Virus aidé moi SVP

dekl38 -  
Bonjour,
j'étais sur un cite de film en streaming, quand on m'a dit de telecharger un logiciel. et depuis quand sur google j'appuis sr des lien une page de pub apparet et la page normale n'apparet pas.
mon antivirus (trend micro PC-clining 2007 n'a rien trouvé, ni spywaire octor. que fair?
Configuration: Windows XP
Internet Explorer 7.0

45 réponses

Résumé de la discussion

Problème rencontré : des redirections publicitaires apparaissent lors des recherches après avoir visité un site de streaming, et l'antivirus ne détecte pas clairement le malware sous Windows XP et Internet Explorer 7. Plusieurs réponses préconisent des outils de détection et de nettoyage, tels que HijackThis et d'autres utilitaires, puis des scans en mode sans échec pour identifier et supprimer les éléments indésirables. Des options incluent des analyses en ligne et des scans système avec des rapports à partager, puis la sélection et la suppression des entrées et fichiers malveillants détectés. Pour éviter des pertes, il est utile de privilégier des ressources reconnues et de sauvegarder les données; certains outils recommandés exigent des précautions.

Bobot (l’IA à votre service)
  1. dekl38
    salut voici le raport

    SDFix: Version 1.130

    Run by claude the boss!!!!! on 22/01/2008 at 19:28

    Microsoft Windows XP [version 5.1.2600]

    Running From: C:\SDFix\SDFix

    Safe Mode:
    Checking Services:

    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting...

    Normal Mode:
    Checking Files:

    No Trojan Files Found

    Removing Temp Files...

    ADS Check:

    C:\WINDOWS
    No streams found.

    C:\WINDOWS\system32
    No streams found.

    C:\WINDOWS\system32\svchost.exe
    No streams found.

    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.

    Final Check:

    catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-01-22 19:48:51
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 417

    Remaining Services:
    ------------------

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
    "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
    "C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL France"
    "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\eMule\\eMule.exe"="C:\\Program Files\\eMule\\eMule.exe:*:Enabled:eMule Plus"
    "C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
    "C:\\Program Files\\FlashGet\\FlashGet.exe"="C:\\Program Files\\FlashGet\\FlashGet.exe:*:Enabled:Flashget"
    "C:\\Program Files\\Fichiers communs\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Fichiers communs\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    Remaining Files:
    ---------------

    Files with Hidden Attributes:

    Tue 7 Feb 2006 218 A.SHR --- "C:\BOOT.BAK"
    Sun 7 Oct 2007 27,928 A..H. --- "C:\WINDOWS\NETVISION.exe"
    Sun 6 Jan 2008 72 A.SH. --- "C:\WINDOWS\SAAF8CD2E.tmp"
    Mon 10 May 2004 54,384 A..H. --- "C:\Program Files\AOL 9.0\aolphx.exe"
    Mon 10 May 2004 156,784 A..H. --- "C:\Program Files\AOL 9.0\aoltray.exe"
    Mon 10 May 2004 31,344 A..H. --- "C:\Program Files\AOL 9.0\RBM.exe"
    Mon 10 May 2004 54,384 A..H. --- "C:\Program Files\AOL 9.0b\aolphx.exe"
    Mon 10 May 2004 156,784 A..H. --- "C:\Program Files\AOL 9.0b\aoltray.exe"
    Mon 10 May 2004 31,344 A..H. --- "C:\Program Files\AOL 9.0b\RBM.exe"
    Wed 10 Oct 2007 5,903,928 A..H. --- "C:\Program Files\Picasa2\setup.exe"
    Thu 10 Jan 2008 88 ..SHR --- "C:\WINDOWS\system32\C758AF80CF.sys"
    Thu 10 Jan 2008 2,828 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
    Mon 9 Apr 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Tue 13 Nov 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP583\A0185213.sys"
    Wed 14 Nov 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP583\A0185263.sys"
    Wed 14 Nov 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP585\A0186726.sys"
    Wed 21 Nov 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP593\A0194555.sys"
    Sun 9 Dec 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP597\A0197382.sys"
    Fri 21 Dec 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP600\A0197755.sys"
    Thu 27 Dec 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP602\A0197987.sys"
    Thu 27 Dec 2007 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP619\A0202227.sys"
    Wed 9 Jan 2008 2,828 A.SH. --- "C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP621\A0204243.sys"
    Fri 6 Apr 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
    Fri 24 Aug 2007 19,561,840 A..H. --- "C:\Documents and Settings\HP_Propri‚taire\Local Settings\Temp\BIT92.tmp"
    Wed 26 Sep 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\778fd2fc3fe6b905e366b5ddbba384c8\BIT243.tmp"
    Mon 17 Dec 2007 88,064 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL0005.tmp"
    Thu 10 Jan 2008 89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL0236.tmp"
    Thu 10 Jan 2008 89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL1229.tmp"
    Thu 10 Jan 2008 91,648 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL1318.tmp"
    Thu 10 Jan 2008 92,160 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL1918.tmp"
    Thu 10 Jan 2008 90,112 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2007.tmp"
    Thu 10 Jan 2008 89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2173.tmp"
    Thu 10 Jan 2008 90,112 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2244.tmp"
    Thu 10 Jan 2008 89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL2730.tmp"
    Thu 10 Jan 2008 90,112 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL3058.tmp"
    Thu 10 Jan 2008 89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL3160.tmp"
    Thu 10 Jan 2008 89,600 A..H. --- "C:\Documents and Settings\papa\Mes documents\MAGO\CF\~WRL3395.tmp"

    Finished!
    1. ^^Marie^^
      OK

      Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
      http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
      Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
      • Redémarre ton ordinateur
      • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
      • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
      • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
      • Choisis ton compte.
      Déroule la liste des instructions ci-dessous :
      • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
      • Appuie sur Y pour commencer le processus de nettoyage.
      • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
      • Appuie sur une touche pour redémarrer le PC.
      • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
      • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
      • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
      • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
      • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

      A++

      QQu'un d'autre prendra la suite
      Bon courage
      1. dekl38
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 20:49:06, on 20/01/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16574)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\SYSTEM32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\a-squared Free\a2service.exe
        C:\WINDOWS\System32\FTRTSVC.exe
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\WINDOWS\system32\nvsvc32.exe
        C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
        C:\Program Files\Spyware Doctor\svcntaux.exe
        C:\Program Files\Spyware Doctor\swdsvc.exe
        C:\WINDOWS\system32\svchost.exe
        C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
        C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe
        C:\WINDOWS\System32\alg.exe
        C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
        C:\WINDOWS\system32\wscntfy.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Spyware Doctor\SDTrayApp.exe
        C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
        C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Windows Live\Messenger\usnsvc.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://portail.free.fr/
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684CC} - C:\Program Files\Helper\findsiteonline.dll (file missing)
        O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKLM\..\Policies\Explorer\Run: [Service] C:\WINDOWS\winlogon32.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
        O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = -Fi 11g USB adapter\WLANUTL.exe
        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
        O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?7079462f846e47f0a9c3a40a7ed7f044
        O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?7079462f846e47f0a9c3a40a7ed7f044
        O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
        O9 - Extra button: Xanadu - {5CC384BB-1326-11D5-F4AE-00C04923F885} - C:\Program Files\Foreignword\Xanadu\XanaduLaunch.exe
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
        O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
        O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
        O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
        O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
        O21 - SSODL: printers - {B1DB1ADB-10A4-4F52-8691-EEA69B375453} - libwinets.dll (file missing)
        O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
        O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
        O23 - Service: Protection Trend Micro contre les programmes espions (PcScnSrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
        O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
        O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
        O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
        O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
        O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
        O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
        1. ^^Marie^^
          F - Hijackthis - Outil de diagnostic et réparation
          télécharge HijackThis ici:
          http://telechargement.zebulon.fr/138-hijackthis-1991.html
          Dézippe le dans un dossier prévu à cet effet.
          Par exemple C:\hijackthis < Enregistre le bien dans c : !
          Démo : (Merci a Balltrap34 pour cette réalisation)
          http://pageperso.aol.fr/balltrap34/Hijenr.gif
          Lance le puis:
          clique sur "do a system scan and save logfile" (cf démo)
          faire un copier coller du log entier sur le forum
          Démo : (Merci a Balltrap34 pour cette réalisation)
          http://pageperso.aol.fr/balltrap34/demohijack.htm
          http://www.tutoriaux-excalibur.com/hijackthis.htm
          https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

          Bon courage

          A+

          4. dekl38
            apport Lopxp fait le 20/01/2008 à 9:55:26
            Exécuté dans : C:\Program Files\Lopxp 
            

___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS\tasks\Connexion facile à Internet.job 
Fichier exécuté => C:\Program Files\Easy Internet signup\HPSdpApp.exe /remind /LaunchPoint reminder

C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job 
Fichier exécuté => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

21/02/2006 15:44:58 ... Adobe -----= Adobe
02/12/2005 20:04:36 ... AOL -------= AOL
30/07/2007 16:33:34 ... AOLDOW~1 --= AOL Downloads
30/07/2007 16:40:04 ... AOLOCP~1 --= AOL OCP
03/01/2005 03:20:58 ... APPLEC~1 --= Apple Computer
24/05/2007 15:44:21 ... BOONTY ----= BOONTY
13/12/2006 18:25:01 ... BVRPSO~1 --= BVRP Software
13/11/2007 22:55:24 ... Corel -----= Corel
18/01/2008 16:32:32 ... DVDSHR~1 --= DVD Shrink
27/09/2007 17:30:38 ... ELABOR~1 --= Elaborate Bytes
06/04/2007 16:15:02 ... Google ----= Google
13/11/2007 21:58:32 ... GOOGLE~1 --= Google Updater
03/01/2005 03:05:46 ... HP --------= HP
03/01/2005 03:16:24 ... INSTAL~1 --= InstallShield
20/04/2007 21:12:55 ... MESSEN~1 --= Messenger Plus!
25/11/2004 04:25:08 ... MICROS~1 --= Microsoft
11/03/2006 12:55:17 ... MUVEET~1 --= muvee Technologies
03/01/2005 03:21:02 ... QUICKT~1 --= QuickTime
03/01/2005 02:48:24 ... SBSI ------= SBSI
13/11/2007 22:06:58 ... Skype -----= Skype
03/01/2005 03:05:06 ... Sonic -----= Sonic
12/12/2006 17:51:00 ... SONYER~1 --= Sony Ericsson
02/11/2006 17:58:58 ... SPYBOT~1 --= Spybot - Search & Destroy
03/01/2005 03:35:09 ... Symantec --= Symantec
12/12/2006 17:50:51 ... Teleca ----= Teleca
07/04/2007 08:04:15 ... TEMP ------= TEMP
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
03/12/2005 13:50:29 ... UDL -------= UDL
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
06/04/2007 16:01:45 ... WINDOW~1 --= Windows Genuine Advantage
14/04/2007 18:59:54 ... WINDOW~2 --= Windows Live Toolbar
20/10/2007 20:22:14 ... WINDOW~3 --= WindowsLiveInstaller
29/05/2007 20:03:50 ... WinZip ----= WinZip
20/10/2007 20:21:35 ... WLINST~1 --= WLInstaller
18/10/2007 16:12:47 ... YAHOO!~1 --= Yahoo! Companion

