Fenêtres intempestives Cid.
Résolu
lecours35
Messages postés
9
Statut
Membre
-
lecours35 Messages postés 9 Statut Membre -
lecours35 Messages postés 9 Statut Membre -
Bonjour,+
Bonsoir,
Depuis qq temps, à l'ouverture de mon navigateur mozilla, je me retrouve inondé de fenêtres publicitaires qui proviennent d'IE.
Bien que Mozilla soit mon navigateur par défaut, IE s'ouvre quand même et ralentit bcp l'ordi.
Pouvez-vous me renseigner sur l'état des rapports hijackthis et lop:
Merci.
Rapport Hijack:
[b]Logfile of Trend Micro HijackThis v2.0.2[/b]
Scan saved at 16:58:46, on 12/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
C:\WINDOWS\arservice.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\Ahead\NEROPH~2\data\xtras\mssysmgr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Documents and Settings\Cathy & Eric\Bureau\test.exe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://fr.search.yahoo.com/?fr=cb-hp06
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://fr.search.yahoo.com/?fr=cb-hp06
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://fr.search.yahoo.com/?fr=cb-hp06
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
R3 - URLSearchHook: torrent_search Toolbar - {f14b0ccd-aa41-4406-ab68-c5de9d85b4a3} - C:\Program Files\torrent_search\tbtor1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: torrent_search Toolbar - {f14b0ccd-aa41-4406-ab68-c5de9d85b4a3} - C:\Program Files\torrent_search\tbtor1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: torrent_search Toolbar - {f14b0ccd-aa41-4406-ab68-c5de9d85b4a3} - C:\Program Files\torrent_search\tbtor1.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\Plus Obj.exe
O4 - HKLM\..\Run: [mobiswing] C:\PROGRA~1\BITTOR~1\BitP.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~2\data\xtras\mssysmgr.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [dabugodeyu] Rundll32.exe "C:\WINDOWS\system32\juneteyo.dll",s (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\qcntrtdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rswnw64j.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371420.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D75324DD-54D8-4C29-898B-265075960EFB}: NameServer = 194.117.200.10,194.117.200.15
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL C:\WINDOWS\system32\telowewa.dll c:\windows\system32\nikarili.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Bonsoir,
Depuis qq temps, à l'ouverture de mon navigateur mozilla, je me retrouve inondé de fenêtres publicitaires qui proviennent d'IE.
Bien que Mozilla soit mon navigateur par défaut, IE s'ouvre quand même et ralentit bcp l'ordi.
Pouvez-vous me renseigner sur l'état des rapports hijackthis et lop:
Merci.
Rapport Hijack:
[b]Logfile of Trend Micro HijackThis v2.0.2[/b]
Scan saved at 16:58:46, on 12/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
C:\WINDOWS\arservice.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\Ahead\NEROPH~2\data\xtras\mssysmgr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Documents and Settings\Cathy & Eric\Bureau\test.exe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://fr.search.yahoo.com/?fr=cb-hp06
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://fr.search.yahoo.com/?fr=cb-hp06
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://fr.search.yahoo.com/?fr=cb-hp06
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
R3 - URLSearchHook: torrent_search Toolbar - {f14b0ccd-aa41-4406-ab68-c5de9d85b4a3} - C:\Program Files\torrent_search\tbtor1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: torrent_search Toolbar - {f14b0ccd-aa41-4406-ab68-c5de9d85b4a3} - C:\Program Files\torrent_search\tbtor1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSec0.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: torrent_search Toolbar - {f14b0ccd-aa41-4406-ab68-c5de9d85b4a3} - C:\Program Files\torrent_search\tbtor1.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\Plus Obj.exe
O4 - HKLM\..\Run: [mobiswing] C:\PROGRA~1\BITTOR~1\BitP.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~2\data\xtras\mssysmgr.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [dabugodeyu] Rundll32.exe "C:\WINDOWS\system32\juneteyo.dll",s (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\qcntrtdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rswnw64j.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371420.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D75324DD-54D8-4C29-898B-265075960EFB}: NameServer = 194.117.200.10,194.117.200.15
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL C:\WINDOWS\system32\telowewa.dll c:\windows\system32\nikarili.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
A voir également:
- Fenêtres intempestives Cid.
- Fermer toutes les fenetres windows - Guide
- Mon pc ouvre des fenetres tout seul ✓ - Forum Virus
- Afficher toutes les fenetres ouvertes windows 11 - Guide
- Mon clavier n'écrit plus et ouvre des fenetres ✓ - Forum Clavier
- Comment ouvrir deux fenetres sur pc - Guide
13 réponses
Salut,
---> Relance Lop S&D.
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt).
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
---> Relance Lop S&D.
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt).
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
Merci de répondre aussi rapidement.
