CID
Bonjour,
voici mon rapport avec HijackThis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:54, on 2008-09-21
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Nexon\Mabinogi\npkcmsvc.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sympatico.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=0
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [BearFlix] "C:\Program Files\BearFlix\BearFlix.exe" /pause
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Base road long save] C:\Documents and Settings\All Users\Application Data\File dvd base road\Deaf view.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [SIZE RDR] C:\DOCUME~1\CHRIST~1\APPLIC~1\ADMIND~1\wipe tick.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [SIZE RDR] C:\DOCUME~1\FRANCI~1\APPLIC~1\ADMIND~1\wipe tick.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'francis clavet')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WinCinema Manager.lnk = C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://www.msn.com/fr-fr/
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - https://www.bigfishgames.com/online/ricochetlostworlds/ReflexiveWebGameLoader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - https://www.bigfishgames.com/online/luxor/mjolauncher.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - https://www.bigfishgames.com/online/feedingfrenzy/Game/SproutLauncher.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by15fd.bay15.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: coronally - {1b17f1db-790e-4d42-8e0c-d4d19123ee5b} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: npkcmsvc - INCA Internet Co., Ltd. - C:\Nexon\Mabinogi\npkcmsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
--
End of file - 15056 bytes
voici mon rapport avec HijackThis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:54, on 2008-09-21
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Nexon\Mabinogi\npkcmsvc.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sympatico.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=0
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [BearFlix] "C:\Program Files\BearFlix\BearFlix.exe" /pause
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Base road long save] C:\Documents and Settings\All Users\Application Data\File dvd base road\Deaf view.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [SIZE RDR] C:\DOCUME~1\CHRIST~1\APPLIC~1\ADMIND~1\wipe tick.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [SIZE RDR] C:\DOCUME~1\FRANCI~1\APPLIC~1\ADMIND~1\wipe tick.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'francis clavet')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WinCinema Manager.lnk = C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://www.msn.com/fr-fr/
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - https://www.bigfishgames.com/online/ricochetlostworlds/ReflexiveWebGameLoader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - https://www.bigfishgames.com/online/luxor/mjolauncher.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - https://www.bigfishgames.com/online/feedingfrenzy/Game/SproutLauncher.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by15fd.bay15.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: coronally - {1b17f1db-790e-4d42-8e0c-d4d19123ee5b} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: npkcmsvc - INCA Internet Co., Ltd. - C:\Nexon\Mabinogi\npkcmsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
--
End of file - 15056 bytes
Configuration: Windows XP Internet Explorer 7.0
25 réponses
Résumé de la discussion
Le sujet porte sur l’analyse d’un rapport HijackThis et l’identification d’intrusions potentiellement indésirables liées à des barres d’outils et des composants de démarrage sur Windows XP. Des réponses préconisent la suppression de ToolBar S&D et un balayage rapide avec Malwarebytes Anti-Malware, puis la suppression des éléments détectés et la remise en état des paramètres. Une autre intervention détaille l’usage de Lop S&D 4.2.4 pour éliminer des exécutables, DLL et entrées de démarrage jugés suspects, avec une liste lourde de suppressions ciblées. En cas de contexte utilisateur, le fil mentionne aussi des outils tiers et des barres d’outils récalcitrantes nécessitant une remise à zéro des paramètres et un nettoyage des fichiers temporaires.
-
ModérateurSalut,
---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt) -
voici mon rapport lopR.txt
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 2008-09-21|19:37 )
--------------------\\ Listing des dossiers dans APPLIC~1
[2008-04-24|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-08-23|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2004-08-05|09:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2007-06-30|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2007-06-30|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2007-06-16|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[2007-06-25|19:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[2008-09-10|05:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
[2004-12-17|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[2006-09-14|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2008-07-28|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[2007-04-27|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[2006-12-08|01:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
[2007-08-10|22:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[2004-11-28|07:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-07-14|10:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2005-11-25|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2008-03-01|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-09-11|03:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2004-11-13|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[2005-07-12|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[2007-06-24|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[2008-07-30|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonUS
[2008-03-22|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[2007-06-15|07:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[2004-12-16|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[2006-07-10|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QubeSoft
[2004-12-04|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-06-24|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[2004-12-15|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SC Test Branding 1
[2004-09-10|07:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Softdisk LLC
[2007-03-23|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[2005-08-02|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2007-07-05|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2008-07-18|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
[2005-03-07|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[2006-07-05|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2007-05-02|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[2008-08-12|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[2008-08-10|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-01-15|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[2005-07-18|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[2008-08-12|11:48] C:\DOCUME~1\CHRIST~1\APPLIC~1\Admin Dart
[2008-01-17|16:10] C:\DOCUME~1\CHRIST~1\APPLIC~1\Adobe
[2007-01-30|08:42] C:\DOCUME~1\CHRIST~1\APPLIC~1\AdobeUM
[2004-09-05|19:39] C:\DOCUME~1\CHRIST~1\APPLIC~1\Ahead
[2007-08-04|09:08] C:\DOCUME~1\CHRIST~1\APPLIC~1\Apple Computer
[2005-03-27|17:06] C:\DOCUME~1\CHRIST~1\APPLIC~1\Corel
[2008-07-14|17:03] C:\DOCUME~1\CHRIST~1\APPLIC~1\DeepBurner
[2007-07-25|06:36] C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts
[2007-01-27|21:53] C:\DOCUME~1\CHRIST~1\APPLIC~1\Gaijin Ent
[2006-09-13|16:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\Google
[2004-09-05|16:24] C:\DOCUME~1\CHRIST~1\APPLIC~1\Help
[2008-07-15|21:34] C:\DOCUME~1\CHRIST~1\APPLIC~1\HP
[2007-06-15|16:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\Identities
[2006-12-08|01:01] C:\DOCUME~1\CHRIST~1\APPLIC~1\iWin
[2004-10-25|06:53] C:\DOCUME~1\CHRIST~1\APPLIC~1\Lavasoft
[2004-10-25|18:48] C:\DOCUME~1\CHRIST~1\APPLIC~1\Leadertech
[2007-06-25|15:18] C:\DOCUME~1\CHRIST~1\APPLIC~1\Macromedia
[2008-07-14|10:11] C:\DOCUME~1\CHRIST~1\APPLIC~1\Malwarebytes
[2008-08-18|13:27] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft
[2004-09-05|17:43] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft Web Folders
[2007-07-25|18:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\MSN6
[2005-11-21|23:54] C:\DOCUME~1\CHRIST~1\APPLIC~1\OLYMPUS
[2007-06-15|07:52] C:\DOCUME~1\CHRIST~1\APPLIC~1\PlayFirst
[2004-11-16|08:58] C:\DOCUME~1\CHRIST~1\APPLIC~1\Raptisoft
[2004-08-05|09:56] C:\DOCUME~1\CHRIST~1\APPLIC~1\SampleView
[2006-12-08|01:04] C:\DOCUME~1\CHRIST~1\APPLIC~1\Shareaza
[2008-03-22|14:32] C:\DOCUME~1\CHRIST~1\APPLIC~1\Sun
[2005-08-02|17:01] C:\DOCUME~1\CHRIST~1\APPLIC~1\Symantec
[2007-06-15|16:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\Zylom
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2007-12-01|04:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[2008-08-15|23:02] C:\DOCUME~1\FRANCI~1\APPLIC~1\Admin Dart
[2008-05-21|22:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Adobe
[2005-10-30|17:34] C:\DOCUME~1\FRANCI~1\APPLIC~1\AdobeUM
[2004-11-20|14:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\Ahead
[2007-11-26|17:20] C:\DOCUME~1\FRANCI~1\APPLIC~1\Apple Computer
[2007-09-04|18:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Atari
[2008-04-12|19:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\BitTorrent
[2008-03-12|15:12] C:\DOCUME~1\FRANCI~1\APPLIC~1\BitTorrent DNA
[2008-02-20|17:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\Datel
[2008-09-01|09:27] C:\DOCUME~1\FRANCI~1\APPLIC~1\DNA
[2007-01-29|22:11] C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts
[2006-11-23|16:36] C:\DOCUME~1\FRANCI~1\APPLIC~1\Google
[2004-11-12|23:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Help
[2007-03-23|18:05] C:\DOCUME~1\FRANCI~1\APPLIC~1\HP
[2004-08-05|09:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\Identities
[2008-03-01|16:23] C:\DOCUME~1\FRANCI~1\APPLIC~1\InstallShield
[2005-05-10|09:49] C:\DOCUME~1\FRANCI~1\APPLIC~1\Lavasoft
[2007-09-04|18:26] C:\DOCUME~1\FRANCI~1\APPLIC~1\Leadertech
[2007-08-16|22:48] C:\DOCUME~1\FRANCI~1\APPLIC~1\LEGO Company
[2008-09-01|19:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\LimeWire
[2004-09-10|17:06] C:\DOCUME~1\FRANCI~1\APPLIC~1\Macromedia
[2008-07-24|19:42] C:\DOCUME~1\FRANCI~1\APPLIC~1\Microsoft
[2006-03-13|16:37] C:\DOCUME~1\FRANCI~1\APPLIC~1\MSN6
[2007-11-19|17:22] C:\DOCUME~1\FRANCI~1\APPLIC~1\Nexon
[2006-08-03|19:16] C:\DOCUME~1\FRANCI~1\APPLIC~1\OLYMPUS
[2007-02-23|17:41] C:\DOCUME~1\FRANCI~1\APPLIC~1\PSP_MMM
[2004-11-19|08:37] C:\DOCUME~1\FRANCI~1\APPLIC~1\Raptisoft
[2004-08-05|09:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\SampleView
[2008-03-01|17:26] C:\DOCUME~1\FRANCI~1\APPLIC~1\SecuROM
[2006-10-29|17:58] C:\DOCUME~1\FRANCI~1\APPLIC~1\Sun
[2006-12-08|01:05] C:\DOCUME~1\FRANCI~1\APPLIC~1\Symantec
[2008-09-21|16:13] C:\DOCUME~1\FRANCI~1\APPLIC~1\U3
[2005-06-24|19:24] C:\DOCUME~1\FRANCI~1\APPLIC~1\ubi.com
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\Ahead
[2007-03-30|16:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Google
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[2007-03-30|16:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[2007-03-30|16:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\SampleView
[2008-03-14|16:28] C:\DOCUME~1\karlu\APPLIC~1\Adobe
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\Ahead
[2007-04-07|12:29] C:\DOCUME~1\karlu\APPLIC~1\Google
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\Identities
[2007-08-26|00:42] C:\DOCUME~1\karlu\APPLIC~1\LEGO Company
[2007-08-26|00:43] C:\DOCUME~1\karlu\APPLIC~1\Macromedia
[2007-04-07|10:25] C:\DOCUME~1\karlu\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\SampleView
[2007-06-09|19:53] C:\DOCUME~1\karlu\APPLIC~1\Symantec
[2006-12-08|01:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2007-12-01|04:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[2005-08-21|22:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
[2008-09-10|05:11] C:\DOCUME~1\STEVEC~1\APPLIC~1\Admin Dart
[2008-01-17|09:10] C:\DOCUME~1\STEVEC~1\APPLIC~1\Adobe
[2007-02-14|23:02] C:\DOCUME~1\STEVEC~1\APPLIC~1\AdobeUM
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\Ahead
[2007-07-16|22:04] C:\DOCUME~1\STEVEC~1\APPLIC~1\Apple Computer
[2004-08-27|07:59] C:\DOCUME~1\STEVEC~1\APPLIC~1\Corel
[2006-10-08|12:44] C:\DOCUME~1\STEVEC~1\APPLIC~1\Google
[2005-12-30|08:17] C:\DOCUME~1\STEVEC~1\APPLIC~1\HbTools
[2004-08-21|16:34] C:\DOCUME~1\STEVEC~1\APPLIC~1\Help
[2008-07-15|20:52] C:\DOCUME~1\STEVEC~1\APPLIC~1\HP
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\Identities
[2005-05-10|10:18] C:\DOCUME~1\STEVEC~1\APPLIC~1\Lavasoft
[2005-01-09|11:35] C:\DOCUME~1\STEVEC~1\APPLIC~1\Macromedia
[2007-04-30|01:36] C:\DOCUME~1\STEVEC~1\APPLIC~1\Microsoft
[2005-06-04|20:20] C:\DOCUME~1\STEVEC~1\APPLIC~1\MSN6
[2006-11-03|18:58] C:\DOCUME~1\STEVEC~1\APPLIC~1\MSNInstaller
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\SampleView
[2005-12-30|08:17] C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports
[2004-08-21|15:19] C:\DOCUME~1\STEVEC~1\APPLIC~1\Symantec
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-09-21 19:00][--ah-----] C:\WINDOWS\tasks\9DBCD94B8D57542F.job
[2008-09-21 19:00][--ah-----] C:\WINDOWS\tasks\A2036C829068E116.job
[2008-09-21 19:00][--ah-----] C:\WINDOWS\tasks\8196F7A69BDD6176.job
[2008-09-21 16:27][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[2008-09-21 18:54][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2008-09-16 15:37][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-09-12 02:00][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Analyser mon ordinateur.job
[2008-09-21 14:06][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-08-30 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
( 9DBCD94B8D57542F.job )=( c:\docume~1\stevec~1\applic~1\admind~1\LOGOINTERNETACE.exe )
( 8196F7A69BDD6176.job )=( c:\docume~1\christ~1\applic~1\admind~1\LOGOINTERNETACE.exe )
( A2036C829068E116.job )=( c:\docume~1\franci~1\applic~1\admind~1\LOGOINTERNETACE.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[2007-05-29|18:27] C:\Program Files\123CopyDVD
[2005-12-07|11:48] C:\Program Files\3Planesoft Screensaver Manager
[2005-01-05|16:07] C:\Program Files\Activision Value
[2008-09-10|05:10] C:\Program Files\Admin Dart
[2008-07-27|14:20] C:\Program Files\Adobe
[2004-11-28|07:18] C:\Program Files\Age of Dinosaurs 3D
[2008-04-19|23:18] C:\Program Files\Ahead
[2007-12-02|12:39] C:\Program Files\Alwil Software
[2008-08-15|13:38] C:\Program Files\Apple Software Update
[2008-07-14|17:00] C:\Program Files\Astonsoft
[2008-04-19|23:26] C:\Program Files\Atari
[2004-09-14|16:32] C:\Program Files\Atlantis3D
[2007-02-13|21:13] C:\Program Files\AvRack
[2007-12-02|12:35] C:\Program Files\BearFlix
[2008-01-23|12:54] C:\Program Files\BearShare
[2006-12-07|09:39] C:\Program Files\BearShare Applications
[2007-02-01|22:09] C:\Program Files\BearShare MediaBar
[2007-01-18|17:18] C:\Program Files\BFG
[2007-12-30|20:51] C:\Program Files\bfgclient
[2005-02-14|23:13] C:\Program Files\BFGT
[2007-08-24|21:38] C:\Program Files\Big Kahuna Reef 2
[2007-03-13|16:18] C:\Program Files\Big Kahuna Reef 2 - Chain Reaction
[2008-03-12|15:12] C:\Program Files\BitTorrent_DNA
[2007-06-28|07:38] C:\Program Files\Boonty
[2007-06-25|20:20] C:\Program Files\BoontyGames
[2007-06-24|17:16] C:\Program Files\Burger Island
[2007-06-24|17:16] C:\Program Files\Cake Mania(2)
[2008-01-13|17:06] C:\Program Files\Call of Duty
[2006-12-08|01:01] C:\Program Files\CamStudio
[2007-07-05|12:41] C:\Program Files\Capturino 1.4
[2007-02-13|21:48] C:\Program Files\C-Media 3D Audio
[2008-02-04|16:29] C:\Program Files\Common Files
[2004-08-05|09:57] C:\Program Files\ComPlus Applications
[2007-02-23|15:48] C:\Program Files\Datel
[2006-12-17|09:55] C:\Program Files\DeskMates
[2008-01-13|17:01] C:\Program Files\Diamond Detective
[2008-01-13|17:01] C:\Program Files\Diner Dash 2
[2005-06-24|19:24] C:\Program Files\directx
[2008-08-30|14:53] C:\Program Files\DNA
[2007-02-16|09:10] C:\Program Files\eGames
[2005-01-01|12:05] C:\Program Files\EIDOS Interactive
[2008-02-09|14:55] C:\Program Files\Empire Interactive
[2006-03-16|08:52] C:\Program Files\Feeding Frenzy
[2008-09-21|18:07] C:\Program Files\Fichiers communs
[2005-12-15|23:36] C:\Program Files\Free Offers from Freeze.com
[2005-12-07|12:03] C:\Program Files\Free Offers from RI Soft Systems
[2006-09-23|11:05] C:\Program Files\Gadwin Systems
[2006-12-15|18:34] C:\Program Files\GameHouse
[2008-04-19|23:10] C:\Program Files\GameSpy Arcade
[2007-10-22|17:13] C:\Program Files\gmod9
[2007-02-02|03:18] C:\Program Files\Google
[2008-04-19|23:11] C:\Program Files\Gravity
[2008-01-13|17:06] C:\Program Files\Hasbro
[2008-01-13|17:06] C:\Program Files\Hasbro Interactive
[2007-09-27|10:31] C:\Program Files\Hewlett-Packard
[2007-03-23|16:36] C:\Program Files\HP
[2007-09-28|15:02] C:\Program Files\hp deskjet 656c series
[2005-10-19|22:39] C:\Program Files\IncrediMail
[2005-08-22|18:16] C:\Program Files\Infogrames
[2008-04-19|23:28] C:\Program Files\InstallShield Installation Information
[2007-02-18|16:35] C:\Program Files\InterActual
[2008-08-14|03:15] C:\Program Files\Internet Explorer
[2007-12-23|09:35] C:\Program Files\iPod
[2008-01-13|17:01] C:\Program Files\iTunes
[2008-07-14|09:55] C:\Program Files\Java
[2008-04-19|23:06] C:\Program Files\Kazaa
[2007-08-10|22:40] C:\Program Files\Kodak
[2004-10-25|06:52] C:\Program Files\Lavasoft
[2007-08-16|22:48] C:\Program Files\LEGO Company
[2005-11-09|21:29] C:\Program Files\LEGO Software
[2008-08-31|04:14] C:\Program Files\LimeWire
[2005-01-04|07:18] C:\Program Files\Logitech
[2008-01-22|15:52] C:\Program Files\Macrogaming
[2008-07-14|10:11] C:\Program Files\Malwarebytes' Anti-Malware
[2004-08-23|16:06] C:\Program Files\Maxis
[2007-02-16|09:08] C:\Program Files\Mes jeux
[2008-08-17|03:07] C:\Program Files\Messenger
[2008-07-27|14:32] C:\Program Files\Messenger Plus! Live
[2008-07-20|07:51] C:\Program Files\MessengerPlus! 3
[2004-12-25|14:01] C:\Program Files\MicroProse
[2007-05-08|14:55] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2004-08-05|09:57] C:\Program Files\microsoft frontpage
[2008-04-19|23:04] C:\Program Files\Microsoft Games
[2008-02-22|21:54] C:\Program Files\Microsoft IntelliPoint
[2007-04-10|16:22] C:\Program Files\Microsoft Office
[2007-04-10|16:22] C:\Program Files\Microsoft Visual Studio
[2007-04-10|16:23] C:\Program Files\Microsoft Works
[2007-11-04|14:50] C:\Program Files\Microsoft Xbox 360 Accessories
[2007-04-10|16:21] C:\Program Files\Microsoft.NET
[2007-12-02|13:49] C:\Program Files\minicliptoolbar toolbar
[2006-04-01|12:44] C:\Program Files\Moodysoft
[2008-08-16|21:41] C:\Program Files\Movie Maker
[2007-04-10|16:23] C:\Program Files\MSBuild
[2005-06-04|15:18] C:\Program Files\MSN
[2008-04-19|23:25] C:\Program Files\MSN Games
[2004-08-05|09:57] C:\Program Files\MSN Gaming Zone
[2008-04-11|13:30] C:\Program Files\MSN Messenger
[2006-12-08|01:05] C:\Program Files\MSXML 4.0
[2006-09-24|15:04] C:\Program Files\Namtuk
[2007-06-25|15:23] C:\Program Files\NannyMania_at
[2005-12-15|08:59] C:\Program Files\Need2Find
[2008-08-16|21:37] C:\Program Files\NetMeeting
[2008-09-11|08:14] C:\Program Files\Norton AntiVirus
[2005-11-21|23:44] C:\Program Files\OLYMPUS
[2007-01-28|00:24] C:\Program Files\orange
[2008-08-16|21:36] C:\Program Files\Outlook Express
[2004-08-05|09:57] C:\Program Files\Photo Future
[2005-11-21|23:43] C:\Program Files\PIXELA
[2007-07-03|06:42] C:\Program Files\PizzaFrenzy_at
[2005-12-07|11:54] C:\Program Files\Plus!
