Pub cid sur internet

hassan -

Bonjour,
voici mon problème j'ai plein de publiciter qui arrête pas d'apparaitre sur mon écran j'ai tous essyer pour essayer de les enlever mais en vain j'ai mozilla firefox comme navigateur avec l'extension de abdlock plus et j'ai avast comme anti-virus et j'ai spybot et ad-ware comme logiciel j'ai fait HijackThis v2.0.2 j(ai regarde si je n'avais pas cidhelp et j'ai suprimer le sponsor de msn plus live et j'ai toujour des pub sur internet et mozilla firefox. Que dois-je faire sil vous plaît?

Configuration: Windows Vista
Firefox 2.0.0.14

Afficher la suite

57 réponses

Résumé de la discussion

Une personne signale des publicités intrusives qui apparaissent dans Firefox malgré Adblock Plus, Avast et Spybot, après avoir utilisé HijackThis et tenté de supprimer des éléments promoteurs sous Windows. Plusieurs réponses indiquent que Combofix n’est pas nécessaire et recommandent des vérifications par des outils d’analyse, notamment des rapports Navipromo et des avertissements concernant des fichiers potentiellement légitimes. Pour Vista, des recommandations proposent de désactiver temporairement le contrôle des comptes et d’exécuter Lop S&D, tandis que d’autres précisent des différences selon XP et recommandent de poster les rapports. D'autres rappels utiles suggèrent d’utiliser les rapports générés par les outils et de distinguer les fichiers légitimes des programmes potentiellement malveillants avant toute suppression, afin d’éviter des pertes fonctionnelles et des faux positifs.

Réponse 1 / 57 - Meilleure réponse
La meilleure réponse est la réponse qui a été validée par nos équipes.
^^Marie^^
Bonjour

ComBoFix n'est pas nécessaire ici

2

Réagir
Réponse 2 / 57
nnouer12
-->- Recherche:

C:\Lop SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\Lop S&D.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Lop S&D: trouvé !
C:\Lop SD\Lop S&D.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\SystemRoot\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\Lop S&D.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\LopSD.exe: supprimé !
C:\Lop SD\Lop S&D.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\SystemRoot\HijackThis.exe: supprimé !
C:\Lop SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Lop S&D: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !
Corbeille vidée!

voici le rapport de toollscleaner

0

Réagir
Réponse 3 / 57
geoffrey5 Contributeur sécurité
marie : je lui ai demandé de faire l option 3 car les fichiers hosts étaient propres, donc il n y avait pas besoin de les réinstaller..

nnouer : relance hijackthis en cliquant sur scan only et coches ces lignes :

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

O4 - Global Startup: Autochk-DR.lnk = ?

puis tu cliques sur fix checked.

remet java à jour : java : https://www.java.com/fr/download/manual.jsp

ensuite si tu n as plus de problemes :

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

Télécharge toolscleaner sur ton Bureau : http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
* Double-clique sur ToolsCleaner2.bat et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

0

Réagir

^^Marie^^

Rebelotte

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:11][D:1]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:37][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:928][D:8]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 18:25:36,95 ]----------------------

Vous n’avez pas trouvé la réponse que vous recherchez ?

La communauté CCM répond en moyenne en moins de 2h.

Posez votre question
Réponse 5 / 57
nnouer12
Merci, merci merci
-----------------------[ Lop S&D 4.2.1-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 01/07/2008 | 18:22:23,15 ] [ PC : NOM-EB85C523610 ]
[ MAJ : 01-07-2008 | 00:25 ]

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

-------------[ Listing des dossiers dans APPLIC~1 ]------------

[28/09/2007|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
[30/08/2007|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[03/01/2005|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[16/07/2007|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[27/10/2007|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[27/12/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[11/07/2007|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astonsoft
[02/12/2007|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[24/10/2007|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[16/09/2007|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[07/02/2006|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[24/11/2004|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[27/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[27/06/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[29/10/2007|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/09/2007|05:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[03/01/2005|06:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[03/01/2005|06:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[27/06/2008|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[29/06/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[03/01/2005|06:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/08/2006|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[25/08/2006|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
[10/02/2006|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[04/11/2007|10:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[11/07/2007|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[03/01/2005|05:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[11/03/2008|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[27/06/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[25/06/2008|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[28/06/2008|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[22/08/2007|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WholeSecurity
[30/06/2006|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[24/12/2006|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[25/06/2008|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[28/12/2006|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo
[28/12/2006|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[11/09/2007|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[03/01/2005|06:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[24/11/2004|00:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[26/06/2008|19:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/01/2005|06:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[03/01/2005|06:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[06/12/2007|12:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[01/07/2008|14:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[15/08/2007|11:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[12/01/2008|21:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Anuman Interactive
[03/01/2005|06:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[25/08/2006|17:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[02/12/2007|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVG7
[30/04/2008|10:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus
[06/11/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CopyToDvd
[11/07/2007|18:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner
[24/11/2004|00:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
[19/09/2006|20:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Enregistrement Hachette
[04/02/2008|09:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ezpinst.exe
[01/07/2008|17:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\F-Secure
[14/09/2006|16:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FUJIFILM
[24/09/2006|11:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
[20/09/2006|12:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[02/07/2006|20:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[09/02/2006|21:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[07/02/2006|15:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[03/12/2007|15:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPSU_48BitScanUpdate.log
[25/06/2008|09:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[10/10/2007|13:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\inst.exe
[14/04/2008|19:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
[07/02/2006|15:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
[07/02/2006|16:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
[16/02/2006|16:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[11/06/2008|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LimeWire
[24/12/2007|18:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[29/06/2008|15:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
[25/06/2008|09:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[20/01/2007|16:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
[24/10/2006|15:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[26/08/2006|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[17/09/2006|15:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[10/02/2006|19:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
[04/11/2007|10:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nero
[01/06/2008|07:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
[20/11/2006|21:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Passeport II Prefs
[03/12/2007|15:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
[24/09/2006|11:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
[03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_InstantShareJPG.log
[03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_IZClosingDiscError.log
[20/05/2007|18:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Tools
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.cat
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.inf
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.log
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.sys
[17/08/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\RagTime
[03/01/2005|06:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[19/01/2008|16:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Shareaza
[16/02/2006|16:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[18/02/2006|18:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[20/05/2007|18:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
[26/05/2006|15:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
[23/12/2005|18:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[24/01/2007|12:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
[03/12/2007|15:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Update_HP_RedboxHprblog_HPSU.log
[20/02/2008|11:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
[28/03/2008|15:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

[14/09/2007|07:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[22/11/2007|18:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[07/01/2007|19:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[07/02/2006|20:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help
[03/01/2005|05:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[25/06/2008|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Real Dart Media

[03/01/2005|05:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[10/09/2007|06:27] C:\DOCUME~1\papa\APPLIC~1\Adobe
[03/01/2005|06:24] C:\DOCUME~1\papa\APPLIC~1\Apple Computer
[24/11/2004|00:13] C:\DOCUME~1\papa\APPLIC~1\desktop.ini
[27/08/2007|06:44] C:\DOCUME~1\papa\APPLIC~1\Google
[25/11/2004|05:26] C:\DOCUME~1\papa\APPLIC~1\Identities
[27/08/2007|06:43] C:\DOCUME~1\papa\APPLIC~1\Macromedia
[02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Microsoft
[02/09/2007|06:14] C:\DOCUME~1\papa\APPLIC~1\Mozilla
[03/01/2005|06:28] C:\DOCUME~1\papa\APPLIC~1\SampleView
[03/01/2005|06:40] C:\DOCUME~1\papa\APPLIC~1\Symantec
[02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Talkback

[26/08/2007|15:38] C:\DOCUME~1\tom\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[01/07/2008 17:56][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[25/06/2008 09:15][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[28/06/2008 07:55][--a------] C:\WINDOWS\tasks\Norton Internet Security Online - Analyse systŠme complŠte - HP_Propri‚taire.job
[25/06/2008 09:15][--a------] C:\WINDOWS\tasks\HPCeeSchedule.job
[01/07/2008 15:25][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[01/07/2008 08:42][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[07/02/2006|16:54] C:\Program Files\ABBYY FineReader 5.0 Sprint
[31/12/2007|10:31] C:\Program Files\ABBYY FineReader 6.0 Sprint
[05/09/2007|11:54] C:\Program Files\AbiSuite2
[13/02/2006|16:34] C:\Program Files\Activision Value
[03/01/2005|06:22] C:\Program Files\Adobe
[30/05/2008|17:31] C:\Program Files\Aero - QCM
[27/08/2007|11:33] C:\Program Files\Alwil Software
[10/09/2007|10:47] C:\Program Files\AntiVir PersonalEdition Classic
[12/01/2008|20:33] C:\Program Files\Anuman Interactive
[27/12/2007|18:46] C:\Program Files\Apple Software Update
[13/05/2006|15:44] C:\Program Files\ArcSoft
[01/12/2007|11:01] C:\Program Files\AskTBar
[11/07/2007|19:01] C:\Program Files\Astonsoft
[24/10/2007|15:10] C:\Program Files\Avira
[30/04/2008|10:46] C:\Program Files\Azureus
[25/10/2007|16:34] C:\Program Files\BitDefender
[28/05/2008|17:36] C:\Program Files\Bonjour
[16/09/2007|11:38] C:\Program Files\Boonty
[10/10/2007|13:01] C:\Program Files\BoontyGames
[04/08/2006|13:07] C:\Program Files\BroadJump
[27/06/2008|12:16] C:\Program Files\CCleaner
[16/03/2008|15:34] C:\Program Files\Club-Internet
[12/09/2007|15:17] C:\Program Files\Common Files
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[14/04/2008|19:25] C:\Program Files\Cristie
[10/07/2006|13:41] C:\Program Files\Cryo
[25/06/2007|15:56] C:\Program Files\Devomaxx
[25/06/2008|09:15] C:\Program Files\Easy Internet signup
[22/08/2007|08:09] C:\Program Files\EasyBurning
[22/08/2007|08:09] C:\Program Files\eBay
[08/06/2007|17:40] C:\Program Files\Empire Interactive
[27/11/2007|17:21] C:\Program Files\eMule
[28/06/2008|08:40] C:\Program Files\epson
[20/09/2007|19:26] C:\Program Files\FaxTools
[27/06/2008|09:54] C:\Program Files\Fichiers communs
[20/09/2007|17:12] C:\Program Files\FinePixViewer
[03/01/2005|06:37] C:\Program Files\Google
[22/11/2007|18:06] C:\Program Files\Grisoft
[03/01/2005|06:21] C:\Program Files\Hewlett-Packard
[03/01/2005|06:09] C:\Program Files\HP
[06/02/2007|16:29] C:\Program Files\IncrediMail
[28/06/2008|08:45] C:\Program Files\InstallShield Installation Information
