Rapport fixnavi: étape 2 ?

kramissteve -  
Bonjour,
j'ai windows vista et depuis son aquisition, je reçois plein de pages intempestives en surfant sur le net tel que CiD, casino, meetic, ... En lisant quelques forums, j'ai téléchargé navilog1 dont voici le raport: (Est-ce que je peux passer à l'étape 2 ?)
Merci bien pour l'aide.

Search Navipromo version 3.6.5 commenc้ le 13.09.2008 เ 16:08:29.24

!!! Attention,ce rapport peut indiquer des fichiers/programmes l้gitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie d้sinfection sans l'avis d'un sp้cialiste !!!

Outil ex้cut้ depuis C:\Program Files\navilog1
Session actuelle : "tao"

Mise เ jour le 22.08.2008 เ 17h30 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000
Internet Explorer : 7.0.6000.16711
Syst่me de fichiers : NTFS

Recherche execut้ en mode normal

*** Recherche Programmes install้s ***

*** Recherche dossiers dans "C:\Windows" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***

*** Recherche dossiers dans "C:\ProgramData" ***

*** Recherche dossiers dans "c:\users\tao\appdata\roaming\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "C:\Users\tao\AppData\Local\virtualstore\Program Files" ***

*** Recherche dossiers dans "C:\Users\tao\AppData\Roaming" ***

*** Recherche dossiers dans "C:\Users\INVIT~1\appdata\roaming" ***

*** Recherche dossiers dans "C:\Users\TAOSTA~1\appdata\roaming" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces r้sultats peuvent r้v้ler des fichiers l้gitimes !!!
!!! A v้rifier imp้rativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\tao\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\tao\AppData\Local" *

* Recherche dans "C:\Users\INVIT~1\AppData\Local" *
Configuration: Windows Vista
Internet Explorer 7.0

8 réponses

  1.  Destrio5 Modérateur
    Salut,

    - Télécharge HijackThis V 2.02 (HijackThis Installer) :
    http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

    - Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

    - Clique sur Install ensuite sur I Accept

    - Clique sur Do a scan system and save log file

    - Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.
    -1
    1. kramissteve Auteur
      Merci pour la réponse rapide,
      voilà le rapport de hijackthis:
      Qu'en penses-tu ?

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:32:51, on 13.09.2008
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16711)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Windows\system32\taskeng.exe
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Windows\System32\igfxtray.exe
      C:\Windows\System32\hkcmd.exe
      C:\Windows\System32\igfxpers.exe
      C:\Program Files\Java\jre1.6.0\bin\jusched.exe
      C:\Windows\sttray.exe
      C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
      C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Dell\MediaDirect\PCMService.exe
      C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\McAfee.com\Agent\mcagent.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Media Player\wmpnscfg.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
      C:\Program Files\Digital Line Detect\DLG.exe
      C:\Program Files\Dell\QuickSet\quickset.exe
      C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
      C:\Program Files\Internet Explorer\ieuser.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
      C:\Windows\system32\wuauclt.exe
      C:\Windows\system32\conime.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O1 - Hosts: ::1 localhost
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
      O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
      O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "c:\Program Files\Java\jre1.6.0\bin\jusched.exe"
      O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
      O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
      O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
      O4 - HKLM\..\Run: [RegKillElbyCheck] "C:\Program Files\Dvd region killer\ElbyCheck.exe" /L RegKill
      O4 - HKLM\..\Run: [RegKillTray] C:\Program Files\Dvd region killer\RegKillTray.exe
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKCU\..\Run: [rule shim] "C:\ProgramData\AxisFlagFlag.kz6e0y"
      O4 - HKCU\..\Run: [Army browse cdrom vga] "C:\ProgramData\Extra Enc Itch.15zeq4r"
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE R?SEAU')
      O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
      O4 - Startup: Outil de d?tection de support Picture Motion Browser.lnk
      O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: QuickSet.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
      O13 - Gopher Prefix:
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
      O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
      O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
      O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
      O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
      O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
      O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
      O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
      O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
      O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
      O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
      O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
      O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
      O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
      -1
      1. kramissteve Auteur
        Merci pour la réponse rapide,
        voilà le rapport de hijackthis:
        Qu'en penses-tu ?

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 17:32:51, on 13.09.2008
        Platform: Windows Vista (WinNT 6.00.1904)
        MSIE: Internet Explorer v7.00 (7.00.6000.16711)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\Dwm.exe
        C:\Windows\Explorer.EXE
        C:\Windows\system32\taskeng.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Windows\System32\igfxtray.exe
        C:\Windows\System32\hkcmd.exe
        C:\Windows\System32\igfxpers.exe
        C:\Program Files\Java\jre1.6.0\bin\jusched.exe
        C:\Windows\sttray.exe
        C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
        C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        C:\Program Files\Dell\MediaDirect\PCMService.exe
        C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
        C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
        C:\Program Files\McAfee.com\Agent\mcagent.exe
        C:\Windows\ehome\ehtray.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
        C:\Program Files\Digital Line Detect\DLG.exe
        C:\Program Files\Dell\QuickSet\quickset.exe
        C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
        C:\Windows\ehome\ehmsas.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
        C:\Program Files\Internet Explorer\ieuser.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
        C:\Windows\system32\wuauclt.exe
        C:\Windows\system32\conime.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
        C:\Windows\system32\SearchFilterHost.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        O1 - Hosts: ::1 localhost
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
        O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
        O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
        O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "c:\Program Files\Java\jre1.6.0\bin\jusched.exe"
        O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
        O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
        O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
        O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
        O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
        O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
        O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
        O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
        O4 - HKLM\..\Run: [RegKillElbyCheck] "C:\Program Files\Dvd region killer\ElbyCheck.exe" /L RegKill
        O4 - HKLM\..\Run: [RegKillTray] C:\Program Files\Dvd region killer\RegKillTray.exe
        O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
        O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
        O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKCU\..\Run: [rule shim] "C:\ProgramData\AxisFlagFlag.kz6e0y"
        O4 - HKCU\..\Run: [Army browse cdrom vga] "C:\ProgramData\Extra Enc Itch.15zeq4r"
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE R?SEAU')
        O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
        O4 - Startup: Outil de d?tection de support Picture Motion Browser.lnk
        O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O4 - Global Startup: QuickSet.lnk = ?
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
        O13 - Gopher Prefix:
        O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
        O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
        O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
        O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
        O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
        O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
        O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
        O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
        O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
        O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
        O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
        O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
        O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
        O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
        O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
        O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
        O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
        O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
        -1
        1. Destrio5 Modérateur
          ---> Désactive l'UAC le temps de la désinfection :
          https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html

          ---> Télécharge Lop S&D sur ton Bureau
          https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
          ---> Double-clique dessus pour lancer l'installation
          ---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
          ---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
          ---> Patiente jusqu'à la fin du scan
          ---> Poste le rapport généré (C:\lopR.txt)
          -1
          2. kramissteve
            Voilà le rapport LopR:

            --------------------\\ Lop S&D 4.2.4-2 XP/Vista

            X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz )
            BIOS : Phoenix ROM BIOS PLUS Version 1.10 A09
            USER : tao ( Not Administrator ! )
            BOOT : Normal boot
            Antivirus : McAfee VirusScan (Activated)
            Firewall : McAfee Personal Firewall (Activated)

            "C:\Lop SD" ( MAJ : 08-09-2008|21:40 )
            Option : [1] ( 13.09.2008|18:02 )

            [ UAC => 0 ]

            --------------------\\ Listing des dossiers dans Local

            [03.06.2007|11:44] C:\Users\tao\AppData\Local\Adobe
            [29.09.2007|13:58] C:\Users\tao\AppData\Local\Apple
            [16.03.2007|21:09] C:\Users\tao\AppData\Local\Application Data
            [21.04.2007|20:45] C:\Users\tao\AppData\Local\ApplicationHistory
            [21.11.2007|12:14] C:\Users\tao\AppData\Local\Asobo Studio
            [11.09.2008|01:07] C:\Users\tao\AppData\Local\d3d9caps.dat
            [12.09.2008|12:52] C:\Users\tao\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
            [11.09.2008|17:56] C:\Users\tao\AppData\Local\Downloaded Installations
            [11.09.2008|21:12] C:\Users\tao\AppData\Local\GDIPFONTCACHEV1.DAT
            [16.03.2007|22:10] C:\Users\tao\AppData\Local\Google
            [16.03.2007|21:09] C:\Users\tao\AppData\Local\Historique
            [20.03.2007|21:08] C:\Users\tao\AppData\Local\MediaDirect
            [13.09.2008|16:17] C:\Users\tao\AppData\Local\Microsoft
            [04.10.2007|13:58] C:\Users\tao\AppData\Local\Microsoft Games
            [17.11.2007|17:15] C:\Users\tao\AppData\Local\NFS Underground 2
            [09.10.2007|16:58] C:\Users\tao\AppData\Local\Powercinema
            [16.03.2007|22:06] C:\Users\tao\AppData\Local\Protexis
            [09.09.2008|22:03] C:\Users\tao\AppData\Local\Roxio
            [13.09.2008|18:01] C:\Users\tao\AppData\Local\Temp
            [16.03.2007|21:09] C:\Users\tao\AppData\Local\Temporary Internet Files
            [02.01.2008|17:32] C:\Users\tao\AppData\Local\VASoftOnline
            [25.10.2007|16:53] C:\Users\tao\AppData\Local\VirtualStore
            [11.09.2008|17:28] C:\Users\tao\AppData\Local\WMTools Downloaded Files

            --------------------\\ Tโches planifi้es dans C:\Windows\tasks

            [28.09.2007 00:08][--a------] C:\Windows\tasks\McDefragTask.job
            [28.09.2007 00:08][--a------] C:\Windows\tasks\McQcTask.job
            [13.09.2008 15:51][--ah-----] C:\Windows\tasks\SA.DAT
            [13.09.2008 15:45][--a------] C:\Windows\tasks\SCHEDLGU.TXT

            --------------------\\ Listing des dossiers dans C:\ProgramData

            [11.03.2007|14:44] C:\ProgramData\Adobe
            [29.09.2007|13:57] C:\ProgramData\Apple
            [08.10.2007|12:18] C:\ProgramData\Apple Computer
            [16.03.2007|21:05] C:\ProgramData\Application Data
            [06.01.2008|17:14] C:\ProgramData\AxisFlagFlag.2tqpq
            [06.01.2008|17:14] C:\ProgramData\AxisFlagFlag.3cyqge
            [24.07.2008|11:47] C:\ProgramData\AxisFlagFlag.4eqov38
            [07.01.2008|06:38] C:\ProgramData\AxisFlagFlag.4t946
            [15.06.2008|17:55] C:\ProgramData\AxisFlagFlag.b3c9ba2
            [07.07.2008|20:13] C:\ProgramData\AxisFlagFlag.fipqe
            [24.07.2008|11:47] C:\ProgramData\AxisFlagFlag.gsgsqjd
            [19.01.2008|08:55] C:\ProgramData\AxisFlagFlag.jcj3o7
            [06.08.2008|17:43] C:\ProgramData\AxisFlagFlag.kz6e0y
            [16.03.2008|16:15] C:\ProgramData\AxisFlagFlag.ptyxg
            [12.05.2008|14:30] C:\ProgramData\AxisFlagFlag.ww6phfv
            [16.03.2007|21:05] C:\ProgramData\Bureau
            [11.03.2007|14:46] C:\ProgramData\Corel
            [11.03.2007|14:56] C:\ProgramData\CyberLink
            [11.03.2007|14:56] C:\ProgramData\Dell
            [16.03.2007|21:05] C:\ProgramData\Documents
            [24.07.2008|11:48] C:\ProgramData\Extra Enc Itch.15zeq4r
            [16.03.2007|21:05] C:\ProgramData\Favoris
            [06.08.2008|18:56] C:\ProgramData\Filmblehweb
            [11.03.2007|14:55] C:\ProgramData\Google
            [11.03.2007|14:52] C:\ProgramData\Gtek
            [18.03.2008|10:35] C:\ProgramData\Installations
            [11.03.2007|14:48] C:\ProgramData\InstallShield
            [28.09.2007|00:06] C:\ProgramData\McAfee
            [16.03.2007|21:05] C:\ProgramData\Menu D?marrer
            [24.07.2008|11:48] C:\ProgramData\Mfcd upload army browse
            [18.03.2008|11:00] C:\ProgramData\Microsoft
            [16.03.2007|21:05] C:\ProgramData\Mod?les
            [22.02.2008|14:33] C:\ProgramData\OrbNetworks
            [18.03.2008|10:48] C:\ProgramData\PC Suite
            [11.09.2008|17:56] C:\ProgramData\Pinnacle
            [11.09.2008|18:09] C:\ProgramData\Pinnacle VideoSpin
            [16.03.2007|23:35] C:\ProgramData\Propellerhead Software
            [12.09.2008|14:37] C:\ProgramData\Roxio
            [28.09.2007|00:06] C:\ProgramData\SiteAdvisor
            [11.03.2007|14:48] C:\ProgramData\Sonic
            [09.09.2008|21:49] C:\ProgramData\Sony Corporation
            [11.09.2008|18:06] C:\ProgramData\VideoSpin

            --------------------\\ Listing des dossiers dans C:\Program Files

            [11.03.2007|14:44] C:\Program Files\Adobe
            [29.09.2007|13:58] C:\Program Files\Apple Software Update
            [16.03.2007|22:05] C:\Program Files\audacity
            [11.03.2007|14:54] C:\Program Files\BAE
            [11.11.2007|09:14] C:\Program Files\BitTorrent_DNA
            [11.09.2008|18:06] C:\Program Files\Common Files
            [11.03.2007|14:28] C:\Program Files\CONEXANT
            [16.03.2007|22:14] C:\Program Files\Corel
            [11.03.2007|14:56] C:\Program Files\CyberLink
            [11.03.2007|14:56] C:\Program Files\Dell
            [11.03.2007|14:52] C:\Program Files\DellSupport
            [18.03.2008|10:38] C:\Program Files\DIFX
            [11.03.2007|14:41] C:\Program Files\Digital Line Detect
            [25.10.2007|17:11] C:\Program Files\Dvd region killer
            [25.10.2007|17:51] C:\Program Files\DVD X Player v4.0 Professional
            [25.10.2007|17:16] C:\Program Files\DVDGENIE
            [29.10.2007|11:11] C:\Program Files\EA GAMES
            [16.03.2007|21:05] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
            [11.03.2007|14:55] C:\Program Files\Google
            [09.09.2008|21:58] C:\Program Files\InstallShield Installation Information
            [22.08.2008|20:16] C:\Program Files\Internet Explorer
            [11.03.2007|14:38] C:\Program Files\Java
            [16.03.2007|22:18] C:\Program Files\lame encoder
            [12.09.2008|13:43] C:\Program Files\McAfee
            [11.03.2007|14:53] C:\Program Files\McAfee.com
            [08.10.2007|12:18] C:\Program Files\Media Player Classic
            [02.11.2006|14:37] C:\Program Files\Microsoft Games
            [07.01.2008|09:12] C:\Program Files\Microsoft GIF Animator
            [29.11.2007|10:31] C:\Program Files\Microsoft Office
            [11.03.2007|14:44] C:\Program Files\Microsoft Works
            [11.03.2007|14:41] C:\Program Files\Modem Diagnostic Tool
            [11.09.2008|16:46] C:\Program Files\Movie Maker
            [29.09.2007|13:53] C:\Program Files\MPEG streamclip
            [02.11.2006|14:37] C:\Program Files\MSBuild
            [02.11.2006|14:37] C:\Program Files\MSN
            [11.03.2007|14:38] C:\Program Files\MSXML 4.0
            [13.09.2008|17:00] C:\Program Files\Navilog1
            [11.03.2007|14:39] C:\Program Files\NetWaiting
            [18.03.2008|10:39] C:\Program Files\Nokia
            [18.03.2008|10:38] C:\Program Files\PC Connectivity Solution
            [25.10.2007|16:17] C:\Program Files\Pimsleur Thai 30 Lessons
            [11.09.2008|18:06] C:\Program Files\Pinnacle
            [16.03.2007|23:34] C:\Program Files\Propellerhead
            [08.10.2007|12:15] C:\Program Files\quicktime
            [08.10.2007|12:18] C:\Program Files\QuickTime Alternative
            [17.03.2007|16:44] C:\Program Files\Reason3
            [02.11.2006|14:37] C:\Program Files\Reference Assemblies
            [17.06.2007|11:57] C:\Program Files\Roxio
            [11.03.2007|14:42] C:\Program Files\SigmaTel
            [29.05.2008|13:34] C:\Program Files\SiteAdvisor
            [20.02.2008|13:00] C:\Program Files\sonar 7
            [09.09.2008|21:50] C:\Program Files\Sony
            [11.03.2007|22:22] C:\Program Files\Synaptics
            [13.09.2008|17:32] C:\Program Files\Trend Micro
            [02.11.2006|15:01] C:\Program Files\Uninstall Information
            [12.11.2007|09:04] C:\Program Files\VistaCodecPack
            [22.02.2008|16:42] C:\Program Files\Winamp
            [22.02.2008|14:33] C:\Program Files\Winamp Remote
            [29.09.2007|13:26] C:\Program Files\Windows Calendar
            [02.11.2006|14:42] C:\Program Files\Windows Collaboration
            [22.04.2007|12:24] C:\Program Files\Windows Defender
            [02.11.2006|14:42] C:\Program Files\Windows Journal
            [22.08.2008|20:16] C:\Program Files\Windows Mail
            [12.11.2007|09:21] C:\Program Files\Windows Media Player
            [16.03.2007|21:05] C:\Program Files\Windows NT
            [02.11.2006|14:42] C:\Program Files\Windows Photo Gallery
            [18.01.2008|07:17] C:\Program Files\Windows Sidebar
            [16.03.2007|23:27] C:\Program Files\winrar

            --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

            [11.03.2007|14:44] C:\Program Files\Common Files\Adobe
            [11.03.2007|14:49] C:\Program Files\Common Files\InstallShield
            [11.03.2007|14:38] C:\Program Files\Common Files\Java
            [12.07.2008|18:13] C:\Program Files\Common Files\McAfee
            [15.10.2007|15:50] C:\Program Files\Common Files\microsoft shared
            [18.03.2008|10:39] C:\Program Files\Common Files\Nokia
            [18.03.2008|10:39] C:\Program Files\Common Files\PCSuite
            [11.03.2007|14:48] C:\Program Files\Common Files\Roxio Shared
            [02.11.2006|13:18] C:\Program Files\Common Files\Services
            [11.03.2007|14:50] C:\Program Files\Common Files\Sonic Shared
            [02.11.2006|13:18] C:\Program Files\Common Files\SpeechEngines
            [11.03.2007|14:48] C:\Program Files\Common Files\SureThing Shared
            [15.06.2007|11:34] C:\Program Files\Common Files\System
            [11.09.2008|18:06] C:\Program Files\Common Files\Yahoo!

            --------------------\\ Process

            ( 77 Processes )

            iexplore.exe ~ [PID:2236]
            iexplore.exe ~ [PID:2132]
            iexplore.exe ~ [PID:4988]

            --------------------\\ Recherche avec S_Lop

            C:\ProgramData\AxisFlagFlag.2tqpq
            C:\ProgramData\AxisFlagFlag.4t946
            C:\ProgramData\AxisFlagFlag.fipqe
            C:\ProgramData\AxisFlagFlag.ptyxg
            C:\ProgramData\AxisFlagFlag.3cyqge
            C:\ProgramData\AxisFlagFlag.jcj3o7
            C:\ProgramData\AxisFlagFlag.kz6e0y
            C:\ProgramData\AxisFlagFlag.4eqov38
            C:\ProgramData\AxisFlagFlag.b3c9ba2
            C:\ProgramData\AxisFlagFlag.gsgsqjd
            C:\ProgramData\AxisFlagFlag.ww6phfv
            C:\ProgramData\Extra Enc Itch.15zeq4r

            --------------------\\ Recherche de Fichiers / Dossiers Lop

            C:\ProgramData\Mfcd upload army browse
            C:\ProgramData\Mfcd upload army browse\Flag shim.exe
            C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies\tao@advertising[2].txt
            C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies\tao@adopt.euroclick[1].txt
            C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies\tao@www.lop[2].txt

            --------------------\\ Verification du Registre

            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "rule shim"="\"C:\\ProgramData\\AxisFlagFlag.kz6e0y\""
            "Army browse cdrom vga"="\"C:\\ProgramData\\Extra Enc Itch.15zeq4r\""

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

            --------------------\\ Verification du fichier Hosts

            Fichier Hosts PROPRE

            --------------------\\ Recherche de fichiers avec Catchme

            catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
            Rootkit scan 2008-09-13 18:02:50
            Windows 6.0.6000 NTFS
            scanning hidden processes ...
            scanning hidden files ...
            scan completed successfully
            hidden processes: 0
            hidden files: 0

            --------------------\\ Recherche d'autres infections

            --------------------\\ Cracks & Keygens ..

            C:\Users\tao\Music\RoCK\Pixies\Doolittle\09 Crackity Jones.mp3

            [F:110][D:13]-> C:\Users\tao\AppData\Local\Temp
            [F:200][D:1]-> C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies
            [F:1147][D:6]-> C:\Users\tao\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
            [F:64][D:6]-> C:\$Recycle.Bin

            1 - "C:\Lop SD\LopR_1.txt" - 13.09.2008|18:04 - Option : [1]

            --------------------\\ Fin du rapport a 18:04:39
            [ UAC => 1 ]

            Y- a-t-il qqch a en tiré ?
            0
            1. Destrio5 Modérateur
              ---> Relance Lop S&D
              ---> Choisis cette fois-ci l'option 2 (Suppression)
              ---> Ne ferme pas la fenêtre lors de la suppression !
              ---> Poste le rapport généré (C:\lopR.txt)
              1
              1. kramissteve
                voilà le rapport après supression:

                --------------------\\ Lop S&D 4.2.4-2 XP/Vista

                X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz )
                BIOS : Phoenix ROM BIOS PLUS Version 1.10 A09
                USER : tao ( Not Administrator ! )
                BOOT : Normal boot
                Antivirus : McAfee VirusScan (Activated)
                Firewall : McAfee Personal Firewall (Activated)

                "C:\Lop SD" ( MAJ : 08-09-2008|21:40 )
                Option : [2] ( 13.09.2008|18:11 )

                [ UAC => 1 ]

                \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                Supprime! - C:\ProgramData\Mfcd upload army browse\Flag shim.exe
                Supprime! - C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies\tao@advertising[2].txt
                Supprime! - C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies\tao@adopt.euroclick[1].txt
                Supprime! - C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies\tao@www.lop[2].txt
                Supprime! - C:\ProgramData\AxisFlagFlag.2tqpq
                Supprime! - C:\ProgramData\AxisFlagFlag.4t946
                Supprime! - C:\ProgramData\AxisFlagFlag.fipqe
                Supprime! - C:\ProgramData\AxisFlagFlag.ptyxg
                Supprime! - C:\ProgramData\AxisFlagFlag.3cyqge
                Supprime! - C:\ProgramData\AxisFlagFlag.jcj3o7
                Supprime! - C:\ProgramData\AxisFlagFlag.kz6e0y
                Supprime! - C:\ProgramData\AxisFlagFlag.4eqov38
                Supprime! - C:\ProgramData\AxisFlagFlag.b3c9ba2
                Supprime! - C:\ProgramData\AxisFlagFlag.gsgsqjd
                Supprime! - C:\ProgramData\AxisFlagFlag.ww6phfv
                Supprime! - C:\ProgramData\Extra Enc Itch.15zeq4r
                Supprime! - C:\ProgramData\Mfcd upload army browse
                -
                [ Fichier Hosts ] .. Restaure!

                \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                --------------------\\ Listing des dossiers dans Local

                [03.06.2007|11:44] C:\Users\tao\AppData\Local\Adobe
                [29.09.2007|13:58] C:\Users\tao\AppData\Local\Apple
                [16.03.2007|21:09] C:\Users\tao\AppData\Local\Application Data
                [21.04.2007|20:45] C:\Users\tao\AppData\Local\ApplicationHistory
                [21.11.2007|12:14] C:\Users\tao\AppData\Local\Asobo Studio
                [11.09.2008|01:07] C:\Users\tao\AppData\Local\d3d9caps.dat
                [12.09.2008|12:52] C:\Users\tao\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                [11.09.2008|17:56] C:\Users\tao\AppData\Local\Downloaded Installations
                [11.09.2008|21:12] C:\Users\tao\AppData\Local\GDIPFONTCACHEV1.DAT
                [16.03.2007|22:10] C:\Users\tao\AppData\Local\Google
                [16.03.2007|21:09] C:\Users\tao\AppData\Local\Historique
                [20.03.2007|21:08] C:\Users\tao\AppData\Local\MediaDirect
                [13.09.2008|16:17] C:\Users\tao\AppData\Local\Microsoft
                [04.10.2007|13:58] C:\Users\tao\AppData\Local\Microsoft Games
                [17.11.2007|17:15] C:\Users\tao\AppData\Local\NFS Underground 2
                [09.10.2007|16:58] C:\Users\tao\AppData\Local\Powercinema
                [16.03.2007|22:06] C:\Users\tao\AppData\Local\Protexis
                [09.09.2008|22:03] C:\Users\tao\AppData\Local\Roxio
                [13.09.2008|18:11] C:\Users\tao\AppData\Local\Temp
                [16.03.2007|21:09] C:\Users\tao\AppData\Local\Temporary Internet Files
                [02.01.2008|17:32] C:\Users\tao\AppData\Local\VASoftOnline
                [25.10.2007|16:53] C:\Users\tao\AppData\Local\VirtualStore
                [11.09.2008|17:28] C:\Users\tao\AppData\Local\WMTools Downloaded Files

                --------------------\\ Tโches planifi้es dans C:\Windows\tasks

                [28.09.2007 00:08][--a------] C:\Windows\tasks\McDefragTask.job
                [28.09.2007 00:08][--a------] C:\Windows\tasks\McQcTask.job
                [13.09.2008 15:51][--ah-----] C:\Windows\tasks\SA.DAT
                [13.09.2008 15:45][--a------] C:\Windows\tasks\SCHEDLGU.TXT

                --------------------\\ Listing des dossiers dans C:\ProgramData

                [11.03.2007|14:44] C:\ProgramData\Adobe
                [29.09.2007|13:57] C:\ProgramData\Apple
                [08.10.2007|12:18] C:\ProgramData\Apple Computer
                [16.03.2007|21:05] C:\ProgramData\Application Data
                [16.03.2007|21:05] C:\ProgramData\Bureau
                [11.03.2007|14:46] C:\ProgramData\Corel
                [11.03.2007|14:56] C:\ProgramData\CyberLink
                [11.03.2007|14:56] C:\ProgramData\Dell
                [16.03.2007|21:05] C:\ProgramData\Documents
                [16.03.2007|21:05] C:\ProgramData\Favoris
                [06.08.2008|18:56] C:\ProgramData\Filmblehweb
                [11.03.2007|14:55] C:\ProgramData\Google
                [11.03.2007|14:52] C:\ProgramData\Gtek
                [18.03.2008|10:35] C:\ProgramData\Installations
                [11.03.2007|14:48] C:\ProgramData\InstallShield
                [28.09.2007|00:06] C:\ProgramData\McAfee
                [16.03.2007|21:05] C:\ProgramData\Menu D?marrer
                [18.03.2008|11:00] C:\ProgramData\Microsoft
                [16.03.2007|21:05] C:\ProgramData\Mod?les
                [22.02.2008|14:33] C:\ProgramData\OrbNetworks
                [18.03.2008|10:48] C:\ProgramData\PC Suite
                [11.09.2008|17:56] C:\ProgramData\Pinnacle
                [11.09.2008|18:09] C:\ProgramData\Pinnacle VideoSpin
                [16.03.2007|23:35] C:\ProgramData\Propellerhead Software
                [12.09.2008|14:37] C:\ProgramData\Roxio
                [28.09.2007|00:06] C:\ProgramData\SiteAdvisor
                [11.03.2007|14:48] C:\ProgramData\Sonic
                [09.09.2008|21:49] C:\ProgramData\Sony Corporation
                [11.09.2008|18:06] C:\ProgramData\VideoSpin

                --------------------\\ Listing des dossiers dans C:\Program Files

                [11.03.2007|14:44] C:\Program Files\Adobe
                [29.09.2007|13:58] C:\Program Files\Apple Software Update
                [16.03.2007|22:05] C:\Program Files\audacity
                [11.03.2007|14:54] C:\Program Files\BAE
                [11.11.2007|09:14] C:\Program Files\BitTorrent_DNA
                [11.09.2008|18:06] C:\Program Files\Common Files
                [11.03.2007|14:28] C:\Program Files\CONEXANT
                [16.03.2007|22:14] C:\Program Files\Corel
                [11.03.2007|14:56] C:\Program Files\CyberLink
                [11.03.2007|14:56] C:\Program Files\Dell
                [11.03.2007|14:52] C:\Program Files\DellSupport
                [18.03.2008|10:38] C:\Program Files\DIFX
                [11.03.2007|14:41] C:\Program Files\Digital Line Detect
                [25.10.2007|17:11] C:\Program Files\Dvd region killer
                [25.10.2007|17:51] C:\Program Files\DVD X Player v4.0 Professional
                [25.10.2007|17:16] C:\Program Files\DVDGENIE
                [29.10.2007|11:11] C:\Program Files\EA GAMES
                [16.03.2007|21:05] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
                [11.03.2007|14:55] C:\Program Files\Google
                [09.09.2008|21:58] C:\Program Files\InstallShield Installation Information
                [22.08.2008|20:16] C:\Program Files\Internet Explorer
                [11.03.2007|14:38] C:\Program Files\Java
                [16.03.2007|22:18] C:\Program Files\lame encoder
                [12.09.2008|13:43] C:\Program Files\McAfee
                [11.03.2007|14:53] C:\Program Files\McAfee.com
                [08.10.2007|12:18] C:\Program Files\Media Player Classic
                [02.11.2006|14:37] C:\Program Files\Microsoft Games
                [07.01.2008|09:12] C:\Program Files\Microsoft GIF Animator
                [29.11.2007|10:31] C:\Program Files\Microsoft Office
                [11.03.2007|14:44] C:\Program Files\Microsoft Works
                [11.03.2007|14:41] C:\Program Files\Modem Diagnostic Tool
                [11.09.2008|16:46] C:\Program Files\Movie Maker
                [29.09.2007|13:53] C:\Program Files\MPEG streamclip
                [02.11.2006|14:37] C:\Program Files\MSBuild
                [02.11.2006|14:37] C:\Program Files\MSN
                [11.03.2007|14:38] C:\Program Files\MSXML 4.0
                [13.09.2008|17:00] C:\Program Files\Navilog1
                [11.03.2007|14:39] C:\Program Files\NetWaiting
                [18.03.2008|10:39] C:\Program Files\Nokia
                [18.03.2008|10:38] C:\Program Files\PC Connectivity Solution
                [25.10.2007|16:17] C:\Program Files\Pimsleur Thai 30 Lessons
                [11.09.2008|18:06] C:\Program Files\Pinnacle
                [16.03.2007|23:34] C:\Program Files\Propellerhead
                [08.10.2007|12:15] C:\Program Files\quicktime
                [08.10.2007|12:18] C:\Program Files\QuickTime Alternative
                [17.03.2007|16:44] C:\Program Files\Reason3
                [02.11.2006|14:37] C:\Program Files\Reference Assemblies
                [17.06.2007|11:57] C:\Program Files\Roxio
                [11.03.2007|14:42] C:\Program Files\SigmaTel
                [29.05.2008|13:34] C:\Program Files\SiteAdvisor
                [20.02.2008|13:00] C:\Program Files\sonar 7
                [09.09.2008|21:50] C:\Program Files\Sony
                [11.03.2007|22:22] C:\Program Files\Synaptics
                [13.09.2008|17:32] C:\Program Files\Trend Micro
                [02.11.2006|15:01] C:\Program Files\Uninstall Information
                [12.11.2007|09:04] C:\Program Files\VistaCodecPack
                [22.02.2008|16:42] C:\Program Files\Winamp
                [22.02.2008|14:33] C:\Program Files\Winamp Remote
                [29.09.2007|13:26] C:\Program Files\Windows Calendar
                [02.11.2006|14:42] C:\Program Files\Windows Collaboration
                [22.04.2007|12:24] C:\Program Files\Windows Defender
                [02.11.2006|14:42] C:\Program Files\Windows Journal
                [22.08.2008|20:16] C:\Program Files\Windows Mail
                [12.11.2007|09:21] C:\Program Files\Windows Media Player
                [16.03.2007|21:05] C:\Program Files\Windows NT
                [02.11.2006|14:42] C:\Program Files\Windows Photo Gallery
                [18.01.2008|07:17] C:\Program Files\Windows Sidebar
                [16.03.2007|23:27] C:\Program Files\winrar

                --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

                [11.03.2007|14:44] C:\Program Files\Common Files\Adobe
                [11.03.2007|14:49] C:\Program Files\Common Files\InstallShield
                [11.03.2007|14:38] C:\Program Files\Common Files\Java
                [12.07.2008|18:13] C:\Program Files\Common Files\McAfee
                [15.10.2007|15:50] C:\Program Files\Common Files\microsoft shared
                [18.03.2008|10:39] C:\Program Files\Common Files\Nokia
                [18.03.2008|10:39] C:\Program Files\Common Files\PCSuite
                [11.03.2007|14:48] C:\Program Files\Common Files\Roxio Shared
                [02.11.2006|13:18] C:\Program Files\Common Files\Services
                [11.03.2007|14:50] C:\Program Files\Common Files\Sonic Shared
                [02.11.2006|13:18] C:\Program Files\Common Files\SpeechEngines
                [11.03.2007|14:48] C:\Program Files\Common Files\SureThing Shared
                [15.06.2007|11:34] C:\Program Files\Common Files\System
                [11.09.2008|18:06] C:\Program Files\Common Files\Yahoo!

                --------------------\\ Process

                ( 76 Processes )

                ... OK !

                --------------------\\ Recherche avec S_Lop

                Aucun fichier / dossier Lop trouv้ !

                --------------------\\ Recherche de Fichiers / Dossiers Lop

                Aucun fichier / dossier Lop trouv้ !

                --------------------\\ Verification du Registre

                ..... OK !

                --------------------\\ Verification du fichier Hosts

                Fichier Hosts PROPRE

                --------------------\\ Recherche de fichiers avec Catchme

                catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2008-09-13 18:11:49
                Windows 6.0.6000 NTFS
                scanning hidden processes ...
                scanning hidden files ...
                scan completed successfully
                hidden processes: 0
                hidden files: 0

                --------------------\\ Recherche d'autres infections

                --------------------\\ Cracks & Keygens ..

                C:\Users\tao\Music\RoCK\Pixies\Doolittle\09 Crackity Jones.mp3

                [F:107][D:13]-> C:\Users\tao\AppData\Local\Temp
                [F:199][D:1]-> C:\Users\tao\AppData\Roaming\MICROS~1\Windows\Cookies
                [F:1152][D:6]-> C:\Users\tao\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
                [F:64][D:6]-> C:\$Recycle.Bin

                1 - "C:\Lop SD\LopR_1.txt" - 13.09.2008|18:04 - Option : [1]
                2 - "C:\Lop SD\LopR_2.txt" - 13.09.2008|18:13 - Option : [2]

                --------------------\\ Fin du rapport a 18:13:40
                [ UAC => 1 ]
                0
                1. Destrio5 Modérateur
                  ---> Désinstalle Lop S&D

                  ---> Installe le SP1 :
                  http://www.microsoft.com/downloads/details.aspx?FamilyID=b0c7136d-5ebb-413b-89c9-cb3d06d12674&displaylang=fr
                  -1

                  Discussions similaires

                  Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
                  Utilisateur anonyme

                  13 réponses
                  rapport de visite commercial
                  antcho

                  3 réponses
                  impossible d'afficher le tableau dynamique sur un rapport existant
                  Pierre

                  3 réponses
                  Rapport audit parc informatique
                  It administrateur

                  9 réponses
                  Theme de rapport de stage option comptabilité
                  sana saydou

                  2 réponses