Virus beagle

bonjour,

--------------recherche----------------------------

Télécharge Lop S&D :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

Déconnecte toi et ferme toutes tes applications en cours .

Double-clique sur sur l'.exe que tu viens de télécharger pour lancer l'installe .

Une fois l'installation faite, clique sur le raccourci pour lancer l'outil .

Là,laisses toi guider:
--->choisis l'option 1 (recherche) et valides.

(Tu ne fais pas l'option de nettoyage ( 2 ou 3) ).

Une fois le scan terminer ,le Bloc-Notes contenant le rapport va s'ouvrir.
Poste ce rapport dans ta prochaine réponse pour analyse .

erreur

tu es infecté par bagle,

Telecharge FindyKill sur ton bureau :

--> Lance l installation avec les parametres par default

--> Double clic sur le raccourci FindyKill sur ton bureau

--> Au menu principal,choisi l option 1 (Recherche)

--> Post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

Salut ,

pour suivre / aider ...

Salut

Faudrait lire attentivement cette phrase

mes antivirus ne marchaient plus j'ai même essayer d'en installer des autres mais ça m'ecrit que ça n'est pas une commande win32 valide

Apres plusieurs recherches j'ai conclu qu'il s agissait du virus beagle, j

+++

oui j'ai vu mais y a pas que ça

tu n'as rien vu du tout
tu demandes lop s&d alors que tu n'as aucun log qui le justifie et d'autant plus que la personne ne parle aucunement de pubs présente(rapport de lop faisant foi!)

de plus tu demandes qu'elle relance lop pour un nettoyage
j'en conclus que tu n'es pas capable de lire un log de lop

----------------- FindyKill V4.707 ------------------

* User : Administrateur - TITANIUM
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 06/12/08 par Chiquitine29
* Recherche effectuée à 17:22:53 le 07/12/2008
* Windows XP - Internet Explorer 6.0.2900.2180

((((((((((((((((( *** Recherche *** ))))))))))))))))))

--------------- [ Processus actifs ] ----------------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\Config\csrss.exe
C:\WINDOWS\Config\csrss.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\EXPERTool\TBPanel.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Wireless LAN Utility\SiWake.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------

»»»» Presence des fichiers dans C:

Found ! [07/12/2008 16:07] - C:\InfoSat.txt

»»»» Presence des fichiers dans C:\WINDOWS

»»»» Presence des fichiers dans C:\WINDOWS\Prefetch

Found ! - C:\WINDOWS\prefetch\1034781.EXE-1484A1E5.pf
Found ! - C:\WINDOWS\prefetch\1069218.EXE-1332E036.pf
Found ! - C:\WINDOWS\prefetch\1082968.EXE-162FA6A4.pf
Found ! - C:\WINDOWS\prefetch\108500.EXE-370CBBEA.pf
Found ! - C:\WINDOWS\prefetch\117062.EXE-058A772C.pf
Found ! - C:\WINDOWS\prefetch\138140.EXE-07107AA4.pf
Found ! - C:\WINDOWS\prefetch\141046.EXE-353B6654.pf
Found ! - C:\WINDOWS\prefetch\146375.EXE-314EDFA4.pf
Found ! - C:\WINDOWS\prefetch\147390.EXE-233FBD5E.pf
Found ! - C:\WINDOWS\prefetch\148203.EXE-171C0BFB.pf
Found ! - C:\WINDOWS\prefetch\153718.EXE-240E7314.pf
Found ! - C:\WINDOWS\prefetch\162593.EXE-30DC25FE.pf
Found ! - C:\WINDOWS\prefetch\166062.EXE-2B4B2369.pf
Found ! - C:\WINDOWS\prefetch\167125.EXE-13BC5A1F.pf
Found ! - C:\WINDOWS\prefetch\168812.EXE-1A42813B.pf
Found ! - C:\WINDOWS\prefetch\171234.EXE-0EAAE7AE.pf
Found ! - C:\WINDOWS\prefetch\173968.EXE-3066622D.pf
Found ! - C:\WINDOWS\prefetch\174296.EXE-1BBDFA29.pf
Found ! - C:\WINDOWS\prefetch\175015.EXE-18C7B882.pf
Found ! - C:\WINDOWS\prefetch\176781.EXE-2C5824CF.pf
Found ! - C:\WINDOWS\prefetch\183750.EXE-34F90C9E.pf
Found ! - C:\WINDOWS\prefetch\194812.EXE-1CD7B685.pf
Found ! - C:\WINDOWS\prefetch\196484.EXE-0D5CA80C.pf
Found ! - C:\WINDOWS\prefetch\199765.EXE-3565D698.pf
Found ! - C:\WINDOWS\prefetch\206343.EXE-2A9E2EB6.pf
Found ! - C:\WINDOWS\prefetch\215562.EXE-0B4080B0.pf
Found ! - C:\WINDOWS\prefetch\217562.EXE-084E9627.pf
Found ! - C:\WINDOWS\prefetch\225796.EXE-345C36EE.pf
Found ! - C:\WINDOWS\prefetch\270343.EXE-13708866.pf
Found ! - C:\WINDOWS\prefetch\FLEC006.EXE-0695BA6E.pf
Found ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Found ! - C:\WINDOWS\prefetch\WINFILSE.EXE-17C2CF68.pf
Found ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Found ! - C:\WINDOWS\Prefetch\INSTALL_CRACK.EXE-24C8FA2F.pf
Found ! - C:\WINDOWS\Prefetch\INSTALL_CRACK.EXE-24C8FA2F.pf
Found ! - C:\WINDOWS\Prefetch\PATCH.EXE-15E05841.pf

