~1\station\APPLIC~1\U3
[05/08/2005|12:05] C:\DOCUME~1\station\APPLIC~1\vlc
[13/09/2006|10:53] C:\DOCUME~1\station\APPLIC~1\Windows Live Safety Center
[14/03/2008|12:29] C:\DOCUME~1\station\APPLIC~1\WinRAR
[10/08/2005|16:32] C:\DOCUME~1\station\APPLIC~1\XnView
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[30/09/2008 09:45][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[29/09/2008|15:16] C:\Program Files\Adobe
[26/09/2005|16:07] C:\Program Files\Ahead
[21/04/2008|13:22] C:\Program Files\Alwil Software
[11/04/2008|15:52] C:\Program Files\Avast4
[13/08/2008|09:21] C:\Program Files\Avira
[20/09/2004|10:54] C:\Program Files\AvRack
[10/09/2008|14:00] C:\Program Files\BankPerfect
[15/12/2005|14:42] C:\Program Files\Brother
[15/10/2007|14:35] C:\Program Files\CCleaner
[20/09/2004|10:21] C:\Program Files\ComPlus Applications
[13/09/2007|14:40] C:\Program Files\Dico TV5
[18/10/2005|16:30] C:\Program Files\Disneyland Resort Paris FR_AH0506
[28/10/2005|17:04] C:\Program Files\DivX
[09/03/2006|16:22] C:\Program Files\eMule
[28/05/2008|14:07] C:\Program Files\EoRezo
[21/04/2006|14:25] C:\Program Files\EZFace
[05/09/2008|12:11] C:\Program Files\Fichiers communs
[29/09/2008|14:32] C:\Program Files\FlashGet
[14/03/2008|12:07] C:\Program Files\Google
[18/10/2005|16:30] C:\Program Files\Grisoft(2)
[07/07/2005|12:04] C:\Program Files\Hewlett-Packard
[13/11/2006|10:10] C:\Program Files\HighMAT CD Writing Wizard
[05/08/2005|12:35] C:\Program Files\HT MPEG Encoder 7.0 Shareware
[28/08/2008|09:35] C:\Program Files\IncrediMail
[29/09/2008|14:51] C:\Program Files\InstallShield Installation Information
[20/09/2004|10:46] C:\Program Files\Intel
[13/08/2008|17:19] C:\Program Files\Internet Explorer
[15/10/2007|14:30] C:\Program Files\Java
[30/09/2008|09:36] C:\Program Files\Messenger
[29/09/2008|14:28] C:\Program Files\Messenger Plus! Live
[05/09/2006|14:18] C:\Program Files\MessengerPlus! 3
[14/09/2007|18:52] C:\Program Files\Micro Application
[22/09/2004|17:34] C:\Program Files\microsoft frontpage
[29/09/2008|15:21] C:\Program Files\Microsoft Office
[05/09/2008|12:13] C:\Program Files\Microsoft SQL Server Compact Edition
[18/04/2006|11:33] C:\Program Files\Microsoft Visual Studio
[15/09/2008|10:02] C:\Program Files\Microsoft Works
[30/09/2008|09:29] C:\Program Files\Movie Maker
[15/10/2007|15:53] C:\Program Files\MSBuild
[30/09/2008|09:29] C:\Program Files\msn
[20/09/2004|10:21] C:\Program Files\MSN Gaming Zone
[29/09/2008|15:23] C:\Program Files\MSN Messenger
[15/11/2006|13:01] C:\Program Files\MSXML 4.0
[17/10/2007|12:03] C:\Program Files\MSXML 6.0
[30/09/2008|09:21] C:\Program Files\NetMeeting
[18/04/2006|11:34] C:\Program Files\OfficeUpdate11
[20/09/2005|15:39] C:\Program Files\Online Services
[30/09/2008|09:21] C:\Program Files\Outlook Express
[25/10/2005|15:28] C:\Program Files\PDFCreator
[14/09/2007|18:52] C:\Program Files\QuickTime
[20/09/2004|10:54] C:\Program Files\Realtek Sound Manager
[15/10/2007|15:48] C:\Program Files\Reference Assemblies
[15/12/2005|14:38] C:\Program Files\Scansoft
[20/09/2004|10:23] C:\Program Files\Services en ligne
[26/09/2008|13:42] C:\Program Files\Spybot - Search & Destroy
[20/09/2004|10:30] C:\Program Files\Uninstall Information
[18/04/2006|09:50] C:\Program Files\VideoLAN
[14/03/2008|11:54] C:\Program Files\WinAce
[30/09/2008|10:29] C:\Program Files\Windows Live
[17/09/2008|14:02] C:\Program Files\Windows Live Safety Center
[15/10/2007|15:46] C:\Program Files\Windows Media Connect 2
[30/09/2008|09:21] C:\Program Files\Windows Media Player
[30/09/2008|09:21] C:\Program Files\Windows NT
[20/09/2004|10:23] C:\Program Files\WindowsUpdate
[07/08/2008|10:39] C:\Program Files\WinRAR
[20/09/2004|10:25] C:\Program Files\xerox
[28/10/2005|17:04] C:\Program Files\XnView
[13/11/2006|10:06] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[15/10/2007|15:19] C:\Program Files\Fichiers communs\Adobe
[18/04/2006|11:33] C:\Program Files\Fichiers communs\DESIGNER
