Kesenjangan.exe.

Hello !

Je ne vois aucune infection Navipromo.

Par contre, O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe =< infection Toolbars

F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe" .

Laisse tomber Navilog.

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.

Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
comment demarrer en mode sans echec en images
Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
Choisis ton compte.

Déroule la liste des instructions ci-dessous :

* Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
* Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

Tuto d'instalation et de mise en oeuvre

Salut ^^ plusieurs infection on commence par celle de navipromo :::

Télécharge maintenant Navilog1 :

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée,ouvre navilog !

Au menu principal, Fais le choix 1
Laisse toi guider et patiente.
Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche le blocnote va s'ouvrir.
Copie-colle l'intégralité du rapport dans une réponse.
Referme le blocnote
Le rapport fixnavi.txt

Arfff me suis trompé sorry...

le rapport n'est pas complet.

Colle le ici entierement stp.

De rien "tonyo" ^^bonne continuation !

[b]SDFix: Version 1.240 [/b]
Run by Administrateur on 26/11/2008 at 21:12

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files [/b]:

No Trojan Files Found

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-26 21:24:10
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:fb,c4,db,8e,cb,0b,a0,ba,ab,94,df,7e,97,cf,36,13,59,b3,25,f0,58,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,8d,95,7a,57,4a,54,26,c2,d5,7b,eb,9c,5b,7c,a1,49,f3,..
"khjeh"=hex:d9,9c,9a,02,41,9b,be,8f,65,66,78,93,8f,c6,af,53,c7,05,f2,9a,8e,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:9f,81,d7,29,f9,4e,66,43,5d,a0,3b,66,5f,bf,ac,6b,7f,4f,a8,0b,93,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:fb,c4,db,8e,cb,0b,a0,ba,ab,94,df,7e,97,cf,36,13,59,b3,25,f0,58,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,8d,95,7a,57,4a,54,26,c2,d5,7b,eb,9c,5b,7c,a1,49,f3,..
"khjeh"=hex:d9,9c,9a,02,41,9b,be,8f,65,66,78,93,8f,c6,af,53,c7,05,f2,9a,8e,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:9f,81,d7,29,f9,4e,66,43,5d,a0,3b,66,5f,bf,ac,6b,7f,4f,a8,0b,93,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:fb,c4,db,8e,cb,0b,a0,ba,ab,94,df,7e,97,cf,36,13,59,b3,25,f0,58,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,8d,95,7a,57,4a,54,26,c2,d5,7b,eb,9c,5b,7c,a1,49,f3,..
"khjeh"=hex:d9,9c,9a,02,41,9b,be,8f,65,66,78,93,8f,c6,af,53,c7,05,f2,9a,8e,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:9f,81,d7,29,f9,4e,66,43,5d,a0,3b,66,5f,bf,ac,6b,7f,4f,a8,0b,93,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:fb,c4,db,8e,cb,0b,a0,ba,ab,94,df,7e,97,cf,36,13,59,b3,25,f0,58,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,8d,95,7a,57,4a,54,26,c2,d5,7b,eb,9c,5b,7c,a1,49,f3,..
"khjeh"=hex:d9,9c,9a,02,41,9b,be,8f,65,66,78,93,8f,c6,af,53,c7,05,f2,9a,8e,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:9f,81,d7,29,f9,4e,66,43,5d,a0,3b,66,5f,bf,ac,6b,7f,4f,a8,0b,93,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\genesis948\\counter-strike\\hl.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\genesis948\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"="C:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe:*:Enabled:Veoh Web Player "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[b]Remaining Files [/b]:

[b]Files with Hidden Attributes [/b]:

Sat 12 Jan 2008 216 ..SH. --- "C:\BOOT.BAK"
Sun 14 Sep 2008 88 ..SHR --- "C:\WINDOWS\system32\04E7E65C38.sys"
Sun 14 Sep 2008 2,516 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Sat 26 Jan 2008 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sun 2 Mar 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Wed 27 Aug 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~10.tmp"
Sat 30 Aug 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~11.tmp"
Sun 14 Sep 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~12.tmp"
Tue 22 Apr 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~13.tmp"
Tue 20 May 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~14.tmp"
Thu 9 Oct 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~15.tmp"
Sat 8 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~16.tmp"
Thu 10 Apr 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~17.tmp"
Sun 20 Apr 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~18.tmp"
Sun 18 May 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~19.tmp"
Sun 31 Aug 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1A.tmp"
Thu 28 Aug 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1BC.tmp"
Tue 29 Jul 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1BE.tmp"
Fri 7 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1C.tmp"
Mon 21 Apr 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1D.tmp"
Sat 15 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1E.tmp"
Tue 8 Apr 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~1F.tmp"
Sun 20 Apr 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~20.tmp"
Wed 12 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~21.tmp"
Mon 28 Jul 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~210.tmp"
Tue 18 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~22.tmp"
Wed 3 Sep 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~23.tmp"
Sun 16 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~26.tmp"
Mon 10 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~28.tmp"
Thu 20 Mar 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~29.tmp"
Fri 23 May 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~2A.tmp"
Thu 6 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~2B.tmp"
Thu 6 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~2C.tmp"
Tue 18 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~2D.tmp"
Wed 27 Aug 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~3.tmp"
Thu 3 Jul 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~33.tmp"
Sat 30 Aug 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~34.tmp"
Sun 23 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~35.tmp"
Mon 21 Apr 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~37.tmp"
Fri 11 Jul 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~382.tmp"
Mon 15 Sep 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~3B.tmp"
Sun 29 Jun 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~3D.tmp"
Tue 25 Mar 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~48.tmp"
Wed 27 Feb 2008 210,432 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~6.tmp"
Fri 7 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~6F.tmp"
Thu 6 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~7.tmp"
Sun 9 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~9.tmp"
Sun 23 Nov 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~99.tmp"
Mon 24 Mar 2008 211,968 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~B.tmp"
Sun 14 Sep 2008 243,712 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~BE.tmp"
Sat 24 May 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~CE.tmp"
Thu 6 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~D.tmp"
Wed 23 Apr 2008 214,016 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~E.tmp"
Sat 8 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~E3.tmp"
Tue 18 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~F.tmp"
Wed 12 Mar 2008 209,408 A..H. --- "C:\Documents and Settings\tonyo948\Local Settings\Temp\~F0.tmp"

