Courrier retourné mais non envoyé

Question

FORUM high-tech

SECURITE

Sécurité

Courrier retourné mais non envoyé

Recherche :

17 utilisateurs inconnus

Mot : Pseudo : Filtrer
Page : 1 Bas de page
Auteur	Sujet : Courrier retourné mais non envoyé

maridre

Tu cartonnes ! (de 500 à 999 messages postés)

/Vista et Firefox 3.0.13/
Bonjour à tous, depuis quelques jours je reçois une vingtaine de message ayant comme pour sujet : "postmaster@mail.hotmail.com" "This is an automatically generated Delivery Status Notification.

Unable to deliver message to the following recipients, due to being unable to connect successfully to the destination mail server."

Celà voudrait dire que les message que j'ai envoyés à un destinataire ne sont pas arrivé hors je n'ai rien envoyé à ces dernier.

J'ai passé mon ordi à "ccleaner + mbt + spybot et n'ai rien trouvé.

Auriez vous une solution ? Merci de votre aide.

(Publicité)

Page :

1

Haut de page

Sujets relatifs
courrier émanant de mon adresse	MSN : Envoye de spam et suppression de contacts
avast démarrage du test mémoire et courrier électronique	[RESOLU] Malekal envoie du courrier !
Avast courrier électronique, Est ce un virus ?
Plus de sujets relatifs à : Courrier retourné mais non envoyé

Les 5 sujets de discussion précédents	Nombre de réponses	Dernier message
Je suis aussi infecté par Win32:cutwail, au secours !	2	12/09/2009 à 03:32:42
Je suis aussi infecté par Win32:cutwail, au secours !	6	11/09/2009 à 23:30:52
infection par trojan (résolu)	23	30/01/2010 à 21:13:36
Un rootkit collant et des trucs bizarres	6	21/09/2009 à 16:32:25
présence de trojans et de verre sur mon ordi	11	11/09/2009 à 16:44:20

dédétraqué · Answer 1 · Posté le 12/09/2009 à 11:00:38

Salut maridre La première chose à faire est de changé le mot de passe et la question secrète de ta messagerie. Télécharge RSIT (de random/random) sur le bureau ici : http://images.malwareremoval.com/random/RSIT.exe - Double clique sur RSIT.exe qui est sur le bureau - Clique sur Continue dans la fenêtre - RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence - Poste le contenue des deux rapports, log.txt et info.txt ( réduit dans la barre des tâches ) à la fin de l’analyse Les rapports sont dans le dossier ici C:\ rsit @++ :)