[29/08/2006|15:24] C:\Program Files\Fichiers communs\InstallShield
[03/03/2005|18:06] C:\Program Files\Fichiers communs\Java
[15/09/2008|10:02] C:\Program Files\Fichiers communs\Microsoft Shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\MSSoap
[20/09/2004|12:12] C:\Program Files\Fichiers communs\ODBC
[15/12/2005|14:38] C:\Program Files\Fichiers communs\scansoft shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\Services
[11/10/2004|17:27] C:\Program Files\Fichiers communs\Softwin
[20/09/2004|12:12] C:\Program Files\Fichiers communs\SpeechEngines
[09/06/2006|14:01] C:\Program Files\Fichiers communs\SWF Studio
[30/09/2008|09:21] C:\Program Files\Fichiers communs\System
[05/09/2008|12:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\station\Cookies\station@banner.cotedazurpalace[2].txt
C:\DOCUME~1\station\Cookies\station@cotedazurpalace[2].txt
C:\DOCUME~1\station\Cookies\station@www.cotedazurpalace[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-30 11:35:44
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 36
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:40][D:9]-> C:\DOCUME~1\station\LOCALS~1\Temp
[F:73][D:0]-> C:\DOCUME~1\station\Cookies
[F:780][D:4]-> C:\DOCUME~1\station\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 30/09/2008|10:52 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 30/09/2008|11:36 - Option : [2]
--------------------\\ Fin du rapport a 11:36:43
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Version 1.00
USER : station ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.7.1098 [VPS 080619-0] 4.7.1098 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 76 Go Free : 38 Go
D:\ (CD or DVD)
Z:\ (Disque réseau) - NTFS - Total : 76 Go Free : 13 Go
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 30/09/2008|11:09 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\Hole That.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\auyaywtb.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\Bash Wave Option Live.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\fyllmbgc.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\mdwrpbbr.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\musowgzc.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\osnoocrt.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\oylkqojy.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\pdzwzcqg.exe
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1\uxunhlvl.exe
Supprime! - C:\WINDOWS\Tasks\AC1C5B31918BCDE9.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
Supprime! - C:\DOCUME~1\station\APPLIC~1\peakre~1
Supprime! - C:\Program Files\peakre~1
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[18/10/2005|16:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[21/04/2008|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[11/05/2006|13:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[01/12/2006|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7(2)
[13/08/2008|09:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[15/10/2007|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ChinMagsRdrLies
[14/03/2008|11:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/10/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft(2)
[28/08/2008|09:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[28/08/2008|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[25/02/2008|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[12/06/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/09/2008|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[21/08/2006|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[11/10/2005|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/09/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[18/04/2006|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[20/09/2004|10:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/08/2006|12:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[07/07/2005|12:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[15/10/2007|15:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/12/2006|12:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[27/05/2008|12:06] C:\DOCUME~1\station\APPLIC~1\Adobe