[b]Finished![/b]

dsl javer pa vu les rest merci de m'aider

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

Tutoriel d'install' et d'utilisation

Ø Lance l'installation du programme en exécutant le fichier téléchargé.
Ø Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
Ø Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré qui se trouve ici => (C:\TB.txt)

jai choper un spaywer et il veu pas ce barer sui la c trojan jarive pa a le faire soter avec spywar doctor pouver vou maider a trouver un logisiel pour le faire soter????

merci davance

Spyware.Found_By_Browser_Defender

Relance Toolbar-S&D en double-cliquant sur le raccourci.
Ø Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

-----------\\ ToolBar S&D 1.2.5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : tonyo948 ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1290 [VPS 081127-1] 4.8.1290 (Activated)
Firewall : BitDefender Firewall 12.0 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:32 Go)
D:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
Option : [2] ( 27/11/2008|22:42 )

-----------\\ SUPPRESSION

Supprime! - C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf
Supprime! - C:\DOCUME~1\kikine\APPLIC~1\Search Settings\kb126
Supprime! - C:\DOCUME~1\NETWOR~1\APPLIC~1\Search Settings\kb126
Supprime! - C:\DOCUME~1\stefou\APPLIC~1\Search Settings\kb125
Supprime! - C:\DOCUME~1\stefou\APPLIC~1\Search Settings\kb126
Supprime! - C:\DOCUME~1\tonyo948\APPLIC~1\Search Settings\kb125
Supprime! - C:\DOCUME~1\tonyo948\APPLIC~1\Search Settings\kb126
Supprime! - C:\Program Files\Search Settings\kb126
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\Program Files\MSN Messenger\riched20.dll
Supprime! - C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsj142.tmp
Supprime! - C:\DOCUME~1\kikine\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\NETWOR~1\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\stefou\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\tonyo948\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(kikine) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(stefou) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultUrl"="http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRfox000&fl=0&ptb=rE6NXkJJl_N9LXmzZWfyYA&url=http://edits.mywebsearch.com/toolbaredits/barsearch.jhtml&st=sb&searchfor={searchTerms}"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 27/11/2008|22:41 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 27/11/2008|22:43 - Option : [2]

-----------\\ Fin du rapport a 22:43:46,67

voila le raport demander

Refais moi un log HJT tout frais stp...

Ø Relance Hijackthis en double cliquant sur son raccourci sur le Bureau.
Choisis l'option "Do a system scan and save a log file"
Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
Clique sur "Edition" ->> "Sélectionner tout", puis sur "Edition" ->> Copier" pour copier tout le contenu du rapport ici

Comment fixer les lignes et Générer un rapport
(merci balltrap34)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:21:23, on 27/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\tonyo948\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [livefree] C:\DOCUME~1\tonyo948\APPLIC~1\PLUSTR~1\Hopebias.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Tok-Cirrhatus-2124] "C:\Documents and Settings\tonyo948\Local Settings\Application Data\br5271on.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

snn ta pas msn pour que on fasse sa d1 coup en une fois si tu peu????

merci de maider

rajoute moi c tonyo948@hotmail.fr

Nan, j'ai pas MSN.

je regarde le rapport, je reviens.

Il reste encore des merdouilles...

