Sujet Précédent Sujet Suivant

Virus

Résolu/Fermé
simchaka - 11 oct. 2008 à 18:12
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 - 12 oct. 2008 à 00:06
Bonjour,
j'ai un problème similaire a celui d'écrit par un internaute . voici les résultat.


--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : Compaq_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081010-0] 4.8.1229 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 70 Go Free : 55 Go
D:\ (Local Disk) - FAT32 - Total : 4 Go Free : 1 Go
E:\ (CD or DVD)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [1] ( 11/10/2008|17:28 )

--------------------\\ Listing des dossiers dans APPLIC~1

[16/09/2008|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/06/2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[02/01/2004|02:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[27/04/2008|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[19/07/2008|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
[09/07/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/07/2008|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02/01/2004|01:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[19/07/2008|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[21/05/2008|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/07/2008|14:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[02/01/2004|02:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[11/09/2008|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[19/07/2008|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[30/08/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\phenomedia
[19/07/2008|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[02/01/2004|02:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[01/01/2004|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[25/07/2008|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SCOO5
[27/04/2008|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[27/04/2008|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[12/07/2008|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/07/2008|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/07/2008|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[27/04/2008|21:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[07/07/2008|19:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[08/10/2008|18:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe
[16/09/2008|15:23] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM
[10/10/2008|13:01] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer
[06/07/2008|15:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Canon
[20/07/2008|16:19] C:\DOCUME~1\COMPAQ~1\APPLIC~1\cerasus.media
[17/06/2008|19:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Creative
[18/05/2008|19:42] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EoRezo
[19/07/2008|18:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Flood Light Games
[09/07/2008|17:16] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google
[30/04/2008|10:06] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Help
[01/01/2004|23:51] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities
[02/01/2004|01:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Intervideo
[27/04/2008|20:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ItsLabel
[27/04/2008|19:26] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia
[13/07/2008|16:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft
[27/04/2008|20:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft Web Folders
[09/10/2008|12:33] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Motive
[30/07/2008|17:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Mozilla
[19/07/2008|14:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PlayFirst
[02/01/2004|02:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SampleView
[27/04/2008|20:21] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ScanSoft
[02/01/2004|01:08] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun
[01/01/2004|22:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Symantec
[29/04/2008|20:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Talkback
[30/07/2008|17:02] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TomTom
[10/10/2008|21:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\VirusRemover2008