[14/05/2008|15:41] C:\DOCUME~1\station\APPLIC~1\AdobeUM
[26/11/2007|17:09] C:\DOCUME~1\station\APPLIC~1\Apple Computer
[15/12/2005|15:03] C:\DOCUME~1\station\APPLIC~1\Brother
[30/07/2008|14:09] C:\DOCUME~1\station\APPLIC~1\DAEMON Tools
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[07/07/2005|12:04] C:\DOCUME~1\station\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
[28/05/2008|14:07] C:\DOCUME~1\station\APPLIC~1\EoRezo
[05/02/2008|15:47] C:\DOCUME~1\station\APPLIC~1\Google
[24/10/2005|17:10] C:\DOCUME~1\station\APPLIC~1\Help
[20/09/2004|10:30] C:\DOCUME~1\station\APPLIC~1\Identities
[21/04/2008|14:28] C:\DOCUME~1\station\APPLIC~1\ItsLabel
[30/01/2007|17:27] C:\DOCUME~1\station\APPLIC~1\Leadertech
[02/12/2004|14:38] C:\DOCUME~1\station\APPLIC~1\Macromedia
[06/07/2006|14:11] C:\DOCUME~1\station\APPLIC~1\Media Player Classic
[14/09/2007|19:17] C:\DOCUME~1\station\APPLIC~1\Micro Application
[29/09/2008|14:30] C:\DOCUME~1\station\APPLIC~1\Microsoft
[03/11/2004|17:44] C:\DOCUME~1\station\APPLIC~1\MSNInstaller
[03/03/2005|18:07] C:\DOCUME~1\station\APPLIC~1\Sun
[04/07/2006|10:14] C:\DOCUME~1\station\APPLIC~1\U3
[05/08/2005|12:05] C:\DOCUME~1\station\APPLIC~1\vlc
[13/09/2006|10:53] C:\DOCUME~1\station\APPLIC~1\Windows Live Safety Center
[14/03/2008|12:29] C:\DOCUME~1\station\APPLIC~1\WinRAR
[10/08/2005|16:32] C:\DOCUME~1\station\APPLIC~1\XnView
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[30/09/2008 09:45][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[29/09/2008|15:16] C:\Program Files\Adobe
[26/09/2005|16:07] C:\Program Files\Ahead
[21/04/2008|13:22] C:\Program Files\Alwil Software
[11/04/2008|15:52] C:\Program Files\Avast4
[13/08/2008|09:21] C:\Program Files\Avira
[20/09/2004|10:54] C:\Program Files\AvRack
[10/09/2008|14:00] C:\Program Files\BankPerfect
[15/12/2005|14:42] C:\Program Files\Brother
[15/10/2007|14:35] C:\Program Files\CCleaner
[20/09/2004|10:21] C:\Program Files\ComPlus Applications
[13/09/2007|14:40] C:\Program Files\Dico TV5
[18/10/2005|16:30] C:\Program Files\Disneyland Resort Paris FR_AH0506
[28/10/2005|17:04] C:\Program Files\DivX
[09/03/2006|16:22] C:\Program Files\eMule
[28/05/2008|14:07] C:\Program Files\EoRezo
[21/04/2006|14:25] C:\Program Files\EZFace
[05/09/2008|12:11] C:\Program Files\Fichiers communs
[29/09/2008|14:32] C:\Program Files\FlashGet
[14/03/2008|12:07] C:\Program Files\Google
[18/10/2005|16:30] C:\Program Files\Grisoft(2)
[07/07/2005|12:04] C:\Program Files\Hewlett-Packard
[13/11/2006|10:10] C:\Program Files\HighMAT CD Writing Wizard
[05/08/2005|12:35] C:\Program Files\HT MPEG Encoder 7.0 Shareware
[28/08/2008|09:35] C:\Program Files\IncrediMail
[29/09/2008|14:51] C:\Program Files\InstallShield Installation Information
[20/09/2004|10:46] C:\Program Files\Intel
[13/08/2008|17:19] C:\Program Files\Internet Explorer
[15/10/2007|14:30] C:\Program Files\Java
[30/09/2008|09:36] C:\Program Files\Messenger
[29/09/2008|14:28] C:\Program Files\Messenger Plus! Live
[05/09/2006|14:18] C:\Program Files\MessengerPlus! 3
[14/09/2007|18:52] C:\Program Files\Micro Application
[22/09/2004|17:34] C:\Program Files\microsoft frontpage
[29/09/2008|15:21] C:\Program Files\Microsoft Office
[05/09/2008|12:13] C:\Program Files\Microsoft SQL Server Compact Edition
[18/04/2006|11:33] C:\Program Files\Microsoft Visual Studio
[15/09/2008|10:02] C:\Program Files\Microsoft Works
[30/09/2008|09:29] C:\Program Files\Movie Maker
[15/10/2007|15:53] C:\Program Files\MSBuild
[30/09/2008|09:29] C:\Program Files\msn
[20/09/2004|10:21] C:\Program Files\MSN Gaming Zone
[29/09/2008|15:23] C:\Program Files\MSN Messenger
