Virus ?
Bonjour,
tout d'abord merci de votre aide .
J'ai eu quelques probleme avec ma connexion WIFI livebox ces derniers jours a mise en route de ordi je me connectai pas et un message s'affichait "erreur systeme conflit adresse ip" apres avoir modifier mon adresse ip cela refonctionne (d'ailleur dans connexion reseau un nouvelle icone est apparut "passerelle reseau") mais meme si cela refonctionne je voudrai savoir pourquoi sa a deco... alors que tout fonctionnait correctement jusque la est ce que quelqu'un a peu ce connecter a mon reseau ? ou est ce juste un conflit IP du au hasard ?
merci de votre aide qui mais precieuse en esperant que vous pourrez repondre a mes questions !
tout d'abord merci de votre aide .
J'ai eu quelques probleme avec ma connexion WIFI livebox ces derniers jours a mise en route de ordi je me connectai pas et un message s'affichait "erreur systeme conflit adresse ip" apres avoir modifier mon adresse ip cela refonctionne (d'ailleur dans connexion reseau un nouvelle icone est apparut "passerelle reseau") mais meme si cela refonctionne je voudrai savoir pourquoi sa a deco... alors que tout fonctionnait correctement jusque la est ce que quelqu'un a peu ce connecter a mon reseau ? ou est ce juste un conflit IP du au hasard ?
merci de votre aide qui mais precieuse en esperant que vous pourrez repondre a mes questions !
Configuration: Windows XP Internet Explorer 6.0
32 réponses
Résumé de la discussion
Le fil décrit une connexion Wi‑Fi Livebox affectée par une erreur système conflit adresse IP au démarrage, et la modification manuelle d'adresse IP rétablit la connexion. Des échanges mentionnent des analyses de sécurité et des outils comme VirusTotal ou tout retour sur des malwares pouvant influencer les paramètres réseau et provoquer des conflits IP. Autres contributions évoquent des problématiques DNS, des redirections et des éléments suspects dans le système, nécessitant nettoyage, remise à zéro des serveurs DNS et vérification du DHCP. En cas de résolution, les conseils visent à éliminer les infections et à sécuriser les paramètres réseau pour éviter des conflits IP récurrents.
-
Contributeur sécurité
-
GROS PROBLEME !
apres avoir lancer le scan combifix jai redemarer mon pc et la il ce bloque sur la page bleu de demarage "microsft xp" impossible d'atteindre le bureau il est totalement bloque
la je suis un peu paniquer!!!!!!!! -
Contributeur sécuritéPour fusionner:
http://img.photobucket.com/albums/v666/sUBs/CFScript.gif
_______________
telecharge combofix:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !
_________________
Ferme tous tes navigateurs (donc copie ou imprime les instructions avant)
Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :
File::
c:\temp\fleok
c:\program files\adtools service
c:\program files\trend micro\hijackthis
c:\documents and settings\sarina\bureau\usbfix.exe
Enregistre ce fichier sous le nom CFscript
Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe
Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.
Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt
______________________
Télécharge Tools Cleaner sur ton bureau.
--> https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/
# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
_______________________
comment va ton pc? -
pour le 2eme :
a-squared 4.5.0.41 2009.11.11 -
AhnLab-V3 5.0.0.2 2009.11.11 -
AntiVir 7.9.1.61 2009.11.11 -
Antiy-AVL 2.0.3.7 2009.11.11 -
Authentium 5.2.0.5 2009.11.11 -
Avast 4.8.1351.0 2009.11.10 -
AVG 8.5.0.423 2009.11.11 -
BitDefender 7.2 2009.11.11 -
CAT-QuickHeal 10.00 2009.11.11 -
ClamAV 0.94.1 2009.11.10 -
Comodo 2915 2009.11.11 -
DrWeb 5.0.0.12182 2009.11.10 -
eSafe 7.0.17.0 2009.11.10 -
eTrust-Vet 35.1.7113 2009.11.10 -
F-Prot 4.5.1.85 2009.11.10 -
F-Secure 9.0.15370.0 2009.11.09 -
Fortinet 3.120.0.0 2009.11.10 -
GData 19 2009.11.11 -
Ikarus T3.1.1.74.0 2009.11.11 -
Jiangmin 11.0.800 2009.11.11 -
K7AntiVirus 7.10.893 2009.11.10 -
Kaspersky 7.0.0.125 2009.11.11 -
McAfee 5798 2009.11.10 -
McAfee+Artemis 5798 2009.11.10 -
McAfee-GW-Edition 6.8.5 2009.11.11 -
Microsoft 1.5202 2009.11.11 -
NOD32 4594 2009.11.11 -
Norman 6.03.02 2009.11.10 -
nProtect 2009.1.8.0 2009.11.11 -
Panda 10.0.2.2 2009.11.10 -
PCTools 7.0.3.5 2009.11.11 -
Prevx 3.0 2009.11.11 -
Rising 22.21.02.05 2009.11.11 -
Sophos 4.47.0 2009.11.11 -
Sunbelt 3.2.1858.2 2009.11.11 -
Symantec 1.4.4.12 2009.11.11 -
TheHacker 6.5.0.2.065 2009.11.11 -
TrendMicro 9.0.0.1003 2009.11.11 -
VBA32 3.12.10.11 2009.11.10 -
ViRobot 2009.11.11.2031 2009.11.11 -
VirusBuster 4.6.5.0 2009.11.10 -
Information additionnelle
File size: 25088 bytes
MD5 : 84717891f0734c611721f56c60b5fbc3
SHA1 : f5cf87a4b5145f69d04597bee0f93b99fa0293fd
SHA256: c3abbb85699fd1629eafa331ba1673a6fb178868721856d2bf4fe0ad7d29def9
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x50E5
timedatestamp.....: 0x41107B78 (Wed Aug 4 08:00:24 2004)
machinetype.......: 0x14C (Intel I386)
( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x4DB8 0x4E00 6.01 28bb30acf8de6ab97244272748e6d31f
.data 0x6000 0x14C 0x200 1.86 cbb599f9267bf53209039d14a3574eb1
.rsrc 0x7000 0xD74 0xE00 3.62 fb3de6f4736007e3cd67ad42d5ed9eda
( 7 imports )
> advapi32.dll: RegOpenKeyExA, ReportEventW, RegisterEventSourceW, DeregisterEventSource, OpenProcessToken, RegCreateKeyExW, RegSetValueExW, GetUserNameW, RegQueryValueExW, RegOpenKeyExW, RegQueryInfoKeyW, RegCloseKey, RegQueryValueExA
> crypt32.dll: CryptProtectData
> kernel32.dll: GetVersionExW, LocalFree, LocalAlloc, GetEnvironmentVariableW, SetEnvironmentVariableW, lstrlenW, lstrcpyW, FreeLibrary, GetProcAddress, LoadLibraryW, CompareFileTime, CloseHandle, lstrcatW, WaitForSingleObject, DelayLoadFailureHook, GetStartupInfoA, GetModuleHandleA, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, LoadLibraryA, InterlockedCompareExchange, LocalReAlloc, GetSystemTime, lstrcmpW, GetCurrentThread, SetThreadPriority, CreateThread, GetFileAttributesExW, GetSystemDirectoryW, SetCurrentDirectoryW, FormatMessageW, lstrcmpiW, GetCurrentProcess, GetUserDefaultLangID, GetCurrentProcessId, ExpandEnvironmentStringsW, SetEvent, OpenEventW, Sleep, GetLastError, SearchPathW, CreateProcessW
> msvcrt.dll: _controlfp, _except_handler3, __set_app_type, __p__fmode, __p__commode, __setusermatherr, __getmainargs, _acmdln, exit, _cexit, _XcptFilter, _exit, _c_exit, _initterm, _adjust_fdiv
> ntdll.dll: RtlLengthSid, RtlCopySid, _itow, RtlFreeUnicodeString, DbgPrint, wcslen, wcscpy, wcscat, wcscmp, RtlInitUnicodeString, NtOpenKey, NtClose, _wcsicmp, memmove, NtQueryInformationToken, RtlConvertSidToUnicodeString
> user32.dll: CreateWindowExW, DestroyWindow, RegisterClassExW, DefWindowProcW, LoadRemoteFonts, wsprintfW, GetSystemMetrics, GetKeyboardLayout, SystemParametersInfoW, GetDesktopWindow, LoadStringW, MessageBoxW, ExitWindowsEx, CharNextW
> winspool.drv: SpoolerInit
( 0 exports )
TrID : File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
ssdeep: 384:p+oGB/JD1CzaxzOV6s9cKmdPGFQ273eLXVBYkkjuv1hkNLdbaLa4CwUJuUCSFjj9:AxJDUaxgu5YEVBxkjuv7wbaLa4PU4HPO
PEiD : -
RDS : NSRL Reference Data Set
- -
pour le 1er il me marque fichier introuvable malgré que je le trouve bien sous C
-
Contributeur sécuritéok alors
fais dèjà ceci:
analyse ces fichiers sur virus total et colle les rapports https://www.virustotal.com/gui/
c:\program files\common files\companion wizard\compwiz.exe
c:\windows\system32\userinit.exe -
PROBLEME : a chaque fois que je lance la suppression avec OTM il commence se bloque et marque "ne repond pas" ! et je suis obliger de redemarrer la session pour le debloquer !!!!
-
Contributeur sécuritétélécharge OTM
http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/ (de Old_Timer) sur ton Bureau.
double-clique sur OTM.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTM :Paste instruction for items to be moved.
:processes
explorer.exe
:files
c:\temp\fleok
c:\program files\adtools service
c:\program files\trend micro\hijackthis
c:\documents and settings\sarina\bureau\usbfix.exe
:reg
hkey_local_machine\software\microsoft\windows\currentversion\shellserviceobjectdelayload\systemcheck2
:commands
[purity]
[emptytemp]
[start explorer]
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTM\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
___________________
analyse ces fichiers sur virus total et colle les rapports https://www.virustotal.com/gui/
c:\program files\common files\companion wizard\compwiz.exe
c:\windows\system32\userinit.exe -
pandasecurité :
ANALYSIS: 2009-11-10 11:14:15
PROTECTIONS: 1
MALWARE: 35
SUSPECTS: 2
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
avast! antivirus 4.8.1201 [VPS 080531-1] 4.8.1201 Yes No
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00020302 adware/ncase Adware No 0 Yes No c:\temp\fleok
00034463 adware/wupd Adware No 0 Yes No c:\program files\adtools service
00064632 Dialer.ABR Dialers No 0 Yes No c:\program files\trend micro\hijackthis\backups\backup-20091109-174846-485.inf
00132710 dialer.xd Dialers No 0 Yes No hkey_local_machine\software\microsoft\windows\currentversion\shellserviceobjectdelayload\systemcheck2
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@doubleclick[2].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@atdmt[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@tradedoubler[2].txt
00145792 Cookie/SexList TrackingCookie No 0 Yes No c:\found.014\file0001.chk
00162730 Cookie/Belnk TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@dist.belnk[2].txt
00162730 Cookie/Belnk TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@dist.belnk[1].txt
00167430 Cookie/myaffiliateprogram TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@www.myaffiliateprogram[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@xiti[2].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@xiti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@xiti[1].txt
00167709 Cookie/fe.lea.lycos TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@fe.lea.lycos[2].txt
00167761 Cookie/Sextracker TrackingCookie No 0 Yes No c:\found.014\file0005.chk
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@ad.yieldmanager[2].txt
00168095 Cookie/888 TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@888[2].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@weborama[2].txt
00168113 Cookie/fe.lea.lycos TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@fe.lea.lycos[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@advertising[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@advertising[6].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@advertising[3].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@advertising[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@advertising[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@advertising[4].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@advertising[7].txt
00169286 Cookie/Sextracker TrackingCookie No 0 Yes No c:\found.014\file0004.chk
00170554 Cookie/Overture TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@overture[1].txt
00172449 Cookie/MetriWeb TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@metriweb[1].txt
00172483 Cookie/888 TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@888[1].txt
00172484 Cookie/Cassava TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@cassava[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@bluestreak[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@bluestreak[2].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@adultfriendfinder[2].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@adultfriendfinder[6].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@adultfriendfinder[5].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@adultfriendfinder[7].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@adultfriendfinder[1].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@adultfriendfinder[3].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@adultfriendfinder[3].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@adultfriendfinder[1].txt
00199482 Dialer.XD Dialers No 0 Yes No c:\program files\trend micro\hijackthis\backups\backup-20091109-174847-742.inf
00257406 trj/haxdoor.hy Virus/Trojan No 1 Yes No c:\windows\system32\tick48.bin
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@smartadserver[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\sarina\cookies\sarina@smartadserver[2].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\found.022\file0029.chk
00296582 Cookie/DriveCleaner TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@www.drivecleaner[2].txt
00296583 Cookie/DriveCleaner TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@stats.drivecleaner[2].txt
00296584 Cookie/DriveCleaner TrackingCookie No 0 Yes No c:\documents and settings\pro\cookies\pro@drivecleaner[2].txt
00472802 Adware/Beginto Adware No 0 No No c:\program files\vdcodecpack3.5\divx6.4-installer.exe[²üç\googletoolbarfirefox.msi][unk_0020][xpi][components/googletoolbar.dll]
00530382 Cookie/DriveCleaner TrackingCookie No 0 Yes No c:\lop sd\backup-lop\docume~1\sarina\cookies\sarina@klik.klikadvertising[1].txt
02112488 Generic Malware Virus/Trojan No 0 Yes No c:\program files\common files\companion wizard\compwiz.exe
05165834 Trj/Downloader.MDW Virus/Trojan No 1 Yes No c:\windows\system32\userinit.exe
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
No c:\documents and settings\sarina\bureau\usbfix.exe
No c:\program files\orange hss\connectivity\corecom\autodial.dll
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
214076 HIGH MS09-059
971486 HIGH MS09-058
214074 HIGH MS09-057
214073 HIGH MS09-056
214072 HIGH MS09-055
213109 HIGH MS09-046
212494 HIGH MS09-042
212493 HIGH MS09-041
212490 HIGH MS09-038
120815 HIGH MS06-022
;=================================================================================================================================================================================== -
Contributeur sécuritéok fais le reste
a plus
et remets aussi à la fin un rapport rsit
et dis comment va ton pc et quels sont tes soucis actuels
a plus -
rapport OTM :
All processes killed
Error: Unable to interpret <processes > in the current context!
Error: Unable to interpret <explorer.exe > in the current context!
========== SERVICES/DRIVERS ==========
Service\Driver Service deleted successfully.
========== FILES ==========
C:\WINDOWS\System32\Service.exe moved successfully.
File/Folder C:\WINDOWS\System32\afu630qf.exe not found.
File/Folder C:\WINDOWS\System32\dmlwd.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\afu630qf\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dmlwd.exe\ deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: Default User
->Temp folder emptied: 23819786 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: All Users
User: NetworkService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 65984 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes
User: pro
->Temp folder emptied: -820370228 bytes
->Temporary Internet Files folder emptied: 443735215 bytes
->Java cache emptied: 2366 bytes
User: Propriétaire
User: SARINA
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\GZARIHQX\DVD-Cinema__doomsday_W0QQQ5ftrkparmsZ72Q253A1526Q257C66Q253A2Q257C65Q253A12Q257C39Q253A1QQ_dmptZFRQ5fSKQ5fDVDetCinemaQ5fdvdQQ_fromfsbZQQ_sacatZ11232QQ_sopZ1QQ_trksidZp3286[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\RER5L1B3\CAM30VLM._callback1&request=layout%3D2%26page%3D3907%26emitStyle%3D2%26minResult%3D10%26promotypes%3D75031%26promoStyles%3D48%26results%3D32%26query%3Dtelemark&7030 scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\RER5L1B3\Jeux__W0QQPlateformeeaa20aebZSonyPlayStation3fab3fc3aQQ_catrefZ1QQ_dmptZFRQ5fSKQ5fJeuxvideoQ5fGamesQ5fVideoGamesQQ_flnZ1QQ_sacatZ35103QQ_ssovZ1QQ_trksidZp3286Q2ec0Q2em282[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\RER5L1B3\;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;sz=300x250;ord=4201052656957383[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\MAJPXRXJ\;bp=OK;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=1665984155323[2].5 scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\MAJPXRXJ\adlink%7C516%7C1525342%7C0%7C170%7CAdId%3D2208378%3BBnId%3D1%3Bitime%3D102847060%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Ft%3B2056[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\JPWK4FB7\__motor-storm_W0QQQ5ftrkparmsZ72Q253A1526Q257C66Q253A2Q257C65Q253A12Q257C39Q253A1QQ_dmptZFRQ5fSKQ5fJeuxvideoQ5fGamesQ5fVideoGamesQQ_sopZ1QQ_trksidZp3286Q2ec0Q2em14[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\JPWK4FB7\cgv-zapline_W0QQa10244ZQ2d24QQa15961ZQ2d24QQa15962ZQ2d24QQa15964ZQ2d24QQa40086ZQ2d24QQalistZa15961Q2ca18894Q2ca15964Q2ca15965Q2ca10154Q2ca15962Q2ca40086Q2ca44811Q2ca10244Q[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\2N056DCN\CAKDKHGN._callback1&request=layout%3D2%26page%3D3907%26emitStyle%3D2%26minResult%3D10%26promotypes%3D75031%26promoStyles%3D48%26results%3D32%26query%3Dtelemark&8634 scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\2N056DCN\;bp=OK;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=85922654268[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\KV172AZT\adlink%7C516%7C1525342%7C0%7C170%7CAdId%3D2208378%3BBnId%3D1%3Bitime%3D102726804%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Ft%3B2056[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\KV172AZT\adlink%7C516%7C1686893%7C0%7C154%7CAdId%3D2208356%3BBnId%3D1%3Bitime%3D106322715%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Fp%3B2084[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\1V3Z550A\adlink%7C516%7C1548062%7C0%7C225%7CAdId%3D2208347%3BBnId%3D1%3Bitime%3D106322703%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Fa%3B2056[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\1V3Z550A\;bp=OK;var1=;var2=1;var3=89140;var4=;var21=3;var22=1;var23=1;var24=1;var25=1;var26=89302;var7=;var8=0;var9=1;var10=3;var11=;var14=45;tile=1;sz=300x250;ord=9764138615267556[1] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\KTAZ4XMR\;bp=OK;var1=;var2=1;var3=89140;var4=;var21=3;var22=1;var23=1;var24=1;var25=1;var26=89302;var7=;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=300403220863783[2].56 scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\O1QRCD2Z\;bp=OK;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=46350571515[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\6PGHSVCT\tv;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;sz=1x1;ord=1530623705667426[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\Q88DOHSO\;bp=OK;var1=;var2=1;var3=89140;var4=;var21=3;var22=1;var23=1;var24=1;var25=1;var26=89302;var7=;var8=0;var9=1;var10=3;var11=;var14=45;tile=1;sz=300x250;ord=457513904329391[2].9 scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temp\in233.tmp scheduled to be deleted on reboot.
->Temp folder emptied: -1807482271 bytes
File delete failed. C:\Documents and Settings\SARINA\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 311047950 bytes
->Java cache emptied: 2831799 bytes
->FireFox cache emptied: 3693301 bytes
User: Administrateur
->Temp folder emptied: 23994363 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 20522 bytes
%systemroot%\System32 .tmp files removed: 5664768 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5dc.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 28318851 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = -1701,86 mb
OTM by OldTimer - Version 3.0.0.6 log created on 11092009_111649
Files moved on Reboot...
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\GZARIHQX\DVD-Cinema__doomsday_W0QQQ5ftrkparmsZ72Q253A1526Q257C66Q253A2Q257C65Q253A12Q257C39Q253A1QQ_dmptZFRQ5fSKQ5fDVDetCinemaQ5fdvdQQ_fromfsbZQQ_sacatZ11232QQ_sopZ1QQ_trksidZp3286[1].htm not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\RER5L1B3\CAM30VLM._callback1&request=layout%3D2%26page%3D3907%26emitStyle%3D2%26minResult%3D10%26promotypes%3D75031%26promoStyles%3D48%26results%3D32%26query%3Dtelemark&7030 not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\RER5L1B3\Jeux__W0QQPlateformeeaa20aebZSonyPlayStation3fab3fc3aQQ_catrefZ1QQ_dmptZFRQ5fSKQ5fJeuxvideoQ5fGamesQ5fVideoGamesQQ_flnZ1QQ_sacatZ35103QQ_ssovZ1QQ_trksidZp3286Q2ec0Q2em282[1].htm not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\RER5L1B3\;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;sz=300x250;ord=4201052656957383[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\MAJPXRXJ\;bp=OK;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=1665984155323[2].5 not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\MAJPXRXJ\adlink%7C516%7C1525342%7C0%7C170%7CAdId%3D2208378%3BBnId%3D1%3Bitime%3D102847060%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Ft%3B2056[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\JPWK4FB7\__motor-storm_W0QQQ5ftrkparmsZ72Q253A1526Q257C66Q253A2Q257C65Q253A12Q257C39Q253A1QQ_dmptZFRQ5fSKQ5fJeuxvideoQ5fGamesQ5fVideoGamesQQ_sopZ1QQ_trksidZp3286Q2ec0Q2em14[1].htm not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\JPWK4FB7\cgv-zapline_W0QQa10244ZQ2d24QQa15961ZQ2d24QQa15962ZQ2d24QQa15964ZQ2d24QQa40086ZQ2d24QQalistZa15961Q2ca18894Q2ca15964Q2ca15965Q2ca10154Q2ca15962Q2ca40086Q2ca44811Q2ca10244Q[1].htm not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\2N056DCN\CAKDKHGN._callback1&request=layout%3D2%26page%3D3907%26emitStyle%3D2%26minResult%3D10%26promotypes%3D75031%26promoStyles%3D48%26results%3D32%26query%3Dtelemark&8634 not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\2N056DCN\;bp=OK;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=85922654268[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\KV172AZT\adlink%7C516%7C1525342%7C0%7C170%7CAdId%3D2208378%3BBnId%3D1%3Bitime%3D102726804%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Ft%3B2056[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\KV172AZT\adlink%7C516%7C1686893%7C0%7C154%7CAdId%3D2208356%3BBnId%3D1%3Bitime%3D106322715%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Fp%3B2084[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\1V3Z550A\adlink%7C516%7C1548062%7C0%7C225%7CAdId%3D2208347%3BBnId%3D1%3Bitime%3D106322703%3Blink%3Dhttp%3A%2F%2Ffr%2Eebayobjects%2Ecom%2F6k%3Bh%3Dv8%2F37e5%2F3%2F0%2F%2a%2Fa%3B2056[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\1V3Z550A\;bp=OK;var1=;var2=1;var3=89140;var4=;var21=3;var22=1;var23=1;var24=1;var25=1;var26=89302;var7=;var8=0;var9=1;var10=3;var11=;var14=45;tile=1;sz=300x250;ord=9764138615267556[1] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\KTAZ4XMR\;bp=OK;var1=;var2=1;var3=89140;var4=;var21=3;var22=1;var23=1;var24=1;var25=1;var26=89302;var7=;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=300403220863783[2].56 not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\O1QRCD2Z\;bp=OK;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=46350571515[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\6PGHSVCT\tv;var1=;var2=1;var3=89140;var4=;var7=50;var7=televisionsharp;var7=televisionsoft;var7=truetarget;var8=0;var9=0;var10=0;var11=;var14=;sz=1x1;ord=1530623705667426[2] not found!
File C:\Documents and Settings\SARINA\Local Settings\Temp\Temporary Internet Files\Content.IE5\Q88DOHSO\;bp=OK;var1=;var2=1;var3=89140;var4=;var21=3;var22=1;var23=1;var24=1;var25=1;var26=89302;var7=;var8=0;var9=1;var10=3;var11=;var14=45;tile=1;sz=300x250;ord=457513904329391[2].9 not found!
C:\Documents and Settings\SARINA\Local Settings\Temp\in233.tmp moved successfully.
File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!
File C:\WINDOWS\temp\Perflib_Perfdata_5dc.dat not found!
Registry entries deleted on Reboot... -
Contributeur sécuritétélécharge OTM
http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/ (de Old_Timer) sur ton Bureau.
double-clique sur OTM.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTM :Paste instruction for items to be moved.
:processes
explorer.exe
:services
Service
:files
C:\WINDOWS\System32\Service.exe
C:\WINDOWS\System32\afu630qf.exe
C:\WINDOWS\System32\dmlwd.exe
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\afu630qf]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dmlwd.exe]
:commands
[purity]
[emptytemp]
[start explorer]
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTM\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
________________________
hijackthis
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
lance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O16 - DPF: {11311111-1111-1111-1111-111111111157} - file://C:\Recycled\Q330995.exe
O16 - DPF: {24311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab
O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\ex.cab
O23 - Service: Service - Unknown owner - C:\WINDOWS\System32\Service.exe
___________________________
utilise pour supprimer tes traces
CCLEANER: (lance un nettoyage et répare 3 fois le registre) sans installer la barre yahoo
(dans les options puis avancé :désactive la case: effacer les fichiers de plus de 48 heures)
https://www.malekal.com/tutoriel-ccleaner/
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
___________________________
colle le rapport d'un scan en ligne
avec un des suivants:
bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
Panda en ligne :
http://pandasoftware.fr
Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
Eset (Nod32) en ligne
https://www.eset.com/ -
pour le 2eme voila ce quil me dit quand je mes le fichier !
0 bytes size received / Se ha recibido un archivo vacio -
le 1er :
Fichier dvdfabcrack.zip reçu le 2009.11.08 19:09:33 (UTC)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 0/40 (0%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: 1.
L'heure estimée de démarrage est entre 43 et 62 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.
Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. Email:
Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.41 2009.11.08 -
AhnLab-V3 5.0.0.2 2009.11.06 -
AntiVir 7.9.1.61 2009.11.08 -
Antiy-AVL 2.0.3.7 2009.11.05 -
Authentium 5.2.0.5 2009.11.08 -
Avast 4.8.1351.0 2009.11.08 -
AVG 8.5.0.423 2009.11.08 -
BitDefender 7.2 2009.11.08 -
CAT-QuickHeal 10.00 2009.11.07 -
ClamAV 0.94.1 2009.11.08 -
Comodo 2886 2009.11.08 -
DrWeb 5.0.0.12182 2009.11.08 -
eTrust-Vet 35.1.7108 2009.11.06 -
F-Prot 4.5.1.85 2009.11.08 -
F-Secure 9.0.15370.0 2009.11.04 -
Fortinet 3.120.0.0 2009.11.08 -
GData 19 2009.11.08 -
Ikarus T3.1.1.74.0 2009.11.08 -
Jiangmin 11.0.800 2009.11.08 -
K7AntiVirus 7.10.891 2009.11.07 -
Kaspersky 7.0.0.125 2009.11.08 -
McAfee 5796 2009.11.08 -
McAfee+Artemis 5796 2009.11.08 -
McAfee-GW-Edition 6.8.5 2009.11.08 -
Microsoft 1.5202 2009.11.08 -
NOD32 4585 2009.11.08 -
Norman 6.03.02 2009.11.06 -
nProtect 2009.1.8.0 2009.11.08 -
Panda 10.0.2.2 2009.11.08 -
PCTools 7.0.3.5 2009.11.06 -
Prevx 3.0 2009.11.08 -
Rising 21.54.62.00 2009.11.08 -
Sophos 4.47.0 2009.11.08 -
Sunbelt 3.2.1858.2 2009.11.08 -
Symantec 1.4.4.12 2009.11.08 -
TheHacker 6.5.0.2.063 2009.11.06 -
TrendMicro 9.0.0.1003 2009.11.08 -
VBA32 3.12.10.11 2009.11.07 -
ViRobot 2009.11.6.2025 2009.11.06 -
VirusBuster 4.6.5.0 2009.11.08 -
Information additionnelle
File size: 1915 bytes
MD5...: cda1ea7374fcfe0f2be60ce77004034f
SHA1..: e2b59a69bdd4df165d842b09579299894081d53d
SHA256: 3deb0d3941de5e4e231b09ad9fb3cc25e2cbefd2e97a146f55aad43d8978337f
ssdeep: 48:ysnXCIbD0IvNz/DiMlkATVXlPnHnW/RanF1EWve7qZAM:yYrbD0AzTVXtWpuF
le7sr
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: ZIP compressed archive (99.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned -
Contributeur sécuritéanalyse ces deux fichiers sur virus total et colle les rapports https://www.virustotal.com/gui/
C:\DOCUME~1\SARINA\Mes documents\Mes fichiers re‡us\dvdfabcrack.zip
C:\WINDOWS\System32\Service.exe -
voila je crois avoir tout effectuer :
quand a mes problemes rencontrer il n'y en a plus vraiment juste des question un peu de novice je pense comme :
est ce que le faite d'avoir creer une passerelle reseau pose a probleme ?
est ce que la personne qui a piraté mon pc a peu y enregistrer des chose confidentiel comme mot de passe rct... ?
et enfin estc e qu'avec toutes ces manip. il n'a plus accés a mon pc ?
merci pour ton aide precieuse et merci d'avoir passer du temps sur mon probleme !!!!!!! -
Logfile of random's system information tool 1.06 (written by random/random)
Run by SARINA at 2009-11-08 17:54:42
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 32 GB (28%) free of 114 GB
Total RAM: 255 MB (15% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:55:08, on 08/11/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Orange HSS\Systray\SystrayApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\SARINA\Bureau\RSIT.exe
C:\Program Files\trend micro\SARINA.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange HSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange HSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WiFi Station.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O4 - Global Startup: ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.acer.com/worldwide/selection.html
O16 - DPF: {11311111-1111-1111-1111-111111111157} - file://C:\Recycled\Q330995.exe
O16 - DPF: {24311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab
O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\ex.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/ImageUploader4.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://sabidoubou.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game14.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/ImageUploader4.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{034D8EA9-DD10-491B-96B1-78799B7AD9D0}: NameServer = 80.10.246.1,80.10.246.139
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D7C14E9-34A4-4619-B35F-B3826378C6AF}: NameServer = 80.10.246.1,80.10.246.139
O17 - HKLM\System\CS2\Services\Tcpip\..\{034D8EA9-DD10-491B-96B1-78799B7AD9D0}: NameServer = 80.10.246.1,80.10.246.139
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - Winlogon Notify: ideusr50 - ideusr50.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: Service - Unknown owner - C:\WINDOWS\System32\Service.exe
-
et enfin le rapport rsit :
-
rapport java :
JavaRa 1.15 Removal Log.
Report follows after line.
------------------------------------
The JavaRa removal process was started on Sun Nov 08 17:51:28 2009
Found and removed: C:\Program Files\Java\j2re1.4.2_01
Found and removed: C:\Program Files\Java\jre1.6.0_04
Found and removed: C:\Windows\Installer\{7148F0A8-6813-11D6-A77B-00B0D0142010}
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.4
Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}
Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Classes\JavaPlugin.160_04
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_04
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_04
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160040}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142010}
Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410201
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F841731866D117AB7000B0D410201
Found and removed: SOFTWARE\Classes\JavaPlugin.142_01
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.4.2_01
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.4.2_01
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.4.2_01
Found and removed: Software\Classes\JavaPlugin.142_01
Found and removed: Software\Classes\JavaPlugin.160_04
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_04
Found and removed: Software\JavaSoft\Java2D\1.6.0_04
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACB9B14518A96D117A58000B0D410201
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_07
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_07
Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610007
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610007
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160070}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_04\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_04\bin\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_07\bin\
------------------------------------
Finished reporting. -
rapport lop sd :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : SARINA ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 080531-1] 4.8.1201 (Activated)
A:\ (USB)
C:\ (Local Disk) - FAT32 - Total:111 Go (Free:29 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 08/11/2009|14:14 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[27/06/2004|00:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[27/06/2004|00:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[27/06/2004|00:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
[27/06/2004|00:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[27/06/2004|00:31] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[02/10/2008|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[11/10/2009|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Boss Media
[01/01/2008|14:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[30/03/2006|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[27/06/2004|00:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[19/07/2005|22:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[08/02/2009|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[20/10/2007|14:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[18/06/2009|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LGMOBILEAX
[05/11/2009|14:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[23/05/2007|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[27/06/2004|00:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[08/05/2005|16:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mindscape
[29/10/2006|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[22/08/2007|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
[20/11/2004|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[08/05/2005|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[05/11/2006|12:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[08/05/2005|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[24/12/2006|07:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WhiteCap (Holiday Edition)
[06/11/2006|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/03/2007|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[17/10/2007|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[08/02/2009|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[17/10/2007|15:08] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[27/06/2004|00:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[27/06/2004|00:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/06/2004|00:28] C:\DOCUME~1\pro\APPLIC~1\Adobe
[19/07/2005|10:05] C:\DOCUME~1\pro\APPLIC~1\Canon
[18/03/2005|13:37] C:\DOCUME~1\pro\APPLIC~1\Help
[27/06/2004|00:26] C:\DOCUME~1\pro\APPLIC~1\Identities
[27/06/2004|00:28] C:\DOCUME~1\pro\APPLIC~1\InterTrust
[05/12/2006|12:10] C:\DOCUME~1\pro\APPLIC~1\Lavasoft
[08/05/2005|18:42] C:\DOCUME~1\pro\APPLIC~1\Macromedia
[27/06/2004|00:15] C:\DOCUME~1\pro\APPLIC~1\Microsoft
[14/09/2005|15:21] C:\DOCUME~1\pro\APPLIC~1\Mindscape
[18/11/2006|07:55] C:\DOCUME~1\pro\APPLIC~1\Motive
[20/11/2004|17:47] C:\DOCUME~1\pro\APPLIC~1\MSN6
[08/05/2005|21:36] C:\DOCUME~1\pro\APPLIC~1\OLYMPUS
[13/07/2006|11:45] C:\DOCUME~1\pro\APPLIC~1\PC Tools
[27/06/2004|00:31] C:\DOCUME~1\pro\APPLIC~1\Sun
[09/05/2005|20:52] C:\DOCUME~1\pro\APPLIC~1\Symantec
[18/11/2004|11:46] C:\DOCUME~1\pro\APPLIC~1\Template
[27/06/2004|00:28] C:\DOCUME~1\SARINA\APPLIC~1\Adobe
[29/11/2006|15:25] C:\DOCUME~1\SARINA\APPLIC~1\Ahead
[02/03/2008|15:52] C:\DOCUME~1\SARINA\APPLIC~1\Anuman Interactive
[06/01/2007|12:44] C:\DOCUME~1\SARINA\APPLIC~1\Canon
[29/04/2009|21:11] C:\DOCUME~1\SARINA\APPLIC~1\DataCast
[06/11/2006|14:32] C:\DOCUME~1\SARINA\APPLIC~1\DivX
[18/05/2009|22:45] C:\DOCUME~1\SARINA\APPLIC~1\dvdcss
[13/05/2007|06:38] C:\DOCUME~1\SARINA\APPLIC~1\FUJIFILM
[20/10/2007|14:08] C:\DOCUME~1\SARINA\APPLIC~1\Google
[08/05/2005|19:56] C:\DOCUME~1\SARINA\APPLIC~1\Help
[27/06/2004|00:26] C:\DOCUME~1\SARINA\APPLIC~1\Identities
[16/12/2007|17:41] C:\DOCUME~1\SARINA\APPLIC~1\InstallShield
[27/06/2004|00:28] C:\DOCUME~1\SARINA\APPLIC~1\InterTrust
[30/07/2005|12:04] C:\DOCUME~1\SARINA\APPLIC~1\Lavasoft
[25/01/2009|14:01] C:\DOCUME~1\SARINA\APPLIC~1\Leadertech
[23/06/2009|20:04] C:\DOCUME~1\SARINA\APPLIC~1\LG Electronics
[22/02/2008|19:54] C:\DOCUME~1\SARINA\APPLIC~1\LimeWire
[08/05/2005|19:00] C:\DOCUME~1\SARINA\APPLIC~1\Macromedia
[05/11/2009|14:58] C:\DOCUME~1\SARINA\APPLIC~1\Malwarebytes
[24/10/2009|22:06] C:\DOCUME~1\SARINA\APPLIC~1\Mavi
[27/11/2006|12:06] C:\DOCUME~1\SARINA\APPLIC~1\Media Player Classic
[27/06/2004|00:15] C:\DOCUME~1\SARINA\APPLIC~1\Microsoft
[07/11/2006|18:48] C:\DOCUME~1\SARINA\APPLIC~1\Motive
[21/02/2008|13:19] C:\DOCUME~1\SARINA\APPLIC~1\Mozilla
[13/05/2005|23:24] C:\DOCUME~1\SARINA\APPLIC~1\MSN6
[22/11/2006|13:24] C:\DOCUME~1\SARINA\APPLIC~1\My Games
[04/06/2005|17:01] C:\DOCUME~1\SARINA\APPLIC~1\OLYMPUS
[19/10/2008|18:07] C:\DOCUME~1\SARINA\APPLIC~1\OpenOffice.org
[10/11/2005|17:18] C:\DOCUME~1\SARINA\APPLIC~1\PC Tools
[23/05/2009|06:35] C:\DOCUME~1\SARINA\APPLIC~1\PhotoFiltre Studio X
[23/05/2007|20:08] C:\DOCUME~1\SARINA\APPLIC~1\Screenshot Sender
[25/03/2008|11:04] C:\DOCUME~1\SARINA\APPLIC~1\Shareaza
[24/02/2008|18:42] C:\DOCUME~1\SARINA\APPLIC~1\Shareaza(3)
[18/07/2007|13:45] C:\DOCUME~1\SARINA\APPLIC~1\Soft-R Research
[11/07/2007|19:32] C:\DOCUME~1\SARINA\APPLIC~1\Sports Interactive
[27/06/2004|00:31] C:\DOCUME~1\SARINA\APPLIC~1\Sun
[08/05/2005|17:08] C:\DOCUME~1\SARINA\APPLIC~1\Symantec
[04/06/2005|17:09] C:\DOCUME~1\SARINA\APPLIC~1\Template
[29/04/2007|20:55] C:\DOCUME~1\SARINA\APPLIC~1\uTorrent
[15/05/2009|20:57] C:\DOCUME~1\SARINA\APPLIC~1\vlc
[21/05/2006|19:56] C:\DOCUME~1\SARINA\APPLIC~1\Vso
[22/02/2006|23:37] C:\DOCUME~1\SARINA\APPLIC~1\VSO_HWE
[05/01/2009|20:20] C:\DOCUME~1\SARINA\APPLIC~1\Windows Live Writer
[09/02/2009|20:05] C:\DOCUME~1\SARINA\APPLIC~1\Zylom
[27/06/2004|00:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[27/06/2004|00:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[27/06/2004|00:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\InterTrust
[27/06/2004|00:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[10/11/2005|15:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\PC Tools
[27/06/2004|00:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[08/11/2009 13:31][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[08/11/2009 10:18][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[08/11/2009 14:03][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 20:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[10/10/2005|21:25] C:\Program Files\a2 Free
[27/06/2004|00:28] C:\Program Files\Adobe
[16/07/2005|00:25] C:\Program Files\AdTools Service
[09/02/2006|20:49] C:\Program Files\Ahead
[09/12/2006|12:00] C:\Program Files\Alwil Software
[16/07/2008|19:49] C:\Program Files\Anuman Interactive
[06/12/2006|13:32] C:\Program Files\Art Plus
[26/05/2007|06:51] C:\Program Files\Audacity
[27/06/2004|00:27] C:\Program Files\AvRack
[29/10/2005|08:36] C:\Program Files\BaseDVDivX
[11/10/2009|11:13] C:\Program Files\BetClic Poker
[29/10/2006|10:14] C:\Program Files\BroadJump
[06/12/2006|13:25] C:\Program Files\CalMaker
[02/10/2008|20:27] C:\Program Files\Canal
[08/05/2005|16:29] C:\Program Files\Canon
[07/12/2005|15:45] C:\Program Files\Cartpost
[29/10/2006|10:18] C:\Program Files\Club-Internet
[25/07/2005|13:34] C:\Program Files\Common Files
[27/06/2004|00:20] C:\Program Files\ComPlus Applications
[26/11/2004|17:06] C:\Program Files\Conforama
[21/01/2009|14:20] C:\Program Files\Corel
[27/06/2004|00:30] C:\Program Files\CyberLink
[03/11/2006|11:51] C:\Program Files\Defenza
[28/06/2005|20:11] C:\Program Files\directx
[06/11/2006|14:31] C:\Program Files\DivX
[20/07/2005|11:21] C:\Program Files\DVD Decrypter 350
[19/07/2005|22:29] C:\Program Files\DVD Shrink
[31/07/2006|18:41] C:\Program Files\DVDFab Decrypter
[22/02/2006|23:18] C:\Program Files\DVDFab Express
[21/05/2006|12:40] C:\Program Files\DVDFab Gold
[05/04/2006|08:03] C:\Program Files\DVDFab Platinum
[28/06/2005|22:42] C:\Program Files\Eidos
[03/10/2006|07:57] C:\Program Files\Eidos Interactive
[07/06/2006|11:49] C:\Program Files\Elaborate Bytes
[29/10/2006|14:34] C:\Program Files\eMule
[27/06/2004|00:16] C:\Program Files\Fichiers communs
[13/05/2007|06:37] C:\Program Files\FinePixViewer
[22/11/2006|13:18] C:\Program Files\Firaxis Games
[09/11/2008|14:12] C:\Program Files\FotoSketcher
[27/06/2004|00:27] C:\Program Files\Generic
[29/07/2007|14:46] C:\Program Files\Google
[16/08/2007|13:09] C:\Program Files\Hercules
[25/07/2005|13:33] C:\Program Files\IMSI
[10/05/2005|09:36] C:\Program Files\Infogrames
[27/06/2004|00:27] C:\Program Files\InstallShield Installation Information
[27/06/2004|00:20] C:\Program Files\Internet Explorer
[27/06/2004|00:30] C:\Program Files\Java
[19/10/2008|18:04] C:\Program Files\JRE
[08/11/2005|22:35] C:\Program Files\Kaspersky Lab
[18/06/2009|21:09] C:\Program Files\LG Electronics
[23/06/2009|20:04] C:\Program Files\LG PC Suite II
[09/03/2008|18:08] C:\Program Files\Livre Album Fuji Photo
[16/12/2007|17:41] C:\Program Files\Logitech
[05/11/2009|14:57] C:\Program Files\Malwarebytes' Anti-Malware
[29/04/2009|21:11] C:\Program Files\MarkAny
[27/06/2004|00:20] C:\Program Files\Messenger
[23/05/2007|20:06] C:\Program Files\Messenger Plus! Live
[09/05/2005|21:28] C:\Program Files\Micro Application
[24/07/2007|15:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[27/06/2004|00:22] C:\Program Files\microsoft frontpage
[17/10/2007|15:08] C:\Program Files\Microsoft SQL Server Compact Edition
[27/06/2004|00:56] C:\Program Files\Microsoft Works
[08/05/2005|16:53] C:\Program Files\Mindscape
[01/01/2008|14:26] C:\Program Files\Motorola Phone Tools
[27/06/2004|00:21] C:\Program Files\Movie Maker
[21/02/2008|13:19] C:\Program Files\Mozilla Firefox
[27/06/2004|00:19] C:\Program Files\MSN
[27/06/2004|00:19] C:\Program Files\MSN Gaming Zone
[05/03/2007|21:01] C:\Program Files\MSN Messenger
[06/03/2007|01:36] C:\Program Files\MSXML 4.0
[06/12/2006|13:14] C:\Program Files\My Photo Calendars & Cards
[27/06/2004|00:21] C:\Program Files\NetMeeting
[27/06/2004|00:29] C:\Program Files\NewTech Infosystems
[08/05/2005|16:48] C:\Program Files\OLYMPUS
[19/10/2008|18:03] C:\Program Files\OpenOffice.org 3
[08/01/2008|19:18] C:\Program Files\Orange HSS
[27/06/2004|00:20] C:\Program Files\Outlook Express
[26/03/2006|18:51] C:\Program Files\PC Camera
[10/01/2009|21:13] C:\Program Files\Photo Print Calendar from YOKOHAMA Ver.3.00E beta
[05/05/2007|14:06] C:\Program Files\Photo Story 3 for Windows
[22/05/2009|09:23] C:\Program Files\PhotoFiltre
[23/05/2009|06:35] C:\Program Files\PhotoFiltre Studio X
[21/01/2009|15:22] C:\Program Files\Picthema
[08/05/2005|16:47] C:\Program Files\PIXELA
[09/11/2008|14:20] C:\Program Files\Poster Forge
[04/12/2006|11:25] C:\Program Files\Project1
[28/11/2008|14:17] C:\Program Files\ProPoster
[08/05/2005|16:47] C:\Program Files\QuickTime
[27/06/2004|00:27] C:\Program Files\Realtek Sound Manager
[13/05/2007|06:35] C:\Program Files\REGSHAVE
[18/03/2005|13:37] C:\Program Files\SAGEM
[08/01/2008|19:11] C:\Program Files\SAGEM WiFi manager
[09/12/2007|20:37] C:\Program Files\Samsung
[08/01/2008|19:00] C:\Program Files\Securitoo
[27/06/2004|00:20] C:\Program Files\Services en ligne
[27/11/2006|10:50] C:\Program Files\Shareaza
[05/02/2008|20:02] C:\Program Files\Shareaza Applications
[02/07/2005|17:48] C:\Program Files\Sports Interactive
[05/11/2006|12:53] C:\Program Files\Spybot - Search & Destroy
[10/11/2005|15:57] C:\Program Files\Spyware Doctor
[08/05/2005|17:07] C:\Program Files\Symantec
[13/06/2005|14:08] C:\Program Files\SymNetDrv
[19/11/2008|14:19] C:\Program Files\TKexe
[23/07/2007|14:27] C:\Program Files\torrent_search
[19/02/2008|10:31] C:\Program Files\TorrentWizard
[05/11/2009|13:59] C:\Program Files\trend micro
[27/06/2004|00:26] C:\Program Files\Uninstall Information
[09/11/2008|13:58] C:\Program Files\VCW VicMan's Photo Editor
[27/11/2006|12:05] C:\Program Files\VDCodecPack3.5
[15/05/2009|20:56] C:\Program Files\VideoLAN
[29/09/2008|13:13] C:\Program Files\vso
[17/10/2007|15:07] C:\Program Files\Windows Desktop Search
[17/10/2007|14:58] C:\Program Files\Windows Live
[16/12/2007|18:53] C:\Program Files\Windows Live Favorites
[05/03/2007|21:01] C:\Program Files\Windows Live Toolbar
[14/12/2008|09:29] C:\Program Files\Windows Media Connect
[06/03/2007|01:20] C:\Program Files\Windows Media Connect 2
[27/06/2004|00:20] C:\Program Files\Windows Media Player
[27/06/2004|00:19] C:\Program Files\Windows NT
[27/06/2004|00:20] C:\Program Files\WindowsUpdate
[27/07/2005|23:31] C:\Program Files\Winsos
[27/06/2004|00:22] C:\Program Files\xerox
[09/02/2009|20:04] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[27/06/2004|00:28] C:\Program Files\Fichiers communs\Adobe
[02/10/2008|20:25] C:\Program Files\Fichiers communs\Adobe AIR
[29/11/2006|15:22] C:\Program Files\Fichiers communs\Ahead
[08/01/2008|19:18] C:\Program Files\Fichiers communs\France Telecom
[27/06/2004|00:27] C:\Program Files\Fichiers communs\InstallShield
[27/06/2004|00:30] C:\Program Files\Fichiers communs\Java
[05/03/2007|20:28] C:\Program Files\Fichiers communs\Logitech
[27/06/2004|00:16] C:\Program Files\Fichiers communs\Microsoft Shared
[29/10/2006|10:19] C:\Program Files\Fichiers communs\Motive
[27/06/2004|00:21] C:\Program Files\Fichiers communs\MSSoap
[27/06/2004|00:16] C:\Program Files\Fichiers communs\ODBC
[27/06/2004|00:21] C:\Program Files\Fichiers communs\Services
[27/06/2004|00:16] C:\Program Files\Fichiers communs\SpeechEngines
[08/05/2005|17:07] C:\Program Files\Fichiers communs\Symantec Shared
[27/06/2004|00:20] C:\Program Files\Fichiers communs\System
[15/01/2009|16:13] C:\Program Files\Fichiers communs\Vbox
[16/10/2008|18:40] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[09/05/2005|21:28] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 37 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-08 14:17:14
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\SARINA\Mes documents\Mes fichiers re‡us\dvdfabcrack.zip
[F:52116][D:675]-> C:\DOCUME~1\SARINA\LOCALS~1\Temp
[F:6531][D:0]-> C:\DOCUME~1\SARINA\Cookies
[F:15868][D:37]-> C:\DOCUME~1\SARINA\LOCALS~1\TEMPOR~1\content.IE5
[F:6][D:0]-> C:\Recycled
1 - "C:\Lop SD\LopR_1.txt" - 06/11/2009|21:27 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 08/11/2009|14:21 - Option : [2]
--------------------\\ Fin du rapport a 14:21:10
- 1
- 2
Suivant