Télécharge LopSD.exe sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Clique droit sur le raccourci Lop S&D présent sur ton Bureau puis " Exécuter en tant qu'administrateur "
* Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré qui se trouve ici => (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde ce tutorial

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : tonyo948 ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1290 [VPS 081127-1] 4.8.1290 (Activated)
Firewall : BitDefender Firewall 12.0 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:31 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 28/11/2008|17:31 )

--------------------\\ Listing des dossiers dans APPLIC~1

[26/11/2008|21:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[17/02/2008|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/01/2008|06:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[12/01/2008|06:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[12/01/2008|06:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[13/01/2008|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[17/01/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[01/05/2008|02:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[20/11/2008|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[27/11/2008|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[08/03/2008|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[12/11/2008|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[19/10/2008|19:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[03/02/2008|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Propellerhead Software
[30/07/2008|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[28/11/2008|17:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/09/2008|16:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\That Face Camp Shim
[31/10/2008|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[12/01/2008|06:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/03/2008|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[28/02/2008|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[12/01/2008|03:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/01/2008|13:23] C:\DOCUME~1\kikine\APPLIC~1\Adobe
[18/03/2008|17:48] C:\DOCUME~1\kikine\APPLIC~1\Apple Computer
[04/10/2008|14:13] C:\DOCUME~1\kikine\APPLIC~1\DivX
[11/09/2008|18:54] C:\DOCUME~1\kikine\APPLIC~1\Google
[12/01/2008|10:03] C:\DOCUME~1\kikine\APPLIC~1\Identities
[12/10/2008|17:49] C:\DOCUME~1\kikine\APPLIC~1\LimeWire
[13/01/2008|14:17] C:\DOCUME~1\kikine\APPLIC~1\Macromedia
[11/10/2008|12:32] C:\DOCUME~1\kikine\APPLIC~1\Microsoft
[30/07/2008|08:12] C:\DOCUME~1\kikine\APPLIC~1\mIRC
[28/08/2008|14:10] C:\DOCUME~1\kikine\APPLIC~1\Mozilla
[16/04/2008|20:45] C:\DOCUME~1\kikine\APPLIC~1\MSNInstaller
[26/02/2008|11:06] C:\DOCUME~1\kikine\APPLIC~1\Real
[03/05/2008|13:48] C:\DOCUME~1\kikine\APPLIC~1\U3
[13/11/2008|16:13] C:\DOCUME~1\kikine\APPLIC~1\Windows Desktop Search
[13/11/2008|16:14] C:\DOCUME~1\kikine\APPLIC~1\Windows Search
[15/01/2008|18:46] C:\DOCUME~1\kikine\APPLIC~1\WinRAR

[12/11/2008|22:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[05/07/2008|18:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
[12/10/2008|13:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[21/02/2008|05:15] C:\DOCUME~1\stefou\APPLIC~1\Adobe
[16/02/2008|20:43] C:\DOCUME~1\stefou\APPLIC~1\Ahead
[15/01/2008|15:57] C:\DOCUME~1\stefou\APPLIC~1\Apple Computer
[11/04/2008|14:33] C:\DOCUME~1\stefou\APPLIC~1\AVS4YOU
[18/01/2008|17:19] C:\DOCUME~1\stefou\APPLIC~1\Chessmaster Challenge
[14/01/2008|09:07] C:\DOCUME~1\stefou\APPLIC~1\DivX
[26/01/2008|02:17] C:\DOCUME~1\stefou\APPLIC~1\eMule
[18/02/2008|00:23] C:\DOCUME~1\stefou\APPLIC~1\Google
[12/01/2008|15:14] C:\DOCUME~1\stefou\APPLIC~1\Identities
[15/11/2008|16:31] C:\DOCUME~1\stefou\APPLIC~1\LimeWire
[12/01/2008|15:15] C:\DOCUME~1\stefou\APPLIC~1\Macromedia
[08/11/2008|22:19] C:\DOCUME~1\stefou\APPLIC~1\Microsoft
[21/03/2008|01:11] C:\DOCUME~1\stefou\APPLIC~1\mIRC
[29/08/2008|19:55] C:\DOCUME~1\stefou\APPLIC~1\Mozilla
[03/02/2008|16:04] C:\DOCUME~1\stefou\APPLIC~1\Propellerhead Software
[21/04/2008|04:29] C:\DOCUME~1\stefou\APPLIC~1\Real
[28/04/2008|19:29] C:\DOCUME~1\stefou\APPLIC~1\Sports Interactive
[24/01/2008|13:51] C:\DOCUME~1\stefou\APPLIC~1\Sun
[12/01/2008|17:55] C:\DOCUME~1\stefou\APPLIC~1\Syntrillium
[13/11/2008|22:29] C:\DOCUME~1\stefou\APPLIC~1\U3
[15/01/2008|16:15] C:\DOCUME~1\stefou\APPLIC~1\vlc
[13/11/2008|12:00] C:\DOCUME~1\stefou\APPLIC~1\Windows Desktop Search
[13/11/2008|21:29] C:\DOCUME~1\stefou\APPLIC~1\Windows Search
[12/01/2008|15:33] C:\DOCUME~1\stefou\APPLIC~1\WinRAR