+- C:\Documents and Settings\cherinetmj\Application Data

30/07/2007 16:47:59 ... acccore ---= acccore
27/02/2006 11:36:53 ... Adobe -----= Adobe
27/02/2006 11:37:19 ... AdobeUM ---= AdobeUM
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
19/04/2007 17:12:19 ... EACCEL~1 --= eAcceleration
12/02/2006 19:57:59 ... EPSON -----= EPSON
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
25/04/2007 17:15:13 ... HP --------= HP
26/04/2006 10:15:32 ... HPQ -------= HPQ
12/02/2006 19:27:50 ... IDENTI~1 --= Identities
08/04/2006 20:13:16 ... INTERV~1 --= InterVideo
07/05/2007 17:11:31 ... ItsLabel --= ItsLabel
13/04/2007 18:21:45 ... Lavasoft --= Lavasoft
06/07/2006 14:42:30 ... LEADER~1 --= Leadertech
24/04/2007 21:09:04 ... LimeWire --= LimeWire
17/02/2006 19:08:31 ... MACROM~1 --= Macromedia
18/01/2008 19:31:56 ... MEDIAP~1 --= Media Player Classic
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
12/02/2006 19:27:50 ... SAMPLE~1 --= SampleView
06/07/2006 14:42:35 ... Sonic -----= Sonic
04/05/2007 13:41:25 ... Sun -------= Sun
12/02/2006 19:27:50 ... Symantec --= Symantec
13/04/2007 17:49:38 ... Talkback --= Talkback
22/12/2006 20:38:12 ... Teleca ----= Teleca
24/05/2006 11:06:51 ... Template --= Template
01/10/2007 20:06:36 ... U3 --------= U3

+- C:\Documents and Settings\cherinetmj\Local Settings\Application Data

27/02/2006 11:36:53 ... Adobe -----= Adobe
30/07/2007 16:40:01 ... AOLOCP~1 --= AOL OCP
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
12/02/2006 19:27:50 ... APPLIC~1 --= ApplicationHistory
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
22/09/2007 10:05:12 ... HP --------= HP
26/01/2007 13:21:25 ... IDENTI~1 --= Identities
22/09/2007 10:05:20 ... ISOLAT~1 --= IsolatedStorage
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
01/09/2007 10:33:33 ... MICROV~1 --= MicroVision Applications
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
01/11/2007 15:38:53 ... PCHealth --= PCHealth
12/02/2006 19:27:50 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\claude the boss!!!!!\Application Data

01/08/2007 19:53:19 ... acccore ---= acccore
17/04/2006 17:53:52 ... ACOUST~1 --= Acoustica
12/02/2006 18:52:14 ... Adobe -----= Adobe
16/02/2006 19:20:30 ... AdobeUM ---= AdobeUM
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
25/02/2006 19:00:30 ... ArcSoft ---= ArcSoft
13/11/2007 23:11:48 ... Corel -----= Corel
23/04/2007 20:11:49 ... EACCEL~1 --= eAcceleration
03/09/2006 17:50:59 ... EPSON -----= EPSON
17/03/2006 20:49:03 ... FarStone --= FarStone
12/05/2007 07:03:17 ... FlashGet --= FlashGet
16/02/2006 18:33:06 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:13 ... HP --------= HP
11/04/2006 15:10:51 ... HPQ -------= HPQ
07/02/2006 21:00:29 ... IDENTI~1 --= Identities
07/02/2006 21:05:46 ... INTERV~1 --= InterVideo
07/05/2007 10:51:28 ... ItsLabel --= ItsLabel
02/05/2007 13:46:15 ... ivivo -----= ivivo
14/04/2007 09:43:38 ... Lavasoft --= Lavasoft
11/02/2006 11:36:45 ... LEADER~1 --= Leadertech
16/02/2006 18:32:59 ... MACROM~1 --= Macromedia
19/02/2007 15:19:47 ... MEDIAP~1 --= Media Player Classic
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
17/02/2006 20:21:16 ... MSNINS~1 --= MSNInstaller
12/04/2006 10:45:01 ... MUVEET~1 --= muvee Technologies
06/01/2008 15:13:24 ... PCTOOL~1 --= PC Tools
07/02/2006 21:00:29 ... SAMPLE~1 --= SampleView
14/11/2007 12:50:58 ... Skype -----= Skype
26/09/2007 13:36:27 ... SlySoft ---= SlySoft
11/02/2006 11:40:52 ... Sonic -----= Sonic
06/01/2008 16:54:00 ... STAROF~1 --= StarOffice8
27/02/2006 11:22:04 ... Sun -------= Sun
07/02/2006 21:00:29 ... Symantec --= Symantec
07/04/2007 14:03:22 ... Talkback --= Talkback
12/12/2006 17:53:12 ... Teleca ----= Teleca
18/05/2007 21:15:16 ... vlc(2) ----= vlc(2)
04/06/2007 11:43:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\claude the boss!!!!!\Local Settings\Application Data

12/02/2006 18:52:14 ... Adobe -----= Adobe
01/08/2007 19:52:31 ... AOLOCP~1 --= AOL OCP
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
07/02/2006 21:00:29 ... APPLIC~1 --= ApplicationHistory
25/12/2006 13:08:11 ... BVRPSO~1 --= BVRP Software
06/04/2007 20:23:31 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:02 ... HP --------= HP
17/02/2006 21:35:39 ... IDENTI~1 --= Identities
03/03/2006 11:47:11 ... ISOLAT~1 --= IsolatedStorage
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
11/02/2006 13:02:26 ... MICROV~1 --= MicroVision Applications
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
05/11/2007 21:41:16 ... PCHealth --= PCHealth
12/12/2006 18:11:56 ... SONYER~1 --= Sony Ericsson
13/05/2006 15:00:39 ... WMTOOL~1 --= WMTools Downloaded Files
07/02/2006 21:00:29 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\debby\Application Data

03/12/2005 18:36:07 ... AOL -------= AOL
03/12/2005 18:35:29 ... APPLEC~1 --= Apple Computer
14/01/2006 10:58:49 ... EPSON -----= EPSON
03/12/2005 18:35:29 ... IDENTI~1 --= Identities
06/12/2005 20:28:41 ... INTERV~1 --= InterVideo
20/01/2006 20:46:54 ... LEADER~1 --= Leadertech
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... SAMPLE~1 --= SampleView
20/01/2006 20:46:56 ... Sonic -----= Sonic
03/12/2005 18:35:28 ... Symantec --= Symantec

+- C:\Documents and Settings\debby\Local Settings\Application Data

03/12/2005 18:35:28 ... APPLEC~1 --= Apple Computer
03/12/2005 18:35:28 ... APPLIC~1 --= ApplicationHistory
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Default User\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
25/11/2004 04:25:34 ... IDENTI~1 --= Identities
25/11/2004 04:25:34 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... SAMPLE~1 --= SampleView
01/12/2005 20:37:35 ... Symantec --= Symantec
20/09/2007 19:26:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\Default User\Local Settings\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
01/12/2005 20:37:35 ... APPLIC~1 --= ApplicationHistory
25/11/2004 04:25:38 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Elo\Application Data

18/12/2005 15:30:50 ... AOL -------= AOL
18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
21/01/2006 14:13:41 ... EPSON -----= EPSON
18/12/2005 15:30:19 ... IDENTI~1 --= Identities
20/12/2005 11:54:04 ... INTERV~1 --= InterVideo
20/12/2005 14:15:22 ... LEADER~1 --= Leadertech
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... SAMPLE~1 --= SampleView
20/12/2005 14:15:26 ... Sonic -----= Sonic
18/12/2005 15:30:19 ... Symantec --= Symantec
16/01/2006 17:11:46 ... Template --= Template

+- C:\Documents and Settings\Elo\Local Settings\Application Data

18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
18/12/2005 15:30:19 ... APPLIC~1 --= ApplicationHistory
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\papa\Application Data

12/01/2008 14:49:52 ... APPLEC~1 --= Apple Computer
12/01/2008 14:51:46 ... EACCEL~1 --= eAcceleration
12/01/2008 14:51:40 ... Google ----= Google
12/01/2008 14:49:52 ... IDENTI~1 --= Identities
12/01/2008 14:52:38 ... MACROM~1 --= Macromedia
12/01/2008 14:49:52 ... MICROS~1 --= Microsoft
12/01/2008 14:49:52 ... SAMPLE~1 --= SampleView
12/01/2008 14:49:52 ... Symantec --= Symantec
12/01/2008 14:49:52 ... Xfire -----= Xfire

+- C:\Documents and Settings\papa\Local Settings\Application Data

12/01/2008 14:49:51 ... APPLEC~1 --= Apple Computer
12/01/2008 14:49:51 ... APPLIC~1 --= ApplicationHistory
12/01/2008 14:51:40 ... Google ----= Google
16/01/2008 11:07:48 ... IDENTI~1 --= Identities
12/01/2008 14:49:51 ... MICROS~1 --= Microsoft
12/01/2008 14:49:51 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

29/05/2007 20:05:06 ... 7-Zip -----= 7-Zip
19/01/2008 09:05:20 ... A-SQUA~1 --= a-squared Free
11/03/2006 23:05:28 ... abcAVI ----= abcAVI
06/04/2007 15:14:39 ... ACCELE~1 --= Acceleration Software
17/04/2006 17:53:36 ... ACOUST~1 --= Acoustica CD Label Maker
21/01/2006 20:35:16 ... ACTIVI~1 --= Activision
03/01/2005 03:18:38 ... Adobe -----= Adobe
30/07/2007 16:36:38 ... AIM6 ------= AIM6
11/03/2006 23:11:14 ... ALCOHO~1 --= Alcohol Soft
27/04/2007 20:13:47 ... ALICET~1 --= Alice Triway Wi-Fi
04/02/2006 13:57:45 ... ALICE_~1 --= Alice_Triway_WiFi
06/04/2007 19:21:11 ... ALWILS~1 --= Alwil Software
02/12/2005 20:04:36 ... AOL9~1.0 --= AOL 9.0
05/02/2006 18:49:52 ... AOL9~1.0A --= AOL 9.0a
05/02/2006 18:50:58 ... AOL9~1.0B --= AOL 9.0b
02/12/2005 20:08:12 ... AOLCOM~1 --= AOL Compagnon
02/12/2005 20:07:59 ... AOLTOO~1 --= AOL Toolbar
25/02/2006 18:53:30 ... ArcSoft ---= ArcSoft
17/04/2006 17:26:23 ... AUDIOC~1 --= Audio CD Maker
13/12/2006 18:26:36 ... AVANQU~1 --= Avanquest update
24/05/2007 15:26:08 ... BOONTY~1 --= BoontyGames
12/04/2007 22:17:54 ... CCleaner --= CCleaner
24/11/2004 02:37:34 ... COMPLU~1 --= ComPlus Applications
02/05/2007 18:25:25 ... CONTRO~1 --= Controle Parental
13/11/2007 22:44:07 ... Corel -----= Corel
05/02/2006 20:13:26 ... COSMOP~1 --= COSMOPOLITAN
02/08/2006 14:31:58 ... Cyanide ---= Cyanide
26/07/2006 19:23:04 ... directx ---= directx
12/12/2006 21:15:29 ... DISC2P~1 --= Disc2Phone
09/05/2006 20:40:30 ... DivX ------= DivX
14/05/2007 19:18:24 ... DRIVER~1 --= Driver-Soft
18/01/2008 16:32:28 ... DVDSHR~1 --= DVD Shrink
02/05/2006 13:51:03 ... EASPOR~1 --= EA SPORTS
06/04/2007 15:14:29 ... EACCEL~1 --= eAcceleration
02/06/2006 17:54:04 ... EASYCD~1.1 --= Easy CD-DA Extractor FR 5.1
03/01/2005 03:31:14 ... EASYIN~1 --= Easy Internet signup
02/06/2006 17:49:39 ... EASYCD~1 --= EasyCDDAExtractor5104
05/02/2006 19:00:47 ... EHMINS~1 --= EHMINSTALL
01/04/2006 17:16:16 ... ELABOR~1 --= Elaborate Bytes
29/05/2007 20:05:17 ... ELECTR~1 --= Electronic Arts
07/04/2007 21:07:09 ... eMule -----= eMule
03/12/2005 13:47:46 ... epson -----= epson
17/03/2006 20:43:33 ... FarStone --= FarStone
25/11/2004 04:26:44 ... FICHIE~1 --= Fichiers communs
07/04/2007 16:05:30 ... FlashGet --= FlashGet
21/10/2007 19:13:25 ... FOREIG~1 --= Foreignword
04/02/2006 14:31:22 ... Generic ---= Generic
03/01/2005 03:33:04 ... Google ----= Google
03/01/2005 03:17:46 ... HEWLET~1 --= Hewlett-Packard
03/01/2005 03:03:54 ... HP --------= HP
18/04/2007 15:28:45 ... INCOMP~1 --= Incomplete
20/06/2006 16:45:11 ... index -----= index
03/01/2005 03:18:01 ... INSTAL~1 --= InstallShield Installation Information
28/12/2005 20:11:32 ... INTERA~1 --= InterActual
25/11/2004 04:27:06 ... INTERN~1 --= Internet Explorer
03/01/2005 03:18:01 ... INTERV~1 --= InterVideo
03/01/2005 03:20:58 ... iPod ------= iPod
07/05/2007 10:50:15 ... ITSLAB~1 --= Its Label
03/01/2005 03:20:58 ... iTunes ----= iTunes
01/05/2007 15:31:36 ... iViVo -----= iViVo
23/09/2007 10:08:06 ... IZArc -----= IZArc
03/01/2005 02:50:27 ... Java ------= Java
05/02/2006 19:01:38 ... JavaSoft --= JavaSoft
16/07/2007 13:51:00 ... JeffProd --= JeffProd
30/12/2005 22:01:01 ... JETPLA~1 --= Jet Player
18/01/2008 16:50:26 ... JUSTBA~1.01 --= Just BASIC v1.01
29/05/2007 20:05:17 ... KCSOFT~1 --= KC Softwares
17/04/2006 18:00:35 ... KS-SW -----= KS-SW
08/06/2007 16:35:43 ... Larousse --= Larousse
13/04/2007 18:21:39 ... Lavasoft --= Lavasoft
02/12/2005 20:08:10 ... Learn2.com --= Learn2.com
18/04/2007 15:20:42 ... LimeWire --= LimeWire
21/10/2007 17:41:47 ... LIVREA~1 --= Livre Album Fuji Photo
19/01/2008 22:48:00 ... Lopxp -----= Lopxp
11/11/2007 20:50:11 ... MENTAL~1 --= mental9Production
25/11/2004 04:27:08 ... MESSEN~1 --= Messenger
20/04/2007 21:07:30 ... MESSEN~2 --= Messenger Plus! Live
11/07/2007 10:55:58 ... MESSEN~3 --= MessengerSkinner
24/10/2007 16:15:08 ... METIN2~1 --= Metin2_France
10/05/2007 17:08:20 ... MICROS~1.2 --= Microsoft CAPICOM 2.1.0.2
25/11/2004 04:27:08 ... MICROS~1 --= microsoft frontpage
07/04/2007 11:49:51 ... MI9A48~1 --= Microsoft Games
03/01/2005 03:20:18 ... MICROS~3 --= Microsoft Office
01/12/2005 20:50:17 ... MICROS~4 --= Microsoft Visual Studio
03/01/2005 03:20:03 ... MICROS~2 --= Microsoft Works
01/12/2005 20:48:05 ... MICROS~1.NET --= Microsoft.NET
11/03/2006 23:05:38 ... Morgan ----= Morgan
13/12/2006 18:25:01 ... MOTORO~1 --= Motorola Phone Tools
25/11/2004 04:27:16 ... MOVIEM~1 --= Movie Maker
07/04/2007 07:57:08 ... MOZILL~1 --= Mozilla Firefox
25/11/2004 04:27:16 ... MSN -------= MSN
25/11/2004 04:27:30 ... MSNGAM~1 --= MSN Gaming Zone
27/04/2007 20:15:00 ... MSNMES~2 --= MSN Messenger
22/04/2007 12:41:19 ... MSNMES~1 --= MSN Messenger(2)
06/04/2007 20:56:31 ... MSXML4~1.0 --= MSXML 4.0
03/01/2005 03:23:53 ... MUVEET~1 --= muvee Technologies
25/11/2004 04:27:40 ... NETMEE~1 --= NetMeeting
27/07/2006 14:00:50 ... Nokia -----= Nokia
10/06/2006 12:39:04 ... objectif --= objectif
25/11/2004 04:27:42 ... ONLINE~1 --= Online Services
25/11/2004 04:27:44 ... OUTLOO~1 --= Outlook Express
03/01/2005 03:29:37 ... PC-DOC~1 --= PC-Doctor 5 for Windows
02/12/2007 11:03:24 ... PCFRIE~1 --= PCFriendly
13/04/2007 18:11:41 ... PEERGU~1 --= PeerGuardian2
14/11/2007 14:32:34 ... PHOTOF~1 --= PhotoFiltre Studio
29/05/2007 20:05:22 ... Picasa2 ---= Picasa2
30/07/2007 13:53:33 ... POWERA~1 --= PowerArchiver
12/12/2006 21:13:17 ... QUICKT~1 --= QuickTime
02/12/2005 20:05:36 ... Real ------= Real
12/04/2007 22:18:12 ... REGIST~1 --= Registry Mechanic
05/12/2005 17:41:59 ... ROCKST~1 --= Rockstar Games
08/09/2007 11:23:03 ... SAGEM -----= SAGEM
22/04/2007 09:29:11 ... SAGEMW~1 --= SAGEM WiFi manager
09/06/2006 16:38:03 ... Sateira ---= Sateira
16/02/2007 20:06:05 ... SATSUK~1 --= Satsuki Decoder Pack
06/04/2007 13:31:43 ... SECURI~1 --= Securitoo
25/11/2004 04:27:44 ... SERVIC~1 --= Services en ligne
30/12/2005 19:24:55 ... SHEPHE~1 --= Shepherd's Worlds, Inc
13/11/2007 22:07:30 ... Skype -----= Skype
11/03/2006 20:24:30 ... SlySoft ---= SlySoft
03/01/2005 03:16:19 ... Sonic -----= Sonic
12/12/2006 17:50:51 ... SONYER~1 --= Sony Ericsson
30/12/2005 19:46:28 ... SPEEDY~1 --= SpeedyZone
02/11/2006 17:58:55 ... SPYBOT~1 --= Spybot - Search & Destroy
06/01/2008 15:13:24 ... SPYWAR~2 --= Spyware Doctor
06/01/2008 16:40:26 ... Sun -------= Sun
03/01/2005 03:35:07 ... Symantec --= Symantec
02/12/2005 20:03:50 ... TECHCI~1 --= TechCity Solutions
07/04/2007 14:19:08 ... TELECH~1 --= telechargement
06/04/2007 15:18:31 ... THE4TH~1 --= The 4th Coming
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
24/11/2004 02:37:46 ... UNINST~1 --= Uninstall Information
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
09/05/2006 20:36:02 ... vso -------= vso
13/04/2007 17:48:57 ... Wanadoo ---= Wanadoo
28/04/2007 06:42:25 ... WARCRA~2 --= Warcraft III
25/04/2007 16:44:24 ... WARCRA~1 --= Warcraft III(2)
13/05/2007 13:21:34 ... WEBMED~1 --= Web Media Player
20/05/2007 17:21:05 ... WEBMED~2 --= WebMediaPlayer
26/06/2007 14:34:59 ... WI1F86~1 --= Windows Live
30/11/2007 21:56:54 ... WI48FA~1 --= Windows Live Favorites
14/04/2007 18:59:02 ... WI81E8~1 --= Windows Live Toolbar
06/04/2007 19:49:46 ... WINDOW~4 --= Windows Media Connect 2
25/11/2004 04:27:48 ... WINDOW~1 --= Windows Media Player
25/11/2004 04:27:52 ... WINDOW~2 --= Windows NT
24/11/2004 02:37:48 ... WINDOW~3 --= WindowsUpdate
04/06/2007 11:39:20 ... WOLFEN~1 --= Wolfenstein - Enemy Territory
25/11/2004 04:28:02 ... xerox -----= xerox
04/06/2007 11:43:31 ... Xfire -----= Xfire
18/10/2007 15:56:41 ... Yahoo! ----= Yahoo!


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

*.securewebinfo.com
*.safetyincludes.com
*.securemanaging.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)

            - Fin du rapport -
            2. dekl38
              mitFraudFix v2.274

              Rapport fait à 9:34:06,87, 20/01/2008
              Executé à partir de C:\Documents and Settings\claude the boss!!!!!\Bureau\SmitfraudFix
              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
              Le type du système de fichiers est NTFS
              Fix executé en mode sans echec

              »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

              »»»»»»»»»»»»»»»»»»»»»»»» hosts

              127.0.0.1 localhost

              »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

              S!Ri's WS2Fix: LSP not Found.

              »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

              GenericRenosFix by S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

              »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

              IEDFix.exe by S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» DNS

              HKLM\SYSTEM\CCS\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
              HKLM\SYSTEM\CCS\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
              HKLM\SYSTEM\CS1\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
              HKLM\SYSTEM\CS1\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
              HKLM\SYSTEM\CS3\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
              HKLM\SYSTEM\CS3\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
              HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
              HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
              HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

              »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
              "System"=""

              »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

              Nettoyage terminé.

              »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Fin
              2. dekl38
                voici:

                Rapport Lopxp fait le 19/01/2008 à 23:34:39
                Exécuté dans : C:\Program Files\Lopxp 
                

___________________________________________________________________________

=> Fixme :

+- Tâches planifiées :
Supprimé : C:\WINDOWS\tasks\A0417D149192ED40.job

+- Dossiers :
Supprimé : C:\Documents and Settings\All Users\Application Data\Regs Load File Clock
Supprimé : C:\Documents and Settings\claude the boss!!!!!\Application Data\Gram proxy
Supprimé : C:\Program Files\Adverts

+- Fichiers temporaires :
Nettoyage effectué.

___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS\tasks\Connexion facile à Internet.job 
Fichier exécuté => C:\Program Files\Easy Internet signup\HPSdpApp.exe /remind /LaunchPoint reminder

C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job 
Fichier exécuté => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

21/02/2006 15:44:58 ... Adobe -----= Adobe
02/12/2005 20:04:36 ... AOL -------= AOL
30/07/2007 16:33:34 ... AOLDOW~1 --= AOL Downloads
30/07/2007 16:40:04 ... AOLOCP~1 --= AOL OCP
03/01/2005 03:20:58 ... APPLEC~1 --= Apple Computer
24/05/2007 15:44:21 ... BOONTY ----= BOONTY
13/12/2006 18:25:01 ... BVRPSO~1 --= BVRP Software
13/11/2007 22:55:24 ... Corel -----= Corel
18/01/2008 16:32:32 ... DVDSHR~1 --= DVD Shrink
27/09/2007 17:30:38 ... ELABOR~1 --= Elaborate Bytes
06/04/2007 16:15:02 ... Google ----= Google
13/11/2007 21:58:32 ... GOOGLE~1 --= Google Updater
03/01/2005 03:05:46 ... HP --------= HP
03/01/2005 03:16:24 ... INSTAL~1 --= InstallShield
20/04/2007 21:12:55 ... MESSEN~1 --= Messenger Plus!
25/11/2004 04:25:08 ... MICROS~1 --= Microsoft
11/03/2006 12:55:17 ... MUVEET~1 --= muvee Technologies
03/01/2005 03:21:02 ... QUICKT~1 --= QuickTime
03/01/2005 02:48:24 ... SBSI ------= SBSI
13/11/2007 22:06:58 ... Skype -----= Skype
03/01/2005 03:05:06 ... Sonic -----= Sonic
12/12/2006 17:51:00 ... SONYER~1 --= Sony Ericsson
02/11/2006 17:58:58 ... SPYBOT~1 --= Spybot - Search & Destroy
03/01/2005 03:35:09 ... Symantec --= Symantec
12/12/2006 17:50:51 ... Teleca ----= Teleca
07/04/2007 08:04:15 ... TEMP ------= TEMP
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
03/12/2005 13:50:29 ... UDL -------= UDL
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
06/04/2007 16:01:45 ... WINDOW~1 --= Windows Genuine Advantage
14/04/2007 18:59:54 ... WINDOW~2 --= Windows Live Toolbar
20/10/2007 20:22:14 ... WINDOW~3 --= WindowsLiveInstaller
29/05/2007 20:03:50 ... WinZip ----= WinZip
20/10/2007 20:21:35 ... WLINST~1 --= WLInstaller
18/10/2007 16:12:47 ... YAHOO!~1 --= Yahoo! Companion

+- C:\Documents and Settings\cherinetmj\Application Data

30/07/2007 16:47:59 ... acccore ---= acccore
27/02/2006 11:36:53 ... Adobe -----= Adobe
27/02/2006 11:37:19 ... AdobeUM ---= AdobeUM
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
19/04/2007 17:12:19 ... EACCEL~1 --= eAcceleration
12/02/2006 19:57:59 ... EPSON -----= EPSON
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
25/04/2007 17:15:13 ... HP --------= HP
26/04/2006 10:15:32 ... HPQ -------= HPQ
12/02/2006 19:27:50 ... IDENTI~1 --= Identities
08/04/2006 20:13:16 ... INTERV~1 --= InterVideo
07/05/2007 17:11:31 ... ItsLabel --= ItsLabel
13/04/2007 18:21:45 ... Lavasoft --= Lavasoft
06/07/2006 14:42:30 ... LEADER~1 --= Leadertech
24/04/2007 21:09:04 ... LimeWire --= LimeWire
17/02/2006 19:08:31 ... MACROM~1 --= Macromedia
18/01/2008 19:31:56 ... MEDIAP~1 --= Media Player Classic
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
12/02/2006 19:27:50 ... SAMPLE~1 --= SampleView
06/07/2006 14:42:35 ... Sonic -----= Sonic
04/05/2007 13:41:25 ... Sun -------= Sun
12/02/2006 19:27:50 ... Symantec --= Symantec
13/04/2007 17:49:38 ... Talkback --= Talkback
22/12/2006 20:38:12 ... Teleca ----= Teleca
24/05/2006 11:06:51 ... Template --= Template
01/10/2007 20:06:36 ... U3 --------= U3

+- C:\Documents and Settings\cherinetmj\Local Settings\Application Data

27/02/2006 11:36:53 ... Adobe -----= Adobe
30/07/2007 16:40:01 ... AOLOCP~1 --= AOL OCP
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
12/02/2006 19:27:50 ... APPLIC~1 --= ApplicationHistory
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
22/09/2007 10:05:12 ... HP --------= HP
26/01/2007 13:21:25 ... IDENTI~1 --= Identities
22/09/2007 10:05:20 ... ISOLAT~1 --= IsolatedStorage
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
01/09/2007 10:33:33 ... MICROV~1 --= MicroVision Applications
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
01/11/2007 15:38:53 ... PCHealth --= PCHealth
12/02/2006 19:27:50 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\claude the boss!!!!!\Application Data

01/08/2007 19:53:19 ... acccore ---= acccore
17/04/2006 17:53:52 ... ACOUST~1 --= Acoustica
12/02/2006 18:52:14 ... Adobe -----= Adobe
16/02/2006 19:20:30 ... AdobeUM ---= AdobeUM
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
25/02/2006 19:00:30 ... ArcSoft ---= ArcSoft
13/11/2007 23:11:48 ... Corel -----= Corel
23/04/2007 20:11:49 ... EACCEL~1 --= eAcceleration
03/09/2006 17:50:59 ... EPSON -----= EPSON
17/03/2006 20:49:03 ... FarStone --= FarStone
12/05/2007 07:03:17 ... FlashGet --= FlashGet
16/02/2006 18:33:06 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:13 ... HP --------= HP
11/04/2006 15:10:51 ... HPQ -------= HPQ
07/02/2006 21:00:29 ... IDENTI~1 --= Identities
07/02/2006 21:05:46 ... INTERV~1 --= InterVideo
07/05/2007 10:51:28 ... ItsLabel --= ItsLabel
02/05/2007 13:46:15 ... ivivo -----= ivivo
14/04/2007 09:43:38 ... Lavasoft --= Lavasoft
11/02/2006 11:36:45 ... LEADER~1 --= Leadertech
16/02/2006 18:32:59 ... MACROM~1 --= Macromedia
19/02/2007 15:19:47 ... MEDIAP~1 --= Media Player Classic
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
17/02/2006 20:21:16 ... MSNINS~1 --= MSNInstaller
12/04/2006 10:45:01 ... MUVEET~1 --= muvee Technologies
06/01/2008 15:13:24 ... PCTOOL~1 --= PC Tools
07/02/2006 21:00:29 ... SAMPLE~1 --= SampleView
14/11/2007 12:50:58 ... Skype -----= Skype
26/09/2007 13:36:27 ... SlySoft ---= SlySoft
11/02/2006 11:40:52 ... Sonic -----= Sonic
06/01/2008 16:54:00 ... STAROF~1 --= StarOffice8
27/02/2006 11:22:04 ... Sun -------= Sun
07/02/2006 21:00:29 ... Symantec --= Symantec
07/04/2007 14:03:22 ... Talkback --= Talkback
12/12/2006 17:53:12 ... Teleca ----= Teleca
18/05/2007 21:15:16 ... vlc(2) ----= vlc(2)
04/06/2007 11:43:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\claude the boss!!!!!\Local Settings\Application Data

12/02/2006 18:52:14 ... Adobe -----= Adobe
01/08/2007 19:52:31 ... AOLOCP~1 --= AOL OCP
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
07/02/2006 21:00:29 ... APPLIC~1 --= ApplicationHistory
25/12/2006 13:08:11 ... BVRPSO~1 --= BVRP Software
06/04/2007 20:23:31 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:02 ... HP --------= HP
17/02/2006 21:35:39 ... IDENTI~1 --= Identities
03/03/2006 11:47:11 ... ISOLAT~1 --= IsolatedStorage
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
11/02/2006 13:02:26 ... MICROV~1 --= MicroVision Applications
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
05/11/2007 21:41:16 ... PCHealth --= PCHealth
12/12/2006 18:11:56 ... SONYER~1 --= Sony Ericsson
13/05/2006 15:00:39 ... WMTOOL~1 --= WMTools Downloaded Files
07/02/2006 21:00:29 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\debby\Application Data

03/12/2005 18:36:07 ... AOL -------= AOL
03/12/2005 18:35:29 ... APPLEC~1 --= Apple Computer
14/01/2006 10:58:49 ... EPSON -----= EPSON
03/12/2005 18:35:29 ... IDENTI~1 --= Identities
06/12/2005 20:28:41 ... INTERV~1 --= InterVideo
20/01/2006 20:46:54 ... LEADER~1 --= Leadertech
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... SAMPLE~1 --= SampleView
20/01/2006 20:46:56 ... Sonic -----= Sonic
03/12/2005 18:35:28 ... Symantec --= Symantec

+- C:\Documents and Settings\debby\Local Settings\Application Data

03/12/2005 18:35:28 ... APPLEC~1 --= Apple Computer
03/12/2005 18:35:28 ... APPLIC~1 --= ApplicationHistory
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Default User\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
25/11/2004 04:25:34 ... IDENTI~1 --= Identities
25/11/2004 04:25:34 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... SAMPLE~1 --= SampleView
01/12/2005 20:37:35 ... Symantec --= Symantec
20/09/2007 19:26:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\Default User\Local Settings\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
01/12/2005 20:37:35 ... APPLIC~1 --= ApplicationHistory
25/11/2004 04:25:38 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Elo\Application Data

18/12/2005 15:30:50 ... AOL -------= AOL
18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
21/01/2006 14:13:41 ... EPSON -----= EPSON
18/12/2005 15:30:19 ... IDENTI~1 --= Identities
20/12/2005 11:54:04 ... INTERV~1 --= InterVideo
20/12/2005 14:15:22 ... LEADER~1 --= Leadertech
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... SAMPLE~1 --= SampleView
20/12/2005 14:15:26 ... Sonic -----= Sonic
18/12/2005 15:30:19 ... Symantec --= Symantec
16/01/2006 17:11:46 ... Template --= Template

+- C:\Documents and Settings\Elo\Local Settings\Application Data

18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
18/12/2005 15:30:19 ... APPLIC~1 --= ApplicationHistory
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\papa\Application Data

12/01/2008 14:49:52 ... APPLEC~1 --= Apple Computer
12/01/2008 14:51:46 ... EACCEL~1 --= eAcceleration
12/01/2008 14:51:40 ... Google ----= Google
12/01/2008 14:49:52 ... IDENTI~1 --= Identities
12/01/2008 14:52:38 ... MACROM~1 --= Macromedia
12/01/2008 14:49:52 ... MICROS~1 --= Microsoft
12/01/2008 14:49:52 ... SAMPLE~1 --= SampleView
12/01/2008 14:49:52 ... Symantec --= Symantec
12/01/2008 14:49:52 ... Xfire -----= Xfire

+- C:\Documents and Settings\papa\Local Settings\Application Data

12/01/2008 14:49:51 ... APPLEC~1 --= Apple Computer
12/01/2008 14:49:51 ... APPLIC~1 --= ApplicationHistory
12/01/2008 14:51:40 ... Google ----= Google
16/01/2008 11:07:48 ... IDENTI~1 --= Identities
12/01/2008 14:49:51 ... MICROS~1 --= Microsoft
12/01/2008 14:49:51 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

29/05/2007 20:05:06 ... 7-Zip -----= 7-Zip
19/01/2008 09:05:20 ... A-SQUA~1 --= a-squared Free
11/03/2006 23:05:28 ... abcAVI ----= abcAVI
06/04/2007 15:14:39 ... ACCELE~1 --= Acceleration Software
17/04/2006 17:53:36 ... ACOUST~1 --= Acoustica CD Label Maker
21/01/2006 20:35:16 ... ACTIVI~1 --= Activision
03/01/2005 03:18:38 ... Adobe -----= Adobe
30/07/2007 16:36:38 ... AIM6 ------= AIM6
11/03/2006 23:11:14 ... ALCOHO~1 --= Alcohol Soft
27/04/2007 20:13:47 ... ALICET~1 --= Alice Triway Wi-Fi
04/02/2006 13:57:45 ... ALICE_~1 --= Alice_Triway_WiFi
06/04/2007 19:21:11 ... ALWILS~1 --= Alwil Software
02/12/2005 20:04:36 ... AOL9~1.0 --= AOL 9.0
05/02/2006 18:49:52 ... AOL9~1.0A --= AOL 9.0a
05/02/2006 18:50:58 ... AOL9~1.0B --= AOL 9.0b
02/12/2005 20:08:12 ... AOLCOM~1 --= AOL Compagnon
02/12/2005 20:07:59 ... AOLTOO~1 --= AOL Toolbar
25/02/2006 18:53:30 ... ArcSoft ---= ArcSoft
17/04/2006 17:26:23 ... AUDIOC~1 --= Audio CD Maker
13/12/2006 18:26:36 ... AVANQU~1 --= Avanquest update
24/05/2007 15:26:08 ... BOONTY~1 --= BoontyGames
12/04/2007 22:17:54 ... CCleaner --= CCleaner
24/11/2004 02:37:34 ... COMPLU~1 --= ComPlus Applications
02/05/2007 18:25:25 ... CONTRO~1 --= Controle Parental
13/11/2007 22:44:07 ... Corel -----= Corel
05/02/2006 20:13:26 ... COSMOP~1 --= COSMOPOLITAN
02/08/2006 14:31:58 ... Cyanide ---= Cyanide
26/07/2006 19:23:04 ... directx ---= directx
12/12/2006 21:15:29 ... DISC2P~1 --= Disc2Phone
09/05/2006 20:40:30 ... DivX ------= DivX
14/05/2007 19:18:24 ... DRIVER~1 --= Driver-Soft
18/01/2008 16:32:28 ... DVDSHR~1 --= DVD Shrink
02/05/2006 13:51:03 ... EASPOR~1 --= EA SPORTS
06/04/2007 15:14:29 ... EACCEL~1 --= eAcceleration
02/06/2006 17:54:04 ... EASYCD~1.1 --= Easy CD-DA Extractor FR 5.1
03/01/2005 03:31:14 ... EASYIN~1 --= Easy Internet signup
02/06/2006 17:49:39 ... EASYCD~1 --= EasyCDDAExtractor5104
05/02/2006 19:00:47 ... EHMINS~1 --= EHMINSTALL
01/04/2006 17:16:16 ... ELABOR~1 --= Elaborate Bytes
29/05/2007 20:05:17 ... ELECTR~1 --= Electronic Arts
07/04/2007 21:07:09 ... eMule -----= eMule
03/12/2005 13:47:46 ... epson -----= epson
17/03/2006 20:43:33 ... FarStone --= FarStone
25/11/2004 04:26:44 ... FICHIE~1 --= Fichiers communs
07/04/2007 16:05:30 ... FlashGet --= FlashGet
21/10/2007 19:13:25 ... FOREIG~1 --= Foreignword
04/02/2006 14:31:22 ... Generic ---= Generic
03/01/2005 03:33:04 ... Google ----= Google
03/01/2005 03:17:46 ... HEWLET~1 --= Hewlett-Packard
03/01/2005 03:03:54 ... HP --------= HP
18/04/2007 15:28:45 ... INCOMP~1 --= Incomplete
20/06/2006 16:45:11 ... index -----= index
03/01/2005 03:18:01 ... INSTAL~1 --= InstallShield Installation Information
28/12/2005 20:11:32 ... INTERA~1 --= InterActual
25/11/2004 04:27:06 ... INTERN~1 --= Internet Explorer
03/01/2005 03:18:01 ... INTERV~1 --= InterVideo
03/01/2005 03:20:58 ... iPod ------= iPod
07/05/2007 10:50:15 ... ITSLAB~1 --= Its Label
03/01/2005 03:20:58 ... iTunes ----= iTunes
01/05/2007 15:31:36 ... iViVo -----= iViVo
23/09/2007 10:08:06 ... IZArc -----= IZArc
03/01/2005 02:50:27 ... Java ------= Java
05/02/2006 19:01:38 ... JavaSoft --= JavaSoft
16/07/2007 13:51:00 ... JeffProd --= JeffProd
30/12/2005 22:01:01 ... JETPLA~1 --= Jet Player
18/01/2008 16:50:26 ... JUSTBA~1.01 --= Just BASIC v1.01
29/05/2007 20:05:17 ... KCSOFT~1 --= KC Softwares
17/04/2006 18:00:35 ... KS-SW -----= KS-SW
08/06/2007 16:35:43 ... Larousse --= Larousse
13/04/2007 18:21:39 ... Lavasoft --= Lavasoft
02/12/2005 20:08:10 ... Learn2.com --= Learn2.com
18/04/2007 15:20:42 ... LimeWire --= LimeWire
21/10/2007 17:41:47 ... LIVREA~1 --= Livre Album Fuji Photo
19/01/2008 22:48:00 ... Lopxp -----= Lopxp
11/11/2007 20:50:11 ... MENTAL~1 --= mental9Production
25/11/2004 04:27:08 ... MESSEN~1 --= Messenger
20/04/2007 21:07:30 ... MESSEN~2 --= Messenger Plus! Live
11/07/2007 10:55:58 ... MESSEN~3 --= MessengerSkinner
24/10/2007 16:15:08 ... METIN2~1 --= Metin2_France
10/05/2007 17:08:20 ... MICROS~1.2 --= Microsoft CAPICOM 2.1.0.2
25/11/2004 04:27:08 ... MICROS~1 --= microsoft frontpage
07/04/2007 11:49:51 ... MI9A48~1 --= Microsoft Games
03/01/2005 03:20:18 ... MICROS~3 --= Microsoft Office
01/12/2005 20:50:17 ... MICROS~4 --= Microsoft Visual Studio
03/01/2005 03:20:03 ... MICROS~2 --= Microsoft Works
01/12/2005 20:48:05 ... MICROS~1.NET --= Microsoft.NET
11/03/2006 23:05:38 ... Morgan ----= Morgan
13/12/2006 18:25:01 ... MOTORO~1 --= Motorola Phone Tools
25/11/2004 04:27:16 ... MOVIEM~1 --= Movie Maker
07/04/2007 07:57:08 ... MOZILL~1 --= Mozilla Firefox
25/11/2004 04:27:16 ... MSN -------= MSN
25/11/2004 04:27:30 ... MSNGAM~1 --= MSN Gaming Zone
27/04/2007 20:15:00 ... MSNMES~2 --= MSN Messenger
22/04/2007 12:41:19 ... MSNMES~1 --= MSN Messenger(2)
06/04/2007 20:56:31 ... MSXML4~1.0 --= MSXML 4.0
03/01/2005 03:23:53 ... MUVEET~1 --= muvee Technologies
25/11/2004 04:27:40 ... NETMEE~1 --= NetMeeting
27/07/2006 14:00:50 ... Nokia -----= Nokia
10/06/2006 12:39:04 ... objectif --= objectif
25/11/2004 04:27:42 ... ONLINE~1 --= Online Services
25/11/2004 04:27:44 ... OUTLOO~1 --= Outlook Express
03/01/2005 03:29:37 ... PC-DOC~1 --= PC-Doctor 5 for Windows
02/12/2007 11:03:24 ... PCFRIE~1 --= PCFriendly
13/04/2007 18:11:41 ... PEERGU~1 --= PeerGuardian2
14/11/2007 14:32:34 ... PHOTOF~1 --= PhotoFiltre Studio
29/05/2007 20:05:22 ... Picasa2 ---= Picasa2
30/07/2007 13:53:33 ... POWERA~1 --= PowerArchiver
12/12/2006 21:13:17 ... QUICKT~1 --= QuickTime
02/12/2005 20:05:36 ... Real ------= Real
12/04/2007 22:18:12 ... REGIST~1 --= Registry Mechanic
05/12/2005 17:41:59 ... ROCKST~1 --= Rockstar Games
08/09/2007 11:23:03 ... SAGEM -----= SAGEM
22/04/2007 09:29:11 ... SAGEMW~1 --= SAGEM WiFi manager
09/06/2006 16:38:03 ... Sateira ---= Sateira
16/02/2007 20:06:05 ... SATSUK~1 --= Satsuki Decoder Pack
06/04/2007 13:31:43 ... SECURI~1 --= Securitoo
25/11/2004 04:27:44 ... SERVIC~1 --= Services en ligne
30/12/2005 19:24:55 ... SHEPHE~1 --= Shepherd's Worlds, Inc
13/11/2007 22:07:30 ... Skype -----= Skype
11/03/2006 20:24:30 ... SlySoft ---= SlySoft
03/01/2005 03:16:19 ... Sonic -----= Sonic
12/12/2006 17:50:51 ... SONYER~1 --= Sony Ericsson
30/12/2005 19:46:28 ... SPEEDY~1 --= SpeedyZone
02/11/2006 17:58:55 ... SPYBOT~1 --= Spybot - Search & Destroy
06/01/2008 15:13:24 ... SPYWAR~2 --= Spyware Doctor
06/01/2008 16:40:26 ... Sun -------= Sun
03/01/2005 03:35:07 ... Symantec --= Symantec
02/12/2005 20:03:50 ... TECHCI~1 --= TechCity Solutions
07/04/2007 14:19:08 ... TELECH~1 --= telechargement
06/04/2007 15:18:31 ... THE4TH~1 --= The 4th Coming
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
24/11/2004 02:37:46 ... UNINST~1 --= Uninstall Information
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
09/05/2006 20:36:02 ... vso -------= vso
13/04/2007 17:48:57 ... Wanadoo ---= Wanadoo
28/04/2007 06:42:25 ... WARCRA~2 --= Warcraft III
25/04/2007 16:44:24 ... WARCRA~1 --= Warcraft III(2)
13/05/2007 13:21:34 ... WEBMED~1 --= Web Media Player
20/05/2007 17:21:05 ... WEBMED~2 --= WebMediaPlayer
26/06/2007 14:34:59 ... WI1F86~1 --= Windows Live
30/11/2007 21:56:54 ... WI48FA~1 --= Windows Live Favorites
14/04/2007 18:59:02 ... WI81E8~1 --= Windows Live Toolbar
06/04/2007 19:49:46 ... WINDOW~4 --= Windows Media Connect 2
25/11/2004 04:27:48 ... WINDOW~1 --= Windows Media Player
25/11/2004 04:27:52 ... WINDOW~2 --= Windows NT
24/11/2004 02:37:48 ... WINDOW~3 --= WindowsUpdate
04/06/2007 11:39:20 ... WOLFEN~1 --= Wolfenstein - Enemy Territory
25/11/2004 04:28:02 ... xerox -----= xerox
04/06/2007 11:43:31 ... Xfire -----= Xfire
18/10/2007 15:56:41 ... Yahoo! ----= Yahoo!


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

*.securewebinfo.com
*.safetyincludes.com
*.securemanaging.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)

                - Fin du rapport -
                1. ^^Marie^^
                  OK

                  va dans :

                  Démarrer

                  Exécuter

                  puis copier/coller :

                  "%programfiles%\Lopxp\Lopxp.bat" /Fixme ► Guillemets y compris ► très important

                  puis valide, et poste le rapport stp

                  1. dekl38
                    encors un raport:

                    Rapport Lopxp fait le 19/01/2008 à 23:00:30
                    Exécuté dans : C:\Program Files\Lopxp 
                    

___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS\tasks\A0417D149192ED40.job 
Crée le : 17/05/2007 à 13:49
Fichier exécuté => c:\docume~1\claude~1\applic~1\grampr~1\data fork comp.exe 

C:\WINDOWS\tasks\Connexion facile à Internet.job 
Fichier exécuté => C:\Program Files\Easy Internet signup\HPSdpApp.exe /remind /LaunchPoint reminder

C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job 
Fichier exécuté => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

21/02/2006 15:44:58 ... Adobe -----= Adobe
02/12/2005 20:04:36 ... AOL -------= AOL
30/07/2007 16:33:34 ... AOLDOW~1 --= AOL Downloads
30/07/2007 16:40:04 ... AOLOCP~1 --= AOL OCP
03/01/2005 03:20:58 ... APPLEC~1 --= Apple Computer
24/05/2007 15:44:21 ... BOONTY ----= BOONTY
13/12/2006 18:25:01 ... BVRPSO~1 --= BVRP Software
13/11/2007 22:55:24 ... Corel -----= Corel
18/01/2008 16:32:32 ... DVDSHR~1 --= DVD Shrink
27/09/2007 17:30:38 ... ELABOR~1 --= Elaborate Bytes
06/04/2007 16:15:02 ... Google ----= Google
13/11/2007 21:58:32 ... GOOGLE~1 --= Google Updater
03/01/2005 03:05:46 ... HP --------= HP
03/01/2005 03:16:24 ... INSTAL~1 --= InstallShield
20/04/2007 21:12:55 ... MESSEN~1 --= Messenger Plus!
25/11/2004 04:25:08 ... MICROS~1 --= Microsoft
11/03/2006 12:55:17 ... MUVEET~1 --= muvee Technologies
03/01/2005 03:21:02 ... QUICKT~1 --= QuickTime
20/04/2007 21:08:16 ... REGSLO~1 --= Regs Load File Clock
03/01/2005 02:48:24 ... SBSI ------= SBSI
13/11/2007 22:06:58 ... Skype -----= Skype
03/01/2005 03:05:06 ... Sonic -----= Sonic
12/12/2006 17:51:00 ... SONYER~1 --= Sony Ericsson
02/11/2006 17:58:58 ... SPYBOT~1 --= Spybot - Search & Destroy
03/01/2005 03:35:09 ... Symantec --= Symantec
12/12/2006 17:50:51 ... Teleca ----= Teleca
07/04/2007 08:04:15 ... TEMP ------= TEMP
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
03/12/2005 13:50:29 ... UDL -------= UDL
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
06/04/2007 16:01:45 ... WINDOW~1 --= Windows Genuine Advantage
14/04/2007 18:59:54 ... WINDOW~2 --= Windows Live Toolbar
20/10/2007 20:22:14 ... WINDOW~3 --= WindowsLiveInstaller
29/05/2007 20:03:50 ... WinZip ----= WinZip
20/10/2007 20:21:35 ... WLINST~1 --= WLInstaller
18/10/2007 16:12:47 ... YAHOO!~1 --= Yahoo! Companion

+- C:\Documents and Settings\cherinetmj\Application Data

30/07/2007 16:47:59 ... acccore ---= acccore
27/02/2006 11:36:53 ... Adobe -----= Adobe
27/02/2006 11:37:19 ... AdobeUM ---= AdobeUM
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
19/04/2007 17:12:19 ... EACCEL~1 --= eAcceleration
12/02/2006 19:57:59 ... EPSON -----= EPSON
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
25/04/2007 17:15:13 ... HP --------= HP
26/04/2006 10:15:32 ... HPQ -------= HPQ
12/02/2006 19:27:50 ... IDENTI~1 --= Identities
08/04/2006 20:13:16 ... INTERV~1 --= InterVideo
07/05/2007 17:11:31 ... ItsLabel --= ItsLabel
13/04/2007 18:21:45 ... Lavasoft --= Lavasoft
06/07/2006 14:42:30 ... LEADER~1 --= Leadertech
24/04/2007 21:09:04 ... LimeWire --= LimeWire
17/02/2006 19:08:31 ... MACROM~1 --= Macromedia
18/01/2008 19:31:56 ... MEDIAP~1 --= Media Player Classic
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
12/02/2006 19:27:50 ... SAMPLE~1 --= SampleView
06/07/2006 14:42:35 ... Sonic -----= Sonic
04/05/2007 13:41:25 ... Sun -------= Sun
12/02/2006 19:27:50 ... Symantec --= Symantec
13/04/2007 17:49:38 ... Talkback --= Talkback
22/12/2006 20:38:12 ... Teleca ----= Teleca
24/05/2006 11:06:51 ... Template --= Template
01/10/2007 20:06:36 ... U3 --------= U3

+- C:\Documents and Settings\cherinetmj\Local Settings\Application Data

27/02/2006 11:36:53 ... Adobe -----= Adobe
30/07/2007 16:40:01 ... AOLOCP~1 --= AOL OCP
12/02/2006 19:27:50 ... APPLEC~1 --= Apple Computer
12/02/2006 19:27:50 ... APPLIC~1 --= ApplicationHistory
07/04/2007 09:40:44 ... Google ----= Google
19/01/2008 18:25:57 ... Help ------= Help
22/09/2007 10:05:12 ... HP --------= HP
26/01/2007 13:21:25 ... IDENTI~1 --= Identities
22/09/2007 10:05:20 ... ISOLAT~1 --= IsolatedStorage
12/02/2006 19:27:50 ... MICROS~1 --= Microsoft
01/09/2007 10:33:33 ... MICROV~1 --= MicroVision Applications
13/04/2007 17:49:15 ... Mozilla ---= Mozilla
01/11/2007 15:38:53 ... PCHealth --= PCHealth
12/02/2006 19:27:50 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\claude the boss!!!!!\Application Data

01/08/2007 19:53:19 ... acccore ---= acccore
17/04/2006 17:53:52 ... ACOUST~1 --= Acoustica
12/02/2006 18:52:14 ... Adobe -----= Adobe
16/02/2006 19:20:30 ... AdobeUM ---= AdobeUM
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
25/02/2006 19:00:30 ... ArcSoft ---= ArcSoft
13/11/2007 23:11:48 ... Corel -----= Corel
23/04/2007 20:11:49 ... EACCEL~1 --= eAcceleration
03/09/2006 17:50:59 ... EPSON -----= EPSON
17/03/2006 20:49:03 ... FarStone --= FarStone
12/05/2007 07:03:17 ... FlashGet --= FlashGet
16/02/2006 18:33:06 ... Google ----= Google
20/04/2007 21:07:50 ... GRAMPR~1 --= Gram proxy
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:13 ... HP --------= HP
11/04/2006 15:10:51 ... HPQ -------= HPQ
07/02/2006 21:00:29 ... IDENTI~1 --= Identities
07/02/2006 21:05:46 ... INTERV~1 --= InterVideo
07/05/2007 10:51:28 ... ItsLabel --= ItsLabel
02/05/2007 13:46:15 ... ivivo -----= ivivo
14/04/2007 09:43:38 ... Lavasoft --= Lavasoft
11/02/2006 11:36:45 ... LEADER~1 --= Leadertech
16/02/2006 18:32:59 ... MACROM~1 --= Macromedia
19/02/2007 15:19:47 ... MEDIAP~1 --= Media Player Classic
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
17/02/2006 20:21:16 ... MSNINS~1 --= MSNInstaller
12/04/2006 10:45:01 ... MUVEET~1 --= muvee Technologies
06/01/2008 15:13:24 ... PCTOOL~1 --= PC Tools
07/02/2006 21:00:29 ... SAMPLE~1 --= SampleView
14/11/2007 12:50:58 ... Skype -----= Skype
26/09/2007 13:36:27 ... SlySoft ---= SlySoft
11/02/2006 11:40:52 ... Sonic -----= Sonic
06/01/2008 16:54:00 ... STAROF~1 --= StarOffice8
27/02/2006 11:22:04 ... Sun -------= Sun
07/02/2006 21:00:29 ... Symantec --= Symantec
07/04/2007 14:03:22 ... Talkback --= Talkback
12/12/2006 17:53:12 ... Teleca ----= Teleca
18/05/2007 21:15:16 ... vlc(2) ----= vlc(2)
04/06/2007 11:43:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\claude the boss!!!!!\Local Settings\Application Data

12/02/2006 18:52:14 ... Adobe -----= Adobe
01/08/2007 19:52:31 ... AOLOCP~1 --= AOL OCP
07/02/2006 21:00:29 ... APPLEC~1 --= Apple Computer
07/02/2006 21:00:29 ... APPLIC~1 --= ApplicationHistory
25/12/2006 13:08:11 ... BVRPSO~1 --= BVRP Software
06/04/2007 20:23:31 ... Google ----= Google
30/08/2006 12:13:45 ... Help ------= Help
03/03/2006 11:47:02 ... HP --------= HP
17/02/2006 21:35:39 ... IDENTI~1 --= Identities
03/03/2006 11:47:11 ... ISOLAT~1 --= IsolatedStorage
07/02/2006 21:00:29 ... MICROS~1 --= Microsoft
11/02/2006 13:02:26 ... MICROV~1 --= MicroVision Applications
07/04/2007 14:02:39 ... Mozilla ---= Mozilla
05/11/2007 21:41:16 ... PCHealth --= PCHealth
12/12/2006 18:11:56 ... SONYER~1 --= Sony Ericsson
13/05/2006 15:00:39 ... WMTOOL~1 --= WMTools Downloaded Files
07/02/2006 21:00:29 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\debby\Application Data

03/12/2005 18:36:07 ... AOL -------= AOL
03/12/2005 18:35:29 ... APPLEC~1 --= Apple Computer
14/01/2006 10:58:49 ... EPSON -----= EPSON
03/12/2005 18:35:29 ... IDENTI~1 --= Identities
06/12/2005 20:28:41 ... INTERV~1 --= InterVideo
20/01/2006 20:46:54 ... LEADER~1 --= Leadertech
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... SAMPLE~1 --= SampleView
20/01/2006 20:46:56 ... Sonic -----= Sonic
03/12/2005 18:35:28 ... Symantec --= Symantec

+- C:\Documents and Settings\debby\Local Settings\Application Data

03/12/2005 18:35:28 ... APPLEC~1 --= Apple Computer
03/12/2005 18:35:28 ... APPLIC~1 --= ApplicationHistory
03/12/2005 18:35:28 ... MICROS~1 --= Microsoft
03/12/2005 18:35:28 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Default User\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
25/11/2004 04:25:34 ... IDENTI~1 --= Identities
25/11/2004 04:25:34 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... SAMPLE~1 --= SampleView
01/12/2005 20:37:35 ... Symantec --= Symantec
20/09/2007 19:26:32 ... Xfire -----= Xfire

+- C:\Documents and Settings\Default User\Local Settings\Application Data

01/12/2005 20:37:35 ... APPLEC~1 --= Apple Computer
01/12/2005 20:37:35 ... APPLIC~1 --= ApplicationHistory
25/11/2004 04:25:38 ... MICROS~1 --= Microsoft
01/12/2005 20:37:35 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\Elo\Application Data

18/12/2005 15:30:50 ... AOL -------= AOL
18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
21/01/2006 14:13:41 ... EPSON -----= EPSON
18/12/2005 15:30:19 ... IDENTI~1 --= Identities
20/12/2005 11:54:04 ... INTERV~1 --= InterVideo
20/12/2005 14:15:22 ... LEADER~1 --= Leadertech
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... SAMPLE~1 --= SampleView
20/12/2005 14:15:26 ... Sonic -----= Sonic
18/12/2005 15:30:19 ... Symantec --= Symantec
16/01/2006 17:11:46 ... Template --= Template

+- C:\Documents and Settings\Elo\Local Settings\Application Data

18/12/2005 15:30:19 ... APPLEC~1 --= Apple Computer
18/12/2005 15:30:19 ... APPLIC~1 --= ApplicationHistory
18/12/2005 15:30:19 ... MICROS~1 --= Microsoft
18/12/2005 15:30:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

+- C:\Documents and Settings\papa\Application Data

12/01/2008 14:49:52 ... APPLEC~1 --= Apple Computer
12/01/2008 14:51:46 ... EACCEL~1 --= eAcceleration
12/01/2008 14:51:40 ... Google ----= Google
12/01/2008 14:49:52 ... IDENTI~1 --= Identities
12/01/2008 14:52:38 ... MACROM~1 --= Macromedia
12/01/2008 14:49:52 ... MICROS~1 --= Microsoft
12/01/2008 14:49:52 ... SAMPLE~1 --= SampleView
12/01/2008 14:49:52 ... Symantec --= Symantec
12/01/2008 14:49:52 ... Xfire -----= Xfire

+- C:\Documents and Settings\papa\Local Settings\Application Data

12/01/2008 14:49:51 ... APPLEC~1 --= Apple Computer
12/01/2008 14:49:51 ... APPLIC~1 --= ApplicationHistory
12/01/2008 14:51:40 ... Google ----= Google
16/01/2008 11:07:48 ... IDENTI~1 --= Identities
12/01/2008 14:49:51 ... MICROS~1 --= Microsoft
12/01/2008 14:49:51 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

29/05/2007 20:05:06 ... 7-Zip -----= 7-Zip
19/01/2008 09:05:20 ... A-SQUA~1 --= a-squared Free
11/03/2006 23:05:28 ... abcAVI ----= abcAVI
06/04/2007 15:14:39 ... ACCELE~1 --= Acceleration Software
17/04/2006 17:53:36 ... ACOUST~1 --= Acoustica CD Label Maker
21/01/2006 20:35:16 ... ACTIVI~1 --= Activision
03/01/2005 03:18:38 ... Adobe -----= Adobe
26/06/2007 14:35:04 ... Adverts ---= Adverts
30/07/2007 16:36:38 ... AIM6 ------= AIM6
11/03/2006 23:11:14 ... ALCOHO~1 --= Alcohol Soft
27/04/2007 20:13:47 ... ALICET~1 --= Alice Triway Wi-Fi
04/02/2006 13:57:45 ... ALICE_~1 --= Alice_Triway_WiFi
06/04/2007 19:21:11 ... ALWILS~1 --= Alwil Software
02/12/2005 20:04:36 ... AOL9~1.0 --= AOL 9.0
05/02/2006 18:49:52 ... AOL9~1.0A --= AOL 9.0a
05/02/2006 18:50:58 ... AOL9~1.0B --= AOL 9.0b
02/12/2005 20:08:12 ... AOLCOM~1 --= AOL Compagnon
02/12/2005 20:07:59 ... AOLTOO~1 --= AOL Toolbar
25/02/2006 18:53:30 ... ArcSoft ---= ArcSoft
17/04/2006 17:26:23 ... AUDIOC~1 --= Audio CD Maker
13/12/2006 18:26:36 ... AVANQU~1 --= Avanquest update
24/05/2007 15:26:08 ... BOONTY~1 --= BoontyGames
12/04/2007 22:17:54 ... CCleaner --= CCleaner
24/11/2004 02:37:34 ... COMPLU~1 --= ComPlus Applications
02/05/2007 18:25:25 ... CONTRO~1 --= Controle Parental
13/11/2007 22:44:07 ... Corel -----= Corel
05/02/2006 20:13:26 ... COSMOP~1 --= COSMOPOLITAN
02/08/2006 14:31:58 ... Cyanide ---= Cyanide
26/07/2006 19:23:04 ... directx ---= directx
12/12/2006 21:15:29 ... DISC2P~1 --= Disc2Phone
09/05/2006 20:40:30 ... DivX ------= DivX
14/05/2007 19:18:24 ... DRIVER~1 --= Driver-Soft
18/01/2008 16:32:28 ... DVDSHR~1 --= DVD Shrink
02/05/2006 13:51:03 ... EASPOR~1 --= EA SPORTS
06/04/2007 15:14:29 ... EACCEL~1 --= eAcceleration
02/06/2006 17:54:04 ... EASYCD~1.1 --= Easy CD-DA Extractor FR 5.1
03/01/2005 03:31:14 ... EASYIN~1 --= Easy Internet signup
02/06/2006 17:49:39 ... EASYCD~1 --= EasyCDDAExtractor5104
05/02/2006 19:00:47 ... EHMINS~1 --= EHMINSTALL
01/04/2006 17:16:16 ... ELABOR~1 --= Elaborate Bytes
29/05/2007 20:05:17 ... ELECTR~1 --= Electronic Arts
07/04/2007 21:07:09 ... eMule -----= eMule
03/12/2005 13:47:46 ... epson -----= epson
17/03/2006 20:43:33 ... FarStone --= FarStone
25/11/2004 04:26:44 ... FICHIE~1 --= Fichiers communs
07/04/2007 16:05:30 ... FlashGet --= FlashGet
21/10/2007 19:13:25 ... FOREIG~1 --= Foreignword
04/02/2006 14:31:22 ... Generic ---= Generic
03/01/2005 03:33:04 ... Google ----= Google
03/01/2005 03:17:46 ... HEWLET~1 --= Hewlett-Packard
03/01/2005 03:03:54 ... HP --------= HP
18/04/2007 15:28:45 ... INCOMP~1 --= Incomplete
20/06/2006 16:45:11 ... index -----= index
03/01/2005 03:18:01 ... INSTAL~1 --= InstallShield Installation Information
28/12/2005 20:11:32 ... INTERA~1 --= InterActual
25/11/2004 04:27:06 ... INTERN~1 --= Internet Explorer
03/01/2005 03:18:01 ... INTERV~1 --= InterVideo
03/01/2005 03:20:58 ... iPod ------= iPod
07/05/2007 10:50:15 ... ITSLAB~1 --= Its Label
03/01/2005 03:20:58 ... iTunes ----= iTunes
01/05/2007 15:31:36 ... iViVo -----= iViVo
23/09/2007 10:08:06 ... IZArc -----= IZArc
03/01/2005 02:50:27 ... Java ------= Java
05/02/2006 19:01:38 ... JavaSoft --= JavaSoft
16/07/2007 13:51:00 ... JeffProd --= JeffProd
30/12/2005 22:01:01 ... JETPLA~1 --= Jet Player
18/01/2008 16:50:26 ... JUSTBA~1.01 --= Just BASIC v1.01
29/05/2007 20:05:17 ... KCSOFT~1 --= KC Softwares
17/04/2006 18:00:35 ... KS-SW -----= KS-SW
08/06/2007 16:35:43 ... Larousse --= Larousse
13/04/2007 18:21:39 ... Lavasoft --= Lavasoft
02/12/2005 20:08:10 ... Learn2.com --= Learn2.com
18/04/2007 15:20:42 ... LimeWire --= LimeWire
21/10/2007 17:41:47 ... LIVREA~1 --= Livre Album Fuji Photo
19/01/2008 22:48:00 ... Lopxp -----= Lopxp
11/11/2007 20:50:11 ... MENTAL~1 --= mental9Production
25/11/2004 04:27:08 ... MESSEN~1 --= Messenger
20/04/2007 21:07:30 ... MESSEN~2 --= Messenger Plus! Live
11/07/2007 10:55:58 ... MESSEN~3 --= MessengerSkinner
24/10/2007 16:15:08 ... METIN2~1 --= Metin2_France
10/05/2007 17:08:20 ... MICROS~1.2 --= Microsoft CAPICOM 2.1.0.2
25/11/2004 04:27:08 ... MICROS~1 --= microsoft frontpage
07/04/2007 11:49:51 ... MI9A48~1 --= Microsoft Games
03/01/2005 03:20:18 ... MICROS~3 --= Microsoft Office
01/12/2005 20:50:17 ... MICROS~4 --= Microsoft Visual Studio
03/01/2005 03:20:03 ... MICROS~2 --= Microsoft Works
01/12/2005 20:48:05 ... MICROS~1.NET --= Microsoft.NET
11/03/2006 23:05:38 ... Morgan ----= Morgan
13/12/2006 18:25:01 ... MOTORO~1 --= Motorola Phone Tools
25/11/2004 04:27:16 ... MOVIEM~1 --= Movie Maker
07/04/2007 07:57:08 ... MOZILL~1 --= Mozilla Firefox
25/11/2004 04:27:16 ... MSN -------= MSN
25/11/2004 04:27:30 ... MSNGAM~1 --= MSN Gaming Zone
27/04/2007 20:15:00 ... MSNMES~2 --= MSN Messenger
22/04/2007 12:41:19 ... MSNMES~1 --= MSN Messenger(2)
06/04/2007 20:56:31 ... MSXML4~1.0 --= MSXML 4.0
03/01/2005 03:23:53 ... MUVEET~1 --= muvee Technologies
25/11/2004 04:27:40 ... NETMEE~1 --= NetMeeting
27/07/2006 14:00:50 ... Nokia -----= Nokia
10/06/2006 12:39:04 ... objectif --= objectif
25/11/2004 04:27:42 ... ONLINE~1 --= Online Services
25/11/2004 04:27:44 ... OUTLOO~1 --= Outlook Express
03/01/2005 03:29:37 ... PC-DOC~1 --= PC-Doctor 5 for Windows
02/12/2007 11:03:24 ... PCFRIE~1 --= PCFriendly
13/04/2007 18:11:41 ... PEERGU~1 --= PeerGuardian2
14/11/2007 14:32:34 ... PHOTOF~1 --= PhotoFiltre Studio
29/05/2007 20:05:22 ... Picasa2 ---= Picasa2
30/07/2007 13:53:33 ... POWERA~1 --= PowerArchiver
12/12/2006 21:13:17 ... QUICKT~1 --= QuickTime
02/12/2005 20:05:36 ... Real ------= Real
12/04/2007 22:18:12 ... REGIST~1 --= Registry Mechanic
05/12/2005 17:41:59 ... ROCKST~1 --= Rockstar Games
08/09/2007 11:23:03 ... SAGEM -----= SAGEM
22/04/2007 09:29:11 ... SAGEMW~1 --= SAGEM WiFi manager
09/06/2006 16:38:03 ... Sateira ---= Sateira
16/02/2007 20:06:05 ... SATSUK~1 --= Satsuki Decoder Pack
06/04/2007 13:31:43 ... SECURI~1 --= Securitoo
25/11/2004 04:27:44 ... SERVIC~1 --= Services en ligne
30/12/2005 19:24:55 ... SHEPHE~1 --= Shepherd's Worlds, Inc
13/11/2007 22:07:30 ... Skype -----= Skype
11/03/2006 20:24:30 ... SlySoft ---= SlySoft
03/01/2005 03:16:19 ... Sonic -----= Sonic
12/12/2006 17:50:51 ... SONYER~1 --= Sony Ericsson
30/12/2005 19:46:28 ... SPEEDY~1 --= SpeedyZone
02/11/2006 17:58:55 ... SPYBOT~1 --= Spybot - Search & Destroy
06/01/2008 15:13:24 ... SPYWAR~2 --= Spyware Doctor
06/01/2008 16:40:26 ... Sun -------= Sun
03/01/2005 03:35:07 ... Symantec --= Symantec
02/12/2005 20:03:50 ... TECHCI~1 --= TechCity Solutions
07/04/2007 14:19:08 ... TELECH~1 --= telechargement
06/04/2007 15:18:31 ... THE4TH~1 --= The 4th Coming
27/04/2007 19:49:14 ... TRENDM~1 --= Trend Micro
24/11/2004 02:37:46 ... UNINST~1 --= Uninstall Information
02/12/2005 20:08:07 ... VIEWPO~1 --= Viewpoint
09/05/2006 20:36:02 ... vso -------= vso
13/04/2007 17:48:57 ... Wanadoo ---= Wanadoo
28/04/2007 06:42:25 ... WARCRA~2 --= Warcraft III
25/04/2007 16:44:24 ... WARCRA~1 --= Warcraft III(2)
13/05/2007 13:21:34 ... WEBMED~1 --= Web Media Player
20/05/2007 17:21:05 ... WEBMED~2 --= WebMediaPlayer
26/06/2007 14:34:59 ... WI1F86~1 --= Windows Live
30/11/2007 21:56:54 ... WI48FA~1 --= Windows Live Favorites
14/04/2007 18:59:02 ... WI81E8~1 --= Windows Live Toolbar
06/04/2007 19:49:46 ... WINDOW~4 --= Windows Media Connect 2
25/11/2004 04:27:48 ... WINDOW~1 --= Windows Media Player
25/11/2004 04:27:52 ... WINDOW~2 --= Windows NT
24/11/2004 02:37:48 ... WINDOW~3 --= WindowsUpdate
04/06/2007 11:39:20 ... WOLFEN~1 --= Wolfenstein - Enemy Territory
25/11/2004 04:28:02 ... xerox -----= xerox
04/06/2007 11:43:31 ... Xfire -----= Xfire
18/10/2007 15:56:41 ... Yahoo! ----= Yahoo!


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

*.securewebinfo.com
*.safetyincludes.com
*.securemanaging.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)

+- Dossiers suspects :

C:\Documents and Settings\All Users\Application Data\Regs Load File Clock
C:\Documents and Settings\claude the boss!!!!!\Application Data\Gram proxy
C:\Program Files\Adverts

+- Tâches planifiées suspectes :

C:\WINDOWS\tasks\A0417D149192ED40.job

                    - Fin du rapport -
                    3. dekl38
                      JE n'ai pas le temp de le faire maintenant, je vais le faire ce soir.
                      merci et a plus tard
                      1. ^^Marie^^
                        Télécharge Lopxp et enregistres-le sur ton bureau.

                        http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

                        ► Referme les fenêtres de tous les programmes en cours, y compris Internet Explorer et MSN

                        Double clic sur le fichier Lopxpsetup.exe pour lancer l'installation.

                        Double clic sur Lopxpsetup.exe pour lancer l'installation
                        Au menu, choisir l'option 1
                        Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
                        Une rapport sera alors crée, à copie/colle en entier sur le forum.

                        1. g!rly Contributeur
                          fais ceci a present :

                          tu veux restaurer le fichier host, a l´aide de :

                          http://siri.urz.free.fr/RHosts.php

                          et repost le meme rapport smitfraud fix option 2 en mode sans echec...
                          ...
                          1. dekl38
                            b1 voila le rapport

                            SmitFraudFix v2.274

                            Rapport fait à 12:14:39,15, 19/01/2008
                            Executé à partir de C:\Documents and Settings\claude the boss!!!!!\Bureau\SmitfraudFix
                            OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                            Le type du système de fichiers est NTFS
                            Fix executé en mode sans echec

                            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            SrchSTS.exe by S!Ri
                            Search SharedTaskScheduler's .dll

                            »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                            »»»»»»»»»»»»»»»»»»»»»»»» hosts

                            127.0.0.1 localhost
                            127.0.0.1 bin.errorprotector.com ## added by CiD
                            127.0.0.1 br.errorsafe.com ## added by CiD
                            127.0.0.1 br.winantivirus.com ## added by CiD
                            127.0.0.1 br.winfixer.com ## added by CiD
                            127.0.0.1 cdn.drivecleaner.com ## added by CiD
                            127.0.0.1 cdn.errorsafe.com ## added by CiD
                            127.0.0.1 cdn.winsoftware.com ## added by CiD
                            127.0.0.1 de.errorsafe.com ## added by CiD
                            127.0.0.1 de.winantivirus.com ## added by CiD
                            127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
                            127.0.0.1 download.cdn.errorsafe.com ## added by CiD
                            127.0.0.1 download.cdn.winsoftware.com ## added by CiD
                            127.0.0.1 download.errorsafe.com ## added by CiD
                            127.0.0.1 download.systemdoctor.com ## added by CiD
                            127.0.0.1 download.winantispyware.com ## added by CiD
                            127.0.0.1 download.windrivecleaner.com ## added by CiD
                            127.0.0.1 download.winfixer.com ## added by CiD
                            127.0.0.1 drivecleaner.com ## added by CiD
                            127.0.0.1 dynamique.drivecleaner.com ## added by CiD
                            127.0.0.1 errorprotector.com ## added by CiD
                            127.0.0.1 errorsafe.com ## added by CiD
                            127.0.0.1 es.winantivirus.com ## added by CiD
                            127.0.0.1 fr.winantivirus.com ## added by CiD
                            127.0.0.1 fr.winfixer.com ## added by CiD
                            127.0.0.1 go.drivecleaner.com ## added by CiD
                            127.0.0.1 go.errorsafe.com ## added by CiD
                            127.0.0.1 go.winantispyware.com ## added by CiD
                            127.0.0.1 go.winantivirus.com ## added by CiD
                            127.0.0.1 hk.winantivirus.com ## added by CiD
                            127.0.0.1 instlog.errorsafe.com ## added by CiD
                            127.0.0.1 instlog.winantivirus.com ## added by CiD
                            127.0.0.1 instlog.winfixer.com ## added by CiD
                            127.0.0.1 jsp.drivecleaner.com ## added by CiD
                            127.0.0.1 kb.errorsafe.com ## added by CiD
                            127.0.0.1 kb.winantivirus.com ## added by CiD
                            127.0.0.1 nl.errorsafe.com ## added by CiD
                            127.0.0.1 se.errorsafe.com ## added by CiD
                            127.0.0.1 secure.drivecleaner.com ## added by CiD
                            127.0.0.1 secure.errorsafe.com ## added by CiD
                            127.0.0.1 secure.winantispam.com ## added by CiD
                            127.0.0.1 secure.winantispy.com ## added by CiD
                            127.0.0.1 secure.winantivirus.com ## added by CiD
                            127.0.0.1 support.winantivirus.com ## added by CiD
                            127.0.0.1 trial.updates.winsoftware.com ## added by CiD
                            127.0.0.1 ulog.winantivirus.com ## added by CiD
                            127.0.0.1 utils.errorsafe.com ## added by CiD
                            127.0.0.1 utils.winantivirus.com ## added by CiD
                            127.0.0.1 utils.winfixer.com ## added by CiD
                            127.0.0.1 winantispyware.com ## added by CiD
                            127.0.0.1 winantivirus.com ## added by CiD
                            127.0.0.1 winfixer.com ## added by CiD
                            127.0.0.1 winfixer2006.com ## added by CiD
                            127.0.0.1 winsoftware.com ## added by CiD
                            127.0.0.1 www.drivecleaner.com ## added by CiD
                            127.0.0.1 www.errorprotector.com ## added by CiD
                            127.0.0.1 www.errorsafe.com ## added by CiD
                            127.0.0.1 www.systemdoctor.com ## added by CiD
                            127.0.0.1 www.utils.winfixer.com ## added by CiD
                            127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
                            127.0.0.1 www.win-virus-pro.com ## added by CiD
                            127.0.0.1 www.winantispam.com ## added by CiD
                            127.0.0.1 www.winantispy.com ## added by CiD
                            127.0.0.1 www.winantispyware.com ## added by CiD
                            127.0.0.1 www.winantivirus.com ## added by CiD
                            127.0.0.1 www.winantiviruspro.com ## added by CiD
                            127.0.0.1 www.windrivecleaner.com ## added by CiD
                            127.0.0.1 www.windrivesafe.com ## added by CiD
                            127.0.0.1 www.winfixer.com ## added by CiD
                            127.0.0.1 www.winfixer2006.com ## added by CiD
                            127.0.0.1 www.winsoftware.com ## added by CiD

                            »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

                            S!Ri's WS2Fix: LSP not Found.

                            »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

                            GenericRenosFix by S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

                            C:\Program Files\Helper\ supprimé

                            »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

                            IEDFix.exe by S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» DNS

                            HKLM\SYSTEM\CCS\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
                            HKLM\SYSTEM\CCS\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
                            HKLM\SYSTEM\CS1\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
                            HKLM\SYSTEM\CS1\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
                            HKLM\SYSTEM\CS3\Services\Tcpip\..\{36CAC07B-A3C0-4AF2-BDFC-D30B17DE2D0C}: DhcpNameServer=192.168.1.1 0.0.0.0
                            HKLM\SYSTEM\CS3\Services\Tcpip\..\{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}: DhcpNameServer=15.243.128.51 15.243.160.51
                            HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
                            HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
                            HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

                            »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

                            »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                            "System"=""

                            »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                            Nettoyage terminé.

                            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            SrchSTS.exe by S!Ri
                            Search SharedTaskScheduler's .dll

                            »»»»»»»»»»»»»»»»»»»»»»»» Fin
                            • 1
                            • 2
                            • 3

                            Discussions similaires

                            Softonic,est-ce un virus ?
                            techmel1

                            6 réponses
                            Chrome://newtab
                            Nova

                            14 réponses
                            Désinstaller Softonic
                            Diguimette

                            5 réponses
                            Supprimer New Tab
                            tysaozon

                            8 réponses
                            Bouton pause/break
                            frans003

                            3 réponses