Ya quelqun qui peux m'aider??
dkay
-
dkay -
dkay -
Bonjour,
J'ai un virus je crois, je n'y connait rien mais ya plein de processus qui roulent...
J,ai fait un rapport hijackthis
le voici:
merci de m'aider!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:57:46, on 2008-12-18
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Backup SafeKeeper\logging.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\lxdxcoms.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\spm\spmd.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Tweak-XP Pro 4\tweak-xp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Julie\Bureau\Nouveau dossier\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /F "C:\WINDOWS\TEMP\E_S7A.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [lxdxamon] "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlcc_device - - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: log_acc - Unknown owner - C:\Program Files\Backup SafeKeeper\logging.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\WINDOWS\system32\lxdxcoms.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: SPM License Server (spmd) - mental images GmbH - C:\spm\spmd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
J'ai un virus je crois, je n'y connait rien mais ya plein de processus qui roulent...
J,ai fait un rapport hijackthis
le voici:
merci de m'aider!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:57:46, on 2008-12-18
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Backup SafeKeeper\logging.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\lxdxcoms.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\spm\spmd.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Tweak-XP Pro 4\tweak-xp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Julie\Bureau\Nouveau dossier\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /F "C:\WINDOWS\TEMP\E_S7A.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [lxdxamon] "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlcc_device - - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: log_acc - Unknown owner - C:\Program Files\Backup SafeKeeper\logging.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\WINDOWS\system32\lxdxcoms.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: SPM License Server (spmd) - mental images GmbH - C:\spm\spmd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
A voir également:
- Ya quelqun qui peux m'aider??
- Ya til des appplinpour voir qui piste botre insta - Guide
- En préparant son diaporama, tom a pris quelques notes qui l'aideront lors de sa présentation. quand il présentera l'âne, il a prévu de raconter une anecdote sur cet animal. comment s'appelle l'âne de son histoire ? - Forum Réseau
- Qui peut m'aider à résoudre ça svp. - Forum Oracle
- Comment savoir si il ya un brouilleur wifi - Forum WiFi
- Ya - Guide
6 réponses
salut commence par sa
Ouvre ce lien (merci a S!RI pour ce programme). http://siri.urz.free.fr/Fix/SmitfraudFix.php
le mieux serait que tu désaxctives tes protections résidente "anti-virus et anti-spyware" le temps d'installer smitfraudfix et de faire l'analyse.
et télécharge SmitfraudFix.exe.
Regarde le tuto
Exécute le en choisissant l’option 1
il va générer un rapport
Copie/colle le sur le poste stp.
Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus, ect...) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
une petites démo en vidéo :http://pagesperso-orange.fr/rginformatique/section%20virus/smitfraudfix.htm
Ouvre ce lien (merci a S!RI pour ce programme). http://siri.urz.free.fr/Fix/SmitfraudFix.php
le mieux serait que tu désaxctives tes protections résidente "anti-virus et anti-spyware" le temps d'installer smitfraudfix et de faire l'analyse.
et télécharge SmitfraudFix.exe.
Regarde le tuto
Exécute le en choisissant l’option 1
il va générer un rapport
Copie/colle le sur le poste stp.
Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus, ect...) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
une petites démo en vidéo :http://pagesperso-orange.fr/rginformatique/section%20virus/smitfraudfix.htm
merci!
voici le rapport
SmitFraudFix v2.387
Rapport fait à 17:10:05,60, 2008-12-18
Executé à partir de C:\Documents and Settings\Julie\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal
»»»»»»»»»»»»»»»»»»»»»»»» Process
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Backup SafeKeeper\logging.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\lxdxcoms.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\spm\spmd.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cmd.exe
»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Julie
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Julie\LOCALS~1\Temp
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Julie\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Julie\Favoris
»»»»»»»»»»»»»»»»»»»»»»»» Bureau
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues
»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000001
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 24.200.241.37
DNS Server Search Order: 24.201.245.77
DNS Server Search Order: 24.200.243.189
HKLM\SYSTEM\CCS\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS1\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS2\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS3\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll
»»»»»»»»»»»»»»»»»»»»»»»» Fin
voici le rapport
SmitFraudFix v2.387
Rapport fait à 17:10:05,60, 2008-12-18
Executé à partir de C:\Documents and Settings\Julie\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal
»»»»»»»»»»»»»»»»»»»»»»»» Process
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Backup SafeKeeper\logging.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\lxdxcoms.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\spm\spmd.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cmd.exe
»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Julie
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Julie\LOCALS~1\Temp
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Julie\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Julie\Favoris
»»»»»»»»»»»»»»»»»»»»»»»» Bureau
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues
»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000001
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 24.200.241.37
DNS Server Search Order: 24.201.245.77
DNS Server Search Order: 24.200.243.189
HKLM\SYSTEM\CCS\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS1\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS2\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS3\Services\Tcpip\..\{793C0DAF-BA92-47A7-B6FE-D732F9BD524F}: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=24.200.241.37 24.201.245.77 24.200.243.189
»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll
»»»»»»»»»»»»»»»»»»»»»»»» Fin
le voici:
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Julie ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:68 Go (Free:26 Go)
D:\ (Local Disk) - NTFS - Total:6 Go (Free:4 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (USB)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 2008-12-18|17:23 )
--------------------\\ Listing des dossiers dans APPLIC~1
[2006-07-19|11:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-11-25|09:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008-08-13|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-07-27|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2008-04-09|09:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2008-08-12|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
[2008-12-17|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[2007-06-14|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2006-09-27|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-04-08|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2008-01-19|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[2008-10-16|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[2008-09-21|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2008-09-11|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Frantic Films
[2007-10-06|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2007-03-22|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[2008-12-02|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[2008-12-02|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[2006-09-13|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-09-10|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-12-10|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2008-03-19|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[2008-01-25|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[2008-02-09|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2006-08-26|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trend Micro
[2006-07-19|12:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-05-29|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-07-19|11:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2008-10-23|11:14] C:\DOCUME~1\Julie\APPLIC~1\Adobe
[2007-02-28|17:17] C:\DOCUME~1\Julie\APPLIC~1\AdobeUM
[2008-09-04|16:00] C:\DOCUME~1\Julie\APPLIC~1\Ahead
[2008-03-22|13:38] C:\DOCUME~1\Julie\APPLIC~1\Apple Computer
[2008-05-06|09:58] C:\DOCUME~1\Julie\APPLIC~1\AVS4YOU
[2008-04-08|18:00] C:\DOCUME~1\Julie\APPLIC~1\AVSMedia
[2008-12-12|10:31] C:\DOCUME~1\Julie\APPLIC~1\Azureus
[2007-02-28|17:01] C:\DOCUME~1\Julie\APPLIC~1\BitTorrent
[2007-05-28|13:28] C:\DOCUME~1\Julie\APPLIC~1\CyberLink
[2008-10-25|02:20] C:\DOCUME~1\Julie\APPLIC~1\FaxCtr
[2008-11-28|14:19] C:\DOCUME~1\Julie\APPLIC~1\FileZilla
[2007-02-21|12:21] C:\DOCUME~1\Julie\APPLIC~1\Google
[2006-07-23|10:09] C:\DOCUME~1\Julie\APPLIC~1\Help
[2006-10-01|11:05] C:\DOCUME~1\Julie\APPLIC~1\Identities
[2007-06-11|01:04] C:\DOCUME~1\Julie\APPLIC~1\InstallShield
[2006-07-19|11:54] C:\DOCUME~1\Julie\APPLIC~1\InterTrust
[2008-08-12|19:25] C:\DOCUME~1\Julie\APPLIC~1\Lavasoft
[2008-07-18|13:25] C:\DOCUME~1\Julie\APPLIC~1\Leadertech
[2008-10-16|14:53] C:\DOCUME~1\Julie\APPLIC~1\Lexmark Productivity Studio
[2007-07-29|07:13] C:\DOCUME~1\Julie\APPLIC~1\Macromedia
[2008-10-16|17:02] C:\DOCUME~1\Julie\APPLIC~1\Microsoft
[2007-04-10|17:31] C:\DOCUME~1\Julie\APPLIC~1\Microsoft Web Folders
[2007-02-20|17:50] C:\DOCUME~1\Julie\APPLIC~1\Mozilla
[2006-07-31|17:22] C:\DOCUME~1\Julie\APPLIC~1\Musicmatch
[2008-01-25|23:55] C:\DOCUME~1\Julie\APPLIC~1\Obsidium
[2006-12-08|01:36] C:\DOCUME~1\Julie\APPLIC~1\PC Tools
[2007-06-11|14:22] C:\DOCUME~1\Julie\APPLIC~1\Planetside Software
[2007-01-11|13:43] C:\DOCUME~1\Julie\APPLIC~1\Roxio
[2006-12-15|23:29] C:\DOCUME~1\Julie\APPLIC~1\Sun
[2007-02-20|17:51] C:\DOCUME~1\Julie\APPLIC~1\Talkback
[2008-12-12|16:24] C:\DOCUME~1\Julie\APPLIC~1\U3
[2007-06-11|16:00] C:\DOCUME~1\Julie\APPLIC~1\uk.co.planetside
[2007-02-15|22:04] C:\DOCUME~1\Julie\APPLIC~1\uTorrent
[2008-12-04|00:34] C:\DOCUME~1\Julie\APPLIC~1\vlc
[2008-12-12|16:19] C:\DOCUME~1\Julie\APPLIC~1\XnView
[2007-11-10|15:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[2006-07-19|11:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2006-07-19|11:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-12-15 13:24][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-12-18 16:43][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[2008-12-18 09:04][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-09-06 19:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[2008-08-12|23:36] C:\Program Files\Adobe
[2008-08-12|21:01] C:\Program Files\Ahead
[2007-10-08|15:47] C:\Program Files\Alcohol Soft
[2007-02-21|12:55] C:\Program Files\Alias
[2008-12-17|19:48] C:\Program Files\AntiVir PersonalEdition Classic
[2008-08-04|18:34] C:\Program Files\Apple Software Update
[2008-07-18|13:17] C:\Program Files\ArcSoft
[2008-12-12|10:31] C:\Program Files\Azureus
[2007-11-17|14:31] C:\Program Files\Backup SafeKeeper
[2007-03-20|18:26] C:\Program Files\BitTorrent
[2007-08-14|21:24] C:\Program Files\Blender Foundation
[2008-11-27|14:15] C:\Program Files\Bonjour
[2006-07-19|11:35] C:\Program Files\ComPlus Applications
[2007-04-22|20:10] C:\Program Files\CopyStar
[2007-10-19|13:45] C:\Program Files\CyberLink
[2007-06-10|22:44] C:\Program Files\Dallas Semiconductor
[2007-06-05|13:09] C:\Program Files\Dell Photo AIO Printer 924
[2008-12-15|13:32] C:\Program Files\DIFX
[2007-06-11|00:59] C:\Program Files\directx
[2008-10-03|20:02] C:\Program Files\eMule
[2008-12-17|16:35] C:\Program Files\EPSON
[2008-05-18|20:44] C:\Program Files\eyeon
[2008-12-16|15:59] C:\Program Files\Fichiers communs
[2008-06-19|11:00] C:\Program Files\FileZilla FTP Client
[2007-10-10|13:15] C:\Program Files\Fusion
[2008-08-12|19:26] C:\Program Files\Google
[2008-12-16|15:57] C:\Program Files\InstallShield Installation Information
[2006-07-19|12:16] C:\Program Files\Intel
[2008-12-17|18:48] C:\Program Files\Internet Explorer
[2008-11-25|09:22] C:\Program Files\iPod
[2008-11-25|09:23] C:\Program Files\iTunes
[2008-10-09|18:29] C:\Program Files\Java
[2007-02-20|18:38] C:\Program Files\Kaspersky Lab
[2008-12-05|11:48] C:\Program Files\Lavalys
[2008-08-12|19:25] C:\Program Files\Lavasoft
[2008-10-16|14:48] C:\Program Files\Lexmark 3600-4600 Series
[2008-10-16|14:37] C:\Program Files\Lexmark Fax Solutions
[2008-10-16|14:34] C:\Program Files\Lexmark Toolbar
[2008-12-02|15:38] C:\Program Files\Logitech
[2008-12-17|18:53] C:\Program Files\Messenger
[2008-12-03|09:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2007-04-10|17:31] C:\Program Files\microsoft frontpage
[2008-09-10|19:34] C:\Program Files\Microsoft Office
[2008-03-26|14:29] C:\Program Files\Microsoft SQL Server Compact Edition