[15/11/2006|13:01] C:\Program Files\MSXML 4.0
[17/10/2007|12:03] C:\Program Files\MSXML 6.0
[30/09/2008|09:21] C:\Program Files\NetMeeting
[18/04/2006|11:34] C:\Program Files\OfficeUpdate11
[20/09/2005|15:39] C:\Program Files\Online Services
[30/09/2008|09:21] C:\Program Files\Outlook Express
[25/10/2005|15:28] C:\Program Files\PDFCreator
[14/09/2007|18:52] C:\Program Files\QuickTime
[20/09/2004|10:54] C:\Program Files\Realtek Sound Manager
[15/10/2007|15:48] C:\Program Files\Reference Assemblies
[15/12/2005|14:38] C:\Program Files\Scansoft
[20/09/2004|10:23] C:\Program Files\Services en ligne
[26/09/2008|13:42] C:\Program Files\Spybot - Search & Destroy
[20/09/2004|10:30] C:\Program Files\Uninstall Information
[18/04/2006|09:50] C:\Program Files\VideoLAN
[14/03/2008|11:54] C:\Program Files\WinAce
[30/09/2008|10:29] C:\Program Files\Windows Live
[17/09/2008|14:02] C:\Program Files\Windows Live Safety Center
[15/10/2007|15:46] C:\Program Files\Windows Media Connect 2
[30/09/2008|09:21] C:\Program Files\Windows Media Player
[30/09/2008|09:21] C:\Program Files\Windows NT
[20/09/2004|10:23] C:\Program Files\WindowsUpdate
[07/08/2008|10:39] C:\Program Files\WinRAR
[20/09/2004|10:25] C:\Program Files\xerox
[28/10/2005|17:04] C:\Program Files\XnView
[13/11/2006|10:06] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[15/10/2007|15:19] C:\Program Files\Fichiers communs\Adobe
[18/04/2006|11:33] C:\Program Files\Fichiers communs\DESIGNER
[29/08/2006|15:24] C:\Program Files\Fichiers communs\InstallShield
[03/03/2005|18:06] C:\Program Files\Fichiers communs\Java
[15/09/2008|10:02] C:\Program Files\Fichiers communs\Microsoft Shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\MSSoap
[20/09/2004|12:12] C:\Program Files\Fichiers communs\ODBC
[15/12/2005|14:38] C:\Program Files\Fichiers communs\scansoft shared
[20/09/2004|10:22] C:\Program Files\Fichiers communs\Services
[11/10/2004|17:27] C:\Program Files\Fichiers communs\Softwin
[20/09/2004|12:12] C:\Program Files\Fichiers communs\SpeechEngines
[09/06/2006|14:01] C:\Program Files\Fichiers communs\SWF Studio
[30/09/2008|09:21] C:\Program Files\Fichiers communs\System
[05/09/2008|12:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\station\Cookies\station@banner.cotedazurpalace[2].txt
C:\DOCUME~1\station\Cookies\station@cotedazurpalace[2].txt
C:\DOCUME~1\station\Cookies\station@www.cotedazurpalace[1].txt
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-30 11:35:44
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 36
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:40][D:9]-> C:\DOCUME~1\station\LOCALS~1\Temp
[F:73][D:0]-> C:\DOCUME~1\station\Cookies
[F:780][D:4]-> C:\DOCUME~1\station\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 30/09/2008|10:52 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 30/09/2008|11:36 - Option : [2]
--------------------\\ Fin du rapport a 11:36:43
toptitbal
Messages postés
25709
Date d'inscription
samedi 8 juillet 2006
Statut
Contributeur sécurité
Dernière intervention
4 mars 2010
2 231
30 sept. 2008 à 10:12
30 sept. 2008 à 10:12
Bonjour
Télécharge Lop S&D.exe sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
Tutorial ( aide ) : http://bibou0007.com/outils-specifiques-f78/tuto-lop-sd-t956.htm
Télécharge Lop S&D.exe sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
Tutorial ( aide ) : http://bibou0007.com/outils-specifiques-f78/tuto-lop-sd-t956.htm
toptitbal
Messages postés
25709
Date d'inscription
samedi 8 juillet 2006
Statut
Contributeur sécurité
Dernière intervention
4 mars 2010
2 231
30 sept. 2008 à 11:02
30 sept. 2008 à 11:02
Relance Lop S&D
* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)
* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
toptitbal
Messages postés
25709
Date d'inscription
samedi 8 juillet 2006
Statut
Contributeur sécurité
Dernière intervention
4 mars 2010
2 231
30 sept. 2008 à 11:42
30 sept. 2008 à 11:42
OK, refais un Hijackthis stp
Re!!!