»»»» Presence des fichiers dans C:\WINDOWS\system32

Found ! [07/12/2008 16:52] - C:\WINDOWS\system32\mdelk.exe
Found ! [07/12/2008 16:52] - C:\WINDOWS\system32\wintems.exe
Found ! [07/12/2008 16:53] - C:\WINDOWS\system32\ban_list.txt

»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

Found ! [07/12/2008 16:51] - C:\WINDOWS\system32\drivers\srosa.sys
Found ! [07/12/2008 16:51] - C:\WINDOWS\system32\drivers\srosa2.sys
Found ! [07/06/2004 03:08] - C:\WINDOWS\system32\drivers\winfilse.exe
Found ! [07/12/2008 16:55] - "C:\WINDOWS\system32\drivers\downld"
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1032812.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1034781.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\103875.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1041421.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\104171.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1042281.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\105328.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\106859.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1069218.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1082968.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\108500.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\1099296.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\110375.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\112046.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\113843.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\114687.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\117062.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\123562.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\124437.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\124734.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\125468.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\128640.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\129828.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\130984.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\132343.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\134250.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\136109.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\137062.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\137796.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\138140.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\138921.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\139187.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\140171.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\141046.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\141781.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\145859.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\146375.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\146843.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\147000.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\147390.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\148203.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\148984.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\14934140.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\14942421.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\14943390.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\14973250.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\15015984.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\15022812.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\15053921.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\150625.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\15071671.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\153718.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\154031.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\158250.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\158421.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\159421.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\163125.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\166062.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\167125.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\168812.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\169859.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\171234.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\171328.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\173312.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\173968.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\174296.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\174421.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\175015.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\176093.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\176781.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\178859.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\181359.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\183750.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\186656.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\187796.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\188859.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\190015.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\191796.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\194812.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\196484.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\197640.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\198234.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\199765.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\200406.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\202515.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\204203.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\204531.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\206343.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\210718.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\215562.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\217562.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\221546.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\222671.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\225796.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\226921.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\230437.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\233046.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\235671.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\235953.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\243578.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\247546.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\248468.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\259546.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\259781.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\270343.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\272500.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\273421.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\274937.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\278359.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\280062.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\300093.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\306828.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\310750.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\311234.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\313781.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\327562.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\346968.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\364750.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\411218.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\417671.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\459796.exe
Found ! [07/12/2008 16:55] - C:\WINDOWS\system32\drivers\downld\480156.exe

»»»» Presence des fichiers dans C:\Documents and Settings\Administrateur\Application Data

Found ! [07/12/2008 16:53] - "C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe"
Found ! [07/12/2008 16:54] - "C:\Documents and Settings\Administrateur\Application Data\m\list.oct"
Found ! [07/12/2008 16:54] - "C:\Documents and Settings\Administrateur\Application Data\m\data.oct"
Found ! [07/12/2008 16:54] - "C:\Documents and Settings\Administrateur\Application Data\m\srvlist.oct"
Found ! [07/12/2008 16:54] - "C:\Documents and Settings\Administrateur\Application Data\m\shared"
Found ! [07/12/2008 16:53] - "C:\Documents and Settings\Administrateur\Application Data\m"

»»»» Presence des fichiers dans C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp

»»»» Presence des fichiers dans C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5

Found ! [28/05/2008 12:02] - C:\Documents and Settings\Administrateur\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.57667626.108x81.jpg
Found ! [28/05/2008 12:02] - C:\Documents and Settings\Administrateur\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.57667626.226x170.jpg
Found ! [28/05/2008 12:02] - C:\Documents and Settings\Administrateur\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.57667626.jpg
Found ! [23/08/2008 13:52] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\05B2B6C8-CB36-427E-98B2-667559C92B64.jpg
Found ! [01/11/2008 19:50] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [23/08/2008 13:52] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\1962F791-19E8-4B64-A608-A111805B6545.jpg
Found ! [19/08/2008 17:06] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [01/11/2008 19:50] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
Found ! [23/08/2008 13:52] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [20/08/2008 08:30] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\72D11080-9C9F-4CE4-B640-318C5EB59CBB.jpg
Found ! [19/08/2008 17:09] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\753732E7-AE5F-4185-B640-9426231184AA.jpg
Found ! [19/08/2008 17:07] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
Found ! [01/11/2008 19:50] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [01/11/2008 19:49] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [01/11/2008 19:49] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg
Found ! [30/08/2008 09:37] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\ADA58A2D-EF38-417D-967C-E74E25F1B643.jpg
Found ! [29/08/2008 23:00] - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\B2335388-3CA7-4C2A-B64E-319BC013A17F.jpg
Found ! [07/12/2008 16:53] - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\ACS12F7N\b64_2[1].jpg
Found ! [07/12/2008 16:52] - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\T4Z2JKQK\b64_3[1].jpg
Found ! [07/12/2008 16:53] - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\TFFWDBFM\b64[1].jpg
Found ! [07/12/2008 16:53] - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\TFFWDBFM\b64[2].jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
ccleaner="C:\Program Files\CCleaner\CCleaner.exe" /AUTO
swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
GAINWARD=C:\Program Files\EXPERTool\TBPanel.exe /A
Steam="C:\Program Files\Steam\Steam.exe" -silent
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
TweakRAM=C:\Program Files\TweakRAM\TweakRAM.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
SkyTel=SkyTel.EXE
RTHDCPL=RTHDCPL.EXE
Alcmtr=ALCMTR.EXE
amd_dc_opt=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz=nwiz.exe /install
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
ISTray="C:\Program Files\Spyware Doctor\pctsTray.exe"
avast!=C:\PROGRA~1\NOUVEA~1\ashDisp.exe

[HKEY_CURRENT_USER\software\local appwizard-generated applications\CCleaner]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\install_crack]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\patch]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\playplus]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Producer]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Registrar]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\vscap]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winfilse]

--------------- [ Registre / Clés infectieuses ] ----------------

Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Local AppWizard-Generated Applications\install_crack
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Local AppWizard-Generated Applications\patch
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Local AppWizard-Generated Applications\winfilse
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\MuleAppData
Found ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Ubisoft
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\install_crack
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\patch
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winfilse
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR

--------------- [ Etat / Services ] ----------------

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

- sans echec non fonctionnel !!