[2008-09-10|19:33] C:\Program Files\Microsoft Visual Studio
[2008-09-10|19:27] C:\Program Files\Microsoft Visual Studio 8
[2008-09-10|19:35] C:\Program Files\Microsoft Works
[2008-09-10|19:31] C:\Program Files\Microsoft.NET
[2008-12-17|18:48] C:\Program Files\Movie Maker
[2007-10-19|13:44] C:\Program Files\Mozilla Firefox
[2008-09-10|19:34] C:\Program Files\MSBuild
[2008-06-24|13:18] C:\Program Files\MSECache
[2006-07-19|11:34] C:\Program Files\MSN
[2006-07-19|11:34] C:\Program Files\MSN Gaming Zone
[2008-11-13|03:01] C:\Program Files\MSXML 4.0
[2006-11-29|19:44] C:\Program Files\Musicmatch
[2007-10-06|16:26] C:\Program Files\MyHeritage
[2008-04-08|17:51] C:\Program Files\NCH Software
[2008-09-04|15:55] C:\Program Files\Nero
[2008-12-17|18:44] C:\Program Files\NetMeeting
[2007-10-23|16:18] C:\Program Files\NVIDIA Corporation
[2006-07-19|11:34] C:\Program Files\Online Services
[2008-02-05|18:37] C:\Program Files\Oront Burning Kit 2
[2008-12-17|18:44] C:\Program Files\Outlook Express
[2008-08-22|10:46] C:\Program Files\Pixologic
[2007-06-11|14:20] C:\Program Files\Planetside Software
[2008-11-25|09:18] C:\Program Files\QuickTime
[2008-04-18|12:41] C:\Program Files\Safari
[2007-10-06|16:56] C:\Program Files\SpeedSix
[2007-02-20|17:11] C:\Program Files\Spybot - Search & Destroy
[2007-02-20|17:14] C:\Program Files\Spyware Doctor
[2007-02-20|17:16] C:\Program Files\SPYWAREfighter
[2008-10-09|18:30] C:\Program Files\Sun
[2007-02-20|17:14] C:\Program Files\Tablet
[2006-12-08|14:54] C:\Program Files\Tablette
[2007-06-16|15:58] C:\Program Files\Terragen
[2008-05-18|21:26] C:\Program Files\Total Video Converter
[2007-02-18|16:57] C:\Program Files\Trend Micro
[2008-11-27|11:03] C:\Program Files\Tweak-XP Pro 4
[2007-02-20|17:12] C:\Program Files\Unfold3D
[2006-07-19|11:44] C:\Program Files\Uninstall Information
[2008-08-12|19:29] C:\Program Files\Video DVD Maker
[2008-12-04|00:32] C:\Program Files\VideoLAN
[2008-12-16|15:57] C:\Program Files\Windows Live
[2008-03-26|14:31] C:\Program Files\Windows Live Favorites
[2007-02-22|12:17] C:\Program Files\Windows Live Safety Center
[2008-04-17|22:32] C:\Program Files\Windows Live Toolbar
[2008-04-17|22:32] C:\Program Files\Windows Media Connect 2
[2008-12-17|18:44] C:\Program Files\Windows Media Player
[2008-12-17|18:44] C:\Program Files\Windows NT
[2006-07-19|11:37] C:\Program Files\WindowsUpdate
[2006-09-10|20:13] C:\Program Files\WinRAR
[2008-06-18|14:43] C:\Program Files\WinZip
[2006-07-19|11:39] C:\Program Files\xerox
[2007-10-19|11:07] C:\Program Files\XnView
[2007-02-20|17:13] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-10-16|19:21] C:\Program Files\Fichiers communs\Adobe
[2006-07-27|18:40] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2008-08-12|21:00] C:\Program Files\Fichiers communs\Ahead
[2008-11-25|09:22] C:\Program Files\Fichiers communs\Apple
[2008-08-06|15:26] C:\Program Files\Fichiers communs\AVSMedia
[2008-03-15|18:27] C:\Program Files\Fichiers communs\Blizzard Entertainment
[2008-08-12|23:34] C:\Program Files\Fichiers communs\Control Panels
[2008-09-10|19:33] C:\Program Files\Fichiers communs\DESIGNER
[2006-08-24|09:22] C:\Program Files\Fichiers communs\InstallShield
[2006-08-27|17:26] C:\Program Files\Fichiers communs\Java
[2008-12-02|15:39] C:\Program Files\Fichiers communs\LogiShrd
[2008-10-03|20:05] C:\Program Files\Fichiers communs\Logitech
[2008-08-12|21:25] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-09-14|02:05] C:\Program Files\Fichiers communs\Microsoft Shared
[2006-07-19|11:36] C:\Program Files\Fichiers communs\MSSoap
[2008-02-09|12:57] C:\Program Files\Fichiers communs\Nero
[2006-07-19|07:28] C:\Program Files\Fichiers communs\ODBC
[2006-07-19|11:36] C:\Program Files\Fichiers communs\Services
[2008-08-28|14:25] C:\Program Files\Fichiers communs\Softimage
[2006-07-19|07:28] C:\Program Files\Fichiers communs\SpeechEngines
[2008-12-17|18:44] C:\Program Files\Fichiers communs\System
[2008-03-26|14:24] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 48 Processes )
iexplore.exe ~ [PID:2320]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-18 17:24:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 16
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\File_Maker_8_0_1___crack[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Sibelius_5_Hybrid_DVD__with_working_windows_keygen_[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Vue_6_Xstream_Keygen[1].torrent
C:\DOCUME~1\Julie\Mes documents\Ma musique\iTunes\iTunes Music\Brand New\Deja Entendu\11 Play Crack The Sky.m4a
[F:1775][D:158]-> C:\DOCUME~1\Julie\LOCALS~1\Temp
[F:44][D:0]-> C:\DOCUME~1\Julie\Cookies
[F:6137][D:23]-> C:\DOCUME~1\Julie\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-12-18|17:26 - Option : [1]
--------------------\\ Fin du rapport a 17:26:44
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Julie ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:68 Go (Free:26 Go)
D:\ (Local Disk) - NTFS - Total:6 Go (Free:4 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (USB)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 2008-12-18|17:23 )
--------------------\\ Listing des dossiers dans APPLIC~1
[2006-07-19|11:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-11-25|09:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008-08-13|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-07-27|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2008-04-09|09:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2008-08-12|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
[2008-12-17|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[2007-06-14|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2006-09-27|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-04-08|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2008-01-19|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[2008-10-16|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[2008-09-21|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2008-09-11|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Frantic Films
[2007-10-06|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2007-03-22|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[2008-12-02|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[2008-12-02|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[2006-09-13|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-09-10|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-12-10|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2008-03-19|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[2008-01-25|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[2008-02-09|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2006-08-26|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trend Micro
