Ver originales (Francés)

¡Mensaje de error en cada inicio! - Page 2

Resuelto
Anterior
  • 1
  • 2
  1. lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención   1
     
    Por cierto, ¿puedo eliminar todos los programas que me hiciste instalar desde el principio?
    ¡Porque son demasiados!
    0
  2. sKe69 Mensajes publicados 21955 Estado Colaborador de seguridad 463
     
    Hola,

    Por cierto, ¿puedo eliminar todos los programas que has hecho instalar desde el principio?
    ¡Porque son demasiados!
    -> No te preocupes, lo haremos a su debido tiempo y de forma expedita... por el momento, no toques nada de ese lado...

    La continuación:

    1- ¡Desconéctate y cierra todas tus aplicaciones en curso!

    Reinicia Lop S&D,

    ---> esta vez elige la opción 2 ( limpieza ) y valida...

    -> no toques nada mientras la herramienta trabaja.

    Una vez que el escáner haya terminado, se abrirá el Bloc de notas con el informe.
    Publica este informe en tu próxima respuesta para análisis...

    2- Haz un nuevo escaneo RSIT, publica el nuevo "log.txt" obtenido y espera el siguiente paso....

    --
    "Baby, estoy subiendo a un avión, y no sé si volveré de nuevo"
    IMPORTANTE: ¡no se crean que están fuera de peligro hasta que no se les diga!
    0
    1. lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención   1
       
      Rapport Lod Set D :



      --------------------\\ Lop S&D 4.2.4-9c XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
      PC basé sur X86 ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
      BIOS : Phoenix - AwardBIOS v6.00PG
      UTILISATEUR : BOUBOULE ( Administrateur )
      DÉMARRAGE : Démarrage normal
      Antivirus : avast! antivirus 4.8.1296 [VPS 081204-0] 4.8.1296 (Activé)
      Pare-feu : ZoneAlarm Pro Firewall 7.0.483.000 (Activé)
      A:\ (USB)
      C:\ (Disque local) - FAT32 - Total:39 Go (Libre:17 Go)
      D:\ (Disque local) - FAT32 - Total:35 Go (Libre:26 Go)
      E:\ (CD ou DVD)
      F:\ (CD ou DVD)

      "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
      Option : [2] ( 13/12/2008|19:24 )


      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

      Supprime! - C:\Program Files\BitTorrent Fastest Tool\3wPlayer-2.0.0.0-setup_0209.exe
      Supprime! - C:\Program Files\BitTorrent Fastest Tool\Come2PlayK2P_0209.exe
      Supprime! - C:\Program Files\BitTorrent Fastest Tool\Checklime.exe
      Supprime! - C:\Program Files\BitTorrent Fastest Tool\DWbrk03.exe
      Supprime! - C:\Program Files\BitTorrent Fastest Tool
      -
      [ Fichier Hosts ] .. Restaure!

      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


      --------------------\\ Listing des dossiers dans APPLIC~1

      [02/10/2008|19:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
      [02/10/2008|19:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
      [02/10/2008|19:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
      [02/10/2008|19:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
      [02/10/2008|19:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

      [22/10/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [31/10/2008|12:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
      [03/10/2008|23:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Arovax
      [03/10/2008|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
      [02/10/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
      [06/10/2008|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
      [10/10/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [10/12/2008|02:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
      [12/12/2008|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
      [04/10/2008|15:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
      [02/10/2008|19:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [02/10/2008|21:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
      [23/10/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople
      [11/12/2008|17:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
      [10/10/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
      [25/11/2008|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
      [10/12/2008|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
      [31/10/2008|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
      [29/10/2008|10:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpeedBit
      [31/10/2008|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
      [29/10/2008|10:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [02/10/2008|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
      [03/10/2008|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [04/10/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
      [17/10/2008|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
      [17/10/2008|23:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
      [06/10/2008|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

      [02/10/2008|19:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      [10/12/2008|17:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
      [02/10/2008|19:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
      [10/12/2008|17:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\Yahoo!

      [02/10/2008|19:14] C:\DOCUME~1\kenshiro\APPLIC~1\Adobe
      [10/10/2008|20:05] C:\DOCUME~1\kenshiro\APPLIC~1\AdobeUM
      [31/10/2008|13:04] C:\DOCUME~1\kenshiro\APPLIC~1\Apple Computer
      [03/10/2008|22:59] C:\DOCUME~1\kenshiro\APPLIC~1\AVS4YOU
      [22/10/2008|12:08] C:\DOCUME~1\kenshiro\APPLIC~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
      [03/10/2008|22:52] C:\DOCUME~1\kenshiro\APPLIC~1\CometNetwork
      [08/10/2008|21:21] C:\DOCUME~1\kenshiro\APPLIC~1\DivX
      [23/10/2008|05:00] C:\DOCUME~1\kenshiro\APPLIC~1\dvdcss
      [11/10/2008|11:45] C:\DOCUME~1\kenshiro\APPLIC~1\Google
      [02/10/2008|22:21] C:\DOCUME~1\kenshiro\APPLIC~1\Help
      [02/10/2008|19:12] C:\DOCUME~1\kenshiro\APPLIC~1\Identities
      [02/10/2008|19:14] C:\DOCUME~1\kenshiro\APPLIC~1\InterTrust
      [02/10/2008|22:21] C:\DOCUME~1\kenshiro\APPLIC~1\Macromedia
      [05/10/2008|13:15] C:\DOCUME~1\kenshiro\APPLIC~1\Media Player Classic
      [02/10/2008|19:02] C:\DOCUME~1\kenshiro\APPLIC~1\Microsoft
      [03/10/2008|22:52] C:\DOCUME~1\kenshiro\APPLIC~1\Mozilla
      [02/10/2008|21:51] C:\DOCUME~1\kenshiro\APPLIC~1\MSN6
      [31/10/2008|12:39] C:\DOCUME~1\kenshiro\APPLIC~1\Sony Ericsson
      [02/10/2008|19:16] C:\DOCUME~1\kenshiro\APPLIC~1\Sun
      [10/11/2008|19:56] C:\DOCUME~1\kenshiro\APPLIC~1\Teleca
      [21/10/2008|09:31] C:\DOCUME~1\kenshiro\APPLIC~1\Template
      [02/10/2008|19:32] C:\DOCUME~1\kenshiro\APPLIC~1\TuneUp Software
      [07/10/2008|20:39] C:\DOCUME~1\kenshiro\APPLIC~1\vlc
      [02/10/2008|19:34] C:\DOCUME~1\kenshiro\APPLIC~1\Winamp
      [21/10/2008|21:04] C:\DOCUME~1\kenshiro\APPLIC~1\WinRAR
      [22/10/2008|12:14] C:\DOCUME~1\kenshiro\APPLIC~1\Yahoo!


