|
|
Auteur
|
Message
|
1
|
|
|
|
bonjour
je voudrais savoir comment supprimer un virus publicitaire nommé cid qui ouvre
des fenetres publicitaires intempestives et change ma page google
merci d'avance pour votre réponce
-->Message édité par herve11 le 11/05/2008 17:05:08<--
|
|
|
|
|
bonjour,
télécharges lopxpMH2.zip:
http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip
* Dézippe-le (clic droit >> Extraire ici) et double clique sur le fichier lopxpMH.bat.
* Poste le contenu du rapport qui va s'ouvrir
|
|
|
|
|
|
c'est fait. il me marque acces refusé
|
|
|
|
|
|
|
|
|
ca aurait été bien de le préciser avant mais bon... 
Désactive l'UAC ( Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valide par OK , il te sera demandé de redémarrer , fais le )
Télécharge Lop S&D de Angeldark et Eric71 sur ton bureau.
Double-clique dessus pour lancer l'installation
Puis double-clique sur le raccourci Lop S&D présent sur ton bureau
Séléctionne la langue souhaitée, puis choisis l'Option 1 ( Recherche )
Patiente jusqu'à la fin du scan
Poste le rapport généré ( C:\lopR.txt )
( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide).
-->Message édité par naheulbeuk le 09/05/2008 17:48:06<--
|
|
|
|
|
-----------------------[ Lop S&D 4.2.0-7 XP/Vista ]---------------------
[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : herve ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 09/05/2008 | 18:30:21,51 ] [ PC : PC-DE-HERVE ]
[ MAJ : 06-05-2008 | 21:45 ]
[ UAC => 0 ]
-------------[ Listing des dossiers dans Application Data ]------------
[20/02/2008|17:32] C:\Users\herve\AppData\Roaming\Adobe\Flash Player
[04/12/2007|11:34] C:\Users\herve\AppData\Roaming\Adobe\Linguistics
[04/12/2007|11:33] C:\Users\herve\AppData\Roaming\Adobe\Acrobat
[04/12/2007|11:23] C:\Users\herve\AppData\Roaming\Adobe\ESD
[05/01/2008|16:31] C:\Users\herve\AppData\Roaming\ATI\ACE
[09/12/2007|16:50] C:\Users\herve\AppData\Roaming\AVS4YOU\AVSVideoConverter
[21/10/2007|09:31] C:\Users\herve\AppData\Roaming\CyberLink\PowerCinema
[03/04/2008|20:43] C:\Users\herve\AppData\Roaming\dvdcss\CACHEDIR.TAG
[03/04/2008|20:10] C:\Users\herve\AppData\Roaming\dvdcss\ETERNAL_SCN-2001052419542000-001f2d2250
[30/03/2008|23:39] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-354f010000
[30/03/2008|23:39] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-4f4c010000
[30/03/2008|23:31] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-3548010000
[30/03/2008|23:31] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-4f45010000
[24/02/2008|10:57] C:\Users\herve\AppData\Roaming\dvdcss\NATIONAL_TREASURE-2005031111524100-2e97321f26
[17/02/2008|21:20] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-222b010000
[17/02/2008|21:20] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-5228010000
[17/02/2008|13:52] C:\Users\herve\AppData\Roaming\dvdcss\PIRATES_DES_CARA-2004080113300000
[20/01/2008|17:15] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-c5e3620100
[20/01/2008|17:15] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-0000000000
[13/01/2008|20:01] C:\Users\herve\AppData\Roaming\dvdcss\LA_METHODE_CAUET-0000000000000000
[26/12/2007|00:15] C:\Users\herve\AppData\Roaming\dvdcss\MMFRA214_DES-2004081916153900-2e97321f49