[2006-07-19|12:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-05-29|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-07-19|11:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2008-10-23|11:14] C:\DOCUME~1\Julie\APPLIC~1\Adobe
[2007-02-28|17:17] C:\DOCUME~1\Julie\APPLIC~1\AdobeUM
[2008-09-04|16:00] C:\DOCUME~1\Julie\APPLIC~1\Ahead
[2008-03-22|13:38] C:\DOCUME~1\Julie\APPLIC~1\Apple Computer
[2008-05-06|09:58] C:\DOCUME~1\Julie\APPLIC~1\AVS4YOU
[2008-04-08|18:00] C:\DOCUME~1\Julie\APPLIC~1\AVSMedia
[2008-12-12|10:31] C:\DOCUME~1\Julie\APPLIC~1\Azureus
[2007-02-28|17:01] C:\DOCUME~1\Julie\APPLIC~1\BitTorrent
[2007-05-28|13:28] C:\DOCUME~1\Julie\APPLIC~1\CyberLink
[2008-10-25|02:20] C:\DOCUME~1\Julie\APPLIC~1\FaxCtr
[2008-11-28|14:19] C:\DOCUME~1\Julie\APPLIC~1\FileZilla
[2007-02-21|12:21] C:\DOCUME~1\Julie\APPLIC~1\Google
[2006-07-23|10:09] C:\DOCUME~1\Julie\APPLIC~1\Help
[2006-10-01|11:05] C:\DOCUME~1\Julie\APPLIC~1\Identities
[2007-06-11|01:04] C:\DOCUME~1\Julie\APPLIC~1\InstallShield
[2006-07-19|11:54] C:\DOCUME~1\Julie\APPLIC~1\InterTrust
[2008-08-12|19:25] C:\DOCUME~1\Julie\APPLIC~1\Lavasoft
[2008-07-18|13:25] C:\DOCUME~1\Julie\APPLIC~1\Leadertech
[2008-10-16|14:53] C:\DOCUME~1\Julie\APPLIC~1\Lexmark Productivity Studio
[2007-07-29|07:13] C:\DOCUME~1\Julie\APPLIC~1\Macromedia
[2008-10-16|17:02] C:\DOCUME~1\Julie\APPLIC~1\Microsoft
[2007-04-10|17:31] C:\DOCUME~1\Julie\APPLIC~1\Microsoft Web Folders
[2007-02-20|17:50] C:\DOCUME~1\Julie\APPLIC~1\Mozilla
[2006-07-31|17:22] C:\DOCUME~1\Julie\APPLIC~1\Musicmatch
[2008-01-25|23:55] C:\DOCUME~1\Julie\APPLIC~1\Obsidium
[2006-12-08|01:36] C:\DOCUME~1\Julie\APPLIC~1\PC Tools
[2007-06-11|14:22] C:\DOCUME~1\Julie\APPLIC~1\Planetside Software
[2007-01-11|13:43] C:\DOCUME~1\Julie\APPLIC~1\Roxio
[2006-12-15|23:29] C:\DOCUME~1\Julie\APPLIC~1\Sun
[2007-02-20|17:51] C:\DOCUME~1\Julie\APPLIC~1\Talkback
[2008-12-12|16:24] C:\DOCUME~1\Julie\APPLIC~1\U3
[2007-06-11|16:00] C:\DOCUME~1\Julie\APPLIC~1\uk.co.planetside
[2007-02-15|22:04] C:\DOCUME~1\Julie\APPLIC~1\uTorrent
[2008-12-04|00:34] C:\DOCUME~1\Julie\APPLIC~1\vlc
[2008-12-12|16:19] C:\DOCUME~1\Julie\APPLIC~1\XnView
[2007-11-10|15:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[2006-07-19|11:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2006-07-19|11:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-12-15 13:24][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-12-18 16:43][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[2008-12-18 09:04][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-09-06 19:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[2008-08-12|23:36] C:\Program Files\Adobe
[2008-08-12|21:01] C:\Program Files\Ahead
[2007-10-08|15:47] C:\Program Files\Alcohol Soft
[2007-02-21|12:55] C:\Program Files\Alias
[2008-12-17|19:48] C:\Program Files\AntiVir PersonalEdition Classic
[2008-08-04|18:34] C:\Program Files\Apple Software Update
[2008-07-18|13:17] C:\Program Files\ArcSoft
[2008-12-12|10:31] C:\Program Files\Azureus
[2007-11-17|14:31] C:\Program Files\Backup SafeKeeper
[2007-03-20|18:26] C:\Program Files\BitTorrent
[2007-08-14|21:24] C:\Program Files\Blender Foundation
[2008-11-27|14:15] C:\Program Files\Bonjour
[2006-07-19|11:35] C:\Program Files\ComPlus Applications
[2007-04-22|20:10] C:\Program Files\CopyStar
[2007-10-19|13:45] C:\Program Files\CyberLink
[2007-06-10|22:44] C:\Program Files\Dallas Semiconductor
[2007-06-05|13:09] C:\Program Files\Dell Photo AIO Printer 924
[2008-12-15|13:32] C:\Program Files\DIFX
[2007-06-11|00:59] C:\Program Files\directx
[2008-10-03|20:02] C:\Program Files\eMule
[2008-12-17|16:35] C:\Program Files\EPSON
[2008-05-18|20:44] C:\Program Files\eyeon
[2008-12-16|15:59] C:\Program Files\Fichiers communs
[2008-06-19|11:00] C:\Program Files\FileZilla FTP Client
[2007-10-10|13:15] C:\Program Files\Fusion
[2008-08-12|19:26] C:\Program Files\Google
[2008-12-16|15:57] C:\Program Files\InstallShield Installation Information
[2006-07-19|12:16] C:\Program Files\Intel
[2008-12-17|18:48] C:\Program Files\Internet Explorer
[2008-11-25|09:22] C:\Program Files\iPod
[2008-11-25|09:23] C:\Program Files\iTunes
[2008-10-09|18:29] C:\Program Files\Java
[2007-02-20|18:38] C:\Program Files\Kaspersky Lab
[2008-12-05|11:48] C:\Program Files\Lavalys
[2008-08-12|19:25] C:\Program Files\Lavasoft
[2008-10-16|14:48] C:\Program Files\Lexmark 3600-4600 Series
[2008-10-16|14:37] C:\Program Files\Lexmark Fax Solutions
[2008-10-16|14:34] C:\Program Files\Lexmark Toolbar
[2008-12-02|15:38] C:\Program Files\Logitech
[2008-12-17|18:53] C:\Program Files\Messenger
[2008-12-03|09:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2007-04-10|17:31] C:\Program Files\microsoft frontpage
[2008-09-10|19:34] C:\Program Files\Microsoft Office
[2008-03-26|14:29] C:\Program Files\Microsoft SQL Server Compact Edition
[2008-09-10|19:33] C:\Program Files\Microsoft Visual Studio
[2008-09-10|19:27] C:\Program Files\Microsoft Visual Studio 8
[2008-09-10|19:35] C:\Program Files\Microsoft Works
[2008-09-10|19:31] C:\Program Files\Microsoft.NET
[2008-12-17|18:48] C:\Program Files\Movie Maker
[2007-10-19|13:44] C:\Program Files\Mozilla Firefox
[2008-09-10|19:34] C:\Program Files\MSBuild
[2008-06-24|13:18] C:\Program Files\MSECache
[2006-07-19|11:34] C:\Program Files\MSN
[2006-07-19|11:34] C:\Program Files\MSN Gaming Zone
[2008-11-13|03:01] C:\Program Files\MSXML 4.0
[2006-11-29|19:44] C:\Program Files\Musicmatch
[2007-10-06|16:26] C:\Program Files\MyHeritage
[2008-04-08|17:51] C:\Program Files\NCH Software
[2008-09-04|15:55] C:\Program Files\Nero
[2008-12-17|18:44] C:\Program Files\NetMeeting
[2007-10-23|16:18] C:\Program Files\NVIDIA Corporation
[2006-07-19|11:34] C:\Program Files\Online Services
[2008-02-05|18:37] C:\Program Files\Oront Burning Kit 2
[2008-12-17|18:44] C:\Program Files\Outlook Express
[2008-08-22|10:46] C:\Program Files\Pixologic
[2007-06-11|14:20] C:\Program Files\Planetside Software
[2008-11-25|09:18] C:\Program Files\QuickTime
[2008-04-18|12:41] C:\Program Files\Safari
[2007-10-06|16:56] C:\Program Files\SpeedSix
[2007-02-20|17:11] C:\Program Files\Spybot - Search & Destroy
[2007-02-20|17:14] C:\Program Files\Spyware Doctor
[2007-02-20|17:16] C:\Program Files\SPYWAREfighter
[2008-10-09|18:30] C:\Program Files\Sun
[2007-02-20|17:14] C:\Program Files\Tablet
[2006-12-08|14:54] C:\Program Files\Tablette
[2007-06-16|15:58] C:\Program Files\Terragen
[2008-05-18|21:26] C:\Program Files\Total Video Converter
[2007-02-18|16:57] C:\Program Files\Trend Micro
[2008-11-27|11:03] C:\Program Files\Tweak-XP Pro 4
[2007-02-20|17:12] C:\Program Files\Unfold3D
[2006-07-19|11:44] C:\Program Files\Uninstall Information
[2008-08-12|19:29] C:\Program Files\Video DVD Maker
[2008-12-04|00:32] C:\Program Files\VideoLAN
[2008-12-16|15:57] C:\Program Files\Windows Live
[2008-03-26|14:31] C:\Program Files\Windows Live Favorites
[2007-02-22|12:17] C:\Program Files\Windows Live Safety Center
[2008-04-17|22:32] C:\Program Files\Windows Live Toolbar
[2008-04-17|22:32] C:\Program Files\Windows Media Connect 2
[2008-12-17|18:44] C:\Program Files\Windows Media Player
[2008-12-17|18:44] C:\Program Files\Windows NT
[2006-07-19|11:37] C:\Program Files\WindowsUpdate
[2006-09-10|20:13] C:\Program Files\WinRAR
[2008-06-18|14:43] C:\Program Files\WinZip
[2006-07-19|11:39] C:\Program Files\xerox
[2007-10-19|11:07] C:\Program Files\XnView
[2007-02-20|17:13] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-10-16|19:21] C:\Program Files\Fichiers communs\Adobe
[2006-07-27|18:40] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2008-08-12|21:00] C:\Program Files\Fichiers communs\Ahead
[2008-11-25|09:22] C:\Program Files\Fichiers communs\Apple
[2008-08-06|15:26] C:\Program Files\Fichiers communs\AVSMedia
[2008-03-15|18:27] C:\Program Files\Fichiers communs\Blizzard Entertainment
[2008-08-12|23:34] C:\Program Files\Fichiers communs\Control Panels
[2008-09-10|19:33] C:\Program Files\Fichiers communs\DESIGNER
[2006-08-24|09:22] C:\Program Files\Fichiers communs\InstallShield
[2006-08-27|17:26] C:\Program Files\Fichiers communs\Java
[2008-12-02|15:39] C:\Program Files\Fichiers communs\LogiShrd
[2008-10-03|20:05] C:\Program Files\Fichiers communs\Logitech
[2008-08-12|21:25] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-09-14|02:05] C:\Program Files\Fichiers communs\Microsoft Shared
[2006-07-19|11:36] C:\Program Files\Fichiers communs\MSSoap
[2008-02-09|12:57] C:\Program Files\Fichiers communs\Nero
[2006-07-19|07:28] C:\Program Files\Fichiers communs\ODBC
[2006-07-19|11:36] C:\Program Files\Fichiers communs\Services
[2008-08-28|14:25] C:\Program Files\Fichiers communs\Softimage
[2006-07-19|07:28] C:\Program Files\Fichiers communs\SpeechEngines
[2008-12-17|18:44] C:\Program Files\Fichiers communs\System
[2008-03-26|14:24] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 48 Processes )
iexplore.exe ~ [PID:2320]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-18 17:24:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 16
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\File_Maker_8_0_1___crack[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Sibelius_5_Hybrid_DVD__with_working_windows_keygen_[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Vue_6_Xstream_Keygen[1].torrent
C:\DOCUME~1\Julie\Mes documents\Ma musique\iTunes\iTunes Music\Brand New\Deja Entendu\11 Play Crack The Sky.m4a
[F:1775][D:158]-> C:\DOCUME~1\Julie\LOCALS~1\Temp
[F:44][D:0]-> C:\DOCUME~1\Julie\Cookies
[F:6137][D:23]-> C:\DOCUME~1\Julie\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-12-18|17:26 - Option : [1]
--------------------\\ Fin du rapport a 17:26:44
le voilà:
--------------------\\ Lop S&D 4.2.4-9c XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Julie ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:68 Go (Free:26 Go)
D:\ (Local Disk) - NTFS - Total:6 Go (Free:4 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (USB)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 2008-12-18|17:31 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[2006-07-19|11:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-11-25|09:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008-08-13|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-07-27|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2008-04-09|09:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2008-08-12|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
[2008-12-17|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[2007-06-14|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2006-09-27|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-04-08|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2008-01-19|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[2008-10-16|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[2008-09-21|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2008-09-11|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Frantic Films
[2007-10-06|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2007-03-22|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[2008-12-02|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[2008-12-02|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[2006-09-13|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-09-10|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-12-10|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2008-03-19|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[2008-01-25|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[2008-02-09|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2006-08-26|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trend Micro
[2006-07-19|12:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-05-29|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-07-19|11:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2008-10-23|11:14] C:\DOCUME~1\Julie\APPLIC~1\Adobe
[2007-02-28|17:17] C:\DOCUME~1\Julie\APPLIC~1\AdobeUM
[2008-09-04|16:00] C:\DOCUME~1\Julie\APPLIC~1\Ahead
[2008-03-22|13:38] C:\DOCUME~1\Julie\APPLIC~1\Apple Computer
[2008-05-06|09:58] C:\DOCUME~1\Julie\APPLIC~1\AVS4YOU
[2008-04-08|18:00] C:\DOCUME~1\Julie\APPLIC~1\AVSMedia
[2008-12-12|10:31] C:\DOCUME~1\Julie\APPLIC~1\Azureus
[2007-02-28|17:01] C:\DOCUME~1\Julie\APPLIC~1\BitTorrent
[2007-05-28|13:28] C:\DOCUME~1\Julie\APPLIC~1\CyberLink
[2008-10-25|02:20] C:\DOCUME~1\Julie\APPLIC~1\FaxCtr
[2008-11-28|14:19] C:\DOCUME~1\Julie\APPLIC~1\FileZilla
[2007-02-21|12:21] C:\DOCUME~1\Julie\APPLIC~1\Google
[2006-07-23|10:09] C:\DOCUME~1\Julie\APPLIC~1\Help
[2006-10-01|11:05] C:\DOCUME~1\Julie\APPLIC~1\Identities
[2007-06-11|01:04] C:\DOCUME~1\Julie\APPLIC~1\InstallShield
[2006-07-19|11:54] C:\DOCUME~1\Julie\APPLIC~1\InterTrust
[2008-08-12|19:25] C:\DOCUME~1\Julie\APPLIC~1\Lavasoft
[2008-07-18|13:25] C:\DOCUME~1\Julie\APPLIC~1\Leadertech
[2008-10-16|14:53] C:\DOCUME~1\Julie\APPLIC~1\Lexmark Productivity Studio
[2007-07-29|07:13] C:\DOCUME~1\Julie\APPLIC~1\Macromedia
[2008-10-16|17:02] C:\DOCUME~1\Julie\APPLIC~1\Microsoft
[2007-04-10|17:31] C:\DOCUME~1\Julie\APPLIC~1\Microsoft Web Folders
[2007-02-20|17:50] C:\DOCUME~1\Julie\APPLIC~1\Mozilla
[2006-07-31|17:22] C:\DOCUME~1\Julie\APPLIC~1\Musicmatch
[2008-01-25|23:55] C:\DOCUME~1\Julie\APPLIC~1\Obsidium
[2006-12-08|01:36] C:\DOCUME~1\Julie\APPLIC~1\PC Tools
[2007-06-11|14:22] C:\DOCUME~1\Julie\APPLIC~1\Planetside Software
[2007-01-11|13:43] C:\DOCUME~1\Julie\APPLIC~1\Roxio
[2006-12-15|23:29] C:\DOCUME~1\Julie\APPLIC~1\Sun
[2007-02-20|17:51] C:\DOCUME~1\Julie\APPLIC~1\Talkback
[2008-12-12|16:24] C:\DOCUME~1\Julie\APPLIC~1\U3
[2007-06-11|16:00] C:\DOCUME~1\Julie\APPLIC~1\uk.co.planetside
[2007-02-15|22:04] C:\DOCUME~1\Julie\APPLIC~1\uTorrent
[2008-12-04|00:34] C:\DOCUME~1\Julie\APPLIC~1\vlc
[2008-12-12|16:19] C:\DOCUME~1\Julie\APPLIC~1\XnView
[2007-11-10|15:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[2006-07-19|11:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2006-07-19|11:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-12-15 13:24][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-12-18 16:43][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[2008-12-18 09:04][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-09-06 19:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[2008-08-12|23:36] C:\Program Files\Adobe
[2008-08-12|21:01] C:\Program Files\Ahead
[2007-10-08|15:47] C:\Program Files\Alcohol Soft
[2007-02-21|12:55] C:\Program Files\Alias
[2008-12-17|19:48] C:\Program Files\AntiVir PersonalEdition Classic
[2008-08-04|18:34] C:\Program Files\Apple Software Update
[2008-07-18|13:17] C:\Program Files\ArcSoft
[2008-12-12|10:31] C:\Program Files\Azureus
[2007-11-17|14:31] C:\Program Files\Backup SafeKeeper
[2007-03-20|18:26] C:\Program Files\BitTorrent
[2007-08-14|21:24] C:\Program Files\Blender Foundation
[2008-11-27|14:15] C:\Program Files\Bonjour
[2006-07-19|11:35] C:\Program Files\ComPlus Applications
[2007-04-22|20:10] C:\Program Files\CopyStar
[2007-10-19|13:45] C:\Program Files\CyberLink
[2007-06-10|22:44] C:\Program Files\Dallas Semiconductor
[2007-06-05|13:09] C:\Program Files\Dell Photo AIO Printer 924
[2008-12-15|13:32] C:\Program Files\DIFX
[2007-06-11|00:59] C:\Program Files\directx
[2008-10-03|20:02] C:\Program Files\eMule
[2008-12-17|16:35] C:\Program Files\EPSON
[2008-05-18|20:44] C:\Program Files\eyeon
[2008-12-16|15:59] C:\Program Files\Fichiers communs
[2008-06-19|11:00] C:\Program Files\FileZilla FTP Client
[2007-10-10|13:15] C:\Program Files\Fusion
[2008-08-12|19:26] C:\Program Files\Google
[2008-12-16|15:57] C:\Program Files\InstallShield Installation Information
[2006-07-19|12:16] C:\Program Files\Intel
[2008-12-17|18:48] C:\Program Files\Internet Explorer
[2008-11-25|09:22] C:\Program Files\iPod
[2008-11-25|09:23] C:\Program Files\iTunes
[2008-10-09|18:29] C:\Program Files\Java
[2007-02-20|18:38] C:\Program Files\Kaspersky Lab
[2008-12-05|11:48] C:\Program Files\Lavalys
[2008-08-12|19:25] C:\Program Files\Lavasoft
[2008-10-16|14:48] C:\Program Files\Lexmark 3600-4600 Series
[2008-10-16|14:37] C:\Program Files\Lexmark Fax Solutions
[2008-10-16|14:34] C:\Program Files\Lexmark Toolbar
[2008-12-02|15:38] C:\Program Files\Logitech
[2008-12-17|18:53] C:\Program Files\Messenger
[2008-12-03|09:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2007-04-10|17:31] C:\Program Files\microsoft frontpage
[2008-09-10|19:34] C:\Program Files\Microsoft Office
[2008-03-26|14:29] C:\Program Files\Microsoft SQL Server Compact Edition
[2008-09-10|19:33] C:\Program Files\Microsoft Visual Studio
[2008-09-10|19:27] C:\Program Files\Microsoft Visual Studio 8
[2008-09-10|19:35] C:\Program Files\Microsoft Works
[2008-09-10|19:31] C:\Program Files\Microsoft.NET
[2008-12-17|18:48] C:\Program Files\Movie Maker
[2007-10-19|13:44] C:\Program Files\Mozilla Firefox
[2008-09-10|19:34] C:\Program Files\MSBuild
[2008-06-24|13:18] C:\Program Files\MSECache
[2006-07-19|11:34] C:\Program Files\MSN
[2006-07-19|11:34] C:\Program Files\MSN Gaming Zone
[2008-11-13|03:01] C:\Program Files\MSXML 4.0
[2006-11-29|19:44] C:\Program Files\Musicmatch
[2007-10-06|16:26] C:\Program Files\MyHeritage
[2008-04-08|17:51] C:\Program Files\NCH Software
[2008-09-04|15:55] C:\Program Files\Nero
[2008-12-17|18:44] C:\Program Files\NetMeeting
[2007-10-23|16:18] C:\Program Files\NVIDIA Corporation
[2006-07-19|11:34] C:\Program Files\Online Services
[2008-02-05|18:37] C:\Program Files\Oront Burning Kit 2
[2008-12-17|18:44] C:\Program Files\Outlook Express
[2008-08-22|10:46] C:\Program Files\Pixologic
[2007-06-11|14:20] C:\Program Files\Planetside Software
[2008-11-25|09:18] C:\Program Files\QuickTime
[2008-04-18|12:41] C:\Program Files\Safari
[2007-10-06|16:56] C:\Program Files\SpeedSix
[2007-02-20|17:11] C:\Program Files\Spybot - Search & Destroy
[2007-02-20|17:14] C:\Program Files\Spyware Doctor
[2007-02-20|17:16] C:\Program Files\SPYWAREfighter
[2008-10-09|18:30] C:\Program Files\Sun
[2007-02-20|17:14] C:\Program Files\Tablet
[2006-12-08|14:54] C:\Program Files\Tablette
[2007-06-16|15:58] C:\Program Files\Terragen
[2008-05-18|21:26] C:\Program Files\Total Video Converter
[2007-02-18|16:57] C:\Program Files\Trend Micro
[2008-11-27|11:03] C:\Program Files\Tweak-XP Pro 4
[2007-02-20|17:12] C:\Program Files\Unfold3D
[2006-07-19|11:44] C:\Program Files\Uninstall Information
[2008-08-12|19:29] C:\Program Files\Video DVD Maker
[2008-12-04|00:32] C:\Program Files\VideoLAN
[2008-12-16|15:57] C:\Program Files\Windows Live
[2008-03-26|14:31] C:\Program Files\Windows Live Favorites
[2007-02-22|12:17] C:\Program Files\Windows Live Safety Center
[2008-04-17|22:32] C:\Program Files\Windows Live Toolbar
[2008-04-17|22:32] C:\Program Files\Windows Media Connect 2
[2008-12-17|18:44] C:\Program Files\Windows Media Player
[2008-12-17|18:44] C:\Program Files\Windows NT
[2006-07-19|11:37] C:\Program Files\WindowsUpdate
[2006-09-10|20:13] C:\Program Files\WinRAR
[2008-06-18|14:43] C:\Program Files\WinZip
[2006-07-19|11:39] C:\Program Files\xerox
[2007-10-19|11:07] C:\Program Files\XnView
[2007-02-20|17:13] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-10-16|19:21] C:\Program Files\Fichiers communs\Adobe
[2006-07-27|18:40] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2008-08-12|21:00] C:\Program Files\Fichiers communs\Ahead
[2008-11-25|09:22] C:\Program Files\Fichiers communs\Apple
[2008-08-06|15:26] C:\Program Files\Fichiers communs\AVSMedia
[2008-03-15|18:27] C:\Program Files\Fichiers communs\Blizzard Entertainment
[2008-08-12|23:34] C:\Program Files\Fichiers communs\Control Panels
[2008-09-10|19:33] C:\Program Files\Fichiers communs\DESIGNER
[2006-08-24|09:22] C:\Program Files\Fichiers communs\InstallShield
[2006-08-27|17:26] C:\Program Files\Fichiers communs\Java
[2008-12-02|15:39] C:\Program Files\Fichiers communs\LogiShrd
[2008-10-03|20:05] C:\Program Files\Fichiers communs\Logitech
[2008-08-12|21:25] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-09-14|02:05] C:\Program Files\Fichiers communs\Microsoft Shared
[2006-07-19|11:36] C:\Program Files\Fichiers communs\MSSoap
[2008-02-09|12:57] C:\Program Files\Fichiers communs\Nero
[2006-07-19|07:28] C:\Program Files\Fichiers communs\ODBC
[2006-07-19|11:36] C:\Program Files\Fichiers communs\Services
[2008-08-28|14:25] C:\Program Files\Fichiers communs\Softimage
[2006-07-19|07:28] C:\Program Files\Fichiers communs\SpeechEngines
[2008-12-17|18:44] C:\Program Files\Fichiers communs\System
[2008-03-26|14:24] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 46 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-18 17:33:59