      [02/10/2008|19:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
      [02/10/2008|19:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
      [02/10/2008|19:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\InterTrust
      [06/10/2008|12:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
      [02/10/2008|19:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
      [06/10/2008|12:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
      [02/10/2008|19:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun

      [02/10/2008|19:14] C:\DOCUME~1\BOUBOULE\APPLIC~1\Adobe
      [02/12/2008|16:00] C:\DOCUME~1\BOUBOULE\APPLIC~1\AlterLab
      [04/10/2008|13:03] C:\DOCUME~1\BOUBOULE\APPLIC~1\CometNetwork
      [06/10/2008|18:14] C:\DOCUME~1\BOUBOULE\APPLIC~1\DivX
      [09/10/2008|13:25] C:\DOCUME~1\BOUBOULE\APPLIC~1\dvdcss
      [13/11/2008|14:58] C:\DOCUME~1\BOUBOULE\APPLIC~1\funkitron
      [18/10/2008|16:25] C:\DOCUME~1\BOUBOULE\APPLIC~1\GamesCafe
      [14/10/2008|14:41] C:\DOCUME~1\BOUBOULE\APPLIC~1\Google
      [02/10/2008|19:12] C:\DOCUME~1\BOUBOULE\APPLIC~1\Identities
      [02/10/2008|19:14] C:\DOCUME~1\BOUBOULE\APPLIC~1\InterTrust
      [10/12/2008|02:35] C:\DOCUME~1\BOUBOULE\APPLIC~1\iWin
      [29/11/2008|16:58] C:\DOCUME~1\BOUBOULE\APPLIC~1\Leadertech
      [04/10/2008|13:04] C:\DOCUME~1\BOUBOULE\APPLIC~1\Macromedia
      [12/12/2008|15:38] C:\DOCUME~1\BOUBOULE\APPLIC~1\Malwarebytes
      [06/10/2008|18:14] C:\DOCUME~1\BOUBOULE\APPLIC~1\Media Player Classic
      [26/11/2008|22:02] C:\DOCUME~1\BOUBOULE\APPLIC~1\Meridian93
      [02/10/2008|19:02] C:\DOCUME~1\BOUBOULE\APPLIC~1\Microsoft
      [04/10/2008|13:03] C:\DOCUME~1\BOUBOULE\APPLIC~1\Mozilla
      [10/12/2008|14:36] C:\DOCUME~1\BOUBOULE\APPLIC~1\PlayFirst
      [26/10/2008|14:16] C:\DOCUME~1\BOUBOULE\APPLIC~1\Samsung
      [07/10/2008|15:09] C:\DOCUME~1\BOUBOULE\APPLIC~1\Shopping Blocks
      [04/11/2008|15:34] C:\DOCUME~1\BOUBOULE\APPLIC~1\Sony Ericsson
      [02/10/2008|19:16] C:\DOCUME~1\BOUBOULE\APPLIC~1\Sun
      [04/11/2008|15:34] C:\DOCUME~1\BOUBOULE\APPLIC~1\Teleca
      [08/11/2008|16:20] C:\DOCUME~1\BOUBOULE\APPLIC~1\Template
      [22/11/2008|19:02] C:\DOCUME~1\BOUBOULE\APPLIC~1\TuneUp Software
      [07/12/2008|23:58] C:\DOCUME~1\BOUBOULE\APPLIC~1\Vista Start Menu
      [08/10/2008|14:28] C:\DOCUME~1\BOUBOULE\APPLIC~1\vlc
      [09/10/2008|13:23] C:\DOCUME~1\BOUBOULE\APPLIC~1\Wallpaper
      [14/10/2008|17:56] C:\DOCUME~1\BOUBOULE\APPLIC~1\Winamp
      [30/10/2008|20:29] C:\DOCUME~1\BOUBOULE\APPLIC~1\WinRAR
      [18/10/2008|12:14] C:\DOCUME~1\BOUBOULE\APPLIC~1\Yahoo!
      [06/10/2008|15:09] C:\DOCUME~1\BOUBOULE\APPLIC~1\Zylom

      [02/10/2008|19:14] C:\DOCUME~1\INVIT\APPLIC~1\Adobe
      [01/11/2008|15:08] C:\DOCUME~1\INVIT\APPLIC~1\Apple Computer
      [13/11/2008|18:03] C:\DOCUME~1\INVIT\APPLIC~1\DivX
      [09/10/2008|23:35] C:\DOCUME~1\INVIT\APPLIC~1\dvdcss
      [10/10/2008|23:39] C:\DOCUME~1\INVIT\APPLIC~1\Google
      [02/10/2008|19:12] C:\DOCUME~1\INVIT\APPLIC~1\Identities
      [02/10/2008|19:14] C:\DOCUME~1\INVIT\APPLIC~1\InterTrust
      [06/10/2008|01:33] C:\DOCUME~1\INVIT\APPLIC~1\Macromedia
      [02/10/2008|19:02] C:\DOCUME~1\INVIT\APPLIC~1\Microsoft
      [06/10/2008|00:41] C:\DOCUME~1\INVIT\APPLIC~1\Mozilla
      [13/11/2008|18:03] C:\DOCUME~1\INVIT\APPLIC~1\Sony Ericsson
      [02/10/2008|19:16] C:\DOCUME~1\INVIT\APPLIC~1\Sun
      [11/10/2008|09:55] C:\DOCUME~1\INVIT\APPLIC~1\TuneUp Software
      [08/10/2008|08:54] C:\DOCUME~1\INVIT\APPLIC~1\vlc
      [27/10/2008|00:23] C:\DOCUME~1\INVIT\APPLIC~1\WinRAR
      [17/10/2008|23:11] C:\DOCUME~1\INVIT\APPLIC~1\Yahoo!

      --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

      [13/12/2008 18:56][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUser.job
      [12/12/2008 12:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      [05/12/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
      [13/12/2008 13:40][--ah-----] C:\WINDOWS\tasks\SA.DAT
      [28/08/2001 20:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

      --------------------\\ Listing des dossiers dans C:\Program Files

      [02/10/2008|19:14] C:\Program Files\Adobe
      [03/10/2008|21:27] C:\Program Files\Alwil Software
      [31/10/2008|12:48] C:\Program Files\Apple Software Update
      [17/10/2008|20:55] C:\Program Files\ArcSoft
      [03/10/2008|23:23] C:\Program Files\Arovax AntiSpyware
      [02/10/2008|19:12] C:\Program Files\AvRack
      [04/10/2008|13:27] C:\Program Files\AxBx
      [02/10/2008|19:53] C:\Program Files\BitComet
      [22/10/2008|09:13] C:\Program Files\BitComet Accelerator 1.0
      [07/10/2008|14:59] C:\Program Files\Boonty
      [11/12/2008|17:34] C:\Program Files\CCleaner
      [02/10/2008|19:06] C:\Program Files\ComPlus Applications
      [02/10/2008|19:14] C:\Program Files\CyberLink
      [29/10/2008|10:37] C:\Program Files\DAP
      [07/10/2008|17:49] C:\Program Files\DivX
      [06/10/2008|12:00] C:\Program Files\eMule
      [02/10/2008|19:02] C:\Program Files\Fichiers communs
      [10/12/2008|02:34] C:\Program Files\Gamenext
      [10/12/2008|02:34] C:\Program Files\GamesBar
      [10/10/2008|20:07] C:\Program Files\Google
      [02/10/2008|19:12] C:\Program Files\InstallShield Installation Information
      [02/10/2008|19:06] C:\Program Files\Internet Explorer
      [02/10/2008|19:16] C:\Program Files\Java
      [05/10/2008|13:14] C:\Program Files\K-Lite Codec Pack
      [03/10/2008|20:54] C:\Program Files\Lavalys
      [12/12/2008|15:38] C:\Program Files\Malwarebytes' Anti-Malware
      [02/10/2008|19:05] C:\Program Files\Messenger
      [04/10/2008|13:25] C:\Program Files\Messenger Plus! Live
      [12/12/2008|14:53] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [02/10/2008|19:07] C:\Program Files\microsoft frontpage
      [02/10/2008|19:50] C:\Program Files\Microsoft Office
      [02/10/2008|19:44] C:\Program Files\Microsoft Works
      [02/10/2008|19:51] C:\Program Files\Microsoft.NET
      [02/10/2008|19:06] C:\Program Files\Movie Maker
      [04/10/2008|15:53] C:\Program Files\Mozilla Firefox
      [14/11/2008|15:15] C:\Program Files\MSECache
      [02/10/2008|19:05] C:\Program Files\MSN
      [02/10/2008|19:05] C:\Program Files\MSN Gaming Zone
      [24/10/2008|00:58] C:\Program Files\MSXML 4.0
      [02/10/2008|19:06] C:\Program Files\NetMeeting
      [02/10/2008|19:13] C:\Program Files\NewTech Infosystems
      [10/10/2008|20:07] C:\Program Files\NOS
      [02/12/2008|15:59] C:\Program Files\Oberon Media
      [02/10/2008|19:06] C:\Program Files\Outlook Express
      [14/11/2008|16:14] C:\Program Files\PhotoFiltre
      [02/12/2008|15:59] C:\Program Files\Pogo FR
      [02/10/2008|19:12] C:\Program Files\Realtek Sound Manager
      [23/10/2008|19:22] C:\Program Files\Samsung
      [02/10/2008|19:05] C:\Program Files\Services en ligne
      [31/10/2008|12:46] C:\Program Files\Sony
      [31/10/2008|12:38] C:\Program Files\Sony Ericsson
      [11/12/2008|14:38] C:\Program Files\Trend Micro
      [17/10/2008|20:55] C:\Program Files\Trust
      [02/10/2008|19:32] C:\Program Files\TuneUp Utilities 2006
      [02/10/2008|19:12] C:\Program Files\Uninstall Information
      [12/10/2008|16:20] C:\Program Files\USB Disk Win98 Driver
      [07/10/2008|20:38] C:\Program Files\VideoLAN
      [07/12/2008|23:57] C:\Program Files\Vista Start Menu
      [02/10/2008|19:34] C:\Program Files\Winamp
      [04/10/2008|13:21] C:\Program Files\Windows Live
      [26/10/2008|15:23] C:\Program Files\Windows Media Connect 2
      [02/10/2008|19:05] C:\Program Files\Windows Media Player
      [02/10/2008|19:05] C:\Program Files\Windows NT
      [02/10/2008|19:05] C:\Program Files\WindowsUpdate
      [21/10/2008|21:03] C:\Program Files\WinRAR
      [02/10/2008|19:07] C:\Program Files\xerox
      [17/10/2008|20:01] C:\Program Files\Yahoo!
      [05/10/2008|11:55] C:\Program Files\Zone Labs
      [26/11/2008|22:02] C:\Program Files\Zylom Games

