01net    Web


Actuellement en ligne : 381 Utilisateurs dont 53 dans Sécurité, virus et assimilés >S'inscrire      >S'identifier      >Recherche      >Aide  
modéré par A.Ouloube, naheulbeuk, Mérillym, bibou0007, Anthony10, Malekal_morte, IL-MAFIOSO  
01net > Forum de 01net > Sécurité, virus et assimilés > Trojan et spywares
> Publicités envahissantes
Passionné(e) d'internet, de logiciels, de forums ? 01net recrute...
Auteur
Message
 
<     1       >
marcozero
  
   
      ?   @     Posté le 14/05/2008 11:37:24  
Voter pour ce message
Bonjour,
Depuis quelques jours des pages de pub s'affichent sur mon bureau alors que je ne suis même pas sur internet. J'ai scanné à plusieures reprises le pc (adaware, spybot, et bien sur mc afee) sans grands résultats, la suppression des malwares ne servant pas à grand chose. Ce qui me sidère est que je n'utilise que firefox, et que les pages de pubs sont en IE.
Merci d'avance, prêt à envoyer le rapport
bibou0007
  team sécurité
  :-)
      ?   ^   @     Posté le 14/05/2008 11:49:35  
Voter pour ce message
bonjour
Télécharge navilog1 de (IL MAFIOSO)
lien et tuto ici
suis les indications et poste le rapport dans ton prochain message.

-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!
marcozero
  
   
      ?   @     Posté le 14/05/2008 14:50:44  
Voter pour ce message
Well, il m'est impossible d'installer complètement ce programme, mc afee semble l'avoir bloqué. Une solution alternative ?
bibou0007
  team sécurité
  :-)
      ?   ^   @     Posté le 14/05/2008 15:24:30  
Voter pour ce message
re

sur le tuto que je t ai filé ou on c'est donné tand de mal il y as ecris
Fixnavilog est détecté par certains antivirus (faux positif) dans ce cas là désactive ton antivirus pendant la procédure



alors desinstale navilog et retelecharge le le en désactivant ton antivirus pendant la procedure
-->Message édité par bibou0007 le 14/05/2008 15:25:31<--
-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!
marcozero
  
   
      ?   @     Posté le 14/05/2008 19:11:39  
Voter pour ce message
Et voilà :

Search Navipromo version 3.5.7 commencé le 14/05/2008 à 18:54:07,76

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Robert ..."

Mise à jour le 11.05.2008 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Robert ...\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\Marc\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\Philippe\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Robert ...\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\Marc\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\Philippe\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Robert ...\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\Marc\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\Philippe\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Robert ...\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Marc\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Philippe\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Robert ...\locals~1\applic~1" :


* Dans "C:\DOCUME~1\Marc\locals~1\applic~1" :


* Dans "C:\DOCUME~1\Philippe\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 14/05/2008 à 19:03:12,64 ***
bibou0007
  team sécurité
  :-)
      ?   ^   @     Posté le 14/05/2008 20:23:04  
Voter pour ce message
non y a rien ici desinstale le et supprime le dans c programe file!

Si tu es sous vista desactive l UAC ‘’ pour xp passé a la suite ‘’ tuto desactivation de l UAC
Télécharge Lop S&D.exe sur ton Bureau. tuto lop S&D
http://eric.71.mespages.googlepages.com/LopSD.exe
• Double-clique dessus pour lancer l'installation
• Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
• Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
• Patiente jusqu'à la fin du scan
• Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!
marcozero
  
   
      ?   @     Posté le 15/05/2008 11:07:23  
Voter pour ce message
Le problème des pages pubs, qui s'était fait discret hier, est réapparu ce matin.

Voilà le rapport demandé :


-----------------------[ Lop S&D 4.2.0-8 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Robert ... ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 15/05/2008 | 10:48:06,51 ] [ PC : PC959529904209 ]
[ MAJ : 11-05-2008 | 18:25 ]

-------------[ Listing des dossiers dans Application Data ]------------

[14/02/2008|16:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/01/2006|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[02/07/2007|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[06/10/2006|00:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[15/12/2005|02:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DataViz
[17/08/2004|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[24/01/2008|18:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ezsid.dat
[15/12/2005|02:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotSync
[15/06/2007|11:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[23/05/2005|04:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqwmi
[27/03/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[11/05/2008|08:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[23/05/2005|04:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[11/05/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[11/01/2008|12:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[11/05/2008|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/05/2007|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[17/11/2007|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[29/06/2007|15:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[23/05/2005|04:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[23/05/2005|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[24/08/2007|00:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[19/10/2007|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[24/01/2008|18:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[16/01/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[13/05/2008|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[03/02/2007|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[02/05/2008|10:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
[26/12/2005|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[25/12/2005|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[23/05/2005|04:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[17/08/2004|13:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[23/05/2005|11:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[23/05/2005|04:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/05/2005|04:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[30/08/2007|09:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[07/11/2007|09:11] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor

[18/01/2007|19:32] C:\DOCUME~1\Marc\APPLIC~1\Adobe
[18/01/2007|19:37] C:\DOCUME~1\Marc\APPLIC~1\AdobeUM
[23/05/2005|04:36] C:\DOCUME~1\Marc\APPLIC~1\Apple Computer
[17/08/2004|13:06] C:\DOCUME~1\Marc\APPLIC~1\desktop.ini
[16/01/2007|19:32] C:\DOCUME~1\Marc\APPLIC~1\HotSync
[11/07/2007|10:20] C:\DOCUME~1\Marc\APPLIC~1\HP
[23/05/2005|11:45] C:\DOCUME~1\Marc\APPLIC~1\Identities
[16/01/2007|19:31] C:\DOCUME~1\Marc\APPLIC~1\Logitech
[16/01/2007|19:40] C:\DOCUME~1\Marc\APPLIC~1\Macromedia
[11/07/2007|10:26] C:\DOCUME~1\Marc\APPLIC~1\Microsoft
[16/01/2007|19:33] C:\DOCUME~1\Marc\APPLIC~1\Mozilla
[16/01/2007|19:31] C:\DOCUME~1\Marc\APPLIC~1\PC Suite
[17/01/2007|16:13] C:\DOCUME~1\Marc\APPLIC~1\Real
[19/05/2007|18:18] C:\DOCUME~1\Marc\APPLIC~1\SiteAdvisor
[17/01/2007|18:01] C:\DOCUME~1\Marc\APPLIC~1\Sun

[23/05/2005|03:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[27/12/2005|23:16] C:\DOCUME~1\Philippe\APPLIC~1\Adobe
[23/05/2005|04:36] C:\DOCUME~1\Philippe\APPLIC~1\Apple Computer
[17/08/2004|13:06] C:\DOCUME~1\Philippe\APPLIC~1\desktop.ini
[24/12/2005|10:02] C:\DOCUME~1\Philippe\APPLIC~1\HotSync
[23/05/2005|11:45] C:\DOCUME~1\Philippe\APPLIC~1\Identities
[24/12/2005|10:02] C:\DOCUME~1\Philippe\APPLIC~1\Logitech
[27/12/2005|23:30] C:\DOCUME~1\Philippe\APPLIC~1\Microsoft

[22/03/2008|10:01] C:\DOCUME~1\ROBERT~1\APPLIC~1\Adobe
[19/12/2006|16:14] C:\DOCUME~1\ROBERT~1\APPLIC~1\AdobeUM
[26/04/2008|01:05] C:\DOCUME~1\ROBERT~1\APPLIC~1\Apple Computer
[15/12/2005|04:19] C:\DOCUME~1\ROBERT~1\APPLIC~1\Arcsoft
[07/02/2007|12:25] C:\DOCUME~1\ROBERT~1\APPLIC~1\Copernic
[24/06/2006|17:39] C:\DOCUME~1\ROBERT~1\APPLIC~1\Creative
[09/01/2008|21:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\DataLayer
[17/08/2004|13:06] C:\DOCUME~1\ROBERT~1\APPLIC~1\desktop.ini
[02/05/2008|10:53] C:\DOCUME~1\ROBERT~1\APPLIC~1\facejumpway
[15/12/2005|05:59] C:\DOCUME~1\ROBERT~1\APPLIC~1\FotoWire
[15/04/2006|09:11] C:\DOCUME~1\ROBERT~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
[12/05/2006|22:57] C:\DOCUME~1\ROBERT~1\APPLIC~1\Google
[02/01/2006|14:51] C:\DOCUME~1\ROBERT~1\APPLIC~1\Help
[13/11/2006|10:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\HelpFilesUpdatePatch_HELPFILEREPLACE.log
[13/11/2006|10:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\HelpFilesUpdatePatch_PRINTHELPWRAPPER.log
[23/01/2006|14:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\Hewlett-PackardHP Photosmart 2700 series1135451304_API.log
[23/01/2006|14:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\Hewlett-PackardHP Photosmart 2700 series1135451304_PROTOCOL.log
[23/01/2006|14:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\Hewlett-PackardHP Photosmart 2700 series1135451304_UI.log
[15/12/2005|02:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\HotSync
[23/01/2006|14:21] C:\DOCUME~1\ROBERT~1\APPLIC~1\HP
[15/03/2006|11:10] C:\DOCUME~1\ROBERT~1\APPLIC~1\HPSU_48BitScanUpdate.log
[23/05/2005|11:45] C:\DOCUME~1\ROBERT~1\APPLIC~1\Identities
[30/09/2006|10:36] C:\DOCUME~1\ROBERT~1\APPLIC~1\IDS_COMPANY
[24/06/2006|17:07] C:\DOCUME~1\ROBERT~1\APPLIC~1\InterTrust
[05/01/2006|09:32] C:\DOCUME~1\ROBERT~1\APPLIC~1\InterVideo
[11/05/2008|11:00] C:\DOCUME~1\ROBERT~1\APPLIC~1\Lavasoft
[15/12/2005|02:34] C:\DOCUME~1\ROBERT~1\APPLIC~1\Leadertech
[15/12/2005|02:01] C:\DOCUME~1\ROBERT~1\APPLIC~1\Logitech
[21/12/2005|20:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\Macromedia
[02/03/2008|20:31] C:\DOCUME~1\ROBERT~1\APPLIC~1\Microsoft
[24/01/2008|12:44] C:\DOCUME~1\ROBERT~1\APPLIC~1\Mozilla
[11/05/2008|09:04] C:\DOCUME~1\ROBERT~1\APPLIC~1\Nokia
[28/01/2006|02:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\OLYMPUS
[15/04/2006|09:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
[15/04/2006|09:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
[15/04/2006|09:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_InstantShareJPG.log
[15/04/2006|09:12] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_IZClosingDiscError.log
[15/05/2008|01:28] C:\DOCUME~1\ROBERT~1\APPLIC~1\PC Suite
[17/01/2007|19:31] C:\DOCUME~1\ROBERT~1\APPLIC~1\Real
[08/02/2007|23:31] C:\DOCUME~1\ROBERT~1\APPLIC~1\SiteAdvisor
[15/05/2008|10:17] C:\DOCUME~1\ROBERT~1\APPLIC~1\Skype
[15/05/2008|09:18] C:\DOCUME~1\ROBERT~1\APPLIC~1\skypePM
[25/12/2005|19:55] C:\DOCUME~1\ROBERT~1\APPLIC~1\Sonic
[17/10/2007|11:42] C:\DOCUME~1\ROBERT~1\APPLIC~1\Sowedoo Software
[26/01/2006|13:39] C:\DOCUME~1\ROBERT~1\APPLIC~1\Sun
[03/02/2007|13:06] C:\DOCUME~1\ROBERT~1\APPLIC~1\Symantec
[15/01/2006|16:07] C:\DOCUME~1\ROBERT~1\APPLIC~1\Template
[24/01/2008|12:44] C:\DOCUME~1\ROBERT~1\APPLIC~1\Thunderbird
[26/12/2005|17:32] C:\DOCUME~1\ROBERT~1\APPLIC~1\ubi.com
[15/04/2006|09:10] C:\DOCUME~1\ROBERT~1\APPLIC~1\Update_HP_RedboxHprblog_HPSU.log
[11/11/2006|18:28] C:\DOCUME~1\ROBERT~1\APPLIC~1\vlc
[08/03/2006|02:33] C:\DOCUME~1\ROBERT~1\APPLIC~1\wklnhst.dat