[18/10/2007|17:23] C:\Users\herve\AppData\Roaming\Identities\{4A5CDBFC-A271-439B-9DF9-DF2E75B319CB}
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\inst.exe\inst.exe
[13/01/2008|19:05] C:\Users\herve\AppData\Roaming\InstallShield\ISEngine12.0
[23/04/2008|03:30] C:\Users\herve\AppData\Roaming\LimeWire\library.dat
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\filters.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\questions.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\tables.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\installation.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\mojito.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\limewire.props
[22/04/2008|18:52] C:\Users\herve\AppData\Roaming\LimeWire\spam.dat
[22/04/2008|18:52] C:\Users\herve\AppData\Roaming\LimeWire\gnutella.net
[22/04/2008|18:48] C:\Users\herve\AppData\Roaming\LimeWire\createtimes.cache
[10/02/2008|19:18] C:\Users\herve\AppData\Roaming\LimeWire\ttrees.cache
[10/02/2008|19:18] C:\Users\herve\AppData\Roaming\LimeWire\ttroot.cache
[10/02/2008|13:47] C:\Users\herve\AppData\Roaming\LimeWire\responses.cache
[10/02/2008|13:28] C:\Users\herve\AppData\Roaming\LimeWire\version.xml
[10/02/2008|13:28] C:\Users\herve\AppData\Roaming\LimeWire\simpp.xml
[10/02/2008|13:28] C:\Users\herve\AppData\Roaming\LimeWire\fileurns.cache
[10/02/2008|13:27] C:\Users\herve\AppData\Roaming\LimeWire\.AppSpecialShare
[10/02/2008|13:27] C:\Users\herve\AppData\Roaming\LimeWire\themes
[19/10/2007|14:46] C:\Users\herve\AppData\Roaming\Macromedia\Flash Player
[29/04/2008|21:26] C:\Users\herve\AppData\Roaming\Media Player Classic\default.mpcpl
[09/05/2008|17:30] C:\Users\herve\AppData\Roaming\Microsoft\Office
[09/05/2008|17:30] C:\Users\herve\AppData\Roaming\Microsoft\Templates
[09/05/2008|17:30] C:\Users\herve\AppData\Roaming\Microsoft\OneNote
[03/05/2008|12:08] C:\Users\herve\AppData\Roaming\Microsoft\digital locker
[25/04/2008|19:57] C:\Users\herve\AppData\Roaming\Microsoft\Crypto
[22/04/2008|07:26] C:\Users\herve\AppData\Roaming\Microsoft\Windows Photo Gallery
[20/04/2008|20:48] C:\Users\herve\AppData\Roaming\Microsoft\WLTB Custom Buttons
[20/04/2008|20:48] C:\Users\herve\AppData\Roaming\Microsoft\MSNLiveFav
[20/04/2008|20:45] C:\Users\herve\AppData\Roaming\Microsoft\MSN Messenger
[20/04/2008|20:44] C:\Users\herve\AppData\Roaming\Microsoft\IdentityCRL
[10/02/2008|16:50] C:\Users\herve\AppData\Roaming\Microsoft\Windows Media Encoder
[26/01/2008|20:38] C:\Users\herve\AppData\Roaming\Microsoft\eHome
[26/01/2008|18:49] C:\Users\herve\AppData\Roaming\Microsoft\Installer
[06/01/2008|15:00] C:\Users\herve\AppData\Roaming\Microsoft\MMC
[05/01/2008|16:28] C:\Users\herve\AppData\Roaming\Microsoft\Speech
[02/01/2008|17:50] C:\Users\herve\AppData\Roaming\Microsoft\Windows
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\UProof
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\Proof
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\Document Building Blocks
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\Word
[29/11/2007|17:51] C:\Users\herve\AppData\Roaming\Microsoft\Excel
[29/11/2007|17:51] C:\Users\herve\AppData\Roaming\Microsoft\AddIns
[23/11/2007|09:57] C:\Users\herve\AppData\Roaming\Microsoft\Internet Explorer
[20/11/2007|12:00] C:\Users\herve\AppData\Roaming\Microsoft\Network
[10/11/2007|11:25] C:\Users\herve\AppData\Roaming\Microsoft\HTML Help
[18/10/2007|19:06] C:\Users\herve\AppData\Roaming\Microsoft\OIS
[18/10/2007|17:23] C:\Users\herve\AppData\Roaming\Microsoft\SystemCertificates
[18/10/2007|17:23] C:\Users\herve\AppData\Roaming\Microsoft\Protect
[18/10/2007|17:22] C:\Users\herve\AppData\Roaming\Microsoft\Credentials
[15/03/2008|18:42] C:\Users\herve\AppData\Roaming\Nokia\NSLauncher
[15/03/2008|18:35] C:\Users\herve\AppData\Roaming\Nokia\Nseries Update Manager
[15/03/2008|19:11] C:\Users\herve\AppData\Roaming\Nokia Multimedia Player\Recent.npl
[17/03/2008|00:36] C:\Users\herve\AppData\Roaming\NSeries\PCSync
[09/05/2008|18:25] C:\Users\herve\AppData\Roaming\OpenOffice.org2\.lock
[25/04/2008|02:18] C:\Users\herve\AppData\Roaming\OpenOffice.org2\user
[15/03/2008|18:42] C:\Users\herve\AppData\Roaming\PC Suite\Settings
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\pcouffin.cat\pcouffin.cat
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\pcouffin.inf\pcouffin.inf
[06/04/2008|15:41] C:\Users\herve\AppData\Roaming\pcouffin.log\pcouffin.log
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\pcouffin.sys\pcouffin.sys
[04/03/2008|00:29] C:\Users\herve\AppData\Roaming\Playwize\Stats.pwd
[04/03/2008|00:29] C:\Users\herve\AppData\Roaming\Playwize\System2.cfg
[03/03/2008|23:40] C:\Users\herve\AppData\Roaming\Playwize\Profile.dat
[20/01/2008|19:20] C:\Users\herve\AppData\Roaming\Playwize\Character.dat
[20/01/2008|19:14] C:\Users\herve\AppData\Roaming\Playwize\system.cfg
[26/11/2007|20:26] C:\Users\herve\AppData\Roaming\PnkBstrK.sys\PnkBstrK.sys
[15/04/2008|03:29] C:\Users\herve\AppData\Roaming\Printer.ini\Printer.ini
[28/10/2007|10:52] C:\Users\herve\AppData\Roaming\SecuROM\UserData
[18/11/2007|14:41] C:\Users\herve\AppData\Roaming\UserTile.png\UserTile.png
[08/05/2008|09:13] C:\Users\herve\AppData\Roaming\vlc\vlcrc
[05/04/2008|04:16] C:\Users\herve\AppData\Roaming\vlc\cache
[15/04/2008|03:29] C:\Users\herve\AppData\Roaming\Vso\PhotoDVD.log
[15/04/2008|03:29] C:\Users\herve\AppData\Roaming\Vso\PhotoDVD_crash.log
[12/04/2008|03:55] C:\Users\herve\AppData\Roaming\Vso\ImageResizer.log
[06/04/2008|15:46] C:\Users\herve\AppData\Roaming\Vso\PhotoPlayer.log
[19/10/2006|18:54] C:\Users\herve\AppData\Roaming\Vso\resizer_profiles.ini
----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------
[02/05/2008 21:31][--a------] C:\Windows\tasks\Norton Internet Security - Analyse systŠme complŠte - herve.job
[09/05/2008 18:23][--ah-----] C:\Windows\tasks\SA.DAT
[09/05/2008 18:22][--a------] C:\Windows\tasks\SCHEDLGU.TXT
------[ Listing des dossiers dans C:\ProgramData ]------
[09/05/2008|18:24] C:\ProgramData\.zreglib
[06/05/2007|21:22] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[03/04/2008|22:14] C:\ProgramData\Adobe
[15/03/2008|19:10] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[09/12/2007|16:50] C:\ProgramData\AVS4YOU
[18/10/2007|17:18] C:\ProgramData\Bureau
[26/01/2008|20:41] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[13/04/2008|23:41] C:\ProgramData\DVD Shrink
[08/12/2007|18:25] C:\ProgramData\Elaborate Bytes
[09/05/2008|16:15] C:\ProgramData\eMule
[28/11/2007|14:20] C:\ProgramData\eSobi
[18/10/2007|17:18] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[02/01/2008|20:46] C:\ProgramData\InstallShield
[25/04/2008|20:19] C:\ProgramData\iso eq save.pzesz
[27/04/2008|12:43] C:\ProgramData\LightScribe
[18/10/2007|17:18] C:\ProgramData\Menu D‚marrer
[06/01/2008|14:51] C:\ProgramData\Microsoft
[04/05/2008|07:30] C:\ProgramData\Microsoft Help
[18/10/2007|17:18] C:\ProgramData\ModŠles
[15/03/2008|18:43] C:\ProgramData\Nokia
[15/03/2008|18:42] C:\ProgramData\PC Suite
[10/02/2008|16:07] C:\ProgramData\Philips Intelligent Agent
[08/12/2007|16:22] C:\ProgramData\SlySoft
[08/05/2008|11:19] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[05/05/2008|02:13] C:\ProgramData\Symantec
[02/11/2006|15:02] C:\ProgramData\Templates
[25/04/2008|20:19] C:\ProgramData\Tool Eggs Less City
[29/04/2008|22:09] C:\ProgramData\Upload Bags Bags.06969mb
[29/04/2008|15:14] C:\ProgramData\Upload Bags Bags.1torqv
[29/04/2008|16:19] C:\ProgramData\Upload Bags Bags.3hhk0xg
[29/04/2008|19:14] C:\ProgramData\Upload Bags Bags.5gwv6bc
[29/04/2008|11:14] C:\ProgramData\Upload Bags Bags.7v82z
[29/04/2008|11:35] C:\ProgramData\Upload Bags Bags.8r1v2wi
[29/04/2008|21:03] C:\ProgramData\Upload Bags Bags.9qkm7
[29/04/2008|18:30] C:\ProgramData\Upload Bags Bags.9ugsehh
[29/04/2008|17:03] C:\ProgramData\Upload Bags Bags.aduk8
[29/04/2008|13:03] C:\ProgramData\Upload Bags Bags.d5pp8qt
[29/04/2008|18:52] C:\ProgramData\Upload Bags Bags.e3f6i2d
[29/04/2008|14:08] C:\ProgramData\Upload Bags Bags.f4il6h
[29/04/2008|17:47] C:\ProgramData\Upload Bags Bags.fbvd8i0
[29/04/2008|10:30] C:\ProgramData\Upload Bags Bags.gw0sjjd
[29/04/2008|20:20] C:\ProgramData\Upload Bags Bags.ihmlx
[29/04/2008|19:58] C:\ProgramData\Upload Bags Bags.kmmlp3z
[29/04/2008|13:46] C:\ProgramData\Upload Bags Bags.m7sah63
[29/04/2008|12:19] C:\ProgramData\Upload Bags Bags.n9iqd
[29/04/2008|14:30] C:\ProgramData\Upload Bags Bags.nps5u
[29/04/2008|21:47] C:\ProgramData\Upload Bags Bags.opr1sui
[29/04/2008|13:25] C:\ProgramData\Upload Bags Bags.orfxx9l
[25/04/2008|20:19] C:\ProgramData\Upload Bags Bags.q05atpw
[25/04/2008|20:19] C:\ProgramData\Upload Bags Bags.qsbmdq
[29/04/2008|17:25] C:\ProgramData\Upload Bags Bags.r26w2v9
[29/04/2008|19:36] C:\ProgramData\Upload Bags Bags.ug55kxt
[29/04/2008|10:52] C:\ProgramData\Upload Bags Bags.usmuw
[29/04/2008|18:09] C:\ProgramData\Upload Bags Bags.usr09ay
[29/04/2008|14:52] C:\ProgramData\Upload Bags Bags.vrjew
[29/04/2008|16:41] C:\ProgramData\Upload Bags Bags.vt5n925
[29/04/2008|20:42] C:\ProgramData\Upload Bags Bags.vunrs6e
[29/04/2008|11:57] C:\ProgramData\Upload Bags Bags.w4m2j1
[29/04/2008|21:25] C:\ProgramData\Upload Bags Bags.y7qjm
[29/04/2008|15:58] C:\ProgramData\Upload Bags Bags.ylhja7
[29/04/2008|12:41] C:\ProgramData\Upload Bags Bags.z31vj
[29/04/2008|15:36] C:\ProgramData\Upload Bags Bags.zscuah
[23/04/2008|14:52] C:\ProgramData\WLInstaller
[18/10/2007|18:23] C:\ProgramData\Yahoo! Companion
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[06/05/2007|21:33] C:\Program Files\Acer Arcade Live
[04/06/2007|04:44] C:\Program Files\Acer Inc
[06/05/2007|21:22] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[04/12/2007|11:29] C:\Program Files\Adobe
[08/05/2008|13:32] C:\Program Files\Alwil Software
[04/06/2007|04:39] C:\Program Files\ATI
[04/06/2007|04:41] C:\Program Files\ATI Technologies
[10/02/2008|17:29] C:\Program Files\AviSynth 2.5
[09/12/2007|16:49] C:\Program Files\AVS4YOU
[27/03/2008|21:36] C:\Program Files\Codemasters
[20/04/2008|20:38] C:\Program Files\Common Files
[26/01/2008|18:47] C:\Program Files\Creative Labs
[11/04/2008|21:54] C:\Program Files\Cyanide
[06/05/2007|21:30] C:\Program Files\CyberLink
[22/11/2007|11:44] C:\Program Files\desktop.ini
[08/05/2008|12:44] C:\Program Files\DosPop Toolbar
[08/12/2007|19:38] C:\Program Files\DVD Shrink
[11/04/2008|21:50] C:\Program Files\EA GAMES
[11/04/2008|21:58] C:\Program Files\EA SPORTS
[10/02/2008|16:17] C:\Program Files\Elaborate Bytes
[06/05/2007|21:34] C:\Program Files\eSobi
[26/01/2008|18:49] C:\Program Files\FFVIII
[18/10/2007|17:18] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/01/2008|20:35] C:\Program Files\Hercules
[26/04/2008|10:26] C:\Program Files\InstallShield Installation Information
[19/04/2008|02:40] C:\Program Files\Internet Explorer
[10/02/2008|13:27] C:\Program Files\Java
[18/10/2007|18:23] C:\Program Files\K-Lite Codec Pack
[09/05/2008|17:38] C:\Program Files\Lopxp
[18/03/2008|19:44] C:\Program Files\Micro Application
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[06/05/2007|21:22] C:\Program Files\Microsoft Office
[20/04/2008|20:47] C:\Program Files\Microsoft SQL Server Compact Edition
[06/05/2007|21:22] C:\Program Files\Microsoft Works
[06/05/2007|21:20] C:\Program Files\Microsoft.NET
[02/11/2006|14:42] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[20/11/2007|13:28] C:\Program Files\MSXML 4.0
[06/05/2007|21:18] C:\Program Files\NewTech Infosystems
[15/03/2008|18:43] C:\Program Files\Nokia
[07/02/2008|19:09] C:\Program Files\Norton Internet Security
[24/04/2008|23:09] C:\Program Files\OpenOffice.org 2.4
[18/04/2008|17:15] C:\Program Files\Orange
[05/01/2008|17:51] C:\Program Files\OrangeHSS
[20/01/2008|19:20] C:\Program Files\PartoucheWize
[15/03/2008|18:39] C:\Program Files\PC Connectivity Solution
[10/02/2008|16:07] C:\Program Files\Philips Intelligent Agent
[06/04/2008|15:35] C:\Program Files\PhotoFiltre Studio
[20/10/2007|17:40] C:\Program Files\PlayOnline
[22/10/2007|07:14] C:\Program Files\QuickTime
[06/05/2007|21:05] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[10/02/2008|17:28] C:\Program Files\Ripp-it_AM
[11/04/2008|21:55] C:\Program Files\RTL Wintergames 2007
[09/05/2008|16:13] C:\Program Files\Runtime Software
[18/04/2008|17:04] C:\Program Files\SAGEM
[18/04/2008|17:04] C:\Program Files\Securitoo
[11/04/2008|21:58] C:\Program Files\SEGA
[08/12/2007|20:46] C:\Program Files\SlySoft
[08/05/2008|09:22] C:\Program Files\Spybot - Search & Destroy
[07/02/2008|18:57] C:\Program Files\Symantec
[08/05/2008|20:42] C:\Program Files\Trend Micro
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[06/04/2008|15:36] C:\Program Files\VCW VicMan's Photo Editor
[26/04/2008|10:26] C:\Program Files\VID_0E8F&PID_3020
[22/10/2007|07:28] C:\Program Files\VideoLAN
[06/04/2008|15:48] C:\Program Files\vso
[06/04/2008|15:36] C:\Program Files\Web Photo Album
[22/11/2007|11:41] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[22/11/2007|11:41] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[03/05/2008|11:56] C:\Program Files\Windows Live
[22/04/2008|02:15] C:\Program Files\Windows Live Toolbar
[19/04/2008|02:40] C:\Program Files\Windows Mail
[10/02/2008|16:46] C:\Program Files\Windows Media Components
[21/11/2007|09:13] C:\Program Files\Windows Media Player
[18/10/2007|17:18] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[15/01/2008|00:16] C:\Program Files\Windows Sidebar
[20/12/2007|11:14] C:\Program Files\WM Recorder 10.2
[18/10/2007|17:22] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Common Files ]------
[04/12/2007|11:29] C:\Program Files\Common Files\Adobe
[09/12/2007|16:49] C:\Program Files\Common Files\AVSMedia
[06/05/2007|21:20] C:\Program Files\Common Files\DESIGNER
[20/11/2007|11:54] C:\Program Files\Common Files\France Telecom
[02/01/2008|20:46] C:\Program Files\Common Files\InstallShield
[10/02/2008|13:18] C:\Program Files\Common Files\Java
[06/05/2007|21:17] C:\Program Files\Common Files\LightScribe
[04/05/2008|07:26] C:\Program Files\Common Files\microsoft shared
[06/05/2007|21:17] C:\Program Files\Common Files\muvee Technologies
[06/05/2007|21:18] C:\Program Files\Common Files\NewTech Infosystems
[15/03/2008|18:43] C:\Program Files\Common Files\Nokia
[15/03/2008|18:41] C:\Program Files\Common Files\PCSuite
[20/10/2007|17:40] C:\Program Files\Common Files\PlayOnline
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[07/02/2008|18:58] C:\Program Files\Common Files\Symantec Shared
[22/11/2007|11:41] C:\Program Files\Common Files\System
[20/04/2008|20:42] C:\Program Files\Common Files\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 92
iexplore.exe ~ [4092]
iexplore.exe ~ [172]
----------------------[ Recherche avec S_Lop ]---------------------
C:\ProgramData\iso eq save.pzesz
C:\ProgramData\Upload Bags Bags.06969mb
C:\ProgramData\Upload Bags Bags.1torqv
C:\ProgramData\Upload Bags Bags.3hhk0xg
C:\ProgramData\Upload Bags Bags.5gwv6bc
C:\ProgramData\Upload Bags Bags.7v82z
C:\ProgramData\Upload Bags Bags.8r1v2wi
C:\ProgramData\Upload Bags Bags.9qkm7
C:\ProgramData\Upload Bags Bags.9ugsehh
C:\ProgramData\Upload Bags Bags.aduk8
C:\ProgramData\Upload Bags Bags.d5pp8qt
C:\ProgramData\Upload Bags Bags.e3f6i2d
C:\ProgramData\Upload Bags Bags.f4il6h
C:\ProgramData\Upload Bags Bags.fbvd8i0
C:\ProgramData\Upload Bags Bags.gw0sjjd
C:\ProgramData\Upload Bags Bags.ihmlx
C:\ProgramData\Upload Bags Bags.kmmlp3z
C:\ProgramData\Upload Bags Bags.m7sah63
C:\ProgramData\Upload Bags Bags.n9iqd
C:\ProgramData\Upload Bags Bags.nps5u
C:\ProgramData\Upload Bags Bags.opr1sui
C:\ProgramData\Upload Bags Bags.orfxx9l
C:\ProgramData\Upload Bags Bags.q05atpw
C:\ProgramData\Upload Bags Bags.qsbmdq
C:\ProgramData\Upload Bags Bags.r26w2v9
C:\ProgramData\Upload Bags Bags.ug55kxt
C:\ProgramData\Upload Bags Bags.usmuw
C:\ProgramData\Upload Bags Bags.usr09ay
C:\ProgramData\Upload Bags Bags.vrjew
C:\ProgramData\Upload Bags Bags.vt5n925
C:\ProgramData\Upload Bags Bags.vunrs6e
C:\ProgramData\Upload Bags Bags.w4m2j1
C:\ProgramData\Upload Bags Bags.y7qjm
C:\ProgramData\Upload Bags Bags.ylhja7
C:\ProgramData\Upload Bags Bags.z31vj
C:\ProgramData\Upload Bags Bags.zscuah
C:\ProgramData\Upload Bags Bags.06969mb
C:\ProgramData\Upload Bags Bags.1torqv
C:\ProgramData\Upload Bags Bags.5gwv6bc
C:\ProgramData\Upload Bags Bags.7v82z
C:\ProgramData\Upload Bags Bags.8r1v2wi
C:\ProgramData\Upload Bags Bags.9ugsehh
C:\ProgramData\Upload Bags Bags.aduk8
C:\ProgramData\Upload Bags Bags.d5pp8qt
C:\ProgramData\Upload Bags Bags.e3f6i2d
C:\ProgramData\Upload Bags Bags.gw0sjjd
C:\ProgramData\Upload Bags Bags.kmmlp3z
C:\ProgramData\Upload Bags Bags.m7sah63
C:\ProgramData\Upload Bags Bags.opr1sui
C:\ProgramData\Upload Bags Bags.orfxx9l
C:\ProgramData\Upload Bags Bags.q05atpw
C:\ProgramData\Upload Bags Bags.r26w2v9
C:\ProgramData\Upload Bags Bags.ug55kxt
C:\ProgramData\Upload Bags Bags.usmuw
C:\ProgramData\Upload Bags Bags.usr09ay
C:\ProgramData\Upload Bags Bags.vrjew
C:\ProgramData\Upload Bags Bags.vt5n925
C:\ProgramData\Upload Bags Bags.vunrs6e
C:\ProgramData\Upload Bags Bags.w4m2j1
C:\ProgramData\Upload Bags Bags.y7qjm
C:\ProgramData\Upload Bags Bags.ylhja7
C:\ProgramData\Upload Bags Bags.zscuah
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\ProgramData\Tool Eggs Less City
C:\ProgramData\Tool Eggs Less City\Data body.exe
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-09 18:31:13
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
=> C:\Users\herve\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.iso
=> C:\Users\herve\AppData\Roaming\Microsoft\Windows\Recent\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.lnk
=> C:\Users\herve\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.iso
=> C:\Users\herve\AppData\Roaming\Microsoft\Windows\Recent\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.lnk
/!\ [Fich:649][Doss:111] C:\Users\herve\AppData\Local\Temp
/!\ [Fich:1031][Doss:1] C:\Users\herve\AppData\Roaming\MICROS~1\Windows\Cookies
/!\ [Fich:2539][Doss:15] C:\Users\herve\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[ UAC => 1 ]
--------------------[ Fin du rapport a 18:32:26,83 ]----------------------
oui désole de ne l'avoir pas préciser avant
|
|
|
|
|
re, 
évite les cracks/keygens etc... ils sont un gros vecteur d'infection !!!
Relance Lop S&D
Choisis cette fois ci l'Option 2 ( Suppression )
Ne ferme pas la fenêtre lors de la suppression !
Poste le rapport généré ( C:\lopR.txt )
(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)
|
|
|
|
|
voila le raport
-----------------------[ Lop S&D 4.2.0-7 XP/Vista ]---------------------
[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : herve ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 09/05/2008 | 18:50:59,57 ] [ PC : PC-DE-HERVE ]
[ MAJ : 06-05-2008 | 21:45 ]
[ UAC => 0 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Supprimé! - C:\ProgramData\Tool Eggs Less City\Data body.exe
Supprimé! - C:\ProgramData\iso eq save.pzesz
Supprimé! - C:\ProgramData\Upload Bags Bags.06969mb
Supprimé! - C:\ProgramData\Upload Bags Bags.1torqv
Supprimé! - C:\ProgramData\Upload Bags Bags.3hhk0xg
Supprimé! - C:\ProgramData\Upload Bags Bags.5gwv6bc
Supprimé! - C:\ProgramData\Upload Bags Bags.7v82z
Supprimé! - C:\ProgramData\Upload Bags Bags.8r1v2wi
Supprimé! - C:\ProgramData\Upload Bags Bags.9qkm7
Supprimé! - C:\ProgramData\Upload Bags Bags.9ugsehh
Supprimé! - C:\ProgramData\Upload Bags Bags.aduk8
Supprimé! - C:\ProgramData\Upload Bags Bags.d5pp8qt
Supprimé! - C:\ProgramData\Upload Bags Bags.e3f6i2d
Supprimé! - C:\ProgramData\Upload Bags Bags.f4il6h