J'ai lancé l'option 2.
Voici le rapport lop :
--------------------\\ Lop S&D 4.2.4-9c XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 09/05/2006 Ver: 08.00.12
USER : Cathy & Eric ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:226 Go (Free:146 Go)
D:\ (Local Disk) - FAT32 - Total:6 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 12/12/2008|23:56 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Plus Obj.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitDownload-4.5.0.0-setup.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media_France\tbMul0.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\Program Files\MultiMedia France Toolbar\INSTALL.LOG
Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.exe
Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.xpi
Supprime! - C:\WINDOWS\Tasks\A4DE8A1A906D3EA2.job
Supprime! - C:\DOCUME~1\CATHY&~1\APPLIC~1\idlebows
Supprime! - C:\Program Files\idlebows
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
Supprime! - C:\Program Files\BitTorrent Fastest Tool
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
Supprime! - C:\Program Files\MultiMedia France Toolbar
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[20/01/2007|12:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
[03/08/2008|20:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\Grisoft
[19/01/2007|21:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\HP
[15/11/2005|03:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[20/01/2007|11:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\Leadertech
[03/08/2008|21:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[21/01/2007|18:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[27/10/2006|16:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[20/01/2007|12:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Simple Star
[20/01/2007|11:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
[17/02/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/01/2007|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[08/03/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[03/10/2008|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[04/06/2007|06:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BufferZone
[27/10/2006|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[21/11/2008|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[12/12/2008|17:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/08/2008|20:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[27/10/2006|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/01/2007|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[27/10/2006|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[05/12/2008|22:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[31/07/2008|17:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[19/09/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
[21/02/2007|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[17/10/2007|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NFS Underground
[27/10/2006|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[27/10/2006|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[08/03/2008|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[29/03/2007|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/03/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[03/03/2007|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[28/06/2008|20:45] C:\DOCUME~1\CATHY&~1\APPLIC~1\Adobe
[27/07/2007|21:13] C:\DOCUME~1\CATHY&~1\APPLIC~1\AdobeUM
[09/03/2008|19:45] C:\DOCUME~1\CATHY&~1\APPLIC~1\Ahead
[27/12/2007|08:55] C:\DOCUME~1\CATHY&~1\APPLIC~1\DivX
[04/05/2008|14:29] C:\DOCUME~1\CATHY&~1\APPLIC~1\fretsonfire
[07/03/2007|18:05] C:\DOCUME~1\CATHY&~1\APPLIC~1\Google
[03/08/2008|21:18] C:\DOCUME~1\CATHY&~1\APPLIC~1\Grisoft
[09/06/2007|08:48] C:\DOCUME~1\CATHY&~1\APPLIC~1\Help
[18/03/2007|09:51] C:\DOCUME~1\CATHY&~1\APPLIC~1\HP
[27/01/2007|18:23] C:\DOCUME~1\CATHY&~1\APPLIC~1\HPQ
[15/11/2005|03:22] C:\DOCUME~1\CATHY&~1\APPLIC~1\Identities
[05/12/2008|21:53] C:\DOCUME~1\CATHY&~1\APPLIC~1\Lavasoft
[19/08/2007|20:56] C:\DOCUME~1\CATHY&~1\APPLIC~1\Leadertech
[28/06/2008|20:45] C:\DOCUME~1\CATHY&~1\APPLIC~1\Macromedia
[05/12/2008|22:13] C:\DOCUME~1\CATHY&~1\APPLIC~1\Malwarebytes
[20/05/2007|20:50] C:\DOCUME~1\CATHY&~1\APPLIC~1\Media Player Classic
[14/05/2008|13:52] C:\DOCUME~1\CATHY&~1\APPLIC~1\Microsoft
[19/09/2007|18:30] C:\DOCUME~1\CATHY&~1\APPLIC~1\Microsoft Games
[21/11/2008|20:23] C:\DOCUME~1\CATHY&~1\APPLIC~1\Mozilla
[19/08/2007|21:28] C:\DOCUME~1\CATHY&~1\APPLIC~1\MSNInstaller