[02/01/2004|02:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[01/01/2004|23:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/01/2004|01:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2004|23:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/01/2004|02:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[02/01/2004|01:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2004|22:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/01/2004|23:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[01/01/2004|23:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[25/08/2008 22:28][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[10/10/2008 22:40][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[05/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
[11/10/2008 16:20][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[10/10/2008|21:30] C:\Program Files\Adobe
[27/04/2008|21:12] C:\Program Files\Alwil Software
[28/06/2008|19:06] C:\Program Files\Anuman Interactive
[27/06/2008|07:33] C:\Program Files\Apple Software Update
[27/04/2008|20:19] C:\Program Files\ArcSoft
[13/06/2008|14:25] C:\Program Files\Bonjour
[27/04/2008|20:18] C:\Program Files\Canon
[16/07/2008|15:17] C:\Program Files\Circle Developement
[01/01/2004|23:49] C:\Program Files\ComPlus Applications
[29/04/2008|20:26] C:\Program Files\Creative
[07/06/2008|09:57] C:\Program Files\directx
[04/06/2008|14:52] C:\Program Files\Disney Interactive
[09/05/2008|19:01] C:\Program Files\Dofus
[02/01/2004|02:20] C:\Program Files\Easy Internet signup
[22/07/2008|13:36] C:\Program Files\Empire Interactive
[18/05/2008|19:42] C:\Program Files\EoRezo
[25/07/2008|15:46] C:\Program Files\Evid et Denouvel
[19/07/2008|12:56] C:\Program Files\Fichiers communs
[10/10/2008|21:27] C:\Program Files\Galswin
[09/07/2008|15:03] C:\Program Files\Google
[02/01/2004|02:13] C:\Program Files\Help and Support Additions
[10/10/2008|21:26] C:\Program Files\Incredijeux
[10/10/2008|21:27] C:\Program Files\InstallShield Installation Information
[24/08/2008|23:19] C:\Program Files\Internet Explorer
[02/01/2004|01:55] C:\Program Files\InterVideo
[02/01/2004|02:03] C:\Program Files\iPod
[17/07/2008|11:52] C:\Program Files\iTunes
[27/07/2008|14:57] C:\Program Files\Java
[02/07/2008|12:22] C:\Program Files\Maxis
[24/08/2008|23:20] C:\Program Files\Messenger
[16/07/2008|15:17] C:\Program Files\Messenger Plus! Live
[02/07/2008|11:34] C:\Program Files\Micro Application
[01/01/2004|23:51] C:\Program Files\microsoft frontpage
[30/04/2008|11:47] C:\Program Files\Microsoft Office
[25/07/2008|18:11] C:\Program Files\Mindscape
[12/07/2008|22:30] C:\Program Files\Movie Maker
[07/07/2008|15:23] C:\Program Files\Mozilla Firefox
[01/01/2004|23:48] C:\Program Files\MSN
[01/01/2004|23:48] C:\Program Files\MSN Gaming Zone
[11/10/2008|17:08] C:\Program Files\Navilog1
[12/07/2008|22:28] C:\Program Files\NetMeeting
[11/09/2008|16:19] C:\Program Files\NOS
[10/10/2008|21:28] C:\Program Files\Oberon Media
[01/01/2004|23:48] C:\Program Files\Online Services
[12/07/2008|22:28] C:\Program Files\Outlook Express
[02/01/2004|02:14] C:\Program Files\PC-Doctor for Windows
[29/07/2008|18:51] C:\Program Files\Phenomedia AG
[30/04/2008|17:48] C:\Program Files\PhotoFiltre
[11/07/2008|12:54] C:\Program Files\PhotoScape
[27/04/2008|20:40] C:\Program Files\Picasa2
[17/07/2008|11:50] C:\Program Files\QuickTime
[27/04/2008|20:20] C:\Program Files\ScanSoft
[02/01/2004|02:20] C:\Program Files\Services en ligne
[17/07/2008|16:35] C:\Program Files\SightSpeed
[01/01/2004|21:33] C:\Program Files\SiS VGA Utilities V3.59e
[30/04/2008|11:32] C:\Program Files\SoftChris
[02/01/2004|01:53] C:\Program Files\Sonic
[02/01/2004|01:53] C:\Program Files\Sonic RecordNow!
[27/07/2008|14:57] C:\Program Files\Sun
[09/05/2008|13:21] C:\Program Files\THQ
[30/07/2008|17:01] C:\Program Files\TomTom DesktopSuite
[30/07/2008|17:02] C:\Program Files\TomTom HOME 2
[01/01/2004|23:54] C:\Program Files\Uninstall Information
[07/07/2008|19:18] C:\Program Files\Windows Live
[12/07/2008|22:31] C:\Program Files\Windows Media Player
[12/07/2008|22:28] C:\Program Files\Windows NT
[01/01/2004|23:50] C:\Program Files\WindowsUpdate
[01/01/2004|23:51] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[01/05/2008|11:30] C:\Program Files\Fichiers communs\Adobe
[13/06/2008|14:22] C:\Program Files\Fichiers communs\Apple
[30/04/2008|11:48] C:\Program Files\Fichiers communs\Designer
[07/06/2008|09:59] C:\Program Files\Fichiers communs\DirectX
[01/01/2004|21:33] C:\Program Files\Fichiers communs\InstallShield
[02/01/2004|01:08] C:\Program Files\Fichiers communs\Java
[27/07/2008|21:38] C:\Program Files\Fichiers communs\Microsoft Shared
[01/01/2004|23:49] C:\Program Files\Fichiers communs\MSSoap
[19/07/2008|12:56] C:\Program Files\Fichiers communs\Oberon Media
[02/01/2004|00:45] C:\Program Files\Fichiers communs\ODBC
[27/04/2008|20:21] C:\Program Files\Fichiers communs\ScanSoft Shared
[08/07/2008|01:27] C:\Program Files\Fichiers communs\Services
[02/01/2004|00:45] C:\Program Files\Fichiers communs\SpeechEngines
[02/01/2004|01:53] C:\Program Files\Fichiers communs\SureThing Shared
[12/07/2008|23:28] C:\Program Files\Fichiers communs\Symantec Shared
[12/07/2008|22:28] C:\Program Files\Fichiers communs\System
[27/04/2008|21:42] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 44 Processes )

iexplore.exe ~ [PID:3532]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Program Files\Circle Developement
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertising[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-11 17:29:27
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 16

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\COMPAQ~1\Favoris\c‚cilia\Meubles Crack.url


[F:1176][D:71]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
[F:58][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
[F:1578][D:6]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 11/10/2008|17:31 - Option : [1]

--------------------\\ Fin du rapport a 17:31:39
A voir également:

8 réponses

Réponse 1 / 8
simchaka
11 oct. 2008 à 18:50
bonsoir , merci pour ton aide voici les raport.

--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : Compaq_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081010-0] 4.8.1229 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 70 Go Free : 55 Go
D:\ (Local Disk) - FAT32 - Total : 4 Go Free : 1 Go
E:\ (CD or DVD)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [2] ( 11/10/2008|18:41 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[16/09/2008|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/06/2008|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[02/01/2004|02:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[27/04/2008|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[19/07/2008|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
[09/07/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/07/2008|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02/01/2004|01:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[19/07/2008|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[21/05/2008|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/07/2008|14:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[02/01/2004|02:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[11/09/2008|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[19/07/2008|19:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[30/08/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\phenomedia
[19/07/2008|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[02/01/2004|02:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[01/01/2004|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[25/07/2008|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SCOO5
[27/04/2008|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[27/04/2008|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[12/07/2008|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/07/2008|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[30/07/2008|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[27/04/2008|21:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[07/07/2008|19:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[08/10/2008|18:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe
[16/09/2008|15:23] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM
[10/10/2008|13:01] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer
[06/07/2008|15:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Canon
[20/07/2008|16:19] C:\DOCUME~1\COMPAQ~1\APPLIC~1\cerasus.media
[17/06/2008|19:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Creative
[18/05/2008|19:42] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EoRezo
[19/07/2008|18:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Flood Light Games
[09/07/2008|17:16] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google
[30/04/2008|10:06] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Help
[01/01/2004|23:51] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities
[02/01/2004|01:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Intervideo
[27/04/2008|20:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ItsLabel
[27/04/2008|19:26] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia
[13/07/2008|16:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft
[27/04/2008|20:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft Web Folders
[09/10/2008|12:33] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Motive
[30/07/2008|17:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Mozilla
[19/07/2008|14:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PlayFirst
[02/01/2004|02:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SampleView
[27/04/2008|20:21] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ScanSoft
[02/01/2004|01:08] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun
[01/01/2004|22:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Symantec
[29/04/2008|20:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Talkback
[30/07/2008|17:02] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TomTom
[10/10/2008|21:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\VirusRemover2008

[02/01/2004|02:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[01/01/2004|23:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/01/2004|01:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2004|23:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/01/2004|02:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[02/01/2004|01:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2004|22:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/01/2004|23:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[01/01/2004|23:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[25/08/2008 22:28][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[10/10/2008 22:40][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[05/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
[11/10/2008 16:20][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[10/10/2008|21:30] C:\Program Files\Adobe
[27/04/2008|21:12] C:\Program Files\Alwil Software
[28/06/2008|19:06] C:\Program Files\Anuman Interactive
[27/06/2008|07:33] C:\Program Files\Apple Software Update
[27/04/2008|20:19] C:\Program Files\ArcSoft
[13/06/2008|14:25] C:\Program Files\Bonjour
[27/04/2008|20:18] C:\Program Files\Canon
[01/01/2004|23:49] C:\Program Files\ComPlus Applications
[29/04/2008|20:26] C:\Program Files\Creative
[07/06/2008|09:57] C:\Program Files\directx
[04/06/2008|14:52] C:\Program Files\Disney Interactive
[09/05/2008|19:01] C:\Program Files\Dofus
[02/01/2004|02:20] C:\Program Files\Easy Internet signup
[22/07/2008|13:36] C:\Program Files\Empire Interactive
[18/05/2008|19:42] C:\Program Files\EoRezo
[25/07/2008|15:46] C:\Program Files\Evid et Denouvel
[19/07/2008|12:56] C:\Program Files\Fichiers communs
[10/10/2008|21:27] C:\Program Files\Galswin
[09/07/2008|15:03] C:\Program Files\Google
[02/01/2004|02:13] C:\Program Files\Help and Support Additions
[10/10/2008|21:26] C:\Program Files\Incredijeux
[10/10/2008|21:27] C:\Program Files\InstallShield Installation Information
[24/08/2008|23:19] C:\Program Files\Internet Explorer
[02/01/2004|01:55] C:\Program Files\InterVideo
[02/01/2004|02:03] C:\Program Files\iPod
[17/07/2008|11:52] C:\Program Files\iTunes
[27/07/2008|14:57] C:\Program Files\Java
[02/07/2008|12:22] C:\Program Files\Maxis
[24/08/2008|23:20] C:\Program Files\Messenger
[16/07/2008|15:17] C:\Program Files\Messenger Plus! Live
[02/07/2008|11:34] C:\Program Files\Micro Application
[01/01/2004|23:51] C:\Program Files\microsoft frontpage
[30/04/2008|11:47] C:\Program Files\Microsoft Office
[25/07/2008|18:11] C:\Program Files\Mindscape
[12/07/2008|22:30] C:\Program Files\Movie Maker
[07/07/2008|15:23] C:\Program Files\Mozilla Firefox
[01/01/2004|23:48] C:\Program Files\MSN
[01/01/2004|23:48] C:\Program Files\MSN Gaming Zone
[11/10/2008|17:08] C:\Program Files\Navilog1
[12/07/2008|22:28] C:\Program Files\NetMeeting
[11/09/2008|16:19] C:\Program Files\NOS
[10/10/2008|21:28] C:\Program Files\Oberon Media
[01/01/2004|23:48] C:\Program Files\Online Services
[12/07/2008|22:28] C:\Program Files\Outlook Express
[02/01/2004|02:14] C:\Program Files\PC-Doctor for Windows
[29/07/2008|18:51] C:\Program Files\Phenomedia AG
[30/04/2008|17:48] C:\Program Files\PhotoFiltre
[11/07/2008|12:54] C:\Program Files\PhotoScape
[27/04/2008|20:40] C:\Program Files\Picasa2
[17/07/2008|11:50] C:\Program Files\QuickTime
[27/04/2008|20:20] C:\Program Files\ScanSoft
[02/01/2004|02:20] C:\Program Files\Services en ligne
[17/07/2008|16:35] C:\Program Files\SightSpeed
[01/01/2004|21:33] C:\Program Files\SiS VGA Utilities V3.59e
[30/04/2008|11:32] C:\Program Files\SoftChris
[02/01/2004|01:53] C:\Program Files\Sonic
[02/01/2004|01:53] C:\Program Files\Sonic RecordNow!
[27/07/2008|14:57] C:\Program Files\Sun
[09/05/2008|13:21] C:\Program Files\THQ
[30/07/2008|17:01] C:\Program Files\TomTom DesktopSuite
[30/07/2008|17:02] C:\Program Files\TomTom HOME 2
[01/01/2004|23:54] C:\Program Files\Uninstall Information
[07/07/2008|19:18] C:\Program Files\Windows Live
[12/07/2008|22:31] C:\Program Files\Windows Media Player
[12/07/2008|22:28] C:\Program Files\Windows NT
[01/01/2004|23:50] C:\Program Files\WindowsUpdate
[01/01/2004|23:51] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[01/05/2008|11:30] C:\Program Files\Fichiers communs\Adobe
[13/06/2008|14:22] C:\Program Files\Fichiers communs\Apple
[30/04/2008|11:48] C:\Program Files\Fichiers communs\Designer
[07/06/2008|09:59] C:\Program Files\Fichiers communs\DirectX
[01/01/2004|21:33] C:\Program Files\Fichiers communs\InstallShield
[02/01/2004|01:08] C:\Program Files\Fichiers communs\Java
[27/07/2008|21:38] C:\Program Files\Fichiers communs\Microsoft Shared
[01/01/2004|23:49] C:\Program Files\Fichiers communs\MSSoap
[19/07/2008|12:56] C:\Program Files\Fichiers communs\Oberon Media
[02/01/2004|00:45] C:\Program Files\Fichiers communs\ODBC
[27/04/2008|20:21] C:\Program Files\Fichiers communs\ScanSoft Shared
[08/07/2008|01:27] C:\Program Files\Fichiers communs\Services
[02/01/2004|00:45] C:\Program Files\Fichiers communs\SpeechEngines
[02/01/2004|01:53] C:\Program Files\Fichiers communs\SureThing Shared
[12/07/2008|23:28] C:\Program Files\Fichiers communs\Symantec Shared
[12/07/2008|22:28] C:\Program Files\Fichiers communs\System
[27/04/2008|21:42] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 42 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertising[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-11 18:42:45
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 16