      --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

      [02/10/2008|19:14] C:\Program Files\Fichiers communs\Adobe
      [22/10/2008|12:07] C:\Program Files\Fichiers communs\Adobe AIR
      [03/10/2008|22:59] C:\Program Files\Fichiers communs\AVSMedia
      [02/10/2008|19:51] C:\Program Files\Fichiers communs\DESIGNER
      [02/10/2008|19:12] C:\Program Files\Fichiers communs\InstallShield
      [02/10/2008|19:16] C:\Program Files\Fichiers communs\Java
      [02/10/2008|19:02] C:\Program Files\Fichiers communs\Microsoft Shared
      [02/10/2008|19:06] C:\Program Files\Fichiers communs\MSSoap
      [10/12/2008|02:34] C:\Program Files\Fichiers communs\Oberon Media
      [02/10/2008|19:02] C:\Program Files\Fichiers communs\ODBC
      [02/10/2008|19:06] C:\Program Files\Fichiers communs\Services
      [17/10/2008|20:55] C:\Program Files\Fichiers communs\snpstd
      [31/10/2008|12:38] C:\Program Files\Fichiers communs\Sony Ericsson Shared
      [02/10/2008|19:02] C:\Program Files\Fichiers communs\SpeechEngines
      [09/12/2008|13:23] C:\Program Files\Fichiers communs\Symantec Shared
      [02/10/2008|19:06] C:\Program Files\Fichiers communs\System
      [31/10/2008|12:38] C:\Program Files\Fichiers communs\Teleca Shared
      [04/10/2008|13:21] C:\Program Files\Fichiers communs\WindowsLiveInstaller
      [02/10/2008|19:32] C:\Program Files\Fichiers communs\Wise Installation Wizard

      --------------------\\ Process

      ( 35 Processus )

      ... OK !

      --------------------\\ Recherche avec S_Lop

      Aucun fichier / dossier Lop trouvé !

      --------------------\\ Recherche de Fichiers / Dossiers Lop

      Aucun fichier / dossier Lop trouvé !

      --------------------\\ Verification du Registre

      ..... OK !

      --------------------\\ Verification du fichier Hosts

      Fichier Hosts PROPRE


      --------------------\\ Recherche de fichiers avec Catchme

      catchme 0.3.1353 W2K/XP/Vista - détecteur de malware rootkit/stealth par Gmer, http://www.gmer.net
      Scan de rootkit 2008-12-13 19:27:02
      Windows 5.1.2600 Service Pack 3 FAT NTAPI
      scan des processus cachés ...
      scan des fichiers cachés ...
      scan terminé avec succès
      processus cachés : 0
      fichiers cachés : 0

      --------------------\\ Recherche d'autres infections


      Aucune autre infection trouvée !

      [F:10][D:5]-> C:\DOCUME~1\BOUBOULE\LOCALS~1\Temp
      [F:17][D:0]-> C:\DOCUME~1\BOUBOULE\Cookies
      [F:193][D:4]-> C:\DOCUME~1\BOUBOULE\LOCALS~1\TEMPOR~1\content.IE5
      [F:2][D:0]-> C:\Recycled

      1 - "C:\Lop SD\LopR_1.txt" - 13/12/2008| 0:33 - Option : [1]
      2 - "C:\Lop SD\LopR_2.txt" - 13/12/2008|19:27 - Option : [2]

      --------------------\\ Fin du rapport à 19:27:47
      0
      1. lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención   1 > lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención  
         
        Rapport log.txt :


        Fichier journal de l'outil d'information système de random 1.04 (écrit par random/random)
        Exécuté par BOUBOULE le 2008-12-13 19:29:56
        Microsoft Windows XP Édition familiale Service Pack 3
        Le lecteur système C: a 18 Go (43 %) libre sur 40 Go
        RAM totale : 1279 Mo (67 % libre)

        Fichier journal de Trend Micro HijackThis v2.0.2
        Scan enregistré à 19:30:07, le 13/12/2008
        Plateforme : Windows XP SP3 (WinNT 5.01.2600)
        MSIE : Internet Explorer v7.00 (7.00.6000.16762)
        Mode de démarrage : Normal

