CiD Pubs Intempestives Résolu/Fermé

Question

Bonjour,
J'ai un problème avec les pubs CiD, j'aimerai vraiment en finir, pouvez-vous m'aider SVP ?

^^Marie^^ · Accepted Answer

Re

Y'a un FIX pour CID.

tribun · Answer

bonjour 

supprime ce que u vois de CiD  dans ajout et supprimer program,
et fait un SDfix !

http://site-naheulbeuk.com/

droide6 · Answer

Je suis entrain de le faire, je vais poster le rapport quand ce sera terminé.

droide6 · Answer

Voilà j'ai exécuté SDfix, voici le rapport :


[b]SDFix: Version 1.231 [/b]
Run by HESTIN on 05/10/2008 at 15:14

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\Documents and Settings\All Users.WINDOWS2\Application Data\Microsoft\Network\Downloader\qmgr0.dat - Contains Links to Malware Sites! - Deleted
C:\Documents and Settings\All Users.WINDOWS2\Application Data\Microsoft\Network\Downloader\qmgr1.dat - Contains Links to Malware Sites! - Deleted
C:\Documents and Settings\HESTIN\Application Data\Adobe\crc.dat - Deleted
C:\Documents and Settings\HESTIN\Application Data\Adobe\Player.exe - Deleted
C:\Documents and Settings\HESTIN\Application Data\Adobe\Player.exe.bak - Deleted





Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-05 15:28:04
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:4f,80,18,eb,30,50,b4,bd,04,ab,16,9c,08,96,07,5e,1f,c9,c4,84,de,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:4f,80,18,eb,30,50,b4,bd,04,ab,16,9c,08,96,07,5e,1f,c9,c4,84,de,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Ubisoft\Heroes of Might and Magic V\Demo\bin\H5_Game.exe"="C:\Program Files\Ubisoft\Heroes of Might and Magic V\Demo\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V"
"C:\WINDOWS2\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS2\system32\ZoneLabs\vsmon.exe:*:Enabled:TrueVector Service"
"C:\WINDOWS2\system32\dpvsetup.exe"="C:\WINDOWS2\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Steam\SteamApps\lookmenoob\counter-strike source\hl2.exe"="C:\Program Files\Steam\SteamApps\lookmenoob\counter-strike source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Steam\SteamApps\gaetanfd\counter-strike source\hl2.exe"="C:\Program Files\Steam\SteamApps\gaetanfd\counter-strike source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Steam\SteamApps\gaetanfd\counter-strike\hl.exe"="C:\Program Files\Steam\SteamApps\gaetanfd\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\World of Warcraft\Repair.exe"="C:\Program Files\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility"
"C:\Program Files\Steam\steam.exe"="C:\Program Files\Steam\steam.exe:*:Enabled:Steam"
"C:\Program Files\Steam\SteamApps\droide67220\counter-strike source\hl2.exe"="C:\Program Files\Steam\SteamApps\droide67220\counter-strike source\hl2.exe:*:Enabled:hl2"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:æTorrent"
"C:\Program Files\EA Sports\FIFA 08\FIFA08.exe"="C:\Program Files\EA Sports\FIFA 08\FIFA08.exe:*:Enabled:FIFA08"
"C:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Thu 14 Aug 2008     1,429,840 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Wed 30 Jul 2008     4,891,984 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 18 Aug 2008     1,832,272 A.SHR --- "C:\Program Files\TeaTimer (Spybot - Search & Destroy)\TeaTimer.exe"
Mon 22 Aug 2005         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 25 Apr 2006         4,348 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS2\DRM\DRMv1.bak"
Tue 29 Jan 2008             0 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS2\DRM\Cache\Indiv02.tmp"
Tue  1 Apr 2008         2,158 ...HR --- "C:\Documents and Settings\HESTIN\Application Data\SecuROM\UserData\securom_v7_01.bak"
Fri 31 Mar 2006            30 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS07D60ECD-54DB-4D2C-9478-91451A9F6663.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0948B685-75BA-45A8-AE49-C767D455B091.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0C22AB03-1BFC-4B19-A8F2-5A4E764915C6.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0DFA4EFF-8162-42D8-BDBE-29EC699F3C52.tmp"
Fri 31 Mar 2006           114 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS11BCF922-C1FE-49D3-A6D2-FA99D1A79455.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS11ABE434-DC7A-4B36-B037-465B9E690012.tmp"
Fri 31 Mar 2006           178 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS12D624F6-4AD5-4F10-AEBD-95E710E8C9D5.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS13C03087-092B-4058-96BA-D8A82117E614.tmp"
Fri 31 Mar 2006           482 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1505D0F5-3D92-4ED8-9EAD-49C9648EB4C5.tmp"
Fri 31 Mar 2006           122 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS17DDB5E2-16E8-4B83-BC92-E5E3BD0346C6.tmp"
Fri 31 Mar 2006            76 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS187112DB-EAFB-4A88-9E4E-11F3E7C51F53.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS19A07A1F-E429-4BDF-A035-28022750F87D.tmp"
Fri 31 Mar 2006           546 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1DF4667A-FB33-4158-B323-6A46C60D8456.tmp"
Fri 31 Mar 2006           354 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS20EDDFA8-EA09-459F-AD3D-D9842FD3C3CD.tmp"
Fri 31 Mar 2006           312 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2307DCCC-67AE-46F5-BB7D-83E9F6EE8036.tmp"
Fri 31 Mar 2006            96 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS30C18790-41F7-46F6-AACB-C8A87332F24A.tmp"
Fri 31 Mar 2006           630 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS32FE110E-AC2F-45B9-889D-AB60F4CD771C.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS334468A2-7613-4837-A143-2EC768ADA486.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3352AA67-AA8F-4F10-8E88-B1EC6CEE0285.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS354CBD0E-85B9-4089-9C15-0DFD4272ABA3.tmp"
Fri 31 Mar 2006           122 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS378CC955-7278-4E83-BCB7-51BD437F8B69.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3B090643-823C-4A4B-8A4A-5F26C7D23EBB.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3CC9C1B1-658F-4A9B-8305-B1EFF29C6D5C.tmp"
Fri 31 Mar 2006           554 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS478F7CDD-769B-4E0C-BB00-1F88A6A27D57.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4953F32C-9C9D-4C31-960A-D4982868B115.tmp"
Fri 31 Mar 2006           510 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4D9655DD-5133-4477-89F6-F2CBDD692795.tmp"
Fri 31 Mar 2006            48 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5E549D45-E7C2-4BA3-B822-9B7EFE7883A1.tmp"
Fri 31 Mar 2006            42 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5FC3CE05-503E-4809-9CAD-063D733389B9.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS62141A91-E0D2-4E4F-A880-19BD00B1DF2B.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS62DD5F89-A517-4DCD-A1D7-87A90959B857.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS666F9D42-3D23-4507-B3DD-C409AE49AE9C.tmp"
Fri 31 Mar 2006           130 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6A8F7340-9F1B-47ED-A63E-2FB105DD44FC.tmp"
Fri 31 Mar 2006            94 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS749D9D0A-2733-4DC7-B380-EA93EF361B75.tmp"
Fri 31 Mar 2006            42 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS746A5678-2ECC-4C6F-A1D5-289D744FEE6C.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS742BC307-9C6D-462B-B017-485F3B3B0D31.tmp"
Fri 31 Mar 2006           100 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS79FB9A5B-0996-4126-81D5-F8767A452793.tmp"
Fri 31 Mar 2006           420 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7E8CF1F8-EFD6-4869-A168-E0410C9B650B.tmp"
Fri 31 Mar 2006            30 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8031CD60-E0EB-4677-8DC7-44CA8BA0CE2A.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS856412EA-E43F-488C-87C5-36447E81675E.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9048A120-2016-4375-88C7-DE0DF6A0FEE6.tmp"
Fri 31 Mar 2006            48 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS95805A40-DE5C-47C4-9628-B11EC51F908B.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS97C86E42-F0EA-467D-AA92-0DAD6F650F61.tmp"
Fri 31 Mar 2006            14 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS983DDFC7-76DB-40AD-B425-84E5249F757C.tmp"
Fri 31 Mar 2006           666 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS99BC98FD-C88B-4317-B450-EDCAA9DCAED7.tmp"
Fri 31 Mar 2006            50 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9E153C93-B1E5-48C8-95A8-B1C6D0E79C22.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9F9CFCD0-4EDE-49BE-BAEB-EB96D0688F76.tmp"
Fri 31 Mar 2006           354 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9F1DF4B2-EC84-40F4-A28E-02EFB9B4C95A.tmp"
Fri 31 Mar 2006            48 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA6B63ADE-1827-48B8-A552-38EA94B80EFB.tmp"
Fri 31 Mar 2006            96 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA65AD91B-A01F-411B-B65C-83AE4AFF1ED7.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA6475D79-19C0-4947-801A-934ED8552736.tmp"
Fri 31 Mar 2006           606 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA7F650D9-B6BB-4F69-ACBE-7289D7595B62.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSAF0E9809-83F2-4653-A6BA-2AA5CBCDAD4C.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB1E57BC9-D693-47D7-BC91-8443CD5F8A3F.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB46C1146-B5CE-43C8-B1BE-6555E680FF7B.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB55249F5-0108-49AF-B6EC-17AB042FC0C7.tmp"
Fri 31 Mar 2006           122 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB7B671FC-B6D3-4E42-AB03-F2C4D3301F95.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBA017C5A-76B6-4BF5-961D-0164FC00E204.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBD4F18FF-8DA3-4613-8153-6B7048057EAA.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC45E0C09-6674-4775-9D28-EBD1594AEFE7.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC48DFFF9-5982-47FC-9AAB-4B9832F50F75.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC55D20F8-79A2-4DA6-BC93-A2836F1915F6.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC99D56DE-AB8D-4758-8A89-4E5C47FDD06A.tmp"
Fri 31 Mar 2006           410 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC930ACEF-BFD1-40E1-9295-F392E0D810F4.tmp"
Fri 31 Mar 2006           312 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD231B33F-1370-414E-9A04-2B4FEB87D959.tmp"
Fri 31 Mar 2006           150 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD837A977-014D-4806-B3F5-7A7280891048.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDC8D6F92-243D-4FA9-B31C-F0DDA07ED03D.tmp"
Fri 31 Mar 2006           108 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF544ECB5-A811-4DA5-9927-C7D476E8A328.tmp"
Fri 31 Mar 2006           318 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF7F5DB68-87E4-47C1-8458-26F5BBF196DB.tmp"
Fri 31 Mar 2006            10 A..H. --- "C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF8268588-133E-4677-965D-7B0F914D96C4.tmp"

[b]Finished![/b]

droide6 · Answer

Aidez-moi s'il vous plait, j'ai fais le scan, que dois-je faire à présent ?

Merci à vous.

tribun · Answer

ton scan est terminé et tes fichiers infectés supprimés !
es ce que tu as encore tes pub CiD ?

droide6 · Answer

D'accord pourtant j' ai encore des pubs CiD as-tu quelque chose d' autre à me suggérer ?

Merci

Utilisateur anonyme · Answer

Arrêter ce massacre, 
Télécharge Navilog1 : http://il.mafioso.pagesperso-orange.fr/Navifix/Navilog1.exe

Fais l'option 1 et poste le rapport générer

Ne fais pas l'option 2,3, 4 sans notre accord !

droide6 · Answer

Voici le rapport de navilog1 : 

Search Navipromo version 3.6.6 commencé le 05/10/2008 à 18:12:29,62

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "HESTIN" 

Mise à jour le 29.09.2008 à 17h30 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS2" ***

Utilisateur anonyme · Answer

Rapport non complet, fait copier colle du rapport !

droide6 · Answer

désolé je n' ai pas tout mis :

Search Navipromo version 3.6.6 commencé le 05/10/2008 à 18:12:29,62

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "HESTIN" 

Mise à jour le 29.09.2008 à 17h30 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS2" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWS2\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWS2\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\HESTIN\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\UTILIS~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\HESTIN\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\UTILIS~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\HESTIN\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\UTILIS~1\menudm~1\progra~1" *** 


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS2\system32" *

* Recherche dans "C:\Documents and Settings\HESTIN\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\UTILIS~1\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS2\system32" :


* Dans "C:\Documents and Settings\HESTIN\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\UTILIS~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 05/10/2008 à 18:20:06,82 ***

voila

Utilisateur anonyme · Answer

Relance le mais avec l'option 2

droide6 · Answer

Clean Navipromo version 3.6.6 commencé le 05/10/2008 à 18:23:08,42

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "HESTIN" 

Mise à jour le 29.09.2008 à 17h30 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS2\System32" *


* Suppression dans "C:\Documents and Settings\HESTIN\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1\UTILIS~1\locals~1\applic~1" * 


*** Suppression dossiers dans "C:\WINDOWS2" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS2\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS2\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\HESTIN\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\UTILIS~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\HESTIN\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\UTILIS~1\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\HESTIN\menudm~1\progra~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\UTILIS~1\menudm~1\progra~1" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS2\Temp effectué !
Nettoyage contenu C:\Documents and Settings\HESTIN\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS2\system32" *


* Dans "C:\Documents and Settings\HESTIN\locals~1\applic~1" * 


* Dans "C:\DOCUME~1\UTILIS~1\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 05/10/2008 à 18:26:11,26 ***

Utilisateur anonyme · Answer

Ton ordi va mieux ?

droide6 · Answer

Au niveau des pubs ? A quel niveau ?

Pour l'instant j'ai pas encore eu de pub, mais ça va peut être venir.

Utilisateur anonyme · Answer

Supprime Sdfix et Navilog1

Ensuite,

1) Télécharge et installe Malwarebyte's Anti-Malware:

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée. >>> clique sur OK
Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur ton Bureau.

Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur OK

Laisse les Mises à jour se télécharger
*** Referme le programme ***

2) Redémarre en "Mode sans échec"

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : https://www.malekal.com/demarrer-windows-mode-sans-echec/

Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

3) Scan avec Malwarebyte's Anti-Malware

Lance Malwarebyte's Anti-Malware
Onglet "Recherche" >>> coche Executer un exame complet >>> Rechercher sélectionne tes disques durs puis clique sur Lancer l’examen
A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
Suppression des éléments détectés >>>>
supprime ce qu'il a trouvé vide également les éléments de la quarantaine
S'il t'es demandé de redémarrer >>> clique sur "Yes"

--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.

Utilisateur anonyme · Answer

Ne t'occupe pas de ça, continue le scan

Utilisateur anonyme · Answer

Je sais mais........ c'est un jeu pour moi^^^^

droide6 · Answer

Voici le rapport :

Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1230
Windows 5.1.2600 Service Pack 3

05/10/2008 20:19:33
mbam-log-2008-10-05 (20-19-29).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 154439
Temps écoulé: 1 hour(s), 39 minute(s), 20 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\rhccgmj0eg0v (Rogue.AntivirusXP2008) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\eMule\eMule.exe (Rogue.Fake!emule.exe) -> No action taken.
C:\Program Files\eMule\LinkCreator.exe (Rogue.Fake!emule.exe) -> No action taken.

Est-ce que c'est bientôt terminé la ?

droide6 · Answer

Alors je fais quoi maintenant, aidez-moi ça fait pas mal de temps que je suis sur ce problème. Pour l'instant je n'ai pas encore eu de pub, mais ça peut encore venir ?

Utilisateur anonyme · Answer

Re, va dans la quarantaine de malwarebytes est supprime tout !

droide6 · Answer

voila c'est fait ensuite ?

Utilisateur anonyme · Answer

Refait un hijack

droide6 · Answer

voila le rapport : 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:02:55, on 05/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS2\system32\WgaTray.exe
C:\WINDOWS2\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS2\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\systray\systrayapp.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HESTIN\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [memo site kind that] C:\Documents and Settings\All Users.WINDOWS2\Application Data\Grid Blue Memo Site\load date.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS2\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS2\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar	oolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32
vsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

Utilisateur anonyme · Answer

...

droide6 · Answer

je l' ai fait juste au dessus le rapport.

droide6 · Answer

Que dois-je faire et que-ce que LopSD.exe ?

merci

Utilisateur anonyme · Answer

Je ne pense pas archet !

Droide, inutile d'installer ce programme

droide6 · Answer

voici le rapport de hijackthis :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:02:55, on 05/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS2\system32\WgaTray.exe
C:\WINDOWS2\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS2\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\systray\systrayapp.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HESTIN\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [memo site kind that] C:\Documents and Settings\All Users.WINDOWS2\Application Data\Grid Blue Memo Site\load date.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS2\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS2\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar	oolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32
vsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

Utilisateur anonyme · Answer

Je l'ai vus, ne t'inquiète pas lol^^

Coche ça : O4 - HKLM\..\Run: [memo site kind that] C:\Documents and Settings\All Users.WINDOWS2\Application Data\Grid Blue Memo Site\load date.exe 
et fait fix cheked

Utilisateur anonyme · Answer

Je te le laisse

droide6 · Answer

Voilà je l'ai fait et je remet un rapport : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:20:50, on 05/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS2\system32\WgaTray.exe
C:\WINDOWS2\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS2\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\systray\systrayapp.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HESTIN\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS2\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS2\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar	oolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32
vsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

Utilisateur anonyme · Answer

http://www.commentcamarche.net/forum/affich 8742807 cid pubs intempestives?page=2#43

droide6 · Answer

J'ai fais le scan avec Lop S&D le voici :


   --------------------\  Lop S&D 4.2.4-5   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2800+ )
   BIOS : Default System BIOS
   USER : HESTIN ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition 8.0.1.27 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total : 76 Go Free : 18 Go
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   G:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
   Option : [1] ( 05/10/2008|21:23 )
 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [22/03/2006|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [03/02/2006|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\bend lite bib meet
   [24/01/2006|20:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [31/08/2005|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [21/01/2006|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [18/02/2006|18:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [15/07/2005|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [20/03/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [31/03/2006|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\The Film Pop Bone
   [31/03/2006|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ViGUARD
   [04/09/2005|11:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [13/09/2008|10:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [15/04/2008|22:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe
   [16/07/2007|19:28] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple
   [22/12/2006|19:45] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple Computer
   [11/04/2008|10:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Avira
   [11/03/2007|23:16] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Google
   [17/09/2008|12:11] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grid Blue Memo Site
   [18/04/2006|23:03] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\InstallShield
   [01/04/2008|20:15] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Lavasoft
   [31/10/2007|16:39] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MailFrontier
   [17/09/2008|18:06] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Malwarebytes
   [18/10/2007|18:11] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus!
   [01/09/2008|15:45] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
   [01/09/2008|16:34] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft Help
   [08/06/2007|20:05] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1
View_Profiles
   [27/04/2006|16:41] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\QuickTime
   [04/09/2006|13:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\RoboForm
   [25/08/2008|09:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Skype
   [20/09/2008|22:09] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy
   [15/12/2007|19:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TomTom
   [08/03/2007|19:50] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Trymedia
   [09/04/2007|13:15] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Vivendi Universal Games
   [28/05/2006|21:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
   [05/10/2008|13:25] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller

   [15/07/2005|16:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [01/12/2007|18:09] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

   [05/10/2008|15:17] C:\DOCUME~1\HESTIN\APPLIC~1\Adobe
   [22/04/2007|12:59] C:\DOCUME~1\HESTIN\APPLIC~1\AdobeUM
   [22/12/2006|19:46] C:\DOCUME~1\HESTIN\APPLIC~1\Apple Computer
   [07/05/2008|23:36] C:\DOCUME~1\HESTIN\APPLIC~1\Atari
   [12/07/2006|22:53] C:\DOCUME~1\HESTIN\APPLIC~1\BitDefender
   [08/12/2006|18:18] C:\DOCUME~1\HESTIN\APPLIC~1\BitTorrent
   [11/04/2007|20:30] C:\DOCUME~1\HESTIN\APPLIC~1\Command & Conquer 3 Les guerres du Tiberium
   [04/04/2007|18:52] C:\DOCUME~1\HESTIN\APPLIC~1\Command & Conquer 3 Tiberium Wars Demo
   [10/07/2006|11:32] C:\DOCUME~1\HESTIN\APPLIC~1\CyberLink
   [18/04/2006|22:58] C:\DOCUME~1\HESTIN\APPLIC~1\Dev-Cpp
   [03/02/2007|16:26] C:\DOCUME~1\HESTIN\APPLIC~1\DivX
   [17/09/2008|13:31] C:\DOCUME~1\HESTIN\APPLIC~1\EoRezo
   [11/03/2007|23:16] C:\DOCUME~1\HESTIN\APPLIC~1\Google
   [24/05/2008|12:56] C:\DOCUME~1\HESTIN\APPLIC~1\Hamachi
   [29/04/2006|16:20] C:\DOCUME~1\HESTIN\APPLIC~1\Help
   [04/04/2006|18:37] C:\DOCUME~1\HESTIN\APPLIC~1\Identities
   [12/08/2008|11:33] C:\DOCUME~1\HESTIN\APPLIC~1\InstallShield
   [10/07/2006|10:25] C:\DOCUME~1\HESTIN\APPLIC~1\Jasc
   [26/10/2006|09:34] C:\DOCUME~1\HESTIN\APPLIC~1\Lavasoft
   [05/10/2008|14:38] C:\DOCUME~1\HESTIN\APPLIC~1\Leadertech
   [18/04/2006|18:46] C:\DOCUME~1\HESTIN\APPLIC~1\Macromedia
   [05/11/2006|21:35] C:\DOCUME~1\HESTIN\APPLIC~1\MAGIX
   [19/09/2008|19:01] C:\DOCUME~1\HESTIN\APPLIC~1\mail for five
   [17/09/2008|18:06] C:\DOCUME~1\HESTIN\APPLIC~1\Malwarebytes
   [01/09/2008|15:45] C:\DOCUME~1\HESTIN\APPLIC~1\Microsoft
   [21/07/2008|14:27] C:\DOCUME~1\HESTIN\APPLIC~1\Mozilla
   [18/04/2006|23:04] C:\DOCUME~1\HESTIN\APPLIC~1\Notepad++
   [22/09/2008|20:31] C:\DOCUME~1\HESTIN\APPLIC~1\OpenOffice.org2
   [01/02/2007|10:32] C:\DOCUME~1\HESTIN\APPLIC~1\Real
   [22/07/2007|12:53] C:\DOCUME~1\HESTIN\APPLIC~1\ReGet Junior
   [15/04/2007|18:52] C:\DOCUME~1\HESTIN\APPLIC~1\Screenshot Sender
   [11/04/2007|20:26] C:\DOCUME~1\HESTIN\APPLIC~1\SecuROM
   [25/08/2008|09:50] C:\DOCUME~1\HESTIN\APPLIC~1\skypePM
   [27/05/2006|11:44] C:\DOCUME~1\HESTIN\APPLIC~1\Sun
   [18/04/2006|18:45] C:\DOCUME~1\HESTIN\APPLIC~1\Talkback
   [16/06/2008|12:26] C:\DOCUME~1\HESTIN\APPLIC~1	eamspeak2
   [15/12/2007|20:18] C:\DOCUME~1\HESTIN\APPLIC~1\TomTom
   [01/04/2008|18:34] C:\DOCUME~1\HESTIN\APPLIC~1\uTorrent
   [13/09/2008|16:09] C:\DOCUME~1\HESTIN\APPLIC~1\Xfire

   [15/07/2005|16:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [31/03/2006|17:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

   [13/07/2006|09:14] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\BitDefender
   [15/07/2006|10:51] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft
   [01/11/2007|10:28] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Xfire

   [15/07/2005|16:59] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [05/03/2006|16:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
   [31/03/2006|19:59] C:\DOCUME~1\NETWOR~1\APPLIC~1\Webroot

   [04/04/2006|18:20] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft
   [20/10/2007|19:02] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Xfire

   [06/11/2005|11:09] C:\DOCUME~1\UTILIS~1\APPLIC~1\Adobe
   [17/09/2005|14:25] C:\DOCUME~1\UTILIS~1\APPLIC~1\Ahead
   [22/03/2006|15:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\Arcsoft
   [23/03/2006|17:47] C:\DOCUME~1\UTILIS~1\APPLIC~1\BitDefender
   [24/01/2006|21:58] C:\DOCUME~1\UTILIS~1\APPLIC~1\Dev-Cpp
   [15/08/2005|14:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\Help
   [15/07/2005|17:06] C:\DOCUME~1\UTILIS~1\APPLIC~1\Identities
   [15/07/2005|17:33] C:\DOCUME~1\UTILIS~1\APPLIC~1\InterTrust
   [19/08/2005|11:25] C:\DOCUME~1\UTILIS~1\APPLIC~1\Macromedia
   [31/03/2006|19:49] C:\DOCUME~1\UTILIS~1\APPLIC~1\mail for five
   [25/09/2005|19:08] C:\DOCUME~1\UTILIS~1\APPLIC~1\Microsoft
   [30/08/2005|13:37] C:\DOCUME~1\UTILIS~1\APPLIC~1\Microsoft Web Folders
   [15/07/2005|17:24] C:\DOCUME~1\UTILIS~1\APPLIC~1\Mozilla
   [01/01/2006|12:44] C:\DOCUME~1\UTILIS~1\APPLIC~1\Notepad++
   [18/07/2005|10:41] C:\DOCUME~1\UTILIS~1\APPLIC~1\Symantec
   [01/01/2006|23:22] C:\DOCUME~1\UTILIS~1\APPLIC~1\Talkback
   [24/03/2006|20:06] C:\DOCUME~1\UTILIS~1\APPLIC~1	eamspeak2
   [31/03/2006|19:17] C:\DOCUME~1\UTILIS~1\APPLIC~1\web slow math
   [01/01/2006|23:28] C:\DOCUME~1\UTILIS~1\APPLIC~1\Xfire
 
   --------------------\  Tâches planifiées dans C:\WINDOWS2	asks

   [05/10/2008 21:00][--ah-----] C:\WINDOWS2	asks\ABCD16E4918A8790.job
   [29/08/2008 10:40][--a------] C:\WINDOWS2	asks\AppleSoftwareUpdate.job
   [05/10/2008 20:21][--ah-----] C:\WINDOWS2	asks\SA.DAT
   [28/09/2001 14:00][-r-h-----] C:\WINDOWS2	asks\desktop.ini

   ( ABCD16E4918A8790.job )=( c:\docume~1\hestin\applic~1\mailfo~1\moveplaybeep.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [24/04/2006|12:10] C:\Program Files\A4Tech
   [13/07/2008|20:36] C:\Program Files\Adobe
   [05/04/2006|14:25] C:\Program Files\Ahead
   [05/10/2008|11:54] C:\Program Files\Alcohol Soft
   [02/02/2006|18:11] C:\Program Files\AMD
   [13/08/2008|13:49] C:\Program Files\Apple Software Update
   [07/05/2008|23:30] C:\Program Files\Atari
   [11/04/2008|10:42] C:\Program Files\Avira
   [25/04/2006|20:57] C:\Program Files\AviSynth 2.5
   [23/12/2006|13:44] C:\Program Files\AvRack
   [13/09/2008|10:52] C:\Program Files\Bonjour
   [04/02/2007|13:05] C:\Program Files\CCleaner
   [15/07/2005|16:10] C:\Program Files\C-Media 3D Audio
   [17/05/2008|10:48] C:\Program Files\Common Files
   [15/04/2008|20:46] C:\Program Files\DivX
   [07/11/2006|18:55] C:\Program Files\download
   [16/10/2007|20:16] C:\Program Files\EA GAMES
   [05/10/2008|16:01] C:\Program Files\EA Sports
   [01/10/2008|09:54] C:\Program Files\eMule
   [30/04/2007|13:52] C:\Program Files\EPSON
   [18/09/2008|19:29] C:\Program Files\Fichiers communs
   [31/10/2007|21:32] C:\Program Files\GameSpy Arcade
   [30/01/2008|16:41] C:\Program Files\Gpotato.eu
   [10/08/2008|19:20] C:\Program Files\GTA
   [14/04/2008|10:45] C:\Program Files\Hamachi
   [12/08/2005|09:21] C:\Program Files\Hercules
   [15/04/2008|21:23] C:\Program Files\ICQLite
   [18/08/2008|22:13] C:\Program Files\InstallShield Installation Information
   [14/08/2008|23:32] C:\Program Files\internet explorer
   [13/09/2008|10:53] C:\Program Files\iPod
   [13/09/2008|10:53] C:\Program Files\iTunes
   [26/02/2007|11:17] C:\Program Files\Java
   [17/09/2008|12:10] C:\Program Files\mail for five
   [05/10/2008|18:33] C:\Program Files\Malwarebytes' Anti-Malware
   [25/12/2007|17:35] C:\Program Files\Micro Application
   [26/02/2006|17:01] C:\Program Files\microsoft frontpage
   [01/09/2008|15:38] C:\Program Files\Microsoft SDKs
   [19/08/2008|22:49] C:\Program Files\Microsoft Silverlight
   [01/09/2008|16:31] C:\Program Files\Microsoft Visual Studio 9.0
   [01/09/2008|16:28] C:\Program Files\Microsoft.NET
   [12/09/2008|19:29] C:\Program Files\Movie Maker
   [05/10/2008|20:58] C:\Program Files\Mozilla Firefox
   [01/09/2008|15:32] C:\Program Files\MSBuild
   [12/09/2008|19:29] C:\Program Files\msn
   [31/03/2006|20:10] C:\Program Files\msn gaming zone
   [18/11/2006|20:47] C:\Program Files\MSXML 4.0
   [01/09/2008|15:29] C:\Program Files\MSXML 6.0
   [05/10/2008|18:26] C:\Program Files\Navilog1
   [12/09/2008|19:26] C:\Program Files\NetMeeting
   [13/08/2005|11:38] C:\Program Files\Netropa
   [07/11/2006|18:52] C:\Program Files\NVIDIA
   [16/06/2008|19:27] C:\Program Files\OLYMPUS
   [05/04/2006|14:54] C:\Program Files\OpenOffice.org 2.0
   [12/08/2008|11:42] C:\Program Files\Orange
   [12/09/2008|19:26] C:\Program Files\Outlook Express
   [23/07/2008|21:02] C:\Program Files\Photo Viewer
   [20/07/2007|18:55] C:\Program Files\Pilotes
   [13/09/2008|10:51] C:\Program Files\QuickTime
   [23/12/2006|13:44] C:\Program Files\Realtek AC97
   [23/12/2006|13:44] C:\Program Files\Realtek Sound Manager
   [01/08/2006|21:32] C:\Program Files\REALTEK_XP64_XP_2K(A377)
   [01/09/2008|15:32] C:\Program Files\Reference Assemblies
   [01/05/2006|20:00] C:\Program Files\RegCleaner
   [12/08/2008|11:33] C:\Program Files\SAGEM
   [11/06/2008|10:38] C:\Program Files\Securitoo
   [08/12/2007|21:00] C:\Program Files\SilverCrest Vibration Headset
   [04/01/2007|11:36] C:\Program Files\SP810
   [13/08/2005|11:22] C:\Program Files\SpeedTouch USB
   [17/09/2008|13:57] C:\Program Files\Spybot - Search & Destroy
   [05/10/2008|17:22] C:\Program Files\Steam
   [24/04/2006|21:11] C:\Program Files\Teamspeak2_RC2
   [17/09/2008|13:43] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
   [21/02/2007|09:56] C:\Program Files\THQ
   [15/12/2007|20:18] C:\Program Files\TomTom HOME 2
   [13/08/2005|11:38] C:\Program Files\Touch Manager
   [06/05/2008|19:56] C:\Program Files\TryMedia
   [29/05/2006|20:55] C:\Program Files\Ubisoft
   [02/08/2006|15:10] C:\Program Files\Ulead Systems
   [15/07/2005|17:06] C:\Program Files\Uninstall Information
   [24/03/2008|15:37] C:\Program Files\uTorrent
   [18/08/2008|22:17] C:\Program Files\Warcraft III
   [03/10/2008|17:41] C:\Program Files\Windows Live
   [20/07/2007|18:56] C:\Program Files\Windows Media Connect 2
   [12/09/2008|19:26] C:\Program Files\Windows Media Player
   [12/09/2008|19:26] C:\Program Files\Windows NT
   [04/04/2006|17:32] C:\Program Files\WindowsUpdate
   [03/11/2006|21:29] C:\Program Files\WinRAR
   [28/09/2008|13:10] C:\Program Files\World of Warcraft
   [08/09/2008|19:23] C:\Program Files\WowCartographe
   [15/07/2005|17:00] C:\Program Files\xerox
   [13/09/2008|10:41] C:\Program Files\Xfire

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [15/04/2008|22:16] C:\Program Files\Fichiers communs\Adobe
   [15/07/2005|17:30] C:\Program Files\Fichiers communs\Ahead
   [13/09/2008|10:50] C:\Program Files\Fichiers communs\Apple
   [27/05/2008|16:51] C:\Program Files\Fichiers communs\Blizzard Entertainment
   [24/04/2007|10:01] C:\Program Files\Fichiers communs\EPSON
   [12/08/2008|11:40] C:\Program Files\Fichiers communs\France Telecom
   [24/01/2006|20:08] C:\Program Files\Fichiers communs\InstallShield
   [01/12/2006|22:44] C:\Program Files\Fichiers communs\Java
   [02/11/2006|10:24] C:\Program Files\Fichiers communs\MAGIX Shared
   [01/09/2008|16:29] C:\Program Files\Fichiers communs\Merge Modules
   [03/10/2008|17:39] C:\Program Files\Fichiers communs\Microsoft Shared
   [29/12/2007|10:54] C:\Program Files\Fichiers communs\Motorola Shared
   [15/07/2005|16:57] C:\Program Files\Fichiers communs\MSSoap
   [15/07/2005|17:50] C:\Program Files\Fichiers communs\ODBC
   [07/05/2008|23:33] C:\Program Files\Fichiers communs\PocketSoft
   [01/02/2007|10:32] C:\Program Files\Fichiers communs\Real
   [13/01/2008|13:14] C:\Program Files\Fichiers communs\ReGet Shared
   [15/07/2005|16:57] C:\Program Files\Fichiers communs\Services
   [13/07/2006|12:58] C:\Program Files\Fichiers communs\Softwin
   [15/07/2005|17:50] C:\Program Files\Fichiers communs\SpeechEngines
   [05/10/2006|20:15] C:\Program Files\Fichiers communs\SWF Studio
   [21/03/2006|08:25] C:\Program Files\Fichiers communs\Symantec Shared
   [12/09/2008|19:26] C:\Program Files\Fichiers communs\System
   [21/04/2006|10:38] C:\Program Files\Fichiers communs\Vbox
   [09/04/2007|13:15] C:\Program Files\Fichiers communs\Vivendi Universal Games
   [02/10/2008|19:15] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 41 Processes )

   IEXPLORE.EXE ~ [PID:952]
   iexplore.exe ~ [PID:700]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grid Blue Memo Site
   C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grid Blue Memo Site\load date.exe
   C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1
   C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\hyqeacfh.exe
   C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\kind frag style pure.exe
   C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\lghvkymw.exe
   C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\moveplaybeep.exe
   C:\DOCUME~1\UTILIS~1\APPLIC~1\mailfo~1
   C:\Program Files\mailfo~1
   C:\DOCUME~1\HESTIN\Cookies\hestin@www.adserver5[1].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@bigpoint[1].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@fr1.darkorbit.bigpoint[2].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@banner.cotedazurpalace[2].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@cotedazurpalace[2].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@adopt.euroclick[2].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@partygaming.122.2o7[1].txt
   C:\DOCUME~1\HESTIN\Cookies\hestin@partypoker[2].txt
   C:\WINDOWS2\Tasks\ABCD16E4918A8790.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-10-05 21:24:56
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 221
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1][D:1]-> C:\DOCUME~1\HESTIN\LOCALS~1\Temp
   [F:90][D:0]-> C:\DOCUME~1\HESTIN\Cookies
   [F:2541][D:8]-> C:\DOCUME~1\HESTIN\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 05/10/2008|21:26 - Option : [1]

   --------------------\  Fin du rapport a 21:26:10

droide6 · Answer

Le scan avec l'option 2, le voici :


   --------------------\  Lop S&D 4.2.4-5   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2800+ )
   BIOS : Default System BIOS
   USER : HESTIN ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition 8.0.1.27 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total : 76 Go Free : 18 Go
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   G:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
   Option : [2] ( 05/10/2008|21:28 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grid Blue Memo Site\load date.exe
   Supprime! - C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\hyqeacfh.exe
   Supprime! - C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\kind frag style pure.exe
   Supprime! - C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\lghvkymw.exe
   Supprime! - C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1\moveplaybeep.exe
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@www.adserver5[1].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@bigpoint[1].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@fr1.darkorbit.bigpoint[2].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@banner.cotedazurpalace[2].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@cotedazurpalace[2].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@adopt.euroclick[2].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@partygaming.122.2o7[1].txt
   Supprime! - C:\DOCUME~1\HESTIN\Cookies\hestin@partypoker[2].txt
   Supprime! - C:\WINDOWS2\Tasks\ABCD16E4918A8790.job 
   Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grid Blue Memo Site
   Supprime! - C:\DOCUME~1\HESTIN\APPLIC~1\mailfo~1
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\mailfo~1
   Supprime! - C:\Program Files\mailfo~1
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [22/03/2006|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [03/02/2006|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\bend lite bib meet
   [24/01/2006|20:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [31/08/2005|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [21/01/2006|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [18/02/2006|18:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [15/07/2005|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [20/03/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [31/03/2006|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\The Film Pop Bone
   [31/03/2006|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ViGUARD
   [04/09/2005|11:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [13/09/2008|10:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [15/04/2008|22:17] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe
   [16/07/2007|19:28] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple
   [22/12/2006|19:45] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple Computer
   [11/04/2008|10:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Avira
   [11/03/2007|23:16] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Google
   [18/04/2006|23:03] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\InstallShield
   [01/04/2008|20:15] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Lavasoft
   [31/10/2007|16:39] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MailFrontier
   [17/09/2008|18:06] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Malwarebytes
   [18/10/2007|18:11] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus!
   [01/09/2008|15:45] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft
   [01/09/2008|16:34] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft Help
   [08/06/2007|20:05] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1
View_Profiles
   [27/04/2006|16:41] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\QuickTime
   [04/09/2006|13:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\RoboForm
   [25/08/2008|09:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Skype
   [20/09/2008|22:09] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy
   [15/12/2007|19:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TomTom
   [08/03/2007|19:50] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Trymedia
   [09/04/2007|13:15] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Vivendi Universal Games
   [28/05/2006|21:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
   [05/10/2008|13:25] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller

   [15/07/2005|16:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [01/12/2007|18:09] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft

   [05/10/2008|15:17] C:\DOCUME~1\HESTIN\APPLIC~1\Adobe
   [22/04/2007|12:59] C:\DOCUME~1\HESTIN\APPLIC~1\AdobeUM
   [22/12/2006|19:46] C:\DOCUME~1\HESTIN\APPLIC~1\Apple Computer
   [07/05/2008|23:36] C:\DOCUME~1\HESTIN\APPLIC~1\Atari
   [12/07/2006|22:53] C:\DOCUME~1\HESTIN\APPLIC~1\BitDefender
   [08/12/2006|18:18] C:\DOCUME~1\HESTIN\APPLIC~1\BitTorrent
   [11/04/2007|20:30] C:\DOCUME~1\HESTIN\APPLIC~1\Command & Conquer 3 Les guerres du Tiberium
   [04/04/2007|18:52] C:\DOCUME~1\HESTIN\APPLIC~1\Command & Conquer 3 Tiberium Wars Demo
   [10/07/2006|11:32] C:\DOCUME~1\HESTIN\APPLIC~1\CyberLink
   [18/04/2006|22:58] C:\DOCUME~1\HESTIN\APPLIC~1\Dev-Cpp
   [03/02/2007|16:26] C:\DOCUME~1\HESTIN\APPLIC~1\DivX
   [17/09/2008|13:31] C:\DOCUME~1\HESTIN\APPLIC~1\EoRezo
   [11/03/2007|23:16] C:\DOCUME~1\HESTIN\APPLIC~1\Google
   [24/05/2008|12:56] C:\DOCUME~1\HESTIN\APPLIC~1\Hamachi
   [29/04/2006|16:20] C:\DOCUME~1\HESTIN\APPLIC~1\Help
   [04/04/2006|18:37] C:\DOCUME~1\HESTIN\APPLIC~1\Identities
   [12/08/2008|11:33] C:\DOCUME~1\HESTIN\APPLIC~1\InstallShield
   [10/07/2006|10:25] C:\DOCUME~1\HESTIN\APPLIC~1\Jasc
   [26/10/2006|09:34] C:\DOCUME~1\HESTIN\APPLIC~1\Lavasoft
   [05/10/2008|14:38] C:\DOCUME~1\HESTIN\APPLIC~1\Leadertech
   [18/04/2006|18:46] C:\DOCUME~1\HESTIN\APPLIC~1\Macromedia
   [05/11/2006|21:35] C:\DOCUME~1\HESTIN\APPLIC~1\MAGIX
   [17/09/2008|18:06] C:\DOCUME~1\HESTIN\APPLIC~1\Malwarebytes
   [01/09/2008|15:45] C:\DOCUME~1\HESTIN\APPLIC~1\Microsoft
   [21/07/2008|14:27] C:\DOCUME~1\HESTIN\APPLIC~1\Mozilla
   [18/04/2006|23:04] C:\DOCUME~1\HESTIN\APPLIC~1\Notepad++
   [22/09/2008|20:31] C:\DOCUME~1\HESTIN\APPLIC~1\OpenOffice.org2
   [01/02/2007|10:32] C:\DOCUME~1\HESTIN\APPLIC~1\Real
   [22/07/2007|12:53] C:\DOCUME~1\HESTIN\APPLIC~1\ReGet Junior
   [15/04/2007|18:52] C:\DOCUME~1\HESTIN\APPLIC~1\Screenshot Sender
   [11/04/2007|20:26] C:\DOCUME~1\HESTIN\APPLIC~1\SecuROM
   [25/08/2008|09:50] C:\DOCUME~1\HESTIN\APPLIC~1\skypePM
   [27/05/2006|11:44] C:\DOCUME~1\HESTIN\APPLIC~1\Sun
   [18/04/2006|18:45] C:\DOCUME~1\HESTIN\APPLIC~1\Talkback
   [16/06/2008|12:26] C:\DOCUME~1\HESTIN\APPLIC~1	eamspeak2
   [15/12/2007|20:18] C:\DOCUME~1\HESTIN\APPLIC~1\TomTom
   [01/04/2008|18:34] C:\DOCUME~1\HESTIN\APPLIC~1\uTorrent
   [13/09/2008|16:09] C:\DOCUME~1\HESTIN\APPLIC~1\Xfire