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\COMPAQ~1\Favoris\c‚cilia\Meubles Crack.url


[F:1182][D:71]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
[F:74][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
[F:2189][D:6]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 11/10/2008|17:31 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 11/10/2008|18:45 - Option : [2]

--------------------\\ Fin du rapport a 18:45:20
0
Réponse 2 / 8
simchaka
12 oct. 2008 à 00:00
merci de m'avoir aider a bientot
0
Réponse 3 / 8
simchaka
12 oct. 2008 à 00:04
merci beaucoup je crois que j'en suis débarraser, je ne vois plus rien merci beaucoup
0
Réponse 4 / 8
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
11 oct. 2008 à 18:33
Salut,

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)
-1

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 8
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
11 oct. 2008 à 18:51
- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.
-1
Réponse 6 / 8
Sacabouffe Messages postés 9427 Date d'inscription dimanche 19 août 2007 Statut Membre Dernière intervention 29 mai 2009 1 834
11 oct. 2008 à 23:22
Bonsoir
Voilà le message de simchaka, il était resté coincé :-O

les voici


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:03:31, on 11/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService­.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.e­xe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.­exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\G­oogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\v­ideo1140.cfg.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\b­.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.skyrock.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PD0630 STISvc] RunDLL32.exe P0630Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [VirusRemover2008] C:\Program Files\VirusRemover2008\VRM2008.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SecureExpertCleanerDownloader] C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\4VCLODOX\CleanerInstaller_fr[2].exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [MSFox] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\video1140.cfg.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 7954 bytes

Bonne continuation ;-)
-1
Réponse 7 / 8
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
11 oct. 2008 à 23:28
- Télécharge et installe MalwareByte's Anti-Malware :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

- Mets-le à jour

- Redémarre en mode sans échec (Recommandé) :
https://blog.sosordi.net/

- Choisis ta session habituelle

- Fais un scan complet avec MalwareByte's Anti-Malware

- Supprime tout ce que le logiciel trouve, enregistre le rapport

- Redémarre en mode normal et poste le rapport ici

Tutorial :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
-1
Réponse 8 / 8
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
12 oct. 2008 à 00:06
---> Poste le rapport s'il te plaît.
-1

Discussions similaires

Est ce que le site tlauncher est dangereux ?
caribou -
bazfile -

1 réponse
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
4 virus en raison d’un porno ????
valou -
Bello040420 -

9 réponses
problême Opéra est ce un virus??
sand2504 -
sand2504 -

85 réponses
Virus MSN Tinyurl
djkifkif -
matt56430 -

8 réponses