DR/Shopper.V.14.
RésoluJ'ai fait un scanner avec antivir et il a détecté ce virus DR/Shopper.V.14.
Je ne sais pas comment le supprimer et le scanner s'est arrêté à 7.2%.
Pourriez vous m'aider svp ?
Configuration: Windows XP Firefox 3.0.3
50 réponses
Un utilisateur signale la détection du virus DR/Shopper.V.14 par un antivirus sur Windows XP et l'arrêt du scan à environ 7%, nécessitant une aide pour l'éliminer. Plusieurs pistes privilégient des outils de nettoyage en ligne ou hors ligne et des contrôles des éléments résiduels, notamment un scanner en ligne et des vérifications du registre. Des conseils proposent des rapports à sauvegarder en format texte et l'utilisation d'outils comme WinRAR pour manipuler les fichiers, avec des instructions sur les contrôles ActiveX et les scans en ligne. Nouvelle précision utile : le rapport peut être sauvegardé en fichier texte et partagé pour analyse, tandis que des ressources expliquent comment résoudre les problématiques liées à l'installation des contrôles ActiveX.
-
ModérateurSans problème ;)
-
Pas grave,ça fait plaisir cette solidarité virtuelle :)
J'ai pas pu te tenir au courant plus tôt car le virus m'empêchait de me connecter sur internet. -
ModérateurBonne journée et désolé encore ;)
-
ModérateurJe suis désolé mais je ne sais pas d'où ça peut venir.
-
Donc antivir a été réinstallé en français et le scan s'arrête toujours à 7,2% à ce fichier:
C:/Documents and Settings/CEDRIC/.housecall6.6/.../Dc284.exe.bac_a03280-->unknowndir/chrome.manifest -
ModérateurMaintenant, tu peux ouvrir le fichier.
-
J'ai installé winrar et maintenant je fais quoi avec ?
-
ModérateurIl te faut Winrar :
https://www.commentcamarche.net/telecharger/utilitaires/24097-winrar/ -
Windows ne peut pas ouvrir ce fichier,Windows doit connaitre le programme utilisé pour sa création.Windows peut faire une recherche en ligne automatique.
C'est ce que j'ai fait et je tombe là-dessus :Windows has the following information about this file type. This page will help you find software needed to open your file.
File Type: Unknown
Description: Windows does not recognize this file type.
You may search the following Web site for related software and information:
Sinon j'ai fait un scanner gratuit de trend.Pendant ce san,antivir (?) détecte ce maudit virus.Je coche "delete" et je refais un scan trend et rebelote il redétecte le virus (?) donc je coche "move in quarantaine".Je refais un scan trend et le virus est toujours présent !!!
Je fais un sacn antivir et il s'arrête toujours à 7,4% en précisant que le scan is finished -
ModérateurEssaie avec cette version :
https://www.mediafire.com/?sharekey=1ab12433e284b403d2db6fb9a8902bda -
j'ai fait un scan apres avoir désinstaller puis réinstaller antivir mais le scan s'arrete toujours a 7,4% et ne continue pas.
-
Modérateur---> Désinstalle et réinstalle Antivir pour voir.
-
c'est le site du comité d entreprise d adecco
-
oui c'est une clé USB qu'adecco m a offert et j y ai mis mes photos dessus
-
Modérateurwww.CCE-ADECCO.com
----> Ça te dit quelque chose ? -
--------------------\\ Lop S&D 4.2.4-9c XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
BIOS : BIOS Date: 09/15/06 14:16:08 Ver: A7255VIE V1.0B3T
USER : CEDRIC ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:153 Go (Free:94 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 07/11/2008|19:12 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[19/10/2008|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/01/2008|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Age of Empires 3
[13/05/2007|10:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[21/05/2008|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/05/2008|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[31/07/2008|22:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg8
[28/09/2008|09:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[13/05/2007|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[29/10/2008|16:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[13/04/2008|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[25/01/2008|15:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[31/01/2008|20:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/05/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[07/05/2008|11:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant
[18/08/2007|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[05/11/2008|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[10/03/2008|17:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/07/2008|17:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[26/10/2008|20:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[21/08/2007|18:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
[26/02/2008|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PrettyGoodGames
[19/11/2007|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SimCity Societies
[08/03/2008|18:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[29/10/2008|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[06/03/2008|12:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpieleEntwicklungsKombinat
[02/10/2008|06:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/02/2008|20:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[10/10/2008|23:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tixeo
[12/05/2007|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[10/03/2008|17:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[01/03/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[19/10/2008|16:17] C:\DOCUME~1\CEDRIC\APPLIC~1\Adobe
[17/07/2007|19:27] C:\DOCUME~1\CEDRIC\APPLIC~1\Ahead
[10/08/2008|21:28] C:\DOCUME~1\CEDRIC\APPLIC~1\Apple Computer
[13/05/2007|12:59] C:\DOCUME~1\CEDRIC\APPLIC~1\CyberLink
[31/07/2008|19:22] C:\DOCUME~1\CEDRIC\APPLIC~1\Desktopicon
[20/03/2008|12:47] C:\DOCUME~1\CEDRIC\APPLIC~1\Desperate Housewives
[21/06/2007|21:33] C:\DOCUME~1\CEDRIC\APPLIC~1\DivX
[01/10/2008|22:22] C:\DOCUME~1\CEDRIC\APPLIC~1\EoRezo
[25/01/2008|16:48] C:\DOCUME~1\CEDRIC\APPLIC~1\F-Secure
[12/07/2008|19:31] C:\DOCUME~1\CEDRIC\APPLIC~1\Google
[24/05/2007|21:34] C:\DOCUME~1\CEDRIC\APPLIC~1\Help
[12/05/2007|12:58] C:\DOCUME~1\CEDRIC\APPLIC~1\Identities
[24/01/2008|16:20] C:\DOCUME~1\CEDRIC\APPLIC~1\InstallShield
[27/03/2008|16:14] C:\DOCUME~1\CEDRIC\APPLIC~1\InterTrust
[10/08/2008|11:11] C:\DOCUME~1\CEDRIC\APPLIC~1\ItsLabel
[12/05/2007|13:03] C:\DOCUME~1\CEDRIC\APPLIC~1\Macromedia
[05/11/2008|23:31] C:\DOCUME~1\CEDRIC\APPLIC~1\Malwarebytes
[31/07/2008|22:01] C:\DOCUME~1\CEDRIC\APPLIC~1\Microsoft
[27/08/2008|14:47] C:\DOCUME~1\CEDRIC\APPLIC~1\Mozilla
[14/04/2008|21:02] C:\DOCUME~1\CEDRIC\APPLIC~1\MSNInstaller
[07/11/2008|18:01] C:\DOCUME~1\CEDRIC\APPLIC~1\OpenOffice.org2
[27/08/2008|14:14] C:\DOCUME~1\CEDRIC\APPLIC~1\Opera
[31/10/2008|10:06] C:\DOCUME~1\CEDRIC\APPLIC~1\Paltalk
[21/02/2008|20:33] C:\DOCUME~1\CEDRIC\APPLIC~1\SecondLife
[07/11/2008|19:08] C:\DOCUME~1\CEDRIC\APPLIC~1\Skype
[07/11/2008|07:31] C:\DOCUME~1\CEDRIC\APPLIC~1\skypePM
[29/10/2008|16:46] C:\DOCUME~1\CEDRIC\APPLIC~1\Sony
[06/03/2008|12:53] C:\DOCUME~1\CEDRIC\APPLIC~1\SpieleEntwicklungsKombinat
[12/05/2007|20:52] C:\DOCUME~1\CEDRIC\APPLIC~1\Sun
[10/10/2008|23:59] C:\DOCUME~1\CEDRIC\APPLIC~1\Tixeo
[30/10/2008|21:40] C:\DOCUME~1\CEDRIC\APPLIC~1\Touchstone
[01/03/2008|15:31] C:\DOCUME~1\CEDRIC\APPLIC~1\Yahoo!
[20/03/2008|12:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Desperate Housewives
[12/05/2007|12:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[30/08/2008|21:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[31/07/2008|22:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[31/07/2008|22:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\windows\tasks
[07/11/2008 19:09][--a------] C:\windows\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
[07/11/2008 18:44][--ah-----] C:\windows\tasks\SA.DAT
[05/08/2004 13:00][-r-h-----] C:\windows\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[28/03/2008|19:21] C:\Program Files\2K Games
[04/09/2008|11:34] C:\Program Files\Adobe
[30/10/2008|18:37] C:\Program Files\AGEIA Technologies
[13/05/2007|10:15] C:\Program Files\Ahead
[13/04/2008|14:14] C:\Program Files\Alwil Software
[21/05/2008|22:48] C:\Program Files\Apple Software Update
[01/07/2008|18:44] C:\Program Files\AVG
[28/09/2008|09:15] C:\Program Files\Avira
[28/03/2008|19:01] C:\Program Files\Bad Day LA
[21/05/2008|22:49] C:\Program Files\Bonjour
[20/03/2008|12:14] C:\Program Files\Buena Vista Games
[19/07/2008|19:21] C:\Program Files\bwin
[19/10/2008|16:17] C:\Program Files\Canal
[06/11/2008|18:44] C:\Program Files\CCleaner
[12/05/2007|12:48] C:\Program Files\ComPlus Applications
[22/03/2008|17:47] C:\Program Files\Cornelsen
[04/04/2008|18:03] C:\Program Files\Cyanide
[13/05/2007|10:18] C:\Program Files\CyberLink
[23/09/2007|16:21] C:\Program Files\directx
[12/05/2007|20:50] C:\Program Files\DivX
[31/12/2007|12:58] C:\Program Files\EA GAMES
[28/03/2008|18:58] C:\Program Files\Electronic Arts
[21/07/2007|11:31] C:\Program Files\Empire Interactive
[07/11/2008|18:42] C:\Program Files\Fichiers communs
[04/04/2008|18:01] C:\Program Files\GameShadow
[31/05/2008|16:31] C:\Program Files\GOA
[12/07/2008|19:30] C:\Program Files\Google
[05/03/2008|20:03] C:\Program Files\Hercules
[07/05/2008|11:37] C:\Program Files\HP
[30/10/2008|18:37] C:\Program Files\InstallShield Installation Information
[16/10/2008|19:37] C:\Program Files\Internet Explorer
[11/09/2008|19:59] C:\Program Files\Inventel
[21/05/2008|22:49] C:\Program Files\iPod
[21/05/2008|22:49] C:\Program Files\iTunes
[06/11/2008|18:56] C:\Program Files\Java
[31/10/2008|20:13] C:\Program Files\Lavalys
[25/02/2008|18:52] C:\Program Files\L'Entraîneur 2007
[07/08/2007|15:01] C:\Program Files\Ligos
[16/07/2007|16:13] C:\Program Files\Logitech
[18/08/2007|19:14] C:\Program Files\LucasArts
[05/11/2008|23:31] C:\Program Files\Malwarebytes' Anti-Malware
[18/05/2007|11:41] C:\Program Files\Maxis
[20/06/2007|18:42] C:\Program Files\MediaMobsters
[11/09/2008|19:53] C:\Program Files\Messenger
[03/09/2008|23:01] C:\Program Files\Messenger Plus! Live
[26/02/2008|12:59] C:\Program Files\Micro Application
[12/05/2007|12:51] C:\Program Files\microsoft frontpage
[07/01/2008|18:13] C:\Program Files\Microsoft Games
[29/01/2008|21:24] C:\Program Files\Microsoft SQL Server Compact Edition
[18/08/2007|19:11] C:\Program Files\Mindscape
[28/05/2007|13:56] C:\Program Files\Monte Cristo
[08/01/2008|19:25] C:\Program Files\MotoRacer3
[10/09/2008|10:37] C:\Program Files\Movie Maker
[07/11/2008|18:45] C:\Program Files\Mozilla Firefox
[13/05/2007|10:40] C:\Program Files\MSBuild
[14/04/2008|21:00] C:\Program Files\MSN
[12/05/2007|12:47] C:\Program Files\MSN Gaming Zone
[24/01/2008|18:04] C:\Program Files\MSXML 4.0
[24/01/2008|18:08] C:\Program Files\MSXML 6.0
[10/09/2008|10:27] C:\Program Files\NetMeeting
[26/10/2008|20:48] C:\Program Files\NOS
[12/05/2007|12:47] C:\Program Files\Online Services
[12/05/2007|20:53] C:\Program Files\OpenOffice.org 2.2
[30/08/2008|18:45] C:\Program Files\Opera
[11/09/2008|20:04] C:\Program Files\Orange
[10/09/2008|10:26] C:\Program Files\Outlook Express
[31/10/2008|10:10] C:\Program Files\Paltalk Messenger
[27/08/2008|23:46] C:\Program Files\Paradox Interactive
[05/03/2008|19:56] C:\Program Files\Playboy - The Mansion
[21/05/2008|22:48] C:\Program Files\QuickTime
[17/10/2007|16:47] C:\Program Files\Radical Games
[13/05/2007|10:36] C:\Program Files\Reference Assemblies
[23/09/2007|16:26] C:\Program Files\ReflexiveArcade
[24/01/2008|16:20] C:\Program Files\SAGEM
[13/04/2008|14:02] C:\Program Files\Securitoo
[12/05/2007|12:50] C:\Program Files\Services en ligne
[18/08/2007|19:24] C:\Program Files\sixteen tons entertainment
[08/03/2008|18:27] C:\Program Files\Skype
[07/05/2008|16:37] C:\Program Files\SM
[29/10/2008|16:43] C:\Program Files\Sony
[29/10/2008|16:43] C:\Program Files\Sony Ericsson
[29/10/2008|16:42] C:\Program Files\Sony Setup
[02/10/2008|06:32] C:\Program Files\Spybot - Search & Destroy
[06/03/2008|12:20] C:\Program Files\Sunflowers
[13/05/2007|10:16] C:\Program Files\SureThing
[05/11/2008|07:35] C:\Program Files\Tixeo Soft
[30/10/2008|18:37] C:\Program Files\Touchstone
[14/09/2008|13:35] C:\Program Files\Trend Micro
[09/08/2008|18:44] C:\Program Files\Ubisoft
[12/05/2007|12:58] C:\Program Files\Uninstall Information
[21/02/2008|12:45] C:\Program Files\Universal Interactive
[12/05/2007|12:44] C:\Program Files\VIA
[12/05/2007|12:45] C:\Program Files\VIAudioi
[29/10/2008|16:58] C:\Program Files\VirginMega
[09/12/2007|12:42] C:\Program Files\VUGames
[23/09/2007|16:29] C:\Program Files\WildTangent
[27/02/2008|13:16] C:\Program Files\Windows Live
[29/01/2008|21:25] C:\Program Files\Windows Live Favorites
[02/11/2008|13:08] C:\Program Files\Windows Live Safety Center
[29/01/2008|21:26] C:\Program Files\Windows Live Toolbar
[23/05/2007|21:55] C:\Program Files\Windows Media Components
[13/05/2007|10:34] C:\Program Files\Windows Media Connect 2
[10/09/2008|10:26] C:\Program Files\Windows Media Player
[10/09/2008|10:26] C:\Program Files\Windows NT
[12/05/2007|12:50] C:\Program Files\WindowsUpdate
[12/05/2007|12:51] C:\Program Files\xerox
[09/12/2007|12:58] C:\Program Files\Xvid
[01/03/2008|15:30] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[04/09/2008|11:34] C:\Program Files\Fichiers communs\Adobe
[19/10/2008|16:16] C:\Program Files\Fichiers communs\Adobe AIR
[13/05/2007|10:10] C:\Program Files\Fichiers communs\Ahead
[21/05/2008|22:47] C:\Program Files\Fichiers communs\Apple
[24/01/2008|16:41] C:\Program Files\Fichiers communs\France Telecom
[07/05/2008|11:38] C:\Program Files\Fichiers communs\HP
[18/08/2007|19:11] C:\Program Files\Fichiers communs\InstallShield
[12/05/2007|20:52] C:\Program Files\Fichiers communs\Java
[13/05/2007|10:15] C:\Program Files\Fichiers communs\LightScribe
[16/07/2007|16:13] C:\Program Files\Fichiers communs\Logitech
[29/01/2008|21:23] C:\Program Files\Fichiers communs\Microsoft Shared
[12/05/2007|12:49] C:\Program Files\Fichiers communs\MSSoap
[13/05/2007|10:13] C:\Program Files\Fichiers communs\Nero
[12/05/2007|14:34] C:\Program Files\Fichiers communs\ODBC
[12/05/2007|12:49] C:\Program Files\Fichiers communs\Services
[08/03/2008|18:27] C:\Program Files\Fichiers communs\Skype
[29/10/2008|16:43] C:\Program Files\Fichiers communs\Sony Shared
[12/05/2007|14:34] C:\Program Files\Fichiers communs\SpeechEngines
[13/05/2007|10:16] C:\Program Files\Fichiers communs\SureThing Shared
[10/09/2008|10:26] C:\Program Files\Fichiers communs\System
[29/01/2008|21:23] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[30/10/2008|18:36] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 44 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-07 19:14:06
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1159
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CEDRIC\Mes documents\Ma musique\Musique de jeux vidéos\16_-_Ma_6.T_va_Crack-er(generique_du_film).mp3
[F:8][D:2]-> C:\DOCUME~1\CEDRIC\LOCALS~1\Temp
[F:40][D:0]-> C:\DOCUME~1\CEDRIC\Cookies
[F:102][D:4]-> C:\DOCUME~1\CEDRIC\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 07/11/2008|19:08 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 07/11/2008|19:15 - Option : [2]
--------------------\\ Fin du rapport a 19:15:13 -
Modérateur---> Relance Lop S&D.
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt). -
--------------------\\ Lop S&D 4.2.4-9c XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
BIOS : BIOS Date: 09/15/06 14:16:08 Ver: A7255VIE V1.0B3T
USER : CEDRIC ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:153 Go (Free:94 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 07/11/2008|19:06 )
--------------------\\ Listing des dossiers dans APPLIC~1
[19/10/2008|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/01/2008|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Age of Empires 3
[13/05/2007|10:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[21/05/2008|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/05/2008|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[31/07/2008|22:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg8
[28/09/2008|09:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[13/05/2007|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[29/10/2008|16:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[13/04/2008|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[25/01/2008|15:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[31/01/2008|20:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/05/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[07/05/2008|11:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant
[18/08/2007|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[05/11/2008|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[10/03/2008|17:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/07/2008|17:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[26/10/2008|20:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[21/08/2007|18:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
[26/02/2008|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PrettyGoodGames
[19/11/2007|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SimCity Societies
[08/03/2008|18:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[29/10/2008|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[06/03/2008|12:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpieleEntwicklungsKombinat
[02/10/2008|06:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/02/2008|20:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[10/10/2008|23:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tixeo
[12/05/2007|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[10/03/2008|17:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[01/03/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[19/10/2008|16:17] C:\DOCUME~1\CEDRIC\APPLIC~1\Adobe
[17/07/2007|19:27] C:\DOCUME~1\CEDRIC\APPLIC~1\Ahead
[10/08/2008|21:28] C:\DOCUME~1\CEDRIC\APPLIC~1\Apple Computer
[13/05/2007|12:59] C:\DOCUME~1\CEDRIC\APPLIC~1\CyberLink
[31/07/2008|19:22] C:\DOCUME~1\CEDRIC\APPLIC~1\Desktopicon
[20/03/2008|12:47] C:\DOCUME~1\CEDRIC\APPLIC~1\Desperate Housewives
[21/06/2007|21:33] C:\DOCUME~1\CEDRIC\APPLIC~1\DivX
[01/10/2008|22:22] C:\DOCUME~1\CEDRIC\APPLIC~1\EoRezo
[25/01/2008|16:48] C:\DOCUME~1\CEDRIC\APPLIC~1\F-Secure
[12/07/2008|19:31] C:\DOCUME~1\CEDRIC\APPLIC~1\Google
[24/05/2007|21:34] C:\DOCUME~1\CEDRIC\APPLIC~1\Help
[12/05/2007|12:58] C:\DOCUME~1\CEDRIC\APPLIC~1\Identities
[24/01/2008|16:20] C:\DOCUME~1\CEDRIC\APPLIC~1\InstallShield
[27/03/2008|16:14] C:\DOCUME~1\CEDRIC\APPLIC~1\InterTrust
[10/08/2008|11:11] C:\DOCUME~1\CEDRIC\APPLIC~1\ItsLabel
[12/05/2007|13:03] C:\DOCUME~1\CEDRIC\APPLIC~1\Macromedia
[05/11/2008|23:31] C:\DOCUME~1\CEDRIC\APPLIC~1\Malwarebytes
[31/07/2008|22:01] C:\DOCUME~1\CEDRIC\APPLIC~1\Microsoft
[27/08/2008|14:47] C:\DOCUME~1\CEDRIC\APPLIC~1\Mozilla
[14/04/2008|21:02] C:\DOCUME~1\CEDRIC\APPLIC~1\MSNInstaller
[07/11/2008|18:01] C:\DOCUME~1\CEDRIC\APPLIC~1\OpenOffice.org2
[27/08/2008|14:14] C:\DOCUME~1\CEDRIC\APPLIC~1\Opera
[31/10/2008|10:06] C:\DOCUME~1\CEDRIC\APPLIC~1\Paltalk
[21/02/2008|20:33] C:\DOCUME~1\CEDRIC\APPLIC~1\SecondLife
[07/11/2008|19:02] C:\DOCUME~1\CEDRIC\APPLIC~1\Skype
[07/11/2008|07:31] C:\DOCUME~1\CEDRIC\APPLIC~1\skypePM
[29/10/2008|16:46] C:\DOCUME~1\CEDRIC\APPLIC~1\Sony
[06/03/2008|12:53] C:\DOCUME~1\CEDRIC\APPLIC~1\SpieleEntwicklungsKombinat
[12/05/2007|20:52] C:\DOCUME~1\CEDRIC\APPLIC~1\Sun
[10/10/2008|23:59] C:\DOCUME~1\CEDRIC\APPLIC~1\Tixeo
[30/10/2008|21:40] C:\DOCUME~1\CEDRIC\APPLIC~1\Touchstone
[01/03/2008|15:31] C:\DOCUME~1\CEDRIC\APPLIC~1\Yahoo!
[20/03/2008|12:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Desperate Housewives
[12/05/2007|12:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[30/08/2008|21:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[31/07/2008|22:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[31/07/2008|22:01] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\windows\tasks
[07/11/2008 18:09][--a------] C:\windows\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
[07/11/2008 18:44][--ah-----] C:\windows\tasks\SA.DAT
[05/08/2004 13:00][-r-h-----] C:\windows\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[28/03/2008|19:21] C:\Program Files\2K Games
[04/09/2008|11:34] C:\Program Files\Adobe
[30/10/2008|18:37] C:\Program Files\AGEIA Technologies
[13/05/2007|10:15] C:\Program Files\Ahead
[13/04/2008|14:14] C:\Program Files\Alwil Software
[21/05/2008|22:48] C:\Program Files\Apple Software Update
[01/07/2008|18:44] C:\Program Files\AVG
[28/09/2008|09:15] C:\Program Files\Avira
[28/03/2008|19:01] C:\Program Files\Bad Day LA
[21/05/2008|22:49] C:\Program Files\Bonjour
[20/03/2008|12:14] C:\Program Files\Buena Vista Games
[19/07/2008|19:21] C:\Program Files\bwin
[19/10/2008|16:17] C:\Program Files\Canal
[06/11/2008|18:44] C:\Program Files\CCleaner
[16/09/2008|19:18] C:\Program Files\Circle Developement
[12/05/2007|12:48] C:\Program Files\ComPlus Applications
[22/03/2008|17:47] C:\Program Files\Cornelsen
[04/04/2008|18:03] C:\Program Files\Cyanide
[13/05/2007|10:18] C:\Program Files\CyberLink
[23/09/2007|16:21] C:\Program Files\directx
[12/05/2007|20:50] C:\Program Files\DivX
[31/12/2007|12:58] C:\Program Files\EA GAMES
[28/03/2008|18:58] C:\Program Files\Electronic Arts
[21/07/2007|11:31] C:\Program Files\Empire Interactive
[07/11/2008|18:42] C:\Program Files\Fichiers communs
[04/04/2008|18:01] C:\Program Files\GameShadow
[31/05/2008|16:31] C:\Program Files\GOA
[12/07/2008|19:30] C:\Program Files\Google
[05/03/2008|20:03] C:\Program Files\Hercules
[07/05/2008|11:37] C:\Program Files\HP
[30/10/2008|18:37] C:\Program Files\InstallShield Installation Information
[16/10/2008|19:37] C:\Program Files\Internet Explorer
[11/09/2008|19:59] C:\Program Files\Inventel
[21/05/2008|22:49] C:\Program Files\iPod
[21/05/2008|22:49] C:\Program Files\iTunes
[06/11/2008|18:56] C:\Program Files\Java
[31/10/2008|20:13] C:\Program Files\Lavalys
[25/02/2008|18:52] C:\Program Files\L'Entraîneur 2007
[07/08/2007|15:01] C:\Program Files\Ligos
[16/07/2007|16:13] C:\Program Files\Logitech
[18/08/2007|19:14] C:\Program Files\LucasArts
[05/11/2008|23:31] C:\Program Files\Malwarebytes' Anti-Malware
[18/05/2007|11:41] C:\Program Files\Maxis
[20/06/2007|18:42] C:\Program Files\MediaMobsters
[11/09/2008|19:53] C:\Program Files\Messenger
[03/09/2008|23:01] C:\Program Files\Messenger Plus! Live
[26/02/2008|12:59] C:\Program Files\Micro Application
[12/05/2007|12:51] C:\Program Files\microsoft frontpage
[07/01/2008|18:13] C:\Program Files\Microsoft Games
[29/01/2008|21:24] C:\Program Files\Microsoft SQL Server Compact Edition
[18/08/2007|19:11] C:\Program Files\Mindscape
[28/05/2007|13:56] C:\Program Files\Monte Cristo
[08/01/2008|19:25] C:\Program Files\MotoRacer3
[10/09/2008|10:37] C:\Program Files\Movie Maker
[07/11/2008|18:45] C:\Program Files\Mozilla Firefox
[13/05/2007|10:40] C:\Program Files\MSBuild
[14/04/2008|21:00] C:\Program Files\MSN
[12/05/2007|12:47] C:\Program Files\MSN Gaming Zone
[24/01/2008|18:04] C:\Program Files\MSXML 4.0
[24/01/2008|18:08] C:\Program Files\MSXML 6.0
[10/09/2008|10:27] C:\Program Files\NetMeeting
[26/10/2008|20:48] C:\Program Files\NOS
[12/05/2007|12:47] C:\Program Files\Online Services
[12/05/2007|20:53] C:\Program Files\OpenOffice.org 2.2
[30/08/2008|18:45] C:\Program Files\Opera
[11/09/2008|20:04] C:\Program Files\Orange
[10/09/2008|10:26] C:\Program Files\Outlook Express
[31/10/2008|10:10] C:\Program Files\Paltalk Messenger
[27/08/2008|23:46] C:\Program Files\Paradox Interactive
[05/03/2008|19:56] C:\Program Files\Playboy - The Mansion
[21/05/2008|22:48] C:\Program Files\QuickTime
[17/10/2007|16:47] C:\Program Files\Radical Games
[13/05/2007|10:36] C:\Program Files\Reference Assemblies
[23/09/2007|16:26] C:\Program Files\ReflexiveArcade
[24/01/2008|16:20] C:\Program Files\SAGEM
[13/04/2008|14:02] C:\Program Files\Securitoo
[12/05/2007|12:50] C:\Program Files\Services en ligne
[18/08/2007|19:24] C:\Program Files\sixteen tons entertainment
[08/03/2008|18:27] C:\Program Files\Skype
[07/05/2008|16:37] C:\Program Files\SM
[29/10/2008|16:43] C:\Program Files\Sony
[29/10/2008|16:43] C:\Program Files\Sony Ericsson
[29/10/2008|16:42] C:\Program Files\Sony Setup
[02/10/2008|06:32] C:\Program Files\Spybot - Search & Destroy
[06/03/2008|12:20] C:\Program Files\Sunflowers
[13/05/2007|10:16] C:\Program Files\SureThing
[05/11/2008|07:35] C:\Program Files\Tixeo Soft
[30/10/2008|18:37] C:\Program Files\Touchstone
[14/09/2008|13:35] C:\Program Files\Trend Micro
[09/08/2008|18:44] C:\Program Files\Ubisoft
[12/05/2007|12:58] C:\Program Files\Uninstall Information
[21/02/2008|12:45] C:\Program Files\Universal Interactive
[12/05/2007|12:44] C:\Program Files\VIA
[12/05/2007|12:45] C:\Program Files\VIAudioi
[29/10/2008|16:58] C:\Program Files\VirginMega
[09/12/2007|12:42] C:\Program Files\VUGames
[23/09/2007|16:29] C:\Program Files\WildTangent
[27/02/2008|13:16] C:\Program Files\Windows Live
[29/01/2008|21:25] C:\Program Files\Windows Live Favorites
[02/11/2008|13:08] C:\Program Files\Windows Live Safety Center
[29/01/2008|21:26] C:\Program Files\Windows Live Toolbar
[23/05/2007|21:55] C:\Program Files\Windows Media Components
[13/05/2007|10:34] C:\Program Files\Windows Media Connect 2
[10/09/2008|10:26] C:\Program Files\Windows Media Player
[10/09/2008|10:26] C:\Program Files\Windows NT
[12/05/2007|12:50] C:\Program Files\WindowsUpdate
[12/05/2007|12:51] C:\Program Files\xerox
[09/12/2007|12:58] C:\Program Files\Xvid
[01/03/2008|15:30] C:\Program Files\Yahoo!
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[04/09/2008|11:34] C:\Program Files\Fichiers communs\Adobe
[19/10/2008|16:16] C:\Program Files\Fichiers communs\Adobe AIR
[13/05/2007|10:10] C:\Program Files\Fichiers communs\Ahead
[21/05/2008|22:47] C:\Program Files\Fichiers communs\Apple
[24/01/2008|16:41] C:\Program Files\Fichiers communs\France Telecom
[07/05/2008|11:38] C:\Program Files\Fichiers communs\HP
[18/08/2007|19:11] C:\Program Files\Fichiers communs\InstallShield
[12/05/2007|20:52] C:\Program Files\Fichiers communs\Java
[13/05/2007|10:15] C:\Program Files\Fichiers communs\LightScribe
[16/07/2007|16:13] C:\Program Files\Fichiers communs\Logitech
[29/01/2008|21:23] C:\Program Files\Fichiers communs\Microsoft Shared
[12/05/2007|12:49] C:\Program Files\Fichiers communs\MSSoap
[13/05/2007|10:13] C:\Program Files\Fichiers communs\Nero
[12/05/2007|14:34] C:\Program Files\Fichiers communs\ODBC
[12/05/2007|12:49] C:\Program Files\Fichiers communs\Services
[08/03/2008|18:27] C:\Program Files\Fichiers communs\Skype
[29/10/2008|16:43] C:\Program Files\Fichiers communs\Sony Shared
[12/05/2007|14:34] C:\Program Files\Fichiers communs\SpeechEngines
[13/05/2007|10:16] C:\Program Files\Fichiers communs\SureThing Shared
[10/09/2008|10:26] C:\Program Files\Fichiers communs\System
[29/01/2008|21:23] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[30/10/2008|18:36] C:\Program Files\Fichiers communs\Wise Installation Wizard
--------------------\\ Process
( 43 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\Circle Developement
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-07 19:07:24
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1159
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CEDRIC\Mes documents\Ma musique\Musique de jeux vidéos\16_-_Ma_6.T_va_Crack-er(generique_du_film).mp3
[F:8][D:2]-> C:\DOCUME~1\CEDRIC\LOCALS~1\Temp
[F:40][D:0]-> C:\DOCUME~1\CEDRIC\Cookies
[F:102][D:4]-> C:\DOCUME~1\CEDRIC\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 07/11/2008|19:08 - Option : [1]
--------------------\\ Fin du rapport a 19:08:42 -
Modérateur---> Télécharge Lop S&D sur ton Bureau.
---> Double-clique dessus pour lancer l'installation.
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
---> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
---> Patiente jusqu'à la fin du scan.
---> Poste le rapport généré (C:\lopR.txt). -
Bonjour Destrio5
ComboFix 08-11-05.02 - CEDRIC 2008-11-07 18:40:12.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1256.966.1036.18.546 [GMT 1:00]
Running from: c:\documents and settings\CEDRIC\Bureau\ComboFix.exe
[COLOR=RED][B]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/B][/COLOR]
.
((((((((((((((((((((((((( Files Created from 2008-10-07 to 2008-11-07 )))))))))))))))))))))))))))))))
.
2008-11-06 18:57 . 2008-11-06 18:56 410,976 --a------ c:\windows\system32\deploytk.dll
2008-11-06 18:44 . 2008-11-06 18:44 <REP> d-------- c:\program files\CCleaner
2008-11-06 17:49 . 2008-11-06 17:49 <REP> d-------- C:\_OTMoveIt
2008-11-05 23:31 . 2008-11-05 23:31 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-05 23:31 . 2008-11-05 23:31 <REP> d-------- c:\documents and settings\CEDRIC\Application Data\Malwarebytes
2008-11-05 23:31 . 2008-11-05 23:31 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2008-11-05 23:31 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-05 23:31 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2008-11-02 00:38 . 2008-11-06 08:13 54,156 --ah----- c:\windows\QTFont.qfn
2008-11-02 00:38 . 2008-11-02 00:38 1,409 --a------ c:\windows\QTFont.for
2008-10-31 20:13 . 2008-10-31 20:13 <REP> d-------- c:\program files\Lavalys
2008-10-31 10:05 . 2008-10-31 10:09 <REP> d-------- c:\windows\PaltalkScene
2008-10-31 10:05 . 2008-10-31 10:10 <REP> d-------- c:\program files\Paltalk Messenger
2008-10-31 10:05 . 2008-10-31 10:06 <REP> d-------- c:\documents and settings\CEDRIC\Application Data\Paltalk
2008-10-30 21:40 . 2008-10-30 21:40 <REP> d-------- c:\documents and settings\CEDRIC\Application Data\Touchstone
2008-10-30 18:37 . 2008-10-30 18:37 <REP> d-------- c:\windows\system32\AGEIA
2008-10-30 18:37 . 2008-10-30 18:37 <REP> d-------- c:\program files\Touchstone
2008-10-30 18:37 . 2008-10-30 18:37 <REP> d-------- c:\program files\AGEIA Technologies
2008-10-30 18:36 . 2008-10-30 18:36 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard
2008-10-29 16:58 . 2008-10-29 16:58 <REP> d-------- c:\program files\VirginMega
2008-10-29 16:58 . 2008-10-29 16:58 <REP> d-------- c:\documents and settings\All Users\Application Data\Downloaded Installations
2008-10-29 16:51 . 2008-10-29 16:51 1,024 --a------ c:\windows\system32\gncontent.cch
2008-10-29 16:46 . 2008-10-29 16:46 <REP> d-------- c:\documents and settings\CEDRIC\Application Data\Sony
2008-10-29 16:46 . 2008-10-29 16:46 <REP> d-------- c:\documents and settings\All Users\Application Data\Sony
2008-10-29 16:43 . 2008-10-29 16:43 <REP> d-------- c:\program files\Sony Ericsson
2008-10-29 16:43 . 2008-10-29 16:43 <REP> d-------- c:\program files\Sony
2008-10-29 16:43 . 2008-10-29 16:43 <REP> d-------- c:\program files\Fichiers communs\Sony Shared
2008-10-29 16:42 . 2008-10-29 16:42 <REP> d-------- c:\program files\Sony Setup
2008-10-24 15:38 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
2008-10-19 16:17 . 2008-10-19 16:17 <REP> d-------- c:\program files\Canal
2008-10-19 16:16 . 2008-10-19 16:16 <REP> d-------- c:\program files\Fichiers communs\Adobe AIR
2008-10-16 16:14 . 2008-09-08 11:41 333,824 -----c--- c:\windows\system32\dllcache\srv.sys
2008-10-16 16:13 . 2008-08-14 14:23 2,191,232 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
2008-10-16 16:13 . 2008-08-14 14:23 2,147,328 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
2008-10-16 16:13 . 2008-08-14 14:23 2,068,096 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
2008-10-16 16:13 . 2008-08-14 14:23 2,025,984 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
2008-10-16 16:13 . 2008-09-15 16:26 1,846,528 -----c--- c:\windows\system32\dllcache\win32k.sys
2008-10-10 23:59 . 2008-11-05 07:35 <REP> d-------- c:\program files\Tixeo Soft
2008-10-10 23:59 . 2008-10-10 23:59 <REP> d-------- c:\documents and settings\CEDRIC\Application Data\Tixeo
2008-10-10 23:59 . 2008-10-10 23:59 <REP> d-------- c:\documents and settings\All Users\Application Data\Tixeo
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-07 17:27 --------- d-----w c:\documents and settings\CEDRIC\Application Data\Skype
2008-11-07 17:01 --------- d-----w c:\documents and settings\CEDRIC\Application Data\OpenOffice.org2
2008-11-07 06:31 --------- d-----w c:\documents and settings\CEDRIC\Application Data\skypePM
2008-11-06 17:56 --------- d-----w c:\program files\Java
2008-11-02 12:08 --------- d-----w c:\program files\Windows Live Safety Center
2008-10-30 20:39 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2008-10-30 17:37 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-26 19:48 --------- d-----w c:\program files\NOS
2008-10-26 19:48 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
2008-10-02 05:35 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-02 05:32 --------- d-----w c:\program files\Spybot - Search & Destroy
2008-10-01 21:22 --------- d-----w c:\documents and settings\CEDRIC\Application Data\EoRezo
2008-09-28 08:15 --------- d-----w c:\program files\Avira
2008-09-28 08:15 --------- d-----w c:\documents and settings\All Users\Application Data\Avira
2008-09-16 18:18 --------- d-----w c:\program files\Circle Developement
2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
2008-09-14 12:35 --------- d-----w c:\program files\Trend Micro
2008-09-11 19:04 --------- d-----w c:\program files\Orange
2008-09-11 18:59 --------- d-----w c:\program files\Inventel
2008-09-08 10:41 333,824 ----a-w c:\windows\system32\drivers\srv.sys
2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll
2008-08-14 13:23 2,147,328 ----a-w c:\windows\system32\ntoskrnl.exe
2008-08-14 13:23 2,025,984 ----a-w c:\windows\system32\ntkrnlpa.exe
2008-03-08 17:30 32 ----a-w c:\documents and settings\All Users\Application Data\ezsid.dat
.
((((((((((((((((((((((((((((( snapshot@2008-11-07_ 7.37.52,37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-11-07 17:00:33 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_7c8.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-02-01 21898024]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 1832272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-11 7630848]
"Canal Widget"="c:\program files\Canal\Canal Widget\Launcher.exe" [2008-10-28 103992]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-06 136600]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\CEDRIC\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.2.lnk - c:\program files\OpenOffice.org 2.2\program\quickstart.exe [2007-02-02 393216]
c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-03-11 210520]
PalTalk.lnk - c:\program files\Paltalk Messenger\paltalk.exe [2008-09-10 11713536]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3.exe"=
"c:\\Program Files\\sixteen tons entertainment\\Emergency 4\\Em4.exe"=
"c:\\Program Files\\Hercules\\DualPix Exchange\\ControlUI.exe"=
"c:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Sunflowers\\ParaWorld\\bin\\PWServer.exe"=
"c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Ubisoft\\XIII\\system\\XIII.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Program Files\\Touchstone\\Turok\\Binaries\\TurokGame.exe"=
"c:\\Program Files\\Paltalk Messenger\\paltalk.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
R0 videX32;videX32;c:\windows\system32\DRIVERS\videX32.sys [2006-02-23 9728]
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\DRIVERS\xfilt.sys [2006-02-23 11264]
R2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe [2008-10-28 61440]
R2 JavaQuickStarterService;Java Quick Starter;c:\program files\Java\jre6\bin\jqs.exe [2008-11-06 152984]
R3 camfilt2;camfilt2;c:\windows\system32\Drivers\camfilt2.sys [2007-05-29 94208]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-08-29 33752]
S3 gUSBSTOi;gUSBSTOi;c:\docume~1\CEDRIC\LOCALS~1\Temp\gUSBSTOi.sys [ ]
S3 se59bus;Sony Ericsson Device 089 driver (WDM);c:\windows\system32\DRIVERS\se59bus.sys [2006-09-05 61536]
S3 se59mdfl;Sony Ericsson Device 089 USB WMC Modem Filter;c:\windows\system32\DRIVERS\se59mdfl.sys [2006-09-05 9360]
S3 se59mdm;Sony Ericsson Device 089 USB WMC Modem Driver;c:\windows\system32\DRIVERS\se59mdm.sys [2006-09-05 97088]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dd176a84-2e6e-11dd-97be-001617d74820}]
\Shell\AutoRun\command - F:\autorunner.exe "www.CCE-ADECCO.com"
.
Contents of the 'Scheduled Tasks' folder
2008-11-07 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - c:\documents and settings\CEDRIC\Application Data\Mozilla\Firefox\Profiles\kvfc23sr.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.eo.st
FF -: plugin - c:\documents and settings\CEDRIC\Application Data\Mozilla\Firefox\Profiles\kvfc23sr.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}\plugins\np_gp.dll
FF -: plugin - c:\program files\Canal\Canal Widget\VOD\npCpVod.dll
FF -: plugin - c:\program files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll
FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll
FF -: plugin - c:\program files\Mozilla Firefox\plugins\np_gp.dll
FF -: plugin - c:\program files\Mozilla Firefox\plugins\npdeploytk.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-07 18:43:29
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-11-07 18:44:47
ComboFix-quarantined-files.txt 2008-11-07 17:44:44
ComboFix2.txt 2008-11-07 06:38:28
Pre-Run: 101 113 741 312 octets libres
Post-Run: 101,099,175,936 octets libres
171 --- E O F --- 2008-10-24 23:19:25
- 1
- 2
- 3