   [15/07/2005|16:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [31/03/2006|17:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

   [13/07/2006|09:14] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\BitDefender
   [15/07/2006|10:51] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft
   [01/11/2007|10:28] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Xfire

   [15/07/2005|16:59] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [05/03/2006|16:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
   [31/03/2006|19:59] C:\DOCUME~1\NETWOR~1\APPLIC~1\Webroot

   [04/04/2006|18:20] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft
   [20/10/2007|19:02] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Xfire

   [06/11/2005|11:09] C:\DOCUME~1\UTILIS~1\APPLIC~1\Adobe
   [17/09/2005|14:25] C:\DOCUME~1\UTILIS~1\APPLIC~1\Ahead
   [22/03/2006|15:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\Arcsoft
   [23/03/2006|17:47] C:\DOCUME~1\UTILIS~1\APPLIC~1\BitDefender
   [24/01/2006|21:58] C:\DOCUME~1\UTILIS~1\APPLIC~1\Dev-Cpp
   [15/08/2005|14:21] C:\DOCUME~1\UTILIS~1\APPLIC~1\Help
   [15/07/2005|17:06] C:\DOCUME~1\UTILIS~1\APPLIC~1\Identities
   [15/07/2005|17:33] C:\DOCUME~1\UTILIS~1\APPLIC~1\InterTrust
   [19/08/2005|11:25] C:\DOCUME~1\UTILIS~1\APPLIC~1\Macromedia
   [25/09/2005|19:08] C:\DOCUME~1\UTILIS~1\APPLIC~1\Microsoft
   [30/08/2005|13:37] C:\DOCUME~1\UTILIS~1\APPLIC~1\Microsoft Web Folders
   [15/07/2005|17:24] C:\DOCUME~1\UTILIS~1\APPLIC~1\Mozilla
   [01/01/2006|12:44] C:\DOCUME~1\UTILIS~1\APPLIC~1\Notepad++
   [18/07/2005|10:41] C:\DOCUME~1\UTILIS~1\APPLIC~1\Symantec
   [01/01/2006|23:22] C:\DOCUME~1\UTILIS~1\APPLIC~1\Talkback
   [24/03/2006|20:06] C:\DOCUME~1\UTILIS~1\APPLIC~1	eamspeak2
   [31/03/2006|19:17] C:\DOCUME~1\UTILIS~1\APPLIC~1\web slow math
   [01/01/2006|23:28] C:\DOCUME~1\UTILIS~1\APPLIC~1\Xfire
 
   --------------------\  Tâches planifiées dans C:\WINDOWS2	asks

   [29/08/2008 10:40][--a------] C:\WINDOWS2	asks\AppleSoftwareUpdate.job
   [05/10/2008 20:21][--ah-----] C:\WINDOWS2	asks\SA.DAT
   [28/09/2001 14:00][-r-h-----] C:\WINDOWS2	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [24/04/2006|12:10] C:\Program Files\A4Tech
   [13/07/2008|20:36] C:\Program Files\Adobe
   [05/04/2006|14:25] C:\Program Files\Ahead
   [05/10/2008|11:54] C:\Program Files\Alcohol Soft
   [02/02/2006|18:11] C:\Program Files\AMD
   [13/08/2008|13:49] C:\Program Files\Apple Software Update
   [07/05/2008|23:30] C:\Program Files\Atari
   [11/04/2008|10:42] C:\Program Files\Avira
   [25/04/2006|20:57] C:\Program Files\AviSynth 2.5
   [23/12/2006|13:44] C:\Program Files\AvRack
   [13/09/2008|10:52] C:\Program Files\Bonjour
   [04/02/2007|13:05] C:\Program Files\CCleaner
   [15/07/2005|16:10] C:\Program Files\C-Media 3D Audio
   [17/05/2008|10:48] C:\Program Files\Common Files
   [15/04/2008|20:46] C:\Program Files\DivX
   [07/11/2006|18:55] C:\Program Files\download
   [16/10/2007|20:16] C:\Program Files\EA GAMES
   [05/10/2008|16:01] C:\Program Files\EA Sports
   [01/10/2008|09:54] C:\Program Files\eMule
   [30/04/2007|13:52] C:\Program Files\EPSON
   [18/09/2008|19:29] C:\Program Files\Fichiers communs
   [31/10/2007|21:32] C:\Program Files\GameSpy Arcade
   [30/01/2008|16:41] C:\Program Files\Gpotato.eu
   [10/08/2008|19:20] C:\Program Files\GTA
   [14/04/2008|10:45] C:\Program Files\Hamachi
   [12/08/2005|09:21] C:\Program Files\Hercules
   [15/04/2008|21:23] C:\Program Files\ICQLite
   [18/08/2008|22:13] C:\Program Files\InstallShield Installation Information
   [14/08/2008|23:32] C:\Program Files\internet explorer
   [13/09/2008|10:53] C:\Program Files\iPod
   [13/09/2008|10:53] C:\Program Files\iTunes
   [26/02/2007|11:17] C:\Program Files\Java
   [05/10/2008|18:33] C:\Program Files\Malwarebytes' Anti-Malware
   [25/12/2007|17:35] C:\Program Files\Micro Application
   [26/02/2006|17:01] C:\Program Files\microsoft frontpage
   [01/09/2008|15:38] C:\Program Files\Microsoft SDKs
   [19/08/2008|22:49] C:\Program Files\Microsoft Silverlight
   [01/09/2008|16:31] C:\Program Files\Microsoft Visual Studio 9.0
   [01/09/2008|16:28] C:\Program Files\Microsoft.NET
   [12/09/2008|19:29] C:\Program Files\Movie Maker
   [05/10/2008|20:58] C:\Program Files\Mozilla Firefox
   [01/09/2008|15:32] C:\Program Files\MSBuild
   [12/09/2008|19:29] C:\Program Files\msn
   [31/03/2006|20:10] C:\Program Files\msn gaming zone
   [18/11/2006|20:47] C:\Program Files\MSXML 4.0
   [01/09/2008|15:29] C:\Program Files\MSXML 6.0
   [05/10/2008|18:26] C:\Program Files\Navilog1
   [12/09/2008|19:26] C:\Program Files\NetMeeting
   [13/08/2005|11:38] C:\Program Files\Netropa
   [07/11/2006|18:52] C:\Program Files\NVIDIA
   [16/06/2008|19:27] C:\Program Files\OLYMPUS
   [05/04/2006|14:54] C:\Program Files\OpenOffice.org 2.0
   [12/08/2008|11:42] C:\Program Files\Orange
   [12/09/2008|19:26] C:\Program Files\Outlook Express
   [23/07/2008|21:02] C:\Program Files\Photo Viewer
   [20/07/2007|18:55] C:\Program Files\Pilotes
   [13/09/2008|10:51] C:\Program Files\QuickTime
   [23/12/2006|13:44] C:\Program Files\Realtek AC97
   [23/12/2006|13:44] C:\Program Files\Realtek Sound Manager
   [01/08/2006|21:32] C:\Program Files\REALTEK_XP64_XP_2K(A377)
   [01/09/2008|15:32] C:\Program Files\Reference Assemblies
   [01/05/2006|20:00] C:\Program Files\RegCleaner
   [12/08/2008|11:33] C:\Program Files\SAGEM
   [11/06/2008|10:38] C:\Program Files\Securitoo
   [08/12/2007|21:00] C:\Program Files\SilverCrest Vibration Headset
   [04/01/2007|11:36] C:\Program Files\SP810
   [13/08/2005|11:22] C:\Program Files\SpeedTouch USB
   [17/09/2008|13:57] C:\Program Files\Spybot - Search & Destroy
   [05/10/2008|17:22] C:\Program Files\Steam
   [24/04/2006|21:11] C:\Program Files\Teamspeak2_RC2
   [17/09/2008|13:43] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
   [21/02/2007|09:56] C:\Program Files\THQ
   [15/12/2007|20:18] C:\Program Files\TomTom HOME 2
   [13/08/2005|11:38] C:\Program Files\Touch Manager
   [06/05/2008|19:56] C:\Program Files\TryMedia
   [29/05/2006|20:55] C:\Program Files\Ubisoft
   [02/08/2006|15:10] C:\Program Files\Ulead Systems
   [15/07/2005|17:06] C:\Program Files\Uninstall Information
   [24/03/2008|15:37] C:\Program Files\uTorrent
   [18/08/2008|22:17] C:\Program Files\Warcraft III
   [03/10/2008|17:41] C:\Program Files\Windows Live
   [20/07/2007|18:56] C:\Program Files\Windows Media Connect 2
   [12/09/2008|19:26] C:\Program Files\Windows Media Player
   [12/09/2008|19:26] C:\Program Files\Windows NT
   [04/04/2006|17:32] C:\Program Files\WindowsUpdate
   [03/11/2006|21:29] C:\Program Files\WinRAR
   [28/09/2008|13:10] C:\Program Files\World of Warcraft
   [08/09/2008|19:23] C:\Program Files\WowCartographe
   [15/07/2005|17:00] C:\Program Files\xerox
   [13/09/2008|10:41] C:\Program Files\Xfire

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [15/04/2008|22:16] C:\Program Files\Fichiers communs\Adobe
   [15/07/2005|17:30] C:\Program Files\Fichiers communs\Ahead
   [13/09/2008|10:50] C:\Program Files\Fichiers communs\Apple
   [27/05/2008|16:51] C:\Program Files\Fichiers communs\Blizzard Entertainment
   [24/04/2007|10:01] C:\Program Files\Fichiers communs\EPSON
   [12/08/2008|11:40] C:\Program Files\Fichiers communs\France Telecom
   [24/01/2006|20:08] C:\Program Files\Fichiers communs\InstallShield
   [01/12/2006|22:44] C:\Program Files\Fichiers communs\Java
   [02/11/2006|10:24] C:\Program Files\Fichiers communs\MAGIX Shared
   [01/09/2008|16:29] C:\Program Files\Fichiers communs\Merge Modules
   [03/10/2008|17:39] C:\Program Files\Fichiers communs\Microsoft Shared
   [29/12/2007|10:54] C:\Program Files\Fichiers communs\Motorola Shared
   [15/07/2005|16:57] C:\Program Files\Fichiers communs\MSSoap
   [15/07/2005|17:50] C:\Program Files\Fichiers communs\ODBC
   [07/05/2008|23:33] C:\Program Files\Fichiers communs\PocketSoft
   [01/02/2007|10:32] C:\Program Files\Fichiers communs\Real
   [13/01/2008|13:14] C:\Program Files\Fichiers communs\ReGet Shared
   [15/07/2005|16:57] C:\Program Files\Fichiers communs\Services
   [13/07/2006|12:58] C:\Program Files\Fichiers communs\Softwin
   [15/07/2005|17:50] C:\Program Files\Fichiers communs\SpeechEngines
   [05/10/2006|20:15] C:\Program Files\Fichiers communs\SWF Studio
   [21/03/2006|08:25] C:\Program Files\Fichiers communs\Symantec Shared
   [12/09/2008|19:26] C:\Program Files\Fichiers communs\System
   [21/04/2006|10:38] C:\Program Files\Fichiers communs\Vbox
   [09/04/2007|13:15] C:\Program Files\Fichiers communs\Vivendi Universal Games
   [02/10/2008|19:15] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 38 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-10-05 21:30:07
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 221
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1][D:1]-> C:\DOCUME~1\HESTIN\LOCALS~1\Temp
   [F:82][D:0]-> C:\DOCUME~1\HESTIN\Cookies
   [F:2541][D:8]-> C:\DOCUME~1\HESTIN\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 05/10/2008|21:26 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 05/10/2008|21:31 - Option : [2]

   --------------------\  Fin du rapport a 21:31:07

droide6 · Answer

Pour l'instant je n'en ai pas encore eu. Ca m'a l'air d'être règlé, merci à vous. Si jamais j'ai encore des pubs CiD je vous ferais signe !

^^Marie^^ · Answer

Envoie un log hijackthis pour contrôler

droide6 · Answer

Voila le hilackthsi que tu m'as demandé Marie :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:42:21, on 06/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS2\system32\WgaTray.exe
C:\WINDOWS2\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS2\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS2\system32
vsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS2\system32\wuauclt.exe
C:\Documents and Settings\HESTIN\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS2\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS2\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar	oolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32
vsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

droide6 · Answer

Je pense que les pubs CiD sont partis : depuis 15h30 jusque maintenant je n'en ai plus eu


Merci à tous .

droide6 · Answer

J'ai supprimer les ligne et fais le nettoyage. Après ça je n'avais plus d'erreur dans le registre, merci :).

^^Marie^^ · Answer

Re

•	Télécharge ToolsCleaner de A.Roshtein sur ton Bureau.(sur un des 2 liens)
http://pc-system.fr/
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner 
•	Clique sur Recherche et laisse le scan se terminer.
•	Clique, sur Suppression pour finaliser.
•	Tu peux, si tu le souhaites, te servir des Options facultatives.
•	Clique sur Quitter, pour que le rapport puisse se créer.
•	Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

droide6 · Answer

Voici le rapport de ToolsCleaner :

[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\lopR.txt: trouvé !
C:\SDFIX: trouvé !
C:\Lop SD: trouvé !
C:\Documents and Settings\All Users\Bureau\VBG.txt: trouvé !
C:\Documents and Settings\All Users.WINDOWS2\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users.WINDOWS2\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\HESTIN\Bureau\HijackThis.exe: trouvé !
C:\Documents and Settings\HESTIN\Recent\HijackThis.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\WINDOWS2\ERUNT\SDFIX: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users.WINDOWS2\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\HESTIN\Bureau\HijackThis.exe: supprimé !
C:\Documents and Settings\HESTIN\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\All Users\Bureau\VBG.txt: supprimé !
C:\SDFIX: supprimé !
C:\Lop SD: supprimé !
C:\Documents and Settings\All Users.WINDOWS2\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\WINDOWS2\ERUNT\SDFIX: supprimé !

CiD Pubs Intempestives

42 réponses

Discussions similaires