maridre · Answer 2 · Posté le 12/09/2009 à 11:31:19

Les rapports : Info info.txt logfile of random's system information tool 1.06 2009-09-12 13:20:09 ======Uninstall list====== -->C:\Program Files\InstallShield Installation Information\{22EB2FA7-1BA0-4FFB-972F-353EC6ABA9D5}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{28B97CAB-828F-49D8-A30A-675476F9BA92}\setup.exe -runfromtemp -l0x040c/cont -removeonly -->C:\Program Files\InstallShield Installation Information\{4E7DC12A-3597-4A94-9429-F6C6987361B1}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{6813C983-427E-4511-8456-E98FCAA1A125}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{7DADB304-AF20-48C3-A780-4B4133A08817}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{9C423CF6-2DAA-4A37-94B8-59D7ECC7DB13}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{ACE66099-E18E-4037-83C8-9D182E5B9FA8}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{E078134D-A344-41B6-A0F8-147AB235396E}\setup.exe -runfromtemp -l0x040c -removeonly -->C:\Program Files\InstallShield Installation Information\{FA6CC4B4-7741-4F8D-8E81-15C4BAB9869B}\setup.exe -runfromtemp -l0x040c -removeonly 2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419} 7-Zip 4.62-->"D:\sauvegarde D\Logiciel\ZIP\7-Zip\Uninstall.exe" Acer Arcade Live Main Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\SETUP.exe" -uninstall Acer DV Magician-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6EFFB76-4A07-11DA-9D78-000129760D75}\SETUP.exe" -uninstall Acer DVDivine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\SETUP.exe" -uninstall Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL Acer Empowering Technology-->"C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -runfromtemp -l0x040c -removeonly Acer ePerformance Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D462BF9E-0C35-4705-BF9B-3DF9F3816643}\setup.exe" -l0x40c -removeonly Acer eSettings Management-->"C:\Program Files\InstallShield Installation Information\{CE65A9A0-9686-45C6-9098-3C9543A412F0}\setup.exe" -runfromtemp -l0x040c -removeonly Acer GameZone Console DTV 2.0.1.1-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe" Acer HomeMedia Connect-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}\SETUP.exe" -uninstall Acer HomeMedia Trial Creator-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B580C409-E16F-44FF-904D-3AE94E113BE0}\SETUP.EXE" -uninstall Acer HomeMedia-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\SETUP.exe" -uninstall Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly Acer SlideShow DVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41581EF5-45A7-11DA-9D78-000129760D75}\SETUP.exe" -uninstall Acer VideoMagician-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\SETUP.exe" -uninstall Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll" Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe Adobe Flash Player 9 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 9.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61} adsl TV-->C:\Program Files\adslTV\Uninstal.exe Apple Mobile Device Support-->MsiExec.exe /I{162B71B8-8464-4680-A086-601D555B331D} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe" Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE Backspin Billiards-->"C:\Program Files\Acer GameZone\Backspin Billiards\Uninstall.exe" "C:\Program Files\Acer GameZone\Backspin Billiards\install.log" Big Kahuna Reef-->"C:\Program Files\Acer GameZone\Big Kahuna Reef\Uninstall.exe" "C:\Program Files\Acer GameZone\Big Kahuna Reef\install.log" Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B} Cap b2i-->MsiExec.exe /I{CB022D24-0445-4136-B636-5F40DC51E956} CartoExploreur-->D:\IGN\CARTOEXPLORER\Uninstal.exe Catalyst Control Center - Branding-->MsiExec.exe /I{4677674C-59CE-41B0-AA32-44A30A9D1EEB} CCleaner (remove only)-->"D:\sauvegarde D\Logiciel\NETTOYEUR\cccleaneur\CCleaner\uninst.exe" CDBurnerXP-->"D:\sauvegarde D\Logiciel\GRAVEUR\CDBurnerXP\unins000.exe" Chuzzle-->"C:\Program Files\Acer GameZone\Chuzzle\Uninstall.exe" "C:\Program Files\Acer GameZone\Chuzzle\install.log" Copernic Agent Basic-->"C:\Windows\CopernicAgentUninstall.exe" /ARGSFILE="D:\sauvegarde D\Logiciel\COPERNIC\Copernic Agent\Copernic Agent\unwise.dat" Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240 Craft ROBO Controller-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{97D52BC9-D904-413F-A0F7-E3EE4C95B623}\setup.exe" -l0x40c -uninst -removeonly Craft ROBO Controller-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BB7D80D1-23C3-46B0-B62D-F672CA8F68F8}\setup.exe" -l0x9 -uninst -removeonly D.I.P.R.I.P. Dedicated Server-->"C:\Program Files\Steam\steam.exe" steam://uninstall/17535 dBpoweramp Music Converter-->"C:\Windows\system32\SpoonUninstall.exe" <uninstall>C:\Windows\system32\SpoonUninstall-dBpoweramp Music Converter.dat Diner Dash 2-->"C:\Program Files\Gamenext\Diner Dash 2\Uninstall.exe" "C:\Program Files\Gamenext\Diner Dash 2\install.log" Diner Dash Hometown Hero-->"C:\Program Files\Gamenext\Diner Dash Hometown Hero\Uninstall.exe" "C:\Program Files\Gamenext\Diner Dash Hometown Hero\install.log" Disc2Phone-->MsiExec.exe /I{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9} DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS Dofus-Arena-->D:\jeux\DofusArena2\uninstall.exe eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c Free - Kit de connexion-->C:\Program Files\Free.fr\uninstall.exe Free Mp3 Wma Converter V 1.7.2-->"D:\logiciels divers\MUSIC CONVERT\Free Audio Pack\unins000.exe" FreeGo version 4-->"C:\Program Files\FreeGo\unins000.exe" GamesBar 2.0.1.12-->C:\Program Files\GamesBar\uninst.exe Garmin Communicator Plugin-->MsiExec.exe /X{A7DEBAA4-B211-4D1A-A6B3-E52BFAAA1D0C} Garmin Training Center 3.3.2-->MsiExec.exe /X{7834FE69-824C-4644-8107-899201C074C8} Garmin USB Drivers-->MsiExec.exe /X{B1102A25-3AA3-446B-AA0F-A699B07A02FD} Garmin WebUpdater-->MsiExec.exe /X{E0783143-EAE2-4047-A8D6-E155523C594C} Google Chrome-->"C:\Program Files\Google\Chrome\Application\2.0.172.43\Installer\setup.exe" --uninstall --system-level Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466} HD View-->MsiExec.exe /I{50CCB141-1380-4922-8B21-D62B5233FD0E} HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" IncrediMail-->C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log Insurgency Dedicated Server-->"C:\Program Files\Steam\steam.exe" steam://uninstall/17705 iTunes-->MsiExec.exe /I{C26B06A9-27BB-45B0-9873-9C623EC2BA38} Java(TM) 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF} Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} Kaspersky Online Scanner-->C:\Windows\system32\KASPER~1\KASPER~1\kavuninstall.exe Lexmark P910 Series-->C:\Program Files\Lexmark P910 Series\Install\x86\Uninst.exe LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31} Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C} mIRC-->"C:\Program Files\mIRC\mirc.exe" -uninstall Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe Mozilla Firefox (3.0.13)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Mumble and Murmur-->C:\Users\Nous FGR\Desktop\flo\Mumble\Uninstall.exe NTI Backup NOW! 4.7-->C:\Program Files\InstallShield Installation Information\{1598034D-7147-432C-8CA8-888E0632D124}\setup.exe -runfromtemp -l0x040c NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7 NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI OpenOffice.org 3.0 Language Pack (French)-->MsiExec.exe /I{2A0DB319-6365-4876-B7D8-994A79AA1329} OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6} Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall PhotoFiltre-->"D:\sauvegarde D\jeux\PhotoFiltre\Uninst.exe" Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe" QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F} Realtek High Definition Audio Driver-->RtlUpd.exe -r -m Recuva (remove only)-->"L:\Recuva\uninst.exe" ROBO Master for QuicKutz-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06D3346F-F3D6-4DC3-801B-09F2AA2E3968}\setup.exe" -l0x9 -uninst -removeonly ROBO Master-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44E8FA6E-931D-4755-82DA-DB93CE1F238C}\setup.exe" -l0x40c -uninst -removeonly ROBO Master-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DADD543C-4CD9-4F1C-AE2F-7048970BABA6}\setup.exe" -l0x9 -uninst -removeonly SAMSUNG Mobile Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe Samsung Mobile phone USB driver Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly Scratches Collector-->D:\jeux\SCRATCH\Scratches Collector\uninstall.exe Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7} Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028} Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E} Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4} Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77} Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00} Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9} SIW version 2009-02-24-->"C:\Program Files\SIW\unins000.exe" SoftwareUpdate 1.0-->"C:\Users\Nous FGR\AppData\Roaming\eoRezo\SoftwareUpdate\unins000.exe" Sony Picture Utility-->C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe -runfromtemp -l0x040c /removeonly uninstall -removeonly Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004} SportTracks 2.1-->MsiExec.exe /I{E6FA148F-1E7D-4A42-A9A2-7DFABC2C6A2B} Spybot - Search & Destroy-->"D:\sauvegarde D\Logiciel\espion\Spybot - Search & Destroy\unins000.exe" Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe" TomTom HOME 2.6.2.1586-->D:\sauvegarde D\TOMTOM\TomTom HOME 2\Uninstall TomTom HOME.exe TomTom HOME Visual Studio Merge Modules-->MsiExec.exe /I{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533} Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Update Service-->C:\Program Files\Sony Ericsson\Update Service\uninst.exe VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B} VDownloader 0.83-->"D:\jeux\VDOWNLOADER\unins000.exe" VideoLAN VLC media player 0.8.6b-->D:\TV\uninstall.exe Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1.0)-->rundll32.exe C:\PROGRA~1\DIFX\15B7F172FC21855D\DIFxAppA.dll, DIFxARPUninstallDriverPackage C:\Windows\System32\DriverStore\FileRepository\grmnusb.inf_6b094708\grmnusb.inf Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} Zylom Games Player Plugin-->"C:\Program Files\Zylom Games\UninstallPlugin.exe" --uninstall ======Hosts File====== 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com ======Security center information====== AS: Windows Defender ======System event log====== Computer Name: PC-de-NousFGR Event Code: 4376 Message: Servicing a requis un redémarrage pour terminer la définition du package KB948610(Update) à l’état Installation demandée(Install Requested) Record Number: 169307 Source Name: Microsoft-Windows-Servicing Time Written: 20090309111524.000000-000 Event Type: Avertissement User: AUTORITE NT\SYSTEM Computer Name: PC-de-NousFGR Event Code: 4376 Message: Servicing a requis un redémarrage pour terminer la définition du package KB948610(Update) à l’état Installation demandée(Install Requested) Record Number: 169275 Source Name: Microsoft-Windows-Servicing Time Written: 20090309111524.000000-000 Event Type: Avertissement User: AUTORITE NT\SYSTEM Computer Name: PC-de-NousFGR Event Code: 4376 Message: Servicing a requis un redémarrage pour terminer la définition du package KB948610(Update) à l’état Installation demandée(Install Requested) Record Number: 169270 Source Name: Microsoft-Windows-Servicing Time Written: 20090309111524.000000-000 Event Type: Avertissement User: AUTORITE NT\SYSTEM Computer Name: PC-de-NousFGR Event Code: 4376 Message: Servicing a requis un redémarrage pour terminer la définition du package KB948610(Update) à l’état Installation demandée(Install Requested) Record Number: 169267 Source Name: Microsoft-Windows-Servicing Time Written: 20090309111524.000000-000 Event Type: Avertissement User: AUTORITE NT\SYSTEM Computer Name: PC-de-NousFGR Event Code: 4376 Message: Servicing a requis un redémarrage pour terminer la définition du package KB948610(Update) à l’état Installation demandée(Install Requested) Record Number: 169263 Source Name: Microsoft-Windows-Servicing Time Written: 20090309111524.000000-000 Event Type: Avertissement User: AUTORITE NT\SYSTEM =====Application event log===== Computer Name: PC-de-NousFGR Event Code: 59 Message: La création du contexte d’activation a échoué pour « K:\Logiciel\Nettoyeur\HostFileEditor.exe ». Erreur dans le fichier de manifeste ou de stratégie « K:\Logiciel\Nettoyeur\HostFileEditor.exe » à la Log : Logfile of random's system information tool 1.06 (written by random/random) Run by Nous FGR at 2009-09-12 13:23:49 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 System drive C: has 87 GB (59%) free of 148 GB Total RAM: 3071 MB (33% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:23:57, on 12/09/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Windows\ehome\ehtray.exe D:\sauvegarde D\Logiciel\espion\Spybot - Search & Destroy\TeaTimer.exe C:\Windows\ehome\ehmsas.exe D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe C:\Garmin\gStart.exe D:\scrap\CRSSupervisor.