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal

- sans echec non fonctionnel !!

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network

- sans echec non fonctionnel !!

+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

/!\ Ndisuio - Type de démarrage = 4

/!\ Ip6Fw - Type de démarrage = 4

/!\ SharedAccess - Type de démarrage = 4

/!\ wuauserv - Type de démarrage = 4

/!\ wscsvc - Type de démarrage = 4

--------------- [ Recherche dans supports amovibles] ----------------

+- Informations :

C: - Lecteur fixe

+- presence des fichiers :

--------------- [ Registre / Mountpoint2 ] ----------------

-> Not found !

------------------- ! Fin du rapport ! --------------------

Salut Max ,

je vais te prendre en charge :

--> Double clic sur le raccourci FindyKill sur ton bureau

--> Au menu principal,choisi l option 2 (Suppression)

/!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage effectué"

/!\ Ne te sert pas du pc durant la suppression , ton bureau ne sera pas accessible c est normal !

-------> ensuite post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

----------------- FindyKill V4.707 ------------------

* User : Administrateur - TITANIUM
* executed from : C:\Program Files\FindyKill
* Update on 06/12/08 par Chiquitine29
* Start at 17:31:53 the 07/12/2008
* Windows XP - Internet Explorer 6.0.2900.2180

((((((((((((((( *** deleting *** ))))))))))))))))))

--------------- [ Active Processes ] ----------------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\userinit.exe

--------------- [ Infected files / folders ] ----------------

»»»» Supression files in C:

Deleted ! - C:\InfoSat.txt

»»»» Supression files in C:\WINDOWS

»»»» Supression files in C:\WINDOWS\Prefetch

Deleted ! - C:\WINDOWS\prefetch\1034781.EXE-1484A1E5.pf
Deleted ! - C:\WINDOWS\prefetch\1069218.EXE-1332E036.pf
Deleted ! - C:\WINDOWS\prefetch\1082968.EXE-162FA6A4.pf
Deleted ! - C:\WINDOWS\prefetch\108500.EXE-370CBBEA.pf
Deleted ! - C:\WINDOWS\prefetch\117062.EXE-058A772C.pf
Deleted ! - C:\WINDOWS\prefetch\138140.EXE-07107AA4.pf
Deleted ! - C:\WINDOWS\prefetch\141046.EXE-353B6654.pf
Deleted ! - C:\WINDOWS\prefetch\146375.EXE-314EDFA4.pf
Deleted ! - C:\WINDOWS\prefetch\147390.EXE-233FBD5E.pf
Deleted ! - C:\WINDOWS\prefetch\148203.EXE-171C0BFB.pf
Deleted ! - C:\WINDOWS\prefetch\153718.EXE-240E7314.pf
Deleted ! - C:\WINDOWS\prefetch\162593.EXE-30DC25FE.pf
Deleted ! - C:\WINDOWS\prefetch\166062.EXE-2B4B2369.pf
Deleted ! - C:\WINDOWS\prefetch\167125.EXE-13BC5A1F.pf
Deleted ! - C:\WINDOWS\prefetch\168812.EXE-1A42813B.pf
Deleted ! - C:\WINDOWS\prefetch\171234.EXE-0EAAE7AE.pf
Deleted ! - C:\WINDOWS\prefetch\173968.EXE-3066622D.pf
Deleted ! - C:\WINDOWS\prefetch\174296.EXE-1BBDFA29.pf
Deleted ! - C:\WINDOWS\prefetch\175015.EXE-18C7B882.pf
Deleted ! - C:\WINDOWS\prefetch\176781.EXE-2C5824CF.pf
Deleted ! - C:\WINDOWS\prefetch\183750.EXE-34F90C9E.pf
Deleted ! - C:\WINDOWS\prefetch\194812.EXE-1CD7B685.pf
Deleted ! - C:\WINDOWS\prefetch\196484.EXE-0D5CA80C.pf
Deleted ! - C:\WINDOWS\prefetch\199765.EXE-3565D698.pf
Deleted ! - C:\WINDOWS\prefetch\206343.EXE-2A9E2EB6.pf
Deleted ! - C:\WINDOWS\prefetch\215562.EXE-0B4080B0.pf
Deleted ! - C:\WINDOWS\prefetch\217562.EXE-084E9627.pf
Deleted ! - C:\WINDOWS\prefetch\225796.EXE-345C36EE.pf
Deleted ! - C:\WINDOWS\prefetch\270343.EXE-13708866.pf
Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-0695BA6E.pf
Deleted ! - C:\WINDOWS\prefetch\INSTALL_CRACK.EXE-24C8FA2F.pf
Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Deleted ! - C:\WINDOWS\prefetch\PATCH.EXE-15E05841.pf
Deleted ! - C:\WINDOWS\prefetch\WINFILSE.EXE-17C2CF68.pf
Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf

»»»» Supression files in C:\WINDOWS\system32

Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe
Deleted ! - C:\WINDOWS\system32\ban_list.txt

»»»» Supression files in C:\WINDOWS\system32\drivers

Deleted ! - C:\WINDOWS\system32\drivers\srosa.sys
Deleted ! - C:\WINDOWS\system32\drivers\srosa2.sys
Deleted ! - C:\WINDOWS\system32\drivers\winfilse.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1032812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1034781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\103875.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1041421.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\104171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1042281.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\105328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\106859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1069218.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1082968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\108500.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\1099296.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\110375.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\112046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\113843.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\114687.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\117062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\123562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\124437.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\124734.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\125468.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\128640.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\129828.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\130984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\132343.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\134250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\136109.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\137062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\137796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\138140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\138921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\139187.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\140171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\141046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\141781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\145859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\146375.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\146843.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\147000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\147390.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\148203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\148984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14934140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14942421.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14943390.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14973250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15015984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15022812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15053921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\150625.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15071671.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\153718.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\154031.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\158250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\158421.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\159421.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\163125.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\166062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\167125.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\168812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\169859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\171234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\171328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\173312.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\173968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\174296.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\174421.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\175015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\176093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\176781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\178859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\181359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\183750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\186656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\187796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\188859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\190015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\191796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\194812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\196484.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\197640.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\198234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\199765.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\200406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\202515.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\204203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\204531.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\206343.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210718.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\215562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\217562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\221546.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\222671.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\225796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\226921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\230437.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\233046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\235671.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\235953.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\243578.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\247546.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\248468.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\259546.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\259781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\270343.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\272500.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\273421.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\274937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\278359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\280062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\300093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\306828.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\310750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\311234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\313781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\327562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\346968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\364750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\411218.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\417671.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\459796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\480156.exe
Deleted ! - "C:\WINDOWS\system32\drivers\downld"

»»»» Supression files in C:\Documents and Settings\Administrateur\Application Data

Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe"
Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\m\list.oct"
Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\m\data.oct"
Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\m\srvlist.oct"
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\1st DVD Cloner 3.20 build 896.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\3D Galaxy
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\4 yeo out font 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\@PROMT_English-Russian_Express_Translator_7.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\AaxBattery_1.0.0_(Crack).zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Acala_DVD_Zune_Ripper_2.2.7.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Access to SQL2000 3.13.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Agatha 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Age_of_Mythology_-_River_Battle_scenario.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\All-American_Rejects_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Amara_Flash_Photo_Animation_2.3_(Cracked).zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Anubis_P2P_1.4.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\ASCIIDiff_Text_File_Comparison_Utility_1.6.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Asset Tracker for Networks 7.2.4.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\aTunes 1.8.3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Aurigma File Downloader 1.0.77.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\AutoOff_XP_2.0_build_105.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Backlink Reporter 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Battlefront_II_Remote_Manager_1.08.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Bluefox 3GP Video Converter 2.01.08.0505.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Channel 9 1.1.0.1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Character_(Letter)_Frequency_Count_Software_7.0_[Cracked].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\ChazFM 1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\CheckDialer_1.4_[Crack].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Chilkat_MHT_ActiveX_1.0_[Key].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\CoffeeCup Flash Photo Gallery 5.6 With Crack.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\CoffeeCup_GIF_Animator_7.5_[KeyGen].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Cool All Video Converter Platinum 5.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\cPicture_1.6.10.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\csv2dg_2.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Data_Wiz_4.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Dating Widget 2.6.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Desktop Diet 1.31.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Digigenius DVD Cloner 3.6.6.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Digital File Shredder Pro 3.2.0.9.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Directory_Replicator_2.2.2.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Discus_4.0L.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\DiskInternals Partition Recovery 2.6.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\DV Advanced Timer 1.0.0.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Egyptian Portraits by Winifred Brunton 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Embird_Alphabet_31_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\EZuse DVD To MPEG Converter 1.00.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\FirstStop WebSearch Standard Edition 5.0.3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\FlashDownloader_1.02.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Free_PDF_Text_Reader_1.1.38.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Gainaco Systems Splitter 2.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Geneva_Webcams_1.2.2.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Glossy_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Half-Life 2 Barrel Launcher map.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Hardware_Asset_Tracker_4.0_[Serial].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Heroes_of_Might_and_Magic_III_Shadow_of_Death_3.1_patch.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Hide The IP 2.1.1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Hot DVD Audio Ripper 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\HotRecorder_for_VoIP_2.1.4_[Patch].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Hunter_Dictionary_II_1.1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Hurricane_Monitor_2.4.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\IdeaCart_0.01.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\IEWatch_Professional_4.6.0.6_Key+Serial.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Image to Icon 2.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\iMesh 7.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\iMp3_1.3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Invisible_CHAOS_5.1_Key.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\ionReader Lite 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\JARGET_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Jedi_Knight_Jedi_Academy_Boba_Fett's_Hideout_map.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Jitbit_Macro_Recorder_3.8.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\LingvoSoft_Picture_Dictionary_2007_Chinese_Mandarin_Traditional_-_Korean_1.1.20_With_Crack.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Magic_RM_RAM_to_MP3_Converter_3.12.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\McAfee.Common.Management.Agent.CMA-3.6.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Mcafee.Viruscan.2006.v10.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\McAfee.VirusScan.7.0.License.Generator.Crack.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Mechanics Labs 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Medley 0.2.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Melody_Player_4.2.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Mess Patch 8.5.1288.816 - Generation 5.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\MessengerLog_Pro_6.26_Key.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\MIDIVOL_1.4.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\MyReminders 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\My_Volume_2.3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Navipane for Excel 2.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\NexNote 0.56.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Nota_Bene_8.0_[Key].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\NumEdit 2.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Omega_Edit_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\ONES_2.1.358.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\OnlineTV_3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Papagayo 1.1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Patent Bar Simulator 1.4.1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\PC Chaperone Personal 5.1.391.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\PhotoTiler Pro InDesign Plug-in 2.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Pitaschio 2.23.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Power of The Cross 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\PowerISO_3.8.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Project Browser+ 4.3.95.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Quick_Horse_1.0_(Key).zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Quick_MP3_WAV_Converter_3.0.2.58_[Patch].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Radix Reload Professional 8.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Read-e_PLUS_1.0.133_[Key].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Realhound_IP_5.410.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\RegRun_Security_Suite_Platinum_5.50_beta.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Repgen 2.25 Crack.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\RhymeIt_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Rune_Fortress_map.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Scroll Clock 2.0 [Patch].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\SEscree_1.00.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\SF Gadget 1.1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\ShutxDown_1.1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\SingleClick Wireless Security 1.0.352.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\SmartDirCopy_4.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Soft191 Duplicate File Finder 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Softek Barcode Reader Toolkit 7.0.3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\SolarWinds_Cirrus_Configuration_Management_2.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Spesoft Free CD Ripper 2.70.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\SwisSQL_-_Sybase_to_Oracle_Migration_Tool_3.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\TCPline_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Telconi Terminal 1.0 Beta 1 (Cracked).zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\TubeHunter 9.5.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Turbo_Memory_2.3.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\twotone icons.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Ultimate Online Photo Gallery 3.0 [Key+Serial].zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\UNIT_CONVERTER_BASIC_1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Viking_Mp3Player_3.53.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\VPN-X Client 2.2.1.24.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\W32.Novarg.A@mm Removal Tool 1.0.3.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\WaveBox_1.1_(With_Crack).zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\Wikipedia_Toolbar_for_Firefox_1.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\WildSavers Screensaver - Bugs ws-0002 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\World Population 1.0.zip
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\m\shared\XPB!_Basic_1.12_[Key+Serial].zip
Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\m"
Deleted ! - "C:\Documents and Settings\Administrateur\Application Data\inst.exe"

»»»» Supression files in C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp

»»»» Supression files in C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5

Deleted ! - C:\Documents and Settings\Administrateur\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.57667626.108x81.jpg
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.57667626.226x170.jpg
Deleted ! - C:\Documents and Settings\Administrateur\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.57667626.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\05B2B6C8-CB36-427E-98B2-667559C92B64.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\1962F791-19E8-4B64-A608-A111805B6545.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\72D11080-9C9F-4CE4-B640-318C5EB59CBB.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\753732E7-AE5F-4185-B640-9426231184AA.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\ADA58A2D-EF38-417D-967C-E74E25F1B643.jpg
Deleted ! - C:\Documents and Settings\Administrateur\iWizz\Thumbnails\B2335388-3CA7-4C2A-B64E-319BC013A17F.jpg
Deleted ! - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\ACS12F7N\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\T4Z2JKQK\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\TFFWDBFM\b64[1].jpg
Deleted ! - C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\TFFWDBFM\b64[2].jpg

--------------- [ Registry / Infected keys ] ----------------

Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Local AppWizard-Generated Applications\install_crack
Deleted ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Local AppWizard-Generated Applications\patch
Deleted ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Local AppWizard-Generated Applications\winfilse
Deleted ! - HKEY_USERS\S-1-5-21-73586283-1214440339-839522115-500\Software\Ubisoft

--------------- [ States / Restarting of services ] ----------------

+- Safe boot mode restored !

+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

Ip6Fw - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2

---------------- ! End of report ! ------------------

--------------- [ Cleaning removable drives ] ----------------

+- Informations :

C: - Lecteur fixe

D: - Lecteur de CD-ROM

+- deleting files :

--------------- [ Registry / Mountpoint2 ] ----------------

-> Not found !

Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Tuto: http://www.malekal.com/Adware.Magic_Control.php

Search Navipromo version 3.6.9 commencé le 07/12/2008 à 17:39:28,29

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Administrateur"

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Administrateur\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Boomscud\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Administrateur\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Boomscud\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" *

*** Recherche fichiers ***

C:\WINDOWS\system32\nvs2.inf trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" :

uwysmos.dat trouvé !
uwysmos_nav.dat trouvé !
uwysmos_navps.dat trouvé !
yyeic.dat trouvé !
yyeic_nav.dat trouvé !
yyeic_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

*** Analyse terminée le 07/12/2008 à 17:41:37,82 ***

Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
Au menu principal, choisis 2 et valides.
(ne fais pas le choix 3 ou 4 sans notre avis/accord)

Le fix va t'informer qu'il va alors redémarrer ton PC
Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
Appuies sur une touche comme demandé.
(si ton Pc ne redémarre pas automatiquement, fais le toi même)
Au redémarrage de ton PC, choisis ta session habituelle.

Patiente jusqu'au message :
*** Nettoyage Termine le ..... ***
Le bloc-notes va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver
Referme le bloc-notes. Ton bureau va réapparaitre

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Celà te fera apparaitre ton bureau.

Postes le rapport içi.

Clean Navipromo version 3.6.9 commencé le 07/12/2008 à 17:43:54,89

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Administrateur"

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Administrateur\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\Boomscud\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Administrateur\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\Boomscud\menudm~1\progra~1" ***

*** Suppression fichiers ***

C:\WINDOWS\system32\nvs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Administrateur\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

* Dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" *

uwysmos.dat trouvé !
Copie uwysmos.dat réalisée avec succès !
uwysmos.dat supprimé !

uwysmos_nav.dat trouvé !
Copie uwysmos_nav.dat réalisée avec succès !
uwysmos_nav.dat supprimé !

uwysmos_navps.dat trouvé !
Copie uwysmos_navps.dat réalisée avec succès !
uwysmos_navps.dat supprimé !

yyeic.dat trouvé !
Copie yyeic.dat réalisée avec succès !
yyeic.dat supprimé !

yyeic_nav.dat trouvé !
Copie yyeic_nav.dat réalisée avec succès !
yyeic_nav.dat supprimé !

yyeic_navps.dat trouvé !
Copie yyeic_navps.dat réalisée avec succès !
yyeic_navps.dat supprimé !

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 07/12/2008 à 17:45:47,62 ***

Télécharge ToolsCleaner sur ton bureau.
-->
http://pc-system.fr/
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

ensuite :

Télécharge HijackThis (outils de diagnostic) ici :

-> Fais un clic droit sur un des liens et choisi enregistrer la cible sous .... le bureau

-> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
-> HijackThis

-> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

-> Clique sur Install ensuite sur I Accept

-> Clique sur Do a scan system and save log file

-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

[ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\lopR.txt: trouvé !
C:\FindyKill.txt: trouvé !
C:\Lop SD: trouvé !
C:\Documents and Settings\Administrateur\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\Administrateur\Bureau\Navilog1.exe: trouvé !
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\FindyKill: trouvé !
C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\FindyKill: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\WINDOWS\Gmer.exe: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\Administrateur\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\Administrateur\Bureau\Navilog1.exe: supprimé !
C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\WINDOWS\Gmer.exe: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\lopR.txt: supprimé !
C:\FindyKill.txt: supprimé !
C:\Lop SD: supprimé !
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\FindyKill: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\FindyKill: supprimé !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:55:51, on 07/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Config\csrss.exe
C:\WINDOWS\Config\csrss.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\EXPERTool\TBPanel.exe
C:\Program Files\Wireless LAN Utility\SiWake.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.mini20.com/?tm=1&kw=Secure+Web+Search+Engine&KW1=Secure%20Web%20Search%20Engine&KW2=Best%20Malware%20Detection%20And%20Removal%20Software&searchbox=0&domainname=0&backfill=0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\csrss.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\NOUVEA~1\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [TweakRAM] C:\Program Files\TweakRAM\TweakRAM.exe
O4 - Startup: Enregistrement de FIFA 09.lnk = C:\Program Files\EA SPORTS\FIFA 09\Support\EAregister.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: SiWake.lnk = C:\Program Files\Wireless LAN Utility\SiWake.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - https://www.systemrequirementslab.com/cyri
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

Réinstal AVG 8 (ton antivirus)

sinon en gratuit je te conseil antivir:

->Antivir le telecharger

-> http://www.commentcamarche.net/telecharger/telecharger 55 antivir

tuto : https://www.malekal.com/avira-free-security-antivirus-gratuit/
tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59

ensuite :

* Télécharge SDFix depuis ce lien : http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
* Enregistre SDFix sur ton bureau
* Double-clique sur l'icone SDFix
* Une fenêtre s'ouvre, laisse les options telles quelles puis clique sur le bouton InstallSDFix .

Pour la suite le nettoyage se fait en mode sans échec.

Pour redémarrer en mode sans échec :

* Redémarre ton PC, avant le logo Windows et après le changement du premier écran
* Tapote sur la touche F8, un menu va apparaître, choisis Mode sans échec et appuie sur la touche entrée du clavier.
* Pour plus d'informations, voir la page comment redémarrer en mode sans échec

* Une fois en mode sans échec, clique sur le menu Démarrer puis Exécuter et colle la commande suivant :
C:\SDFix\RunThis.bat
* Cliquez sur OK.
* Une fenêtre noire s'ouvre vous donnant la version du Fix.
* Appuyez sur la touche Y (pour yes) du clavier et appuyez sur Entrée

*A ce moment le bureau (Menu Démarrer etc.) va disparaître.

* Le Fix commence son travail, cela peut durer une trentaines de minutes
* Une fois les opérations de nettoyage effectuées... SDFix signale que l'ordinateur doit être redémarré :

>>>The PC Will now restart

* Appuie sur une touche du clavier

* L'ordinateur va redémarrer normalement.
* Avant d'arriver sur le bureau, une nouvelle fenêtre de SDFix va s'ouvrir. Ca peut durer cinq minutes...

>> Le rapport SDFix s'ouvre alors fais un copier coller et envoi le.

[b]SDFix: Version 1.240 [/b]
Run by Administrateur on 07/12/2008 at 18:07

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files [/b]:

Trojan Files Found:

C:\WINDOWS\Config\csrss.exe - Deleted
C:\WINDOWS\system32\Rhost32.exe - Deleted

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-07 18:36:54
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:92,e4,d0,19,67,00,20,32,8b,8d,2f,cf,8b,c6,3d,96,1e,8e,8d,18,9b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,01,64,ee,ca,2f,0c,b4,e4,e9,01,0e,5c,5f,64,3e,fb,47,..
"khjeh"=hex:4f,ed,b3,89,d1,3c,9f,b4,55,a7,53,cb,bf,58,38,4c,cb,9d,c7,54,d6,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:6a,eb,65,b1,14,a0,5b,dc,5d,a4,ba,c0,22,37,3b,15,f7,3e,63,8d,bb,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:92,e4,d0,19,67,00,20,32,8b,8d,2f,cf,8b,c6,3d,96,1e,8e,8d,18,9b,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,01,64,ee,ca,2f,0c,b4,e4,e9,01,0e,5c,5f,64,3e,fb,47,..
"khjeh"=hex:4f,ed,b3,89,d1,3c,9f,b4,55,a7,53,cb,bf,58,38,4c,cb,9d,c7,54,d6,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:6a,eb,65,b1,14,a0,5b,dc,5d,a4,ba,c0,22,37,3b,15,f7,3e,63,8d,bb,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:92,e4,d0,19,67,00,20,32,8b,8d,2f,cf,8b,c6,3d,96,1e,8e,8d,18,9b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,01,64,ee,ca,2f,0c,b4,e4,e9,01,0e,5c,5f,64,3e,fb,47,..
"khjeh"=hex:4f,ed,b3,89,d1,3c,9f,b4,55,a7,53,cb,bf,58,38,4c,cb,9d,c7,54,d6,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:6a,eb,65,b1,14,a0,5b,dc,5d,a4,ba,c0,22,37,3b,15,f7,3e,63,8d,bb,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"="C:\\WINDOWS\\system32\\usmt\\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramŠtres"
"C:\\Program Files\\Microsoft Games\\Age of Mythology\\aomx.exe"="C:\\Program Files\\Microsoft Games\\Age of Mythology\\aomx.exe:*:Enabled:Age of Mythology - The Titans Expansion"
"C:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"="C:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\Xfire\\ua_lsp_inst.exe"="C:\\Program Files\\Xfire\\ua_lsp_inst.exe:*:Enabled:ua_lsp_inst"
"C:\\Program Files\\EA GAMES\\Medal of Honor Batailles du Pacifique(tm)\\mohpa.exe"="C:\\Program Files\\EA GAMES\\Medal of Honor Batailles du Pacifique(tm)\\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault(tm)"
"C:\\Program Files\\EA SPORTS\\UEFA Champions League 2006-2007\\CL07.exe"="C:\\Program Files\\EA SPORTS\\UEFA Champions League 2006-2007\\CL07.exe:*:Enabled:CL07"
"C:\\Program Files\\Vietcong2\\vietcong2.exe"="C:\\Program Files\\Vietcong2\\vietcong2.exe:*:Enabled:vietcong2"
"C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"="C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat:*:Enabled:La Bataille pour la Terre du Milieu T II"
"C:\\Program Files\\Electronic Arts\\L'AvŠnement du Roi-sorcier\\game.dat"="C:\\Program Files\\Electronic Arts\\L'AvŠnement du Roi-sorcier\\game.dat:*:Enabled:LSDA, L'AvŠnement du Roi-sorcierT"
"C:\\Program Files\\EA GAMES\\Need for Speed Underground 2\\SPEED2.EXE"="C:\\Program Files\\EA GAMES\\Need for Speed Underground 2\\SPEED2.EXE:*:Enabled:SPEED2"
"C:\\Program Files\\EA GAMES\\MOHDA\\MOHAA.exe"="C:\\Program Files\\EA GAMES\\MOHDA\\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault(tm)"
"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\javaw.exe"="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\Program Files\\Pyro Studios\\Imperial Glory\\ImperialGlory.exe"="C:\\Program Files\\Pyro Studios\\Imperial Glory\\ImperialGlory.exe:*:Enabled:ImperialGlory"
"C:\\Program Files\\Participatory Culture Foundation\\Miro\\xulrunner\\python\\Miro_Downloader.exe"="C:\\Program Files\\Participatory Culture Foundation\\Miro\\xulrunner\\python\\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Steam\\steamapps\\borntokill62\\counter-strike source\\hl2.exe"="C:\\Program Files\\Steam\\steamapps\\borntokill62\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Steam\\Steam.exe"="C:\\Program Files\\Steam\\Steam.exe:*:Enabled:Steam"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Ex‚cuter une DLL en tant qu'application"
"C:\\Program Files\\Steam\\steamapps\\borntokill62\\day of defeat source\\hl2.exe"="C:\\Program Files\\Steam\\steamapps\\borntokill62\\day of defeat source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\EA SPORTS\\FIFA 08\\FIFA08.exe"="C:\\Program Files\\EA SPORTS\\FIFA 08\\FIFA08.exe:*:Enabled:FIFA08"
"C:\\Sierra\\Empereur\\Emperor.exe"="C:\\Sierra\\Empereur\\Emperor.exe:*:Enabled:Emperor"
"C:\\Program Files\\Codemasters\\Le Seigneur des anneaux Online\\lotroclient.exe"="C:\\Program Files\\Codemasters\\Le Seigneur des anneaux Online\\lotroclient.exe:*:Enabled:lotroclient"
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Enabled:Internet Explorer"
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"="C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"C:\\Program Files\\Ubisoft\\THE SETTLERS - Bƒtisseurs d'Empire\\Play Settlers 6.exe"="C:\\Program Files\\Ubisoft\\THE SETTLERS - Bƒtisseurs d'Empire\\Play Settlers 6.exe:*:Enabled:Jouer THE SETTLERS - Bƒtisseurs d'Empire"
"C:\\Program Files\\Anno 1701\\Anno1701.exe"="C:\\Program Files\\Anno 1701\\Anno1701.exe:*:Enabled:Anno 1701"
"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"="C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\\Program Files\\Xfire\\xfire.exe"="C:\\Program Files\\Xfire\\xfire.exe:*:Enabled:Xfire"
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3.exe"="C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3.exe:*:Enabled:Age of Empires 3"
"C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"="C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe:*:Enabled:GameCenter"
"C:\\Program Files\\Cyanide\\Pro Cycling Manager 2007\\PCM.exe"="C:\\Program Files\\Cyanide\\Pro Cycling Manager 2007\\PCM.exe:*:Enabled:Pro Cycling Manager 2007"
"C:\\Program Files\\Cyanide\\Pro Cycling Manager 2007\\Autorun\\Exe\\Autorun.exe"="C:\\Program Files\\Cyanide\\Pro Cycling Manager 2007\\Autorun\\Exe\\Autorun.exe:*:Enabled:Pro Cycling Manager 2007 - AutoRun"
"C:\\Program Files\\SpeedBit Video Accelerator\\VideoAccelerator.exe"="C:\\Program Files\\SpeedBit Video Accelerator\\VideoAccelerator.exe:*:Enabled:VideoAccelerator"
"C:\\Program Files\\LucasArts\\Star Wars Jedi Knight Jedi Academy\\GameData\\jamp.exe"="C:\\Program Files\\LucasArts\\Star Wars Jedi Knight Jedi Academy\\GameData\\jamp.exe:*:Enabled:Jedi Academy MultiPlayer"
"C:\\WINDOWS\\system32\\Rhost32.exe"="C:\\WINDOWS\\system32\\Rhost32.exe:*:Enabled:Rhost32"
"C:\\Documents and Settings\\Administrateur\\Local Settings\\Temp\\Rar$EX00.719\\FR_1_0_0_to_1_2_0_JeuxVideo.com_12984.exe"="C:\\Documents and Settings\\Administrateur\\Local Settings\\Temp\\Rar$EX00.719\\FR_1_0_0_to_1_2_0_JeuxVideo.com_12984.exe:*:Enabled:TODO: <File description>"
"C:\\Documents and Settings\\Administrateur\\Local Settings\\Temp\\Rar$EX00.187\\FR_1_0_0_to_1_2_0_JeuxVideo.com_12984.exe"="C:\\Documents and Settings\\Administrateur\\Local Settings\\Temp\\Rar$EX00.187\\FR_1_0_0_to_1_2_0_JeuxVideo.com_12984.exe:*:Enabled:TODO: <File description>"
"C:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe"="C:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe:*:Enabled:RelicCOH"
"C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"="C:\\Program Files\\Electronic Arts\\EADM\\Core.exe:*:Enabled:EA Download Manager"
"C:\\Program Files\\EA SPORTS\\FIFA 09\\FIFA09.exe"="C:\\Program Files\\EA SPORTS\\FIFA 09\\FIFA09.exe:*:Enabled:FIFA09"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\Activision\\Call of Duty - World at War Beta\\CoDWaWbeta.exe"="C:\\Program Files\\Activision\\Call of Duty - World at War Beta\\CoDWaWbeta.exe:*:Enabled:Call of Duty(R): World at War Multiplayer"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"="C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"="C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"="C:\\Program Files\\AVG\\AVG8\\avgemc.exe:*:Enabled:avgemc.exe"
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"="C:\\Program Files\\AVG\\AVG8\\avgupd.exe:*:Enabled:avgupd.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[b]Remaining Files [/b]:

File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Tue 24 Oct 2006 40,960 ..SHR --- "C:\Recycled\Recycled\ctfmon.exe"
Wed 3 May 2006 163,328 ..SHR --- "C:\WINDOWS\system32\flvDX.dll"
Wed 21 Feb 2007 31,232 ..SHR --- "C:\WINDOWS\system32\msfDX.dll"
Mon 17 Dec 2007 27,648 ..SH. --- "C:\WINDOWS\system32\Smab0.dll"
Wed 12 Mar 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sun 26 Jun 2005 616,448 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygwin1.dll"
Tue 21 Jun 2005 45,568 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygz.dll"
Thu 13 Mar 2008 13,824 A.SHR --- "C:\Program Files\eRightSoft\SUPER\DXdump.exe"
Mon 14 Apr 2008 72,704 ..SHR --- "C:\Program Files\eRightSoft\SUPER\Setup.exe"
Tue 2 Oct 2007 15,872 A.SHR --- "C:\Program Files\eRightSoft\SUPER\_Setup.dll"
Sun 28 Sep 2008 0 A..H. --- "C:\System Volume Information\_restore{23BA0447-5F2A-42C7-BE60-92D8443FF9F8}\RP135\A0045636.exe"
Sun 28 Sep 2008 0 A..H. --- "C:\System Volume Information\_restore{23BA0447-5F2A-42C7-BE60-92D8443FF9F8}\RP135\A0045637.exe"
Tue 4 Jun 2002 84,992 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll"
Tue 4 Jun 2002 44,032 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll"
Tue 10 Dec 2002 73,766 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll"
Tue 10 Dec 2002 65,575 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll"
Sun 9 Jun 2002 36,864 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll"
Tue 4 Jun 2002 20,480 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll"
Tue 10 Dec 2002 102,437 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll"
Tue 10 Dec 2002 176,165 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll"
Tue 10 Dec 2002 208,935 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll"
Tue 10 Dec 2002 217,127 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll"
Sun 9 Jun 2002 40,448 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll"
Sun 4 Nov 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll"
Tue 10 Apr 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll"
Fri 20 Feb 2004 232,960 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\raac.dll"
Sun 9 Jun 2002 525,824 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnco3260.dll"
Tue 10 Dec 2002 245,805 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnlt3260.dll"
Tue 10 Dec 2002 45,093 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv103260.dll"
Tue 10 Dec 2002 98,341 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv203260.dll"
Tue 10 Dec 2002 94,247 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv303260.dll"
Tue 10 Dec 2002 90,151 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv403260.dll"
Tue 10 Dec 2002 102,439 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll"
Sun 9 Jun 2002 49,152 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\tokr3260.dll"
Thu 20 Mar 2008 5,632 ..SHR --- "C:\Program Files\eRightSoft\SUPER\spk\1stRun.exe"
Thu 30 Oct 2008 1,977 ...HR --- "C:\Documents and Settings\Administrateur\Application Data\SecuROM\UserData\securom_v7_01.bak"
Wed 12 Mar 2008 4,348 ...H. --- "C:\Documents and Settings\Administrateur\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Sun 18 May 2008 20 A..H. --- "C:\Documents and Settings\Administrateur\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Wed 12 Mar 2008 312 A.SH. --- "C:\Documents and Settings\Administrateur\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"

[b]Finished![/b]

Telecharge UsbFix sur ton bureau

--> Lance l installation avec les parametres par default

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

-->choisi l option 1 (nettoyage)

--> Le pc va redémarer

-->Apres redémarrage post le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.