[04/10/2008|18:51] C:\DOCUME~1\tonyo948\APPLIC~1\Adobe
[03/02/2008|22:23] C:\DOCUME~1\tonyo948\APPLIC~1\Ahead
[02/09/2008|04:08] C:\DOCUME~1\tonyo948\APPLIC~1\Apple Computer
[13/01/2008|21:10] C:\DOCUME~1\tonyo948\APPLIC~1\AVS4YOU
[30/03/2008|21:27] C:\DOCUME~1\tonyo948\APPLIC~1\Corel
[28/09/2008|17:04] C:\DOCUME~1\tonyo948\APPLIC~1\Creative
[15/07/2008|03:39] C:\DOCUME~1\tonyo948\APPLIC~1\DivX
[07/09/2008|17:40] C:\DOCUME~1\tonyo948\APPLIC~1\Google
[12/01/2008|03:36] C:\DOCUME~1\tonyo948\APPLIC~1\Identities
[26/11/2008|15:21] C:\DOCUME~1\tonyo948\APPLIC~1\LimeWire
[12/01/2008|06:45] C:\DOCUME~1\tonyo948\APPLIC~1\Macromedia
[02/11/2008|23:09] C:\DOCUME~1\tonyo948\APPLIC~1\Microsoft
[01/08/2008|14:42] C:\DOCUME~1\tonyo948\APPLIC~1\mIRC
[24/11/2008|18:13] C:\DOCUME~1\tonyo948\APPLIC~1\Mozilla
[30/07/2008|18:27] C:\DOCUME~1\tonyo948\APPLIC~1\Mumble
[18/11/2008|21:42] C:\DOCUME~1\tonyo948\APPLIC~1\PC Tools
[21/09/2008|17:14] C:\DOCUME~1\tonyo948\APPLIC~1\Plus Tray
[03/03/2008|19:57] C:\DOCUME~1\tonyo948\APPLIC~1\Propellerhead Software
[01/08/2008|17:27] C:\DOCUME~1\tonyo948\APPLIC~1\Publish Providers
[23/11/2008|12:10] C:\DOCUME~1\tonyo948\APPLIC~1\Real
[21/04/2008|13:00] C:\DOCUME~1\tonyo948\APPLIC~1\Samsung
[29/07/2008|18:13] C:\DOCUME~1\tonyo948\APPLIC~1\skypePM
[01/08/2008|17:25] C:\DOCUME~1\tonyo948\APPLIC~1\Sony
[29/04/2008|01:04] C:\DOCUME~1\tonyo948\APPLIC~1\Sports Interactive
[31/01/2008|11:52] C:\DOCUME~1\tonyo948\APPLIC~1\Sun
[31/01/2008|11:54] C:\DOCUME~1\tonyo948\APPLIC~1\Talkback
[10/11/2008|20:37] C:\DOCUME~1\tonyo948\APPLIC~1\teamspeak2
[04/03/2008|19:11] C:\DOCUME~1\tonyo948\APPLIC~1\U3
[28/08/2008|20:30] C:\DOCUME~1\tonyo948\APPLIC~1\vlc
[12/01/2008|05:49] C:\DOCUME~1\tonyo948\APPLIC~1\WinRAR