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\IncrediMail\bin\IMApp.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\IncrediMail\bin\IncMail.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Program Files\Steam\Steam.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Windows\system32\NOTEPAD.EXE C:\Users\Nous FGR\Downloads\RSIT.exe C:\Program Files\Internet Explorer\IELowutil.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Nous FGR\Desktop\RSIT.exe C:\Program Files\trend micro\Nous FGR.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://igoogle/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - D:\sauvegarde D\Logiciel\COPERNIC\Copernic Agent\Copernic Agent\CopernicAgentExt.dll O4 - HKLM\..\Run: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXBYtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\RunOnce: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: D:\sauvegarde D\Logiciel\espion\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: "D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: C:\Garmin\gStart.exe O4 - Global Startup: Craft ROBO Status Supervisor.lnk = ? O4 - Global Startup: Empowering Technology Launcher.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\SAUVEG~1\Logiciel\COPERNIC\COPERN~1\COPERN~2\COPERN~1.EXE O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\SAUVEG~1\Logiciel\COPERNIC\COPERN~1\COPERN~2\COPERN~1.EXE O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - D:\SAUVEG~1\Logiciel\COPERNIC\COPERN~1\COPERN~2\COPERN~1.EXE O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O13 - Gopher Prefix: O15 - Trusted Zone: www.consoclicker.com O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe O23 - Service: Google Update Service (gupdate1c98d03c3a6bf83) (gupdate1c98d03c3a6bf83) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LXBYCustomerConnect - Unknown owner - C:\Windows\system32\spool\DRIVERS\W32X86\3\\LXBYserv.exe O23 - Service: lxby_device - - C:\Windows\system32\lxbycoms.exe O23 - Service: NMSAccessU - Unknown owner - D:\sauvegarde D\Logiciel\GRAVEUR\CDBurnerXP\NMSAccessU.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: TomTomHOMEService - TomTom - D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 9093 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Google Software Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\User_Feed_Synchronization-{1BF66506-F350-4D54-BFE4-EB11557426CC}.job ======Registry dump====== Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Spybot-S&D IE Protection - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll {0BF43445-2F28-4351-9252-17FE6E806AA0} {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - D:\sauvegarde D\Logiciel\COPERNIC\Copernic Agent\Copernic Agent\CopernicAgentExt.dll "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe "LXBYCATS"=rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXBYtime.dll,_RunDLLEntry@16 "Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe "IncrediMail"=C:\Program Files\IncrediMail\bin\IncMail.exe "ehTray.exe"=C:\Windows\ehome\ehTray.exe "SpybotSD TeaTimer"=D:\sauvegarde D\Logiciel\espion\Spybot - Search & Destroy\TeaTimer.exe "TomTomHOME.exe"=D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe "gStart"=C:\Garmin\gStart.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe D:\IGN\DAEMON Tools Lite\daemon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\QTTask.exe c:\program files\steam\steam.exe D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe D:\APPARE~1\Maeva\VOLUME~1\SPUVOL~1.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Craft ROBO Status Supervisor.lnk - D:\scrap\CRSSupervisor.exe Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 "NoDrives"=0 "NoDrives"= "BindDirectlyToPropertySetStorage"= shell\AutoRun\command - G:\setupSNK.exe ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2009-09-12 13:19:48 ----D---- C:\rsit 2009-09-10 07:30:41 ----A---- C:\Windows\system32\javaws.exe 2009-09-10 07:30:41 ----A---- C:\Windows\system32\javaw.exe 2009-09-10 07:30:40 ----A---- C:\Windows\system32\java.exe 2009-09-10 04:49:38 ----A---- C:\Windows\system32\jscript.dll 2009-09-10 04:49:29 ----A---- C:\Windows\system32\TCPSVCS.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\ROUTE.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\NETSTAT.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\netiohlp.dll 2009-09-10 04:49:29 ----A---- C:\Windows\system32\netevent.dll 2009-09-10 04:49:29 ----A---- C:\Windows\system32\MRINFO.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\HOSTNAME.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\finger.exe 2009-09-10 04:49:29 ----A---- C:\Windows\system32\ARP.EXE 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlansvc.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlansec.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlanmsm.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlanapi.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\L2SecHC.dll 2009-09-10 04:49:15 ----A---- C:\Windows\system32\WMVCORE.DLL 2009-09-10 04:49:15 ----A---- C:\Windows\system32\mf.dll 2009-09-06 19:48:00 ----D---- C:\Program Files\gPotato.eu 2009-09-03 16:38:09 ----D---- C:\Program Files\Dofus 2009-09-02 18:10:59 ----D---- C:\Program Files\mIRC 2009-09-02 09:12:04 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll 2009-09-02 09:12:04 ----A---- C:\Windows\system32\Apphlpdm.dll 2009-08-31 11:12:55 ----D---- C:\Users\Nous FGR\AppData\Roaming\Mumble 2009-08-27 01:29:10 ----D---- C:\Users\Nous FGR\AppData\Roaming\teamspeak2 2009-08-27 01:29:01 ----D---- C:\Program Files\Teamspeak2_RC2 2009-08-26 13:20:49 ----A---- C:\Windows\system32\tzres.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\wdigest.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\schannel.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\msv1_0.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\lsasrv.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\kerberos.dll 2009-08-24 23:30:34 ----A---- C:\Windows\system32\secur32.dll 2009-08-24 23:30:34 ----A---- C:\Windows\system32\lsass.exe 2009-08-13 03:53:34 ----A---- C:\Windows\system32\atl.dll 2009-08-13 03:53:33 ----A---- C:\Windows\system32\wkssvc.dll 2009-08-13 03:53:31 ----A---- C:\Windows\system32\mstscax.dll 2009-08-13 03:53:30 ----A---- C:\Windows\system32\avifil32.dll 2009-08-13 03:53:27 ----A---- C:\Windows\system32\wmp.dll 2009-08-13 03:53:26 ----A---- C:\Windows\system32\wmploc.DLL 2009-08-13 03:53:26 ----A---- C:\Windows\system32\wmpdxm.dll 2009-08-13 03:53:26 ----A---- C:\Windows\system32\spwmp.dll 2009-08-13 03:53:26 ----A---- C:\Windows\system32\dxmasf.dll ======List of files/folders modified in the last 1 months====== 2009-09-12 13:23:52 ----D---- C:\Windows\Temp 2009-09-12 13:23:50 ----D---- C:\Program Files\trend micro 2009-09-12 13:20:01 ----D---- C:\Windows\Prefetch 2009-09-12 13:19:07 ----D---- C:\Program Files\Steam 2009-09-12 11:55:19 ----D---- C:\Windows\system32\drivers 2009-09-12 07:31:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-09-12 02:32:55 ----SHD---- C:\System Volume Information 2009-09-12 00:03:20 ----D---- C:\Windows\Tasks 2009-09-12 00:03:13 ----D---- C:\ProgramData\Google Updater 2009-09-11 03:26:30 ----D---- C:\Windows\rescache 2009-09-11 03:21:41 ----D---- C:\Windows\winsxs 2009-09-11 03:16:21 ----D---- C:\Windows\System32 2009-09-11 03:16:21 ----D---- C:\Windows\inf 2009-09-11 03:16:21 ----A---- C:\Windows\system32\PerfStringBackup.INI 2009-09-11 03:11:45 ----D---- C:\Program Files\Lx_cats 2009-09-11 03:10:16 ----D---- C:\Program Files\Microsoft Silverlight 2009-09-11 03:09:10 ----D---- C:\Windows\system32\fr-FR 2009-09-11 03:01:02 ----D---- C:\Windows\Debug 2009-09-11 03:00:59 ----D---- C:\Windows\system32\catroot 2009-09-11 03:00:57 ----D---- C:\Windows\system32\catroot2 2009-09-11 03:00:56 ----D---- C:\Program Files\Windows Mail 2009-09-11 03:00:51 ----SHD---- C:\Windows\Installer 2009-09-11 03:00:33 ----D---- C:\Windows\ehome 2009-09-10 13:44:07 ----SD---- C:\Windows\Downloaded Program Files 2009-09-10 13:44:06 ----AD---- C:\Windows 2009-09-10 13:44:05 ----D---- C:\Windows\BDOSCAN8 2009-09-10 07:30:39 ----D---- C:\Program Files\Java 2009-09-09 18:56:14 ----D---- C:\ProgramData\Spybot - Search & Destroy 2009-09-09 18:54:35 ----D---- C:\Program Files\Mozilla Firefox 2009-09-08 08:59:13 ----D---- C:\Users\Nous FGR\AppData\Roaming\dvdcss 2009-09-07 14:24:17 ----D---- C:\Program Files\Common Files\Steam 2009-09-06 20:42:48 ----D---- C:\Windows\system32\Tasks 2009-09-06 19:48:00 ----RD---- C:\Program Files 2009-09-03 11:23:48 ----D---- C:\Program Files\Acer GameZone 2009-09-03 03:05:52 ----D---- C:\Windows\AppPatch 2009-09-02 18:08:05 ----D---- C:\Program Files\Incredijeux 2009-08-28 23:38:20 ----A---- C:\Windows\system32\mrt.exe 2009-08-26 13:20:29 ----D---- C:\Program Files\Internet Explorer 2009-08-14 03:09:18 ----D---- C:\Program Files\Windows Media Player ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys R2 tvicport;tvicport; \??\C:\Windows\system32\drivers\tvicport.sys R2 zntport;zntport; \??\C:\Windows\system32\drivers\zntport.sys R3 fbxusb;FreeBox USB Network Adapter; C:\Windows\system32\DRIVERS\fbxusb.sys R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys S3 arnqk0j4;arnqk0j4; C:\Windows\system32\drivers\arnqk0j4.sys S3 catchme;catchme; \??\C:\Users\NOUSFG~1\AppData\Local\Temp\catchme.sys S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys S3 NVHDA;Service for NVIDIA HDMI Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys S3 optousb;OPTO ELECTRONICS optousb; C:\Windows\system32\DRIVERS\optousb.sys S3 optovcm;OPTO ELECTRONICS optovcm; C:\Windows\system32\DRIVERS\optovcm.sys S3 se58bus;Sony Ericsson Device 088 driver (WDM); C:\Windows\system32\DRIVERS\se58bus.sys S3 se58mdfl;Sony Ericsson Device 088 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\se58mdfl.sys S3 se58mdm;Sony Ericsson Device 088 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\se58mdm.sys S3 se58mgmt;Sony Ericsson Device 088 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\se58mgmt.sys S3 se58nd5;Sony Ericsson Device 088 USB Ethernet Emulation SEMC58 (NDIS); C:\Windows\system32\DRIVERS\se58nd5.sys S3 se58obex;Sony Ericsson Device 088 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\se58obex.sys S3 se58unic;Sony Ericsson Device 088 USB Ethernet Emulation SEMC58 (WDM); C:\Windows\system32\DRIVERS\se58unic.sys S3 Ser2pl;SAGEM USB-Serial; C:\Windows\system32\DRIVERS\ser2pl.sys S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ssm_bus.sys S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\Windows\system32\DRIVERS\ssm_mdfl.sys S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\Windows\system32\DRIVERS\ssm_mdm.sys S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys S3 WSVD;WSVD; \??\C:\Windows\system32\drivers\WSVD.sys S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys S4 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iastor.sys S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe R2 AcerMemUsageCheckService;ePerformance Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe R2 eDataSecurity Service;eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe R2 eSettingsService;eSettings Service; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe R2 lxby_device;lxby_device; C:\Windows\system32\lxbycoms.exe R2 NMSAccessU;NMSAccessU; D:\sauvegarde D\Logiciel\GRAVEUR\CDBurnerXP\NMSAccessU.exe R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe R2 TomTomHOMEService;TomTomHOMEService; D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe S2 gupdate1c98d03c3a6bf83;Google Update Service (gupdate1c98d03c3a6bf83); C:\Program Files\Google\Update\GoogleUpdate.exe S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S2 LXBYCustomerConnect;LXBYCustomerConnect; C:\Windows\system32\spool\DRIVERS\W32X86\3\\LXBYserv.exe S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe S3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe -----------------EOF----------------- Merci pour réponse.

dédétraqué · Answer 3 · Posté le 12/09/2009 à 11:46:04

Salut maridre Important Désactive TeaTimer le résident de Spybot, il va gêner la désinfection en empêchant la modification des BHO - Démarre Spybot clique sur Mode coche Mode avancé - A gauche clique sur Outils ==> Résident - Décoche la case devant Résident "TeaTimer" - Quitte Spybot ----- Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau. Déconnecte-toi et ferme toutes applications en cours Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files). Double-clique sur l'icône AD-Remover située sur ton Bureau. Au menu principal, choisis l'option L . Poste le rapport qui apparaît à la fin. (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log) (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller) Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure Aide : http://commentcestfait.forumactif.net/tutos-securite-f31/tutorielad-remover-t775.htm ----- Télécharge Toolbar-S&D (de la Team IDN) sur ton Bureau. http://eric.71.mespages.googlepages.com/ToolBarSD.exe - Double clique l’icône ToolBar S&D sur le bureau - Choisi F pour français et valide - Au menu principal de ToolBar S&D choisi l’option 1 (Recherche) - Le menu Démarrer et les icônes vont disparaîtrent, c'est normal - La recherche s'effectue, cela peut prendre plusieurs minutes, ne touche à rien. - Une fois l'analyse terminée, le rapport de recherche s'ouvre dans le Bloc-Note. (Dans le cas où le rapport ne s'ouvre pas, ce dernier se trouve sur C:\TB.txt) Copier/coller le rapport dans ton prochain poste @++ :)

maridre · Answer 4 · Posté le 12/09/2009 à 18:40:24

Désolé, j'étais au boulot - . ======= RAPPORT D'AD-REMOVER 1.1.4.5_U | UNIQUEMENT XP/VISTA/7 ======= . Mit à jour par C_XX le 12/09/2009 à 9:30 PM Contact: AdRemover.contact@gmail.com Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html . Lancé à: 13:53:24, 12/09/2009 | Mode Normal | Option: CLEAN Exécuté de: C:\Program Files\Ad-Remover\ Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002 Nom du PC: PC-DE-NOUSFGR | Utilisateur actuel: Nous FGR . ============== ÉLÉMENT(S) NEUTRALISÉ(S) ============== . . HKCU\Software\EoRezo HKCU\Software\ItsLabel HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1 HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{08165EA0-E946-11CF-9C87-00AA005127ED} HKCU\software\microsoft\internet explorer\searchscopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} /!\ NON SUPPRIME - HKLM\Software\Classes\CLSID\{08165EA0-E946-11CF-9C87-00AA005127ED} . C:\log_lobby.txt C:\log_lobby_dumper.txt C:\Users\Nous FGR\AppData\Roaming\EoRezo C:\Users\Nous FGR\AppData\Roaming\EoRezo\cmhost.cyp C:\Users\Nous FGR\AppData\Roaming\EoRezo\ConfMedia.cyp C:\Users\Nous FGR\AppData\Roaming\EoRezo\db C:\Users\Nous FGR\AppData\Roaming\EoRezo\eoDesktop C:\Users\Nous FGR\AppData\Roaming\EoRezo\eoDesktop\config.xml C:\Users\Nous FGR\AppData\Roaming\EoRezo\eoDesktop\eoDesktop.html C:\Users\Nous FGR\AppData\Roaming\EoRezo\eoDesktop\userConfig.xml C:\Users\Nous FGR\AppData\Roaming\EoRezo\eoStats C:\Users\Nous FGR\AppData\Roaming\EoRezo\eoStats\eoStats.txt C:\Users\Nous FGR\AppData\Roaming\EoRezo\host.cyp C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\Download C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\help_config.cyp C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\Software C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\unins000.dat C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\unins000.exe C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\user_config.cyp C:\Users\Nous FGR\AppData\Roaming\EoRezo\SoftwareUpdate\user_profil.cyp C:\Users\Nous FGR\AppData\Roaming\EoRezo\user.cyp C:\Users\Nous FGR\AppData\Roaming\ItsLabel C:\Users\Nous FGR\AppData\Roaming\ItsLabel\ItsTV C:\Users\Nous FGR\AppData\Roaming\ItsLabel\ItsTV\itsTV.xml (!) -- Fichiers temporaires supprimés. . ============== Scan additionnel ============== . . * Mozilla FireFox Version 3.0.13 * . Nom du profil: q75a18r2.default (Nous FGR) . (Prefs.js) user_pref("browser.search.defaultenginename", "Fast Browser Search"); (Prefs.js) user_pref("browser.search.selectedEngine", "Fast Browser Search"); (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q="); (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/ig "); (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.13"); . . * Internet Explorer Version 8.0.6001.18813 * . . Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome . . Start Page: hxxp://fr.msn.com/ Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Search bar: hxxp://search.msn.com/spbasic.htm . . Tabs: res://ieframe.dll/tabswelcome.htm . ============== Suspect (Cracks; Serials ... ) ============== . C:\Users\Nous FGR\.housecall6.6\patch.exe C:\Users\Nous FGR\Desktop\flo\lib\PatchUpdater.exe C:\Users\Nous FGR\Desktop\JEUX\PatchUpdater.exe C:\Users\Nous FGR\Favoris\ordi\Tout sur le warez - appz - cracks - serials.url C:\Users\Nous FGR\Favorites\Telechargement Gratuit T‚l‚charger gratuitement Films Music mp3 jeux PC livres magazines logiciels crack sur rapidshare megaupload .URL C:\Users\Nous FGR\Favorites\ordi\Tout sur le warez - appz - cracks - serials.URL . =================================== . 4550 Octet(s) - C:\Ad-Report-CLEAN.log . 3 Fichier(s) - C:\Users\NOUSFG~1\AppData\Local\Temp 2 Fichier(s) - C:\Windows\Temp . 20 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP 14 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE . Fin à: 14:02:49 | 12/09/2009 . ============== E.O.F ============== . le deuxième : -----------\\ ToolBar S&D 1.2.9 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz ) BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15 USER : Nous FGR ( Administrator ) BOOT : Normal boot C:\ (Local Disk) - NTFS - Total:144 Go (Free:85 Go) D:\ (Local Disk) - NTFS - Total:144 Go (Free:83 Go) E:\ (CD or DVD) F:\ (CD or DVD) G:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 ) Option : ( 12/09/2009|19:12 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\ProgramData\GamesBar C:\ProgramData\GamesBar\08-12-21-13-37-56 C:\ProgramData\GamesBar\08-12-21-13-37-56.xm_ C:\ProgramData\GamesBar\about.gif C:\ProgramData\GamesBar\action.gif C:\ProgramData\GamesBar\annas_ice_cream16x16.gif C:\ProgramData\GamesBar\arcade.gif C:\ProgramData\GamesBar\around_the_world_in_80_days16x16.gif C:\ProgramData\GamesBar\buy.gif C:\ProgramData\GamesBar\cards.gif C:\ProgramData\GamesBar\chicken_invaders_3_xmas16x16.gif C:\ProgramData\GamesBar\deals.gif C:\ProgramData\GamesBar\download.gif C:\ProgramData\GamesBar\farm_frenzy_216x16.gif C:\ProgramData\GamesBar\feedback.gif C:\ProgramData\GamesBar\help.gif C:\ProgramData\GamesBar\highlight.gif C:\ProgramData\GamesBar\jigsaw.gif C:\ProgramData\GamesBar\mahjong.gif C:\ProgramData\GamesBar\multiplayer.gif C:\ProgramData\GamesBar\mygames.gif C:\ProgramData\GamesBar\mystery_stories_island_of_hope16x16.gif C:\ProgramData\GamesBar\newGames.gif C:\ProgramData\GamesBar\oberonconfig.xm_ C:\ProgramData\GamesBar\onload C:\ProgramData\GamesBar\partner.gif C:\ProgramData\GamesBar\peggle_nights16x16.gif C:\ProgramData\GamesBar\piggly_christmas_edition16x16.gif C:\ProgramData\GamesBar\puzzle.gif C:\ProgramData\GamesBar\search.gif C:\ProgramData\GamesBar\search_yahoo.gif C:\ProgramData\GamesBar\season_match_216x16.gif C:\ProgramData\GamesBar\sendafriend.gif C:\ProgramData\GamesBar\sports.gif C:\ProgramData\GamesBar\trial.gif C:\ProgramData\GamesBar\uninstall.gif C:\ProgramData\GamesBar\update.gif C:\ProgramData\GamesBar\webgame.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\7_wonders_treasures_of_seven16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\about.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\action.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\arcade.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\big_city_adventure_sydney16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\buy.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\cards.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\deals.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\death_nile16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\diner_dash_flo_through_time16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\download.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\feedback.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\help.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\highlight.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\jigsaw.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\luxor_quest_for_the_afterlife16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\mahjong.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\multiplayer.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\mygames.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\natalie_brooks16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\newGames.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\partner.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\peggle_nights16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\popup_off.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\popup_on.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\puzzle.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\search.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\search_goog.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\sendafriend.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\sports.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\the_hidden_object_show16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\trial.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\uninstall.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\update.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\virtualvillagers16x16.gif C:\ProgramData\GamesBar\08-12-21-13-37-56\webgame.gif C:\ProgramData\GamesBar\onload\loading.gif C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\GamesBar C:\Program Files\GamesBar C:\Program Files\GamesBar\Localization2-French.ini C:\Program Files\GamesBar\uninst.exe -----------\\ "Local Page"="C:\\Windows\\system32\\blank.htm" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Start Page"="http://fr.msn.com/" "Search Bar"="http://go.microsoft.com/fwlink/?linkid=54896" "Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Default_page_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Url"="http://go.microsoft.com/fwlink/?LinkID=68928" "Url"="http://go.microsoft.com/fwlink/?LinkID=68929" "Start Page"="http://fr.msn.com/" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Local Page"="C:\\Windows\\System32\\blank.htm" "Search bar"="http://search.msn.com/spbasic.htm" --------------------\\ Recherche d'autres infections

dédétraqué · Answer 5 · Posté le 12/09/2009 à 19:03:00

Salut maridre Important Désactive ton Antivirus et antispyware avant le scan : http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm - Double clique sur l’icône ToolBar S&D sur le bureau - Choisi F pour français et valide - Au menu principal de ToolBar S&D choisi l’option 2 (Suppression) - Le menu démarrer et les icônes vont à nouveau disparaître.. c'est normal. - Le nettoyage va prendre quelques minutes... - Une fois l'opération terminée, le rapport de nettoyage s'ouvre Copier/coller le rapport dans ton prochain poste. @++ :)

maridre · Answer 6 · Posté le 12/09/2009 à 19:24:22

le voila -----------\\ ToolBar S&D 1.2.9 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2 X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz ) BIOS : BIOS Date: 05/23/08 16:37:53 Ver: 08.00.15 USER : Nous FGR ( Administrator ) BOOT : Normal boot C:\ (Local Disk) - NTFS - Total:144 Go (Free:85 Go) D:\ (Local Disk) - NTFS - Total:144 Go (Free:83 Go) E:\ (CD or DVD) F:\ (CD or DVD) G:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 ) Option : ( 12/09/2009|21:21 ) -----------\\ SUPPRESSION Supprime! - C:\ProgramData\GamesBar\08-12-21-13-37-56 Supprime! - C:\ProgramData\GamesBar\08-12-21-13-37-56.xm_ Supprime! - C:\ProgramData\GamesBar\about.gif Supprime! - C:\ProgramData\GamesBar\action.gif Supprime! - C:\ProgramData\GamesBar\annas_ice_cream16x16.gif Supprime! - C:\ProgramData\GamesBar\arcade.gif Supprime! - C:\ProgramData\GamesBar\around_the_world_in_80_days16x16.gif Supprime! - C:\ProgramData\GamesBar\buy.gif Supprime! - C:\ProgramData\GamesBar\cards.gif Supprime! - C:\ProgramData\GamesBar\chicken_invaders_3_xmas16x16.gif Supprime! - C:\ProgramData\GamesBar\deals.gif Supprime! - C:\ProgramData\GamesBar\download.gif Supprime! - C:\ProgramData\GamesBar\farm_frenzy_216x16.gif Supprime! - C:\ProgramData\GamesBar\feedback.gif Supprime! - C:\ProgramData\GamesBar\help.gif Supprime! - C:\ProgramData\GamesBar\highlight.gif Supprime! - C:\ProgramData\GamesBar\jigsaw.gif Supprime! - C:\ProgramData\GamesBar\mahjong.gif Supprime! - C:\ProgramData\GamesBar\multiplayer.gif Supprime! - C:\ProgramData\GamesBar\mygames.gif Supprime! - C:\ProgramData\GamesBar\mystery_stories_island_of_hope16x16.gif Supprime! - C:\ProgramData\GamesBar\newGames.gif Supprime! - C:\ProgramData\GamesBar\oberonconfig.xm_ Supprime! - C:\ProgramData\GamesBar\onload Supprime! - C:\ProgramData\GamesBar\partner.gif Supprime! - C:\ProgramData\GamesBar\peggle_nights16x16.gif Supprime! - C:\ProgramData\GamesBar\piggly_christmas_edition16x16.gif Supprime! - C:\ProgramData\GamesBar\puzzle.gif Supprime! - C:\ProgramData\GamesBar\search.gif Supprime! - C:\ProgramData\GamesBar\search_yahoo.gif Supprime! - C:\ProgramData\GamesBar\season_match_216x16.gif Supprime! - C:\ProgramData\GamesBar\sendafriend.gif Supprime! - C:\ProgramData\GamesBar\sports.gif Supprime! - C:\ProgramData\GamesBar\trial.gif Supprime! - C:\ProgramData\GamesBar\uninstall.gif Supprime! - C:\ProgramData\GamesBar\update.gif Supprime! - C:\ProgramData\GamesBar\webgame.gif Supprime! - C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\GamesBar Supprime! - C:\Program Files\GamesBar\Localization2-French.ini Supprime! - C:\Program Files\GamesBar\uninst.exe Supprime! - C:\ProgramData\GamesBar Supprime! - C:\Program Files\GamesBar -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ "Local Page"="C:\\Windows\\system32\\blank.htm" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Start Page"="http://fr.msn.com/" "Search Bar"="http://go.microsoft.com/fwlink/?linkid=54896" "Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Default_page_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Url"="http://go.microsoft.com/fwlink/?LinkID=68928" "Url"="http://go.microsoft.com/fwlink/?LinkID=68929" "Start Page"="http://www.msn.com/" "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Local Page"="C:\\Windows\\System32\\blank.htm" "Search bar"="http://search.msn.com/spbasic.htm" --------------------\\ Recherche d'autres infections

dédétraqué · Answer 7 · Posté le 12/09/2009 à 20:11:03

Salut maridre Supprime ce dossier C:\ rsit Refais un scan avec RSIT et poste le rapport log.txt seulement à la fin de l’analyse Le rapport est dans le dossier ici C:\ rsit @++ :)

maridre · Answer 8 · Posté le 13/09/2009 à 06:37:15

Salut Dédétraqué, voilà le résultat : Logfile of random's system information tool 1.06 (written by random/random) Run by Nous FGR at 2009-09-13 08:28:48 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 System drive C: has 82 GB (56%) free of 148 GB Total RAM: 3071 MB (44% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:28:59, on 13/09/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe C:\Garmin\gStart.exe D:\scrap\CRSSupervisor.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\IncrediMail\bin\IMApp.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\IncrediMail\bin\IncMail.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Program Files\Steam\Steam.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Windows\system32\conime.exe C:\Windows\system32\taskeng.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Windows\System32\mobsync.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Users\Nous FGR\Desktop\RSIT.exe C:\Program Files\trend micro\Nous FGR.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - D:\sauvegarde D\Logiciel\COPERNIC\Copernic Agent\Copernic Agent\CopernicAgentExt.dll O4 - HKLM\..\Run: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXBYtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\RunOnce: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: "D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: C:\Garmin\gStart.exe O4 - Global Startup: Craft ROBO Status Supervisor.lnk = ? O4 - Global Startup: Empowering Technology Launcher.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\SAUVEG~1\Logiciel\COPERNIC\COPERN~1\COPERN~2\COPERN~1.EXE O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\SAUVEG~1\Logiciel\COPERNIC\COPERN~1\COPERN~2\COPERN~1.EXE O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - D:\SAUVEG~1\Logiciel\COPERNIC\COPERN~1\COPERN~2\COPERN~1.EXE O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O13 - Gopher Prefix: O15 - Trusted Zone: www.consoclicker.com O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe O23 - Service: Google Update Service (gupdate1c98d03c3a6bf83) (gupdate1c98d03c3a6bf83) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LXBYCustomerConnect - Unknown owner - C:\Windows\system32\spool\DRIVERS\W32X86\3\\LXBYserv.exe O23 - Service: lxby_device - - C:\Windows\system32\lxbycoms.exe O23 - Service: NMSAccessU - Unknown owner - D:\sauvegarde D\Logiciel\GRAVEUR\CDBurnerXP\NMSAccessU.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: TomTomHOMEService - TomTom - D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 8722 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Google Software Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\User_Feed_Synchronization-{1BF66506-F350-4D54-BFE4-EB11557426CC}.job ======Registry dump====== Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Spybot-S&D IE Protection - D:\SAUVEG~1\Logiciel\espion\SPYBOT~1\SDHelper.dll Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll {0BF43445-2F28-4351-9252-17FE6E806AA0} {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - D:\sauvegarde D\Logiciel\COPERNIC\Copernic Agent\Copernic Agent\CopernicAgentExt.dll "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe "LXBYCATS"=rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXBYtime.dll,_RunDLLEntry@16 "Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe "IncrediMail"=C:\Program Files\IncrediMail\bin\IncMail.exe "ehTray.exe"=C:\Windows\ehome\ehTray.exe "TomTomHOME.exe"=D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe "gStart"=C:\Garmin\gStart.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe D:\IGN\DAEMON Tools Lite\daemon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\QTTask.exe c:\program files\steam\steam.exe D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMERunner.exe D:\APPARE~1\Maeva\VOLUME~1\SPUVOL~1.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Craft ROBO Status Supervisor.lnk - D:\scrap\CRSSupervisor.exe Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 "NoDrives"=0 "NoDrives"= "BindDirectlyToPropertySetStorage"= shell\AutoRun\command - G:\setupSNK.exe ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2009-09-13 08:28:48 ----D---- C:\rsit 2009-09-12 19:06:13 ----A---- C:\TB.txt 2009-09-12 19:05:47 ----D---- C:\ToolBar SD 2009-09-12 13:53:23 ----D---- C:\Program Files\Ad-Remover 2009-09-10 07:30:41 ----A---- C:\Windows\system32\javaws.exe 2009-09-10 07:30:41 ----A---- C:\Windows\system32\javaw.exe 2009-09-10 07:30:40 ----A---- C:\Windows\system32\java.exe 2009-09-10 04:49:38 ----A---- C:\Windows\system32\jscript.dll 2009-09-10 04:49:29 ----A---- C:\Windows\system32\TCPSVCS.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\ROUTE.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\NETSTAT.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\netiohlp.dll 2009-09-10 04:49:29 ----A---- C:\Windows\system32\netevent.dll 2009-09-10 04:49:29 ----A---- C:\Windows\system32\MRINFO.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\HOSTNAME.EXE 2009-09-10 04:49:29 ----A---- C:\Windows\system32\finger.exe 2009-09-10 04:49:29 ----A---- C:\Windows\system32\ARP.EXE 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlansvc.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlansec.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlanmsm.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\wlanapi.dll 2009-09-10 04:49:18 ----A---- C:\Windows\system32\L2SecHC.dll 2009-09-10 04:49:15 ----A---- C:\Windows\system32\WMVCORE.DLL 2009-09-10 04:49:15 ----A---- C:\Windows\system32\mf.dll 2009-09-06 19:48:00 ----D---- C:\Program Files\gPotato.eu 2009-09-03 16:38:09 ----D---- C:\Program Files\Dofus 2009-09-02 18:10:59 ----D---- C:\Program Files\mIRC 2009-09-02 09:12:04 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll 2009-09-02 09:12:04 ----A---- C:\Windows\system32\Apphlpdm.dll 2009-08-31 11:12:55 ----D---- C:\Users\Nous FGR\AppData\Roaming\Mumble 2009-08-27 01:29:10 ----D---- C:\Users\Nous FGR\AppData\Roaming\teamspeak2 2009-08-27 01:29:01 ----D---- C:\Program Files\Teamspeak2_RC2 2009-08-26 13:20:49 ----A---- C:\Windows\system32\tzres.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\wdigest.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\schannel.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\msv1_0.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\lsasrv.dll 2009-08-24 23:30:35 ----A---- C:\Windows\system32\kerberos.dll 2009-08-24 23:30:34 ----A---- C:\Windows\system32\secur32.dll 2009-08-24 23:30:34 ----A---- C:\Windows\system32\lsass.exe ======List of files/folders modified in the last 1 months====== 2009-09-13 08:28:59 ----D---- C:\Windows\Prefetch 2009-09-13 08:28:51 ----D---- C:\Windows\Temp 2009-09-13 08:28:50 ----D---- C:\Program Files\trend micro 2009-09-13 02:48:03 ----SHD---- C:\System Volume Information 2009-09-13 01:04:20 ----D---- C:\Windows\Tasks 2009-09-13 01:04:12 ----D---- C:\ProgramData\Google Updater 2009-09-13 01:00:23 ----D---- C:\Program Files\Steam 2009-09-13 00:16:22 ----D---- C:\Windows\system32\drivers 2009-09-12 21:25:57 ----D---- C:\Program Files\Mozilla Firefox 2009-09-12 21:22:05 ----RD---- C:\Program Files 2009-09-12 21:21:36 ----HD---- C:\ProgramData 2009-09-12 20:17:36 ----D---- C:\Windows\System32 2009-09-12 20:17:36 ----D---- C:\Windows\inf 2009-09-12 20:17:36 ----A---- C:\Windows\system32\PerfStringBackup.INI 2009-09-12 19:11:56 ----D---- C:\Windows\system32\Tasks 2009-09-12 13:48:08 ----D---- C:\ProgramData\Spybot - Search & Destroy 2009-09-12 07:31:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-09-11 03:26:30 ----D---- C:\Windows\rescache 2009-09-11 03:21:41 ----D---- C:\Windows\winsxs 2009-09-11 03:11:45 ----D---- C:\Program Files\Lx_cats 2009-09-11 03:10:16 ----D---- C:\Program Files\Microsoft Silverlight 2009-09-11 03:09:10 ----D---- C:\Windows\system32\fr-FR 2009-09-11 03:01:02 ----D---- C:\Windows\Debug 2009-09-11 03:00:59 ----D---- C:\Windows\system32\catroot 2009-09-11 03:00:57 ----D---- C:\Windows\system32\catroot2 2009-09-11 03:00:56 ----D---- C:\Program Files\Windows Mail 2009-09-11 03:00:51 ----SHD---- C:\Windows\Installer 2009-09-11 03:00:33 ----D---- C:\Windows\ehome 2009-09-10 13:44:07 ----SD---- C:\Windows\Downloaded Program Files 2009-09-10 13:44:06 ----AD---- C:\Windows 2009-09-10 13:44:05 ----D---- C:\Windows\BDOSCAN8 2009-09-10 07:30:39 ----D---- C:\Program Files\Java 2009-09-08 08:59:13 ----D---- C:\Users\Nous FGR\AppData\Roaming\dvdcss 2009-09-07 14:24:17 ----D---- C:\Program Files\Common Files\Steam 2009-09-03 11:23:48 ----D---- C:\Program Files\Acer GameZone 2009-09-03 03:05:52 ----D---- C:\Windows\AppPatch 2009-09-02 18:08:05 ----D---- C:\Program Files\Incredijeux 2009-08-28 23:38:20 ----A---- C:\Windows\system32\mrt.exe 2009-08-26 13:20:29 ----D---- C:\Program Files\Internet Explorer 2009-08-14 03:09:18 ----D---- C:\Program Files\Windows Media Player ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys R2 tvicport;tvicport; \??\C:\Windows\system32\drivers\tvicport.sys R2 zntport;zntport; \??\C:\Windows\system32\drivers\zntport.sys R3 fbxusb;FreeBox USB Network Adapter; C:\Windows\system32\DRIVERS\fbxusb.sys R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys S3 arnqk0j4;arnqk0j4; C:\Windows\system32\drivers\arnqk0j4.sys S3 catchme;catchme; \??\C:\Users\NOUSFG~1\AppData\Local\Temp\catchme.sys S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys S3 NVHDA;Service for NVIDIA HDMI Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys S3 optousb;OPTO ELECTRONICS optousb; C:\Windows\system32\DRIVERS\optousb.sys S3 optovcm;OPTO ELECTRONICS optovcm; C:\Windows\system32\DRIVERS\optovcm.sys S3 se58bus;Sony Ericsson Device 088 driver (WDM); C:\Windows\system32\DRIVERS\se58bus.sys S3 se58mdfl;Sony Ericsson Device 088 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\se58mdfl.sys S3 se58mdm;Sony Ericsson Device 088 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\se58mdm.sys S3 se58mgmt;Sony Ericsson Device 088 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\se58mgmt.sys S3 se58nd5;Sony Ericsson Device 088 USB Ethernet Emulation SEMC58 (NDIS); C:\Windows\system32\DRIVERS\se58nd5.sys S3 se58obex;Sony Ericsson Device 088 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\se58obex.sys S3 se58unic;Sony Ericsson Device 088 USB Ethernet Emulation SEMC58 (WDM); C:\Windows\system32\DRIVERS\se58unic.sys S3 Ser2pl;SAGEM USB-Serial; C:\Windows\system32\DRIVERS\ser2pl.sys S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ssm_bus.sys S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\Windows\system32\DRIVERS\ssm_mdfl.sys S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\Windows\system32\DRIVERS\ssm_mdm.sys S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys S3 WSVD;WSVD; \??\C:\Windows\system32\drivers\WSVD.sys S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys S4 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iastor.sys S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe R2 AcerMemUsageCheckService;ePerformance Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe R2 eDataSecurity Service;eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe R2 eSettingsService;eSettings Service; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe R2 lxby_device;lxby_device; C:\Windows\system32\lxbycoms.exe R2 NMSAccessU;NMSAccessU; D:\sauvegarde D\Logiciel\GRAVEUR\CDBurnerXP\NMSAccessU.exe R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe R2 TomTomHOMEService;TomTomHOMEService; D:\sauvegarde D\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe S2 gupdate1c98d03c3a6bf83;Google Update Service (gupdate1c98d03c3a6bf83); C:\Program Files\Google\Update\GoogleUpdate.exe S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S2 LXBYCustomerConnect;LXBYCustomerConnect; C:\Windows\system32\spool\DRIVERS\W32X86\3\\LXBYserv.exe S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe S3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe -----------------EOF----------------- Merci de ta patience

dédétraqué · Answer 9 · Posté le 13/09/2009 à 15:41:57

Salut maridre Clique droit sur le raccourci d' HijackThis sur ton Bureau et choisir exécuter en tant qu'administrateur , clique sur Do a scan system only coche la case devant la(les) ligne(s) suivante(s) si présente(s) Si plus de raccourci sur le bureau, il ce trouve ici : R3 - Default URLSearchHook is missing O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O4 - HKLM\..\Run: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - Global Startup: Craft ROBO Status Supervisor.lnk = ? O4 - Global Startup: Empowering Technology Launcher.lnk = ? - Ferme les fenêtres en cours sauf HijackThis, clique sur Fix checked - Quitte HijackThis ------- Télécharge OTM (de Old_Timer) sur le bureau : http://oldtimer.geekstogo.com/OTM.exe Double-clique sur OTM.exe sur le bureau - Assure toi que la case Unregister Dll's and Ocx's soit bien cochée - Copie le texte qui se trouve en citation et colle le dans le cadre de gauche de OTM nommé Paste Instructions for Items to be Moved :processes explorer.exe :services npggsvc catchme :commands - Clique sur MoveIt! pour lancer la suppression. - Ferme OTM Ton PC va redémarrer pour finir la suppression, si il ne le fais pas lui-même, redémarre le. Poste le rapport de OTMoveIt qui se trouve dans C:\_OTM\MovedFiles. @++ :)

maridre · Answer 10 · Posté le 13/09/2009 à 18:58:18

maridre

Je n'ai pas hijackthis sur le bureau ni sur l'ordi........

dédétraqué · Answer 11 · Posté le 13/09/2009 à 19:01:32

dédétraqué

Profil : Equipe sécurité

Célèbre sur tout le forum (de 30 000 à 99 999 messages postés)

Salut maridre

J'ai oublié de mettre le lien, il se trouve ici:
C:\Program Files\trend micro\Nous FGR.exe

@++

maridre · Answer 12 · Posté le 13/09/2009 à 19:15:41

Voila le nouveau rapport : All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== SERVICES/DRIVERS ========== Service\Driver npggsvc not found. Unable to delete service\driver keynpggsvc. Service\Driver catchme not found. Unable to delete service\driver keycatchme. ========== COMMANDS ========== User: All Users User: Default ->Temp folder emptied: 0 bytes File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SI6G4GUY\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU08OXCI\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G00XMA31\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8GY72ZJC\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SI6G4GUY\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU08OXCI\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G00XMA31\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8GY72ZJC\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be deleted on reboot. File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Users\Default User\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes User: Nous FGR ->Temp folder emptied: 11216684 bytes ->Temporary Internet Files folder emptied: 29770962 bytes ->Java cache emptied: 87610447 bytes ->FireFox cache emptied: 109194023 bytes ->Google Chrome cache emptied: 6053089 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes RecycleBin emptied: 49639 bytes Total Files Cleaned = 232,66 mb OTM by OldTimer - Version 3.0.0.6 log created on 09132009_210929

dédétraqué · Answer 13 · Posté le 13/09/2009 à 19:50:22

Salut maridre Mettre MalwareByte's Anti-Malware à jour --- - Redémarre en mode sans échec : Au redémarrage de ton PC tapote sur la touche F8 ou F5 , sur l'écran suivant déplace toi avec les flèches de direction et choisis Mode sans échec. Choisis ta session habituelle et non la session Administrateur --- - Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau. - Sélectionne Exécuter un examen complet si ce n'est pas déjà fait - clique sur Rechercher - Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok - Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le. - Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection - Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport. Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok Tutoriel pour MalwareByte's ici : http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php @++ :)

maridre · Answer 14 · Posté le 14/09/2009 à 06:01:44

maridre

Bonjour Dédétraqué, Aucun objet détecté par MBT en mode S/Echec.

dédétraqué · Answer 15 · Posté le 14/09/2009 à 20:50:52

Salut maridre Important Désactive ton Antivirus avant le scan en ligne : http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm Faire un scan avec Nod32 en ligne (il faut utiliser Internet Explorer ) ici : http://www.eset-nod32.fr/scanner.html Dans le bas de la page clique sur Scanner en ligne > Dans la nouvelle page, coche la case devant OUI, j'accepte les termes du contrat de licence et clique sur Start pour débuter. Dans la nouvelle page(qui est assez longue a charger) tu auras une alerte pour la barre d'information, clique sur Fermé . Maintenant faire un clique droit dans la barre d'information en jaune dans le haut de la page, et clique sur Installer le contrôle ActiveX . Une boite d'information va s'ouvrir, clique sur Installer Dans la nouvelle page clique en bas sur Démarrer , le téléchargement de la base des signatures de virus va débuter. Après le scan du PC va débuter, patience le temps du scan, ne pas faire de navigation durant le scan, on a désactivé l'Antivirus. Une fois le scan fini, cliqué sur Terminé et fermé la page. Ouvrir l'explorateur Windows et retrouver le rapport qui est dans ce répertoire : C:\Program Files\ESET\ESET Online Scanner\ log.txt Copie/colle le contenue de ce rapport log.txt @++ :)

maridre · Answer 16 · Posté le 15/09/2009 à 11:02:45

maridre

Le rapport à l'air OK :

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK

dédétraqué · Answer 17 · Posté le 15/09/2009 à 21:27:50

dédétraqué

Profil : Equipe sécurité

Salut maridre

Il n'est pas complet, avait t-il trouvé quelque chose?

@++

maridre · Answer 18 · Posté le 16/09/2009 à 05:41:35

Non il n'a rien trouvé de plus - il n'y a que 02 lignes dans le rapport - Je vais le recommencer - Cette nuit entre 23h18 à 23h22 ==> 21 messages retournés et entre 04h50 et 04h54 ==> 19 messages Je refais le scan -

maridre · Answer 19 · Posté le 16/09/2009 à 18:47:14

"""ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK""" et voila ce qu'il a trouvé en faisant résultat de l'analyse : """C:\Users\Nous FGR\AppData\Roaming\Desktopicon\eBayShortcuts.exe une variante de Win32/Agent.QBA cheval de troie nettoyé par suppression - mis en quarantaine""" Je te laisse la main !

dédétraqué · Answer 20 · Posté le 16/09/2009 à 21:59:32

dédétraqué

Profil : Equipe sécurité

Salut maridre

As-tu bien changé mot de passe et question secrète?

Refais le de nouveau

@++

maridre · Answer 21 · Posté le 17/09/2009 à 11:00:09

maridre

Bonjour Dédétraqué,
Mot de passe et question secrète : Fait et refait :super:

dédétraqué · Answer 22 · Posté le 17/09/2009 à 22:23:47

dédétraqué

Profil : Equipe sécurité

Salut maridre

Ok, tiens moi au courant au cours des prochains jours.

@++

maridre · Answer 23 · Posté le 18/09/2009 à 05:30:31

maridre

ok et merci pour tout - :hello: