Publicité cid
Bonjour,
apres avoir téléchargé msn plus avec le sponsor je reçois a chaque fois que je suis sur internet des publicités CID et je n'arrive pas à m'en débarrasser. J'ai d'abord désinstaller le sponsor mais comme rien n'avait chang j'ai désinstaller tout msn plus et je l'ai réinstallé cette foiis sans le sponsor; mais les publicités CID sont toujours présentes et elles ralentissent énormémen mon ordinateur. que dois-je faire? merci de votre aide
apres avoir téléchargé msn plus avec le sponsor je reçois a chaque fois que je suis sur internet des publicités CID et je n'arrive pas à m'en débarrasser. J'ai d'abord désinstaller le sponsor mais comme rien n'avait chang j'ai désinstaller tout msn plus et je l'ai réinstallé cette foiis sans le sponsor; mais les publicités CID sont toujours présentes et elles ralentissent énormémen mon ordinateur. que dois-je faire? merci de votre aide
Configuration: Windows XP Internet Explorer 7.0
15 réponses
Résumé de la discussion
Le fil décrit l’apparition persistante de publicités CID après l’installation de MSN Plus avec sponsor, sur Windows XP et Internet Explorer 7, malgré la désinstallation du sponsor et du programme. Les réponses suggèrent des outils de nettoyage et de sécurité, notamment l’exécution de Malwarebytes et une analyse avec HijackThis pour identifier les éléments persistant après désinstallation. D'autres réponses indiquent que le problème peut venir de barres d’outils et de modules publicitaires installés, avec des rapports et des chemins d’exécution à vérifier. En parallèle, des extraits de journaux montrent des éléments suspects et des processus actifs, reflétant l’étendue potentielle des programmes indésirables et les heures d’analyse.
-
Contributeur sécuritésalut Sandy !!
commence par faire ceci stp :
Télécharger et enregistrer sur le Bureau LopSD à cette adresse (c est le numéro 4 en bas de la page) : https://www.androidworld.fr/
= Double-clic Lop S&D
= Faire l'installation
Fermer toutes les applications
= Le lancer par un double-clic sur le raccourci qui est sur le bureau
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
= Taper F pour français , puis presser entrée
= Taper 1
= Presser Entrée
= Le PC va redémarrer
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
= Attendre l'apparition du rapport
Copier le rapport et le coller dans la réponse
le rapport se trouve aussi à C:\lopR -
Salut Sandy,
regardes là ==> http://www.commentcamarche.net/faq/sujet 5996 comment bloquer les fenetres cid
@+ -
Contributeur sécuritéJe m en occupe juxx..
Ce n est pas tout d aller voir comment supprimer les fenetres CID, elle surement d autres infections dans son pc ;-)-
-
Voici le rapport :
--------------------\\ Lop S&D 4.2.4-1 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
"C:\Lop SD" ( MAJ : 06-09-2008|22:02 )
Option : [1] ( 07/09/2008|15:18 )
--------------------\\ Listing des dossiers dans APPLIC~1
[07/09/2007|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/01/2004|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/09/2008|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[16/04/2008|21:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem
[07/03/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy
[15/06/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[07/09/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
[07/05/2008|21:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii
[21/09/2006|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[03/09/2008|22:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[01/01/2004|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[02/02/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[01/01/2004|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[20/09/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[31/08/2008|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Loud spam else tool
[07/09/2008|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[13/05/2008|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2004|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[23/09/2007|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[06/03/2008|19:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\My Games
[25/02/2008|18:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople
[04/10/2007|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[25/11/2007|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NeptunesAdve
[28/07/2008|13:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[04/02/2007|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
[16/01/2006|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[22/11/2007|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Runic
[25/10/2007|21:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[01/01/2004|15:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[09/02/2006|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[24/08/2005|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[27/03/2008|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[31/08/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[14/01/2006|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[13/05/2008|22:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[17/09/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
[25/08/2006|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/03/2008|00:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[26/09/2007|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[01/01/2004|18:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[01/01/2004|15:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/01/2004|18:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2004|15:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2004|19:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[01/01/2004|16:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2004|22:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[14/05/2008|13:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[07/09/2007|21:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[07/03/2008|22:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AlwaysNeat
[01/01/2004|18:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[27/05/2008|22:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVGTOOLBAR
[04/11/2007|17:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Canvas Multi-Media
[06/09/2008|07:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Copie de Else Ball
[12/11/2007|19:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Gaijin Ent
[19/04/2008|10:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Gamelab
[22/09/2006|07:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[03/09/2008|22:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Grisoft
[24/12/2005|12:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[31/08/2008|20:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[12/10/2005|13:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[21/05/2008|16:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\iWin
[21/11/2007|19:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Jane s Hotel
[18/05/2005|15:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[26/08/2008|21:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LimeWire
[22/07/2007|00:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[18/09/2007|21:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Magic Academy
[26/06/2008|20:06] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[14/12/2004|20:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
[12/12/2004|16:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[17/06/2007|23:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[22/10/2007|21:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\My Games
[15/03/2008|19:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Pirateville
[28/07/2008|13:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PlayFirst
[05/07/2008|16:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
[01/01/2004|19:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[26/06/2008|20:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Samsung
[20/10/2007|16:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sandlot Games
[10/03/2007|21:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
[18/05/2005|15:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[07/07/2008|19:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SprillBermudeEng
[01/01/2004|16:07] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[01/01/2004|22:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[05/04/2008|16:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TheScruffs
[22/11/2007|22:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
[23/07/2006|14:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\VoipBuster
[26/05/2008|17:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
[07/07/2008|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Wildfire
[24/06/2008|18:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\YTHE
[31/08/2008|20:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Zylom
[27/05/2008|23:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/05/2008|23:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[07/09/2008 15:00][--ah-----] C:\WINDOWS\tasks\A6FCCB8591437C2D.job
[04/09/2008 19:57][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[18/02/2006 18:42][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[05/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
[07/09/2008 11:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
( A6FCCB8591437C2D.job )=( c:\docume~1\hp_pro~1\applic~1\elseba~1\loadcreativefirst.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[01/11/2005|19:25] C:\Program Files\AC3Filter
[07/09/2007|21:45] C:\Program Files\Adobe
[02/11/2005|20:52] C:\Program Files\Ahead
[18/12/2006|21:10] C:\Program Files\Alwil Software
[01/12/2004|15:58] C:\Program Files\ATI Technologies
[14/01/2006|18:53] C:\Program Files\avast antivirus
[27/05/2008|23:19] C:\Program Files\AVG
[01/11/2005|19:38] C:\Program Files\AviSynth 2.5
[23/06/2007|02:16] C:\Program Files\AVIXDVD
[25/12/2005|21:03] C:\Program Files\BlackBeanGames
[19/05/2008|06:45] C:\Program Files\CCleaner
[01/01/2004|15:03] C:\Program Files\ComPlus Applications
[01/11/2005|19:23] C:\Program Files\Custom Technology
[03/11/2005|15:36] C:\Program Files\DVD Decrypter
[30/09/2007|18:19] C:\Program Files\Easy Internet signup
[31/08/2008|14:39] C:\Program Files\Else Ball
[19/05/2008|22:09] C:\Program Files\eMule
[01/11/2005|19:27] C:\Program Files\ffdshow
[05/07/2008|16:49] C:\Program Files\Fichiers communs
[01/11/2005|12:59] C:\Program Files\Gabest
[13/05/2008|21:27] C:\Program Files\GamesBar
[04/09/2008|19:08] C:\Program Files\Google
[03/09/2008|22:40] C:\Program Files\Grisoft
[01/01/2004|18:57] C:\Program Files\Help and Support Additions
[01/01/2004|16:51] C:\Program Files\Hewlett-Packard
[01/01/2004|18:25] C:\Program Files\HP
[18/06/2008|20:13] C:\Program Files\Icone
[21/01/2006|18:48] C:\Program Files\IncrediMail
[03/09/2008|12:09] C:\Program Files\InstallShield Installation Information
[24/08/2008|03:02] C:\Program Files\Internet Explorer
[01/12/2004|16:01] C:\Program Files\InterVideo
[24/12/2005|12:25] C:\Program Files\Inventel
[08/05/2006|12:24] C:\Program Files\IrfanView
[24/08/2008|00:12] C:\Program Files\Java
[03/03/2008|21:05] C:\Program Files\KaraFun
[18/06/2008|20:13] C:\Program Files\LETMIN
[19/05/2008|21:14] C:\Program Files\LimeWire
[24/08/2008|03:06] C:\Program Files\Messenger
[06/09/2008|23:18] C:\Program Files\Messenger Plus! Live
[20/12/2004|16:53] C:\Program Files\Microsoft AutoRoute
[10/03/2008|04:00] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/12/2004|16:24] C:\Program Files\Microsoft Encarta
[01/01/2004|15:06] C:\Program Files\microsoft frontpage
[14/12/2004|20:27] C:\Program Files\Microsoft Office
[10/10/2007|13:21] C:\Program Files\Microsoft Picture It! 9
[02/07/2006|23:39] C:\Program Files\Microsoft Visual Studio
[15/12/2007|14:48] C:\Program Files\Microsoft Works
[01/12/2004|16:08] C:\Program Files\Microsoft Works Suite 2004
[01/01/2004|15:04] C:\Program Files\Movie Maker
[17/06/2007|23:30] C:\Program Files\MSN
[01/01/2004|15:03] C:\Program Files\MSN Gaming Zone
[16/11/2006|04:02] C:\Program Files\MSXML 4.0
[01/10/2004|00:49] C:\Program Files\NetMeeting
[04/09/2008|19:41] C:\Program Files\Norton Security Scan
[01/01/2004|15:03] C:\Program Files\Online Services
[13/05/2008|21:25] C:\Program Files\orange
[23/06/2007|14:01] C:\Program Files\Outlook Express
[17/06/2007|23:34] C:\Program Files\PC-Doctor for Windows
[28/10/2007|15:33] C:\Program Files\Picasa2
[04/09/2008|19:13] C:\Program Files\QuickTime
[05/07/2008|16:48] C:\Program Files\Real
[26/06/2008|19:55] C:\Program Files\Samsung
[17/12/2005|13:46] C:\Program Files\SCi Games
[27/08/2005|15:20] C:\Program Files\SCOL
[01/01/2004|19:06] C:\Program Files\Services en ligne
[02/01/2004|07:00] C:\Program Files\SiS VGA Utilities V3.59e
[01/01/2004|18:34] C:\Program Files\Sonic
[01/01/2004|18:34] C:\Program Files\Sonic RecordNow!
[24/08/2005|18:23] C:\Program Files\Sony
[24/08/2008|00:13] C:\Program Files\Sun
[01/01/2004|15:09] C:\Program Files\Uninstall Information
[22/11/2007|22:49] C:\Program Files\VideoLAN
[08/02/2006|20:08] C:\Program Files\Vimicro
[17/06/2007|22:41] C:\Program Files\VoipBuster.com
[23/06/2007|14:01] C:\Program Files\Wanadoo
[21/07/2008|01:56] C:\Program Files\Winamp
[09/03/2008|00:43] C:\Program Files\Windows Live
[29/01/2008|20:26] C:\Program Files\Windows Media Connect 2
[29/01/2008|20:26] C:\Program Files\Windows Media Player
[01/10/2004|00:49] C:\Program Files\Windows NT
[01/01/2004|15:04] C:\Program Files\WindowsUpdate
[08/06/2006|14:23] C:\Program Files\WinRAR
[28/12/2006|11:57] C:\Program Files\Woody Woodpecker
[01/01/2004|15:06] C:\Program Files\xerox
[01/11/2005|12:41] C:\Program Files\XviD
[04/09/2008|19:16] C:\Program Files\Yahoo!
[04/09/2008|19:18] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[11/12/2004|16:57] C:\Program Files\Fichiers communs\Adobe
[02/11/2005|20:52] C:\Program Files\Fichiers communs\Ahead
[10/06/2005|19:22] C:\Program Files\Fichiers communs\AOL
[03/09/2005|14:01] C:\Program Files\Fichiers communs\Borland Shared
[14/12/2004|20:28] C:\Program Files\Fichiers communs\Designer
[17/12/2005|13:53] C:\Program Files\Fichiers communs\DirectX
[01/01/2004|16:41] C:\Program Files\Fichiers communs\Hewlett-Packard
[01/01/2004|16:42] C:\Program Files\Fichiers communs\HP
[02/01/2004|06:59] C:\Program Files\Fichiers communs\InstallShield
[01/01/2004|16:07] C:\Program Files\Fichiers communs\Java
[27/05/2008|22:23] C:\Program Files\Fichiers communs\Microsoft Shared
[01/01/2004|15:04] C:\Program Files\Fichiers communs\MSSoap
[13/05/2008|21:25] C:\Program Files\Fichiers communs\Oberon Media
[01/01/2004|15:59] C:\Program Files\Fichiers communs\ODBC
[05/07/2008|16:49] C:\Program Files\Fichiers communs\Real
[28/05/2008|09:15] C:\Program Files\Fichiers communs\Sandlot Shared
[01/10/2004|00:49] C:\Program Files\Fichiers communs\Services
[14/01/2006|19:13] C:\Program Files\Fichiers communs\Softwin
[10/03/2007|21:37] C:\Program Files\Fichiers communs\Sony Shared
[01/01/2004|15:59] C:\Program Files\Fichiers communs\SpeechEngines
[01/01/2004|18:34] C:\Program Files\Fichiers communs\SureThing Shared
[04/09/2008|08:11] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|00:18] C:\Program Files\Fichiers communs\System
[09/03/2008|00:44] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[05/07/2008|16:49] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 48 Processes )
IEXPLORE.EXE ~ [PID:2072]
iexplore.exe ~ [PID:2816]
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Loud spam else tool
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Loud spam else tool\Bias way.exe
C:\Program Files\elseba~1
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_a4e4.tmp
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsd6A3.tmp
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsu69E.tmp
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsy9B8.tmp
C:\WINDOWS\Tasks\A6FCCB8591437C2D.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Locks ace"="C:\\DOCUME~1\\HP_PRO~1\\APPLIC~1\\ELSEBA~1\\Grey Itch.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"else tool title ping"="C:\\Documents and Settings\\All Users\\Application Data\\Loud spam else tool\\Bias way.exe"
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-07 15:22:03
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1838
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:7025][D:261]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:126][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:4763][D:12]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 07/09/2008|15:30 - Option : [1]
--------------------\\ Fin du rapport a 15:30:42
-
-
Contributeur sécuritéok maintenant :
---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
ensuite :
Fais un rapport hijackthis pour que je puisses vérifier les infections de ton pc stp
Télécharge hijackthis à cette adresse, tout est expliqué pour bien l installer et pour savoir s'en servir :
https://www.androidworld.fr/
Comment copier/coller le rapport :
Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".
ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.
Une explication des raccourcis clavier sont illustrés à cette adresse :
https://www.androidworld.fr/-
--------------------\\ Lop S&D 4.2.4-1 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
"C:\Lop SD" ( MAJ : 06-09-2008|22:02 )
Option : [2] ( 07/09/2008|15:39 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Loud spam else tool\Bias way.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_a4e4.tmp
Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsd6A3.tmp
Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsu69E.tmp
Supprime! - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsy9B8.tmp
Supprime! - C:\WINDOWS\Tasks\A6FCCB8591437C2D.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Loud spam else tool
Supprime! - C:\Program Files\elseba~1
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[07/09/2007|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/01/2004|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[03/09/2008|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[16/04/2008|21:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem
[07/03/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy
[15/06/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse
[07/09/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
[07/05/2008|21:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii
[21/09/2006|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[03/09/2008|22:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[01/01/2004|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[02/02/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[01/01/2004|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[20/09/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[07/09/2008|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[13/05/2008|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2004|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[23/09/2007|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[06/03/2008|19:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\My Games
[25/02/2008|18:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople
[04/10/2007|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[25/11/2007|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NeptunesAdve
[28/07/2008|13:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[04/02/2007|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism
[16/01/2006|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[22/11/2007|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Runic
[25/10/2007|21:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[01/01/2004|15:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[09/02/2006|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[24/08/2005|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[27/03/2008|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[31/08/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[14/01/2006|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[13/05/2008|22:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[17/09/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
[25/08/2006|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/03/2008|00:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[26/09/2007|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[01/01/2004|18:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[01/01/2004|15:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/01/2004|18:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2004|15:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2004|19:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[01/01/2004|16:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2004|22:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[14/05/2008|13:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[07/09/2007|21:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[07/03/2008|22:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AlwaysNeat
[01/01/2004|18:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[27/05/2008|22:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVGTOOLBAR
[04/11/2007|17:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Canvas Multi-Media
[06/09/2008|07:40] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Copie de Else Ball
[12/11/2007|19:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Gaijin Ent
[19/04/2008|10:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Gamelab
[22/09/2006|07:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[03/09/2008|22:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Grisoft
[24/12/2005|12:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[31/08/2008|20:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[12/10/2005|13:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Intervideo
[21/05/2008|16:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\iWin
[21/11/2007|19:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Jane s Hotel
[18/05/2005|15:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[26/08/2008|21:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LimeWire
[22/07/2007|00:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[18/09/2007|21:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Magic Academy
[26/06/2008|20:06] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[14/12/2004|20:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft Web Folders
[12/12/2004|16:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[17/06/2007|23:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[22/10/2007|21:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\My Games
[15/03/2008|19:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Pirateville
[28/07/2008|13:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PlayFirst
[05/07/2008|16:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
[01/01/2004|19:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[26/06/2008|20:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Samsung
[20/10/2007|16:35] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sandlot Games
[10/03/2007|21:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Skype
[18/05/2005|15:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[07/07/2008|19:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SprillBermudeEng
[01/01/2004|16:07] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[01/01/2004|22:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[05/04/2008|16:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TheScruffs
[22/11/2007|22:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc
[23/07/2006|14:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\VoipBuster
[26/05/2008|17:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Vso
[07/07/2008|15:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Wildfire
[24/06/2008|18:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\YTHE
[31/08/2008|20:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Zylom
[27/05/2008|23:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[27/05/2008|23:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[04/09/2008 19:57][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[18/02/2006 18:42][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[05/08/2004 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
[07/09/2008 11:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
--------------------\\ Listing des dossiers dans C:\Program Files
[01/11/2005|19:25] C:\Program Files\AC3Filter
[07/09/2007|21:45] C:\Program Files\Adobe
[02/11/2005|20:52] C:\Program Files\Ahead
[18/12/2006|21:10] C:\Program Files\Alwil Software
[01/12/2004|15:58] C:\Program Files\ATI Technologies
[14/01/2006|18:53] C:\Program Files\avast antivirus
[27/05/2008|23:19] C:\Program Files\AVG
[01/11/2005|19:38] C:\Program Files\AviSynth 2.5
[23/06/2007|02:16] C:\Program Files\AVIXDVD
[25/12/2005|21:03] C:\Program Files\BlackBeanGames
[19/05/2008|06:45] C:\Program Files\CCleaner
[01/01/2004|15:03] C:\Program Files\ComPlus Applications
[01/11/2005|19:23] C:\Program Files\Custom Technology
[03/11/2005|15:36] C:\Program Files\DVD Decrypter
[30/09/2007|18:19] C:\Program Files\Easy Internet signup
[19/05/2008|22:09] C:\Program Files\eMule
[01/11/2005|19:27] C:\Program Files\ffdshow
[05/07/2008|16:49] C:\Program Files\Fichiers communs
[01/11/2005|12:59] C:\Program Files\Gabest
[13/05/2008|21:27] C:\Program Files\GamesBar
[04/09/2008|19:08] C:\Program Files\Google
[03/09/2008|22:40] C:\Program Files\Grisoft
[01/01/2004|18:57] C:\Program Files\Help and Support Additions
[01/01/2004|16:51] C:\Program Files\Hewlett-Packard
[01/01/2004|18:25] C:\Program Files\HP
[18/06/2008|20:13] C:\Program Files\Icone
[21/01/2006|18:48] C:\Program Files\IncrediMail
[03/09/2008|12:09] C:\Program Files\InstallShield Installation Information
[24/08/2008|03:02] C:\Program Files\Internet Explorer
[01/12/2004|16:01] C:\Program Files\InterVideo
[24/12/2005|12:25] C:\Program Files\Inventel
[08/05/2006|12:24] C:\Program Files\IrfanView
[24/08/2008|00:12] C:\Program Files\Java
[03/03/2008|21:05] C:\Program Files\KaraFun
[18/06/2008|20:13] C:\Program Files\LETMIN
[19/05/2008|21:14] C:\Program Files\LimeWire
[24/08/2008|03:06] C:\Program Files\Messenger
[06/09/2008|23:18] C:\Program Files\Messenger Plus! Live
[20/12/2004|16:53] C:\Program Files\Microsoft AutoRoute
[10/03/2008|04:00] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/12/2004|16:24] C:\Program Files\Microsoft Encarta
[01/01/2004|15:06] C:\Program Files\microsoft frontpage
[14/12/2004|20:27] C:\Program Files\Microsoft Office
[10/10/2007|13:21] C:\Program Files\Microsoft Picture It! 9
[02/07/2006|23:39] C:\Program Files\Microsoft Visual Studio
[15/12/2007|14:48] C:\Program Files\Microsoft Works
[01/12/2004|16:08] C:\Program Files\Microsoft Works Suite 2004
[01/01/2004|15:04] C:\Program Files\Movie Maker
[17/06/2007|23:30] C:\Program Files\MSN
[01/01/2004|15:03] C:\Program Files\MSN Gaming Zone
[16/11/2006|04:02] C:\Program Files\MSXML 4.0
[01/10/2004|00:49] C:\Program Files\NetMeeting
[04/09/2008|19:41] C:\Program Files\Norton Security Scan
[01/01/2004|15:03] C:\Program Files\Online Services
[13/05/2008|21:25] C:\Program Files\orange
[23/06/2007|14:01] C:\Program Files\Outlook Express
[17/06/2007|23:34] C:\Program Files\PC-Doctor for Windows
[28/10/2007|15:33] C:\Program Files\Picasa2
[04/09/2008|19:13] C:\Program Files\QuickTime
[05/07/2008|16:48] C:\Program Files\Real
[26/06/2008|19:55] C:\Program Files\Samsung
[17/12/2005|13:46] C:\Program Files\SCi Games
[27/08/2005|15:20] C:\Program Files\SCOL
[01/01/2004|19:06] C:\Program Files\Services en ligne
[02/01/2004|07:00] C:\Program Files\SiS VGA Utilities V3.59e
[01/01/2004|18:34] C:\Program Files\Sonic
[01/01/2004|18:34] C:\Program Files\Sonic RecordNow!
[24/08/2005|18:23] C:\Program Files\Sony
[24/08/2008|00:13] C:\Program Files\Sun
[01/01/2004|15:09] C:\Program Files\Uninstall Information
[22/11/2007|22:49] C:\Program Files\VideoLAN
[08/02/2006|20:08] C:\Program Files\Vimicro
[17/06/2007|22:41] C:\Program Files\VoipBuster.com
[23/06/2007|14:01] C:\Program Files\Wanadoo
[21/07/2008|01:56] C:\Program Files\Winamp
[09/03/2008|00:43] C:\Program Files\Windows Live
[29/01/2008|20:26] C:\Program Files\Windows Media Connect 2
[29/01/2008|20:26] C:\Program Files\Windows Media Player
[01/10/2004|00:49] C:\Program Files\Windows NT
[01/01/2004|15:04] C:\Program Files\WindowsUpdate
[08/06/2006|14:23] C:\Program Files\WinRAR
[28/12/2006|11:57] C:\Program Files\Woody Woodpecker
[01/01/2004|15:06] C:\Program Files\xerox
[01/11/2005|12:41] C:\Program Files\XviD
[04/09/2008|19:16] C:\Program Files\Yahoo!
[04/09/2008|19:18] C:\Program Files\Zylom Games
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[11/12/2004|16:57] C:\Program Files\Fichiers communs\Adobe
[02/11/2005|20:52] C:\Program Files\Fichiers communs\Ahead
[10/06/2005|19:22] C:\Program Files\Fichiers communs\AOL
[03/09/2005|14:01] C:\Program Files\Fichiers communs\Borland Shared
[14/12/2004|20:28] C:\Program Files\Fichiers communs\Designer
[17/12/2005|13:53] C:\Program Files\Fichiers communs\DirectX
[01/01/2004|16:41] C:\Program Files\Fichiers communs\Hewlett-Packard
[01/01/2004|16:42] C:\Program Files\Fichiers communs\HP
[02/01/2004|06:59] C:\Program Files\Fichiers communs\InstallShield
[01/01/2004|16:07] C:\Program Files\Fichiers communs\Java
[27/05/2008|22:23] C:\Program Files\Fichiers communs\Microsoft Shared
[01/01/2004|15:04] C:\Program Files\Fichiers communs\MSSoap
[13/05/2008|21:25] C:\Program Files\Fichiers communs\Oberon Media
[01/01/2004|15:59] C:\Program Files\Fichiers communs\ODBC
[05/07/2008|16:49] C:\Program Files\Fichiers communs\Real
[28/05/2008|09:15] C:\Program Files\Fichiers communs\Sandlot Shared
[01/10/2004|00:49] C:\Program Files\Fichiers communs\Services
[14/01/2006|19:13] C:\Program Files\Fichiers communs\Softwin
[10/03/2007|21:37] C:\Program Files\Fichiers communs\Sony Shared
[01/01/2004|15:59] C:\Program Files\Fichiers communs\SpeechEngines
[01/01/2004|18:34] C:\Program Files\Fichiers communs\SureThing Shared
[04/09/2008|08:11] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|00:18] C:\Program Files\Fichiers communs\System
[09/03/2008|00:44] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[05/07/2008|16:49] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 44 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-07 15:42:09
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1838
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:7021][D:258]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:126][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:4828][D:12]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 07/09/2008|15:30 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 07/09/2008|15:49 - Option : [2]
--------------------\\ Fin du rapport a 15:49:41 -
--------------------\\ Lop S&D 4.2.4-2 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2330 @ 1.60GHz )
BIOS : Ver 1.00PARTTBL
USER : yusuf ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080909-0] 4.8.1229 (Activated)
"C:\Lop SD" ( MAJ : 08-09-2008|21:40 )
Option : [1] ( 10/09/2008|21:25 )
[ UAC => 1 ]
--------------------\\ Listing des dossiers dans Local
[16/06/2008|16:31] C:\Users\yusuf\AppData\Local\Adobe
[11/02/2008|19:24] C:\Users\yusuf\AppData\Local\Application Data
[11/02/2008|19:29] C:\Users\yusuf\AppData\Local\ATI
[27/06/2008|13:47] C:\Users\yusuf\AppData\Local\Clavier+
[15/08/2008|14:22] C:\Users\yusuf\AppData\Local\Codemasters
[03/09/2008|12:54] C:\Users\yusuf\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[06/07/2008|11:41] C:\Users\yusuf\AppData\Local\eMule
[10/04/2008|22:50] C:\Users\yusuf\AppData\Local\gctmp
[21/08/2008|13:28] C:\Users\yusuf\AppData\Local\GDIPFONTCACHEV1.DAT
[15/06/2008|22:14] C:\Users\yusuf\AppData\Local\Google
[11/02/2008|19:24] C:\Users\yusuf\AppData\Local\Historique
[10/09/2008|16:31] C:\Users\yusuf\AppData\Local\IconCache.db
[14/06/2008|00:37] C:\Users\yusuf\AppData\Local\Microsoft
[25/07/2008|19:48] C:\Users\yusuf\AppData\Local\Microsoft Games
[12/02/2008|12:34] C:\Users\yusuf\AppData\Local\Steam
[10/09/2008|21:15] C:\Users\yusuf\AppData\Local\Temp
[11/02/2008|19:24] C:\Users\yusuf\AppData\Local\Temporary Internet Files
[16/03/2008|00:28] C:\Users\yusuf\AppData\Local\TomTom
[11/02/2008|19:30] C:\Users\yusuf\AppData\Local\Toshiba
[22/06/2008|09:33] C:\Users\yusuf\AppData\Local\VirtualStore
[03/05/2008|19:48] C:\Users\yusuf\AppData\Local\Wyzo
[10/04/2008|22:48] C:\Users\yusuf\AppData\Local\Xenocode
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[10/09/2008 16:34][--ah-----] C:\Windows\tasks\SA.DAT
[10/09/2008 16:32][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[16/06/2008|13:24] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[11/02/2008|19:18] C:\ProgramData\Atheros
[11/02/2008|19:29] C:\ProgramData\ATI
[11/02/2008|19:20] C:\ProgramData\Bureau
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[06/07/2008|11:45] C:\ProgramData\eMule
[11/02/2008|19:20] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[04/09/2008|19:22] C:\ProgramData\Flagstore
[16/06/2008|14:40] C:\ProgramData\Google
[02/09/2008|21:43] C:\ProgramData\Iso Web Bags Else
[11/02/2008|19:20] C:\ProgramData\Menu D‚marrer
[08/09/2008|19:30] C:\ProgramData\Messenger Plus!
[26/02/2008|11:19] C:\ProgramData\Microsoft
[11/02/2008|19:20] C:\ProgramData\ModŠles
[02/09/2008|21:43] C:\ProgramData\Name Body Meet.pdprbi
[02/11/2006|15:02] C:\ProgramData\Start Menu
[20/06/2008|22:30] C:\ProgramData\Symantec
[02/11/2006|15:02] C:\ProgramData\Templates
[09/03/2008|00:46] C:\ProgramData\TomTom
[11/02/2008|19:28] C:\ProgramData\Toshiba
[11/02/2008|19:24] C:\ProgramData\ToshibaEurope
[10/07/2007|16:49] C:\ProgramData\Ulead Systems
[02/09/2008|21:43] C:\ProgramData\viewoneone.hannqv4
[02/09/2008|21:43] C:\ProgramData\viewoneone.xktaknu
[10/07/2007|16:36] C:\ProgramData\Vista64
[12/02/2008|17:46] C:\ProgramData\WLInstaller
[10/07/2007|16:36] C:\ProgramData\XP
--------------------\\ Listing des dossiers dans C:\Program Files
[25/06/2008|19:11] C:\Program Files\Adobe
[16/06/2008|13:21] C:\Program Files\Adobe Media Player
[04/06/2008|23:31] C:\Program Files\Alwil Software
[11/02/2008|19:18] C:\Program Files\Atheros
[11/02/2008|19:10] C:\Program Files\ATI
[11/02/2008|19:12] C:\Program Files\ATI Technologies
[11/02/2008|19:13] C:\Program Files\Camera Assistant Software for Toshiba
[06/09/2008|19:35] C:\Program Files\Cheat Engine
[08/09/2008|18:52] C:\Program Files\Circle Developement
[01/07/2008|22:42] C:\Program Files\Common Files
[14/07/2008|21:32] C:\Program Files\DivX
[07/09/2008|11:23] C:\Program Files\Dofus
[06/07/2008|11:41] C:\Program Files\eMule
[11/02/2008|19:20] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/04/2008|14:12] C:\Program Files\FlashGet
[09/03/2008|00:39] C:\Program Files\Free.fr
[17/06/2008|20:36] C:\Program Files\Google
[18/04/2007|09:08] C:\Program Files\IDM
[15/08/2008|14:18] C:\Program Files\InstallShield Installation Information
[11/02/2008|19:26] C:\Program Files\Intel
[03/08/2008|11:57] C:\Program Files\Internet Explorer
[10/07/2007|16:49] C:\Program Files\InterVideo
[26/02/2008|11:15] C:\Program Files\Inventel
[21/04/2008|09:46] C:\Program Files\Java
[11/07/2008|21:05] C:\Program Files\LG Electronics
[11/07/2008|21:03] C:\Program Files\LG PC Suite 2
[04/06/2008|13:05] C:\Program Files\LimeWire
[15/10/2007|19:48] C:\Program Files\ltmoh
[08/09/2008|18:52] C:\Program Files\Messenger Plus! Live
[07/09/2008|11:45] C:\Program Files\Metin2_France
[20/07/2008|11:09] C:\Program Files\Microsoft Games
[03/08/2008|11:57] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[18/04/2007|08:14] C:\Program Files\My Company Name
[18/04/2008|21:50] C:\Program Files\OpenOffice.org 2.4
[25/04/2008|19:09] C:\Program Files\PhotoFiltre
[15/10/2007|19:40] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[05/07/2008|16:30] C:\Program Files\Save Flash
[07/09/2008|11:39] C:\Program Files\Speed Gear
[11/02/2008|19:17] C:\Program Files\Synaptics
[28/05/2008|19:00] C:\Program Files\Teamspeak2_RC2
[01/03/2008|19:54] C:\Program Files\TLC-Edusoft
[12/07/2008|22:18] C:\Program Files\Tomato
[16/03/2008|00:11] C:\Program Files\TomTom DesktopSuite
[21/06/2008|00:21] C:\Program Files\TomTom HOME
[11/06/2008|00:15] C:\Program Files\TomTom HOME 2
[11/02/2008|21:36] C:\Program Files\TOSHIBA
[10/07/2007|16:46] C:\Program Files\Ulead Systems
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[20/07/2008|15:35] C:\Program Files\Visicom Media
[03/08/2008|11:57] C:\Program Files\Windows Calendar
[03/08/2008|11:57] C:\Program Files\Windows Collaboration
[03/08/2008|11:57] C:\Program Files\Windows Defender
[03/08/2008|11:57] C:\Program Files\Windows Journal
[12/02/2008|17:49] C:\Program Files\Windows Live
[26/02/2008|14:56] C:\Program Files\Windows Live Safety Center
[26/08/2008|03:09] C:\Program Files\Windows Mail
[18/04/2007|08:46] C:\Program Files\Windows Media Components
[03/08/2008|11:57] C:\Program Files\Windows Media Player
[11/02/2008|19:20] C:\Program Files\Windows NT
[03/08/2008|11:57] C:\Program Files\Windows Photo Gallery
[03/08/2008|11:57] C:\Program Files\Windows Sidebar
[28/03/2008|21:50] C:\Program Files\WinRAR
[04/09/2008|19:07] C:\Program Files\Woonoz
--------------------\\ Listing des dossiers dans C:\Program Files\Common Files
[16/06/2008|13:23] C:\Program Files\Common Files\Adobe
[16/06/2008|13:20] C:\Program Files\Common Files\Adobe AIR
[17/07/2008|17:59] C:\Program Files\Common Files\Blizzard Entertainment
[18/04/2007|08:47] C:\Program Files\Common Files\InstallShield
[18/04/2007|07:44] C:\Program Files\Common Files\Java
[11/02/2008|22:09] C:\Program Files\Common Files\microsoft shared
[03/07/2008|10:06] C:\Program Files\Common Files\PX Storage Engine
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[06/09/2008|13:06] C:\Program Files\Common Files\Steam
[20/06/2008|21:28] C:\Program Files\Common Files\Symantec Shared
[03/08/2008|11:57] C:\Program Files\Common Files\System
[11/02/2008|19:28] C:\Program Files\Common Files\Toshiba Shared
[10/07/2007|16:49] C:\Program Files\Common Files\Ulead Systems
[11/02/2008|22:07] C:\Program Files\Common Files\WindowsLiveInstaller
--------------------\\ Process
( 82 Processes )
iexplore.exe ~ [PID:968]
iexplore.exe ~ [PID:3392]
IEXPLORE.EXE ~ [PID:5004]
IEXPLORE.EXE ~ [PID:4168]
--------------------\\ Recherche avec S_Lop
C:\ProgramData\Name Body Meet.pdprbi
C:\ProgramData\viewoneone.hannqv4
C:\ProgramData\viewoneone.xktaknu
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\ProgramData\Iso Web Bags Else
C:\ProgramData\Iso Web Bags Else\CASH PROXY.exe
C:\Users\yusuf\AppData\Local\Temp\nsbADEB.tmp
C:\Users\yusuf\AppData\Local\Temp\nsbF151.tmp
C:\Users\yusuf\AppData\Local\Temp\nsfB74B.tmp
C:\Users\yusuf\AppData\Local\Temp\nsgF120.tmp
C:\Users\yusuf\AppData\Local\Temp\nsgF172.tmp
C:\Users\yusuf\AppData\Local\Temp\nsgF173.tmp
C:\Users\yusuf\AppData\Local\Temp\nslF140.tmp
C:\Users\yusuf\AppData\Local\Temp\nslF2CB.tmp
C:\Users\yusuf\AppData\Local\Temp\nsqD9BF.tmp
C:\Users\yusuf\AppData\Local\Temp\nsrF162.tmp
C:\Users\yusuf\AppData\Local\Temp\nsu1234.tmp
C:\Users\yusuf\AppData\Local\Temp\nsy2AC8.tmp
C:\Users\yusuf\AppData\Local\Temp\nszCF1D.tmp
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\Users\yusuf\AppData\Roaming\MICROS~1\Windows\Cookies\yusuf@www.adserver5[1].txt
C:\Users\yusuf\AppData\Roaming\MICROS~1\Windows\Cookies\yusuf@advertising[2].txt
C:\Users\yusuf\AppData\Roaming\MICROS~1\Windows\Cookies\yusuf@adopt.euroclick[1].txt
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bags Else Hole Lite"="\"C:\\ProgramData\\Name Body Meet.pdprbi\""
"Heckfour"="\"C:\\ProgramData\\viewoneone.xktaknu\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-10 21:26:08
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 419
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\Users\yusuf\AppData\Local\Temp\Temp1_Super Codes Prizee Pack+ Prizpass Crack+Generateur codes allopass.zip
C:\Users\yusuf\AppData\Local\Temp\Temp1_Super Codes Prizee Pack+ Prizpass Crack+Generateur codes allopass.zip\Hack Eurobarre V2.uzy
C:\Users\yusuf\AppData\Local\Temp\Temp1_Super Codes Prizee Pack+ Prizpass Crack+Generateur codes allopass.zip\prizeesoft.uzy
C:\Users\yusuf\AppData\Local\Temp\Temp1_Super Codes Prizee Pack+ Prizpass Crack+Generateur codes allopass.zip\un petit plus
C:\Users\yusuf\AppData\Roaming\LimeWire\.AppSpecialShare\Steam hack KeyGen and hack for Steam.torrent.bak
[F:3365][D:206]-> C:\Users\yusuf\AppData\Local\Temp
[F:1727][D:1]-> C:\Users\yusuf\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1017][D:6]-> C:\Users\yusuf\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:5331][D:716]-> C:\$Recycle.Bin
1 - "C:\Lop SD\LopR_1.txt" - 10/09/2008|21:30 - Option : [1]
--------------------\\ Fin du rapport a 21:30:05
[ UAC => 1 ]
-
-
Contributeur sécuritéok maintenant fais un rapport hijackthis stp
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:55:54, on 07/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4\plugin\bin\pchbutton.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game11.zylom.com/activex/zylomgamesplayer.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
-
-
Contributeur sécuritéok...tu as encore quelques infections...
Télécharge Toolbar-S&D (Team IDN) sur ton Bureau à cette adresse :
(c est le numéro 6 en bas de la page) : https://www.androidworld.fr/
* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt) -
-----------\\ ToolBar S&D 1.1.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
"C:\ToolBar SD" ( MAJ : 07-09-2008|12:20 )
Option : [1] ( 07/09/2008|16:01 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-05-17-08-52-37
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-05-17-08-52-37.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-12-14-02-06
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-12-14-02-06.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-17-21-54-19
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-17-21-54-19.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-35-02
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-35-02.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-36-00
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-36-00.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-11-22-05-43
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-11-22-05-43.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-18-13-02-59
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-18-13-02-59.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-25-20-24-47
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-25-20-24-47.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-28-02-16-53
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-28-02-16-53.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-35-48
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-35-48.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-40-22
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-40-22.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-03-11-54-14
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-03-11-54-14.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\around_the_world_in_80_days16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\big_city_adventure_sydney16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\chocolatier216x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\death_nile16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\dream_day_first_home16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy_216x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jewel_match_216x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\kids.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\MagiciansHandbook16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\magic_farm16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\MahjongChina16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\newGames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\notFound.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\ranch_rush16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\riseAtlantis16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\saqqarah16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\the_great_chocolate_chase16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\trial.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\virtual_farm16x16.gif
C:\Program Files\GamesBar
C:\Program Files\GamesBar\Localization-French.ini
C:\Program Files\GamesBar\oberontb.dll
C:\Program Files\GamesBar\OBGet.exe
C:\Program Files\GamesBar\uninst.exe
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\GamesBar
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF"
"Default_Search_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page"="https://www.orange.fr/portail"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Search Bar"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 07/09/2008|16:06 - Option : [1]
-----------\\ Fin du rapport a 16:06:41,84 -
Contributeur sécuritéok maintenant :
Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.
NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.
ensuite :
Télécharger sur le bureau malwarebytes à cette adresse :
https://www.androidworld.fr/
Voici un tuto pour bien l installer et bien l utiliser :
https://www.androidworld.fr/
aide toi bien du tuto pour supprimer correctement ce qu il aura trouvé
Après l analyse, redémarrer le pc et poste le rapport !!
Et refais un nouveau rapport hijackthis stp-
-----------\\ ToolBar S&D 1.1.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 3000+ )
BIOS : Rev. 3.11
USER : HP_Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
"C:\ToolBar SD" ( MAJ : 07-09-2008|12:20 )
Option : [2] ( 07/09/2008|16:11 )
-----------\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-05-17-08-52-37
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-05-17-08-52-37.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-12-14-02-06
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-12-14-02-06.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-17-21-54-19
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-06-17-21-54-19.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-35-02
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-35-02.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-36-00
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-04-11-36-00.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-11-22-05-43
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-11-22-05-43.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-18-13-02-59
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-18-13-02-59.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-25-20-24-47
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-25-20-24-47.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-28-02-16-53
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-07-28-02-16-53.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-35-48
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-35-48.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-40-22
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-01-11-40-22.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-03-11-54-14
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-09-03-11-54-14.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\around_the_world_in_80_days16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\big_city_adventure_sydney16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\chocolatier216x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\death_nile16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\dream_day_first_home16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy_216x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jewel_match_216x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\kids.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\MagiciansHandbook16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\magic_farm16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\MahjongChina16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\newGames.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\notFound.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\ranch_rush16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\riseAtlantis16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\saqqarah16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\the_great_chocolate_chase16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\trial.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\virtual_farm16x16.gif
Supprime! - C:\Program Files\GamesBar\Localization-French.ini
Supprime! - C:\Program Files\GamesBar\oberontb.dll
Supprime! - C:\Program Files\GamesBar\OBGet.exe
Supprime! - C:\Program Files\GamesBar\uninst.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\GamesBar
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
Supprime! - C:\Program Files\GamesBar
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF"
"Default_Search_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page"="https://www.orange.fr/portail"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 07/09/2008|16:06 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 07/09/2008|16:30 - Option : [2]
-----------\\ Fin du rapport a 16:30:07,93
-
-
Contributeur sécuritéok maintenant fais une analyse complete avec malwarebytes stp
aide toi bien du tuto pour supprimer correctement ce qu il aura trouvé-
dsl de retard mais l'analyse a pris 2h ...
Malwarebytes' Anti-Malware 1.26
Version de la base de données: 1122
Windows 5.1.2600 Service Pack 2
07/09/2008 18:15:07
mbam-log-2008-09-07 (18-15-07).txt
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 153738
Temps écoulé: 1 hour(s), 54 minute(s), 33 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté) -
et voila le rapport hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:04:04, on 07/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\windows\system\hpsysdrv.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4\plugin\bin\pchbutton.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game11.zylom.com/activex/zylomgamesplayer.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
-
-
Contributeur sécuritéje suis de retour...
relance hijackthis en cliquant sur scan only et coches ces lignes stp :
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game11.zylom.com/activex/zylomgamesplayer.cab
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
puis tu cliques sur fix checked.
vas aussi faire la mise à niveau d adobe reader à cette adresse :
https://get2.adobe.com/reader/otherversions/
est ce que tu as encore des problemes ??
Et as tu les logiciels spybot et ad-aware ?? -
Contributeur sécuritéMais de rien, c est avec plaisir que je t aide ;-)
apres avoir fait tout du message 17, tu peux faire ceci pour terminer stp :
Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :
Télécharge toolscleaner sur ton Bureau :
(c est le numéro 15 en bas de la page) : https://www.androidworld.fr/
* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse
Désactive et réactive la Restauration du système :
1 Dans la barre des tâches de Windows, clique sur Démarrer.
2 Clique avec le bouton droit de la souris sur Poste de travail puis clique sur Propriétés.
3 Dans l'onglet Restauration du système, coche "Désactiver la Restauration du système"
4 Clique sur Appliquer.
5 Ensuite décoche "Désactiver la restauration du systeme"
6 clique sur appliquer puis ok
7 vas créer un point de restauration dans accessoires----outils systeme----restauration du systeme.
As tu les logiciels ad-aware et spybot ??
PS : les liens de toolscleaner, etc... C est mon site web si ca peut t aider ;-)-
Non je n'ai pas ces logicieils et voici le rapport:
[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]
-->- Recherche:
C:\lopR.txt: trouvé !
C:\TB.txt: trouvé !
C:\Lop SD: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Default User\Recent\MSNFix.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HJTInstall.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\WINDOWS\system32\config\systemprofile\Recent\MSNFix.lnk: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Default User\Recent\MSNFix.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HJTInstall.exe: supprimé !
C:\WINDOWS\system32\config\systemprofile\Recent\MSNFix.lnk: supprimé !
C:\lopR.txt: supprimé !
C:\TB.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
-
-
Contributeur sécuritéok...tu peux les télécharger sur mon site web dans la rubrique "téléchargements".
Fais bien la suite car c est tres important
Bonne fin de soirée @+ -
Contributeur sécuritéclique sur démarrer => tous les programmes => ......
-
Contributeur sécuritétu ne dois surtout pas restaurer !! tu dois créer un point de restauration
-
Contributeur sécuritémerci et bonne soirée à toi aussi
@+
probleme résolu !!
