Probleme de pub
Bonjour,
j'ai un problème de pub, il y a des pub qui s'affiche sans que je clique sur un site et donc j'aimerai si quelqu'un c'est pour réparer ça , merci d'avance
j'ai un problème de pub, il y a des pub qui s'affiche sans que je clique sur un site et donc j'aimerai si quelqu'un c'est pour réparer ça , merci d'avance
Configuration: Windows XP Firefox 3.0.6
25 réponses
Résumé de la discussion
Le problème concerne l'affichage de publicités intrusives qui s'affichent sans interaction de l'utilisateur, sur Windows XP utilisant Firefox 3.0.6, sans clic préalable sur aucun site actuellement. La discussion intègre des extraits de journaux montrant une installation et une mise à jour d'Avira AntiVir Personal Edition Classic, ainsi que des mentions d'un utilitaire Ad Remover et d'un fichier journal. Pour l'apport de solutions, plusieurs éléments suggèrent de vérifier les mises à jour et de procéder à une désinfection, même si le fil reste composé de logs et chemins d'installation. En dernier élément, le journal signale que 15 fichiers ont été mis à jour et que l'installation de composants Avira se poursuit avec des copies de fichiers et des sauvegardes internes.
-
Merci . J'ai vu que tu à Malware byt'es Donc ouvre le met le à jour !! Puis fait un scan Complet avec et supprime ce qu'il te trouve . Si il te trouve des infection dit le moi en postant son rapport là .
Voilà je te conseil d'opter pour un meilleur Antivirus ... Soit vigilante sur le net ;) on continue demain Je doit go on . -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:49:28, on 10/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/yme/*https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKLM\..\Policies\Explorer\Run: []
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Startup: Registration .LNK = C:\Program Files\Ubisoft\Telltale Games\CSI-3 Dimensions of Murder Demo\Registration\RegistrationReminder.exe
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll (file missing)
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
-
Non pas obligatoire Mais Norton est vraiment Bidon tu peux avoir cent fois mieux et gratuit . Mais c'est juste un conseil . Bref [ quand ta installer Msn plus tu peux vérifier si "()" y'a pas écrit sponsor CID dessus [ dans les programme via ajout et supression de programme dans Panneau de configuration . ] Si oui désinstalle Msn plus ! et réinstalle le sans les SPONSOR ! Voilà
Refait un nouveau hijackthis stp . -
c'est obliger de supprimer norton?
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : aurelie huret ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 10/02/2009|20:34 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city\Wave wma.dat
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\AXISNEW.exe
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\vxjtvqvi.exe
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\JoyPokeForkBlue.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitP.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitDownload-4.5-setup.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
Supprime! - C:\WINDOWS\Tasks\AC7B281B90C8DCCF.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS
Supprime! - C:\Program Files\ELSE PLUS
Supprime! - C:\Program Files\BitTorrent Fastest Tool
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[03/05/2005|02:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[03/05/2005|01:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/05/2005|02:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[06/01/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[10/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[22/11/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[04/04/2008|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[21/08/2008|08:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[18/08/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ENJOY Plus!
[03/11/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
[30/04/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo
[01/05/2008|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[06/01/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[04/04/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[30/04/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
[12/09/2008|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\License
[17/11/2008|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[04/07/2008|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[16/11/2008|13:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mediafour
[09/02/2009|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[03/10/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
[03/05/2005|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[15/03/2008|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton
[05/10/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
[05/01/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[24/03/2008|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCSettings
[24/03/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[02/11/2008|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RockEnFolie le Player
[03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[24/03/2008|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/04/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[20/06/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[06/01/2008|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/01/2008|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[06/01/2008|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YAHOO
[23/03/2008|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[03/05/2005|01:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[03/05/2005|01:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Adobe
[06/01/2008|15:13] C:\DOCUME~1\AURELI~1\APPLIC~1\AdobeUM
[04/09/2008|19:07] C:\DOCUME~1\AURELI~1\APPLIC~1\Audacity
[20/10/2008|13:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Big Fish Games
[05/12/2008|19:18] C:\DOCUME~1\AURELI~1\APPLIC~1\BitTorrent
[07/11/2008|14:56] C:\DOCUME~1\AURELI~1\APPLIC~1\BloodTies
[13/05/2008|20:27] C:\DOCUME~1\AURELI~1\APPLIC~1\Chicken Chase
[07/12/2008|21:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Chrysanth
[08/01/2008|14:00] C:\DOCUME~1\AURELI~1\APPLIC~1\Creative
[03/10/2008|22:12] C:\DOCUME~1\AURELI~1\APPLIC~1\CyberLink
[11/09/2008|16:57] C:\DOCUME~1\AURELI~1\APPLIC~1\DivX
[05/12/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\DNA
[22/11/2008|16:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Dragon Altar Games
[21/08/2008|08:03] C:\DOCUME~1\AURELI~1\APPLIC~1\EmailNotifier
[18/08/2008|13:08] C:\DOCUME~1\AURELI~1\APPLIC~1\ENJOY Plus!
[03/11/2008|15:31] C:\DOCUME~1\AURELI~1\APPLIC~1\Flood Light Games
[10/06/2008|18:39] C:\DOCUME~1\AURELI~1\APPLIC~1\Gaijin Ent
[30/04/2008|14:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Gamelab
[06/01/2008|14:51] C:\DOCUME~1\AURELI~1\APPLIC~1\Google
[01/05/2008|13:33] C:\DOCUME~1\AURELI~1\APPLIC~1\Grisoft
[21/10/2008|19:42] C:\DOCUME~1\AURELI~1\APPLIC~1\Help
[03/05/2005|02:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Identities
[21/10/2008|12:49] C:\DOCUME~1\AURELI~1\APPLIC~1\iWin
[24/03/2008|13:25] C:\DOCUME~1\AURELI~1\APPLIC~1\Jane s Hotel
[06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Leadertech
[05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Macromedia
[04/07/2008|18:30] C:\DOCUME~1\AURELI~1\APPLIC~1\Malwarebytes
[16/04/2008|21:16] C:\DOCUME~1\AURELI~1\APPLIC~1\Media Player Classic
[03/05/2005|01:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Microsoft
[05/01/2008|14:36] C:\DOCUME~1\AURELI~1\APPLIC~1\Mozilla
[02/11/2008|19:25] C:\DOCUME~1\AURELI~1\APPLIC~1\MSN Pictures Displayer
[10/06/2008|12:36] C:\DOCUME~1\AURELI~1\APPLIC~1\My Games
[01/03/2008|15:56] C:\DOCUME~1\AURELI~1\APPLIC~1\Notepad++
[07/11/2008|07:47] C:\DOCUME~1\AURELI~1\APPLIC~1\Pi Eye Games
[19/05/2008|13:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Pirateville
[24/03/2008|12:31] C:\DOCUME~1\AURELI~1\APPLIC~1\PlayFirst
[02/11/2008|19:24] C:\DOCUME~1\AURELI~1\APPLIC~1\RockEnFolie le Player
[31/05/2008|19:04] C:\DOCUME~1\AURELI~1\APPLIC~1\Samsung
[02/06/2008|20:19] C:\DOCUME~1\AURELI~1\APPLIC~1\SecuROM
[06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Sonic
[22/04/2008|16:01] C:\DOCUME~1\AURELI~1\APPLIC~1\SprillBermudeFr
[30/01/2009|18:59] C:\DOCUME~1\AURELI~1\APPLIC~1\SulusGames
[08/01/2008|21:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Sun
[03/05/2005|02:20] C:\DOCUME~1\AURELI~1\APPLIC~1\Symantec
[05/02/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Template
[20/06/2008|19:15] C:\DOCUME~1\AURELI~1\APPLIC~1\Ulead Systems
[09/09/2008|19:57] C:\DOCUME~1\AURELI~1\APPLIC~1\vlc
[20/08/2008|13:50] C:\DOCUME~1\AURELI~1\APPLIC~1\Windows Live Writer
[15/03/2008|13:09] C:\DOCUME~1\AURELI~1\APPLIC~1\WinRAR
[30/01/2009|18:43] C:\DOCUME~1\AURELI~1\APPLIC~1\YoudaGames
[23/03/2008|19:08] C:\DOCUME~1\AURELI~1\APPLIC~1\Zylom
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[10/02/2009 17:18][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[04/05/2005|10:12] C:\Program Files\acer
[03/05/2005|02:15] C:\Program Files\Adobe
[10/02/2009|17:31] C:\Program Files\Ad-remover
[25/11/2008|21:21] C:\Program Files\Advanced Diary
[30/04/2008|19:28] C:\Program Files\Airport Mania
[05/01/2008|12:21] C:\Program Files\ANI
[15/06/2008|09:45] C:\Program Files\ASUS
[10/02/2009|17:27] C:\Program Files\Avira
[03/05/2005|02:10] C:\Program Files\AvRack
[01/08/2008|14:42] C:\Program Files\Barbie(tm)
[22/11/2008|16:34] C:\Program Files\bfgclient
[05/12/2008|19:17] C:\Program Files\BitTorrent
[13/05/2008|18:35] C:\Program Files\Burger Rush
[08/02/2009|14:27] C:\Program Files\Circle Developemen
[03/05/2005|01:59] C:\Program Files\ComPlus Applications
[15/05/2008|16:37] C:\Program Files\Conduit
[06/01/2008|20:51] C:\Program Files\Creative
[03/05/2005|02:18] C:\Program Files\CyberLink
[23/02/2008|11:02] C:\Program Files\DAEMON Tools
[24/03/2008|16:04] C:\Program Files\Delicious 2 Deluxe
[16/06/2008|18:50] C:\Program Files\Deviens Miss France
[06/01/2008|13:41] C:\Program Files\Dictionnaire
[09/09/2008|19:46] C:\Program Files\DivX
[05/01/2008|12:21] C:\Program Files\D-Link
[05/12/2008|19:17] C:\Program Files\DNA
[13/11/2008|20:34] C:\Program Files\Dofus
[17/05/2008|16:24] C:\Program Files\D-Tools
[12/02/2008|09:06] C:\Program Files\EA GAMES
[25/06/2008|18:54] C:\Program Files\Ediser
[05/01/2008|18:19] C:\Program Files\eMule
[18/08/2008|13:07] C:\Program Files\ENJOY Plus!
[01/05/2008|11:35] C:\Program Files\Fab Fashion
[01/05/2008|10:37] C:\Program Files\Fashion Fits
[03/05/2005|01:54] C:\Program Files\Fichiers communs
[06/01/2008|14:51] C:\Program Files\Google
[01/05/2008|13:32] C:\Program Files\Grisoft
[06/01/2008|19:25] C:\Program Files\Hewlett-Packard
[06/01/2008|19:15] C:\Program Files\HP
[06/01/2008|10:01] C:\Program Files\illiminable
[03/05/2005|02:10] C:\Program Files\InstallShield Installation Information
[03/05/2005|01:59] C:\Program Files\Internet Explorer
[05/01/2008|12:15] C:\Program Files\Java
[30/01/2009|18:57] C:\Program Files\Jewelleria
[21/01/2009|20:19] C:\Program Files\kicad
[16/04/2008|21:07] C:\Program Files\K-Lite Codec Pack
[02/05/2008|20:37] C:\Program Files\Lavalys
[24/03/2008|17:44] C:\Program Files\Lopxp
[17/11/2008|18:33] C:\Program Files\Macromedia
[04/07/2008|18:30] C:\Program Files\Malwarebytes' Anti-Malware
[16/11/2008|13:36] C:\Program Files\Mediafour
[03/05/2005|01:58] C:\Program Files\Messenger
[25/01/2009|12:27] C:\Program Files\Messenger Plus! Live
[03/10/2008|20:53] C:\Program Files\Micro Application
[10/01/2009|17:47] C:\Program Files\Microsoft
[03/05/2005|02:02] C:\Program Files\microsoft frontpage
[07/03/2008|21:31] C:\Program Files\Microsoft Office
[10/01/2009|17:50] C:\Program Files\Microsoft Office Outlook Connector
[10/01/2009|17:50] C:\Program Files\Microsoft Silverlight
[05/01/2008|18:27] C:\Program Files\Microsoft SQL Server Compact Edition
[15/03/2008|13:23] C:\Program Files\Microsoft Visual Studio
[06/01/2008|19:06] C:\Program Files\Microsoft Works
[15/03/2008|13:22] C:\Program Files\Microsoft.NET
[03/05/2005|02:00] C:\Program Files\Movie Maker
[05/01/2008|14:36] C:\Program Files\Mozilla Firefox
[15/03/2008|13:24] C:\Program Files\MSBuild
[07/03/2008|21:31] C:\Program Files\MSECache
[03/05/2005|01:58] C:\Program Files\MSN
[03/05/2005|01:58] C:\Program Files\MSN Gaming Zone
[02/11/2008|19:23] C:\Program Files\MSN Pictures Displayer
[07/01/2008|21:37] C:\Program Files\MSXML 4.0
[03/10/2008|21:19] C:\Program Files\MSXML 6.0
[25/02/2008|19:39] C:\Program Files\Navilog1
[03/05/2005|02:00] C:\Program Files\NetMeeting
[03/05/2005|02:17] C:\Program Files\NewTech Infosystems
[04/04/2008|11:25] C:\Program Files\Nokia
[05/10/2008|09:31] C:\Program Files\Norton Internet Security
[05/10/2008|09:13] C:\Program Files\NortonInstaller
[01/03/2008|15:56] C:\Program Files\Notepad++
[04/04/2008|11:13] C:\Program Files\NSS
[03/05/2005|01:58] C:\Program Files\Online Services
[25/11/2008|20:58] C:\Program Files\OriaSoft
[03/05/2005|02:00] C:\Program Files\Outlook Express
[26/10/2008|18:27] C:\Program Files\PhotoFiltre
[10/06/2008|13:14] C:\Program Files\Profitville
[01/10/2008|13:35] C:\Program Files\QuickTime
[01/03/2008|07:07] C:\Program Files\Realtek
[03/05/2005|02:10] C:\Program Files\Realtek Sound Manager
[03/10/2008|21:25] C:\Program Files\Reference Assemblies
[24/03/2008|11:26] C:\Program Files\ReflexiveArcade
[02/11/2008|19:24] C:\Program Files\RockEnFolie
[09/12/2008|20:03] C:\Program Files\Rockstar Games
[01/10/2008|13:35] C:\Program Files\Sabrina
[31/05/2008|18:56] C:\Program Files\Samsung
[03/05/2005|02:00] C:\Program Files\Services en ligne
[16/06/2008|18:41] C:\Program Files\Simulateur de conduite 3D
[05/01/2008|12:09] C:\Program Files\SiSLan
[06/01/2008|10:12] C:\Program Files\Sonic
[05/10/2008|13:49] C:\Program Files\Sqirlz Morph
[25/01/2009|12:18] C:\Program Files\StuffPlug3
[03/05/2005|02:19] C:\Program Files\Symantec
[07/11/2008|07:43] C:\Program Files\System Mania
[06/01/2008|09:48] C:\Program Files\Thomson
[21/03/2008|21:07] C:\Program Files\TI Education
[05/03/2008|14:56] C:\Program Files\Trend Micro
[16/05/2008|16:16] C:\Program Files\Ubisoft
[20/06/2008|19:14] C:\Program Files\Ulead Systems
[05/01/2008|12:14] C:\Program Files\Uninstall Information
[02/11/2008|12:00] C:\Program Files\Veoh Networks
[19/08/2008|17:57] C:\Program Files\Visicom Media
[31/05/2008|19:33] C:\Program Files\WIDCOMM
[05/01/2008|18:17] C:\Program Files\Windows Live
[10/01/2009|17:46] C:\Program Files\Windows Live SkyDrive
[06/01/2008|15:14] C:\Program Files\Windows Media Connect 2
[03/05/2005|01:58] C:\Program Files\Windows Media Player
[03/05/2005|01:58] C:\Program Files\Windows NT
[03/05/2005|02:00] C:\Program Files\WindowsUpdate
[15/03/2008|13:09] C:\Program Files\WinRAR
[03/05/2005|02:02] C:\Program Files\xerox
[06/01/2008|09:57] C:\Program Files\Yahoo!
[30/01/2009|18:42] C:\Program Files\Youda Farmer
[23/03/2008|18:18] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[12/05/2008|10:49] C:\Program Files\Fichiers communs\Adobe
[01/08/2008|14:42] C:\Program Files\Fichiers communs\Barbie
[15/03/2008|13:23] C:\Program Files\Fichiers communs\DESIGNER
[06/01/2008|19:22] C:\Program Files\Fichiers communs\Hewlett-Packard
[06/01/2008|19:34] C:\Program Files\Fichiers communs\HP
[03/05/2005|02:10] C:\Program Files\Fichiers communs\InstallShield
[05/01/2008|12:15] C:\Program Files\Fichiers communs\Java
[17/11/2008|18:33] C:\Program Files\Fichiers communs\Macromedia
[16/11/2008|13:37] C:\Program Files\Fichiers communs\Mediafour
[03/05/2005|01:54] C:\Program Files\Fichiers communs\Microsoft Shared
[03/05/2005|02:00] C:\Program Files\Fichiers communs\MSSoap
[03/05/2005|02:17] C:\Program Files\Fichiers communs\muvee Technologies
[03/05/2005|01:54] C:\Program Files\Fichiers communs\ODBC
[03/05/2005|02:00] C:\Program Files\Fichiers communs\Services
[03/05/2005|01:54] C:\Program Files\Fichiers communs\SpeechEngines
[06/01/2008|10:12] C:\Program Files\Fichiers communs\SureThing Shared
[03/05/2005|02:19] C:\Program Files\Fichiers communs\Symantec Shared
[03/05/2005|01:59] C:\Program Files\Fichiers communs\System
[10/01/2009|17:39] C:\Program Files\Fichiers communs\Windows Live
[05/01/2008|18:17] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 44 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-10 20:37:51
Windows 5.1.2600 Service Pack 3 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe
[F:4][D:4]-> C:\DOCUME~1\AURELI~1\LOCALS~1\Temp
[F:4][D:0]-> C:\DOCUME~1\AURELI~1\Cookies
[F:30][D:5]-> C:\DOCUME~1\AURELI~1\LOCALS~1\TEMPOR~1\content.IE5
[F:5][D:0]-> C:\Recycled
1 - "C:\Lop SD\LopR_1.txt" - 10/02/2009|19:52 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 10/02/2009|20:39 - Option : [2]
--------------------\\ Fin du rapport a 20:39:25 -
Relance Lop S&D et fait l'option 2 poste son contenu . Et désinstalle NORTON
-
20:24 10/02/2009
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : aurelie huret ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 10/02/2009|19:47 )
--------------------\\ Listing des dossiers dans APPLIC~1
[03/05/2005|02:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[03/05/2005|01:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/05/2005|02:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[06/01/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[10/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[22/11/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[08/02/2009|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city
[04/04/2008|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[21/08/2008|08:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[18/08/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ENJOY Plus!
[03/11/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
[30/04/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo
[01/05/2008|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[06/01/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[04/04/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[30/04/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
[12/09/2008|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\License
[17/11/2008|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[04/07/2008|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[16/11/2008|13:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mediafour
[09/02/2009|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[03/10/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
[03/05/2005|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[15/03/2008|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton
[05/10/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
[05/01/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[24/03/2008|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
[05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCSettings
[24/03/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[02/11/2008|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RockEnFolie le Player
[03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[24/03/2008|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/04/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[20/06/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[06/01/2008|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/01/2008|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[06/01/2008|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YAHOO
[23/03/2008|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[03/05/2005|01:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[03/05/2005|01:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Adobe
[06/01/2008|15:13] C:\DOCUME~1\AURELI~1\APPLIC~1\AdobeUM
[04/09/2008|19:07] C:\DOCUME~1\AURELI~1\APPLIC~1\Audacity
[20/10/2008|13:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Big Fish Games
[05/12/2008|19:18] C:\DOCUME~1\AURELI~1\APPLIC~1\BitTorrent
[07/11/2008|14:56] C:\DOCUME~1\AURELI~1\APPLIC~1\BloodTies
[13/05/2008|20:27] C:\DOCUME~1\AURELI~1\APPLIC~1\Chicken Chase
[07/12/2008|21:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Chrysanth
[08/01/2008|14:00] C:\DOCUME~1\AURELI~1\APPLIC~1\Creative
[03/10/2008|22:12] C:\DOCUME~1\AURELI~1\APPLIC~1\CyberLink
[11/09/2008|16:57] C:\DOCUME~1\AURELI~1\APPLIC~1\DivX
[05/12/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\DNA
[22/11/2008|16:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Dragon Altar Games
[08/02/2009|14:28] C:\DOCUME~1\AURELI~1\APPLIC~1\Else plus
[21/08/2008|08:03] C:\DOCUME~1\AURELI~1\APPLIC~1\EmailNotifier
[18/08/2008|13:08] C:\DOCUME~1\AURELI~1\APPLIC~1\ENJOY Plus!
[03/11/2008|15:31] C:\DOCUME~1\AURELI~1\APPLIC~1\Flood Light Games
[10/06/2008|18:39] C:\DOCUME~1\AURELI~1\APPLIC~1\Gaijin Ent
[30/04/2008|14:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Gamelab
[06/01/2008|14:51] C:\DOCUME~1\AURELI~1\APPLIC~1\Google
[01/05/2008|13:33] C:\DOCUME~1\AURELI~1\APPLIC~1\Grisoft
[21/10/2008|19:42] C:\DOCUME~1\AURELI~1\APPLIC~1\Help
[03/05/2005|02:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Identities
[21/10/2008|12:49] C:\DOCUME~1\AURELI~1\APPLIC~1\iWin
[24/03/2008|13:25] C:\DOCUME~1\AURELI~1\APPLIC~1\Jane s Hotel
[06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Leadertech
[05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Macromedia
[04/07/2008|18:30] C:\DOCUME~1\AURELI~1\APPLIC~1\Malwarebytes
[16/04/2008|21:16] C:\DOCUME~1\AURELI~1\APPLIC~1\Media Player Classic
[03/05/2005|01:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Microsoft
[05/01/2008|14:36] C:\DOCUME~1\AURELI~1\APPLIC~1\Mozilla
[02/11/2008|19:25] C:\DOCUME~1\AURELI~1\APPLIC~1\MSN Pictures Displayer
[10/06/2008|12:36] C:\DOCUME~1\AURELI~1\APPLIC~1\My Games
[01/03/2008|15:56] C:\DOCUME~1\AURELI~1\APPLIC~1\Notepad++
[07/11/2008|07:47] C:\DOCUME~1\AURELI~1\APPLIC~1\Pi Eye Games
[19/05/2008|13:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Pirateville
[24/03/2008|12:31] C:\DOCUME~1\AURELI~1\APPLIC~1\PlayFirst
[02/11/2008|19:24] C:\DOCUME~1\AURELI~1\APPLIC~1\RockEnFolie le Player
[31/05/2008|19:04] C:\DOCUME~1\AURELI~1\APPLIC~1\Samsung
[02/06/2008|20:19] C:\DOCUME~1\AURELI~1\APPLIC~1\SecuROM
[06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Sonic
[22/04/2008|16:01] C:\DOCUME~1\AURELI~1\APPLIC~1\SprillBermudeFr
[30/01/2009|18:59] C:\DOCUME~1\AURELI~1\APPLIC~1\SulusGames
[08/01/2008|21:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Sun
[03/05/2005|02:20] C:\DOCUME~1\AURELI~1\APPLIC~1\Symantec
[05/02/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Template
[20/06/2008|19:15] C:\DOCUME~1\AURELI~1\APPLIC~1\Ulead Systems
[09/09/2008|19:57] C:\DOCUME~1\AURELI~1\APPLIC~1\vlc
[20/08/2008|13:50] C:\DOCUME~1\AURELI~1\APPLIC~1\Windows Live Writer
[15/03/2008|13:09] C:\DOCUME~1\AURELI~1\APPLIC~1\WinRAR
[30/01/2009|18:43] C:\DOCUME~1\AURELI~1\APPLIC~1\YoudaGames
[23/03/2008|19:08] C:\DOCUME~1\AURELI~1\APPLIC~1\Zylom
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[10/02/2009 19:00][--ah-----] C:\WINDOWS\tasks\AC7B281B90C8DCCF.job
[10/02/2009 17:18][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( AC7B281B90C8DCCF.job )=( c:\docume~1\aureli~1\applic~1\elsepl~1\Thunkdeafgreat.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[04/05/2005|10:12] C:\Program Files\acer
[03/05/2005|02:15] C:\Program Files\Adobe
[10/02/2009|17:31] C:\Program Files\Ad-remover
[25/11/2008|21:21] C:\Program Files\Advanced Diary
[30/04/2008|19:28] C:\Program Files\Airport Mania
[05/01/2008|12:21] C:\Program Files\ANI
[15/06/2008|09:45] C:\Program Files\ASUS
[10/02/2009|17:27] C:\Program Files\Avira
[03/05/2005|02:10] C:\Program Files\AvRack
[01/08/2008|14:42] C:\Program Files\Barbie(tm)
[22/11/2008|16:34] C:\Program Files\bfgclient
[05/12/2008|19:17] C:\Program Files\BitTorrent
[21/04/2008|19:20] C:\Program Files\BitTorrent Fastest Tool
[13/05/2008|18:35] C:\Program Files\Burger Rush
[08/02/2009|14:27] C:\Program Files\Circle Developemen
[03/05/2005|01:59] C:\Program Files\ComPlus Applications
[15/05/2008|16:37] C:\Program Files\Conduit
[06/01/2008|20:51] C:\Program Files\Creative
[03/05/2005|02:18] C:\Program Files\CyberLink
[23/02/2008|11:02] C:\Program Files\DAEMON Tools
[24/03/2008|16:04] C:\Program Files\Delicious 2 Deluxe
[16/06/2008|18:50] C:\Program Files\Deviens Miss France
[06/01/2008|13:41] C:\Program Files\Dictionnaire
[09/09/2008|19:46] C:\Program Files\DivX
[05/01/2008|12:21] C:\Program Files\D-Link
[05/12/2008|19:17] C:\Program Files\DNA
[13/11/2008|20:34] C:\Program Files\Dofus
[17/05/2008|16:24] C:\Program Files\D-Tools
[12/02/2008|09:06] C:\Program Files\EA GAMES
[25/06/2008|18:54] C:\Program Files\Ediser
[08/02/2009|14:28] C:\Program Files\Else plus
[05/01/2008|18:19] C:\Program Files\eMule
[18/08/2008|13:07] C:\Program Files\ENJOY Plus!
[01/05/2008|11:35] C:\Program Files\Fab Fashion
[01/05/2008|10:37] C:\Program Files\Fashion Fits
[03/05/2005|01:54] C:\Program Files\Fichiers communs
[06/01/2008|14:51] C:\Program Files\Google
[01/05/2008|13:32] C:\Program Files\Grisoft
[06/01/2008|19:25] C:\Program Files\Hewlett-Packard
[06/01/2008|19:15] C:\Program Files\HP
[06/01/2008|10:01] C:\Program Files\illiminable
[03/05/2005|02:10] C:\Program Files\InstallShield Installation Information
[03/05/2005|01:59] C:\Program Files\Internet Explorer
[05/01/2008|12:15] C:\Program Files\Java
[30/01/2009|18:57] C:\Program Files\Jewelleria
[21/01/2009|20:19] C:\Program Files\kicad
[16/04/2008|21:07] C:\Program Files\K-Lite Codec Pack
[02/05/2008|20:37] C:\Program Files\Lavalys
[24/03/2008|17:44] C:\Program Files\Lopxp
[17/11/2008|18:33] C:\Program Files\Macromedia
[04/07/2008|18:30] C:\Program Files\Malwarebytes' Anti-Malware
[16/11/2008|13:36] C:\Program Files\Mediafour
[03/05/2005|01:58] C:\Program Files\Messenger
[25/01/2009|12:27] C:\Program Files\Messenger Plus! Live
[03/10/2008|20:53] C:\Program Files\Micro Application
[10/01/2009|17:47] C:\Program Files\Microsoft
[03/05/2005|02:02] C:\Program Files\microsoft frontpage
[07/03/2008|21:31] C:\Program Files\Microsoft Office
[10/01/2009|17:50] C:\Program Files\Microsoft Office Outlook Connector
[10/01/2009|17:50] C:\Program Files\Microsoft Silverlight
[05/01/2008|18:27] C:\Program Files\Microsoft SQL Server Compact Edition
[15/03/2008|13:23] C:\Program Files\Microsoft Visual Studio
[06/01/2008|19:06] C:\Program Files\Microsoft Works
[15/03/2008|13:22] C:\Program Files\Microsoft.NET
[03/05/2005|02:00] C:\Program Files\Movie Maker
[05/01/2008|14:36] C:\Program Files\Mozilla Firefox
[15/03/2008|13:24] C:\Program Files\MSBuild
[07/03/2008|21:31] C:\Program Files\MSECache
[03/05/2005|01:58] C:\Program Files\MSN
[03/05/2005|01:58] C:\Program Files\MSN Gaming Zone
[02/11/2008|19:23] C:\Program Files\MSN Pictures Displayer
[07/01/2008|21:37] C:\Program Files\MSXML 4.0
[03/10/2008|21:19] C:\Program Files\MSXML 6.0
[25/02/2008|19:39] C:\Program Files\Navilog1
[03/05/2005|02:00] C:\Program Files\NetMeeting
[03/05/2005|02:17] C:\Program Files\NewTech Infosystems
[04/04/2008|11:25] C:\Program Files\Nokia
[05/10/2008|09:31] C:\Program Files\Norton Internet Security
[05/10/2008|09:13] C:\Program Files\NortonInstaller
[01/03/2008|15:56] C:\Program Files\Notepad++
[04/04/2008|11:13] C:\Program Files\NSS
[03/05/2005|01:58] C:\Program Files\Online Services
[25/11/2008|20:58] C:\Program Files\OriaSoft
[03/05/2005|02:00] C:\Program Files\Outlook Express
[26/10/2008|18:27] C:\Program Files\PhotoFiltre
[10/06/2008|13:14] C:\Program Files\Profitville
[01/10/2008|13:35] C:\Program Files\QuickTime
[01/03/2008|07:07] C:\Program Files\Realtek
[03/05/2005|02:10] C:\Program Files\Realtek Sound Manager
[03/10/2008|21:25] C:\Program Files\Reference Assemblies
[24/03/2008|11:26] C:\Program Files\ReflexiveArcade
[02/11/2008|19:24] C:\Program Files\RockEnFolie
[09/12/2008|20:03] C:\Program Files\Rockstar Games
[01/10/2008|13:35] C:\Program Files\Sabrina
[31/05/2008|18:56] C:\Program Files\Samsung
[03/05/2005|02:00] C:\Program Files\Services en ligne
[16/06/2008|18:41] C:\Program Files\Simulateur de conduite 3D
[05/01/2008|12:09] C:\Program Files\SiSLan
[06/01/2008|10:12] C:\Program Files\Sonic
[05/10/2008|13:49] C:\Program Files\Sqirlz Morph
[25/01/2009|12:18] C:\Program Files\StuffPlug3
[03/05/2005|02:19] C:\Program Files\Symantec
[07/11/2008|07:43] C:\Program Files\System Mania
[06/01/2008|09:48] C:\Program Files\Thomson
[21/03/2008|21:07] C:\Program Files\TI Education
[05/03/2008|14:56] C:\Program Files\Trend Micro
[16/05/2008|16:16] C:\Program Files\Ubisoft
[20/06/2008|19:14] C:\Program Files\Ulead Systems
[05/01/2008|12:14] C:\Program Files\Uninstall Information
[02/11/2008|12:00] C:\Program Files\Veoh Networks
[19/08/2008|17:57] C:\Program Files\Visicom Media
[31/05/2008|19:33] C:\Program Files\WIDCOMM
[05/01/2008|18:17] C:\Program Files\Windows Live
[10/01/2009|17:46] C:\Program Files\Windows Live SkyDrive
[06/01/2008|15:14] C:\Program Files\Windows Media Connect 2
[03/05/2005|01:58] C:\Program Files\Windows Media Player
[03/05/2005|01:58] C:\Program Files\Windows NT
[03/05/2005|02:00] C:\Program Files\WindowsUpdate
[15/03/2008|13:09] C:\Program Files\WinRAR
[03/05/2005|02:02] C:\Program Files\xerox
[06/01/2008|09:57] C:\Program Files\Yahoo!
[30/01/2009|18:42] C:\Program Files\Youda Farmer
[23/03/2008|18:18] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[12/05/2008|10:49] C:\Program Files\Fichiers communs\Adobe
[01/08/2008|14:42] C:\Program Files\Fichiers communs\Barbie
[15/03/2008|13:23] C:\Program Files\Fichiers communs\DESIGNER
[06/01/2008|19:22] C:\Program Files\Fichiers communs\Hewlett-Packard
[06/01/2008|19:34] C:\Program Files\Fichiers communs\HP
[03/05/2005|02:10] C:\Program Files\Fichiers communs\InstallShield
[05/01/2008|12:15] C:\Program Files\Fichiers communs\Java
[17/11/2008|18:33] C:\Program Files\Fichiers communs\Macromedia
[16/11/2008|13:37] C:\Program Files\Fichiers communs\Mediafour
[03/05/2005|01:54] C:\Program Files\Fichiers communs\Microsoft Shared
[03/05/2005|02:00] C:\Program Files\Fichiers communs\MSSoap
[03/05/2005|02:17] C:\Program Files\Fichiers communs\muvee Technologies
[03/05/2005|01:54] C:\Program Files\Fichiers communs\ODBC
[03/05/2005|02:00] C:\Program Files\Fichiers communs\Services
[03/05/2005|01:54] C:\Program Files\Fichiers communs\SpeechEngines
[06/01/2008|10:12] C:\Program Files\Fichiers communs\SureThing Shared
[03/05/2005|02:19] C:\Program Files\Fichiers communs\Symantec Shared
[03/05/2005|01:59] C:\Program Files\Fichiers communs\System
[10/01/2009|17:39] C:\Program Files\Fichiers communs\Windows Live
[05/01/2008|18:17] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 45 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city
C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city\Wave wma.dat
C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS
C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\AXISNEW.exe
C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\vxjtvqvi.exe
C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\JoyPokeForkBlue.exe
C:\Program Files\ELSE PLUS
C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1
C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1\AXISNEW.exe
C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1\vxjtvqvi.exe
C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1\JoyPokeForkBlue.exe
C:\Program Files\elsepl~1
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\BitP.exe
C:\Program Files\BitTorrent Fastest Tool\BitDownload-4.5-setup.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\WINDOWS\Tasks\AC7B281B90C8DCCF.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"book ante"="C:\\DOCUME~1\\AURELI~1\\APPLIC~1\\ELSEPL~1\\AXISNEW.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"two city internet heck"="C:\\Documents and Settings\\All Users\\Application Data\\does dog two city\\Wave wma.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 71 [ 70 ## added by CiD ]
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-10 19:51:15
Windows 5.1.2600 Service Pack 3 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe
[F:3][D:4]-> C:\DOCUME~1\AURELI~1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\AURELI~1\Cookies
[F:8][D:5]-> C:\DOCUME~1\AURELI~1\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled
1 - "C:\Lop SD\LopR_1.txt" - 10/02/2009|19:52 - Option : [1]
--------------------\\ Fin du rapport a 19:52:45 -
Ok ^^ Maintenant on passe à ton infection Lop du aussi à t'es pub . :::::
Télécharge LopSD.exe sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Clique-droit sur le raccourci LopSD présent sur le Bureau et choisis "Exécuter en tant qu'administrateur" pour lancer LopSD.
Choisis la langue F pour Français puis valide par Entrée.
Choisis l'option Recherche en saisissant 1 puis valide par Entrée
.
* Patiente jusqu'à la fin du scan
* Poste le rapport généré qui se trouve ici => (C:\lopR.txt)
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide -
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : aurelie huret ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 10/02/2009|19:31 )
-----------\\ SUPPRESSION
Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media_France\tbMul1.dll
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe
Supprime! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\Program Files\Multi_Media_France\tbMul0.dll
Supprime! - C:\Program Files\MultiMedia France Toolbar\UNWISE.EXE
Supprime! - C:\Program Files\MultiMedia France Toolbar\MultiMedia_SSNew.exe
Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.xpi
Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.exe
Supprime! - C:\Program Files\MultiMedia France Toolbar\INSTALL.LOG
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_dark.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_green.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_white.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\Thumbs.db
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowB.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowT.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_down.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red2.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_up.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_pub.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_ttl.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bgmeteo_results.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_close.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_minus.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_moreforecast.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dropdown.css
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\help.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\loading.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.html
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss.xsl
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rsslib.js
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\spacer.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tab_icon.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tablib.js
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_en.html
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_fr.html
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vmlib.js
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\xp_close_small.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\yahoo_search.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\NewCfg
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\utf8.js
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search_fr.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.gif
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\left.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\right.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_left.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_right.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_left.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_right.png
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\downfile
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabdataV3.js
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\CAlogo.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\DownloadCOM.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\YouTube.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\__slider.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\a.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\amazon.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\an.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\autofill.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\b.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\c.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\canalblog.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\cn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\d.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dictionary2.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\email_b.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_loading.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_off.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\f.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\fn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\g.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gaming.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0_5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1_5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2_5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3_5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4_5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aquarius.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aries.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_cancer.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_capricorn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_gemini.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_leo.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_libra.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_pisces.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_sagittarius.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_scorpio.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_taurus.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_virgo.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hideremove.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\highlight.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\i.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\images01.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\in.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\j.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\jn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\k.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\kn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\l.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ln.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo_facebook.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus_on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\music2.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\n.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\newsb.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\nn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\o.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pixsy.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play_on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus_on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_off.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_ona.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\q.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\qn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\r.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\relatedlinks.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\report.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss1.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\s.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\settings.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\siteinfo.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\slider.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\sn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red1.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red2.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red3.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red4.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red5.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop_on.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\t.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\technorati.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tools.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\translate.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\u.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\un.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\v.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\w.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\web_fr.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wikipedia.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\x.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\z.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zn.bmp
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zoom.bmp
Supprime! - C:\Program Files\VMNToolbar\tbuninstall.exe
Supprime! - C:\Program Files\VMNToolbar\toolbar.ini
Supprime! - C:\Program Files\VMNToolbar\install.ico
Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll
Supprime! - C:\Program Files\Multi_Media_France
Supprime! - C:\Program Files\MultiMedia France Toolbar
Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar
Supprime! - C:\Program Files\VMNToolbar
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ Extensions
(aurelie huret) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="http://www.bing.com/spresults.aspx"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe
1 - "C:\ToolBar SD\TB_1.txt" - 10/02/2009|18:57 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 10/02/2009|19:33 - Option : [2]
-----------\\ Fin du rapport a 19:33:54,82
Pour le GTA, c'est en même le jeu de mon père donc voilà ^^ -
Merci Ma lilie ^^ Maintenant relance Toolbar S&D et passe l'option 2 s'il te plaît puis envoie le rapport làà :)
[ sinon joue tu souvent à Gta sur le pc ?! si oui bin laisse t'es crack même si ils son nocif pour le pc . Si Non supprimes les :::
C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe
-
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : aurelie huret ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
K:\ (CD or DVD)
L:\ (USB) - FAT - Total:124 Mo (Free:0 Go)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 10/02/2009|18:56 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\tbMul0.dll
C:\Program Files\MultiMedia France Toolbar
C:\Program Files\MultiMedia France Toolbar\UNWISE.EXE
C:\Program Files\MultiMedia France Toolbar\MultiMedia_SSNew.exe
C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.xpi
C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.exe
C:\Program Files\MultiMedia France Toolbar\INSTALL.LOG
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_dark.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_green.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_white.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\Thumbs.db
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowB.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowT.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_down.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red2.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_up.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_pub.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_ttl.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bgmeteo_results.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_close.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_minus.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_moreforecast.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dropdown.css
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\help.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\loading.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.html
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss.xsl
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rsslib.js
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\spacer.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tab_icon.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tablib.js
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_en.html
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_fr.html
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vmlib.js
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\xp_close_small.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\yahoo_search.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\NewCfg
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\utf8.js
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search_fr.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.gif
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\left.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\right.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_left.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_right.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_left.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_right.png
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\downfile
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabdataV3.js
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\CAlogo.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\DownloadCOM.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\YouTube.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\__slider.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\a.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\amazon.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\an.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\autofill.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\b.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\c.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\canalblog.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\cn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\d.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dictionary2.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\email_b.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_loading.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_off.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\f.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\fn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\g.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gaming.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0_5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1_5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2_5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3_5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4_5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aquarius.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aries.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_cancer.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_capricorn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_gemini.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_leo.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_libra.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_pisces.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_sagittarius.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_scorpio.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_taurus.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_virgo.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hideremove.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\highlight.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\i.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\images01.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\in.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\j.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\jn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\k.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\kn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\l.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ln.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo_facebook.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus_on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\music2.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\n.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\newsb.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\nn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\o.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pixsy.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play_on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus_on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_off.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_ona.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\q.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\qn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\r.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\relatedlinks.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\report.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss1.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\s.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\settings.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\siteinfo.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\slider.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\sn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red1.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red2.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red3.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red4.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red5.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop_on.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\t.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\technorati.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tools.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\translate.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\u.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\un.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\v.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\w.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\web_fr.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wikipedia.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\x.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\z.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zn.bmp
C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zoom.bmp
C:\Program Files\VMNToolbar
C:\Program Files\VMNToolbar\tbuninstall.exe
C:\Program Files\VMNToolbar\toolbar.ini
C:\Program Files\VMNToolbar\install.ico
C:\Program Files\VMNToolbar\uninstall.exe
C:\Program Files\VMNToolbar\vmntoolbar.dll
-----------\\ Extensions
(aurelie huret) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr"
"Search Bar"="http://www.bing.com/spresults.aspx"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe
1 - "C:\ToolBar SD\TB_1.txt" - 10/02/2009|18:57 - Option : [1]
-----------\\ Fin du rapport a 18:57:58,65 -
Non quoi que possible . Mais cherche bien [ ta bien fait le scan pourtant . ]
-
je ne les pas, il peut se trouver sous un autre nom?
-
TB.txt
-
c'est quel txt qui faut ouvrir?
-
Oui . Sinon va dans poste de travail ----> Disc C ---> Ta le .txt ouvre le [ rapport] et copie le ici .
-
c'est fait, je doit avoir un bloc note qui doit s'ouvrir??
-
Merci maintenant on passe à une toolbar Mauvaise :::
---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt) -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:11:09, on 10/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/yme/*https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A057A204-BACC-4D26-8287-79A187E26987} - (no file)
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-8287-79A187E26987} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [two city internet heck] C:\Documents and Settings\All Users\Application Data\does dog two city\Wave wma.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [book ante] C:\DOCUME~1\AURELI~1\APPLIC~1\ELSEPL~1\AXISNEW.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKLM\..\Policies\Explorer\Run: []
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Startup: Registration .LNK = C:\Program Files\Ubisoft\Telltale Games\CSI-3 Dimensions of Murder Demo\Registration\RegistrationReminder.exe
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll (file missing)
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
-
Ouaip nikel peut-tu refaire un nouveau hijackthis s'il te plaît :)
-
------- LOGFILE OF AD-REMOVER 1.1.0.9 | ONLY XP/VISTA -------
Updated by C_XX on 07/02/2009 at 14:30
*** LIMITED TO ***
Boonty/BoontyGames
Eorezo
Infected Poker Softwares
FunWebProduct/MyWay/MyWebSearch
It's TV
Sweetim
******************
Start at: 17:41:04 | Mar 10/02/2009 | Microsoft® Windows XP™ SP3 (V5.1.2600)
Boot mode: Normal
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: ACER-A7D3E14A69 | User: aurelie huret ( Current user is an administrator)
Drive(s):
- C:\ (File System: FAT32)
- D:\ (File System: NTFS)
- J:\ (File System: CDFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\
--- Running Processes: 48
(!) ---- IE start pages/Tabs reset
+--------------------| Boonty/Boonty Games Elements Deleted :
Service: "Boonty Games"
.
HKCU\SOFTWARE\Boonty
HKLM\Software\Boonty
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES
HKLM\SYSTEM\ControlSet002\Services\Boonty Games
.
C:\Program Files\Boonty
C:\Program Files\BoontyGames
C:\Program Files\Fichiers communs\BOONTY Shared
C:\Documents and Settings\All Users\Application Data\BOONTY
+--------------------| Eorezo Elements Deleted :
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\SOFTWARE\EoRezo
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\EoRezo
HKLM\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
.
C:\Program Files\EoRezo
C:\Documents and Settings\aurelie huret\Application Data\EoRezo
+--------------------| Infected Poker Softwares Elements Deleted :
HKCU\Software\Grand Virtual
.
C:\Documents and Settings\aurelie huret\Cookies\aurelie_huret@partypoker[1].txt
+--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :
.
.
+--------------------| It's TV Elements Deleted :
HKCU\SOFTWARE\ItsLabel
HKLM\SOFTWARE\ItsLabel
.
C:\Documents and Settings\aurelie huret\Application Data\ItsLabel
+--------------------| Sweetim Elements Deleted :
.
(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.
+--------------------| Added Scan :
---- Mozilla FireFox Version 3.0.6 ----
ProfilePath: lvja5iwp.default
.
Prefs.js: Browser.Search.DefaultEngineName: "Yahoo"
Prefs.js: Browser.Search.SelectedEngine: "Google"
Prefs.js: Browser.Search.DefaultUrl: "hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-divx&p="
.
.
.
.
.
---- Internet Explorer Version 7.0.5730.13 ----
+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+-[HKEY_USERS\S-1-5-21-763977465-1272301786-478973442-1006\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
+---------------------------------------------------------------------------+
[~4577 Bytes] - "C:\Ad-Report-Scan-10.02.2009.log"
[~4302 Bytes] - "C:\Ad-Report-Clean-10.02.2009.log"
-
C:\Program Files\Ad-remover\TOOLS\BACKUP\10.02.2009 - Prefs.js
End at: 17:44:51 | 10/02/2009
.
+--------------------| E.O.F - 98 Lines
.
je crois que c'est ça ?
- 1
- 2
Suivant