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[15/05/2008 10:00][--ah-----] C:\WINDOWS\tasks\B0F3BBE991882A55.job
[21/04/2008 15:14][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[15/05/2008 01:00][--a------] C:\WINDOWS\tasks\McDefragTask.job
[12/05/2008 10:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[15/05/2008 09:13][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 10:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

B0F3BBE991882A55.job <--> c:\docume~1\robert~1\applic~1\faceju~1\seeknurbfirst.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[14/02/2008|16:03] C:\Program Files\Adobe
[21/04/2008|15:14] C:\Program Files\Apple Software Update
[23/05/2005|04:19] C:\Program Files\ATI Technologies
[02/01/2006|00:19] C:\Program Files\Belkin
[22/03/2008|16:58] C:\Program Files\BitRoll
[13/11/2006|23:27] C:\Program Files\BSD Concept
[25/01/2008|17:38] C:\Program Files\CCleaner
[23/05/2005|11:45] C:\Program Files\ComPlus Applications
[23/05/2005|02:51] C:\Program Files\CONEXANT
[07/02/2007|12:25] C:\Program Files\Copernic Agent
[15/12/2005|03:42] C:\Program Files\CosmoSoftware
[24/06/2006|17:11] C:\Program Files\Creative
[17/11/2007|02:23] C:\Program Files\DIFX
[15/12/2005|02:48] C:\Program Files\directx
[15/12/2007|01:07] C:\Program Files\Documents To Go
[14/01/2006|15:49] C:\Program Files\Easy Internet signup
[01/05/2007|21:35] C:\Program Files\e-Carte Bleue
[02/05/2008|10:52] C:\Program Files\facejumpway
[20/01/2006|16:57] C:\Program Files\FDD + FMD Combo Reader
[15/05/2008|02:15] C:\Program Files\Fichiers communs
[20/02/2008|12:52] C:\Program Files\Google
[26/12/2005|17:22] C:\Program Files\Happyneuron
[26/12/2005|10:06] C:\Program Files\Heredis 8
[13/03/2006|15:23] C:\Program Files\Hewlett-Packard
[16/01/2006|13:44] C:\Program Files\Hp
[15/12/2005|05:41] C:\Program Files\HPQ
[13/11/2007|11:53] C:\Program Files\InstallShield Installation Information
[23/05/2005|03:58] C:\Program Files\Intel
[08/04/2008|22:49] C:\Program Files\Internet Explorer
[23/05/2005|04:30] C:\Program Files\InterVideo
[18/04/2008|10:08] C:\Program Files\Iomega
[14/04/2008|15:36] C:\Program Files\iPod
[14/04/2008|15:37] C:\Program Files\iTunes
[21/03/2008|00:09] C:\Program Files\Java
[15/12/2005|13:20] C:\Program Files\Larousse
[11/05/2008|11:00] C:\Program Files\Lavasoft
[15/12/2005|05:59] C:\Program Files\Logitech
[02/10/2006|01:15] C:\Program Files\Ma‹do Production
[31/01/2006|03:40] C:\Program Files\Maxtor
[11/05/2008|07:48] C:\Program Files\McAfee
[03/02/2007|13:14] C:\Program Files\McAfee.com
[23/05/2005|04:37] C:\Program Files\Messenger
[29/12/2005|19:38] C:\Program Files\Micro Application
[18/05/2007|23:12] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[23/05/2005|11:45] C:\Program Files\microsoft frontpage
[16/10/2007|11:20] C:\Program Files\Microsoft Money 2005
[15/12/2005|01:34] C:\Program Files\Microsoft Office
[15/12/2005|01:34] C:\Program Files\Microsoft Visual Studio
[23/05/2005|04:22] C:\Program Files\Microsoft Works
[15/12/2005|01:33] C:\Program Files\Microsoft.NET
[26/12/2005|10:22] C:\Program Files\Mindscape
[20/08/2007|16:48] C:\Program Files\Movie Maker
[15/05/2008|10:05] C:\Program Files\Mozilla Firefox
[27/04/2008|15:42] C:\Program Files\Mozilla Thunderbird
[23/05/2005|11:45] C:\Program Files\MSN
[23/05/2005|11:45] C:\Program Files\MSN Gaming Zone
[17/01/2007|18:18] C:\Program Files\MSN Messenger
[15/12/2005|04:35] C:\Program Files\MSXML 4.0
[17/01/2007|00:06] C:\Program Files\MUSICMATCH
[15/05/2008|02:11] C:\Program Files\Navilog1
[23/05/2005|11:45] C:\Program Files\NetMeeting
[15/05/2008|02:15] C:\Program Files\Nokia
[15/12/2005|05:27] C:\Program Files\OLYMPUS
[23/05/2005|11:45] C:\Program Files\Online Services
[20/08/2007|16:48] C:\Program Files\Outlook Express
[14/01/2006|10:43] C:\Program Files\Overland
[28/03/2008|01:57] C:\Program Files\palmOne
[11/05/2008|08:17] C:\Program Files\PC Connectivity Solution
[12/10/2007|11:25] C:\Program Files\PDFCreator
[19/10/2007|17:33] C:\Program Files\pdfsam
[20/02/2008|12:53] C:\Program Files\Picasa2
[15/12/2005|05:26] C:\Program Files\PIXELA
[14/04/2008|15:32] C:\Program Files\QuickTime
[17/01/2007|16:10] C:\Program Files\Real
[15/12/2005|06:51] C:\Program Files\ROUTE66
[23/05/2005|04:34] C:\Program Files\Services en ligne
[20/12/2007|10:19] C:\Program Files\SiteAdvisor
[24/01/2008|18:01] C:\Program Files\Skype
[23/05/2005|04:30] C:\Program Files\Sonic
[11/05/2008|10:58] C:\Program Files\Spybot - Search & Destroy
[23/05/2005|04:30] C:\Program Files\Synaptics
[26/12/2005|17:32] C:\Program Files\ubi.com
[08/03/2006|11:38] C:\Program Files\UBISOFT
[23/05/2005|11:45] C:\Program Files\Uninstall Information
[11/11/2006|18:25] C:\Program Files\VideoLAN
[23/04/2008|02:40] C:\Program Files\Votre sant‚ au quotidien
[01/02/2006|23:26] C:\Program Files\Wanadoo Jeux
[11/11/2006|18:11] C:\Program Files\Windows Media Connect 2
[11/11/2006|18:11] C:\Program Files\Windows Media Player
[23/05/2005|11:45] C:\Program Files\Windows NT
[23/05/2005|11:45] C:\Program Files\WindowsUpdate
[15/12/2005|06:05] C:\Program Files\WinZip
[23/05/2005|11:45] C:\Program Files\xerox
[26/04/2008|00:59] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[14/02/2008|16:04] C:\Program Files\Fichiers communs\Adobe
[12/01/2006|23:49] C:\Program Files\Fichiers communs\Adobe Systems Shared
[02/07/2007|12:17] C:\Program Files\Fichiers communs\Apple
[07/02/2007|12:25] C:\Program Files\Fichiers communs\Copernic
[15/12/2005|02:36] C:\Program Files\Fichiers communs\DataViz
[15/12/2005|01:34] C:\Program Files\Fichiers communs\DESIGNER
[15/12/2005|05:59] C:\Program Files\Fichiers communs\FotoWire
[15/12/2005|02:11] C:\Program Files\Fichiers communs\Hewlett-Packard
[15/06/2007|10:54] C:\Program Files\Fichiers communs\HP
[23/05/2005|04:30] C:\Program Files\Fichiers communs\InstallShield
[23/05/2005|04:11] C:\Program Files\Fichiers communs\Java
[23/05/2005|04:47] C:\Program Files\Fichiers communs\LightScribe
[15/12/2005|05:57] C:\Program Files\Fichiers communs\Logitech
[14/11/2007|20:25] C:\Program Files\Fichiers communs\McAfee
[30/12/2005|00:56] C:\Program Files\Fichiers communs\Micro Application Shared
[17/02/2007|10:57] C:\Program Files\Fichiers communs\Microsoft Shared
[23/05/2005|11:45] C:\Program Files\Fichiers communs\MSSoap
[15/05/2008|02:15] C:\Program Files\Fichiers communs\Nokia
[01/02/2006|23:26] C:\Program Files\Fichiers communs\Oberon Media
[23/05/2005|11:45] C:\Program Files\Fichiers communs\ODBC
[15/05/2008|02:15] C:\Program Files\Fichiers communs\PCSuite
[26/12/2005|17:32] C:\Program Files\Fichiers communs\PocketSoft
[17/01/2007|16:11] C:\Program Files\Fichiers communs\Real
[23/05/2005|11:45] C:\Program Files\Fichiers communs\Services
[24/01/2008|18:01] C:\Program Files\Fichiers communs\Skype
[15/06/2007|10:55] C:\Program Files\Fichiers communs\Sonic Shared
[23/05/2005|11:45] C:\Program Files\Fichiers communs\SpeechEngines
[23/05/2005|04:30] C:\Program Files\Fichiers communs\SureThing Shared
[05/02/2007|13:57] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|19:01] C:\Program Files\Fichiers communs\System
[23/05/2005|04:29] C:\Program Files\Fichiers communs\TiVo Shared
[11/05/2008|10:57] C:\Program Files\Fichiers communs\Wise Installation Wizard
[17/01/2007|16:11] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 93

iexplore.exe ~ [2412]
iexplore.exe ~ [3940]

----------------------[ Recherche avec S_Lop ]---------------------

C:\DOCUME~1\ROBERT~1\APPLIC~1\FACEJU~1
C:\DOCUME~1\ROBERT~1\APPLIC~1\FACEJU~1\BodyBendTick.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\FACEJU~1\cwxzrymx.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\FACEJU~1\gndmzhor.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\FACEJU~1\seek nurb first.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\cast love.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1
C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\BodyBendTick.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\cwxzrymx.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\gndmzhor.exe
C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\seek nurb first.exe
C:\Program Files\faceju~1
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BitRoll
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BitRoll\BitRoll.lnk
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BitRoll\Uninstall BitRoll.lnk
C:\Program Files\BitRoll
C:\Program Files\BitRoll\BitRoll.exe
C:\Program Files\BitRoll\minime.exe
C:\Program Files\BitRoll\settings.ini
C:\Program Files\BitRoll\settings.stp
C:\Program Files\BitRoll\SkinCrafterDll.dll
C:\Program Files\BitRoll\Skins
C:\Program Files\BitRoll\state.dht
C:\Program Files\BitRoll\TorrentManager.dll
C:\Program Files\BitRoll\unins000.dat
C:\Program Files\BitRoll\unins000.exe
C:\WINDOWS\Tasks\B0F3BBE991882A55.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\pile bias real]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\ROBERT~1\\APPLIC~1\\FACEJU~1\\BodyBendTick.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HoleBib"="C:\\DOCUME~1\\ROBERT~1\\APPLIC~1\\FACEJU~1\\BodyBendTick.exe"
"HoleBib"="C:\\DOCUME~1\\ROBERT~1\\APPLIC~1\\FACEJU~1\\BodyBendTick.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"close surf mail dupe"="C:\\Documents and Settings\\All Users\\Application Data\\Tick Find Close Surf\\cast love.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 74 ( 70 ## added by CiD )

/!\ 3 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-15 10:49:50
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

/!\ [Fich:56][Doss:9] C:\DOCUME~1\ROBERT~1\LOCALS~1\Temp
/!\ [Fich:19][Doss:0] C:\DOCUME~1\ROBERT~1\Cookies
/!\ [Fich:301][Doss:7] C:\DOCUME~1\ROBERT~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 10:51:03,65 ]----------------------
bibou0007
  team sécurité
  :-)
      ?   ^   @     Posté le 15/05/2008 12:07:56  
Voter pour ce message
c est bon j ai trouvé ton infection!
Relance Lop S&D
• Choisis cette fois ci l'Option 2 (Suppression)
• Ne ferme pas la fenêtre lors de la suppression !
• Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!
marcozero
  
   
      ?   @     Posté le 15/05/2008 14:27:02  
Voter pour ce message
Nouveau rapport après suppression. J'espère que cet OK ...

-----------------------[ Lop S&D 4.2.0-8 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Robert ... ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 15/05/2008 | 13:31:48,93 ] [ PC : PC959529904209 ]
[ MAJ : 11-05-2008 | 18:25 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\cast love.exe
Supprimé! - C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\BodyBendTick.exe
Supprimé! - C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\cwxzrymx.exe
Supprimé! - C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\gndmzhor.exe
Supprimé! - C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1\seek nurb first.exe
Supprimé! - C:\Program Files\BitRoll\BitRoll.exe
Supprimé! - C:\Program Files\BitRoll\minime.exe
Supprimé! - C:\Program Files\BitRoll\settings.ini
Supprimé! - C:\Program Files\BitRoll\settings.stp
Supprimé! - C:\Program Files\BitRoll\SkinCrafterDll.dll
Supprimé! - C:\Program Files\BitRoll\Skins
Supprimé! - C:\Program Files\BitRoll\state.dht
Supprimé! - C:\Program Files\BitRoll\TorrentManager.dll
Supprimé! - C:\Program Files\BitRoll\unins000.dat
Supprimé! - C:\Program Files\BitRoll\unins000.exe
Supprimé! - C:\WINDOWS\Tasks\B0F3BBE991882A55.job
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
Supprimé! - C:\DOCUME~1\ROBERT~1\APPLIC~1\faceju~1
Supprimé! - C:\Program Files\faceju~1
Supprimé! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BitRoll
Supprimé! - C:\Program Files\BitRoll
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[14/02/2008|16:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/01/2006|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[02/07/2007|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[06/10/2006|00:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[15/12/2005|02:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DataViz
[17/08/2004|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[24/01/2008|18:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ezsid.dat
[15/12/2005|02:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotSync
[15/06/2007|11:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[23/05/2005|04:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqwmi
[27/03/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[11/05/2008|08:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[23/05/2005|04:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[11/05/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[11/01/2008|12:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[11/05/2008|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/05/2007|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[17/11/2007|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[29/06/2007|15:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[23/05/2005|04:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[23/05/2005|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[24/08/2007|00:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[19/10/2007|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[24/01/2008|18:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[16/01/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[13/05/2008|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[03/02/2007|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[26/12/2005|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[25/12/2005|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[23/05/2005|04:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[17/08/2004|13:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[23/05/2005|11:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[23/05/2005|04:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/05/2005|04:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[30/08/2007|09:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[07/11/2007|09:11] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor

[18/01/2007|19:32] C:\DOCUME~1\Marc\APPLIC~1\Adobe
[18/01/2007|19:37] C:\DOCUME~1\Marc\APPLIC~1\AdobeUM
[23/05/2005|04:36] C:\DOCUME~1\Marc\APPLIC~1\Apple Computer
[17/08/2004|13:06] C:\DOCUME~1\Marc\APPLIC~1\desktop.ini
[16/01/2007|19:32] C:\DOCUME~1\Marc\APPLIC~1\HotSync
[11/07/2007|10:20] C:\DOCUME~1\Marc\APPLIC~1\HP
[23/05/2005|11:45] C:\DOCUME~1\Marc\APPLIC~1\Identities
[16/01/2007|19:31] C:\DOCUME~1\Marc\APPLIC~1\Logitech
[16/01/2007|19:40] C:\DOCUME~1\Marc\APPLIC~1\Macromedia
[11/07/2007|10:26] C:\DOCUME~1\Marc\APPLIC~1\Microsoft
[16/01/2007|19:33] C:\DOCUME~1\Marc\APPLIC~1\Mozilla
[16/01/2007|19:31] C:\DOCUME~1\Marc\APPLIC~1\PC Suite
[17/01/2007|16:13] C:\DOCUME~1\Marc\APPLIC~1\Real
[19/05/2007|18:18] C:\DOCUME~1\Marc\APPLIC~1\SiteAdvisor
[17/01/2007|18:01] C:\DOCUME~1\Marc\APPLIC~1\Sun

[23/05/2005|03:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[27/12/2005|23:16] C:\DOCUME~1\Philippe\APPLIC~1\Adobe
[23/05/2005|04:36] C:\DOCUME~1\Philippe\APPLIC~1\Apple Computer
[17/08/2004|13:06] C:\DOCUME~1\Philippe\APPLIC~1\desktop.ini
[24/12/2005|10:02] C:\DOCUME~1\Philippe\APPLIC~1\HotSync
[23/05/2005|11:45] C:\DOCUME~1\Philippe\APPLIC~1\Identities
[24/12/2005|10:02] C:\DOCUME~1\Philippe\APPLIC~1\Logitech
[27/12/2005|23:30] C:\DOCUME~1\Philippe\APPLIC~1\Microsoft

[22/03/2008|10:01] C:\DOCUME~1\ROBERT~1\APPLIC~1\Adobe
[19/12/2006|16:14] C:\DOCUME~1\ROBERT~1\APPLIC~1\AdobeUM
[26/04/2008|01:05] C:\DOCUME~1\ROBERT~1\APPLIC~1\Apple Computer
[15/12/2005|04:19] C:\DOCUME~1\ROBERT~1\APPLIC~1\Arcsoft
[07/02/2007|12:25] C:\DOCUME~1\ROBERT~1\APPLIC~1\Copernic
[24/06/2006|17:39] C:\DOCUME~1\ROBERT~1\APPLIC~1\Creative
[09/01/2008|21:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\DataLayer
[17/08/2004|13:06] C:\DOCUME~1\ROBERT~1\APPLIC~1\desktop.ini
[15/12/2005|05:59] C:\DOCUME~1\ROBERT~1\APPLIC~1\FotoWire
[15/04/2006|09:11] C:\DOCUME~1\ROBERT~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
[12/05/2006|22:57] C:\DOCUME~1\ROBERT~1\APPLIC~1\Google
[02/01/2006|14:51] C:\DOCUME~1\ROBERT~1\APPLIC~1\Help
[13/11/2006|10:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\HelpFilesUpdatePatch_HELPFILEREPLACE.log
[13/11/2006|10:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\HelpFilesUpdatePatch_PRINTHELPWRAPPER.log
[23/01/2006|14:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\Hewlett-PackardHP Photosmart 2700 series1135451304_API.log
[23/01/2006|14:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\Hewlett-PackardHP Photosmart 2700 series1135451304_PROTOCOL.log
[23/01/2006|14:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\Hewlett-PackardHP Photosmart 2700 series1135451304_UI.log
[15/12/2005|02:22] C:\DOCUME~1\ROBERT~1\APPLIC~1\HotSync
[23/01/2006|14:21] C:\DOCUME~1\ROBERT~1\APPLIC~1\HP
[15/03/2006|11:10] C:\DOCUME~1\ROBERT~1\APPLIC~1\HPSU_48BitScanUpdate.log
[23/05/2005|11:45] C:\DOCUME~1\ROBERT~1\APPLIC~1\Identities
[30/09/2006|10:36] C:\DOCUME~1\ROBERT~1\APPLIC~1\IDS_COMPANY
[24/06/2006|17:07] C:\DOCUME~1\ROBERT~1\APPLIC~1\InterTrust
[05/01/2006|09:32] C:\DOCUME~1\ROBERT~1\APPLIC~1\InterVideo
[11/05/2008|11:00] C:\DOCUME~1\ROBERT~1\APPLIC~1\Lavasoft
[15/12/2005|02:34] C:\DOCUME~1\ROBERT~1\APPLIC~1\Leadertech
[15/12/2005|02:01] C:\DOCUME~1\ROBERT~1\APPLIC~1\Logitech
[21/12/2005|20:35] C:\DOCUME~1\ROBERT~1\APPLIC~1\Macromedia
[02/03/2008|20:31] C:\DOCUME~1\ROBERT~1\APPLIC~1\Microsoft
[24/01/2008|12:44] C:\DOCUME~1\ROBERT~1\APPLIC~1\Mozilla
[11/05/2008|09:04] C:\DOCUME~1\ROBERT~1\APPLIC~1\Nokia
[28/01/2006|02:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\OLYMPUS
[15/04/2006|09:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
[15/04/2006|09:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_HP_ISRegionListUpdatelog_HPSU.log
[15/04/2006|09:13] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_InstantShareJPG.log
[15/04/2006|09:12] C:\DOCUME~1\ROBERT~1\APPLIC~1\PatchUpdate_IZClosingDiscError.log
[15/05/2008|01:28] C:\DOCUME~1\ROBERT~1\APPLIC~1\PC Suite
[17/01/2007|19:31] C:\DOCUME~1\ROBERT~1\APPLIC~1\Real
[08/02/2007|23:31] C:\DOCUME~1\ROBERT~1\APPLIC~1\SiteAdvisor
[15/05/2008|13:27] C:\DOCUME~1\ROBERT~1\APPLIC~1\Skype
[15/05/2008|09:18] C:\DOCUME~1\ROBERT~1\APPLIC~1\skypePM
[25/12/2005|19:55] C:\DOCUME~1\ROBERT~1\APPLIC~1\Sonic
[17/10/2007|11:42] C:\DOCUME~1\ROBERT~1\APPLIC~1\Sowedoo Software
[26/01/2006|13:39] C:\DOCUME~1\ROBERT~1\APPLIC~1\Sun
[03/02/2007|13:06] C:\DOCUME~1\ROBERT~1\APPLIC~1\Symantec
[15/01/2006|16:07] C:\DOCUME~1\ROBERT~1\APPLIC~1\Template
[24/01/2008|12:44] C:\DOCUME~1\ROBERT~1\APPLIC~1\Thunderbird
[26/12/2005|17:32] C:\DOCUME~1\ROBERT~1\APPLIC~1\ubi.com
[15/04/2006|09:10] C:\DOCUME~1\ROBERT~1\APPLIC~1\Update_HP_RedboxHprblog_HPSU.log
[11/11/2006|18:28] C:\DOCUME~1\ROBERT~1\APPLIC~1\vlc
[08/03/2006|02:33] C:\DOCUME~1\ROBERT~1\APPLIC~1\wklnhst.dat

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[21/04/2008 15:14][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[15/05/2008 01:00][--a------] C:\WINDOWS\tasks\McDefragTask.job
[12/05/2008 10:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[15/05/2008 09:13][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 10:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[14/02/2008|16:03] C:\Program Files\Adobe
[21/04/2008|15:14] C:\Program Files\Apple Software Update
[23/05/2005|04:19] C:\Program Files\ATI Technologies
[02/01/2006|00:19] C:\Program Files\Belkin
[13/11/2006|23:27] C:\Program Files\BSD Concept
[25/01/2008|17:38] C:\Program Files\CCleaner
[23/05/2005|11:45] C:\Program Files\ComPlus Applications
[23/05/2005|02:51] C:\Program Files\CONEXANT
[07/02/2007|12:25] C:\Program Files\Copernic Agent
[15/12/2005|03:42] C:\Program Files\CosmoSoftware
[24/06/2006|17:11] C:\Program Files\Creative
[17/11/2007|02:23] C:\Program Files\DIFX
[15/12/2005|02:48] C:\Program Files\directx
[15/12/2007|01:07] C:\Program Files\Documents To Go
[14/01/2006|15:49] C:\Program Files\Easy Internet signup
[01/05/2007|21:35] C:\Program Files\e-Carte Bleue
[20/01/2006|16:57] C:\Program Files\FDD + FMD Combo Reader
[15/05/2008|02:15] C:\Program Files\Fichiers communs
[20/02/2008|12:52] C:\Program Files\Google
[26/12/2005|17:22] C:\Program Files\Happyneuron
[26/12/2005|10:06] C:\Program Files\Heredis 8
[13/03/2006|15:23] C:\Program Files\Hewlett-Packard
[16/01/2006|13:44] C:\Program Files\Hp
[15/12/2005|05:41] C:\Program Files\HPQ
[13/11/2007|11:53] C:\Program Files\InstallShield Installation Information
[23/05/2005|03:58] C:\Program Files\Intel
[08/04/2008|22:49] C:\Program Files\Internet Explorer
[23/05/2005|04:30] C:\Program Files\InterVideo
[18/04/2008|10:08] C:\Program Files\Iomega
[14/04/2008|15:36] C:\Program Files\iPod
[14/04/2008|15:37] C:\Program Files\iTunes
[21/03/2008|00:09] C:\Program Files\Java
[15/12/2005|13:20] C:\Program Files\Larousse
[11/05/2008|11:00] C:\Program Files\Lavasoft
[15/12/2005|05:59] C:\Program Files\Logitech
[02/10/2006|01:15] C:\Program Files\Ma‹do Production
[31/01/2006|03:40] C:\Program Files\Maxtor
[11/05/2008|07:48] C:\Program Files\McAfee
[03/02/2007|13:14] C:\Program Files\McAfee.com
[23/05/2005|04:37] C:\Program Files\Messenger
[29/12/2005|19:38] C:\Program Files\Micro Application
[18/05/2007|23:12] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[23/05/2005|11:45] C:\Program Files\microsoft frontpage
[16/10/2007|11:20] C:\Program Files\Microsoft Money 2005
[15/12/2005|01:34] C:\Program Files\Microsoft Office
[15/12/2005|01:34] C:\Program Files\Microsoft Visual Studio
[23/05/2005|04:22] C:\Program Files\Microsoft Works
[15/12/2005|01:33] C:\Program Files\Microsoft.NET
[26/12/2005|10:22] C:\Program Files\Mindscape
[20/08/2007|16:48] C:\Program Files\Movie Maker
[15/05/2008|13:28] C:\Program Files\Mozilla Firefox
[27/04/2008|15:42] C:\Program Files\Mozilla Thunderbird
[23/05/2005|11:45] C:\Program Files\MSN
[23/05/2005|11:45] C:\Program Files\MSN Gaming Zone
[17/01/2007|18:18] C:\Program Files\MSN Messenger
[15/12/2005|04:35] C:\Program Files\MSXML 4.0
[17/01/2007|00:06] C:\Program Files\MUSICMATCH
[15/05/2008|02:11] C:\Program Files\Navilog1
[23/05/2005|11:45] C:\Program Files\NetMeeting
[15/05/2008|02:15] C:\Program Files\Nokia
[15/12/2005|05:27] C:\Program Files\OLYMPUS
[23/05/2005|11:45] C:\Program Files\Online Services
[20/08/2007|16:48] C:\Program Files\Outlook Express
[14/01/2006|10:43] C:\Program Files\Overland
[28/03/2008|01:57] C:\Program Files\palmOne
[11/05/2008|08:17] C:\Program Files\PC Connectivity Solution
[12/10/2007|11:25] C:\Program Files\PDFCreator
[19/10/2007|17:33] C:\Program Files\pdfsam
[20/02/2008|12:53] C:\Program Files\Picasa2
[15/12/2005|05:26] C:\Program Files\PIXELA
[14/04/2008|15:32] C:\Program Files\QuickTime
[17/01/2007|16:10] C:\Program Files\Real
[15/12/2005|06:51] C:\Program Files\ROUTE66
[23/05/2005|04:34] C:\Program Files\Services en ligne
[20/12/2007|10:19] C:\Program Files\SiteAdvisor
[24/01/2008|18:01] C:\Program Files\Skype
[23/05/2005|04:30] C:\Program Files\Sonic
[11/05/2008|10:58] C:\Program Files\Spybot - Search & Destroy
[23/05/2005|04:30] C:\Program Files\Synaptics
[26/12/2005|17:32] C:\Program Files\ubi.com
[08/03/2006|11:38] C:\Program Files\UBISOFT
[23/05/2005|11:45] C:\Program Files\Uninstall Information
[11/11/2006|18:25] C:\Program Files\VideoLAN
[23/04/2008|02:40] C:\Program Files\Votre sant‚ au quotidien
[01/02/2006|23:26] C:\Program Files\Wanadoo Jeux
[11/11/2006|18:11] C:\Program Files\Windows Media Connect 2
[11/11/2006|18:11] C:\Program Files\Windows Media Player
[23/05/2005|11:45] C:\Program Files\Windows NT
[23/05/2005|11:45] C:\Program Files\WindowsUpdate
[15/12/2005|06:05] C:\Program Files\WinZip
[23/05/2005|11:45] C:\Program Files\xerox
[26/04/2008|00:59] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[14/02/2008|16:04] C:\Program Files\Fichiers communs\Adobe
[12/01/2006|23:49] C:\Program Files\Fichiers communs\Adobe Systems Shared
[02/07/2007|12:17] C:\Program Files\Fichiers communs\Apple
[07/02/2007|12:25] C:\Program Files\Fichiers communs\Copernic
[15/12/2005|02:36] C:\Program Files\Fichiers communs\DataViz
[15/12/2005|01:34] C:\Program Files\Fichiers communs\DESIGNER
[15/12/2005|05:59] C:\Program Files\Fichiers communs\FotoWire
[15/12/2005|02:11] C:\Program Files\Fichiers communs\Hewlett-Packard
[15/06/2007|10:54] C:\Program Files\Fichiers communs\HP
[23/05/2005|04:30] C:\Program Files\Fichiers communs\InstallShield
[23/05/2005|04:11] C:\Program Files\Fichiers communs\Java
[23/05/2005|04:47] C:\Program Files\Fichiers communs\LightScribe
[15/12/2005|05:57] C:\Program Files\Fichiers communs\Logitech
[14/11/2007|20:25] C:\Program Files\Fichiers communs\McAfee
[30/12/2005|00:56] C:\Program Files\Fichiers communs\Micro Application Shared
[17/02/2007|10:57] C:\Program Files\Fichiers communs\Microsoft Shared
[23/05/2005|11:45] C:\Program Files\Fichiers communs\MSSoap
[15/05/2008|02:15] C:\Program Files\Fichiers communs\Nokia
[01/02/2006|23:26] C:\Program Files\Fichiers communs\Oberon Media
[23/05/2005|11:45] C:\Program Files\Fichiers communs\ODBC
[15/05/2008|02:15] C:\Program Files\Fichiers communs\PCSuite
[26/12/2005|17:32] C:\Program Files\Fichiers communs\PocketSoft
[17/01/2007|16:11] C:\Program Files\Fichiers communs\Real
[23/05/2005|11:45] C:\Program Files\Fichiers communs\Services
[24/01/2008|18:01] C:\Program Files\Fichiers communs\Skype
[15/06/2007|10:55] C:\Program Files\Fichiers communs\Sonic Shared
[23/05/2005|11:45] C:\Program Files\Fichiers communs\SpeechEngines
[23/05/2005|04:30] C:\Program Files\Fichiers communs\SureThing Shared
[05/02/2007|13:57] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|19:01] C:\Program Files\Fichiers communs\System
[23/05/2005|04:29] C:\Program Files\Fichiers communs\TiVo Shared
[11/05/2008|10:57] C:\Program Files\Fichiers communs\Wise Installation Wizard
[17/01/2007|16:11] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 90

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-15 13:33:21
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

/!\ [Fich:51][Doss:9] C:\DOCUME~1\ROBERT~1\LOCALS~1\Temp
/!\ [Fich:22][Doss:0] C:\DOCUME~1\ROBERT~1\Cookies
/!\ [Fich:301][Doss:7] C:\DOCUME~1\ROBERT~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 13:34:51,15 ]----------------------
bibou0007
  team sécurité
  :-)
      ?   ^   @     Posté le 15/05/2008 14:32:07  
Voter pour ce message
ok as tu encore des pubs?

telecharge Malwarebytes Anti-Malware
lien et tuto
suis les indications et poste le rapport dans ton prochain message.
-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!
marcozero
  
   
      ?   @     Posté le 15/05/2008 16:42:17  
Voter pour ce message
Apparemment, le Pc est toujours infecté :

Malwarebytes' Anti-Malware 1.12
Version de la base de données: 752

Type de recherche: Examen complet (C:\|)
Eléments examinés: 182756
Temps écoulé: 1 hour(s), 43 minute(s), 7 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
bibou0007
  team sécurité
  :-)
      ?   ^   @     Posté le 15/05/2008 18:55:17  
Voter pour ce message
non c est juste des clef pas grave

mais recommence et applique les actions!!
-------
http://bibou0007.com/
-------
Il est plus simple d'infecter votre pc que de le désinfecter,pensez y.Ne pas cliquer ici!
<     1       >

01net > Forum de 01net > Sécurité, virus et assimilés > Trojan et spywares
> Publicités envahissantes

Aller à :

Page générée en : 0.138s - X2board 2.2

Nous contacter | Charte de confiance | Voir notice légale

Tous droits réservés © 1999 - 2008 Groupe Tests - 01net.


Sites du réseau 01net Network : 01net - 01men - Rmc.fr - Bfmtv.fr - Radiobfm.com - TousLesPodcasts - Micro Achat - Caractere.net -
Electronique.biz - Mesures.com - Transaction.fr

Emploi 
Rémunérations :
30 fiches salaires des métiers informatiques passées au crible  !
Bermudas
Shopping bermudas : une sélection en bleu, blanc ou noir pour compléter votre garde-robe estivale