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 16
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\File_Maker_8_0_1___crack[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Sibelius_5_Hybrid_DVD__with_working_windows_keygen_[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Vue_6_Xstream_Keygen[1].torrent
C:\DOCUME~1\Julie\Mes documents\Ma musique\iTunes\iTunes Music\Brand New\Deja Entendu\11 Play Crack The Sky.m4a
[F:1775][D:158]-> C:\DOCUME~1\Julie\LOCALS~1\Temp
[F:44][D:0]-> C:\DOCUME~1\Julie\Cookies
[F:6199][D:23]-> C:\DOCUME~1\Julie\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-12-18|17:26 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2008-12-18|17:35 - Option : [2]
--------------------\\ Fin du rapport a 17:35:13
--------------------\\ Lop S&D 4.2.4-9c XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Julie ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:68 Go (Free:26 Go)
D:\ (Local Disk) - NTFS - Total:6 Go (Free:4 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (USB)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 2008-12-18|17:31 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[2006-07-19|11:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-11-25|09:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008-08-13|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-07-27|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2008-04-09|09:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2008-08-12|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
[2008-12-17|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[2007-06-14|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2006-09-27|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-04-08|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2008-01-19|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[2008-10-16|14:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[2008-09-21|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2008-09-11|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Frantic Films
[2007-10-06|16:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2007-03-22|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[2008-12-02|16:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[2008-12-02|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[2006-09-13|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-09-10|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-12-10|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2008-03-19|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[2008-01-25|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[2008-02-09|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2006-08-26|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2007-02-20|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trend Micro
[2006-07-19|12:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-05-29|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-07-19|11:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2008-10-23|11:14] C:\DOCUME~1\Julie\APPLIC~1\Adobe
[2007-02-28|17:17] C:\DOCUME~1\Julie\APPLIC~1\AdobeUM
[2008-09-04|16:00] C:\DOCUME~1\Julie\APPLIC~1\Ahead
[2008-03-22|13:38] C:\DOCUME~1\Julie\APPLIC~1\Apple Computer
[2008-05-06|09:58] C:\DOCUME~1\Julie\APPLIC~1\AVS4YOU
[2008-04-08|18:00] C:\DOCUME~1\Julie\APPLIC~1\AVSMedia
[2008-12-12|10:31] C:\DOCUME~1\Julie\APPLIC~1\Azureus
[2007-02-28|17:01] C:\DOCUME~1\Julie\APPLIC~1\BitTorrent
[2007-05-28|13:28] C:\DOCUME~1\Julie\APPLIC~1\CyberLink
[2008-10-25|02:20] C:\DOCUME~1\Julie\APPLIC~1\FaxCtr
[2008-11-28|14:19] C:\DOCUME~1\Julie\APPLIC~1\FileZilla
[2007-02-21|12:21] C:\DOCUME~1\Julie\APPLIC~1\Google
[2006-07-23|10:09] C:\DOCUME~1\Julie\APPLIC~1\Help
[2006-10-01|11:05] C:\DOCUME~1\Julie\APPLIC~1\Identities
[2007-06-11|01:04] C:\DOCUME~1\Julie\APPLIC~1\InstallShield
[2006-07-19|11:54] C:\DOCUME~1\Julie\APPLIC~1\InterTrust
[2008-08-12|19:25] C:\DOCUME~1\Julie\APPLIC~1\Lavasoft
[2008-07-18|13:25] C:\DOCUME~1\Julie\APPLIC~1\Leadertech
[2008-10-16|14:53] C:\DOCUME~1\Julie\APPLIC~1\Lexmark Productivity Studio
[2007-07-29|07:13] C:\DOCUME~1\Julie\APPLIC~1\Macromedia
[2008-10-16|17:02] C:\DOCUME~1\Julie\APPLIC~1\Microsoft
[2007-04-10|17:31] C:\DOCUME~1\Julie\APPLIC~1\Microsoft Web Folders
[2007-02-20|17:50] C:\DOCUME~1\Julie\APPLIC~1\Mozilla
[2006-07-31|17:22] C:\DOCUME~1\Julie\APPLIC~1\Musicmatch
[2008-01-25|23:55] C:\DOCUME~1\Julie\APPLIC~1\Obsidium
[2006-12-08|01:36] C:\DOCUME~1\Julie\APPLIC~1\PC Tools
[2007-06-11|14:22] C:\DOCUME~1\Julie\APPLIC~1\Planetside Software
[2007-01-11|13:43] C:\DOCUME~1\Julie\APPLIC~1\Roxio
[2006-12-15|23:29] C:\DOCUME~1\Julie\APPLIC~1\Sun
[2007-02-20|17:51] C:\DOCUME~1\Julie\APPLIC~1\Talkback
[2008-12-12|16:24] C:\DOCUME~1\Julie\APPLIC~1\U3
[2007-06-11|16:00] C:\DOCUME~1\Julie\APPLIC~1\uk.co.planetside
[2007-02-15|22:04] C:\DOCUME~1\Julie\APPLIC~1\uTorrent
[2008-12-04|00:34] C:\DOCUME~1\Julie\APPLIC~1\vlc
[2008-12-12|16:19] C:\DOCUME~1\Julie\APPLIC~1\XnView
[2007-11-10|15:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[2006-07-19|11:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2006-07-19|11:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-12-15 13:24][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-12-18 16:43][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[2008-12-18 09:04][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-09-06 19:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[2008-08-12|23:36] C:\Program Files\Adobe
[2008-08-12|21:01] C:\Program Files\Ahead
[2007-10-08|15:47] C:\Program Files\Alcohol Soft
[2007-02-21|12:55] C:\Program Files\Alias
[2008-12-17|19:48] C:\Program Files\AntiVir PersonalEdition Classic
[2008-08-04|18:34] C:\Program Files\Apple Software Update
[2008-07-18|13:17] C:\Program Files\ArcSoft
[2008-12-12|10:31] C:\Program Files\Azureus
[2007-11-17|14:31] C:\Program Files\Backup SafeKeeper
[2007-03-20|18:26] C:\Program Files\BitTorrent
[2007-08-14|21:24] C:\Program Files\Blender Foundation
[2008-11-27|14:15] C:\Program Files\Bonjour
[2006-07-19|11:35] C:\Program Files\ComPlus Applications
[2007-04-22|20:10] C:\Program Files\CopyStar
[2007-10-19|13:45] C:\Program Files\CyberLink
[2007-06-10|22:44] C:\Program Files\Dallas Semiconductor
[2007-06-05|13:09] C:\Program Files\Dell Photo AIO Printer 924
[2008-12-15|13:32] C:\Program Files\DIFX
[2007-06-11|00:59] C:\Program Files\directx
[2008-10-03|20:02] C:\Program Files\eMule
[2008-12-17|16:35] C:\Program Files\EPSON
[2008-05-18|20:44] C:\Program Files\eyeon
[2008-12-16|15:59] C:\Program Files\Fichiers communs
[2008-06-19|11:00] C:\Program Files\FileZilla FTP Client
[2007-10-10|13:15] C:\Program Files\Fusion
[2008-08-12|19:26] C:\Program Files\Google
[2008-12-16|15:57] C:\Program Files\InstallShield Installation Information
[2006-07-19|12:16] C:\Program Files\Intel
[2008-12-17|18:48] C:\Program Files\Internet Explorer
[2008-11-25|09:22] C:\Program Files\iPod
[2008-11-25|09:23] C:\Program Files\iTunes
[2008-10-09|18:29] C:\Program Files\Java
[2007-02-20|18:38] C:\Program Files\Kaspersky Lab
[2008-12-05|11:48] C:\Program Files\Lavalys
[2008-08-12|19:25] C:\Program Files\Lavasoft
[2008-10-16|14:48] C:\Program Files\Lexmark 3600-4600 Series
[2008-10-16|14:37] C:\Program Files\Lexmark Fax Solutions
[2008-10-16|14:34] C:\Program Files\Lexmark Toolbar
[2008-12-02|15:38] C:\Program Files\Logitech
[2008-12-17|18:53] C:\Program Files\Messenger
[2008-12-03|09:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2007-04-10|17:31] C:\Program Files\microsoft frontpage
[2008-09-10|19:34] C:\Program Files\Microsoft Office
[2008-03-26|14:29] C:\Program Files\Microsoft SQL Server Compact Edition
[2008-09-10|19:33] C:\Program Files\Microsoft Visual Studio
[2008-09-10|19:27] C:\Program Files\Microsoft Visual Studio 8
[2008-09-10|19:35] C:\Program Files\Microsoft Works
[2008-09-10|19:31] C:\Program Files\Microsoft.NET
[2008-12-17|18:48] C:\Program Files\Movie Maker
[2007-10-19|13:44] C:\Program Files\Mozilla Firefox
[2008-09-10|19:34] C:\Program Files\MSBuild
[2008-06-24|13:18] C:\Program Files\MSECache
[2006-07-19|11:34] C:\Program Files\MSN
[2006-07-19|11:34] C:\Program Files\MSN Gaming Zone
[2008-11-13|03:01] C:\Program Files\MSXML 4.0
[2006-11-29|19:44] C:\Program Files\Musicmatch
[2007-10-06|16:26] C:\Program Files\MyHeritage
[2008-04-08|17:51] C:\Program Files\NCH Software
[2008-09-04|15:55] C:\Program Files\Nero
[2008-12-17|18:44] C:\Program Files\NetMeeting
[2007-10-23|16:18] C:\Program Files\NVIDIA Corporation
[2006-07-19|11:34] C:\Program Files\Online Services
[2008-02-05|18:37] C:\Program Files\Oront Burning Kit 2
[2008-12-17|18:44] C:\Program Files\Outlook Express
[2008-08-22|10:46] C:\Program Files\Pixologic
[2007-06-11|14:20] C:\Program Files\Planetside Software
[2008-11-25|09:18] C:\Program Files\QuickTime
[2008-04-18|12:41] C:\Program Files\Safari
[2007-10-06|16:56] C:\Program Files\SpeedSix
[2007-02-20|17:11] C:\Program Files\Spybot - Search & Destroy
[2007-02-20|17:14] C:\Program Files\Spyware Doctor
[2007-02-20|17:16] C:\Program Files\SPYWAREfighter
[2008-10-09|18:30] C:\Program Files\Sun
[2007-02-20|17:14] C:\Program Files\Tablet
[2006-12-08|14:54] C:\Program Files\Tablette
[2007-06-16|15:58] C:\Program Files\Terragen
[2008-05-18|21:26] C:\Program Files\Total Video Converter
[2007-02-18|16:57] C:\Program Files\Trend Micro
[2008-11-27|11:03] C:\Program Files\Tweak-XP Pro 4
[2007-02-20|17:12] C:\Program Files\Unfold3D
[2006-07-19|11:44] C:\Program Files\Uninstall Information
[2008-08-12|19:29] C:\Program Files\Video DVD Maker
[2008-12-04|00:32] C:\Program Files\VideoLAN
[2008-12-16|15:57] C:\Program Files\Windows Live
[2008-03-26|14:31] C:\Program Files\Windows Live Favorites
[2007-02-22|12:17] C:\Program Files\Windows Live Safety Center
[2008-04-17|22:32] C:\Program Files\Windows Live Toolbar
[2008-04-17|22:32] C:\Program Files\Windows Media Connect 2
[2008-12-17|18:44] C:\Program Files\Windows Media Player
[2008-12-17|18:44] C:\Program Files\Windows NT
[2006-07-19|11:37] C:\Program Files\WindowsUpdate
[2006-09-10|20:13] C:\Program Files\WinRAR
[2008-06-18|14:43] C:\Program Files\WinZip
[2006-07-19|11:39] C:\Program Files\xerox
[2007-10-19|11:07] C:\Program Files\XnView
[2007-02-20|17:13] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-10-16|19:21] C:\Program Files\Fichiers communs\Adobe
[2006-07-27|18:40] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2008-08-12|21:00] C:\Program Files\Fichiers communs\Ahead
[2008-11-25|09:22] C:\Program Files\Fichiers communs\Apple
[2008-08-06|15:26] C:\Program Files\Fichiers communs\AVSMedia
[2008-03-15|18:27] C:\Program Files\Fichiers communs\Blizzard Entertainment
[2008-08-12|23:34] C:\Program Files\Fichiers communs\Control Panels
[2008-09-10|19:33] C:\Program Files\Fichiers communs\DESIGNER
[2006-08-24|09:22] C:\Program Files\Fichiers communs\InstallShield
[2006-08-27|17:26] C:\Program Files\Fichiers communs\Java
[2008-12-02|15:39] C:\Program Files\Fichiers communs\LogiShrd
[2008-10-03|20:05] C:\Program Files\Fichiers communs\Logitech
[2008-08-12|21:25] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-09-14|02:05] C:\Program Files\Fichiers communs\Microsoft Shared
[2006-07-19|11:36] C:\Program Files\Fichiers communs\MSSoap
[2008-02-09|12:57] C:\Program Files\Fichiers communs\Nero
[2006-07-19|07:28] C:\Program Files\Fichiers communs\ODBC
[2006-07-19|11:36] C:\Program Files\Fichiers communs\Services
[2008-08-28|14:25] C:\Program Files\Fichiers communs\Softimage
[2006-07-19|07:28] C:\Program Files\Fichiers communs\SpeechEngines
[2008-12-17|18:44] C:\Program Files\Fichiers communs\System
[2008-03-26|14:24] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 46 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-18 17:33:59
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 16
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\File_Maker_8_0_1___crack[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Sibelius_5_Hybrid_DVD__with_working_windows_keygen_[1].torrent
C:\DOCUME~1\Julie\Application Data\Azureus\torrents\Vue_6_Xstream_Keygen[1].torrent
C:\DOCUME~1\Julie\Mes documents\Ma musique\iTunes\iTunes Music\Brand New\Deja Entendu\11 Play Crack The Sky.m4a
[F:1775][D:158]-> C:\DOCUME~1\Julie\LOCALS~1\Temp
[F:44][D:0]-> C:\DOCUME~1\Julie\Cookies
[F:6199][D:23]-> C:\DOCUME~1\Julie\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-12-18|17:26 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2008-12-18|17:35 - Option : [2]
--------------------\\ Fin du rapport a 17:35:13
passe cet antimalware, fait comme indique
Telecharges malwaresbytes antimalwares(MBAM) : egalement tres util sur pb de pub mais pas tous malheureusement
Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tutoriel Malwarebytes Anti-Malware: http://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
fais comme indique,mise a jour , scan complet en mode sans echec et les rapports.
COLLE LE RAPPORT APRES SUPPRESSION MERCI.
garde le et lance un scan tout les mois comme indique.
si tu as ad aware tu peux desinstalle car il ne reconnait plus grand chose.
Telecharges malwaresbytes antimalwares(MBAM) : egalement tres util sur pb de pub mais pas tous malheureusement
Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tutoriel Malwarebytes Anti-Malware: http://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
fais comme indique,mise a jour , scan complet en mode sans echec et les rapports.
COLLE LE RAPPORT APRES SUPPRESSION MERCI.
garde le et lance un scan tout les mois comme indique.
si tu as ad aware tu peux desinstalle car il ne reconnait plus grand chose.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
