Probleme centre de sécurité

Résolu
Bonjour,

Voilà, ce matin en allumant mon ordi portable, le centre de sécurité est désactivé, j ai essayé de l'activer dans les services(je choisi le mode automatique, valide mais ca reste en desactivé). A la place j ai un gentil centre de sécurité en anglais, un faux, ou je "peux" acheter des logiciels pour ma sécurité....
je ne peux lancer mon antivirus, malwarebytes non plus....et aussi spybot seachr and destroy
En mode sans echec pareil

je ne sais pas qui est allé dans mon dos sur mon pc enfin bref

Merci d'avance et joyeux noel
Configuration: Windows Vista
Firefox 3.5.5

61 réponses

Résumé de la discussion

Le fil décrit une infection où le centre de sécurité de Windows Vista est désactivé et un faux centre en anglais empêche le démarrage de l’antivirus et des outils de sécurité. Plusieurs réponses proposent des outils de décontamination comme LopSD pour un premier diagnostic, RSIT pour générer un rapport et ComboFix pour nettoyer en cas d’infection persistante. Des conseils complémentaires encouragent de mettre à jour Malwarebytes, lancer un examen rapide, puis sauvegarder et partager les rapports afin d’analyser les éléments suspects correctement. À noter que certains outils peuvent nécessiter des mesures temporaires comme la déconnexion d’internet ou la désactivation des protections, puis redémarrer en mode normal, si nécessaire.

Bobot (l’IA à votre service)
  1. [ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

    --> Recherche:

    C:\Combofix.txt: trouvé !
    C:\lopR.txt: trouvé !
    C:\UsbFix.txt: trouvé !
    C:\UsbFix: trouvé !
    C:\Program Files\trend micro\HijackThis.exe: trouvé !
    C:\Program Files\trend micro\hijackthis.log: trouvé !
    C:\Windows\mbr.exe: trouvé !

    ---------------------------------
    --> Suppression:

    C:\Program Files\trend micro\HijackThis.exe: supprimé !
    C:\Combofix.txt: supprimé !
    C:\lopR.txt: supprimé !
    C:\UsbFix.txt: supprimé !
    C:\Program Files\trend micro\hijackthis.log: supprimé !
    C:\Windows\mbr.exe: supprimé !
    C:\UsbFix: supprimé !

    je passe a ccleaner maintenant
    1. Désinstalles les traces de Norton qui restent sur ton pc avec cet utilitaire:
      http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924

      Pour desinstaller les outils utilisés

      Telecharge ToolsCleaner2--> http://pc-system.fr/
      -Une fois téléchargé, installe-le et lance-le
      -Clique sur Recherche et laisse le scan se terminer
      -Clique sur SUPPRESSION
      -Clique sur Quitter pour que le rapport puisse se créer
      -Poste moi le rapport se trouvant ici--> C:\TCleaner.txt

      puis

      ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
      https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

      * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
      * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
      * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre).
      * Décoche la case plus vieux que 24 h

      TRES IMPORTANT:

      ---> Il est nécessaire de désactiver,redémarrer puis réactiver la restauration système pour la purger :
      XP:
      https://www.tayo.fr/desactiver-restauration-systeme-sur-windows-xp-tutoriel.php
      VISTA:
      https://www.tayo.fr/desactiver-restauration-windows-vista-tutoriel.php

      ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
      https://www.vulgarisation-informatique.com/creer-point-restauration.php

      ---> Changes le statut de ce topic :
      et mets le en "résolu"
      https://www.commentcamarche.net/infos/25917-marquer-un-fil-de-discussion-comme-etant-resolu/

      a+

      1. voila

        Logfile of random's system information tool 1.06 (written by random/random)
        Run by Benjamin at 2009-12-27 21:05:25
        Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
        System drive C: has 35 GB (19%) free of 187 GB
        Total RAM: 3070 MB (62% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 21:05:41, on 27/12/2009
        Platform: Windows Vista SP2 (WinNT 6.00.1906)
        MSIE: Internet Explorer v8.00 (8.00.6001.18865)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\Dwm.exe
        C:\Windows\Explorer.EXE
        C:\Windows\system32\taskeng.exe
        C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
        C:\Program Files\ASUS\ASUS Live Update\ALU.exe
        C:\Program files\P4G\BatteryLife.exe
        C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Windows\AsScrPro.exe
        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Windows\system32\wbem\unsecapp.exe
        C:\Windows\system32\conime.exe
        C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\VideoLAN\VLC\vlc.exe
        F:\RSIT.exe
        C:\Program Files\trend micro\Benjamin.exe

        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
        O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
        O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
        O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
        O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
        O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
        O23 - Service: OpenSSH Server (OpenSSHd) - Unknown owner - C:\Program Files\OpenSSH\bin\cygrunsrv.exe
        O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
        O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\system32\rpcnet.exe
        O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
        O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
        O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
        O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
        1. Salut Gen....

          Merci pour l'intervention !

          ==> karhott --> post 47

          a+
          1. ah non pas du tout ca me dit rien
            en plus c est un dossier "vide"
            1. --------------------\\ Lop S&D 4.2.5-0 XP/Vista

              Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
              X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5900 @ 2.20GHz )
              BIOS : Default System BIOS
              USER : Benjamin ( Administrator )
              BOOT : Normal boot
              C:\ (Local Disk) - NTFS - Total:182 Go (Free:34 Go)
              D:\ (Local Disk) - NTFS - Total:271 Go (Free:177 Go)
              E:\ (CD or DVD)
              G:\ (CD or DVD)

              "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
              Option : [4] ( 27/12/2009|16:53 )

              [ UAC => 0 ]

              \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Lop Script

              C:\ProgramData\Proc defy window jugs

              \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

              Supprime! - C:\ProgramData\Proc defy window jugs

              \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

              --------------------\\ Listing des dossiers dans Local

              [04/10/2009|13:25] C:\Users\Benjamin\AppData\Local\Activision
              [11/09/2009|17:14] C:\Users\Benjamin\AppData\Local\Adobe
              [11/09/2009|16:19] C:\Users\Benjamin\AppData\Local\Application Data
              [11/09/2009|17:24] C:\Users\Benjamin\AppData\Local\ASUS
              [19/12/2009|01:01] C:\Users\Benjamin\AppData\Local\d3d9caps.dat
              [27/12/2009|14:55] C:\Users\Benjamin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
              [11/09/2009|23:45] C:\Users\Benjamin\AppData\Local\Downloaded Installations
              [12/09/2009|12:05] C:\Users\Benjamin\AppData\Local\Electronic Arts
              [25/09/2009|21:54] C:\Users\Benjamin\AppData\Local\GDIPFONTCACHEV1.DAT
              [11/09/2009|17:49] C:\Users\Benjamin\AppData\Local\Google
              [11/09/2009|16:19] C:\Users\Benjamin\AppData\Local\Historique
              [27/12/2009|16:49] C:\Users\Benjamin\AppData\Local\IconCache.db
              [25/12/2009|09:48] C:\Users\Benjamin\AppData\Local\Microsoft
              [10/10/2009|17:58] C:\Users\Benjamin\AppData\Local\Microsoft Corporation
              [05/11/2009|11:00] C:\Users\Benjamin\AppData\Local\Microsoft Games
              [12/09/2009|09:08] C:\Users\Benjamin\AppData\Local\Microsoft Help
              [11/09/2009|18:07] C:\Users\Benjamin\AppData\Local\Mozilla
              [18/09/2009|18:20] C:\Users\Benjamin\AppData\Local\O&O
              [11/09/2009|16:31] C:\Users\Benjamin\AppData\Local\Power2Go
              [11/10/2009|20:41] C:\Users\Benjamin\AppData\Local\PunkBuster
              [05/11/2009|23:47] C:\Users\Benjamin\AppData\Local\PUTTY.RND
              [03/11/2009|12:30] C:\Users\Benjamin\AppData\Local\Rockstar Games
              [27/12/2009|16:53] C:\Users\Benjamin\AppData\Local\temp
              [11/09/2009|16:19] C:\Users\Benjamin\AppData\Local\Temporary Internet Files
              [21/10/2009|17:36] C:\Users\Benjamin\AppData\Local\VirtualStore

              --------------------\\ Tâches planifiées dans C:\Windows\tasks

              [24/12/2009 23:58][--a------] C:\Windows\tasks\Spybot - Search & Destroy - Scheduled Task.job
              [27/12/2009 16:50][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
              [27/12/2009 16:50][--a------] C:\Windows\tasks\GlaryInitialize.job
              [27/12/2009 16:50][--ah-----] C:\Windows\tasks\SA.DAT
              [27/12/2009 16:49][--a------] C:\Windows\tasks\SCHEDLGU.TXT

              --------------------\\ Listing des dossiers dans C:\ProgramData

              [12/09/2009|00:02] C:\ProgramData\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
              [19/09/2009|12:23] C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
              [14/07/2009|06:03] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
              [11/09/2009|16:22] C:\ProgramData\Adobe
              [02/11/2006|14:02] C:\ProgramData\Application Data
              [11/09/2009|17:24] C:\ProgramData\ASUS
              [14/07/2009|06:46] C:\ProgramData\Atheros
              [25/12/2009|10:10] C:\ProgramData\Avira
              [24/09/2009|23:02] C:\ProgramData\Azureus
              [08/10/2009|16:00] C:\ProgramData\Blizzard
              [04/10/2009|14:48] C:\ProgramData\Electronic Arts
              [02/11/2006|14:02] C:\ProgramData\Favorites
              [20/10/2009|06:10] C:\ProgramData\Film Curb Part
              [25/09/2009|14:31] C:\ProgramData\KONAMI
              [11/09/2009|17:42] C:\ProgramData\LightScribe
              [11/09/2009|22:29] C:\ProgramData\Malwarebytes
              [01/10/2009|17:20] C:\ProgramData\Messenger Plus!
              [22/10/2009|16:41] C:\ProgramData\Microsoft
              [10/12/2009|07:45] C:\ProgramData\Microsoft Help
              [11/09/2009|17:01] C:\ProgramData\Norton
              [14/07/2009|06:09] C:\ProgramData\NortonInstaller
              [14/09/2009|18:37] C:\ProgramData\ntuser.pol
              [20/11/2009|07:32] C:\ProgramData\NVIDIA
              [27/12/2009|16:50] C:\ProgramData\nvModes.001
              [27/12/2009|16:50] C:\ProgramData\nvModes.dat
              [19/09/2009|11:33] C:\ProgramData\P4G
              [11/09/2009|17:54] C:\ProgramData\Pinnacle
              [25/12/2009|10:22] C:\ProgramData\Spybot - Search & Destroy
              [02/11/2006|14:02] C:\ProgramData\Start Menu
              [25/12/2009|03:02] C:\ProgramData\sysReserve.ini
              [14/07/2009|06:08] C:\ProgramData\Temp
              [02/11/2006|14:02] C:\ProgramData\Templates
              [19/09/2009|12:23] C:\ProgramData\TuneUp Software
              [11/09/2009|17:58] C:\ProgramData\VideoSpin

              --------------------\\ Listing des dossiers dans C:\Program Files

              [14/07/2009|06:03] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
              [03/10/2009|17:55] C:\Program Files\ActiveX Control Pad
              [11/10/2009|19:31] C:\Program Files\Activision
              [11/09/2009|16:22] C:\Program Files\Adobe
              [18/11/2009|19:40] C:\Program Files\AGEIA Technologies
              [12/09/2009|10:36] C:\Program Files\Ashampoo
              [11/09/2009|21:00] C:\Program Files\ASUS
              [14/07/2009|06:46] C:\Program Files\Atheros
              [14/07/2009|06:39] C:\Program Files\ATKGFNEX
              [26/09/2009|21:46] C:\Program Files\Auslogics
              [25/12/2009|10:10] C:\Program Files\Avira
              [11/09/2009|23:39] C:\Program Files\AviSynth 2.5
              [11/09/2009|22:26] C:\Program Files\CCleaner
              [14/07/2009|06:45] C:\Program Files\Cisco
              [11/09/2009|18:09] C:\Program Files\CodeStuff
              [26/12/2009|00:25] C:\Program Files\Common Files
              [24/09/2009|18:55] C:\Program Files\Counter-Strike 2D
              [16/10/2009|19:46] C:\Program Files\Counter-Strike Source
              [11/09/2009|17:11] C:\Program Files\CyberLink
              [11/09/2009|18:16] C:\Program Files\DAEMON Tools Lite
              [14/07/2009|07:10] C:\Program Files\Downloaded Installations
              [21/11/2009|19:49] C:\Program Files\Eidos
              [13/10/2009|11:35] C:\Program Files\Electronic Arts
              [11/09/2009|18:09] C:\Program Files\eRightSoft
              [25/12/2009|10:07] C:\Program Files\ESET
              [20/10/2009|06:09] C:\Program Files\Film Curb Part
              [06/12/2009|14:54] C:\Program Files\GIMP-2.0
              [19/09/2009|11:33] C:\Program Files\Glary Utilities
              [11/09/2009|18:13] C:\Program Files\Google
              [01/11/2009|19:35] C:\Program Files\HTTP-Tunnel
              [22/11/2009|00:47] C:\Program Files\InstallShield Installation Information
              [14/07/2009|06:20] C:\Program Files\Intel
              [10/12/2009|07:46] C:\Program Files\Internet Explorer
              [11/11/2009|15:39] C:\Program Files\Java
              [25/09/2009|14:20] C:\Program Files\KONAMI
              [06/11/2009|21:21] C:\Program Files\Lavalys
              [25/12/2009|20:45] C:\Program Files\List_Kill'em
              [25/12/2009|21:13] C:\Program Files\Malwarebytes' Anti-Malware
              [08/11/2009|11:15] C:\Program Files\Messenger Plus! Live
              [11/10/2009|14:46] C:\Program Files\Microsoft
              [25/10/2009|18:02] C:\Program Files\Microsoft Games
              [03/10/2009|21:14] C:\Program Files\Microsoft Games for Windows - LIVE
              [14/07/2009|06:01] C:\Program Files\Microsoft Office
              [11/10/2009|14:50] C:\Program Files\Microsoft Office Outlook Connector
              [11/09/2009|18:33] C:\Program Files\Microsoft Silverlight
              [11/09/2009|16:25] C:\Program Files\Microsoft SQL Server Compact Edition
              [14/07/2009|06:01] C:\Program Files\Microsoft Visual Studio
              [12/09/2009|09:08] C:\Program Files\Microsoft Visual Studio 8
              [10/10/2009|17:58] C:\Program Files\Microsoft Windows 7 Upgrade Advisor
              [12/09/2009|09:16] C:\Program Files\Microsoft Works
              [14/07/2009|06:01] C:\Program Files\Microsoft.NET
              [20/09/2009|13:16] C:\Program Files\Movie Maker
              [27/12/2009|16:50] C:\Program Files\Mozilla Firefox
              [12/09/2009|09:12] C:\Program Files\MSBuild
              [13/09/2009|09:47] C:\Program Files\MSXML 4.0
              [11/11/2009|15:52] C:\Program Files\NetBeans 6.7.1
              [01/11/2009|19:34] C:\Program Files\OpenSSH
              [14/07/2009|07:09] C:\Program Files\P4G
              [11/09/2009|17:58] C:\Program Files\Pinnacle
              [02/10/2009|19:23] C:\Program Files\Project64 1.6
              [14/07/2009|07:03] C:\Program Files\Realtek
              [02/11/2006|13:37] C:\Program Files\Reference Assemblies
              [21/09/2009|17:48] C:\Program Files\RobotProg
              [02/11/2009|20:38] C:\Program Files\Rockstar Games
              [11/11/2009|15:55] C:\Program Files\sges-v3-prelude
              [02/11/2009|20:32] C:\Program Files\SocksCapV2
              [19/09/2009|11:42] C:\Program Files\splus
              [02/10/2009|06:07] C:\Program Files\Spybot - Search & Destroy
              [26/12/2009|09:50] C:\Program Files\Steam
              [11/11/2009|15:41] C:\Program Files\Sun
              [14/07/2009|07:07] C:\Program Files\Synaptics
              [13/12/2009|22:58] C:\Program Files\Teamspeak2_RC2
              [14/07/2009|07:04] C:\Program Files\Temp
              [25/09/2009|21:49] C:\Program Files\Thrustmaster
              [25/12/2009|22:50] C:\Program Files\trend micro
              [19/09/2009|12:24] C:\Program Files\TuneUp Utilities 2009
              [02/11/2006|14:01] C:\Program Files\Uninstall Information
              [25/09/2009|23:30] C:\Program Files\UT2004
              [11/09/2009|21:42] C:\Program Files\VideoLAN
              [28/10/2009|11:16] C:\Program Files\Volition Inc
              [24/09/2009|23:01] C:\Program Files\Vuze
              [20/09/2009|13:16] C:\Program Files\Windows Calendar
              [20/09/2009|13:16] C:\Program Files\Windows Collaboration
              [20/09/2009|13:16] C:\Program Files\Windows Defender
              [20/09/2009|13:16] C:\Program Files\Windows Journal
              [11/10/2009|14:50] C:\Program Files\Windows Live
              [11/09/2009|16:24] C:\Program Files\Windows Live SkyDrive
              [10/12/2009|07:46] C:\Program Files\Windows Mail
              [28/10/2009|16:18] C:\Program Files\Windows Media Player
              [02/11/2006|13:37] C:\Program Files\Windows NT
              [20/09/2009|13:16] C:\Program Files\Windows Photo Gallery
              [28/10/2009|16:18] C:\Program Files\Windows Portable Devices
              [20/09/2009|13:16] C:\Program Files\Windows Sidebar
              [11/09/2009|22:27] C:\Program Files\WinRAR
              [14/07/2009|07:05] C:\Program Files\Wireless Console 2
              [04/10/2009|00:01] C:\Program Files\Wondershare
              [15/11/2009|14:15] C:\Program Files\WowCartographe

              --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

              [11/09/2009|16:22] C:\Program Files\Common Files\Adobe
              [08/10/2009|22:31] C:\Program Files\Common Files\Blizzard Entertainment
              [14/07/2009|06:01] C:\Program Files\Common Files\DESIGNER
              [11/09/2009|23:45] C:\Program Files\Common Files\InstallShield
              [14/07/2009|06:08] C:\Program Files\Common Files\LightScribe
              [10/10/2009|22:04] C:\Program Files\Common Files\Microsoft Games
              [04/10/2009|10:38] C:\Program Files\Common Files\microsoft shared
              [11/09/2009|17:49] C:\Program Files\Common Files\PX Storage Engine
              [02/11/2006|12:18] C:\Program Files\Common Files\Services
              [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
              [31/10/2009|12:59] C:\Program Files\Common Files\Steam
              [20/09/2009|13:16] C:\Program Files\Common Files\System
              [11/09/2009|16:23] C:\Program Files\Common Files\Windows Live
              [21/11/2009|20:14] C:\Program Files\Common Files\Wise Installation Wizard
              [11/09/2009|17:58] C:\Program Files\Common Files\Yahoo!

              --------------------\\ Process

              ( 64 Processes )

              ... OK !

              --------------------\\ Recherche avec S_Lop

              Aucun fichier / dossier Lop trouvé !

              --------------------\\ Recherche de Fichiers / Dossiers Lop

              Aucun fichier / dossier Lop trouvé !

              --------------------\\ Verification du Registre

              ..... OK !

              --------------------\\ Verification du fichier Hosts

              Fichier Hosts PROPRE

              --------------------\\ Recherche de fichiers avec Catchme

              catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2009-12-27 16:54:08
              Windows 6.0.6002 Service Pack 2 NTFS
              scanning hidden processes ...
              scanning hidden files ...
              scan completed successfully
              hidden processes: 0
              hidden files: 0

              --------------------\\ Recherche d'autres infections

              --------------------\\ Cracks & Keygens ..

              C:\Users\Benjamin\Documents\ophcrack-xp-livecd-2.1.0.iso
              C:\Users\Benjamin\logiciels\Ashampoo Burning Studio 9.05\CK\Keygen 1.exe
              C:\Users\Benjamin\logiciels\Fruity Loops 7 fullrar\Crack
              C:\Users\Benjamin\logiciels\Fruity Loops 7 fullrar\Crack\crack.exe

              [F:7][D:4]-> C:\Users\Benjamin\AppData\Local\Temp
              [F:22][D:1]-> C:\Users\Benjamin\AppData\Roaming\MICROS~1\Windows\Cookies
              [F:84][D:4]-> C:\Users\Benjamin\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
              [F:1][D:1]-> C:\$Recycle.Bin

              1 - "C:\Lop SD\LopR_1.txt" - 21/10/2009|12:58 - Option : [1]
              2 - "C:\Lop SD\LopR_2.txt" - 21/10/2009|13:27 - Option : [2]
              3 - "C:\Lop SD\LopR_3.txt" - 14/11/2009|14:35 - Option : [1]
              4 - "C:\Lop SD\LopR_4.txt" - 14/11/2009|14:48 - Option : [2]
              5 - "C:\Lop SD\LopR_5.txt" - 15/11/2009|11:31 - Option : [1]
              6 - "C:\Lop SD\LopR_6.txt" - 15/11/2009|12:22 - Option : [2]
              7 - "C:\Lop SD\LopR_7.txt" - 27/12/2009|12:28 - Option : [1]
              8 - "C:\Lop SD\LopR_8.txt" - 27/12/2009|16:55 - Option : [4]

              --------------------\\ Fin du rapport a 16:55:54
              [ UAC => 1 ]

              merci a toi
              1. attends lop SD a raté quelque chose :

                ▶ Double-clique sur le raccourci Lop S&D présent sur le Bureau,

                ▶ Sélectionne entièrement ci-dessous , puis clic droit et choisir Copier

                C:\ProgramData\Proc defy window jugs

                ▶ Relance Lop S&D

                ▶ Choisis Option 4 : LopScript

                ▶ Une page blanche va s'ouvrir , clic droit dessus et choisir Coller

                ▶ Ferme la page , il sera demandé de l'enregistrer , cliquer sur [Enregistrer]

                ▶ A l'issue du scan, le bloc notes va s'ouvrir avec le résultat de la recherche, copie - colle les résultats a ta prochaine réponse.

                1. Voila, désolé j ai mis du temps, lendemain de noel oblige^^

                  --------------------\\ Lop S&D 4.2.5-0 XP/Vista

                  Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
                  X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5900 @ 2.20GHz )
                  BIOS : Default System BIOS
                  USER : Benjamin ( Administrator )
                  BOOT : Normal boot
                  C:\ (Local Disk) - NTFS - Total:182 Go (Free:39 Go)
                  D:\ (Local Disk) - NTFS - Total:271 Go (Free:220 Go)
                  E:\ (CD or DVD)
                  G:\ (CD or DVD)

                  "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
                  Option : [1] ( 27/12/2009|12:25 )

                  [ UAC => 0 ]

                  --------------------\\ Listing des dossiers dans Local

                  [04/10/2009|13:25] C:\Users\Benjamin\AppData\Local\Activision
                  [11/09/2009|17:14] C:\Users\Benjamin\AppData\Local\Adobe
                  [11/09/2009|16:19] C:\Users\Benjamin\AppData\Local\Application Data
                  [11/09/2009|17:24] C:\Users\Benjamin\AppData\Local\ASUS
                  [19/12/2009|01:01] C:\Users\Benjamin\AppData\Local\d3d9caps.dat
                  [18/12/2009|14:27] C:\Users\Benjamin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                  [11/09/2009|23:45] C:\Users\Benjamin\AppData\Local\Downloaded Installations
                  [12/09/2009|12:05] C:\Users\Benjamin\AppData\Local\Electronic Arts
                  [25/09/2009|21:54] C:\Users\Benjamin\AppData\Local\GDIPFONTCACHEV1.DAT
                  [11/09/2009|17:49] C:\Users\Benjamin\AppData\Local\Google
                  [11/09/2009|16:19] C:\Users\Benjamin\AppData\Local\Historique
                  [26/12/2009|11:35] C:\Users\Benjamin\AppData\Local\IconCache.db
                  [25/12/2009|09:48] C:\Users\Benjamin\AppData\Local\Microsoft
                  [10/10/2009|17:58] C:\Users\Benjamin\AppData\Local\Microsoft Corporation
                  [05/11/2009|11:00] C:\Users\Benjamin\AppData\Local\Microsoft Games
                  [12/09/2009|09:08] C:\Users\Benjamin\AppData\Local\Microsoft Help
                  [11/09/2009|18:07] C:\Users\Benjamin\AppData\Local\Mozilla
                  [18/09/2009|18:20] C:\Users\Benjamin\AppData\Local\O&O
                  [11/09/2009|16:31] C:\Users\Benjamin\AppData\Local\Power2Go
                  [11/10/2009|20:41] C:\Users\Benjamin\AppData\Local\PunkBuster
                  [05/11/2009|23:47] C:\Users\Benjamin\AppData\Local\PUTTY.RND
                  [03/11/2009|12:30] C:\Users\Benjamin\AppData\Local\Rockstar Games
                  [27/12/2009|12:23] C:\Users\Benjamin\AppData\Local\temp
                  [11/09/2009|16:19] C:\Users\Benjamin\AppData\Local\Temporary Internet Files
                  [21/10/2009|17:36] C:\Users\Benjamin\AppData\Local\VirtualStore

                  --------------------\\ Tâches planifiées dans C:\Windows\tasks

                  [24/12/2009 23:58][--a------] C:\Windows\tasks\Spybot - Search & Destroy - Scheduled Task.job
                  [27/12/2009 12:11][--a------] C:\Windows\tasks\Maintenance en 1 clic.job
                  [27/12/2009 12:10][--a------] C:\Windows\tasks\GlaryInitialize.job
                  [27/12/2009 12:10][--ah-----] C:\Windows\tasks\SA.DAT
                  [26/12/2009 11:35][--a------] C:\Windows\tasks\SCHEDLGU.TXT

                  --------------------\\ Listing des dossiers dans C:\ProgramData

                  [12/09/2009|00:02] C:\ProgramData\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
                  [19/09/2009|12:23] C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
                  [14/07/2009|06:03] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
                  [11/09/2009|16:22] C:\ProgramData\Adobe
                  [02/11/2006|14:02] C:\ProgramData\Application Data
                  [11/09/2009|17:24] C:\ProgramData\ASUS
                  [14/07/2009|06:46] C:\ProgramData\Atheros
                  [25/12/2009|10:10] C:\ProgramData\Avira
                  [24/09/2009|23:02] C:\ProgramData\Azureus
                  [08/10/2009|16:00] C:\ProgramData\Blizzard
                  [04/10/2009|14:48] C:\ProgramData\Electronic Arts
                  [02/11/2006|14:02] C:\ProgramData\Favorites
                  [20/10/2009|06:10] C:\ProgramData\Film Curb Part
                  [25/09/2009|14:31] C:\ProgramData\KONAMI
                  [11/09/2009|17:42] C:\ProgramData\LightScribe
                  [11/09/2009|22:29] C:\ProgramData\Malwarebytes
                  [01/10/2009|17:20] C:\ProgramData\Messenger Plus!
                  [22/10/2009|16:41] C:\ProgramData\Microsoft
                  [10/12/2009|07:45] C:\ProgramData\Microsoft Help
                  [11/09/2009|17:01] C:\ProgramData\Norton
                  [14/07/2009|06:09] C:\ProgramData\NortonInstaller
                  [14/09/2009|18:37] C:\ProgramData\ntuser.pol
                  [20/11/2009|07:32] C:\ProgramData\NVIDIA
                  [27/12/2009|12:11] C:\ProgramData\nvModes.001
                  [27/12/2009|12:11] C:\ProgramData\nvModes.dat
                  [19/09/2009|11:33] C:\ProgramData\P4G
                  [11/09/2009|17:54] C:\ProgramData\Pinnacle
                  [20/10/2009|06:10] C:\ProgramData\Proc defy window jugs
                  [25/12/2009|10:22] C:\ProgramData\Spybot - Search & Destroy
                  [02/11/2006|14:02] C:\ProgramData\Start Menu
                  [25/12/2009|03:02] C:\ProgramData\sysReserve.ini
                  [14/07/2009|06:08] C:\ProgramData\Temp
                  [02/11/2006|14:02] C:\ProgramData\Templates
                  [19/09/2009|12:23] C:\ProgramData\TuneUp Software
                  [11/09/2009|17:58] C:\ProgramData\VideoSpin

                  --------------------\\ Listing des dossiers dans C:\Program Files

                  [14/07/2009|06:03] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
                  [03/10/2009|17:55] C:\Program Files\ActiveX Control Pad
                  [11/10/2009|19:31] C:\Program Files\Activision
                  [11/09/2009|16:22] C:\Program Files\Adobe
                  [18/11/2009|19:40] C:\Program Files\AGEIA Technologies
                  [12/09/2009|10:36] C:\Program Files\Ashampoo
                  [11/09/2009|21:00] C:\Program Files\ASUS
                  [14/07/2009|06:46] C:\Program Files\Atheros
                  [14/07/2009|06:39] C:\Program Files\ATKGFNEX
                  [26/09/2009|21:46] C:\Program Files\Auslogics
                  [25/12/2009|10:10] C:\Program Files\Avira
                  [11/09/2009|23:39] C:\Program Files\AviSynth 2.5
                  [11/09/2009|22:26] C:\Program Files\CCleaner
                  [14/07/2009|06:45] C:\Program Files\Cisco
                  [11/09/2009|18:09] C:\Program Files\CodeStuff
                  [26/12/2009|00:25] C:\Program Files\Common Files
                  [24/09/2009|18:55] C:\Program Files\Counter-Strike 2D
                  [16/10/2009|19:46] C:\Program Files\Counter-Strike Source
                  [11/09/2009|17:11] C:\Program Files\CyberLink
                  [11/09/2009|18:16] C:\Program Files\DAEMON Tools Lite
                  [14/07/2009|07:10] C:\Program Files\Downloaded Installations
                  [21/11/2009|19:49] C:\Program Files\Eidos
                  [13/10/2009|11:35] C:\Program Files\Electronic Arts
                  [11/09/2009|18:09] C:\Program Files\eRightSoft
                  [25/12/2009|10:07] C:\Program Files\ESET
                  [20/10/2009|06:09] C:\Program Files\Film Curb Part
                  [06/12/2009|14:54] C:\Program Files\GIMP-2.0
                  [19/09/2009|11:33] C:\Program Files\Glary Utilities
                  [11/09/2009|18:13] C:\Program Files\Google
                  [01/11/2009|19:35] C:\Program Files\HTTP-Tunnel
                  [22/11/2009|00:47] C:\Program Files\InstallShield Installation Information
                  [14/07/2009|06:20] C:\Program Files\Intel
                  [10/12/2009|07:46] C:\Program Files\Internet Explorer
                  [11/11/2009|15:39] C:\Program Files\Java
                  [25/09/2009|14:20] C:\Program Files\KONAMI
                  [06/11/2009|21:21] C:\Program Files\Lavalys
                  [25/12/2009|20:45] C:\Program Files\List_Kill'em
                  [25/12/2009|21:13] C:\Program Files\Malwarebytes' Anti-Malware
                  [08/11/2009|11:15] C:\Program Files\Messenger Plus! Live
                  [11/10/2009|14:46] C:\Program Files\Microsoft
                  [25/10/2009|18:02] C:\Program Files\Microsoft Games
                  [03/10/2009|21:14] C:\Program Files\Microsoft Games for Windows - LIVE
                  [14/07/2009|06:01] C:\Program Files\Microsoft Office
                  [11/10/2009|14:50] C:\Program Files\Microsoft Office Outlook Connector
                  [11/09/2009|18:33] C:\Program Files\Microsoft Silverlight
                  [11/09/2009|16:25] C:\Program Files\Microsoft SQL Server Compact Edition
                  [14/07/2009|06:01] C:\Program Files\Microsoft Visual Studio
                  [12/09/2009|09:08] C:\Program Files\Microsoft Visual Studio 8
                  [10/10/2009|17:58] C:\Program Files\Microsoft Windows 7 Upgrade Advisor
                  [12/09/2009|09:16] C:\Program Files\Microsoft Works
                  [14/07/2009|06:01] C:\Program Files\Microsoft.NET
                  [20/09/2009|13:16] C:\Program Files\Movie Maker
                  [27/12/2009|12:11] C:\Program Files\Mozilla Firefox
                  [12/09/2009|09:12] C:\Program Files\MSBuild
                  [13/09/2009|09:47] C:\Program Files\MSXML 4.0
                  [11/11/2009|15:52] C:\Program Files\NetBeans 6.7.1
                  [01/11/2009|19:34] C:\Program Files\OpenSSH
                  [14/07/2009|07:09] C:\Program Files\P4G
                  [11/09/2009|17:58] C:\Program Files\Pinnacle
                  [02/10/2009|19:23] C:\Program Files\Project64 1.6
                  [14/07/2009|07:03] C:\Program Files\Realtek
                  [02/11/2006|13:37] C:\Program Files\Reference Assemblies
                  [21/09/2009|17:48] C:\Program Files\RobotProg
                  [02/11/2009|20:38] C:\Program Files\Rockstar Games
                  [11/11/2009|15:55] C:\Program Files\sges-v3-prelude
                  [02/11/2009|20:32] C:\Program Files\SocksCapV2
                  [19/09/2009|11:42] C:\Program Files\splus
                  [02/10/2009|06:07] C:\Program Files\Spybot - Search & Destroy
                  [26/12/2009|09:50] C:\Program Files\Steam
                  [11/11/2009|15:41] C:\Program Files\Sun
                  [14/07/2009|07:07] C:\Program Files\Synaptics
                  [13/12/2009|22:58] C:\Program Files\Teamspeak2_RC2
                  [14/07/2009|07:04] C:\Program Files\Temp
                  [25/09/2009|21:49] C:\Program Files\Thrustmaster
                  [25/12/2009|22:50] C:\Program Files\trend micro
                  [19/09/2009|12:24] C:\Program Files\TuneUp Utilities 2009
                  [02/11/2006|14:01] C:\Program Files\Uninstall Information
                  [25/09/2009|23:30] C:\Program Files\UT2004
                  [11/09/2009|21:42] C:\Program Files\VideoLAN
                  [28/10/2009|11:16] C:\Program Files\Volition Inc
                  [24/09/2009|23:01] C:\Program Files\Vuze
                  [20/09/2009|13:16] C:\Program Files\Windows Calendar
                  [20/09/2009|13:16] C:\Program Files\Windows Collaboration
                  [20/09/2009|13:16] C:\Program Files\Windows Defender
                  [20/09/2009|13:16] C:\Program Files\Windows Journal
                  [11/10/2009|14:50] C:\Program Files\Windows Live
                  [11/09/2009|16:24] C:\Program Files\Windows Live SkyDrive
                  [10/12/2009|07:46] C:\Program Files\Windows Mail
                  [28/10/2009|16:18] C:\Program Files\Windows Media Player
                  [02/11/2006|13:37] C:\Program Files\Windows NT
                  [20/09/2009|13:16] C:\Program Files\Windows Photo Gallery
                  [28/10/2009|16:18] C:\Program Files\Windows Portable Devices
                  [20/09/2009|13:16] C:\Program Files\Windows Sidebar
                  [11/09/2009|22:27] C:\Program Files\WinRAR
                  [14/07/2009|07:05] C:\Program Files\Wireless Console 2
                  [04/10/2009|00:01] C:\Program Files\Wondershare
                  [15/11/2009|14:15] C:\Program Files\WowCartographe

                  --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

                  [11/09/2009|16:22] C:\Program Files\Common Files\Adobe
                  [08/10/2009|22:31] C:\Program Files\Common Files\Blizzard Entertainment
                  [14/07/2009|06:01] C:\Program Files\Common Files\DESIGNER
                  [11/09/2009|23:45] C:\Program Files\Common Files\InstallShield
                  [14/07/2009|06:08] C:\Program Files\Common Files\LightScribe
                  [10/10/2009|22:04] C:\Program Files\Common Files\Microsoft Games
                  [04/10/2009|10:38] C:\Program Files\Common Files\microsoft shared
                  [11/09/2009|17:49] C:\Program Files\Common Files\PX Storage Engine
                  [02/11/2006|12:18] C:\Program Files\Common Files\Services
                  [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
                  [31/10/2009|12:59] C:\Program Files\Common Files\Steam
                  [20/09/2009|13:16] C:\Program Files\Common Files\System
                  [11/09/2009|16:23] C:\Program Files\Common Files\Windows Live
                  [21/11/2009|20:14] C:\Program Files\Common Files\Wise Installation Wizard
                  [11/09/2009|17:58] C:\Program Files\Common Files\Yahoo!

                  --------------------\\ Process

                  ( 67 Processes )

                  ... OK !

                  --------------------\\ Recherche avec S_Lop

                  Aucun fichier / dossier Lop trouvé !

                  --------------------\\ Recherche de Fichiers / Dossiers Lop

                  Aucun fichier / dossier Lop trouvé !

                  --------------------\\ Verification du Registre

                  ..... OK !

                  --------------------\\ Verification du fichier Hosts

                  Fichier Hosts PROPRE

                  --------------------\\ Recherche de fichiers avec Catchme

                  catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2009-12-27 12:26:39
                  Windows 6.0.6002 Service Pack 2 NTFS
                  scanning hidden processes ...
                  scanning hidden files ...
                  scan completed successfully
                  hidden processes: 0
                  hidden files: 0

                  --------------------\\ Recherche d'autres infections

                  --------------------\\ Cracks & Keygens ..

                  C:\Users\Benjamin\Documents\ophcrack-xp-livecd-2.1.0.iso
                  C:\Users\Benjamin\logiciels\Ashampoo Burning Studio 9.05\CK\Keygen 1.exe
                  C:\Users\Benjamin\logiciels\Fruity Loops 7 fullrar\Crack
                  C:\Users\Benjamin\logiciels\Fruity Loops 7 fullrar\Crack\crack.exe

                  [F:1][D:3]-> C:\Users\Benjamin\AppData\Local\Temp
                  [F:22][D:1]-> C:\Users\Benjamin\AppData\Roaming\MICROS~1\Windows\Cookies
                  [F:84][D:4]-> C:\Users\Benjamin\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
                  [F:3][D:2]-> C:\$Recycle.Bin

                  1 - "C:\Lop SD\LopR_1.txt" - 21/10/2009|12:58 - Option : [1]
                  2 - "C:\Lop SD\LopR_2.txt" - 21/10/2009|13:27 - Option : [2]
                  3 - "C:\Lop SD\LopR_3.txt" - 14/11/2009|14:35 - Option : [1]
                  4 - "C:\Lop SD\LopR_4.txt" - 14/11/2009|14:48 - Option : [2]
                  5 - "C:\Lop SD\LopR_5.txt" - 15/11/2009|11:31 - Option : [1]
                  6 - "C:\Lop SD\LopR_6.txt" - 15/11/2009|12:22 - Option : [2]
                  7 - "C:\Lop SD\LopR_7.txt" - 27/12/2009|12:28 - Option : [1]

                  --------------------\\ Fin du rapport a 12:28:47
                  [ UAC => 1 ]
                  1. Télécharge LopSD.exe sur ton Bureau
                    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

                    Clique sur le raccourci LopSD présent sur le Bureau pour lancer LopSD.

                    Choisis la langue F pour Français puis valide par Entrée.

                    Choisis l'option Recherche en saisissant 1 puis valide par Entrée
                    .
                    * Patiente jusqu'à la fin du scan
                    * Poste le rapport généré qui se trouve ici => (C:\lopR.txt)

                    (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

                    a+
                    • 1
                    • 2
                    • 3
                    • 4