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[28/11/2008 17:28][--ah-----] C:\WINDOWS\tasks\SA.DAT
[02/03/2006 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[05/11/2008|00:06] C:\Program Files\AbiSuite2
[11/10/2008|01:51] C:\Program Files\Adobe
[16/11/2008|22:17] C:\Program Files\Ahead
[12/01/2008|03:53] C:\Program Files\Alwil Software
[03/05/2008|03:37] C:\Program Files\Anuman Interactive
[12/01/2008|06:08] C:\Program Files\ASUSTeK
[26/10/2008|13:25] C:\Program Files\Audible
[25/02/2008|20:46] C:\Program Files\AviSynth 2.5
[14/05/2008|18:03] C:\Program Files\AVS4YOU
[01/09/2008|19:33] C:\Program Files\Creative Installation Information
[03/02/2008|15:53] C:\Program Files\DAEMON Tools
[06/03/2008|01:55] C:\Program Files\DIFX
[23/11/2008|01:05] C:\Program Files\DivX
[27/11/2008|22:11] C:\Program Files\Fichiers communs
[12/01/2008|05:18] C:\Program Files\Free Audio Pack
[28/08/2008|18:34] C:\Program Files\FX Uninstall Information
[20/11/2008|20:03] C:\Program Files\Google
[03/02/2008|15:45] C:\Program Files\Image-Line
[06/11/2008|20:38] C:\Program Files\InstallShield Installation Information
[12/11/2008|21:26] C:\Program Files\Internet Explorer
[29/08/2008|14:13] C:\Program Files\iPod
[29/08/2008|14:13] C:\Program Files\iTunes
[22/11/2008|13:03] C:\Program Files\Java
[15/11/2008|11:33] C:\Program Files\LimeWire
[12/01/2008|06:25] C:\Program Files\Logitech
[06/03/2008|14:33] C:\Program Files\Mediafour
[26/10/2008|13:53] C:\Program Files\Messenger
[01/09/2008|22:50] C:\Program Files\Messenger Plus! Live
[12/01/2008|03:30] C:\Program Files\microsoft frontpage
[12/10/2008|13:07] C:\Program Files\Microsoft SQL Server
[26/10/2008|13:43] C:\Program Files\Movie Maker
[28/11/2008|17:30] C:\Program Files\Mozilla Firefox
[11/02/2008|22:59] C:\Program Files\MSECache
[30/03/2008|00:49] C:\Program Files\MSI
[16/04/2008|20:45] C:\Program Files\MSN
[12/01/2008|03:25] C:\Program Files\MSN Gaming Zone
[27/11/2008|22:42] C:\Program Files\MSN Messenger
[12/11/2008|21:06] C:\Program Files\MSXML 4.0
[26/10/2008|13:40] C:\Program Files\NetMeeting
[12/01/2008|03:26] C:\Program Files\Online Services
[26/10/2008|13:40] C:\Program Files\Outlook Express
[02/03/2008|01:53] C:\Program Files\Personal Media Manager
[01/09/2008|22:51] C:\Program Files\Plus Tray
[03/02/2008|15:59] C:\Program Files\Propellerhead
[29/08/2008|14:08] C:\Program Files\QuickTime
[06/04/2008|17:55] C:\Program Files\S3
[21/04/2008|12:51] C:\Program Files\Samsung
[12/01/2008|03:28] C:\Program Files\Services en ligne
[06/03/2008|02:10] C:\Program Files\Setup Files
[02/11/2008|18:08] C:\Program Files\Sony
[01/08/2008|17:22] C:\Program Files\Sony Setup
[27/11/2008|19:06] C:\Program Files\Spyware Doctor
[03/02/2008|15:43] C:\Program Files\Steinberg
[24/02/2008|20:18] C:\Program Files\Teamspeak2_RC2
[01/08/2008|17:12] C:\Program Files\Uninstall Information
[02/11/2008|23:09] C:\Program Files\Valve
[23/11/2008|12:12] C:\Program Files\Veoh Networks
[06/03/2008|01:34] C:\Program Files\VIA
[06/04/2008|17:53] C:\Program Files\VIAudioi
[28/08/2008|20:29] C:\Program Files\VideoLAN
[11/08/2008|18:39] C:\Program Files\WinAVI MP4 Converter
[15/11/2008|11:27] C:\Program Files\Windows Desktop Search
[14/01/2008|21:36] C:\Program Files\Windows Live
[12/01/2008|05:48] C:\Program Files\Windows Media Components
[31/07/2008|21:21] C:\Program Files\Windows Media Connect 2
[26/10/2008|13:40] C:\Program Files\Windows Media Player
[26/10/2008|13:40] C:\Program Files\Windows NT
[12/01/2008|03:28] C:\Program Files\WindowsUpdate
[12/01/2008|05:12] C:\Program Files\WinRAR
[12/01/2008|03:30] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[17/02/2008|13:33] C:\Program Files\Fichiers communs\Adobe
[12/01/2008|06:00] C:\Program Files\Fichiers communs\Ahead
[14/05/2008|18:03] C:\Program Files\Fichiers communs\AVSMedia
[28/04/2008|18:49] C:\Program Files\Fichiers communs\InstallShield
[13/01/2008|20:24] C:\Program Files\Fichiers communs\Java
[12/01/2008|06:05] C:\Program Files\Fichiers communs\LightScribe
[12/01/2008|06:26] C:\Program Files\Fichiers communs\Logitech
[19/10/2008|19:35] C:\Program Files\Fichiers communs\Microsoft Shared
[12/01/2008|03:27] C:\Program Files\Fichiers communs\MSSoap
[12/01/2008|06:02] C:\Program Files\Fichiers communs\Nero
[12/01/2008|04:20] C:\Program Files\Fichiers communs\ODBC
[23/11/2008|12:10] C:\Program Files\Fichiers communs\Real
[12/01/2008|03:27] C:\Program Files\Fichiers communs\Services
[02/11/2008|18:08] C:\Program Files\Fichiers communs\Sony Shared
[12/01/2008|04:20] C:\Program Files\Fichiers communs\SpeechEngines
[16/11/2008|20:52] C:\Program Files\Fichiers communs\Symantec Shared
[26/10/2008|13:40] C:\Program Files\Fichiers communs\System
[31/10/2008|16:55] C:\Program Files\Fichiers communs\Ulead Systems
[28/02/2008|00:21] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 48 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\That Face Camp Shim
C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsb86.tmp
C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsi15A.tmp
C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsn8B.tmp
C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsy151.tmp

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-28 17:34:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 281

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:2577][D:144]-> C:\DOCUME~1\tonyo948\LOCALS~1\Temp
[F:17][D:0]-> C:\DOCUME~1\tonyo948\Cookies
[F:217][D:8]-> C:\DOCUME~1\tonyo948\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 28/11/2008|17:40 - Option : [1]

--------------------\\ Fin du rapport a 17:40:00

voila le raport il y a des infections??????

Oui, il reste encore du LOP ( infection Lop )

Ouvre le Dossier Lop S&D et double clique sur Scan.bat ( le .bat peut ne pas apparaitre )

Au menu , tape 2 ( Suppression ) et valide
Ne ferme pas la fenêtre lors de la suppression

Poste le rapport généré
( il se trouve aussi dans le dossier Lop S&D et se nomme Rapport-Lop.txt )

( Si le Bureau ne réapparît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer et valide )

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : tonyo948 ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1290 [VPS 081128-0] 4.8.1290 (Activated)
Firewall : BitDefender Firewall 12.0 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:31 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 28/11/2008|23:28 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsb86.tmp
Supprime! - C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsi15A.tmp
Supprime! - C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsn8B.tmp
Supprime! - C:\DOCUME~1\tonyo948\LOCALS~1\Temp\nsy151.tmp
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\That Face Camp Shim
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[26/11/2008|21:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[17/02/2008|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/01/2008|06:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[12/01/2008|06:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[12/01/2008|06:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[13/01/2008|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[17/01/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[01/05/2008|02:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[20/11/2008|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[27/11/2008|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[08/03/2008|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[12/11/2008|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[19/10/2008|19:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[03/02/2008|16:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Propellerhead Software
[30/07/2008|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[28/11/2008|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[31/10/2008|16:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[12/01/2008|06:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/03/2008|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[28/02/2008|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[12/01/2008|03:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/01/2008|13:23] C:\DOCUME~1\kikine\APPLIC~1\Adobe
[18/03/2008|17:48] C:\DOCUME~1\kikine\APPLIC~1\Apple Computer
[04/10/2008|14:13] C:\DOCUME~1\kikine\APPLIC~1\DivX
[11/09/2008|18:54] C:\DOCUME~1\kikine\APPLIC~1\Google
[12/01/2008|10:03] C:\DOCUME~1\kikine\APPLIC~1\Identities
[12/10/2008|17:49] C:\DOCUME~1\kikine\APPLIC~1\LimeWire
[13/01/2008|14:17] C:\DOCUME~1\kikine\APPLIC~1\Macromedia
[11/10/2008|12:32] C:\DOCUME~1\kikine\APPLIC~1\Microsoft
[30/07/2008|08:12] C:\DOCUME~1\kikine\APPLIC~1\mIRC
[28/08/2008|14:10] C:\DOCUME~1\kikine\APPLIC~1\Mozilla
[16/04/2008|20:45] C:\DOCUME~1\kikine\APPLIC~1\MSNInstaller
[26/02/2008|11:06] C:\DOCUME~1\kikine\APPLIC~1\Real
[03/05/2008|13:48] C:\DOCUME~1\kikine\APPLIC~1\U3
[13/11/2008|16:13] C:\DOCUME~1\kikine\APPLIC~1\Windows Desktop Search
[13/11/2008|16:14] C:\DOCUME~1\kikine\APPLIC~1\Windows Search
[15/01/2008|18:46] C:\DOCUME~1\kikine\APPLIC~1\WinRAR

[12/11/2008|22:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[05/07/2008|18:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
[12/10/2008|13:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[21/02/2008|05:15] C:\DOCUME~1\stefou\APPLIC~1\Adobe
[16/02/2008|20:43] C:\DOCUME~1\stefou\APPLIC~1\Ahead
[15/01/2008|15:57] C:\DOCUME~1\stefou\APPLIC~1\Apple Computer
[11/04/2008|14:33] C:\DOCUME~1\stefou\APPLIC~1\AVS4YOU
[18/01/2008|17:19] C:\DOCUME~1\stefou\APPLIC~1\Chessmaster Challenge
[14/01/2008|09:07] C:\DOCUME~1\stefou\APPLIC~1\DivX
[26/01/2008|02:17] C:\DOCUME~1\stefou\APPLIC~1\eMule
[18/02/2008|00:23] C:\DOCUME~1\stefou\APPLIC~1\Google
[12/01/2008|15:14] C:\DOCUME~1\stefou\APPLIC~1\Identities
[15/11/2008|16:31] C:\DOCUME~1\stefou\APPLIC~1\LimeWire
[12/01/2008|15:15] C:\DOCUME~1\stefou\APPLIC~1\Macromedia
[08/11/2008|22:19] C:\DOCUME~1\stefou\APPLIC~1\Microsoft
[21/03/2008|01:11] C:\DOCUME~1\stefou\APPLIC~1\mIRC
[29/08/2008|19:55] C:\DOCUME~1\stefou\APPLIC~1\Mozilla
[03/02/2008|16:04] C:\DOCUME~1\stefou\APPLIC~1\Propellerhead Software
[21/04/2008|04:29] C:\DOCUME~1\stefou\APPLIC~1\Real
[28/04/2008|19:29] C:\DOCUME~1\stefou\APPLIC~1\Sports Interactive
[24/01/2008|13:51] C:\DOCUME~1\stefou\APPLIC~1\Sun
[12/01/2008|17:55] C:\DOCUME~1\stefou\APPLIC~1\Syntrillium
[13/11/2008|22:29] C:\DOCUME~1\stefou\APPLIC~1\U3
[15/01/2008|16:15] C:\DOCUME~1\stefou\APPLIC~1\vlc
[13/11/2008|12:00] C:\DOCUME~1\stefou\APPLIC~1\Windows Desktop Search
[13/11/2008|21:29] C:\DOCUME~1\stefou\APPLIC~1\Windows Search
[12/01/2008|15:33] C:\DOCUME~1\stefou\APPLIC~1\WinRAR

[04/10/2008|18:51] C:\DOCUME~1\tonyo948\APPLIC~1\Adobe
[03/02/2008|22:23] C:\DOCUME~1\tonyo948\APPLIC~1\Ahead
[02/09/2008|04:08] C:\DOCUME~1\tonyo948\APPLIC~1\Apple Computer
[13/01/2008|21:10] C:\DOCUME~1\tonyo948\APPLIC~1\AVS4YOU
[30/03/2008|21:27] C:\DOCUME~1\tonyo948\APPLIC~1\Corel
[28/09/2008|17:04] C:\DOCUME~1\tonyo948\APPLIC~1\Creative
[15/07/2008|03:39] C:\DOCUME~1\tonyo948\APPLIC~1\DivX
[07/09/2008|17:40] C:\DOCUME~1\tonyo948\APPLIC~1\Google
[12/01/2008|03:36] C:\DOCUME~1\tonyo948\APPLIC~1\Identities
[26/11/2008|15:21] C:\DOCUME~1\tonyo948\APPLIC~1\LimeWire
[12/01/2008|06:45] C:\DOCUME~1\tonyo948\APPLIC~1\Macromedia
[02/11/2008|23:09] C:\DOCUME~1\tonyo948\APPLIC~1\Microsoft
[01/08/2008|14:42] C:\DOCUME~1\tonyo948\APPLIC~1\mIRC
[24/11/2008|18:13] C:\DOCUME~1\tonyo948\APPLIC~1\Mozilla
[30/07/2008|18:27] C:\DOCUME~1\tonyo948\APPLIC~1\Mumble
[18/11/2008|21:42] C:\DOCUME~1\tonyo948\APPLIC~1\PC Tools
[21/09/2008|17:14] C:\DOCUME~1\tonyo948\APPLIC~1\Plus Tray
[03/03/2008|19:57] C:\DOCUME~1\tonyo948\APPLIC~1\Propellerhead Software
[01/08/2008|17:27] C:\DOCUME~1\tonyo948\APPLIC~1\Publish Providers
[23/11/2008|12:10] C:\DOCUME~1\tonyo948\APPLIC~1\Real
[21/04/2008|13:00] C:\DOCUME~1\tonyo948\APPLIC~1\Samsung
[29/07/2008|18:13] C:\DOCUME~1\tonyo948\APPLIC~1\skypePM
[01/08/2008|17:25] C:\DOCUME~1\tonyo948\APPLIC~1\Sony
[29/04/2008|01:04] C:\DOCUME~1\tonyo948\APPLIC~1\Sports Interactive
[31/01/2008|11:52] C:\DOCUME~1\tonyo948\APPLIC~1\Sun
[31/01/2008|11:54] C:\DOCUME~1\tonyo948\APPLIC~1\Talkback
[10/11/2008|20:37] C:\DOCUME~1\tonyo948\APPLIC~1\teamspeak2
[04/03/2008|19:11] C:\DOCUME~1\tonyo948\APPLIC~1\U3
[28/08/2008|20:30] C:\DOCUME~1\tonyo948\APPLIC~1\vlc
[12/01/2008|05:49] C:\DOCUME~1\tonyo948\APPLIC~1\WinRAR