[25/06/2008|17:25] C:\Program Files\Internet Explorer
[03/01/2005|06:21] C:\Program Files\InterVideo
[03/01/2005|06:24] C:\Program Files\iPod
[25/06/2008|16:10] C:\Program Files\iTunes
[03/01/2005|05:53] C:\Program Files\Java
[28/10/2007|18:29] C:\Program Files\Kaspersky Lab
[28/10/2007|12:39] C:\Program Files\Lavasoft
[03/03/2007|09:57] C:\Program Files\Lexmark X1100 Series
[28/04/2008|08:52] C:\Program Files\LimeWire
[29/06/2008|15:12] C:\Program Files\Malwarebytes' Anti-Malware
[03/01/2005|05:57] C:\Program Files\Messenger
[27/06/2008|12:24] C:\Program Files\Messenger Plus! Live
[29/09/2006|13:55] C:\Program Files\Micro Application
[19/05/2007|19:57] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[25/11/2004|05:27] C:\Program Files\microsoft frontpage
[03/01/2005|06:23] C:\Program Files\Microsoft Office
[05/12/2007|18:02] C:\Program Files\Microsoft SQL Server Compact Edition
[28/03/2008|10:37] C:\Program Files\Microsoft Visual Studio
[03/01/2005|06:23] C:\Program Files\Microsoft Works
[10/01/2007|10:25] C:\Program Files\MioNet
[10/08/2007|17:05] C:\Program Files\Monkeymen Calendar
[23/06/2008|13:07] C:\Program Files\Motive
[25/11/2004|05:27] C:\Program Files\Movie Maker
[27/06/2008|13:57] C:\Program Files\Mozilla Firefox
[29/06/2008|10:04] C:\Program Files\MSN
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[27/06/2008|12:24] C:\Program Files\MSN Messenger
[15/08/2007|08:26] C:\Program Files\MSXML 4.0
[03/01/2005|06:27] C:\Program Files\muvee Technologies
[29/06/2008|13:57] C:\Program Files\Navilog1
[04/11/2007|10:37] C:\Program Files\Nero
[25/06/2008|16:35] C:\Program Files\NetMeeting
[27/12/2007|16:22] C:\Program Files\Norton Security Scan
[12/01/2008|20:47] C:\Program Files\NRJ
[25/11/2004|05:27] C:\Program Files\Online Services
[05/09/2007|15:19] C:\Program Files\OpenOffice.org 2.2
[29/10/2007|12:47] C:\Program Files\OpenOffice.org 2.3
[25/06/2008|17:29] C:\Program Files\Outlook Express
[27/06/2008|15:17] C:\Program Files\Pack Securite
[03/01/2005|06:39] C:\Program Files\PC-Doctor 5 for Windows
[24/12/2006|19:37] C:\Program Files\Philips
[03/01/2005|06:24] C:\Program Files\QuickTime
[22/08/2007|08:11] C:\Program Files\RagTime Solo
[16/08/2007|15:33] C:\Program Files\Rainlendar2
[22/08/2007|08:03] C:\Program Files\Recovery for Excel
[29/10/2007|09:05] C:\Program Files\RegCleaner
[14/09/2006|16:14] C:\Program Files\REGSHAVE
[15/10/2007|11:38] C:\Program Files\Secret Maryo Chronicles
[03/01/2005|06:36] C:\Program Files\Services en ligne
[19/01/2008|16:41] C:\Program Files\Shareaza
[30/12/2007|08:58] C:\Program Files\Shareaza Applications
[28/09/2007|16:57] C:\Program Files\SlySoft
[12/11/2007|12:44] C:\Program Files\Softwin
[03/01/2005|06:20] C:\Program Files\Sonic
[11/03/2008|15:54] C:\Program Files\Spybot - Search & Destroy
[16/09/2007|09:47] C:\Program Files\Stunt Playground
[17/04/2008|08:18] C:\Program Files\The Game Factory
[29/06/2008|13:48] C:\Program Files\Trend Micro
[29/10/2007|10:52] C:\Program Files\Tweak-XP Pro 4
[24/11/2004|03:37] C:\Program Files\Uninstall Information
[20/02/2008|11:24] C:\Program Files\VideoLAN
[10/11/2007|10:18] C:\Program Files\VSO
[27/06/2008|13:59] C:\Program Files\Windows Live
[25/06/2008|16:49] C:\Program Files\Windows Live Favorites
[11/01/2007|20:01] C:\Program Files\Windows Live Safety Center
[25/06/2008|16:50] C:\Program Files\Windows Live Toolbar
[12/01/2008|20:16] C:\Program Files\Windows Media Components
[02/01/2007|17:13] C:\Program Files\Windows Media Connect 2
[25/06/2008|17:30] C:\Program Files\Windows Media Player
[25/06/2008|16:35] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[25/11/2004|05:28] C:\Program Files\xerox
[29/12/2007|18:14] C:\Program Files\Yahoo!
[30/11/2007|13:37] C:\Program Files\ZTWinCNO