        Processus en cours d'exécution :
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\System32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\ZONELABS\vsmon.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\wscntfy.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\Vista Start Menu\VistaStartMenu.exe
        C:\Documents and Settings\BOUBOULE\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
        C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
        C:\Documents and Settings\BOUBOULE\Bureau\RSIT.exe
        C:\Program Files\Trend Micro\HijackThis\BOUBOULE.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://outlook.live.com/owa/
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\YAHOO!\Companion\Installs\cpn\yt.dll
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (sans nom) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (sans fichier)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: (sans nom) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (sans fichier)
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
        O3 - Toolbar: (sans nom) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (sans fichier)
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\YAHOO!\Companion\Installs\cpn\yt.dll
        O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
        O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
        O4 - HKCU\..\Run: [Yodm3D] C:\WINDOWS\Resources\Themes\VistaXP\y3d\Yodm3D.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [VistaStartMenu] "C:\Program Files\Vista Start Menu\VistaStartMenu.exe"
        O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\BOUBOULE\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (Utilisateur 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (Utilisateur 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (Utilisateur 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (Utilisateur 'Utilisateur par défaut')
        O4 - Démarrage : RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
        O4 - Démarrage : DW_Start.lnk = C:\WINDOWS\system32\dwwnw64r.exe
        O4 - Démarrage : Deewoo.lnk = C:\WINDOWS\system32\qcntqsdl.exe
        O8 - Élément de menu contextuel supplémentaire : E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
        O9 - Bouton supplémentaire : (sans nom) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Élément de menu 'Outils' supplémentaire : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Bouton supplémentaire : BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
        O9 - Bouton supplémentaire : Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
        O9 - Bouton supplémentaire : (sans nom) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Élément de menu 'Outils' supplémentaire : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Bouton supplémentaire : Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Élément de menu 'Outils' supplémentaire : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF : START_PAGE_URL=https://www.acer.com/worldwide/selection.html
        O16 - DPF : {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
        O16 - DPF : {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
        O16 - DPF : {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
        O16 - DPF : {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF : {D27CDB6E-AE6D-11CF-96B8-444553540000} (Objet Flash Shockwave) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O16 - DPF : {E6187999-9FEC-46A1-A20F-F4CA977D5643} (Objet ZoneChess) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
        O23 - Service : avast! Service de contrôle iAVS4 (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service : Système de sondage des touches de raccourci Ati - Propriétaire inconnu - C:\WINDOWS\System32\Ati2evxx.exe
        O23 - Service : avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service : avast! Scanner de courrier - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service : avast! Scanner Web - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service : Service de mise à jour Google (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service : TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
        O23 - Service : TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

        --
        Fin du fichier - 7749 octets

        ======Dossier des tâches planifiées======

        C:\WINDOWS\tasks\Maintenance en 1 clic.job
        C:\WINDOWS\tasks\AppleSoftwareUpdate.job
        C:\WINDOWS\tasks\GoogleUpdateTaskUser.job

        ======Dump du registre======

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
        &Yahoo! Toolbar Helper - C:\PROGRA~1\YAHOO!\Companion\Installs\cpn\yt.dll [2008-05-15 817936]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
        Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
        BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll [2007-09-28 521528]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
        Classe SSVHelper - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
        Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
        Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-11-04 737776]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
        {2318C2B1-4965-11d4-9B18-009027A5CD4F}
        {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~1\YAHOO!\Companion\Installs\cpn\yt.dll [2008-05-15 817936]

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
        "SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
        "ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-07-09 919016]
        "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
        "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
        "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
        "Yodm3D"=C:\WINDOWS\Resources\Themes\VistaXP\y3d\Yodm3D.exe [2007-06-26 2058752]
        "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-10-15 68856]
        "VistaStartMenu"=C:\Program Files\Vista Start Menu\VistaStartMenu.exe [2008-10-08 2145792]
        "Google Update"=C:\Documents and Settings\BOUBOULE\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-13 133104]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\{cb4f3435-d5dc-b011-d183-3be40371df7c}]
        C:\WINDOWS\system32\qyvjgsahzs.dll [2008-11-20 325120]

        C:\Documents and Settings\BOUBOULE\Menu Démarrer\Programmes\Démarrage
        RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
        DW_Start.lnk - C:\WINDOWS\system32\dwwnw64r.exe
        Deewoo.lnk - C:\WINDOWS\system32\qcntqsdl.exe

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
        WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
        "dontdisplaylastusername"=0
        "legalnoticecaption"=
        "legalnoticetext"=
        "shutdownwithoutlogon"=1
        "undockwithoutlogon"=1

        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
        "NoDriveTypeAutoRun"=145

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
        "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
        "C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - un client BitTorrent"
        "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
        "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
        "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Téléphone)"
        "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
        "C:\Program Files\DAP\DAP.EXE"="C:\Program Files\DAP\DAP.EXE:*:Enabled:Download Accelerator Plus"

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
        "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
        "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
        "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
        "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Téléphone)"

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{27112af6-b7fb-11dd-87cc-000d87ee4b1b}]
        shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs


        ======Liste des fichiers/dossiers créés au cours des 2 derniers mois======

        2008-12-13 00:30:16 ----A---- C:\lopR.txt
        2008-12-13 00:27:54 ----D---- C:\Lop SD
        2008-12-12 15:51:30 ----D---- C:\rsit
        2008-12-12 15:38:46 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Malwarebytes
        2008-12-12 15:38:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
        2008-12-12 15:38:35 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2008-12-12 14:59:44 ----HD---- C:\WINDOWS\$NtUninstallKB955839$
        2008-12-12 14:53:19 ----HD---- C:\WINDOWS\$NtUninstallKB952069_WM9$
        2008-12-12 14:53:15 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
        2008-12-12 14:52:25 ----HD---- C:\WINDOWS\$NtUninstallKB954600$
        2008-12-12 14:52:17 ----HD---- C:\WINDOWS\$NtUninstallKB956802$
        2008-12-11 20:54:33 ----D---- C:\WINDOWS\ERUNT
        2008-12-11 20:30:11 ----D---- C:\SDFix
        2008-12-11 17:45:32 ----A---- C:\WINDOWS\system32\tmp.txt
        2008-12-11 17:45:29 ----A---- C:\rapport.txt
        2008-12-11 17:34:15 ----D---- C:\Program Files\CCleaner
        2008-12-11 17:18:47 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
        2008-12-11 15:14:08 ----A---- C:\TB.txt
        2008-12-11 15:12:02 ----D---- C:\ToolBar SD
        2008-12-11 14:38:06 ----D---- C:\Program Files\Trend Micro
        2008-12-10 17:10:38 ----A---- C:\WINDOWS\system32\aswBoot.exe
        2008-12-10 16:25:51 ----A---- C:\WINDOWS\system32\capicom.dll
        2008-12-10 14:36:16 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\PlayFirst
        2008-12-10 14:36:16 ----D---- C:\Documents and Settings\All Users\Application Data\PlayFirst
        2008-12-10 02:35:11 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\iWin
        2008-12-10 02:35:11 ----D---- C:\Documents and Settings\All Users\Application Data\iWin
        2008-12-10 02:34:45 ----D---- C:\Program Files\GamesBar
        2008-12-10 02:34:41 ----D---- C:\Program Files\Fichiers communs\Oberon Media
        2008-12-10 02:34:40 ----D---- C:\Program Files\Gamenext
        2008-12-09 14:35:40 ----D---- C:\WINDOWS\pss
        2008-12-09 13:23:56 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
        2008-12-07 23:58:00 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Vista Start Menu
        2008-12-07 23:57:47 ----D---- C:\Program Files\Vista Start Menu
        2008-12-06 15:07:56 ----SHD---- C:\FOUND.008
        2008-12-04 14:50:28 ----SHD---- C:\FOUND.007
        2008-12-04 14:43:34 ----A---- C:\WINDOWS\system32\ptpusb.dll
        2008-12-04 14:43:33 ----A---- C:\WINDOWS\system32\ptpusd.dll
        2008-12-02 16:00:18 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\AlterLab
        2008-12-02 15:59:17 ----D---- C:\Program Files\Pogo FR
        2008-12-02 15:59:17 ----D---- C:\Program Files\Oberon Media
        2008-11-29 16:58:39 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Leadertech
        2008-11-26 22:02:30 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Meridian93
        2008-11-26 22:02:13 ----D---- C:\Program Files\Zylom Games
        2008-11-25 23:49:26 ----D---- C:\Documents and Settings\All Users\Application Data\pixelStorm
        2008-11-23 17:41:08 ----SHD---- C:\FOUND.006
        2008-11-22 19:02:44 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\TuneUp Software
        2008-11-21 13:15:15 ----A---- C:\WINDOWS\system32\lfgif13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\ltimg13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\ltfil13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\ltefx13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\ltdis13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\lfcmp13n.dll
        2008-11-21 13:15:14 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
        2008-11-14 18:24:26 ----SHD---- C:\FOUND.005
        2008-11-14 16:14:56 ----D---- C:\Program Files\PhotoFiltre
        2008-11-14 15:15:53 ----D---- C:\Program Files\MSECache
        2008-11-13 14:58:15 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\funkitron
        2008-11-13 03:03:50 ----HD---- C:\WINDOWS\$NtUninstallKB957097$
        2008-11-13 03:02:30 ----HD---- C:\WINDOWS\$NtUninstallKB954459$
        2008-11-13 03:00:57 ----HD---- C:\WINDOWS\$NtUninstallKB955069$
        2008-11-11 00:43:24 ----SHD---- C:\FOUND.004
        2008-11-08 16:20:30 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Template
        2008-11-08 09:24:44 ----SHD---- C:\FOUND.003
        2008-11-06 00:32:28 ----HD---- C:\WINDOWS\$NtUninstallKB939683$
        2008-11-04 15:34:41 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Teleca
        2008-11-04 15:34:28 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Sony Ericsson
        2008-11-01 15:03:44 ----SHD---- C:\FOUND.002
        2008-10-31 12:48:00 ----D---- C:\Program Files\Apple Software Update
        2008-10-31 12:47:51 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
        2008-10-31 12:46:40 ----D---- C:\Program Files\Sony
        2008-10-31 12:42:44 ----RSD---- C:\WINDOWS\assembly
        2008-10-31 12:42:04 ----D---- C:\WINDOWS\Microsoft.NET
        2008-10-31 12:38:41 ----D---- C:\Program Files\Fichiers communs\Sony Ericsson Shared
        2008-10-31 12:38:40 ----D---- C:\Program Files\Fichiers communs\Teleca Shared
        2008-10-31 12:38:38 ----D---- C:\Program Files\Sony Ericsson
        2008-10-31 12:38:16 ----D---- C:\WINDOWS\Downloaded Installations
        2008-10-31 12:37:45 ----D---- C:\Documents and Settings\All Users\Application Data\Teleca
        2008-10-31 12:37:45 ----D---- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
        2008-10-30 20:29:31 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\WinRAR
        2008-10-29 10:38:09 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
        2008-10-29 10:37:58 ----D---- C:\Documents and Settings\All Users\Application Data\SpeedBit
        2008-10-29 10:37:46 ----D---- C:\Program Files\DAP
        2008-10-27 14:34:17 ----HD---- C:\WINDOWS\$NtUninstallKB941569$
        2008-10-27 14:34:00 ----HD---- C:\WINDOWS\$NtUninstallKB929399$
        2008-10-27 14:33:43 ----HD---- C:\WINDOWS\$NtUninstallKB954154_WM11$
        2008-10-27 14:33:34 ----HD---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
        2008-10-26 15:24:27 ----N---- C:\WINDOWS\system32\spmsg.dll
        2008-10-26 15:24:26 ----HD---- C:\WINDOWS\$NtUninstallMSCompPackV1$
        2008-10-26 15:23:38 ----D---- C:\Program Files\Windows Media Connect 2
        2008-10-26 14:16:17 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Samsung
        2008-10-24 00:59:04 ----HD---- C:\WINDOWS\$NtUninstallKB958644$
        2008-10-24 00:58:57 ----D---- C:\Program Files\MSXML 4.0
        2008-10-23 19:24:52 ----A---- C:\WINDOWS\system32\framedyn.dll
        2008-10-23 19:22:50 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
        2008-10-23 19:22:46 ----D---- C:\Program Files\Samsung
        2008-10-23 15:42:31 ----D---- C:\Documents and Settings\All Users\Application Data\MythPeople
        2008-10-22 12:07:48 ----D---- C:\Program Files\Fichiers communs\Adobe AIR
        2008-10-22 12:05:19 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
        2008-10-22 09:13:04 ----D---- C:\Program Files\BitComet Accelerator 1.0
        2008-10-21 21:03:54 ----D---- C:\Program Files\WinRAR
        2008-10-18 16:25:33 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\GamesCafe
        2008-10-18 12:14:50 ----D---- C:\Documents and Settings\BOUBOULE\Application Data\Yahoo!
        2008-10-17 23:11:23 ----D---- C:\Documents and Settings\All
        0
  3. sKe69 Mensajes publicados 21955 Estado Colaborador de seguridad 463
     