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[28/11/2008 23:25][--ah-----] C:\WINDOWS\tasks\SA.DAT
[02/03/2006 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[05/11/2008|00:06] C:\Program Files\AbiSuite2
[11/10/2008|01:51] C:\Program Files\Adobe
[16/11/2008|22:17] C:\Program Files\Ahead
[12/01/2008|03:53] C:\Program Files\Alwil Software
[03/05/2008|03:37] C:\Program Files\Anuman Interactive
[12/01/2008|06:08] C:\Program Files\ASUSTeK
[26/10/2008|13:25] C:\Program Files\Audible
[25/02/2008|20:46] C:\Program Files\AviSynth 2.5
[14/05/2008|18:03] C:\Program Files\AVS4YOU
[01/09/2008|19:33] C:\Program Files\Creative Installation Information
[03/02/2008|15:53] C:\Program Files\DAEMON Tools
[06/03/2008|01:55] C:\Program Files\DIFX
[23/11/2008|01:05] C:\Program Files\DivX
[27/11/2008|22:11] C:\Program Files\Fichiers communs
[12/01/2008|05:18] C:\Program Files\Free Audio Pack
[28/08/2008|18:34] C:\Program Files\FX Uninstall Information
[20/11/2008|20:03] C:\Program Files\Google
[03/02/2008|15:45] C:\Program Files\Image-Line
[06/11/2008|20:38] C:\Program Files\InstallShield Installation Information
[12/11/2008|21:26] C:\Program Files\Internet Explorer
[29/08/2008|14:13] C:\Program Files\iPod
[29/08/2008|14:13] C:\Program Files\iTunes
[22/11/2008|13:03] C:\Program Files\Java
[15/11/2008|11:33] C:\Program Files\LimeWire
[12/01/2008|06:25] C:\Program Files\Logitech
[06/03/2008|14:33] C:\Program Files\Mediafour
[26/10/2008|13:53] C:\Program Files\Messenger
[01/09/2008|22:50] C:\Program Files\Messenger Plus! Live
[12/01/2008|03:30] C:\Program Files\microsoft frontpage
[12/10/2008|13:07] C:\Program Files\Microsoft SQL Server
[26/10/2008|13:43] C:\Program Files\Movie Maker
[28/11/2008|19:30] C:\Program Files\Mozilla Firefox
[11/02/2008|22:59] C:\Program Files\MSECache
[30/03/2008|00:49] C:\Program Files\MSI
[16/04/2008|20:45] C:\Program Files\MSN
[12/01/2008|03:25] C:\Program Files\MSN Gaming Zone
[27/11/2008|22:42] C:\Program Files\MSN Messenger
[12/11/2008|21:06] C:\Program Files\MSXML 4.0
[26/10/2008|13:40] C:\Program Files\NetMeeting
[12/01/2008|03:26] C:\Program Files\Online Services
[26/10/2008|13:40] C:\Program Files\Outlook Express
[02/03/2008|01:53] C:\Program Files\Personal Media Manager
[01/09/2008|22:51] C:\Program Files\Plus Tray
[03/02/2008|15:59] C:\Program Files\Propellerhead
[29/08/2008|14:08] C:\Program Files\QuickTime
[06/04/2008|17:55] C:\Program Files\S3
[21/04/2008|12:51] C:\Program Files\Samsung
[12/01/2008|03:28] C:\Program Files\Services en ligne
[06/03/2008|02:10] C:\Program Files\Setup Files
[02/11/2008|18:08] C:\Program Files\Sony
[01/08/2008|17:22] C:\Program Files\Sony Setup
[28/11/2008|17:43] C:\Program Files\Spyware Doctor
[03/02/2008|15:43] C:\Program Files\Steinberg
[24/02/2008|20:18] C:\Program Files\Teamspeak2_RC2
[01/08/2008|17:12] C:\Program Files\Uninstall Information
[02/11/2008|23:09] C:\Program Files\Valve
[23/11/2008|12:12] C:\Program Files\Veoh Networks
[06/03/2008|01:34] C:\Program Files\VIA
[06/04/2008|17:53] C:\Program Files\VIAudioi
[28/08/2008|20:29] C:\Program Files\VideoLAN
[11/08/2008|18:39] C:\Program Files\WinAVI MP4 Converter
[15/11/2008|11:27] C:\Program Files\Windows Desktop Search
[14/01/2008|21:36] C:\Program Files\Windows Live
[12/01/2008|05:48] C:\Program Files\Windows Media Components
[31/07/2008|21:21] C:\Program Files\Windows Media Connect 2
[26/10/2008|13:40] C:\Program Files\Windows Media Player
[26/10/2008|13:40] C:\Program Files\Windows NT
[12/01/2008|03:28] C:\Program Files\WindowsUpdate
[12/01/2008|05:12] C:\Program Files\WinRAR
[12/01/2008|03:30] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[17/02/2008|13:33] C:\Program Files\Fichiers communs\Adobe
[12/01/2008|06:00] C:\Program Files\Fichiers communs\Ahead
[14/05/2008|18:03] C:\Program Files\Fichiers communs\AVSMedia
[28/04/2008|18:49] C:\Program Files\Fichiers communs\InstallShield
[13/01/2008|20:24] C:\Program Files\Fichiers communs\Java
[12/01/2008|06:05] C:\Program Files\Fichiers communs\LightScribe
[12/01/2008|06:26] C:\Program Files\Fichiers communs\Logitech
[19/10/2008|19:35] C:\Program Files\Fichiers communs\Microsoft Shared
[12/01/2008|03:27] C:\Program Files\Fichiers communs\MSSoap
[12/01/2008|06:02] C:\Program Files\Fichiers communs\Nero
[12/01/2008|04:20] C:\Program Files\Fichiers communs\ODBC
[23/11/2008|12:10] C:\Program Files\Fichiers communs\Real
[12/01/2008|03:27] C:\Program Files\Fichiers communs\Services
[02/11/2008|18:08] C:\Program Files\Fichiers communs\Sony Shared
[12/01/2008|04:20] C:\Program Files\Fichiers communs\SpeechEngines
[16/11/2008|20:52] C:\Program Files\Fichiers communs\Symantec Shared
[26/10/2008|13:40] C:\Program Files\Fichiers communs\System
[31/10/2008|16:55] C:\Program Files\Fichiers communs\Ulead Systems
[28/02/2008|00:21] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 48 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-28 23:30:38
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 281

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:2579][D:139]-> C:\DOCUME~1\tonyo948\LOCALS~1\Temp
[F:25][D:0]-> C:\DOCUME~1\tonyo948\Cookies
[F:344][D:8]-> C:\DOCUME~1\tonyo948\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 28/11/2008|17:40 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 28/11/2008|23:35 - Option : [2]

--------------------\\ Fin du rapport a 23:35:29

voila lannalyse de la supression!!!!!

OK.

Comment se porte le pc ?

ba j'ai une infection spyware.found_by_browser_defender niveau moyen ki veu pas se barer!!!!!!!!!!!

é sa me soule!!!!!!!! snn pa de ralentissement il march bien mé c sa ki me fai le plus chier!!!!!!