Apparement, il semblerait que je n'ai plus de probleme, étant donné qu'avant il apparaissait toute les 5 minutes, mais bon la derniere fois il a disparue pendant une semaine et il est revenu, Le Salaud!!! En tout en regardant dans mes programmes j'ai trouvé "messenger plus Le Cid" alors j'ai tout de suite desinstaller, et j'ai bien nettoyer mon ordi avec C clean, voila j'espere qu'au moment ou je te parle il n'est pas revenue.. je verifie. C Bon!!!
En tout cas merci beaucoup, pour tout tes conseils, parcke c mon ordi de boulot, et franchement c'était grillé quand parfois une fenetre musicale s'ouvrait pour un site de rencontre avec la musique a fond!!!
Voila merci beaucoup Toptibal
Apparement, il semblerait que je n'ai plus de probleme, étant donné qu'avant il apparaissait toute les 5 minutes, mais bon la derniere fois il a disparue pendant une semaine et il est revenu, Le Salaud!!! En tout en regardant dans mes programmes j'ai trouvé "messenger plus Le Cid" alors j'ai tout de suite desinstaller, et j'ai bien nettoyer mon ordi avec C clean, voila j'espere qu'au moment ou je te parle il n'est pas revenue.. je verifie. C Bon!!!
En tout cas merci beaucoup, pour tout tes conseils, parcke c mon ordi de boulot, et franchement c'était grillé quand parfois une fenetre musicale s'ouvrait pour un site de rencontre avec la musique a fond!!!
Voila merci beaucoup Toptibal
noctambule28
Messages postés
31937
Date d'inscription
samedi 12 mai 2007
Statut
Webmaster
Dernière intervention
13 février 2022
2 858
30 sept. 2008 à 14:01
30 sept. 2008 à 14:01
Salut
il est resté coincé ;)
Logfile of HijackThis v1.99.1
Scan saved at 11:59:50, on 30/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Windows Live\installer\WLSetupSvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\livecall.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\rsvp.exe
C:\APIBAT\Batgest4\Batigest.exe
C:\APIBAT\COMP_PME\apibcmpp.exe
C:\APIBAT\FIN_PME\apibfinp.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\APIBAT\Contrat2\Contrat.exe
C:\APIBAT\Contrat2\Fax.exe
C:\APIBAT\FIN_PME\apibfinp.exe
C:\APIBAT\COMP_PME\apibcmpp.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\station\Mes documents\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - (no file)
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Windows Live Messenger.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game05.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
il est resté coincé ;)
Logfile of HijackThis v1.99.1
Scan saved at 11:59:50, on 30/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Windows Live\installer\WLSetupSvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\livecall.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\rsvp.exe
C:\APIBAT\Batgest4\Batigest.exe
C:\APIBAT\COMP_PME\apibcmpp.exe
C:\APIBAT\FIN_PME\apibfinp.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\APIBAT\Contrat2\Contrat.exe
C:\APIBAT\Contrat2\Fax.exe
C:\APIBAT\FIN_PME\apibfinp.exe
C:\APIBAT\COMP_PME\apibcmpp.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\station\Mes documents\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - (no file)
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Windows Live Messenger.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game05.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{23E481C4-27DD-495B-9231-7692FE0FE462}: NameServer = 192.168.1.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
toptitbal
Messages postés
25709
Date d'inscription
samedi 8 juillet 2006
Statut
Contributeur sécurité
Dernière intervention
4 mars 2010
2 231
30 sept. 2008 à 14:08
30 sept. 2008 à 14:08
Merci Noc
stephus, j'ai oublié de te le dire tout à l'heure mais tu utilises une version obsolète d'Hijackthis. La version actuelle est la 2.0.2
Lop S&D semble avoir bien travaillé, as-tu encore des problèmes ?
stephus, j'ai oublié de te le dire tout à l'heure mais tu utilises une version obsolète d'Hijackthis. La version actuelle est la 2.0.2
Lop S&D semble avoir bien travaillé, as-tu encore des problèmes ?
toptitbal
Messages postés
25709
Date d'inscription
samedi 8 juillet 2006
Statut
Contributeur sécurité
Dernière intervention
4 mars 2010
2 231
30 sept. 2008 à 16:37
30 sept. 2008 à 16:37
OK alors, si tout va bien :
Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :
Télécharge toolscleaner sur ton Bureau :
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse
Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :
Télécharge toolscleaner sur ton Bureau :
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse
