problème pop-up

Question

Bonjour,
Je suis sur le pc de mon amie, je souhaite lui régler son problème de pop up. J'attends des consignes (scan...) Merci.

thewwws57 · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ )
   BIOS : BIOS Date: 04/30/07 10:48:15 Ver: 08.00.12
   USER : LAURA ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:149 Go (Free:50 Go)
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 06/07/2009|15:42 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [30/09/2007|21:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [20/04/2009|21:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [20/04/2009|21:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

   [16/04/2009|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [12/11/2008|22:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [19/05/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [16/06/2008|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [24/05/2009|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
   [17/07/2007|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [20/04/2009|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [06/07/2009|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [03/12/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe
   [18/04/2009|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [18/11/2008|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
   [20/04/2009|22:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/09/2007|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
   [09/12/2007|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [07/06/2009|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [07/06/2009|14:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [17/07/2007|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [27/07/2008|10:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
   [27/07/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle VideoSpin
   [10/11/2007|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SongbirdVLC
   [06/07/2009|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [10/08/2008|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [06/02/2009|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Time Dead Warn Default
   [27/07/2008|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VideoSpin
   [13/03/2009|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Winamp Toolbar
   [07/08/2007|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [17/07/2007|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [17/12/2008|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
   [04/12/2008|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [30/09/2007|21:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [17/07/2007|16:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [25/04/2008|20:49] C:\DOCUME~1\LAURA\APPLIC~1\Adobe
   [18/07/2007|00:27] C:\DOCUME~1\LAURA\APPLIC~1\AdobeUM
   [26/08/2008|19:24] C:\DOCUME~1\LAURA\APPLIC~1\Ahead
   [10/11/2008|16:42] C:\DOCUME~1\LAURA\APPLIC~1\Apple Computer
   [12/12/2008|16:15] C:\DOCUME~1\LAURA\APPLIC~1\axis fast
   [21/04/2008|18:36] C:\DOCUME~1\LAURA\APPLIC~1\BitTorrent
   [17/07/2007|17:50] C:\DOCUME~1\LAURA\APPLIC~1\CyberLink
   [11/01/2008|21:06] C:\DOCUME~1\LAURA\APPLIC~1\DataCast
   [03/12/2008|22:39] C:\DOCUME~1\LAURA\APPLIC~1\DivX
   [25/02/2008|22:36] C:\DOCUME~1\LAURA\APPLIC~1\Google
   [17/07/2007|16:36] C:\DOCUME~1\LAURA\APPLIC~1\Identities
   [17/07/2007|19:30] C:\DOCUME~1\LAURA\APPLIC~1\InstallShield
   [19/06/2009|01:19] C:\DOCUME~1\LAURA\APPLIC~1\LimeWire
   [16/06/2009|22:10] C:\DOCUME~1\LAURA\APPLIC~1\LiveCAD2
   [17/07/2007|19:33] C:\DOCUME~1\LAURA\APPLIC~1\Macromedia
   [02/03/2008|18:22] C:\DOCUME~1\LAURA\APPLIC~1\Media Player Classic
   [18/11/2008|14:15] C:\DOCUME~1\LAURA\APPLIC~1\Micro Application
   [24/05/2009|15:19] C:\DOCUME~1\LAURA\APPLIC~1\Microsoft
   [27/08/2008|19:33] C:\DOCUME~1\LAURA\APPLIC~1\Mozilla
   [17/07/2007|19:45] C:\DOCUME~1\LAURA\APPLIC~1\MSNInstaller
   [15/06/2008|19:54] C:\DOCUME~1\LAURA\APPLIC~1\muvee Technologies
   [31/05/2009|22:58] C:\DOCUME~1\LAURA\APPLIC~1\Nero
   [10/11/2008|20:30] C:\DOCUME~1\LAURA\APPLIC~1\OpenOffice.org
   [02/03/2008|12:01] C:\DOCUME~1\LAURA\APPLIC~1\Real
   [10/11/2007|17:12] C:\DOCUME~1\LAURA\APPLIC~1\Songbird1
   [02/02/2008|20:13] C:\DOCUME~1\LAURA\APPLIC~1\Sun
   [01/09/2007|23:11] C:\DOCUME~1\LAURA\APPLIC~1\Talkback
   [09/02/2009|11:13] C:\DOCUME~1\LAURA\APPLIC~1\TigerPlayer
   [11/08/2008|18:36] C:\DOCUME~1\LAURA\APPLIC~1\U3
   [25/09/2007|17:47] C:\DOCUME~1\LAURA\APPLIC~1\vlc
   [17/06/2008|23:31] C:\DOCUME~1\LAURA\APPLIC~1\Windows Live Writer
   [27/08/2007|12:54] C:\DOCUME~1\LAURA\APPLIC~1\WinRAR

   [24/05/2009|15:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [24/05/2009|15:19] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [06/07/2009 11:25][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{24906363-E082-4B08-8725-5F11B6737CC7}.job
   [08/05/2009 21:13][--a------] C:\WINDOWS	asks\Norton Security Scan for LAURA.job
   [06/07/2009 15:40][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{5BE79D06-B1CB-4875-BD21-0234683C42F2}.job
   [06/07/2009 12:55][--a------] C:\WINDOWS	asks\Google Software Updater.job
   [02/07/2009 10:51][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [06/07/2009 15:00][--ah-----] C:\WINDOWS	asks\AA820E2A9181826A.job
   [06/07/2009 11:09][--ah-----] C:\WINDOWS	asks\SA.DAT
   [02/03/2006 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   ( AA820E2A9181826A.job )=( c:\docume~1\laura\applic~1\axisfa~1\defaultdownloadcity.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [12/11/2008|22:28] C:\Program Files\Adobe
   [30/08/2008|18:45] C:\Program Files\AIST
   [09/09/2007|19:36] C:\Program Files\Alwil Software
   [17/07/2007|17:13] C:\Program Files\Analog Devices
   [15/09/2008|08:15] C:\Program Files\Apple Software Update
   [20/04/2009|21:59] C:\Program Files\Ask Search Assistant
   [01/06/2009|22:43] C:\Program Files\AskTBar
   [30/06/2008|11:41] C:\Program Files\Assistant Dartybox
   [24/05/2009|15:04] C:\Program Files\AVG
   [29/03/2008|20:52] C:\Program Files\axis fast
   [06/07/2008|16:47] C:\Program Files\BitComet
   [08/06/2008|10:13] C:\Program Files\BitTorrent
   [18/12/2008|12:02] C:\Program Files\Bonjour
   [20/09/2008|16:48] C:\Program Files\BrowsingProgram
   [06/07/2009|14:04] C:\Program Files\CCleaner
   [17/07/2007|16:28] C:\Program Files\ComPlus Applications
   [17/07/2007|17:49] C:\Program Files\CyberLink
   [30/06/2008|11:46] C:\Program Files\DartyBox Wifi
   [20/01/2008|18:22] C:\Program Files\Dcads Games Collection
   [17/07/2007|17:13] C:\Program Files\DIFX
   [04/12/2008|23:46] C:\Program Files\DivX
   [31/08/2008|23:21] C:\Program Files\eMule
   [19/05/2008|11:55] C:\Program Files\FBrowserAdvisor
   [19/05/2008|11:55] C:\Program Files\FBrowsingAdvisor
   [31/05/2009|22:20] C:\Program Files\Fichiers communs
   [21/04/2009|20:30] C:\Program Files\Google
   [17/07/2007|17:27] C:\Program Files\Grisoft
   [11/09/2008|19:27] C:\Program Files\InstallShield Installation Information
   [10/06/2009|03:04] C:\Program Files\Internet Explorer
   [04/06/2009|11:01] C:\Program Files\iPod
   [20/04/2009|21:45] C:\Program Files\iPod(2)
   [04/06/2009|11:01] C:\Program Files\iTunes
   [23/04/2009|22:18] C:\Program Files\Java
   [02/03/2008|18:50] C:\Program Files\K-Lite Codec Pack
   [11/01/2008|20:58] C:\Program Files\Lame MP3 Codec
   [22/04/2009|18:41] C:\Program Files\LimeWire
   [16/06/2009|22:08] C:\Program Files\LiveCAD
   [05/04/2008|20:36] C:\Program Files\Macrogaming
   [11/01/2008|20:58] C:\Program Files\MarkAny
   [24/12/2008|12:47] C:\Program Files\Messenger
   [20/04/2009|21:59] C:\Program Files\Messenger Plus! Live
   [18/11/2008|14:14] C:\Program Files\Micro Application
   [17/12/2008|18:49] C:\Program Files\Microsoft
   [20/12/2008|01:23] C:\Program Files\Microsoft ActiveSync
   [17/07/2007|16:30] C:\Program Files\microsoft frontpage
   [04/08/2007|23:51] C:\Program Files\Microsoft LifeCam
   [02/03/2008|11:46] C:\Program Files\Microsoft Office
   [21/04/2009|11:14] C:\Program Files\Microsoft Silverlight
   [17/06/2008|22:53] C:\Program Files\Microsoft SQL Server Compact Edition
   [17/12/2008|18:48] C:\Program Files\Microsoft Sync Framework
   [24/12/2008|12:44] C:\Program Files\Movie Maker
   [20/04/2009|22:40] C:\Program Files\Mozilla Firefox
   [20/04/2009|21:53] C:\Program Files\MpcStar
   [26/11/2008|18:08] C:\Program Files\MSBuild
   [02/03/2008|11:46] C:\Program Files\MSECache
   [17/07/2007|19:45] C:\Program Files\MSN
   [17/07/2007|16:27] C:\Program Files\MSN Gaming Zone
   [12/01/2008|01:01] C:\Program Files\MSXML 4.0
   [26/11/2008|18:05] C:\Program Files\MSXML 6.0
   [18/05/2008|10:56] C:\Program Files\muvee Technologies
   [11/12/2007|18:31] C:\Program Files\muvee Technologies(2)
   [08/06/2008|10:17] C:\Program Files\My Photo Calendars & Cards
   [12/01/2008|00:40] C:\Program Files\MyFree Codec
   [31/05/2009|22:37] C:\Program Files\Nero
   [24/12/2008|12:39] C:\Program Files\NetMeeting
   [08/05/2009|15:00] C:\Program Files\Norton Security Scan
   [20/04/2009|21:46] C:\Program Files\Norton Security Scan(2)
   [07/06/2009|14:40] C:\Program Files\NOS
   [17/07/2007|16:27] C:\Program Files\Online Services
   [10/11/2008|17:21] C:\Program Files\OpenOffice.org 3
   [24/12/2008|12:39] C:\Program Files\Outlook Express
   [07/08/2008|21:55] C:\Program Files\Pinnacle
   [04/06/2009|11:00] C:\Program Files\QuickTime
   [20/04/2009|21:46] C:\Program Files\QuickTime(2)
   [02/03/2008|11:58] C:\Program Files\Real
   [26/11/2008|18:08] C:\Program Files\Reference Assemblies
   [11/09/2008|19:19] C:\Program Files\Ressources Windows Mobile
   [11/06/2009|10:55] C:\Program Files\Safari
   [11/01/2008|20:58] C:\Program Files\Samsung
   [17/07/2007|16:29] C:\Program Files\Services en ligne
   [07/06/2009|10:44] C:\Program Files\Spybot - Search & Destroy
   [20/09/2008|16:48] C:\Program Files\SurfingProgram
   [06/07/2009|15:22] C:\Program Files	rend micro
   [17/07/2007|16:36] C:\Program Files\Uninstall Information
   [07/01/2008|22:58] C:\Program Files\UxTheme Multipatcher Fr
   [25/09/2007|17:38] C:\Program Files\VideoLAN
   [21/05/2008|19:21] C:\Program Files\webHancer
   [20/04/2009|21:50] C:\Program Files\Winamp Toolbar
   [20/04/2009|22:14] C:\Program Files\Windows Live
   [30/06/2009|19:47] C:\Program Files\Windows Live Safety Center
   [17/12/2008|18:46] C:\Program Files\Windows Live SkyDrive
   [05/04/2008|20:34] C:\Program Files\Windows Live Toolbar
   [07/08/2007|21:25] C:\Program Files\Windows Media Connect 2
   [24/12/2008|12:39] C:\Program Files\Windows Media Player
   [24/12/2008|12:39] C:\Program Files\Windows NT
   [31/05/2009|22:35] C:\Program Files\Windows Sidebar
   [17/07/2007|16:29] C:\Program Files\WindowsUpdate
   [10/08/2008|12:24] C:\Program Files\WinRAR
   [17/07/2007|16:30] C:\Program Files\xerox
   [08/06/2008|10:29] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [12/11/2008|22:29] C:\Program Files\Fichiers communs\Adobe
   [17/07/2007|17:23] C:\Program Files\Fichiers communs\Ahead
   [04/06/2009|11:01] C:\Program Files\Fichiers communs\Apple
   [17/07/2007|17:47] C:\Program Files\Fichiers communs\DESIGNER
   [17/07/2007|17:49] C:\Program Files\Fichiers communs\InstallShield
   [19/01/2008|19:40] C:\Program Files\Fichiers communs\Java
   [17/07/2007|17:23] C:\Program Files\Fichiers communs\LightScribe
   [20/04/2009|22:10] C:\Program Files\Fichiers communs\Microsoft Shared
   [17/07/2007|16:28] C:\Program Files\Fichiers communs\MSSoap
   [10/11/2008|16:46] C:\Program Files\Fichiers communs\muvee Technologies
   [31/05/2009|22:53] C:\Program Files\Fichiers communs\Nero
   [17/07/2007|17:58] C:\Program Files\Fichiers communs\ODBC
   [02/03/2008|11:58] C:\Program Files\Fichiers communs\Real
   [17/07/2007|16:28] C:\Program Files\Fichiers communs\Services
   [17/07/2007|17:58] C:\Program Files\Fichiers communs\SpeechEngines
   [08/05/2009|15:00] C:\Program Files\Fichiers communs\Symantec Shared
   [24/12/2008|12:39] C:\Program Files\Fichiers communs\System
   [17/12/2008|18:34] C:\Program Files\Fichiers communs\Windows Live
   [17/06/2008|22:48] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [02/03/2008|11:58] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 61 Processes )

   iexplore.exe ~ [PID:2720]
   iexplore.exe ~ [PID:1332]
   iexplore.exe ~ [PID:3228]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Time Dead Warn Default
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Time Dead Warn Default\Plan Drive.exe
   C:\DOCUME~1\LAURA\APPLIC~1\axisfa~1
   C:\Program Files\axisfa~1
   C:\WINDOWS\Tasks\AA820E2A9181826A.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "warn default inter for"="C:\Documents and Settings\All Users\Application Data\Time Dead Warn Default\Plan Drive.exe"

   --------------------\  Verification du fichier Hosts

   Fichier Hosts MODIFIE

   127.0.0.1 bin.errorprotector.com ## added by CiD
   127.0.0.1 br.errorsafe.com ## added by CiD
   127.0.0.1 br.winantivirus.com ## added by CiD
   127.0.0.1 br.winfixer.com ## added by CiD
   127.0.0.1 cdn.drivecleaner.com ## added by CiD
   127.0.0.1 cdn.errorsafe.com ## added by CiD
   127.0.0.1 cdn.winsoftware.com ## added by CiD
   127.0.0.1 de.errorsafe.com ## added by CiD
   127.0.0.1 de.winantivirus.com ## added by CiD
   127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
   127.0.0.1 download.cdn.errorsafe.com ## added by CiD
   127.0.0.1 download.cdn.winsoftware.com ## added by CiD
   127.0.0.1 download.errorsafe.com ## added by CiD
   127.0.0.1 download.systemdoctor.com ## added by CiD
   127.0.0.1 download.winantispyware.com ## added by CiD
   127.0.0.1 download.windrivecleaner.com ## added by CiD
   127.0.0.1 download.winfixer.com ## added by CiD
   127.0.0.1 drivecleaner.com ## added by CiD
   127.0.0.1 dynamique.drivecleaner.com ## added by CiD
   127.0.0.1 errorprotector.com ## added by CiD
   127.0.0.1 errorsafe.com ## added by CiD
   127.0.0.1 es.winantivirus.com ## added by CiD
   127.0.0.1 fr.winantivirus.com ## added by CiD
   127.0.0.1 fr.winfixer.com ## added by CiD
   127.0.0.1 go.drivecleaner.com ## added by CiD
   127.0.0.1 go.errorsafe.com ## added by CiD
   127.0.0.1 go.winantispyware.com ## added by CiD
   127.0.0.1 go.winantivirus.com ## added by CiD
   127.0.0.1 hk.winantivirus.com ## added by CiD
   127.0.0.1 instlog.errorsafe.com ## added by CiD
   127.0.0.1 instlog.winantivirus.com ## added by CiD
   127.0.0.1 instlog.winfixer.com ## added by CiD
   127.0.0.1 jsp.drivecleaner.com ## added by CiD
   127.0.0.1 kb.errorsafe.com ## added by CiD
   127.0.0.1 kb.winantivirus.com ## added by CiD
   127.0.0.1 nl.errorsafe.com ## added by CiD
   127.0.0.1 se.errorsafe.com ## added by CiD
   127.0.0.1 secure.drivecleaner.com ## added by CiD
   127.0.0.1 secure.errorsafe.com ## added by CiD
   127.0.0.1 secure.winantispam.com ## added by CiD
   127.0.0.1 secure.winantispy.com ## added by CiD
   127.0.0.1 secure.winantivirus.com ## added by CiD
   127.0.0.1 support.winantivirus.com ## added by CiD
   127.0.0.1 trial.updates.winsoftware.com ## added by CiD
   127.0.0.1 ulog.winantivirus.com ## added by CiD
   127.0.0.1 utils.errorsafe.com ## added by CiD
   127.0.0.1 utils.winantivirus.com ## added by CiD
   127.0.0.1 utils.winfixer.com ## added by CiD
   127.0.0.1 winantispyware.com ## added by CiD
   127.0.0.1 winantivirus.com ## added by CiD
   127.0.0.1 winfixer.com ## added by CiD
   127.0.0.1 winfixer2006.com ## added by CiD
   127.0.0.1 winsoftware.com ## added by CiD
   127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
   127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
   127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

   -> 10598 [ 70 ## added by CiD ]

   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-07-06 15:43:57
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 175
 
   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Pack.epk
   C:\WINDOWS\System32
vs2.inf
 
   C:\WINDOWS\System32\aexsqzddu.dat
   C:\WINDOWS\System32\aexsqzddu_nav.dat
   C:\WINDOWS\System32\aexsqzddu_navps.dat
   C:\WINDOWS\System32\ayqqm.dat
   C:\WINDOWS\System32\ayqqm.exe
   C:\WINDOWS\System32\ayqqm_nav.dat
   C:\WINDOWS\System32\ayqqm_navps.dat
   C:\WINDOWS\System32\lhrbory_navtmp.dat
   C:\WINDOWS\System32\suywuoy.dat
   C:\WINDOWS\System32\suywuoy_nav.dat
   C:\WINDOWS\System32\suywuoy_navps.dat
   C:\WINDOWS\System32\uyvivtv.dat
   C:\WINDOWS\System32\uyvivtv_nav.dat
   C:\WINDOWS\System32\uyvivtv_navps.dat
   C:\WINDOWS\System32\wzylyuejp.dat
   C:\WINDOWS\System32\wzylyuejp_nav.dat
   C:\WINDOWS\System32\wzylyuejp_navps.dat
   C:\WINDOWS\System32\ykakg.dat
   C:\WINDOWS\System32\ykakg_nav.dat
   C:\WINDOWS\System32\ykakg_navps.dat
   [b]==> EGDACCESS <==/b

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\LAURA\Bureau\Mes fichiers re‡us\Muvee.autoProducer.v6.1.4.4.Multilangages.Incl-Crack.rar
   C:\DOCUME~1\LAURA\Mes documents\muvee autoproducer v6 1 4 4 multilangages incl-crack.rar
   C:\DOCUME~1\LAURA\Mes documents\Ma musique\Snow Patrol - A Hundred Million Suns [mp3-vbr-2008]\02 - Crack The Shutters.mp3


   [F:55][D:7]-> C:\DOCUME~1\LAURA\LOCALS~1\Temp
   [F:25][D:0]-> C:\DOCUME~1\LAURA\Cookies
   [F:437][D:20]-> C:\DOCUME~1\LAURA\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 06/07/2009|15:44 - Option : [1]

   --------------------\  Fin du rapport a 15:44:58

Nic00 · Answer

&#9654;Relances ToolBarSD 
&#9654;Choisis l'option2 ( suppression), 
&#9654;Ne touche à rien pendant la suppression. 
&#9654;A la fin, un rapport est généré, postes le!


/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/
/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/


&#9654;Relance Lop S&D
&#9654; Choisis l’option 2
&#9654; Ne touche à rien lors de la suppression !
 &#9654;A la fin un rapport est généré, poste le
&#9654; Le rapport se trouve aussi sous la racine du disque: C:\lopR.txt.

thewwws57 · Answer

-----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ )
   BIOS : BIOS Date: 04/30/07 10:48:15 Ver: 08.00.12
   USER : LAURA ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:149 Go (Free:50 Go)
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( 06/07/2009|15:47 )

   -----------\ SUPPRESSION

   Echec   ! - C:\Program Files\AskTBar\bar
   Supprime! - C:\Program Files\AskTBar\PopSwatr
   Echec   ! - C:\Program Files\AskTBar\SrchAstt
   Echec   ! - C:\Program Files\AskTBar\bar\1.bin
   Echec   ! - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
   Echec   ! - C:\Program Files\AskTBar\SrchAstt\1.bin
   Echec   ! - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
   Supprime! - C:\Program Files\BrowsingProgram\BrowsingProgram.dat
   Supprime! - C:\Program Files\BrowsingProgram\pcre3.dll
   Supprime! - C:\Program Files\BrowsingProgram\uninstall.exe
   Supprime! - C:\Program Files\Dcads Games Collection\BattlesOfHelicopters.exe
   Supprime! - C:\Program Files\Dcads Games Collection\BobAndBill.exe
   Supprime! - C:\Program Files\Dcads Games Collection\CrazyBlocks.exe
   Supprime! - C:\Program Files\Dcads Games Collection\Lines.exe
   Supprime! - C:\Program Files\Dcads Games Collection\uninstall.exe
   Supprime! - C:\Program Files\Dcads Games Collection\VideoPool.exe
   Supprime! - C:\DOCUME~1\LAURA\MENUDM~1\PROGRA~1\Dcads Games Collection
   Supprime! - C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt
   Supprime! - C:\Program Files\FBrowsingAdvisor\Logo.png
   Supprime! - C:\Program Files\FBrowsingAdvisor\main.db
   Supprime! - C:\Program Files\FBrowsingAdvisor\unins000.dat
   Supprime! - C:\Program Files\FBrowsingAdvisor\unins000.exe
   Supprime! - C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll
   Supprime! - C:\DOCUME~1\LAURA\Cookies\laura@mysearch[1].txt
   Supprime! - C:\WINDOWS\System32\Dcads-remove.exe
   Supprime! - C:\WINDOWS\system32\dcads_sidebar.dll
   Supprime! - C:\WINDOWS\system32\dcads_sidebar_uninstall.exe
   Supprime! - C:\WINDOWS\System32\DcadsSocial-uninstall.exe
   Supprime! - C:\WINDOWS\system32\mysidesearch_sidebar_uninstall.exe
   Supprime! - C:\WINDOWS\system32\superiorads-uninst.exe
   Supprime! - C:\WINDOWS\System32\WinNB67.dll
   Echec   ! - C:\Program Files\AskTBar
   Supprime! - C:\Program Files\BrowsingProgram
   Supprime! - C:\Program Files\Dcads Games Collection
   Supprime! - C:\Program Files\FBrowserAdvisor
   Supprime! - C:\Program Files\FBrowsingAdvisor

   -----------\ DEUXIEME PASSAGE
 
   Echec   ! - C:\Program Files\AskTBar\bar
   Echec   ! - C:\Program Files\AskTBar\SrchAstt
   Echec   ! - C:\Program Files\AskTBar\bar\1.bin
   Echec   ! - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
   Echec   ! - C:\Program Files\AskTBar\SrchAstt\1.bin
   Echec   ! - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
   Echec   ! - C:\Program Files\AskTBar

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\AskTBar
   C:\Program Files\AskTBar\bar
   C:\Program Files\AskTBar\SrchAstt
   C:\Program Files\AskTBar\bar\1.bin
   C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
   C:\Program Files\AskTBar\SrchAstt\1.bin
   C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL

   -----------\  Extensions

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (LAURA) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (LAURA) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
   "Search Bar"="http://www.yahoo.com/search/ie.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Pack.epk
   C:\WINDOWS\System32
vs2.inf
 
   C:\WINDOWS\System32\aexsqzddu.dat
   C:\WINDOWS\System32\aexsqzddu_nav.dat
   C:\WINDOWS\System32\aexsqzddu_navps.dat
   C:\WINDOWS\System32\ayqqm.dat
   C:\WINDOWS\System32\ayqqm.exe
   C:\WINDOWS\System32\ayqqm_nav.dat
   C:\WINDOWS\System32\ayqqm_navps.dat
   C:\WINDOWS\System32\lhrbory_navtmp.dat
   C:\WINDOWS\System32\suywuoy.dat
   C:\WINDOWS\System32\suywuoy_nav.dat
   C:\WINDOWS\System32\suywuoy_navps.dat
   C:\WINDOWS\System32\uyvivtv.dat
   C:\WINDOWS\System32\uyvivtv_nav.dat
   C:\WINDOWS\System32\uyvivtv_navps.dat
   C:\WINDOWS\System32\wzylyuejp.dat
   C:\WINDOWS\System32\wzylyuejp_nav.dat
   C:\WINDOWS\System32\wzylyuejp_navps.dat
   C:\WINDOWS\System32\ykakg.dat
   C:\WINDOWS\System32\ykakg_nav.dat
   C:\WINDOWS\System32\ykakg_navps.dat
   [b]==> EGDACCESS <==/b

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\LAURA\Bureau\Mes fichiers re‡us\Muvee.autoProducer.v6.1.4.4.Multilangages.Incl-Crack.rar
   C:\DOCUME~1\LAURA\Mes documents\muvee autoproducer v6 1 4 4 multilangages incl-crack.rar
   C:\DOCUME~1\LAURA\Mes documents\Ma musique\Snow Patrol - A Hundred Million Suns [mp3-vbr-2008]\02 - Crack The Shutters.mp3



   1 - "C:\ToolBar SD\TB_1.txt" - 06/07/2009|15:43 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 06/07/2009|15:48 - Option : [2]

   -----------\  Fin du rapport a 15:48:53,90

Nic00 · Answer

Au passage...s'agit-il du même PC:

http://www.commentcamarche.net/forum/affich 12739456 probleme pop up promotion mcafee etc 

?

thewwws57 · Answer

non ce n'est pas le même pc. Regarde le début de mon post (je suis sur le pc de mon amie) ;-)


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ )
   BIOS : BIOS Date: 04/30/07 10:48:15 Ver: 08.00.12
   USER : LAURA ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:149 Go (Free:50 Go)
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 06/07/2009|15:51 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Time Dead Warn Default\Plan Drive.exe
   Supprime! - C:\WINDOWS\Tasks\AA820E2A9181826A.job 
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Time Dead Warn Default
   Supprime! - C:\DOCUME~1\LAURA\APPLIC~1\axisfa~1
   Supprime! - C:\Program Files\axisfa~1
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [30/09/2007|21:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [20/04/2009|21:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [20/04/2009|21:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

   [16/04/2009|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [12/11/2008|22:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [19/05/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [16/06/2008|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [24/05/2009|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
   [17/07/2007|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [20/04/2009|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [06/07/2009|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [03/12/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe
   [18/04/2009|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [18/11/2008|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
   [20/04/2009|22:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/09/2007|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
   [09/12/2007|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [07/06/2009|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [07/06/2009|14:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [17/07/2007|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [27/07/2008|10:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
   [27/07/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle VideoSpin
   [10/11/2007|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SongbirdVLC
   [06/07/2009|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [10/08/2008|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [27/07/2008|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VideoSpin
   [13/03/2009|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Winamp Toolbar
   [07/08/2007|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [17/07/2007|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [17/12/2008|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
   [04/12/2008|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [30/09/2007|21:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [17/07/2007|16:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [25/04/2008|20:49] C:\DOCUME~1\LAURA\APPLIC~1\Adobe
   [18/07/2007|00:27] C:\DOCUME~1\LAURA\APPLIC~1\AdobeUM
   [26/08/2008|19:24] C:\DOCUME~1\LAURA\APPLIC~1\Ahead
   [10/11/2008|16:42] C:\DOCUME~1\LAURA\APPLIC~1\Apple Computer
   [21/04/2008|18:36] C:\DOCUME~1\LAURA\APPLIC~1\BitTorrent
   [17/07/2007|17:50] C:\DOCUME~1\LAURA\APPLIC~1\CyberLink
   [11/01/2008|21:06] C:\DOCUME~1\LAURA\APPLIC~1\DataCast
   [03/12/2008|22:39] C:\DOCUME~1\LAURA\APPLIC~1\DivX
   [25/02/2008|22:36] C:\DOCUME~1\LAURA\APPLIC~1\Google
   [17/07/2007|16:36] C:\DOCUME~1\LAURA\APPLIC~1\Identities
   [17/07/2007|19:30] C:\DOCUME~1\LAURA\APPLIC~1\InstallShield
   [19/06/2009|01:19] C:\DOCUME~1\LAURA\APPLIC~1\LimeWire
   [16/06/2009|22:10] C:\DOCUME~1\LAURA\APPLIC~1\LiveCAD2
   [17/07/2007|19:33] C:\DOCUME~1\LAURA\APPLIC~1\Macromedia
   [02/03/2008|18:22] C:\DOCUME~1\LAURA\APPLIC~1\Media Player Classic
   [18/11/2008|14:15] C:\DOCUME~1\LAURA\APPLIC~1\Micro Application
   [24/05/2009|15:19] C:\DOCUME~1\LAURA\APPLIC~1\Microsoft
   [27/08/2008|19:33] C:\DOCUME~1\LAURA\APPLIC~1\Mozilla
   [17/07/2007|19:45] C:\DOCUME~1\LAURA\APPLIC~1\MSNInstaller
   [15/06/2008|19:54] C:\DOCUME~1\LAURA\APPLIC~1\muvee Technologies
   [31/05/2009|22:58] C:\DOCUME~1\LAURA\APPLIC~1\Nero
   [10/11/2008|20:30] C:\DOCUME~1\LAURA\APPLIC~1\OpenOffice.org
   [02/03/2008|12:01] C:\DOCUME~1\LAURA\APPLIC~1\Real
   [10/11/2007|17:12] C:\DOCUME~1\LAURA\APPLIC~1\Songbird1
   [02/02/2008|20:13] C:\DOCUME~1\LAURA\APPLIC~1\Sun
   [01/09/2007|23:11] C:\DOCUME~1\LAURA\APPLIC~1\Talkback
   [09/02/2009|11:13] C:\DOCUME~1\LAURA\APPLIC~1\TigerPlayer
   [11/08/2008|18:36] C:\DOCUME~1\LAURA\APPLIC~1\U3
   [25/09/2007|17:47] C:\DOCUME~1\LAURA\APPLIC~1\vlc
   [17/06/2008|23:31] C:\DOCUME~1\LAURA\APPLIC~1\Windows Live Writer
   [27/08/2007|12:54] C:\DOCUME~1\LAURA\APPLIC~1\WinRAR

   [24/05/2009|15:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [24/05/2009|15:19] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [06/07/2009 11:25][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{24906363-E082-4B08-8725-5F11B6737CC7}.job
   [08/05/2009 21:13][--a------] C:\WINDOWS	asks\Norton Security Scan for LAURA.job
   [06/07/2009 15:50][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{5BE79D06-B1CB-4875-BD21-0234683C42F2}.job
   [06/07/2009 12:55][--a------] C:\WINDOWS	asks\Google Software Updater.job
   [02/07/2009 10:51][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [06/07/2009 11:09][--ah-----] C:\WINDOWS	asks\SA.DAT
   [02/03/2006 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [12/11/2008|22:28] C:\Program Files\Adobe
   [30/08/2008|18:45] C:\Program Files\AIST
   [09/09/2007|19:36] C:\Program Files\Alwil Software
   [17/07/2007|17:13] C:\Program Files\Analog Devices
   [15/09/2008|08:15] C:\Program Files\Apple Software Update
   [20/04/2009|21:59] C:\Program Files\Ask Search Assistant
   [06/07/2009|15:47] C:\Program Files\AskTBar
   [30/06/2008|11:41] C:\Program Files\Assistant Dartybox
   [24/05/2009|15:04] C:\Program Files\AVG
   [06/07/2008|16:47] C:\Program Files\BitComet
   [08/06/2008|10:13] C:\Program Files\BitTorrent
   [18/12/2008|12:02] C:\Program Files\Bonjour
   [06/07/2009|14:04] C:\Program Files\CCleaner
   [17/07/2007|16:28] C:\Program Files\ComPlus Applications
   [17/07/2007|17:49] C:\Program Files\CyberLink
   [30/06/2008|11:46] C:\Program Files\DartyBox Wifi
   [17/07/2007|17:13] C:\Program Files\DIFX
   [04/12/2008|23:46] C:\Program Files\DivX
   [31/08/2008|23:21] C:\Program Files\eMule
   [31/05/2009|22:20] C:\Program Files\Fichiers communs
   [21/04/2009|20:30] C:\Program Files\Google
   [17/07/2007|17:27] C:\Program Files\Grisoft
   [11/09/2008|19:27] C:\Program Files\InstallShield Installation Information
   [10/06/2009|03:04] C:\Program Files\Internet Explorer
   [04/06/2009|11:01] C:\Program Files\iPod
   [20/04/2009|21:45] C:\Program Files\iPod(2)
   [04/06/2009|11:01] C:\Program Files\iTunes
   [23/04/2009|22:18] C:\Program Files\Java
   [02/03/2008|18:50] C:\Program Files\K-Lite Codec Pack
   [11/01/2008|20:58] C:\Program Files\Lame MP3 Codec
   [22/04/2009|18:41] C:\Program Files\LimeWire
   [16/06/2009|22:08] C:\Program Files\LiveCAD
   [05/04/2008|20:36] C:\Program Files\Macrogaming
   [11/01/2008|20:58] C:\Program Files\MarkAny
   [24/12/2008|12:47] C:\Program Files\Messenger
   [20/04/2009|21:59] C:\Program Files\Messenger Plus! Live
   [18/11/2008|14:14] C:\Program Files\Micro Application
   [17/12/2008|18:49] C:\Program Files\Microsoft
   [20/12/2008|01:23] C:\Program Files\Microsoft ActiveSync
   [17/07/2007|16:30] C:\Program Files\microsoft frontpage
   [04/08/2007|23:51] C:\Program Files\Microsoft LifeCam
   [02/03/2008|11:46] C:\Program Files\Microsoft Office
   [21/04/2009|11:14] C:\Program Files\Microsoft Silverlight
   [17/06/2008|22:53] C:\Program Files\Microsoft SQL Server Compact Edition
   [17/12/2008|18:48] C:\Program Files\Microsoft Sync Framework
   [24/12/2008|12:44] C:\Program Files\Movie Maker
   [20/04/2009|22:40] C:\Program Files\Mozilla Firefox
   [20/04/2009|21:53] C:\Program Files\MpcStar
   [26/11/2008|18:08] C:\Program Files\MSBuild
   [02/03/2008|11:46] C:\Program Files\MSECache
   [17/07/2007|19:45] C:\Program Files\MSN
   [17/07/2007|16:27] C:\Program Files\MSN Gaming Zone
   [12/01/2008|01:01] C:\Program Files\MSXML 4.0
   [26/11/2008|18:05] C:\Program Files\MSXML 6.0
   [18/05/2008|10:56] C:\Program Files\muvee Technologies
   [11/12/2007|18:31] C:\Program Files\muvee Technologies(2)
   [08/06/2008|10:17] C:\Program Files\My Photo Calendars & Cards
   [12/01/2008|00:40] C:\Program Files\MyFree Codec
   [31/05/2009|22:37] C:\Program Files\Nero
   [24/12/2008|12:39] C:\Program Files\NetMeeting
   [08/05/2009|15:00] C:\Program Files\Norton Security Scan
   [20/04/2009|21:46] C:\Program Files\Norton Security Scan(2)
   [07/06/2009|14:40] C:\Program Files\NOS
   [17/07/2007|16:27] C:\Program Files\Online Services
   [10/11/2008|17:21] C:\Program Files\OpenOffice.org 3
   [24/12/2008|12:39] C:\Program Files\Outlook Express
   [07/08/2008|21:55] C:\Program Files\Pinnacle
   [04/06/2009|11:00] C:\Program Files\QuickTime
   [20/04/2009|21:46] C:\Program Files\QuickTime(2)
   [02/03/2008|11:58] C:\Program Files\Real
   [26/11/2008|18:08] C:\Program Files\Reference Assemblies
   [11/09/2008|19:19] C:\Program Files\Ressources Windows Mobile
   [11/06/2009|10:55] C:\Program Files\Safari
   [11/01/2008|20:58] C:\Program Files\Samsung
   [17/07/2007|16:29] C:\Program Files\Services en ligne
   [07/06/2009|10:44] C:\Program Files\Spybot - Search & Destroy
   [20/09/2008|16:48] C:\Program Files\SurfingProgram
   [06/07/2009|15:22] C:\Program Files	rend micro
   [17/07/2007|16:36] C:\Program Files\Uninstall Information
   [07/01/2008|22:58] C:\Program Files\UxTheme Multipatcher Fr
   [25/09/2007|17:38] C:\Program Files\VideoLAN
   [21/05/2008|19:21] C:\Program Files\webHancer
   [20/04/2009|21:50] C:\Program Files\Winamp Toolbar
   [20/04/2009|22:14] C:\Program Files\Windows Live
   [30/06/2009|19:47] C:\Program Files\Windows Live Safety Center
   [17/12/2008|18:46] C:\Program Files\Windows Live SkyDrive
   [05/04/2008|20:34] C:\Program Files\Windows Live Toolbar
   [07/08/2007|21:25] C:\Program Files\Windows Media Connect 2
   [24/12/2008|12:39] C:\Program Files\Windows Media Player
   [24/12/2008|12:39] C:\Program Files\Windows NT
   [31/05/2009|22:35] C:\Program Files\Windows Sidebar
   [17/07/2007|16:29] C:\Program Files\WindowsUpdate
   [10/08/2008|12:24] C:\Program Files\WinRAR
   [17/07/2007|16:30] C:\Program Files\xerox
   [08/06/2008|10:29] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [12/11/2008|22:29] C:\Program Files\Fichiers communs\Adobe
   [17/07/2007|17:23] C:\Program Files\Fichiers communs\Ahead
   [04/06/2009|11:01] C:\Program Files\Fichiers communs\Apple
   [17/07/2007|17:47] C:\Program Files\Fichiers communs\DESIGNER
   [17/07/2007|17:49] C:\Program Files\Fichiers communs\InstallShield
   [19/01/2008|19:40] C:\Program Files\Fichiers communs\Java
   [17/07/2007|17:23] C:\Program Files\Fichiers communs\LightScribe
   [20/04/2009|22:10] C:\Program Files\Fichiers communs\Microsoft Shared
   [17/07/2007|16:28] C:\Program Files\Fichiers communs\MSSoap
   [10/11/2008|16:46] C:\Program Files\Fichiers communs\muvee Technologies
   [31/05/2009|22:53] C:\Program Files\Fichiers communs\Nero
   [17/07/2007|17:58] C:\Program Files\Fichiers communs\ODBC
   [02/03/2008|11:58] C:\Program Files\Fichiers communs\Real
   [17/07/2007|16:28] C:\Program Files\Fichiers communs\Services
   [17/07/2007|17:58] C:\Program Files\Fichiers communs\SpeechEngines
   [08/05/2009|15:00] C:\Program Files\Fichiers communs\Symantec Shared
   [24/12/2008|12:39] C:\Program Files\Fichiers communs\System
   [17/12/2008|18:34] C:\Program Files\Fichiers communs\Windows Live
   [17/06/2008|22:48] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [02/03/2008|11:58] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 57 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-07-06 15:52:30
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 175
 
   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Pack.epk
   C:\WINDOWS\System32
vs2.inf
 
   C:\WINDOWS\System32\aexsqzddu.dat
   C:\WINDOWS\System32\aexsqzddu_nav.dat
   C:\WINDOWS\System32\aexsqzddu_navps.dat
   C:\WINDOWS\System32\ayqqm.dat
   C:\WINDOWS\System32\ayqqm.exe
   C:\WINDOWS\System32\ayqqm_nav.dat
   C:\WINDOWS\System32\ayqqm_navps.dat
   C:\WINDOWS\System32\lhrbory_navtmp.dat
   C:\WINDOWS\System32\suywuoy.dat
   C:\WINDOWS\System32\suywuoy_nav.dat
   C:\WINDOWS\System32\suywuoy_navps.dat
   C:\WINDOWS\System32\uyvivtv.dat
   C:\WINDOWS\System32\uyvivtv_nav.dat
   C:\WINDOWS\System32\uyvivtv_navps.dat
   C:\WINDOWS\System32\wzylyuejp.dat
   C:\WINDOWS\System32\wzylyuejp_nav.dat
   C:\WINDOWS\System32\wzylyuejp_navps.dat
   C:\WINDOWS\System32\ykakg.dat
   C:\WINDOWS\System32\ykakg_nav.dat
   C:\WINDOWS\System32\ykakg_navps.dat
   [b]==> EGDACCESS <==/b

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\LAURA\Bureau\Mes fichiers re‡us\Muvee.autoProducer.v6.1.4.4.Multilangages.Incl-Crack.rar
   C:\DOCUME~1\LAURA\Mes documents\muvee autoproducer v6 1 4 4 multilangages incl-crack.rar
   C:\DOCUME~1\LAURA\Mes documents\Ma musique\Snow Patrol - A Hundred Million Suns [mp3-vbr-2008]\02 - Crack The Shutters.mp3


   [F:32][D:7]-> C:\DOCUME~1\LAURA\LOCALS~1\Temp
   [F:24][D:0]-> C:\DOCUME~1\LAURA\Cookies
   [F:464][D:20]-> C:\DOCUME~1\LAURA\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 06/07/2009|15:44 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 06/07/2009|15:53 - Option : [2]

   --------------------\  Fin du rapport a 15:53:24

Nic00 · Answer

ok, c'était pour être sûr ;-)


Supprime tes cracks et keygens:

--------------------\ Cracks & Keygens ..

C:\DOCUME~1\LAURA\Bureau\Mes fichiers re‡us\Muvee.autoProducer.v6.1.4.4.Multilangages.Incl-Crack.rar
C:\DOCUME~1\LAURA\Mes documents\muvee autoproducer v6 1 4 4 multilangages incl-crack.rar
C:\DOCUME~1\LAURA\Mes documents\Ma musique\Snow Patrol - A Hundred Million Suns [mp3-vbr-2008]\02 - Crack The Shutters.mp3 




On continue:



>>  Télécharge Navilog sur ton bureau: 

 http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
  
/!\   si tu as Vista, désactive l’UAC le temps de la désinfection :	Panneau de configuration>comptes utilisateurs>activer/désactiver le contrôle  des comptes utilisateurs>décoche la cas puis fais OK 

>>  Désactives ton antivirus également.
>>  Lance l’application ( clic-droit : exécuter en tant qu'administrateur si tu es sous Vista )
>>  Arriver au menu principal, choisis l'option 1 et valide. 
>>  Patiente jusqu'au message : Analyse Termine le ... 
 >> Le rapport sera en outre sauvegardé à la racine du disque (fixnavi.txt)

Nic00 · Answer

Je dois m'absenter...

A+

Nic00 · Answer

Re,

poste dès que tu peux.

thewwws57 · Answer

Excuse moi pour le retard !

Fix Navipromo version 4.0.0 commencé le 06/07/2009 à 16:06:08,59

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files
avilog1

Mise à jour le 19.06.2009 à 20h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ )
BIOS : BIOS Date: 04/30/07 10:48:15 Ver: 08.00.12
USER : LAURA ( Administrator )
BOOT : Normal boot




C:\ (Local Disk) - NTFS - Total:149 Go (Free:50 Go)
D:\ (CD or DVD)


Recherche exécutée en mode normal

Nettoyage exécuté au redémarrage de l'ordinateur


C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32
vs2.inf supprimé !
C:\WINDOWS\system32\aexsqzddu.dat supprimé !
C:\WINDOWS\system32\aexsqzddu_nav.dat supprimé !
C:\WINDOWS\system32\aexsqzddu_navps.dat supprimé !
C:\WINDOWS\system32\ayqqm.exe supprimé !
C:\WINDOWS\system32\ayqqm.dat supprimé !
C:\WINDOWS\system32\ayqqm_nav.dat supprimé !
C:\WINDOWS\system32\ayqqm_navps.dat supprimé !
C:\WINDOWS\prefetch\ayqqm*.pf supprimé !
C:\WINDOWS\system32\lhrbory_navtmp.dat supprimé !
C:\WINDOWS\system32\suywuoy.dat supprimé !
C:\WINDOWS\system32\suywuoy_nav.dat supprimé !
C:\WINDOWS\system32\suywuoy_navps.dat supprimé !
C:\WINDOWS\system32\uyvivtv.dat supprimé !
C:\WINDOWS\system32\uyvivtv_nav.dat supprimé !
C:\WINDOWS\system32\uyvivtv_navps.dat supprimé !
C:\WINDOWS\system32\wzylyuejp.dat supprimé !
C:\WINDOWS\system32\wzylyuejp_nav.dat supprimé !
C:\WINDOWS\system32\wzylyuejp_navps.dat supprimé !
C:\WINDOWS\system32\ykakg.dat supprimé !
C:\WINDOWS\system32\ykakg_nav.dat supprimé !
C:\WINDOWS\system32\ykakg_navps.dat supprimé !


Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\LAURA\locals~1\Temp effectué !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !



*** Scan terminé le 06/07/2009 à 21:01:51,31 ***

thewwws57 · Answer

Plus de réponses !!?? tout est ok ???

thewwws57 · Answer

.................................

Nic00 · Answer

Attends j'arrive...

Nic00 · Answer

Désolé du retard.

Refais un rapport avec RSIT pour voir où on en est stp.

thewwws57 · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by LAURA at 2009-07-17 15:07:40
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 52 GB (34%) free of 153 GB
Total RAM: 1023 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:10:13, on 17/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\WINDOWS\vVX1000.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\MI3AA1~1apimgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Assistant Dartybox\Upgrade_Manager.exe
C:\Program Files\DartyBox Wifi\SAGEM WiFi manager\WLANUTL.exe
C:\Documents and Settings\LAURA\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\service.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\Program Files\Norton Security Scan\Nss.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BitComet\BitComet.exe
C:\Documents and Settings\LAURA\Local Settings\Temporary Internet Files\Content.IE5\F4UHMXX7\RSIT[1].exe
C:\Program Files	rend micro\LAURA.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO_1.2.2.28.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: dcads - {53ad6c69-2784-a77d-59f3-4cdd2016562a} - C:\WINDOWS\system32
sa80.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: dcads - {733716E1-76D2-4003-AC39-845281C0EF85} - C:\WINDOWS\system32
su1C.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dll
O2 - BHO: (no name) - {CAFCBB0F-D6F3-465B-FAFC-2E31894B95AE} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [webHancer Agent] C:\Program Files\webHancer\Programs\whagent.exe
O4 - HKLM\..\Run: [MDNS] C:\WINDOWS\system32\service.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [L'Assistant DartyBox] C:\Program Files\Assistant Dartybox\Upgrade_Manager.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-606747145-746137067-682003330-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\LAURA\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet	ools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mesvacancesenphoto.com/Components/Upload/ImageUploader4.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

Nic00 · Answer

Télécharge SDFix (par AndyManchesta):
http://sdfix.net/SDFix.exe

#-Double-clique sur l'icone SDFix (il se peux que l'infection bloque l'exécution du programme, renomme alors le fichier SDFix en faisant un clic droit renommer et double-clique à nouveau dessus).

#-Une fenêtre s'ouvre, laisse les options telles quelles puis clique sur le bouton Install

#-Une fois SDFix installé la désinfection doit se faire en mode sans échec: tapotes la touche F8 (ou F5 pour certains PC) au démarrage de ton ordinateur.

#-Une fois en mode sans échec, clique sur le menu Démarrer puis Exécuter et colle la commande suivant : C:\SDFix\RunThis.bat

#-Clique sur OK.

#-Au menu principal appuye sur la touche Y (pour yes) du clavier et appuie sur Entrée

#-Le bureau (Menu Démarrer etc.) disparaît..
#-Le Fix commence son travail, il faut patienter... cela peut durer une trentaines de minutes.

#- Une fois les opérations de nettoyage effectuées... SDFix signale que l'ordinateur doit être redémarré : The PC Will now restart
#- Appuie sur une touche du clavier.

#-L'ordinateur va redémarrer en mode normal.
#-Avant d'arriver sur le bureau, une nouvelle fenêtre de SDFix va s'ouvrir. Ceci peut prendre quelques une minutes...

#-Le rapport SDFix s'ouvre alors dans le bloc-notes :
*Clique sur le menu Edition puis Sélectionner tout.
* Clique à nouveau sur le menu Edition puis copier.
* Copie-colle le rapport dans ta prochaine réponse : clic droit / coller

Note: (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller)

thewwws57 · Answer

ca ne marche pas...Je tape Y + ent mais rien...la fenêtre se ferme...en plus lorsque je tapote sur la touche F8 j'arrive sur une fenetre où j'ai le choix genre entre hardrive et lecteurcd...je comprends rien ;-)

thewwws57 · Answer

question : le tea timer de spybot doit toujours etre desactivé ?? ......

thewwws57 · Answer

"Une fenêtre s'ouvre, laisse les options telles quelles puis clique sur le bouton Install " rien ne s'ouvre, lorsque je clic sur le .exe j'ai un rapport qui suivre qui m'indique ce que tu m'as indiqué...redemarré en mode sans échec. J'ai besoins d'explications précises merci

Nic00 · Answer

Je n'ai plus le temps ce soir, je te file le tuto si jamais ça peux t'aider:

https://www.malekal.com/slenfbot-still-an-other-irc-bot/

Nic00 · Answer

Ça avance ?

Problème pop-up

31 réponses

Discussions similaires

Newsletters