[2005-03-08|22:53] C:\Program Files\PopCap Games
[2006-12-09|08:26] C:\Program Files\Pro4Chat
[2008-06-05|19:39] C:\Program Files\Project64 1.6
[2008-08-15|13:46] C:\Program Files\QuickTime
[2005-09-04|19:23] C:\Program Files\Real
[2007-02-13|21:13] C:\Program Files\Realtek AC97
[2007-02-13|21:13] C:\Program Files\Realtek Sound Manager
[2006-10-27|21:06] C:\Program Files\ReflexiveArcade
[2008-07-31|17:11] C:\Program Files\Ricochet Infinity
[2008-08-19|16:53] C:\Program Files\Safari
[2007-04-27|21:45] C:\Program Files\Sandisk
[2004-10-23|23:00] C:\Program Files\ScreenMates
[2004-08-05|09:57] C:\Program Files\Services en ligne
[2006-12-08|01:04] C:\Program Files\Shareaza
[2007-06-24|16:12] C:\Program Files\Shockwave.com
[2006-12-08|01:06] C:\Program Files\Shopmania
[2007-02-16|09:07] C:\Program Files\Stand O Food
[2007-06-25|08:31] C:\Program Files\StandOFood_at
[2008-09-21|15:55] C:\Program Files\Steam
[2006-07-01|22:23] C:\Program Files\Sugar Games
[2007-07-05|22:51] C:\Program Files\Symantec
[2005-08-02|17:10] C:\Program Files\SymNetDrv
[2007-05-03|22:32] C:\Program Files\SystemRequirementsLab
[2005-12-16|07:35] C:\Program Files\The Weather Channel FW
[2008-07-06|12:25] C:\Program Files\TmNationsForever
[2008-07-06|10:29] C:\Program Files\TrackMania Nations ESWC
[2006-12-08|00:46] C:\Program Files\TrackMania Original Demo
[2008-09-21|18:58] C:\Program Files\Trend Micro
[2004-11-09|08:25] C:\Program Files\Trymedia
[2005-06-24|19:25] C:\Program Files\ubi.com
[2008-03-01|16:23] C:\Program Files\Ubisoft
[2005-08-12|20:57] C:\Program Files\Uninstall Information
[2007-12-30|18:44] C:\Program Files\Valve
[2007-04-14|08:28] C:\Program Files\vanBasco's Karaoke Player
[2004-08-27|15:57] C:\Program Files\VeriSign
[2004-11-30|21:16] C:\Program Files\WildTangent
[2008-01-07|15:14] C:\Program Files\Windows Live
[2008-04-07|20:54] C:\Program Files\Windows Live Safety Center
[2007-05-02|15:31] C:\Program Files\Windows Live Toolbar
[2006-12-08|01:24] C:\Program Files\Windows Media Connect 2
[2008-09-12|14:58] C:\Program Files\Windows Media Player
[2008-08-16|21:36] C:\Program Files\Windows NT
[2004-08-21|18:37] C:\Program Files\WindowsUpdate
[2007-11-02|11:06] C:\Program Files\WinRAR
[2008-08-12|09:47] C:\Program Files\WinZip
[2005-10-09|15:15] C:\Program Files\xat.com xatshow
[2004-08-05|09:57] C:\Program Files\xerox
[2006-01-15|16:52] C:\Program Files\Yahoo!
[2007-12-23|09:32] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-04-24|20:04] C:\Program Files\Fichiers communs\Adobe
[2006-08-23|18:49] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\Ahead
[2007-06-30|09:17] C:\Program Files\Fichiers communs\Apple
[2007-06-25|19:10] C:\Program Files\Fichiers communs\BOONTY Shared
[2005-05-06|23:57] C:\Program Files\Fichiers communs\CMEII
[2007-04-10|16:22] C:\Program Files\Fichiers communs\DESIGNER
[2007-12-02|13:24] C:\Program Files\Fichiers communs\GMT
[2007-03-23|16:31] C:\Program Files\Fichiers communs\Hewlett-Packard
[2007-03-23|16:40] C:\Program Files\Fichiers communs\HP
[2005-01-04|07:22] C:\Program Files\Fichiers communs\InstallShield
[2006-10-29|13:38] C:\Program Files\Fichiers communs\Java
[2005-01-04|07:18] C:\Program Files\Fichiers communs\Logitech
[2004-11-28|07:32] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-07-25|03:13] C:\Program Files\Fichiers communs\Microsoft Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\MSSoap
[2004-08-05|09:57] C:\Program Files\Fichiers communs\ODBC
[2005-09-04|19:23] C:\Program Files\Fichiers communs\Real
[2005-01-04|07:18] C:\Program Files\Fichiers communs\SC Test Branding 1 Shared
[2005-02-06|14:15] C:\Program Files\Fichiers communs\scanner
[2004-08-05|09:57] C:\Program Files\Fichiers communs\Services
[2007-03-23|16:41] C:\Program Files\Fichiers communs\Sonic Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\SpeechEngines
[2004-10-24|15:01] C:\Program Files\Fichiers communs\SWF Studio
[2008-09-11|08:14] C:\Program Files\Fichiers communs\Symantec Shared
[2008-08-16|21:36] C:\Program Files\Fichiers communs\System
[2008-03-07|15:58] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 87 Processes )
IEXPLORE.EXE ~ [PID:388]
IEXPLORE.EXE ~ [PID:3596]
IEXPLORE.EXE ~ [PID:820]
IEXPLORE.EXE ~ [PID:2848]
IEXPLORE.EXE ~ [PID:744]
iexplore.exe ~ [PID:5288]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Deaf view.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\debug build.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Draw Defy.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\LOUD GLOBAL.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\rdr coal.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\aqlrmrlq.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\wipe tick.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\amejxkuz.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\czhatcfc.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\efrapzaj.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\hqlxbwoh.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\luylnpoo.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\midanqmv.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\mxmtkrqf.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\oayscosb.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\ofumkulk.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\ttyamtmi.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\wipe tick.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\xgbbevzi.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\yjjnpyqr.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\dhtymtqd.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\gkaxzngv.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\mqpfqqmj.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\naaomcsm.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\oqkkvhyp.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\qkdnosku.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\svrooudp.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\wipe tick.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\wyqudxih.exe
C:\Program Files\admind~1
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@advertstream[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@advertising[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@adin.bigpoint[2].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@bigpoint[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@us.seafight.bigpoint[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@adopt.euroclick[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@pacificpoker[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@partypoker[2].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@us.seafight.bigpoint[1].txt
C:\WINDOWS\Tasks\9DBCD94B8D57542F.job
C:\WINDOWS\Tasks\8196F7A69BDD6176.job
C:\WINDOWS\Tasks\A2036C829068E116.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SIZE RDR"="C:\\DOCUME~1\\CHRIST~1\\APPLIC~1\\ADMIND~1\\wipe tick.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Base road long save"="C:\\Documents and Settings\\All Users\\Application Data\\File dvd base road\\Deaf view.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 73 [ 70 ## added by CiD ]
/!\ 2 Not 127.0.0.1 !!
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 19:39:06
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CHRIST~1\Application Data\Raptisoft\HamsterBall\Sounds\Crack.ogg
[F:3052][D:77]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp
[F:766][D:0]-> C:\DOCUME~1\CHRIST~1\Cookies
[F:10575][D:60]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-09-21|18:46 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2008-09-21|19:41 - Option : [1]
--------------------\\ Fin du rapport a 19:41:51 -
voici mon rapport lopR.txt
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 2008-09-21|19:37 )
--------------------\\ Listing des dossiers dans APPLIC~1
[2008-04-24|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-08-23|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2004-08-05|09:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2007-06-30|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2007-06-30|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2007-06-16|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[2007-06-25|19:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[2008-09-10|05:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
[2004-12-17|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[2006-09-14|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2008-07-28|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[2007-04-27|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[2006-12-08|01:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
[2007-08-10|22:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[2004-11-28|07:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-07-14|10:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2005-11-25|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2008-03-01|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-09-11|03:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2004-11-13|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[2005-07-12|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[2007-06-24|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[2008-07-30|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonUS
[2008-03-22|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[2007-06-15|07:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[2004-12-16|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[2006-07-10|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QubeSoft
[2004-12-04|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-06-24|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[2004-12-15|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SC Test Branding 1
[2004-09-10|07:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Softdisk LLC
[2007-03-23|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[2005-08-02|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2007-07-05|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2008-07-18|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
[2005-03-07|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[2006-07-05|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2007-05-02|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[2008-08-12|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[2008-08-10|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-01-15|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[2005-07-18|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[2008-08-12|11:48] C:\DOCUME~1\CHRIST~1\APPLIC~1\Admin Dart
[2008-01-17|16:10] C:\DOCUME~1\CHRIST~1\APPLIC~1\Adobe
[2007-01-30|08:42] C:\DOCUME~1\CHRIST~1\APPLIC~1\AdobeUM
[2004-09-05|19:39] C:\DOCUME~1\CHRIST~1\APPLIC~1\Ahead
[2007-08-04|09:08] C:\DOCUME~1\CHRIST~1\APPLIC~1\Apple Computer
[2005-03-27|17:06] C:\DOCUME~1\CHRIST~1\APPLIC~1\Corel
[2008-07-14|17:03] C:\DOCUME~1\CHRIST~1\APPLIC~1\DeepBurner
[2007-07-25|06:36] C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts
[2007-01-27|21:53] C:\DOCUME~1\CHRIST~1\APPLIC~1\Gaijin Ent
[2006-09-13|16:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\Google
[2004-09-05|16:24] C:\DOCUME~1\CHRIST~1\APPLIC~1\Help
[2008-07-15|21:34] C:\DOCUME~1\CHRIST~1\APPLIC~1\HP
[2007-06-15|16:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\Identities
[2006-12-08|01:01] C:\DOCUME~1\CHRIST~1\APPLIC~1\iWin
[2004-10-25|06:53] C:\DOCUME~1\CHRIST~1\APPLIC~1\Lavasoft
[2004-10-25|18:48] C:\DOCUME~1\CHRIST~1\APPLIC~1\Leadertech
[2007-06-25|15:18] C:\DOCUME~1\CHRIST~1\APPLIC~1\Macromedia
[2008-07-14|10:11] C:\DOCUME~1\CHRIST~1\APPLIC~1\Malwarebytes
[2008-08-18|13:27] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft
[2004-09-05|17:43] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft Web Folders
[2007-07-25|18:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\MSN6
[2005-11-21|23:54] C:\DOCUME~1\CHRIST~1\APPLIC~1\OLYMPUS
[2007-06-15|07:52] C:\DOCUME~1\CHRIST~1\APPLIC~1\PlayFirst
[2004-11-16|08:58] C:\DOCUME~1\CHRIST~1\APPLIC~1\Raptisoft
[2004-08-05|09:56] C:\DOCUME~1\CHRIST~1\APPLIC~1\SampleView
[2006-12-08|01:04] C:\DOCUME~1\CHRIST~1\APPLIC~1\Shareaza
[2008-03-22|14:32] C:\DOCUME~1\CHRIST~1\APPLIC~1\Sun
[2005-08-02|17:01] C:\DOCUME~1\CHRIST~1\APPLIC~1\Symantec
[2007-06-15|16:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\Zylom
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2007-12-01|04:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[2008-08-15|23:02] C:\DOCUME~1\FRANCI~1\APPLIC~1\Admin Dart
[2008-05-21|22:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Adobe
[2005-10-30|17:34] C:\DOCUME~1\FRANCI~1\APPLIC~1\AdobeUM
[2004-11-20|14:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\Ahead
[2007-11-26|17:20] C:\DOCUME~1\FRANCI~1\APPLIC~1\Apple Computer
[2007-09-04|18:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Atari
[2008-04-12|19:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\BitTorrent
[2008-03-12|15:12] C:\DOCUME~1\FRANCI~1\APPLIC~1\BitTorrent DNA
[2008-02-20|17:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\Datel
[2008-09-01|09:27] C:\DOCUME~1\FRANCI~1\APPLIC~1\DNA
[2007-01-29|22:11] C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts
[2006-11-23|16:36] C:\DOCUME~1\FRANCI~1\APPLIC~1\Google
[2004-11-12|23:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Help
[2007-03-23|18:05] C:\DOCUME~1\FRANCI~1\APPLIC~1\HP
[2004-08-05|09:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\Identities
[2008-03-01|16:23] C:\DOCUME~1\FRANCI~1\APPLIC~1\InstallShield
[2005-05-10|09:49] C:\DOCUME~1\FRANCI~1\APPLIC~1\Lavasoft
[2007-09-04|18:26] C:\DOCUME~1\FRANCI~1\APPLIC~1\Leadertech
[2007-08-16|22:48] C:\DOCUME~1\FRANCI~1\APPLIC~1\LEGO Company
[2008-09-01|19:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\LimeWire
[2004-09-10|17:06] C:\DOCUME~1\FRANCI~1\APPLIC~1\Macromedia
[2008-07-24|19:42] C:\DOCUME~1\FRANCI~1\APPLIC~1\Microsoft
[2006-03-13|16:37] C:\DOCUME~1\FRANCI~1\APPLIC~1\MSN6
[2007-11-19|17:22] C:\DOCUME~1\FRANCI~1\APPLIC~1\Nexon
[2006-08-03|19:16] C:\DOCUME~1\FRANCI~1\APPLIC~1\OLYMPUS
[2007-02-23|17:41] C:\DOCUME~1\FRANCI~1\APPLIC~1\PSP_MMM
[2004-11-19|08:37] C:\DOCUME~1\FRANCI~1\APPLIC~1\Raptisoft
[2004-08-05|09:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\SampleView
[2008-03-01|17:26] C:\DOCUME~1\FRANCI~1\APPLIC~1\SecuROM
[2006-10-29|17:58] C:\DOCUME~1\FRANCI~1\APPLIC~1\Sun
[2006-12-08|01:05] C:\DOCUME~1\FRANCI~1\APPLIC~1\Symantec
[2008-09-21|16:13] C:\DOCUME~1\FRANCI~1\APPLIC~1\U3
[2005-06-24|19:24] C:\DOCUME~1\FRANCI~1\APPLIC~1\ubi.com
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\Ahead
[2007-03-30|16:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Google
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[2007-03-30|16:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[2007-03-30|16:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\SampleView
[2008-03-14|16:28] C:\DOCUME~1\karlu\APPLIC~1\Adobe
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\Ahead
[2007-04-07|12:29] C:\DOCUME~1\karlu\APPLIC~1\Google
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\Identities
[2007-08-26|00:42] C:\DOCUME~1\karlu\APPLIC~1\LEGO Company
[2007-08-26|00:43] C:\DOCUME~1\karlu\APPLIC~1\Macromedia
[2007-04-07|10:25] C:\DOCUME~1\karlu\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\SampleView
[2007-06-09|19:53] C:\DOCUME~1\karlu\APPLIC~1\Symantec
[2006-12-08|01:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2007-12-01|04:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[2005-08-21|22:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
[2008-09-10|05:11] C:\DOCUME~1\STEVEC~1\APPLIC~1\Admin Dart
[2008-01-17|09:10] C:\DOCUME~1\STEVEC~1\APPLIC~1\Adobe
[2007-02-14|23:02] C:\DOCUME~1\STEVEC~1\APPLIC~1\AdobeUM
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\Ahead
[2007-07-16|22:04] C:\DOCUME~1\STEVEC~1\APPLIC~1\Apple Computer
[2004-08-27|07:59] C:\DOCUME~1\STEVEC~1\APPLIC~1\Corel
[2006-10-08|12:44] C:\DOCUME~1\STEVEC~1\APPLIC~1\Google
[2005-12-30|08:17] C:\DOCUME~1\STEVEC~1\APPLIC~1\HbTools
[2004-08-21|16:34] C:\DOCUME~1\STEVEC~1\APPLIC~1\Help
[2008-07-15|20:52] C:\DOCUME~1\STEVEC~1\APPLIC~1\HP
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\Identities
[2005-05-10|10:18] C:\DOCUME~1\STEVEC~1\APPLIC~1\Lavasoft
[2005-01-09|11:35] C:\DOCUME~1\STEVEC~1\APPLIC~1\Macromedia
[2007-04-30|01:36] C:\DOCUME~1\STEVEC~1\APPLIC~1\Microsoft
[2005-06-04|20:20] C:\DOCUME~1\STEVEC~1\APPLIC~1\MSN6
[2006-11-03|18:58] C:\DOCUME~1\STEVEC~1\APPLIC~1\MSNInstaller
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\SampleView
[2005-12-30|08:17] C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports
[2004-08-21|15:19] C:\DOCUME~1\STEVEC~1\APPLIC~1\Symantec
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-09-21 19:00][--ah-----] C:\WINDOWS\tasks\9DBCD94B8D57542F.job
[2008-09-21 19:00][--ah-----] C:\WINDOWS\tasks\A2036C829068E116.job
[2008-09-21 19:00][--ah-----] C:\WINDOWS\tasks\8196F7A69BDD6176.job
[2008-09-21 16:27][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[2008-09-21 18:54][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2008-09-16 15:37][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-09-12 02:00][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Analyser mon ordinateur.job
[2008-09-21 14:06][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-08-30 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
( 9DBCD94B8D57542F.job )=( c:\docume~1\stevec~1\applic~1\admind~1\LOGOINTERNETACE.exe )
( 8196F7A69BDD6176.job )=( c:\docume~1\christ~1\applic~1\admind~1\LOGOINTERNETACE.exe )
( A2036C829068E116.job )=( c:\docume~1\franci~1\applic~1\admind~1\LOGOINTERNETACE.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[2007-05-29|18:27] C:\Program Files\123CopyDVD
[2005-12-07|11:48] C:\Program Files\3Planesoft Screensaver Manager
[2005-01-05|16:07] C:\Program Files\Activision Value
[2008-09-10|05:10] C:\Program Files\Admin Dart
[2008-07-27|14:20] C:\Program Files\Adobe
[2004-11-28|07:18] C:\Program Files\Age of Dinosaurs 3D
[2008-04-19|23:18] C:\Program Files\Ahead
[2007-12-02|12:39] C:\Program Files\Alwil Software
[2008-08-15|13:38] C:\Program Files\Apple Software Update
[2008-07-14|17:00] C:\Program Files\Astonsoft
[2008-04-19|23:26] C:\Program Files\Atari
[2004-09-14|16:32] C:\Program Files\Atlantis3D
[2007-02-13|21:13] C:\Program Files\AvRack
[2007-12-02|12:35] C:\Program Files\BearFlix
[2008-01-23|12:54] C:\Program Files\BearShare
[2006-12-07|09:39] C:\Program Files\BearShare Applications
[2007-02-01|22:09] C:\Program Files\BearShare MediaBar
[2007-01-18|17:18] C:\Program Files\BFG
[2007-12-30|20:51] C:\Program Files\bfgclient
[2005-02-14|23:13] C:\Program Files\BFGT
[2007-08-24|21:38] C:\Program Files\Big Kahuna Reef 2
[2007-03-13|16:18] C:\Program Files\Big Kahuna Reef 2 - Chain Reaction
[2008-03-12|15:12] C:\Program Files\BitTorrent_DNA
[2007-06-28|07:38] C:\Program Files\Boonty
[2007-06-25|20:20] C:\Program Files\BoontyGames
[2007-06-24|17:16] C:\Program Files\Burger Island
[2007-06-24|17:16] C:\Program Files\Cake Mania(2)
[2008-01-13|17:06] C:\Program Files\Call of Duty
[2006-12-08|01:01] C:\Program Files\CamStudio
[2007-07-05|12:41] C:\Program Files\Capturino 1.4
[2007-02-13|21:48] C:\Program Files\C-Media 3D Audio
[2008-02-04|16:29] C:\Program Files\Common Files
[2004-08-05|09:57] C:\Program Files\ComPlus Applications
[2007-02-23|15:48] C:\Program Files\Datel
[2006-12-17|09:55] C:\Program Files\DeskMates
[2008-01-13|17:01] C:\Program Files\Diamond Detective
[2008-01-13|17:01] C:\Program Files\Diner Dash 2
[2005-06-24|19:24] C:\Program Files\directx
[2008-08-30|14:53] C:\Program Files\DNA
[2007-02-16|09:10] C:\Program Files\eGames
[2005-01-01|12:05] C:\Program Files\EIDOS Interactive
[2008-02-09|14:55] C:\Program Files\Empire Interactive
[2006-03-16|08:52] C:\Program Files\Feeding Frenzy
[2008-09-21|18:07] C:\Program Files\Fichiers communs
[2005-12-15|23:36] C:\Program Files\Free Offers from Freeze.com
[2005-12-07|12:03] C:\Program Files\Free Offers from RI Soft Systems
[2006-09-23|11:05] C:\Program Files\Gadwin Systems
[2006-12-15|18:34] C:\Program Files\GameHouse
[2008-04-19|23:10] C:\Program Files\GameSpy Arcade
[2007-10-22|17:13] C:\Program Files\gmod9
[2007-02-02|03:18] C:\Program Files\Google
[2008-04-19|23:11] C:\Program Files\Gravity
[2008-01-13|17:06] C:\Program Files\Hasbro
[2008-01-13|17:06] C:\Program Files\Hasbro Interactive
[2007-09-27|10:31] C:\Program Files\Hewlett-Packard
[2007-03-23|16:36] C:\Program Files\HP
[2007-09-28|15:02] C:\Program Files\hp deskjet 656c series
[2005-10-19|22:39] C:\Program Files\IncrediMail
[2005-08-22|18:16] C:\Program Files\Infogrames
[2008-04-19|23:28] C:\Program Files\InstallShield Installation Information
[2007-02-18|16:35] C:\Program Files\InterActual
[2008-08-14|03:15] C:\Program Files\Internet Explorer
[2007-12-23|09:35] C:\Program Files\iPod
[2008-01-13|17:01] C:\Program Files\iTunes
[2008-07-14|09:55] C:\Program Files\Java
[2008-04-19|23:06] C:\Program Files\Kazaa
[2007-08-10|22:40] C:\Program Files\Kodak
[2004-10-25|06:52] C:\Program Files\Lavasoft
[2007-08-16|22:48] C:\Program Files\LEGO Company
[2005-11-09|21:29] C:\Program Files\LEGO Software
[2008-08-31|04:14] C:\Program Files\LimeWire
[2005-01-04|07:18] C:\Program Files\Logitech
[2008-01-22|15:52] C:\Program Files\Macrogaming
[2008-07-14|10:11] C:\Program Files\Malwarebytes' Anti-Malware
[2004-08-23|16:06] C:\Program Files\Maxis
[2007-02-16|09:08] C:\Program Files\Mes jeux
[2008-08-17|03:07] C:\Program Files\Messenger
[2008-07-27|14:32] C:\Program Files\Messenger Plus! Live
[2008-07-20|07:51] C:\Program Files\MessengerPlus! 3
[2004-12-25|14:01] C:\Program Files\MicroProse
[2007-05-08|14:55] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2004-08-05|09:57] C:\Program Files\microsoft frontpage
[2008-04-19|23:04] C:\Program Files\Microsoft Games
[2008-02-22|21:54] C:\Program Files\Microsoft IntelliPoint
[2007-04-10|16:22] C:\Program Files\Microsoft Office
[2007-04-10|16:22] C:\Program Files\Microsoft Visual Studio
[2007-04-10|16:23] C:\Program Files\Microsoft Works
[2007-11-04|14:50] C:\Program Files\Microsoft Xbox 360 Accessories
[2007-04-10|16:21] C:\Program Files\Microsoft.NET
[2007-12-02|13:49] C:\Program Files\minicliptoolbar toolbar
[2006-04-01|12:44] C:\Program Files\Moodysoft
[2008-08-16|21:41] C:\Program Files\Movie Maker
[2007-04-10|16:23] C:\Program Files\MSBuild
[2005-06-04|15:18] C:\Program Files\MSN
[2008-04-19|23:25] C:\Program Files\MSN Games
[2004-08-05|09:57] C:\Program Files\MSN Gaming Zone
[2008-04-11|13:30] C:\Program Files\MSN Messenger
[2006-12-08|01:05] C:\Program Files\MSXML 4.0
[2006-09-24|15:04] C:\Program Files\Namtuk
[2007-06-25|15:23] C:\Program Files\NannyMania_at
[2005-12-15|08:59] C:\Program Files\Need2Find
[2008-08-16|21:37] C:\Program Files\NetMeeting
[2008-09-11|08:14] C:\Program Files\Norton AntiVirus
[2005-11-21|23:44] C:\Program Files\OLYMPUS
[2007-01-28|00:24] C:\Program Files\orange
[2008-08-16|21:36] C:\Program Files\Outlook Express
[2004-08-05|09:57] C:\Program Files\Photo Future
[2005-11-21|23:43] C:\Program Files\PIXELA
[2007-07-03|06:42] C:\Program Files\PizzaFrenzy_at
[2005-12-07|11:54] C:\Program Files\Plus!
[2005-03-08|22:53] C:\Program Files\PopCap Games
[2006-12-09|08:26] C:\Program Files\Pro4Chat
[2008-06-05|19:39] C:\Program Files\Project64 1.6
[2008-08-15|13:46] C:\Program Files\QuickTime
[2005-09-04|19:23] C:\Program Files\Real
[2007-02-13|21:13] C:\Program Files\Realtek AC97
[2007-02-13|21:13] C:\Program Files\Realtek Sound Manager
[2006-10-27|21:06] C:\Program Files\ReflexiveArcade
[2008-07-31|17:11] C:\Program Files\Ricochet Infinity
[2008-08-19|16:53] C:\Program Files\Safari
[2007-04-27|21:45] C:\Program Files\Sandisk
[2004-10-23|23:00] C:\Program Files\ScreenMates
[2004-08-05|09:57] C:\Program Files\Services en ligne
[2006-12-08|01:04] C:\Program Files\Shareaza
[2007-06-24|16:12] C:\Program Files\Shockwave.com
[2006-12-08|01:06] C:\Program Files\Shopmania
[2007-02-16|09:07] C:\Program Files\Stand O Food
[2007-06-25|08:31] C:\Program Files\StandOFood_at
[2008-09-21|15:55] C:\Program Files\Steam
[2006-07-01|22:23] C:\Program Files\Sugar Games
[2007-07-05|22:51] C:\Program Files\Symantec
[2005-08-02|17:10] C:\Program Files\SymNetDrv
[2007-05-03|22:32] C:\Program Files\SystemRequirementsLab
[2005-12-16|07:35] C:\Program Files\The Weather Channel FW
[2008-07-06|12:25] C:\Program Files\TmNationsForever
[2008-07-06|10:29] C:\Program Files\TrackMania Nations ESWC
[2006-12-08|00:46] C:\Program Files\TrackMania Original Demo
[2008-09-21|18:58] C:\Program Files\Trend Micro
[2004-11-09|08:25] C:\Program Files\Trymedia
[2005-06-24|19:25] C:\Program Files\ubi.com
[2008-03-01|16:23] C:\Program Files\Ubisoft
[2005-08-12|20:57] C:\Program Files\Uninstall Information
[2007-12-30|18:44] C:\Program Files\Valve
[2007-04-14|08:28] C:\Program Files\vanBasco's Karaoke Player
[2004-08-27|15:57] C:\Program Files\VeriSign
[2004-11-30|21:16] C:\Program Files\WildTangent
[2008-01-07|15:14] C:\Program Files\Windows Live
[2008-04-07|20:54] C:\Program Files\Windows Live Safety Center
[2007-05-02|15:31] C:\Program Files\Windows Live Toolbar
[2006-12-08|01:24] C:\Program Files\Windows Media Connect 2
[2008-09-12|14:58] C:\Program Files\Windows Media Player
[2008-08-16|21:36] C:\Program Files\Windows NT
[2004-08-21|18:37] C:\Program Files\WindowsUpdate
[2007-11-02|11:06] C:\Program Files\WinRAR
[2008-08-12|09:47] C:\Program Files\WinZip
[2005-10-09|15:15] C:\Program Files\xat.com xatshow
[2004-08-05|09:57] C:\Program Files\xerox
[2006-01-15|16:52] C:\Program Files\Yahoo!
[2007-12-23|09:32] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-04-24|20:04] C:\Program Files\Fichiers communs\Adobe
[2006-08-23|18:49] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\Ahead
[2007-06-30|09:17] C:\Program Files\Fichiers communs\Apple
[2007-06-25|19:10] C:\Program Files\Fichiers communs\BOONTY Shared
[2005-05-06|23:57] C:\Program Files\Fichiers communs\CMEII
[2007-04-10|16:22] C:\Program Files\Fichiers communs\DESIGNER
[2007-12-02|13:24] C:\Program Files\Fichiers communs\GMT
[2007-03-23|16:31] C:\Program Files\Fichiers communs\Hewlett-Packard
[2007-03-23|16:40] C:\Program Files\Fichiers communs\HP
[2005-01-04|07:22] C:\Program Files\Fichiers communs\InstallShield
[2006-10-29|13:38] C:\Program Files\Fichiers communs\Java
[2005-01-04|07:18] C:\Program Files\Fichiers communs\Logitech
[2004-11-28|07:32] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-07-25|03:13] C:\Program Files\Fichiers communs\Microsoft Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\MSSoap
[2004-08-05|09:57] C:\Program Files\Fichiers communs\ODBC
[2005-09-04|19:23] C:\Program Files\Fichiers communs\Real
[2005-01-04|07:18] C:\Program Files\Fichiers communs\SC Test Branding 1 Shared
[2005-02-06|14:15] C:\Program Files\Fichiers communs\scanner
[2004-08-05|09:57] C:\Program Files\Fichiers communs\Services
[2007-03-23|16:41] C:\Program Files\Fichiers communs\Sonic Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\SpeechEngines
[2004-10-24|15:01] C:\Program Files\Fichiers communs\SWF Studio
[2008-09-11|08:14] C:\Program Files\Fichiers communs\Symantec Shared
[2008-08-16|21:36] C:\Program Files\Fichiers communs\System
[2008-03-07|15:58] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 87 Processes )
IEXPLORE.EXE ~ [PID:388]
IEXPLORE.EXE ~ [PID:3596]
IEXPLORE.EXE ~ [PID:820]
IEXPLORE.EXE ~ [PID:2848]
IEXPLORE.EXE ~ [PID:744]
iexplore.exe ~ [PID:5288]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Deaf view.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\debug build.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Draw Defy.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\LOUD GLOBAL.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\rdr coal.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\aqlrmrlq.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\wipe tick.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\amejxkuz.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\czhatcfc.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\efrapzaj.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\hqlxbwoh.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\luylnpoo.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\midanqmv.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\mxmtkrqf.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\oayscosb.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\ofumkulk.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\ttyamtmi.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\wipe tick.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\xgbbevzi.exe
C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\yjjnpyqr.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\dhtymtqd.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\gkaxzngv.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\mqpfqqmj.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\naaomcsm.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\oqkkvhyp.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\qkdnosku.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\svrooudp.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\wipe tick.exe
C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\wyqudxih.exe
C:\Program Files\admind~1
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@advertstream[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@advertising[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@adin.bigpoint[2].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@bigpoint[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@us.seafight.bigpoint[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@adopt.euroclick[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@pacificpoker[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@partypoker[2].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@us.seafight.bigpoint[1].txt
C:\WINDOWS\Tasks\9DBCD94B8D57542F.job
C:\WINDOWS\Tasks\8196F7A69BDD6176.job
C:\WINDOWS\Tasks\A2036C829068E116.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SIZE RDR"="C:\\DOCUME~1\\CHRIST~1\\APPLIC~1\\ADMIND~1\\wipe tick.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Base road long save"="C:\\Documents and Settings\\All Users\\Application Data\\File dvd base road\\Deaf view.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 73 [ 70 ## added by CiD ]
/!\ 2 Not 127.0.0.1 !!
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 19:39:06
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CHRIST~1\Application Data\Raptisoft\HamsterBall\Sounds\Crack.ogg
[F:3052][D:77]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp
[F:766][D:0]-> C:\DOCUME~1\CHRIST~1\Cookies
[F:10575][D:60]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-09-21|18:46 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2008-09-21|19:41 - Option : [1]
--------------------\\ Fin du rapport a 19:41:51 -
Modérateur---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt) -
--------------------\\ Lop S&D 4.2.4-4 XP/Vista
"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 2008-09-21|19:54 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Deaf view.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\debug build.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\Draw Defy.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\LOUD GLOBAL.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road\rdr coal.exe
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\aqlrmrlq.exe
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1\wipe tick.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\amejxkuz.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\czhatcfc.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\efrapzaj.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\hqlxbwoh.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\luylnpoo.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\midanqmv.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\mxmtkrqf.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\oayscosb.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\ofumkulk.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\ttyamtmi.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\wipe tick.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\xgbbevzi.exe
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1\yjjnpyqr.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\dhtymtqd.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\gkaxzngv.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\LOGO INTERNET ACE.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\mqpfqqmj.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\naaomcsm.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\oqkkvhyp.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\qkdnosku.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\svrooudp.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\UPSTUPIDANTISITE.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\wipe tick.exe
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1\wyqudxih.exe
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@advertstream[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@advertising[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@adin.bigpoint[2].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@bigpoint[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@us.seafight.bigpoint[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@pacificpoker[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@partypoker[2].txt
Supprime! - C:\WINDOWS\Tasks\9DBCD94B8D57542F.job
Supprime! - C:\WINDOWS\Tasks\8196F7A69BDD6176.job
Supprime! - C:\WINDOWS\Tasks\A2036C829068E116.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File dvd base road
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\admind~1
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\admind~1
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\admind~1
Supprime! - C:\Program Files\admind~1
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[2008-04-24|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-08-23|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[2004-08-05|09:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2007-06-30|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2007-06-30|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2007-06-16|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
[2007-06-25|19:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[2004-12-17|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[2006-09-14|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2008-07-28|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[2007-04-27|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[2006-12-08|01:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
[2007-08-10|22:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[2004-11-28|07:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[2008-07-14|10:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2005-11-25|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2008-03-01|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-09-11|03:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2004-11-13|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[2005-07-12|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[2007-06-24|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[2008-07-30|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonUS
[2008-03-22|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[2007-06-15|07:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[2004-12-16|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[2006-07-10|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QubeSoft
[2004-12-04|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[2007-06-24|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[2004-12-15|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SC Test Branding 1
[2004-09-10|07:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Softdisk LLC
[2007-03-23|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[2005-08-02|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2007-07-05|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2008-07-18|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
[2005-03-07|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[2006-07-05|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2007-05-02|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[2008-08-12|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[2008-08-10|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2006-01-15|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[2005-07-18|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[2008-01-17|16:10] C:\DOCUME~1\CHRIST~1\APPLIC~1\Adobe
[2007-01-30|08:42] C:\DOCUME~1\CHRIST~1\APPLIC~1\AdobeUM
[2004-09-05|19:39] C:\DOCUME~1\CHRIST~1\APPLIC~1\Ahead
[2007-08-04|09:08] C:\DOCUME~1\CHRIST~1\APPLIC~1\Apple Computer
[2005-03-27|17:06] C:\DOCUME~1\CHRIST~1\APPLIC~1\Corel
[2008-07-14|17:03] C:\DOCUME~1\CHRIST~1\APPLIC~1\DeepBurner
[2007-07-25|06:36] C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts
[2007-01-27|21:53] C:\DOCUME~1\CHRIST~1\APPLIC~1\Gaijin Ent
[2006-09-13|16:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\Google
[2004-09-05|16:24] C:\DOCUME~1\CHRIST~1\APPLIC~1\Help
[2008-07-15|21:34] C:\DOCUME~1\CHRIST~1\APPLIC~1\HP
[2007-06-15|16:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\Identities
[2006-12-08|01:01] C:\DOCUME~1\CHRIST~1\APPLIC~1\iWin
[2004-10-25|06:53] C:\DOCUME~1\CHRIST~1\APPLIC~1\Lavasoft
[2004-10-25|18:48] C:\DOCUME~1\CHRIST~1\APPLIC~1\Leadertech
[2007-06-25|15:18] C:\DOCUME~1\CHRIST~1\APPLIC~1\Macromedia
[2008-07-14|10:11] C:\DOCUME~1\CHRIST~1\APPLIC~1\Malwarebytes
[2008-08-18|13:27] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft
[2004-09-05|17:43] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft Web Folders
[2007-07-25|18:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\MSN6
[2005-11-21|23:54] C:\DOCUME~1\CHRIST~1\APPLIC~1\OLYMPUS
[2007-06-15|07:52] C:\DOCUME~1\CHRIST~1\APPLIC~1\PlayFirst
[2004-11-16|08:58] C:\DOCUME~1\CHRIST~1\APPLIC~1\Raptisoft
[2004-08-05|09:56] C:\DOCUME~1\CHRIST~1\APPLIC~1\SampleView
[2006-12-08|01:04] C:\DOCUME~1\CHRIST~1\APPLIC~1\Shareaza
[2008-03-22|14:32] C:\DOCUME~1\CHRIST~1\APPLIC~1\Sun
[2005-08-02|17:01] C:\DOCUME~1\CHRIST~1\APPLIC~1\Symantec
[2007-06-15|16:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\Zylom
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2007-12-01|04:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[2008-05-21|22:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Adobe
[2005-10-30|17:34] C:\DOCUME~1\FRANCI~1\APPLIC~1\AdobeUM
[2004-11-20|14:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\Ahead
[2007-11-26|17:20] C:\DOCUME~1\FRANCI~1\APPLIC~1\Apple Computer
[2007-09-04|18:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Atari
[2008-04-12|19:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\BitTorrent
[2008-03-12|15:12] C:\DOCUME~1\FRANCI~1\APPLIC~1\BitTorrent DNA
[2008-02-20|17:08] C:\DOCUME~1\FRANCI~1\APPLIC~1\Datel
[2008-09-01|09:27] C:\DOCUME~1\FRANCI~1\APPLIC~1\DNA
[2007-01-29|22:11] C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts
[2006-11-23|16:36] C:\DOCUME~1\FRANCI~1\APPLIC~1\Google
[2004-11-12|23:32] C:\DOCUME~1\FRANCI~1\APPLIC~1\Help
[2007-03-23|18:05] C:\DOCUME~1\FRANCI~1\APPLIC~1\HP
[2004-08-05|09:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\Identities
[2008-03-01|16:23] C:\DOCUME~1\FRANCI~1\APPLIC~1\InstallShield
[2005-05-10|09:49] C:\DOCUME~1\FRANCI~1\APPLIC~1\Lavasoft
[2007-09-04|18:26] C:\DOCUME~1\FRANCI~1\APPLIC~1\Leadertech
[2007-08-16|22:48] C:\DOCUME~1\FRANCI~1\APPLIC~1\LEGO Company
[2008-09-01|19:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\LimeWire
[2004-09-10|17:06] C:\DOCUME~1\FRANCI~1\APPLIC~1\Macromedia
[2008-07-24|19:42] C:\DOCUME~1\FRANCI~1\APPLIC~1\Microsoft
[2006-03-13|16:37] C:\DOCUME~1\FRANCI~1\APPLIC~1\MSN6
[2007-11-19|17:22] C:\DOCUME~1\FRANCI~1\APPLIC~1\Nexon
[2006-08-03|19:16] C:\DOCUME~1\FRANCI~1\APPLIC~1\OLYMPUS
[2007-02-23|17:41] C:\DOCUME~1\FRANCI~1\APPLIC~1\PSP_MMM
[2004-11-19|08:37] C:\DOCUME~1\FRANCI~1\APPLIC~1\Raptisoft
[2004-08-05|09:56] C:\DOCUME~1\FRANCI~1\APPLIC~1\SampleView
[2008-03-01|17:26] C:\DOCUME~1\FRANCI~1\APPLIC~1\SecuROM
[2006-10-29|17:58] C:\DOCUME~1\FRANCI~1\APPLIC~1\Sun
[2006-12-08|01:05] C:\DOCUME~1\FRANCI~1\APPLIC~1\Symantec
[2008-09-21|16:13] C:\DOCUME~1\FRANCI~1\APPLIC~1\U3
[2005-06-24|19:24] C:\DOCUME~1\FRANCI~1\APPLIC~1\ubi.com
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\Ahead
[2007-03-30|16:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Google
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[2007-03-30|16:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[2007-03-30|16:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\INVIT~1\APPLIC~1\SampleView
[2008-03-14|16:28] C:\DOCUME~1\karlu\APPLIC~1\Adobe
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\Ahead
[2007-04-07|12:29] C:\DOCUME~1\karlu\APPLIC~1\Google
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\Identities
[2007-08-26|00:42] C:\DOCUME~1\karlu\APPLIC~1\LEGO Company
[2007-08-26|00:43] C:\DOCUME~1\karlu\APPLIC~1\Macromedia
[2007-04-07|10:25] C:\DOCUME~1\karlu\APPLIC~1\Microsoft
[2004-08-05|09:56] C:\DOCUME~1\karlu\APPLIC~1\SampleView
[2007-06-09|19:53] C:\DOCUME~1\karlu\APPLIC~1\Symantec
[2006-12-08|01:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[2007-12-01|04:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[2005-08-21|22:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
[2008-01-17|09:10] C:\DOCUME~1\STEVEC~1\APPLIC~1\Adobe
[2007-02-14|23:02] C:\DOCUME~1\STEVEC~1\APPLIC~1\AdobeUM
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\Ahead
[2007-07-16|22:04] C:\DOCUME~1\STEVEC~1\APPLIC~1\Apple Computer
[2004-08-27|07:59] C:\DOCUME~1\STEVEC~1\APPLIC~1\Corel
[2006-10-08|12:44] C:\DOCUME~1\STEVEC~1\APPLIC~1\Google
[2005-12-30|08:17] C:\DOCUME~1\STEVEC~1\APPLIC~1\HbTools
[2004-08-21|16:34] C:\DOCUME~1\STEVEC~1\APPLIC~1\Help
[2008-07-15|20:52] C:\DOCUME~1\STEVEC~1\APPLIC~1\HP
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\Identities
[2005-05-10|10:18] C:\DOCUME~1\STEVEC~1\APPLIC~1\Lavasoft
[2005-01-09|11:35] C:\DOCUME~1\STEVEC~1\APPLIC~1\Macromedia
[2007-04-30|01:36] C:\DOCUME~1\STEVEC~1\APPLIC~1\Microsoft
[2005-06-04|20:20] C:\DOCUME~1\STEVEC~1\APPLIC~1\MSN6
[2006-11-03|18:58] C:\DOCUME~1\STEVEC~1\APPLIC~1\MSNInstaller
[2004-08-05|09:56] C:\DOCUME~1\STEVEC~1\APPLIC~1\SampleView
[2005-12-30|08:17] C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports
[2004-08-21|15:19] C:\DOCUME~1\STEVEC~1\APPLIC~1\Symantec
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[2008-09-21 16:27][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[2008-09-21 19:54][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2008-09-16 15:37][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-09-12 02:00][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Analyser mon ordinateur.job
[2008-09-21 14:06][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2002-08-30 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[2007-05-29|18:27] C:\Program Files\123CopyDVD
[2005-12-07|11:48] C:\Program Files\3Planesoft Screensaver Manager
[2005-01-05|16:07] C:\Program Files\Activision Value
[2008-07-27|14:20] C:\Program Files\Adobe
[2004-11-28|07:18] C:\Program Files\Age of Dinosaurs 3D
[2008-04-19|23:18] C:\Program Files\Ahead
[2007-12-02|12:39] C:\Program Files\Alwil Software
[2008-08-15|13:38] C:\Program Files\Apple Software Update
[2008-07-14|17:00] C:\Program Files\Astonsoft
[2008-04-19|23:26] C:\Program Files\Atari
[2004-09-14|16:32] C:\Program Files\Atlantis3D
[2007-02-13|21:13] C:\Program Files\AvRack
[2007-12-02|12:35] C:\Program Files\BearFlix
[2008-01-23|12:54] C:\Program Files\BearShare
[2006-12-07|09:39] C:\Program Files\BearShare Applications
[2007-02-01|22:09] C:\Program Files\BearShare MediaBar
[2007-01-18|17:18] C:\Program Files\BFG
[2007-12-30|20:51] C:\Program Files\bfgclient
[2005-02-14|23:13] C:\Program Files\BFGT
[2007-08-24|21:38] C:\Program Files\Big Kahuna Reef 2
[2007-03-13|16:18] C:\Program Files\Big Kahuna Reef 2 - Chain Reaction
[2008-03-12|15:12] C:\Program Files\BitTorrent_DNA
[2007-06-28|07:38] C:\Program Files\Boonty
[2007-06-25|20:20] C:\Program Files\BoontyGames
[2007-06-24|17:16] C:\Program Files\Burger Island
[2007-06-24|17:16] C:\Program Files\Cake Mania(2)
[2008-01-13|17:06] C:\Program Files\Call of Duty
[2006-12-08|01:01] C:\Program Files\CamStudio
[2007-07-05|12:41] C:\Program Files\Capturino 1.4
[2007-02-13|21:48] C:\Program Files\C-Media 3D Audio
[2008-02-04|16:29] C:\Program Files\Common Files
[2004-08-05|09:57] C:\Program Files\ComPlus Applications
[2007-02-23|15:48] C:\Program Files\Datel
[2006-12-17|09:55] C:\Program Files\DeskMates
[2008-01-13|17:01] C:\Program Files\Diamond Detective
[2008-01-13|17:01] C:\Program Files\Diner Dash 2
[2005-06-24|19:24] C:\Program Files\directx
[2008-08-30|14:53] C:\Program Files\DNA
[2007-02-16|09:10] C:\Program Files\eGames
[2005-01-01|12:05] C:\Program Files\EIDOS Interactive
[2008-02-09|14:55] C:\Program Files\Empire Interactive
[2006-03-16|08:52] C:\Program Files\Feeding Frenzy
[2008-09-21|18:07] C:\Program Files\Fichiers communs
[2005-12-15|23:36] C:\Program Files\Free Offers from Freeze.com
[2005-12-07|12:03] C:\Program Files\Free Offers from RI Soft Systems
[2006-09-23|11:05] C:\Program Files\Gadwin Systems
[2006-12-15|18:34] C:\Program Files\GameHouse
[2008-04-19|23:10] C:\Program Files\GameSpy Arcade
[2007-10-22|17:13] C:\Program Files\gmod9
[2007-02-02|03:18] C:\Program Files\Google
[2008-04-19|23:11] C:\Program Files\Gravity
[2008-01-13|17:06] C:\Program Files\Hasbro
[2008-01-13|17:06] C:\Program Files\Hasbro Interactive
[2007-09-27|10:31] C:\Program Files\Hewlett-Packard
[2007-03-23|16:36] C:\Program Files\HP
[2007-09-28|15:02] C:\Program Files\hp deskjet 656c series
[2005-10-19|22:39] C:\Program Files\IncrediMail
[2005-08-22|18:16] C:\Program Files\Infogrames
[2008-04-19|23:28] C:\Program Files\InstallShield Installation Information
[2007-02-18|16:35] C:\Program Files\InterActual
[2008-08-14|03:15] C:\Program Files\Internet Explorer
[2007-12-23|09:35] C:\Program Files\iPod
[2008-01-13|17:01] C:\Program Files\iTunes
[2008-07-14|09:55] C:\Program Files\Java
[2008-04-19|23:06] C:\Program Files\Kazaa
[2007-08-10|22:40] C:\Program Files\Kodak
[2004-10-25|06:52] C:\Program Files\Lavasoft
[2007-08-16|22:48] C:\Program Files\LEGO Company
[2005-11-09|21:29] C:\Program Files\LEGO Software
[2008-08-31|04:14] C:\Program Files\LimeWire
[2005-01-04|07:18] C:\Program Files\Logitech
[2008-01-22|15:52] C:\Program Files\Macrogaming
[2008-07-14|10:11] C:\Program Files\Malwarebytes' Anti-Malware
[2004-08-23|16:06] C:\Program Files\Maxis
[2007-02-16|09:08] C:\Program Files\Mes jeux
[2008-08-17|03:07] C:\Program Files\Messenger
[2008-07-27|14:32] C:\Program Files\Messenger Plus! Live
[2008-07-20|07:51] C:\Program Files\MessengerPlus! 3
[2004-12-25|14:01] C:\Program Files\MicroProse
[2007-05-08|14:55] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2004-08-05|09:57] C:\Program Files\microsoft frontpage
[2008-04-19|23:04] C:\Program Files\Microsoft Games
[2008-02-22|21:54] C:\Program Files\Microsoft IntelliPoint
[2007-04-10|16:22] C:\Program Files\Microsoft Office
[2007-04-10|16:22] C:\Program Files\Microsoft Visual Studio
[2007-04-10|16:23] C:\Program Files\Microsoft Works
[2007-11-04|14:50] C:\Program Files\Microsoft Xbox 360 Accessories
[2007-04-10|16:21] C:\Program Files\Microsoft.NET
[2007-12-02|13:49] C:\Program Files\minicliptoolbar toolbar
[2006-04-01|12:44] C:\Program Files\Moodysoft
[2008-08-16|21:41] C:\Program Files\Movie Maker
[2007-04-10|16:23] C:\Program Files\MSBuild
[2005-06-04|15:18] C:\Program Files\MSN
[2008-04-19|23:25] C:\Program Files\MSN Games
[2004-08-05|09:57] C:\Program Files\MSN Gaming Zone
[2008-04-11|13:30] C:\Program Files\MSN Messenger
[2006-12-08|01:05] C:\Program Files\MSXML 4.0
[2006-09-24|15:04] C:\Program Files\Namtuk
[2007-06-25|15:23] C:\Program Files\NannyMania_at
[2005-12-15|08:59] C:\Program Files\Need2Find
[2008-08-16|21:37] C:\Program Files\NetMeeting
[2008-09-11|08:14] C:\Program Files\Norton AntiVirus
[2005-11-21|23:44] C:\Program Files\OLYMPUS
[2007-01-28|00:24] C:\Program Files\orange
[2008-08-16|21:36] C:\Program Files\Outlook Express
[2004-08-05|09:57] C:\Program Files\Photo Future
[2005-11-21|23:43] C:\Program Files\PIXELA
[2007-07-03|06:42] C:\Program Files\PizzaFrenzy_at
[2005-12-07|11:54] C:\Program Files\Plus!
[2005-03-08|22:53] C:\Program Files\PopCap Games
[2006-12-09|08:26] C:\Program Files\Pro4Chat
[2008-06-05|19:39] C:\Program Files\Project64 1.6
[2008-08-15|13:46] C:\Program Files\QuickTime
[2005-09-04|19:23] C:\Program Files\Real
[2007-02-13|21:13] C:\Program Files\Realtek AC97
[2007-02-13|21:13] C:\Program Files\Realtek Sound Manager
[2006-10-27|21:06] C:\Program Files\ReflexiveArcade
[2008-07-31|17:11] C:\Program Files\Ricochet Infinity
[2008-08-19|16:53] C:\Program Files\Safari
[2007-04-27|21:45] C:\Program Files\Sandisk
[2004-10-23|23:00] C:\Program Files\ScreenMates
[2004-08-05|09:57] C:\Program Files\Services en ligne
[2006-12-08|01:04] C:\Program Files\Shareaza
[2007-06-24|16:12] C:\Program Files\Shockwave.com
[2006-12-08|01:06] C:\Program Files\Shopmania
[2007-02-16|09:07] C:\Program Files\Stand O Food
[2007-06-25|08:31] C:\Program Files\StandOFood_at
[2008-09-21|15:55] C:\Program Files\Steam
[2006-07-01|22:23] C:\Program Files\Sugar Games
[2007-07-05|22:51] C:\Program Files\Symantec
[2005-08-02|17:10] C:\Program Files\SymNetDrv
[2007-05-03|22:32] C:\Program Files\SystemRequirementsLab
[2005-12-16|07:35] C:\Program Files\The Weather Channel FW
[2008-07-06|12:25] C:\Program Files\TmNationsForever
[2008-07-06|10:29] C:\Program Files\TrackMania Nations ESWC
[2006-12-08|00:46] C:\Program Files\TrackMania Original Demo
[2008-09-21|18:58] C:\Program Files\Trend Micro
[2004-11-09|08:25] C:\Program Files\Trymedia
[2005-06-24|19:25] C:\Program Files\ubi.com
[2008-03-01|16:23] C:\Program Files\Ubisoft
[2005-08-12|20:57] C:\Program Files\Uninstall Information
[2007-12-30|18:44] C:\Program Files\Valve
[2007-04-14|08:28] C:\Program Files\vanBasco's Karaoke Player
[2004-08-27|15:57] C:\Program Files\VeriSign
[2004-11-30|21:16] C:\Program Files\WildTangent
[2008-01-07|15:14] C:\Program Files\Windows Live
[2008-04-07|20:54] C:\Program Files\Windows Live Safety Center
[2007-05-02|15:31] C:\Program Files\Windows Live Toolbar
[2006-12-08|01:24] C:\Program Files\Windows Media Connect 2
[2008-09-12|14:58] C:\Program Files\Windows Media Player
[2008-08-16|21:36] C:\Program Files\Windows NT
[2004-08-21|18:37] C:\Program Files\WindowsUpdate
[2007-11-02|11:06] C:\Program Files\WinRAR
[2008-08-12|09:47] C:\Program Files\WinZip
[2005-10-09|15:15] C:\Program Files\xat.com xatshow
[2004-08-05|09:57] C:\Program Files\xerox
[2006-01-15|16:52] C:\Program Files\Yahoo!
[2007-12-23|09:32] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[2008-04-24|20:04] C:\Program Files\Fichiers communs\Adobe
[2006-08-23|18:49] C:\Program Files\Fichiers communs\Adobe Systems Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\Ahead
[2007-06-30|09:17] C:\Program Files\Fichiers communs\Apple
[2007-06-25|19:10] C:\Program Files\Fichiers communs\BOONTY Shared
[2005-05-06|23:57] C:\Program Files\Fichiers communs\CMEII
[2007-04-10|16:22] C:\Program Files\Fichiers communs\DESIGNER
[2007-12-02|13:24] C:\Program Files\Fichiers communs\GMT
[2007-03-23|16:31] C:\Program Files\Fichiers communs\Hewlett-Packard
[2007-03-23|16:40] C:\Program Files\Fichiers communs\HP
[2005-01-04|07:22] C:\Program Files\Fichiers communs\InstallShield
[2006-10-29|13:38] C:\Program Files\Fichiers communs\Java
[2005-01-04|07:18] C:\Program Files\Fichiers communs\Logitech
[2004-11-28|07:32] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-07-25|03:13] C:\Program Files\Fichiers communs\Microsoft Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\MSSoap
[2004-08-05|09:57] C:\Program Files\Fichiers communs\ODBC
[2005-09-04|19:23] C:\Program Files\Fichiers communs\Real
[2005-01-04|07:18] C:\Program Files\Fichiers communs\SC Test Branding 1 Shared
[2005-02-06|14:15] C:\Program Files\Fichiers communs\scanner
[2004-08-05|09:57] C:\Program Files\Fichiers communs\Services
[2007-03-23|16:41] C:\Program Files\Fichiers communs\Sonic Shared
[2004-08-05|09:57] C:\Program Files\Fichiers communs\SpeechEngines
[2004-10-24|15:01] C:\Program Files\Fichiers communs\SWF Studio
[2008-09-11|08:14] C:\Program Files\Fichiers communs\Symantec Shared
[2008-08-16|21:36] C:\Program Files\Fichiers communs\System
[2008-03-07|15:58] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 81 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 19:56:30
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CHRIST~1\Application Data\Raptisoft\HamsterBall\Sounds\Crack.ogg
[F:3052][D:77]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp
[F:758][D:0]-> C:\DOCUME~1\CHRIST~1\Cookies
[F:10721][D:60]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 2008-09-21|18:46 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2008-09-21|19:41 - Option : [1]
3 - "C:\Lop SD\LopR_3.txt" - 2008-09-21|19:58 - Option : [2]
--------------------\\ Fin du rapport a 19:58:43 -
Modérateur---> Supprime Lop S&D
---> Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton bureau :
http://sd-1.archive-host.com/membres/up/197122637410686155/AD-R.exe
! Déconnecte-toi du net et ferme toutes les applications en cours !
* Double-clique sur le programme d'installation et installe-le dans son emplacement par défaut (le bureau).
* Ouvre le dossier AD-Remover présent sur ton bureau et double-clique sur AD-Remover.bat.
* Au menu principal, choisis l'option "A"
--> Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report.log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller ) -
Objet non trouvé !
L'URL requise n'a pu être trouvée sur ce serveur. Si vous avez tapé l'URL à la main, veuillez vérifier l'orthographe et réessayer.
Si vous pensez qu'il s'agit d'une erreur du serveur, veuillez contacter un administrateur à cette adresse : archive.host@gmail.com
ca fonctionne pas le lien -
ModérateurMenu démarrer > Exécuter > Tape cmd et valide par Entrée.
Dans la fenêtre noire, tape sc delete bounty games et valide par Entrée. -
ca dit ceci:
le service spucifiu n'existe pas en tant que service installU -
ModérateurEssaie avec sc delete bounty
-
même chose
-
ModérateurPoste un nouveau rapport HijackThis.
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:36:02, on 2008-09-21
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Nexon\Mabinogi\npkcmsvc.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sympatico.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=0
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [BearFlix] "C:\Program Files\BearFlix\BearFlix.exe" /pause
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [SIZE RDR] C:\DOCUME~1\FRANCI~1\APPLIC~1\ADMIND~1\wipe tick.exe (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent (User 'francis clavet')
O4 - HKUS\S-1-5-21-3676569796-3825828254-3480260237-1008\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'francis clavet')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WinCinema Manager.lnk = C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://www.msn.com/fr-fr/
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - https://www.bigfishgames.com/online/ricochetlostworlds/ReflexiveWebGameLoader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - https://www.bigfishgames.com/online/luxor/mjolauncher.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - https://www.bigfishgames.com/online/feedingfrenzy/Game/SproutLauncher.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by15fd.bay15.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: coronally - {1b17f1db-790e-4d42-8e0c-d4d19123ee5b} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: npkcmsvc - INCA Internet Co., Ltd. - C:\Nexon\Mabinogi\npkcmsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
-
Modérateur---> Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt) -
-----------\\ ToolBar S&D 1.2.0 XP/Vista
"C:\ToolBar SD" ( MAJ : 14-09-2008|23:30 )
Option : [1] ( 2008-09-21|20:45 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@crawler[2].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@dnl.crawler[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@download.crawler[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@webcrawler[1].txt
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@www.webcrawler[2].txt
C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts
C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts\Data
C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts
C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts\Data
C:\DOCUME~1\STEVEC~1\APPLIC~1\Hbtools
C:\DOCUME~1\STEVEC~1\APPLIC~1\Hbtools\IESkins
C:\DOCUME~1\STEVEC~1\APPLIC~1\Hbtools\v3.0
C:\Program Files\KaZaA
C:\Program Files\KaZaA\bdcore.dll
C:\Program Files\KaZaA\BGP2P
C:\Program Files\KaZaA\Db
C:\Program Files\KaZaA\Help
C:\Program Files\KaZaA\libfn.dll
C:\Program Files\KaZaA\My Shared Folder
C:\Program Files\KaZaA\plugins
C:\Program Files\KaZaA\plugins.htm
C:\Program Files\KaZaA\Skins
C:\Program Files\KaZaA\versions.dat
C:\DOCUME~1\CHRIST~1\MENUDM~1\PROGRA~1\Kazaa Media Desktop(2)
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@mywebsearch[1].txt
C:\Program Files\Need2Find
C:\Program Files\Need2Find\bar
C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports
C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports\cs
C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports\shprrprt.log
C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@cs.shopperreports[1].txt
C:\WINDOWS\iun6002.exe
C:\WINDOWS\smdat32a.sys
C:\WINDOWS\smdat32m.sys
C:\WINDOWS\Fonts\acrsec.fon
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.sympatico.ca/"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://home.sweetim.com/"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CHRIST~1\Application Data\Raptisoft\HamsterBall\Sounds\Crack.ogg
1 - "C:\ToolBar SD\TB_1.txt" - 2008-09-21|20:46 - Option : [1]
-----------\\ Fin du rapport a 20:46:35,09 -
ModérateurFais l'option 2 de ToolBar S&D.
-
-----------\\ ToolBar S&D 1.2.0 XP/Vista
"C:\ToolBar SD" ( MAJ : 14-09-2008|23:30 )
Option : [2] ( 2008-09-21|20:49 )
-----------\\ SUPPRESSION
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@crawler[2].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@dnl.crawler[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@download.crawler[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@webcrawler[1].txt
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@www.webcrawler[2].txt
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts\Data
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts\Data
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\Hbtools\IESkins
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\Hbtools\v3.0
Supprime! - C:\Program Files\KaZaA\bdcore.dll
Supprime! - C:\Program Files\KaZaA\BGP2P
Supprime! - C:\Program Files\KaZaA\Db
Supprime! - C:\Program Files\KaZaA\Help
Supprime! - C:\Program Files\KaZaA\libfn.dll
Supprime! - C:\Program Files\KaZaA\My Shared Folder
Supprime! - C:\Program Files\KaZaA\plugins
Supprime! - C:\Program Files\KaZaA\plugins.htm
Supprime! - C:\Program Files\KaZaA\Skins
Supprime! - C:\Program Files\KaZaA\versions.dat
Supprime! - C:\DOCUME~1\CHRIST~1\MENUDM~1\PROGRA~1\Kazaa Media Desktop(2)
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@mywebsearch[1].txt
Supprime! - C:\Program Files\Need2Find\bar
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports\cs
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports\shprrprt.log
Supprime! - C:\DOCUME~1\CHRIST~1\Cookies\christiane_guimond@cs.shopperreports[1].txt
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\WINDOWS\smdat32a.sys
Supprime! - C:\WINDOWS\smdat32m.sys
Supprime! - C:\WINDOWS\Fonts\acrsec.fon
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\FunWebProducts
Supprime! - C:\DOCUME~1\FRANCI~1\APPLIC~1\FunWebProducts
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\Hbtools
Supprime! - C:\Program Files\KaZaA
Supprime! - C:\Program Files\Need2Find
Supprime! - C:\DOCUME~1\STEVEC~1\APPLIC~1\ShopperReports
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.sympatico.ca/"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\CHRIST~1\Application Data\Raptisoft\HamsterBall\Sounds\Crack.ogg
1 - "C:\ToolBar SD\TB_1.txt" - 2008-09-21|20:46 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 2008-09-21|21:01 - Option : [2]
-----------\\ Fin du rapport a 21:01:27,64 -
Modérateur---> Supprime ToolBar S&D
---> Fais un scan rapide avec MBAM, supprime tout ce qu'il trouve et poste le rapport :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm -
petite question en attendant le rapport de malwarebytes,
celà va t'il règler le problèmes des pop up CID de tous les utilisateurs de mon ordinateur? -
ModérateurNormalement oui, tu testeras après.
- 1
- 2
Suivant