[24/03/2007|19:31] C:\DOCUME~1\CATHY&~1\APPLIC~1\Real
[10/03/2008|17:59] C:\DOCUME~1\CATHY&~1\APPLIC~1\Snapfish
[03/03/2007|16:17] C:\DOCUME~1\CATHY&~1\APPLIC~1\Sun
[07/03/2007|18:11] C:\DOCUME~1\CATHY&~1\APPLIC~1\Talkback
[28/05/2007|21:12] C:\DOCUME~1\CATHY&~1\APPLIC~1\TaoUSign
[18/03/2007|17:08] C:\DOCUME~1\CATHY&~1\APPLIC~1\Thunderbird
[01/04/2008|06:15] C:\DOCUME~1\CATHY&~1\APPLIC~1\U3
[30/11/2008|18:12] C:\DOCUME~1\CATHY&~1\APPLIC~1\uTorrent
[15/11/2005|03:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/08/2007|09:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[27/10/2006|16:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[27/10/2006|16:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[09/04/2007|08:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[14/01/2008|21:32] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[04/08/2008|07:40] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Adobe
[01/01/2008|01:50] C:\DOCUME~1\NOLWEN~1\APPLIC~1\BitTorrent
[29/12/2007|14:53] C:\DOCUME~1\NOLWEN~1\APPLIC~1\DivX
[18/03/2007|19:48] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Google
[04/08/2008|07:36] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Grisoft
[17/05/2007|05:45] C:\DOCUME~1\NOLWEN~1\APPLIC~1\HP
[31/10/2007|13:28] C:\DOCUME~1\NOLWEN~1\APPLIC~1\HPQ
[15/11/2005|03:22] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Identities
[17/10/2007|15:27] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Leadertech
[03/03/2007|19:37] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Macromedia
[30/12/2007|18:38] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Media Player Classic
[15/01/2008|20:26] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Microsoft
[21/09/2007|17:41] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Microsoft Games
[18/03/2007|19:36] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Mozilla
[29/12/2007|14:11] C:\DOCUME~1\NOLWEN~1\APPLIC~1\MSNInstaller
[27/10/2006|16:06] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Real
[03/03/2007|19:42] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Sun
[09/03/2007|17:50] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Talkback
[18/03/2007|19:36] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Thunderbird
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[12/12/2008 23:00][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[12/12/2008 20:00][--a------] C:\WINDOWS\tasks\Norton Internet Security - Analyse systŠme complŠte - Cathy & Eric.job
[12/12/2008 16:52][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[17/02/2008|21:27] C:\Program Files\Adobe
[20/01/2007|12:12] C:\Program Files\Ahead
[27/10/2006|15:57] C:\Program Files\ATI Technologies
[08/03/2008|16:20] C:\Program Files\Avira
[03/10/2008|17:43] C:\Program Files\Boonty
[03/10/2008|17:43] C:\Program Files\BoontyGames
[21/02/2007|21:59] C:\Program Files\BroadJump
[29/07/2007|19:53] C:\Program Files\BufferZone
[03/08/2008|20:27] C:\Program Files\CCleaner
[21/02/2007|22:02] C:\Program Files\Club-Internet
[03/10/2007|15:58] C:\Program Files\Common Files
[12/11/2005|01:09] C:\Program Files\ComPlus Applications
[28/07/2008|22:21] C:\Program Files\Conduit
[27/04/2008|18:25] C:\Program Files\Cossacks - The Art Of War
[09/04/2007|10:27] C:\Program Files\directx
[22/11/2008|16:36] C:\Program Files\DivX
[12/12/2008|21:57] C:\Program Files\DNA
[06/12/2008|10:12] C:\Program Files\Dofus
[17/10/2007|13:47] C:\Program Files\EA GAMES
[06/12/2008|11:53] C:\Program Files\eMule
[03/10/2008|17:43] C:\Program Files\Fichiers communs
[25/03/2007|20:37] C:\Program Files\Free Audio Pack
[27/04/2008|18:25] C:\Program Files\FrenchOtto
[27/04/2008|18:25] C:\Program Files\GemMasterFrench
[09/08/2008|17:59] C:\Program Files\Google
[14/05/2008|13:52] C:\Program Files\Grand Prix Evolution
[03/08/2008|20:45] C:\Program Files\Grisoft
[13/04/2008|19:03] C:\Program Files\Happyneuron
[27/10/2006|16:25] C:\Program Files\Hewlett-Packard
[19/01/2007|21:56] C:\Program Files\HP
[09/04/2007|10:25] C:\Program Files\InstallShield Installation Information
[09/12/2008|22:40] C:\Program Files\Internet Explorer
[04/12/2008|19:59] C:\Program Files\Java
[20/05/2007|20:47] C:\Program Files\K-Lite Codec Pack
[07/03/2007|18:03] C:\Program Files\Lavasoft
[05/12/2008|22:31] C:\Program Files\Malwarebytes' Anti-Malware
[13/08/2008|22:34] C:\Program Files\Messenger
[12/12/2008|22:36] C:\Program Files\Messenger Plus! Live
[14/01/2008|21:49] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|03:24] C:\Program Files\microsoft frontpage
[19/09/2007|18:27] C:\Program Files\Microsoft Games
[20/01/2007|11:49] C:\Program Files\Microsoft Office
[22/10/2008|08:51] C:\Program Files\Microsoft Silverlight
[14/01/2008|21:05] C:\Program Files\Microsoft SQL Server Compact Edition
[27/04/2008|18:24] C:\Program Files\Microsoft Works
[15/11/2005|03:24] C:\Program Files\Movie Maker
[12/12/2008|17:29] C:\Program Files\Mozilla Firefox
[12/12/2008|19:05] C:\Program Files\Mozilla Thunderbird
[19/08/2007|21:28] C:\Program Files\MSN
[15/11/2005|03:25] C:\Program Files\MSN Gaming Zone
[03/03/2007|21:29] C:\Program Files\MSXML 4.0
[12/12/2008|23:56] C:\Program Files\Multi_Media_France
[15/11/2005|03:25] C:\Program Files\NetMeeting
[15/11/2005|03:25] C:\Program Files\Online Services
[13/06/2007|16:54] C:\Program Files\Outlook Express
[03/10/2007|17:41] C:\Program Files\Papyrus
[27/04/2008|18:24] C:\Program Files\PC-Doctor 5 for Windows
[18/02/2008|14:36] C:\Program Files\PhotoFiltre
[22/11/2008|15:56] C:\Program Files\Picasa2
[13/05/2008|23:16] C:\Program Files\QuickTime
[27/10/2006|16:06] C:\Program Files\Real
[26/12/2007|22:31] C:\Program Files\Secured eMule
[15/10/2007|08:07] C:\Program Files\Secured_eMule
[27/10/2006|16:26] C:\Program Files\Services en ligne
[05/11/2007|13:37] C:\Program Files\Share_Accelerator_MM
[27/10/2006|16:07] C:\Program Files\Sonic
[14/03/2008|22:36] C:\Program Files\StofWare
[03/10/2008|17:45] C:\Program Files\T‚l‚chargeur de 7 Sins
[17/11/2008|19:01] C:\Program Files\torrent_search
[12/12/2008|22:55] C:\Program Files\Uniblue
[12/11/2005|01:09] C:\Program Files\Uninstall Information
[12/05/2007|14:38] C:\Program Files\VirtualDJ
[29/11/2008|14:06] C:\Program Files\Wakfu
[02/03/2008|21:28] C:\Program Files\Windows Live
[14/01/2008|21:04] C:\Program Files\Windows Live Favorites
[27/04/2008|18:24] C:\Program Files\Windows Live Toolbar
[15/04/2007|10:43] C:\Program Files\Windows Media Connect 2
[09/07/2007|11:51] C:\Program Files\Windows Media Player
[15/11/2005|03:25] C:\Program Files\Windows NT
[15/11/2005|03:25] C:\Program Files\Windows Plus
[12/11/2005|01:09] C:\Program Files\WindowsUpdate
[09/06/2007|08:48] C:\Program Files\WinRAR
[03/03/2007|11:27] C:\Program Files\WLAN
[15/11/2005|03:26] C:\Program Files\xerox
[03/03/2007|13:35] C:\Program Files\Yahoo!
[31/10/2007|08:13] C:\Program Files\Zapu
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[09/12/2008|21:34] C:\Program Files\Fichiers communs\Adobe
[20/01/2007|12:05] C:\Program Files\Fichiers communs\Ahead
[21/01/2007|17:59] C:\Program Files\Fichiers communs\AOL
[03/10/2008|17:43] C:\Program Files\Fichiers communs\BOONTY Shared
[31/01/2007|20:39] C:\Program Files\Fichiers communs\Borland Shared
[20/01/2007|11:49] C:\Program Files\Fichiers communs\Designer
[17/10/2007|14:03] C:\Program Files\Fichiers communs\DirectX
[19/01/2007|21:53] C:\Program Files\Fichiers communs\Hewlett-Packard
[27/10/2006|16:02] C:\Program Files\Fichiers communs\HP
[03/03/2007|11:26] C:\Program Files\Fichiers communs\InstallShield
[27/10/2006|15:41] C:\Program Files\Fichiers communs\Java
[27/10/2006|16:08] C:\Program Files\Fichiers communs\LightScribe
[27/10/2006|16:08] C:\Program Files\Fichiers communs\LS Getting Started
[14/01/2008|20:50] C:\Program Files\Fichiers communs\Microsoft Shared
[21/02/2007|22:03] C:\Program Files\Fichiers communs\Motive
[15/11/2005|03:24] C:\Program Files\Fichiers communs\MSSoap
[20/01/2007|12:06] C:\Program Files\Fichiers communs\Nero
[15/11/2005|03:24] C:\Program Files\Fichiers communs\ODBC
[24/03/2007|19:31] C:\Program Files\Fichiers communs\Real
[15/11/2005|03:24] C:\Program Files\Fichiers communs\Services
[27/10/2006|16:07] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|03:24] C:\Program Files\Fichiers communs\SpeechEngines
[27/10/2006|16:07] C:\Program Files\Fichiers communs\SureThing Shared
[08/03/2008|16:15] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|16:54] C:\Program Files\Fichiers communs\System
[27/10/2006|16:07] C:\Program Files\Fichiers communs\TiVo Shared
[14/01/2008|20:50] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 48 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMul1.dll
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-12 23:57:38
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 52
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CATHY&~1\Mes documents\Ma musique\Electro-Dance\Virtual DJ\Virtual Dj Studio v4.5 Full + Crack + Key + Skin.rar
C:\DOCUME~1\CATHY&~1\Mes documents\Ma musique\Electro-Dance\Virtual DJ\VDJ.3.2(www.FlowDJ.com)\Atomix Virtual DJ 3.2 FULL + Crack.rar
J'ai lancé l'option 2.
Voici le rapport lop :
--------------------\\ Lop S&D 4.2.4-9c XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 09/05/2006 Ver: 08.00.12
USER : Cathy & Eric ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:226 Go (Free:146 Go)
D:\ (Local Disk) - FAT32 - Total:6 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 12/12/2008|23:56 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Plus Obj.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitDownload-4.5.0.0-setup.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media_France\tbMul0.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\Program Files\MultiMedia France Toolbar\INSTALL.LOG
Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.exe
Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.xpi
Supprime! - C:\WINDOWS\Tasks\A4DE8A1A906D3EA2.job
Supprime! - C:\DOCUME~1\CATHY&~1\APPLIC~1\idlebows
Supprime! - C:\Program Files\idlebows
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
Supprime! - C:\Program Files\BitTorrent Fastest Tool
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
Supprime! - C:\Program Files\MultiMedia France Toolbar
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMul1.dll
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[20/01/2007|12:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
[03/08/2008|20:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\Grisoft
[19/01/2007|21:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\HP
[15/11/2005|03:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[20/01/2007|11:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\Leadertech
[03/08/2008|21:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[21/01/2007|18:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[27/10/2006|16:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[20/01/2007|12:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Simple Star
[20/01/2007|11:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
[17/02/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/01/2007|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[08/03/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[03/10/2008|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[04/06/2007|06:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BufferZone
[27/10/2006|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[21/11/2008|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[12/12/2008|17:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/08/2008|20:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[27/10/2006|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/01/2007|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[27/10/2006|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[05/12/2008|22:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[31/07/2008|17:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[19/09/2007|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Games
[21/02/2007|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[17/10/2007|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NFS Underground
[27/10/2006|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[27/10/2006|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[08/03/2008|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[29/03/2007|22:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/03/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[03/03/2007|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[28/06/2008|20:45] C:\DOCUME~1\CATHY&~1\APPLIC~1\Adobe
[27/07/2007|21:13] C:\DOCUME~1\CATHY&~1\APPLIC~1\AdobeUM
[09/03/2008|19:45] C:\DOCUME~1\CATHY&~1\APPLIC~1\Ahead
[27/12/2007|08:55] C:\DOCUME~1\CATHY&~1\APPLIC~1\DivX
[04/05/2008|14:29] C:\DOCUME~1\CATHY&~1\APPLIC~1\fretsonfire
[07/03/2007|18:05] C:\DOCUME~1\CATHY&~1\APPLIC~1\Google
[03/08/2008|21:18] C:\DOCUME~1\CATHY&~1\APPLIC~1\Grisoft
[09/06/2007|08:48] C:\DOCUME~1\CATHY&~1\APPLIC~1\Help
[18/03/2007|09:51] C:\DOCUME~1\CATHY&~1\APPLIC~1\HP
[27/01/2007|18:23] C:\DOCUME~1\CATHY&~1\APPLIC~1\HPQ
[15/11/2005|03:22] C:\DOCUME~1\CATHY&~1\APPLIC~1\Identities
[05/12/2008|21:53] C:\DOCUME~1\CATHY&~1\APPLIC~1\Lavasoft
[19/08/2007|20:56] C:\DOCUME~1\CATHY&~1\APPLIC~1\Leadertech
[28/06/2008|20:45] C:\DOCUME~1\CATHY&~1\APPLIC~1\Macromedia
[05/12/2008|22:13] C:\DOCUME~1\CATHY&~1\APPLIC~1\Malwarebytes
[20/05/2007|20:50] C:\DOCUME~1\CATHY&~1\APPLIC~1\Media Player Classic
[14/05/2008|13:52] C:\DOCUME~1\CATHY&~1\APPLIC~1\Microsoft
[19/09/2007|18:30] C:\DOCUME~1\CATHY&~1\APPLIC~1\Microsoft Games
[21/11/2008|20:23] C:\DOCUME~1\CATHY&~1\APPLIC~1\Mozilla
[19/08/2007|21:28] C:\DOCUME~1\CATHY&~1\APPLIC~1\MSNInstaller
[24/03/2007|19:31] C:\DOCUME~1\CATHY&~1\APPLIC~1\Real
[10/03/2008|17:59] C:\DOCUME~1\CATHY&~1\APPLIC~1\Snapfish
[03/03/2007|16:17] C:\DOCUME~1\CATHY&~1\APPLIC~1\Sun
[07/03/2007|18:11] C:\DOCUME~1\CATHY&~1\APPLIC~1\Talkback
[28/05/2007|21:12] C:\DOCUME~1\CATHY&~1\APPLIC~1\TaoUSign
[18/03/2007|17:08] C:\DOCUME~1\CATHY&~1\APPLIC~1\Thunderbird
[01/04/2008|06:15] C:\DOCUME~1\CATHY&~1\APPLIC~1\U3
[30/11/2008|18:12] C:\DOCUME~1\CATHY&~1\APPLIC~1\uTorrent
[15/11/2005|03:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/08/2007|09:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[27/10/2006|16:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[27/10/2006|16:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[09/04/2007|08:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[14/01/2008|21:32] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[04/08/2008|07:40] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Adobe
[01/01/2008|01:50] C:\DOCUME~1\NOLWEN~1\APPLIC~1\BitTorrent
[29/12/2007|14:53] C:\DOCUME~1\NOLWEN~1\APPLIC~1\DivX
[18/03/2007|19:48] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Google
[04/08/2008|07:36] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Grisoft
[17/05/2007|05:45] C:\DOCUME~1\NOLWEN~1\APPLIC~1\HP
[31/10/2007|13:28] C:\DOCUME~1\NOLWEN~1\APPLIC~1\HPQ
[15/11/2005|03:22] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Identities
[17/10/2007|15:27] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Leadertech
[03/03/2007|19:37] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Macromedia
[30/12/2007|18:38] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Media Player Classic
[15/01/2008|20:26] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Microsoft
[21/09/2007|17:41] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Microsoft Games
[18/03/2007|19:36] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Mozilla
[29/12/2007|14:11] C:\DOCUME~1\NOLWEN~1\APPLIC~1\MSNInstaller
[27/10/2006|16:06] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Real
[03/03/2007|19:42] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Sun
[09/03/2007|17:50] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Talkback
[18/03/2007|19:36] C:\DOCUME~1\NOLWEN~1\APPLIC~1\Thunderbird
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[12/12/2008 23:00][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[12/12/2008 20:00][--a------] C:\WINDOWS\tasks\Norton Internet Security - Analyse systŠme complŠte - Cathy & Eric.job
[12/12/2008 16:52][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[17/02/2008|21:27] C:\Program Files\Adobe
[20/01/2007|12:12] C:\Program Files\Ahead
[27/10/2006|15:57] C:\Program Files\ATI Technologies
[08/03/2008|16:20] C:\Program Files\Avira
[03/10/2008|17:43] C:\Program Files\Boonty
[03/10/2008|17:43] C:\Program Files\BoontyGames
[21/02/2007|21:59] C:\Program Files\BroadJump
[29/07/2007|19:53] C:\Program Files\BufferZone
[03/08/2008|20:27] C:\Program Files\CCleaner
[21/02/2007|22:02] C:\Program Files\Club-Internet
[03/10/2007|15:58] C:\Program Files\Common Files
[12/11/2005|01:09] C:\Program Files\ComPlus Applications
[28/07/2008|22:21] C:\Program Files\Conduit
[27/04/2008|18:25] C:\Program Files\Cossacks - The Art Of War
[09/04/2007|10:27] C:\Program Files\directx
[22/11/2008|16:36] C:\Program Files\DivX
[12/12/2008|21:57] C:\Program Files\DNA
[06/12/2008|10:12] C:\Program Files\Dofus
[17/10/2007|13:47] C:\Program Files\EA GAMES
[06/12/2008|11:53] C:\Program Files\eMule
[03/10/2008|17:43] C:\Program Files\Fichiers communs
[25/03/2007|20:37] C:\Program Files\Free Audio Pack
[27/04/2008|18:25] C:\Program Files\FrenchOtto
[27/04/2008|18:25] C:\Program Files\GemMasterFrench
[09/08/2008|17:59] C:\Program Files\Google
[14/05/2008|13:52] C:\Program Files\Grand Prix Evolution
[03/08/2008|20:45] C:\Program Files\Grisoft
[13/04/2008|19:03] C:\Program Files\Happyneuron
[27/10/2006|16:25] C:\Program Files\Hewlett-Packard
[19/01/2007|21:56] C:\Program Files\HP
[09/04/2007|10:25] C:\Program Files\InstallShield Installation Information
[09/12/2008|22:40] C:\Program Files\Internet Explorer
[04/12/2008|19:59] C:\Program Files\Java
[20/05/2007|20:47] C:\Program Files\K-Lite Codec Pack
[07/03/2007|18:03] C:\Program Files\Lavasoft
[05/12/2008|22:31] C:\Program Files\Malwarebytes' Anti-Malware
[13/08/2008|22:34] C:\Program Files\Messenger
[12/12/2008|22:36] C:\Program Files\Messenger Plus! Live
[14/01/2008|21:49] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|03:24] C:\Program Files\microsoft frontpage
[19/09/2007|18:27] C:\Program Files\Microsoft Games
[20/01/2007|11:49] C:\Program Files\Microsoft Office
[22/10/2008|08:51] C:\Program Files\Microsoft Silverlight
[14/01/2008|21:05] C:\Program Files\Microsoft SQL Server Compact Edition
[27/04/2008|18:24] C:\Program Files\Microsoft Works
[15/11/2005|03:24] C:\Program Files\Movie Maker
[12/12/2008|17:29] C:\Program Files\Mozilla Firefox
[12/12/2008|19:05] C:\Program Files\Mozilla Thunderbird
[19/08/2007|21:28] C:\Program Files\MSN
[15/11/2005|03:25] C:\Program Files\MSN Gaming Zone
[03/03/2007|21:29] C:\Program Files\MSXML 4.0
[12/12/2008|23:56] C:\Program Files\Multi_Media_France
[15/11/2005|03:25] C:\Program Files\NetMeeting
[15/11/2005|03:25] C:\Program Files\Online Services
[13/06/2007|16:54] C:\Program Files\Outlook Express
[03/10/2007|17:41] C:\Program Files\Papyrus
[27/04/2008|18:24] C:\Program Files\PC-Doctor 5 for Windows
[18/02/2008|14:36] C:\Program Files\PhotoFiltre
[22/11/2008|15:56] C:\Program Files\Picasa2
[13/05/2008|23:16] C:\Program Files\QuickTime
[27/10/2006|16:06] C:\Program Files\Real
[26/12/2007|22:31] C:\Program Files\Secured eMule
[15/10/2007|08:07] C:\Program Files\Secured_eMule
[27/10/2006|16:26] C:\Program Files\Services en ligne
[05/11/2007|13:37] C:\Program Files\Share_Accelerator_MM
[27/10/2006|16:07] C:\Program Files\Sonic
[14/03/2008|22:36] C:\Program Files\StofWare
[03/10/2008|17:45] C:\Program Files\T‚l‚chargeur de 7 Sins
[17/11/2008|19:01] C:\Program Files\torrent_search
[12/12/2008|22:55] C:\Program Files\Uniblue
[12/11/2005|01:09] C:\Program Files\Uninstall Information
[12/05/2007|14:38] C:\Program Files\VirtualDJ
[29/11/2008|14:06] C:\Program Files\Wakfu
[02/03/2008|21:28] C:\Program Files\Windows Live
[14/01/2008|21:04] C:\Program Files\Windows Live Favorites
[27/04/2008|18:24] C:\Program Files\Windows Live Toolbar
[15/04/2007|10:43] C:\Program Files\Windows Media Connect 2
[09/07/2007|11:51] C:\Program Files\Windows Media Player
[15/11/2005|03:25] C:\Program Files\Windows NT
[15/11/2005|03:25] C:\Program Files\Windows Plus
[12/11/2005|01:09] C:\Program Files\WindowsUpdate
[09/06/2007|08:48] C:\Program Files\WinRAR
[03/03/2007|11:27] C:\Program Files\WLAN
[15/11/2005|03:26] C:\Program Files\xerox
[03/03/2007|13:35] C:\Program Files\Yahoo!
[31/10/2007|08:13] C:\Program Files\Zapu
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[09/12/2008|21:34] C:\Program Files\Fichiers communs\Adobe
[20/01/2007|12:05] C:\Program Files\Fichiers communs\Ahead
[21/01/2007|17:59] C:\Program Files\Fichiers communs\AOL
[03/10/2008|17:43] C:\Program Files\Fichiers communs\BOONTY Shared
[31/01/2007|20:39] C:\Program Files\Fichiers communs\Borland Shared
[20/01/2007|11:49] C:\Program Files\Fichiers communs\Designer
[17/10/2007|14:03] C:\Program Files\Fichiers communs\DirectX
[19/01/2007|21:53] C:\Program Files\Fichiers communs\Hewlett-Packard
[27/10/2006|16:02] C:\Program Files\Fichiers communs\HP
[03/03/2007|11:26] C:\Program Files\Fichiers communs\InstallShield
[27/10/2006|15:41] C:\Program Files\Fichiers communs\Java
[27/10/2006|16:08] C:\Program Files\Fichiers communs\LightScribe
[27/10/2006|16:08] C:\Program Files\Fichiers communs\LS Getting Started
[14/01/2008|20:50] C:\Program Files\Fichiers communs\Microsoft Shared
[21/02/2007|22:03] C:\Program Files\Fichiers communs\Motive
[15/11/2005|03:24] C:\Program Files\Fichiers communs\MSSoap
[20/01/2007|12:06] C:\Program Files\Fichiers communs\Nero
[15/11/2005|03:24] C:\Program Files\Fichiers communs\ODBC
[24/03/2007|19:31] C:\Program Files\Fichiers communs\Real
[15/11/2005|03:24] C:\Program Files\Fichiers communs\Services
[27/10/2006|16:07] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|03:24] C:\Program Files\Fichiers communs\SpeechEngines
[27/10/2006|16:07] C:\Program Files\Fichiers communs\SureThing Shared
[08/03/2008|16:15] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|16:54] C:\Program Files\Fichiers communs\System
[27/10/2006|16:07] C:\Program Files\Fichiers communs\TiVo Shared
[14/01/2008|20:50] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 48 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMul1.dll
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-12 23:57:38
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 52
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CATHY&~1\Mes documents\Ma musique\Electro-Dance\Virtual DJ\Virtual Dj Studio v4.5 Full + Crack + Key + Skin.rar
C:\DOCUME~1\CATHY&~1\Mes documents\Ma musique\Electro-Dance\Virtual DJ\VDJ.3.2(www.FlowDJ.com)\Atomix Virtual DJ 3.2 FULL + Crack.rar
---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe
---> Double-clique sur OTMoveIt3.exe afin de le lancer.
---> Copie (Ctrl+C) le texte suivant ci-dessous :
:processes
explorer.exe
:files
C:\Program Files\Multi_Media_France
:commands
[purity]
[emptytemp]
[start explorer]
[reboot]
---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
http://oldtimer.geekstogo.com/OTMoveIt3.exe
---> Double-clique sur OTMoveIt3.exe afin de le lancer.
---> Copie (Ctrl+C) le texte suivant ci-dessous :
:processes
explorer.exe
:files
C:\Program Files\Multi_Media_France
:commands
[purity]
[emptytemp]
[start explorer]
[reboot]
---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
J'ai tenté de téléchargé le fichier à l'adresse http://oldtimer.geekstogo.com/OTMoveIt3.exe. sur mon bureau mais impossible de l'ouvrir.
Mon Antivirus me l'interdit systématiquement.
Faut-il que je désactive Antivir le temps d'ouvrir cet exécutable?
je ne suis pas vraiment rassuré avec tous les messages d'alerte communiqués par Antivir!!!
Mon Antivirus me l'interdit systématiquement.
Faut-il que je désactive Antivir le temps d'ouvrir cet exécutable?
je ne suis pas vraiment rassuré avec tous les messages d'alerte communiqués par Antivir!!!
Tu peux désactiver l'antivirus.
Ce n'est que très récemment que OTMoveIt est reconnu à tort comme une infection.
Ce n'est que très récemment que OTMoveIt est reconnu à tort comme une infection.
Voici le rapport.
Je relance mon ordi.
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\Program Files\Multi_Media_France moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\CATHY&~1\LOCALS~1\Temp\etilqs_dJKlcZpuCBnsd1KlqgpS scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CATHY&~1\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CATHY&~1\LOCALS~1\Temp\~DFB92D.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_868.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12132008_005727
Je relance mon ordi.
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\Program Files\Multi_Media_France moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\CATHY&~1\LOCALS~1\Temp\etilqs_dJKlcZpuCBnsd1KlqgpS scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CATHY&~1\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CATHY&~1\LOCALS~1\Temp\~DFB92D.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_868.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cathy & Eric\Local Settings\Application Data\Mozilla\Firefox\Profiles\4n2ud3eo.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12132008_005727
Très bien.
● Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.
/!\ Déconnecte-toi et ferme toutes applications en cours /!\
● Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
● Double-clique sur l'icône Ad-remover située sur ton Bureau.
● Au menu principal, choisis l'option "A".
● Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note :
"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
● Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.
/!\ Déconnecte-toi et ferme toutes applications en cours /!\
● Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
● Double-clique sur l'icône Ad-remover située sur ton Bureau.
● Au menu principal, choisis l'option "A".
● Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note :
"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
J'ai téléchargé ce logiciel.
En l'ouvrant, il m'avertit des risques encourus pour l'installation de Ad-Remover.
Je ne l'ai pas encore installé sur C.
Il n'y a donc pas de soucis avec ce programme ???
En l'ouvrant, il m'avertit des risques encourus pour l'installation de Ad-Remover.
Je ne l'ai pas encore installé sur C.
Il n'y a donc pas de soucis avec ce programme ???