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/01/2005|06:22] C:\Program Files\Fichiers communs\Adobe
[15/08/2007|10:09] C:\Program Files\Fichiers communs\Ahead
[27/12/2007|18:45] C:\Program Files\Fichiers communs\Apple
[13/05/2006|15:48] C:\Program Files\Fichiers communs\ArcSoft
[11/07/2007|19:01] C:\Program Files\Fichiers communs\Astonsoft
[12/01/2008|10:42] C:\Program Files\Fichiers communs\BitDefender
[16/09/2007|11:43] C:\Program Files\Fichiers communs\BOONTY Shared
[20/01/2007|16:03] C:\Program Files\Fichiers communs\Designer
[03/01/2005|06:15] C:\Program Files\Fichiers communs\Hewlett-Packard
[03/01/2005|06:12] C:\Program Files\Fichiers communs\HP
[03/01/2005|06:26] C:\Program Files\Fichiers communs\InstallShield
[03/01/2005|05:53] C:\Program Files\Fichiers communs\Java
[29/09/2006|13:55] C:\Program Files\Fichiers communs\Micro Application Shared
[03/01/2005|06:23] C:\Program Files\Fichiers communs\Microsoft Shared
[16/04/2007|13:53] C:\Program Files\Fichiers communs\Motive
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[03/01/2005|06:27] C:\Program Files\Fichiers communs\muvee Technologies
[04/11/2007|10:39] C:\Program Files\Fichiers communs\Nero
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[25/06/2008|16:35] C:\Program Files\Fichiers communs\Services
[12/11/2007|12:44] C:\Program Files\Fichiers communs\Softwin
[03/01/2005|06:19] C:\Program Files\Fichiers communs\Sonic Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[03/01/2005|06:19] C:\Program Files\Fichiers communs\SureThing Shared
[27/06/2008|13:06] C:\Program Files\Fichiers communs\Symantec Shared
[25/06/2008|17:29] C:\Program Files\Fichiers communs\System
[03/01/2005|06:20] C:\Program Files\Fichiers communs\TiVo Shared
[05/12/2007|17:56] C:\Program Files\Fichiers communs\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 55

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-01 18:25:15
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

[F:11][D:1]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:37][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:928][D:8]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 18:25:36,95 ]----------------------

0

Réagir
Réponse 6 / 57
nnouer12
Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci Merci, merci merci .je n'en reveiens pas plus de cids merci geoffrey 5 t'es trop fort et trop sympa

0

Réagir
Réponse 7 / 57
nnouer12
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:38:02, on 01/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\lecompagnonclub.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE
O4 - Global Startup: Autochk-DR.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

0

Réagir
Réponse 8 / 57
^^Marie^^
Et pourquoi l'option 3 ???

0

Réagir
Réponse 9 / 57
geoffrey5 Contributeur sécurité
merci marie... ;)

nnouer : relance lopSD et choisi l option 3 pour le nettoyage

ensuite refais un nouveau rapport hijack stp

0

Réagir

^^Marie^^

Slt

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:26][D:6]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:129][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:5592][D:12]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 17:03:06,93 ]----------------------

??????????

Réponse 11 / 57
geoffrey5 Contributeur sécurité
Salut !!

fais un nouveau rapport hijack stp

0

Réagir
Réponse 12 / 57
nnouer12
ça c'est le rapport lop S&B

-----------------------[ Lop S&D 4.2.1-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 01/07/2008 | 17:00:59,09 ] [ PC : NOM-EB85C523610 ]
[ MAJ : 01-07-2008 | 00:25 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns\second bend.exe
Supprime! - C:\WINDOWS\Prefetch\SECOND BEND.EXE-2012B6F8.pf
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.casinoking[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@casinoking[1].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

-------------[ Listing des dossiers dans APPLIC~1 ]------------

[28/09/2007|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
[30/08/2007|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[03/01/2005|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[16/07/2007|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[27/10/2007|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[27/12/2007|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[11/07/2007|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astonsoft
[02/12/2007|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[24/10/2007|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[16/09/2007|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[07/02/2006|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[24/11/2004|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[27/06/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[27/06/2008|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[29/10/2007|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/09/2007|05:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[03/01/2005|06:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[03/01/2005|06:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[27/06/2008|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[29/06/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[03/01/2005|06:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/08/2006|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[25/08/2006|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
[10/02/2006|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[04/11/2007|10:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[11/07/2007|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[03/01/2005|05:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[11/03/2008|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[27/06/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[25/06/2008|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[28/06/2008|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[22/08/2007|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WholeSecurity
[30/06/2006|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[24/12/2006|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[25/06/2008|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[28/12/2006|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo
[28/12/2006|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[11/09/2007|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[03/01/2005|06:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[24/11/2004|00:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[26/06/2008|19:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/01/2005|06:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[03/01/2005|06:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[06/12/2007|12:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[01/07/2008|14:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[15/08/2007|11:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[12/01/2008|21:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Anuman Interactive
[03/01/2005|06:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[25/08/2006|17:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[02/12/2007|10:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVG7
[30/04/2008|10:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus
[06/11/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CopyToDvd
[11/07/2007|18:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner
[24/11/2004|00:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
[19/09/2006|20:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Enregistrement Hachette
[04/02/2008|09:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\EPSON
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ezpinst.exe
[14/09/2006|16:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FUJIFILM
[24/09/2006|11:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
[20/09/2006|12:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[02/07/2006|20:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[09/02/2006|21:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[07/02/2006|15:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[03/12/2007|15:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPSU_48BitScanUpdate.log
[25/06/2008|09:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[10/10/2007|13:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\inst.exe
[14/04/2008|19:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
[07/02/2006|15:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
[07/02/2006|16:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
[16/02/2006|16:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[11/06/2008|11:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LimeWire
[24/12/2007|18:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[29/06/2008|15:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes
[25/06/2008|09:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[20/01/2007|16:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
[24/10/2006|15:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[26/08/2006|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[17/09/2006|15:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[10/02/2006|19:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
[04/11/2007|10:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nero
[01/06/2008|07:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
[20/11/2006|21:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Passeport II Prefs
[03/12/2007|15:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
[24/09/2006|11:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
[03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_InstantShareJPG.log
[03/12/2007|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_IZClosingDiscError.log
[20/05/2007|18:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Tools
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.cat
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.inf
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.log
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pcouffin.sys
[17/08/2007|15:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\RagTime
[03/01/2005|06:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[19/01/2008|16:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Shareaza
[16/02/2006|16:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[18/02/2006|18:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[20/05/2007|18:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
[26/05/2006|15:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
[23/12/2005|18:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[24/01/2007|12:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
[03/12/2007|15:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Update_HP_RedboxHprblog_HPSU.log
[20/02/2008|11:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
[10/11/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
[28/03/2008|15:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

[14/09/2007|07:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[22/11/2007|18:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[07/01/2007|19:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[07/02/2006|20:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help
[03/01/2005|05:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[25/06/2008|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Real Dart Media

[03/01/2005|05:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[10/09/2007|06:27] C:\DOCUME~1\papa\APPLIC~1\Adobe
[03/01/2005|06:24] C:\DOCUME~1\papa\APPLIC~1\Apple Computer
[24/11/2004|00:13] C:\DOCUME~1\papa\APPLIC~1\desktop.ini
[27/08/2007|06:44] C:\DOCUME~1\papa\APPLIC~1\Google
[25/11/2004|05:26] C:\DOCUME~1\papa\APPLIC~1\Identities
[27/08/2007|06:43] C:\DOCUME~1\papa\APPLIC~1\Macromedia
[02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Microsoft
[02/09/2007|06:14] C:\DOCUME~1\papa\APPLIC~1\Mozilla
[03/01/2005|06:28] C:\DOCUME~1\papa\APPLIC~1\SampleView
[03/01/2005|06:40] C:\DOCUME~1\papa\APPLIC~1\Symantec
[02/09/2007|06:15] C:\DOCUME~1\papa\APPLIC~1\Talkback

[26/08/2007|15:38] C:\DOCUME~1\tom\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[01/07/2008 16:56][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[25/06/2008 09:15][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[28/06/2008 07:55][--a------] C:\WINDOWS\tasks\Norton Internet Security Online - Analyse systŠme complŠte - HP_Propri‚taire.job
[25/06/2008 09:15][--a------] C:\WINDOWS\tasks\HPCeeSchedule.job
[01/07/2008 15:25][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[01/07/2008 08:42][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[07/02/2006|16:54] C:\Program Files\ABBYY FineReader 5.0 Sprint
[31/12/2007|10:31] C:\Program Files\ABBYY FineReader 6.0 Sprint
[05/09/2007|11:54] C:\Program Files\AbiSuite2
[13/02/2006|16:34] C:\Program Files\Activision Value
[03/01/2005|06:22] C:\Program Files\Adobe
[30/05/2008|17:31] C:\Program Files\Aero - QCM
[27/08/2007|11:33] C:\Program Files\Alwil Software
[10/09/2007|10:47] C:\Program Files\AntiVir PersonalEdition Classic
[12/01/2008|20:33] C:\Program Files\Anuman Interactive
[27/12/2007|18:46] C:\Program Files\Apple Software Update
[13/05/2006|15:44] C:\Program Files\ArcSoft
[01/12/2007|11:01] C:\Program Files\AskTBar
[11/07/2007|19:01] C:\Program Files\Astonsoft
[24/10/2007|15:10] C:\Program Files\Avira
[30/04/2008|10:46] C:\Program Files\Azureus
[25/10/2007|16:34] C:\Program Files\BitDefender
[28/05/2008|17:36] C:\Program Files\Bonjour
[16/09/2007|11:38] C:\Program Files\Boonty
[10/10/2007|13:01] C:\Program Files\BoontyGames
[04/08/2006|13:07] C:\Program Files\BroadJump
[27/06/2008|12:16] C:\Program Files\CCleaner
[16/03/2008|15:34] C:\Program Files\Club-Internet
[12/09/2007|15:17] C:\Program Files\Common Files
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[14/04/2008|19:25] C:\Program Files\Cristie
[10/07/2006|13:41] C:\Program Files\Cryo
[25/06/2007|15:56] C:\Program Files\Devomaxx
[25/06/2008|09:15] C:\Program Files\Easy Internet signup
[22/08/2007|08:09] C:\Program Files\EasyBurning
[22/08/2007|08:09] C:\Program Files\eBay
[08/06/2007|17:40] C:\Program Files\Empire Interactive
[27/11/2007|17:21] C:\Program Files\eMule
[28/06/2008|08:40] C:\Program Files\epson
[20/09/2007|19:26] C:\Program Files\FaxTools
[27/06/2008|09:54] C:\Program Files\Fichiers communs
[20/09/2007|17:12] C:\Program Files\FinePixViewer
[03/01/2005|06:37] C:\Program Files\Google
[22/11/2007|18:06] C:\Program Files\Grisoft
[03/01/2005|06:21] C:\Program Files\Hewlett-Packard
[03/01/2005|06:09] C:\Program Files\HP
[06/02/2007|16:29] C:\Program Files\IncrediMail
[28/06/2008|08:45] C:\Program Files\InstallShield Installation Information
[25/06/2008|17:25] C:\Program Files\Internet Explorer
[03/01/2005|06:21] C:\Program Files\InterVideo
[03/01/2005|06:24] C:\Program Files\iPod
[25/06/2008|16:10] C:\Program Files\iTunes
[03/01/2005|05:53] C:\Program Files\Java
[28/10/2007|18:29] C:\Program Files\Kaspersky Lab
[28/10/2007|12:39] C:\Program Files\Lavasoft
[03/03/2007|09:57] C:\Program Files\Lexmark X1100 Series
[28/04/2008|08:52] C:\Program Files\LimeWire
[29/06/2008|15:12] C:\Program Files\Malwarebytes' Anti-Malware
[03/01/2005|05:57] C:\Program Files\Messenger
[27/06/2008|12:24] C:\Program Files\Messenger Plus! Live
[29/09/2006|13:55] C:\Program Files\Micro Application
[19/05/2007|19:57] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[25/11/2004|05:27] C:\Program Files\microsoft frontpage
[03/01/2005|06:23] C:\Program Files\Microsoft Office
[05/12/2007|18:02] C:\Program Files\Microsoft SQL Server Compact Edition
[28/03/2008|10:37] C:\Program Files\Microsoft Visual Studio
[03/01/2005|06:23] C:\Program Files\Microsoft Works
[10/01/2007|10:25] C:\Program Files\MioNet
[10/08/2007|17:05] C:\Program Files\Monkeymen Calendar
[23/06/2008|13:07] C:\Program Files\Motive
[25/11/2004|05:27] C:\Program Files\Movie Maker
[27/06/2008|13:57] C:\Program Files\Mozilla Firefox
[29/06/2008|10:04] C:\Program Files\MSN
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[27/06/2008|12:24] C:\Program Files\MSN Messenger
[15/08/2007|08:26] C:\Program Files\MSXML 4.0
[03/01/2005|06:27] C:\Program Files\muvee Technologies
[29/06/2008|13:57] C:\Program Files\Navilog1
[04/11/2007|10:37] C:\Program Files\Nero
[25/06/2008|16:35] C:\Program Files\NetMeeting
[27/12/2007|16:22] C:\Program Files\Norton Security Scan
[12/01/2008|20:47] C:\Program Files\NRJ
[25/11/2004|05:27] C:\Program Files\Online Services
[05/09/2007|15:19] C:\Program Files\OpenOffice.org 2.2
[29/10/2007|12:47] C:\Program Files\OpenOffice.org 2.3
[25/06/2008|17:29] C:\Program Files\Outlook Express
[27/06/2008|15:17] C:\Program Files\Pack Securite
[03/01/2005|06:39] C:\Program Files\PC-Doctor 5 for Windows
[24/12/2006|19:37] C:\Program Files\Philips
[03/01/2005|06:24] C:\Program Files\QuickTime
[22/08/2007|08:11] C:\Program Files\RagTime Solo
[16/08/2007|15:33] C:\Program Files\Rainlendar2
[22/08/2007|08:03] C:\Program Files\Recovery for Excel
[29/10/2007|09:05] C:\Program Files\RegCleaner
[14/09/2006|16:14] C:\Program Files\REGSHAVE
[15/10/2007|11:38] C:\Program Files\Secret Maryo Chronicles
[03/01/2005|06:36] C:\Program Files\Services en ligne
[19/01/2008|16:41] C:\Program Files\Shareaza
[30/12/2007|08:58] C:\Program Files\Shareaza Applications
[28/09/2007|16:57] C:\Program Files\SlySoft
[12/11/2007|12:44] C:\Program Files\Softwin
[03/01/2005|06:20] C:\Program Files\Sonic
[11/03/2008|15:54] C:\Program Files\Spybot - Search & Destroy
[16/09/2007|09:47] C:\Program Files\Stunt Playground
[17/04/2008|08:18] C:\Program Files\The Game Factory
[29/06/2008|13:48] C:\Program Files\Trend Micro
[29/10/2007|10:52] C:\Program Files\Tweak-XP Pro 4
[24/11/2004|03:37] C:\Program Files\Uninstall Information
[20/02/2008|11:24] C:\Program Files\VideoLAN
[10/11/2007|10:18] C:\Program Files\VSO
[27/06/2008|13:59] C:\Program Files\Windows Live
[25/06/2008|16:49] C:\Program Files\Windows Live Favorites
[11/01/2007|20:01] C:\Program Files\Windows Live Safety Center
[25/06/2008|16:50] C:\Program Files\Windows Live Toolbar
[12/01/2008|20:16] C:\Program Files\Windows Media Components
[02/01/2007|17:13] C:\Program Files\Windows Media Connect 2
[25/06/2008|17:30] C:\Program Files\Windows Media Player
[25/06/2008|16:35] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[25/11/2004|05:28] C:\Program Files\xerox
[29/12/2007|18:14] C:\Program Files\Yahoo!
[30/11/2007|13:37] C:\Program Files\ZTWinCNO

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/01/2005|06:22] C:\Program Files\Fichiers communs\Adobe
[15/08/2007|10:09] C:\Program Files\Fichiers communs\Ahead
[27/12/2007|18:45] C:\Program Files\Fichiers communs\Apple
[13/05/2006|15:48] C:\Program Files\Fichiers communs\ArcSoft
[11/07/2007|19:01] C:\Program Files\Fichiers communs\Astonsoft
[12/01/2008|10:42] C:\Program Files\Fichiers communs\BitDefender
[16/09/2007|11:43] C:\Program Files\Fichiers communs\BOONTY Shared
[20/01/2007|16:03] C:\Program Files\Fichiers communs\Designer
[03/01/2005|06:15] C:\Program Files\Fichiers communs\Hewlett-Packard
[03/01/2005|06:12] C:\Program Files\Fichiers communs\HP
[03/01/2005|06:26] C:\Program Files\Fichiers communs\InstallShield
[03/01/2005|05:53] C:\Program Files\Fichiers communs\Java
[29/09/2006|13:55] C:\Program Files\Fichiers communs\Micro Application Shared
[03/01/2005|06:23] C:\Program Files\Fichiers communs\Microsoft Shared
[16/04/2007|13:53] C:\Program Files\Fichiers communs\Motive
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[03/01/2005|06:27] C:\Program Files\Fichiers communs\muvee Technologies
[04/11/2007|10:39] C:\Program Files\Fichiers communs\Nero
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[25/06/2008|16:35] C:\Program Files\Fichiers communs\Services
[12/11/2007|12:44] C:\Program Files\Fichiers communs\Softwin
[03/01/2005|06:19] C:\Program Files\Fichiers communs\Sonic Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[03/01/2005|06:19] C:\Program Files\Fichiers communs\SureThing Shared
[27/06/2008|13:06] C:\Program Files\Fichiers communs\Symantec Shared
[25/06/2008|17:29] C:\Program Files\Fichiers communs\System
[03/01/2005|06:20] C:\Program Files\Fichiers communs\TiVo Shared
[05/12/2007|17:56] C:\Program Files\Fichiers communs\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 54

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-01 17:02:41
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

[F:26][D:6]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:129][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:5592][D:12]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 17:03:06,93 ]----------------------

0

Réagir
Réponse 13 / 57
geoffrey5 Contributeur sécurité
Salut nnouer !!

excuse moi mais c est quoi pour un rapport ca?? lol

0

Réagir
Réponse 14 / 57
nnouer12
dslé mais j'avais du m'absenter ci joint rapport hitachis
StartupList report, 01/07/2008, 13:55:10
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\lecompagnonclub.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage]
Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage]
Autochk-DR.lnk = ?
HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0\bin\jusched.exe
hpsysdrv = c:\windows\system\hpsysdrv.exe
Raccourci vers la page des propriétés de High Definition Audio = HDAShCut.exe
IgfxTray = C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe
Persistence = C:\WINDOWS\system32\igfxpers.exe
SoundMan = SOUNDMAN.EXE
AlcWzrd = ALCWZRD.EXE
Alcmtr = ALCMTR.EXE
HPHUPD08 = c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
KBD = C:\HP\KBD\KBD.EXE
Recguard = C:\WINDOWS\SMINST\RECGUARD.EXE
PS2 = C:\WINDOWS\system32\ps2.exe
LSBWatcher = c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
Reminder = "C:\Windows\Creator\Remind_XP.exe"
Flag Owns Live Grim = C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
F-Secure Manager = "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
F-Secure TNB = "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
EPSON Stylus DX5000 Series = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
BJCFD = C:\Program Files\BroadJump\Client Foundation\CFD.exe
StandardInstall =

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsnMsgr = "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - c:\program files\google\googletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Windows Live Toolbar\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
(no name) - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}

--------------------------------------------------

Enumerating Task Scheduler jobs:

AppleSoftwareUpdate.job
Connexion facile à Internet.job
HPCeeSchedule.job
Norton Internet Security Online - Analyse système complète - HP_Propriétaire.job
Vérifier les mises à jour de Windows Live Toolbar.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
CODEBASE = http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nszE7.tmp\IPToolsDLL.dll||C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nszE7.tmp\

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 8 705 bytes
Report generated in 0,078 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

0

Réagir
Réponse 15 / 57
nnouer12
dslé mais j'avais du m'absenter ci joint rapport hitachis
StartupList report, 01/07/2008, 13:55:10
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\lecompagnonclub.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\OLIFAXVX\TOOLBAR.EXE
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage]
Barre d'Outils Olitec.lnk = C:\OLIFAXVX\TOOLBAR.EXE
Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
Moniteur Fax-Voix.lnk = C:\OLIFAXVX\MONITEUR.EXE

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage]
Autochk-DR.lnk = ?
HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0\bin\jusched.exe
hpsysdrv = c:\windows\system\hpsysdrv.exe
Raccourci vers la page des propriétés de High Definition Audio = HDAShCut.exe
IgfxTray = C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe
Persistence = C:\WINDOWS\system32\igfxpers.exe
SoundMan = SOUNDMAN.EXE
AlcWzrd = ALCWZRD.EXE
Alcmtr = ALCMTR.EXE
HPHUPD08 = c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
KBD = C:\HP\KBD\KBD.EXE
Recguard = C:\WINDOWS\SMINST\RECGUARD.EXE
PS2 = C:\WINDOWS\system32\ps2.exe
LSBWatcher = c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
Reminder = "C:\Windows\Creator\Remind_XP.exe"
Flag Owns Live Grim = C:\Documents and Settings\All Users\Application Data\Software rule flag owns\second bend.exe
F-Secure Manager = "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
F-Secure TNB = "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
EPSON Stylus DX5000 Series = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S13F.tmp" /EF "HKLM"
BJCFD = C:\Program Files\BroadJump\Client Foundation\CFD.exe
StandardInstall =

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsnMsgr = "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - c:\program files\google\googletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Windows Live Toolbar\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
(no name) - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}

--------------------------------------------------

Enumerating Task Scheduler jobs:

AppleSoftwareUpdate.job
Connexion facile à Internet.job
HPCeeSchedule.job
Norton Internet Security Online - Analyse système complète - HP_Propriétaire.job
Vérifier les mises à jour de Windows Live Toolbar.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
CODEBASE = http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nszE7.tmp\IPToolsDLL.dll||C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nszE7.tmp\

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 8 705 bytes
Report generated in 0,078 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

0

Réagir
Réponse 16 / 57
gil le fantom
oublie pas geoffrey qu'il a une infection CID
avant d'utiliser combofix

tu télécharge : (by Moe) :
http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

Double clic sur Lopxpsetup.exe pour lancer l'installation
Au menu, choisir l'option 1
Patienter jusqu'à que l'on demande d'appuyer sur une touche,tu appuies
Un rapport sera crée, copie/colle sur le forum.

a+

0

Réagir
Réponse 17 / 57
geoffrey5 Contributeur sécurité
ok...Fais quand meme combofix et un nouveau rapport hijackthis stp

0

Réagir
Réponse 18 / 57
nnouer12
16:38:38 29/06/2008
mbam-log-6-29-2008 (16-38-38).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 175268
Temps écoulé: 57 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\PlayMP3z\uninstall.exe (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

0

Réagir
Réponse 19 / 57
geoffrey5 Contributeur sécurité
on va essayer autrement...tu aurais du créer ton propre topic mais bon...tampis.

Télécharger sur le bureau malware bytes : http://ww.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware?thread

= double-clic sur mbam-setup pour lancer l'installation
= Installer simplement sans rien modifier
= Quand le programme lancé ==> faire une mise à jour ensuite cocher Exécuter un examen complet
= Clic Rechercher
= Eventuellement décocher les disque à ne pas analyser
= Clic Lancer l'examen
= En fin de scan , si infection trouvée
==> Clic Afficher résultat
= Fermer vos applications en cours
= Vérifier si tout est coché et clic Supprimer la sélection

un rapport s'ouvre le copier et le coller dans la réponse

Puis redémarrer le pc !!

ensuite :

télécharge combofix (par sUBs) ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

et enregistre le sur le Bureau.

déconnecte toi d'internet et ferme toutes tes applications.

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

double-clique sur combofix.exe et suis les instructions

à la fin, il va produire un rapport C:\ComboFix.txt

réactive ton parefeu, ton antivirus, la garde de ton antispyware

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

0

Réagir
Réponse 20 / 57
nnouer12
en plus j'ai oublié de te dire que j'ai windows XP et no vista merci de ton aide c'est sympa

0

Réagir
- 1
- 2
- 3
Suivant

Pub cid sur internet

57 réponses

Discussions similaires

Newsletters