    Hola,

    Continuamos:

    Descarga UsbFix ( de Chiquitine29 y Chimay8 ) en tu escritorio :

    http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

    ! Desconéctate de internet y cierra todas las aplicaciones que estés usando !

    --> Haz doble clic en el .exe para iniciar la instalación de la herramienta (no toques los parámetros de instalación).

    Imperativo :
    Conecta todas tus unidades externas a tu PC (memoria USB, disco duro externo, pendrive, reproductor MP3, etc...) que puedan haber sido infectadas, así como los CD y DVD que uses con más frecuencia (¡pero sin abrirlos!).

    --> Haz doble clic en el acceso directo "UsbFix" que está en tu escritorio para iniciar la herramienta:

    * Pulsa 1 (opción "limpieza") y después [entrada] y sigue las instrucciones ...

    --> El PC se reiniciará ... deja que la herramienta trabaje y no toques nada ...
    ( Nota: para las unidades externas no utilizadas, haz clic en "continuar" cuando aparezca el mensaje de advertencia )

    --> Una vez de vuelta en tu escritorio, espera el mensaje de finalización de la limpieza,
    después presiona una tecla para que el informe "UsbFix.txt" se muestre.

    Haz un copiar/pegar de su contenido en tu próxima respuesta para análisis y espera la siguiente instrucción ....

    ( Nota: el informe UsbFix.txt se guarda en la raíz del disco duro > C:\UsbFix.txt )

    PD: Si el Escritorio no reaparece, pulsa Ctrl + Alt + Supr, pestaña "Archivo"-> "Nueva tarea":
    escribe explorer.exe y valida.
    --
    "Baby, I'm going on an airplane, And I don't know if I'll be back again"
    IMPORTANTE: no te creas fuera de peligro hasta que no
    te lo hayan dicho!
    0
    1. lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención   1
       
      Hola,

      Informe de UsbFix:



      -------------- UsbFix V2.413.4 ---------------

      * Usuario: BOUBOULE - SHINTA
      * Herramientas actualizadas el 11/12/2008 por Chiquitine29 y Chimay8
      * Búsqueda realizada a las 17:58:13 el 15/12/2008
      * Windows XP - Internet Explorer 7.0.5730.13


      --------------- [ Procesos activos ] ----------------


      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZONELABS\vsmon.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\setup\avast.setup
      C:\DOCUME~1\BOUBOULE\LOCALS~1\Temp\1.tmp\b2e.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Vista Start Menu\VistaStartMenu.exe
      C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\System32\wbem\wmiprvse.exe

      --------------- [ Información de las unidades ] ----------------

      C: - Unidad fija

      D: - Unidad fija

      K: - Unidad fija


      +- Contenido del autorun: K:\autorun.inf

      [autorun]
      icon = .\Maxtor_Desktop.ico

      --------------- [ Unidad C ] ----------------

      C: - Unidad fija


      +- Listado de archivos presentes:

      [02/10/2008 19:07][--a------] C:\AUTOEXEC.BAT
      [03/10/2008 23:08][-rahs----] C:\NTDETECT.COM
      [09/12/2008 14:43][-rahs----] C:\boot.ini
      [11/12/2008 20:09][--a------] C:\rapport.txt
      [11/12/2008 20:09][--a------] C:\TB.txt
      [11/12/2008 20:09][--a------] C:\lopR.txt
      [11/12/2008 20:09][--a------] C:\UsbFix.txt
      [][] C:\hiberfil.sys
      [][] C:\PAGEFILE.SYS
      [][] C:\CONFIG.SYS
      [][] C:\IO.SYS
      [][] C:\MSDOS.SYS

      --------------- [ Unidad D ] ----------------

      D: - Unidad fija


      +- Listado de archivos presentes:


      --------------- [ Unidad K ] ----------------

      K: - Unidad fija


      +- Listado de archivos presentes:

      [21/04/2008 09:33][--a------] K:\autorun.inf

      --------------- [ Registro / Inicio ] ----------------

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
      "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
      MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      Yodm3D=C:\WINDOWS\Resources\Themes\VistaXP\y3d\Yodm3D.exe
      swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      VistaStartMenu="C:\Program Files\Vista Start Menu\VistaStartMenu.exe"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      SiSUSBRG=C:\WINDOWS\SiSUSBrg.exe
      ZoneAlarm Client="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
      <NO NAME>=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
      Installed=1
      <NO NAME>=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
      Installed=1
      NoChange=1
      <NO NAME>=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
      Installed=1
      <NO NAME>=

      --------------- [ Registro / Mountpoint2 ] ----------------

      ¡Eliminado! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27112af6-b7fb-11dd-87cc-000d87ee4b1b}\Shell\AutoRun\command

      --------------- [ Limpieza de discos ] ----------------

      ¡Eliminado! - [11/12/2008 20:09][--a------] C:\WINDOWS\system32\tmp.reg
      ¡Eliminado! - [11/12/2008 20:09][--a------] C:\WINDOWS\system32\tmp.txt
      ¡Eliminado! - [21/04/2008 09:33][--a------] K:\autorun.inf

      --------------- [ Resumen ] ----------------

      -> /!\ El resultado debe ser interpretado por un especialista /!\

      [02/10/2008 19:07][--a------] C:\AUTOEXEC.BAT
      [03/10/2008 23:08][-rahs----] C:\NTDETECT.COM
      [09/12/2008 14:43][-rahs----] C:\boot.ini

      --------------- ! Fin del informe ! ----------------
      0
  4. sKe69 Mensajes publicados 21955 Estado Colaborador de seguridad 463
     
    Hola,

    Muy bien...

    Aquí está la continuación de las operaciones:

    Descarga ComboFix (por sUBs) en tu Escritorio (¡y no en ningún otro lugar!):

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    --------------------------------------------- [ ! ATENCIÓN ! ] ----------------------------------------------------------
    !! Desconéctate, cierra tus aplicaciones en curso (así como tu navegador) y DESACTIVA TODAS TUS DEFENSAS (antivirus, guardias contra spyware, cortafuegos) durante el tiempo de la manipulación:
    de hecho, si están activados, podrían interferir fuertemente con el procedimiento de búsqueda y limpieza de la herramienta (podrían incluso hacer que el PC se bloquee)... Así que las reactivarás después !!
    --->Importante: si encuentras dificultades en este punto, házmelo saber antes de continuar... Tutorial (ayuda) aquí: https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    Nota: para XP, asegúrate de instalar la Consola de Recuperación de Windows como se indica en el tutorial anterior...
    ---------------------------------------------------------------------------------------------------------------------------------

    Luego:
    haz doble clic en el ícono "combofix.exe" para lanzar la herramienta.

    Presiona la tecla Y (Sí) para comenzar el escaneo.

    Notas importantes:
    -> no uses tu ratón ni tu teclado (ni otro sistema de señalización) mientras el programa está en ejecución. Podría bloquear la computadora.
    -> Puede que el PC se reinicie solo (para finalizar la limpieza), déjalo hacerlo.
    -> Si la herramienta te informa: "combofix ha detectado la presencia de un rootkit y necesita reiniciar tu máquina", acepta...
    -> si aparece un mensaje de error de Windows en algún momento: haz clic en la cruz roja en la parte superior derecha de la ventana para cerrarla (¡y no en otra cosa! de lo contrario no habrá informe...)

    El informe se creará aquí: C:\Combofix.txt

    Reactiva bien tus defensas.

    Publica el informe de Combofix acompañado de un nuevo informe de RSIT (Log.txt) para análisis...

    --
    "Baby, I'm going on an airplane, And I don't know if I'll be back again"
    IMPORTANTE: ¡no te creas a salvo hasta que no te lo hayan dicho!
    0
    1. lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención   1
       
      ¿Debo instalar la consola de recuperación en mi caso?
      0
  6. sKe69 Mensajes publicados 21955 Estado Colaborador de seguridad 463
     
    sí, es muy aconsejable...
    --
    "Bebé, voy en un avión, y no sé si volveré de nuevo"
    IMPORTANTE : ¡no te creas fuera de peligro hasta que no te lo digan!
    0
    1. lacrame Mensajes publicados 1 Fecha de registro   Estado Miembro Última intervención   1
       
      ¡El problema es que no tengo el CD para instalarlo!
      0
Anterior
  • 1
  • 2