Supprimé! - C:\ProgramData\Upload Bags Bags.fbvd8i0
Supprimé! - C:\ProgramData\Upload Bags Bags.gw0sjjd
Supprimé! - C:\ProgramData\Upload Bags Bags.ihmlx
Supprimé! - C:\ProgramData\Upload Bags Bags.kmmlp3z
Supprimé! - C:\ProgramData\Upload Bags Bags.m7sah63
Supprimé! - C:\ProgramData\Upload Bags Bags.n9iqd
Supprimé! - C:\ProgramData\Upload Bags Bags.nps5u
Supprimé! - C:\ProgramData\Upload Bags Bags.opr1sui
Supprimé! - C:\ProgramData\Upload Bags Bags.orfxx9l
Supprimé! - C:\ProgramData\Upload Bags Bags.q05atpw
Supprimé! - C:\ProgramData\Upload Bags Bags.qsbmdq
Supprimé! - C:\ProgramData\Upload Bags Bags.r26w2v9
Supprimé! - C:\ProgramData\Upload Bags Bags.ug55kxt
Supprimé! - C:\ProgramData\Upload Bags Bags.usmuw
Supprimé! - C:\ProgramData\Upload Bags Bags.usr09ay
Supprimé! - C:\ProgramData\Upload Bags Bags.vrjew
Supprimé! - C:\ProgramData\Upload Bags Bags.vt5n925
Supprimé! - C:\ProgramData\Upload Bags Bags.vunrs6e
Supprimé! - C:\ProgramData\Upload Bags Bags.w4m2j1
Supprimé! - C:\ProgramData\Upload Bags Bags.y7qjm
Supprimé! - C:\ProgramData\Upload Bags Bags.ylhja7
Supprimé! - C:\ProgramData\Upload Bags Bags.z31vj
Supprimé! - C:\ProgramData\Upload Bags Bags.zscuah
Supprimé! - C:\ProgramData\Tool Eggs Less City
Restauré! - Fichier Hosts
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[20/02/2008|17:32] C:\Users\herve\AppData\Roaming\Adobe\Flash Player
[04/12/2007|11:34] C:\Users\herve\AppData\Roaming\Adobe\Linguistics
[04/12/2007|11:33] C:\Users\herve\AppData\Roaming\Adobe\Acrobat
[04/12/2007|11:23] C:\Users\herve\AppData\Roaming\Adobe\ESD
[05/01/2008|16:31] C:\Users\herve\AppData\Roaming\ATI\ACE
[09/12/2007|16:50] C:\Users\herve\AppData\Roaming\AVS4YOU\AVSVideoConverter
[21/10/2007|09:31] C:\Users\herve\AppData\Roaming\CyberLink\PowerCinema
[03/04/2008|20:43] C:\Users\herve\AppData\Roaming\dvdcss\CACHEDIR.TAG
[03/04/2008|20:10] C:\Users\herve\AppData\Roaming\dvdcss\ETERNAL_SCN-2001052419542000-001f2d2250
[30/03/2008|23:39] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-354f010000
[30/03/2008|23:39] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-4f4c010000
[30/03/2008|23:31] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-3548010000
[30/03/2008|23:31] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-4f45010000
[24/02/2008|10:57] C:\Users\herve\AppData\Roaming\dvdcss\NATIONAL_TREASURE-2005031111524100-2e97321f26
[17/02/2008|21:20] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-222b010000
[17/02/2008|21:20] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-5228010000
[17/02/2008|13:52] C:\Users\herve\AppData\Roaming\dvdcss\PIRATES_DES_CARA-2004080113300000
[20/01/2008|17:15] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-c5e3620100
[20/01/2008|17:15] C:\Users\herve\AppData\Roaming\dvdcss\-0015001500180018-0000000000
[13/01/2008|20:01] C:\Users\herve\AppData\Roaming\dvdcss\LA_METHODE_CAUET-0000000000000000
[26/12/2007|00:15] C:\Users\herve\AppData\Roaming\dvdcss\MMFRA214_DES-2004081916153900-2e97321f49
[18/10/2007|17:23] C:\Users\herve\AppData\Roaming\Identities\{4A5CDBFC-A271-439B-9DF9-DF2E75B319CB}
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\inst.exe\inst.exe
[13/01/2008|19:05] C:\Users\herve\AppData\Roaming\InstallShield\ISEngine12.0
[23/04/2008|03:30] C:\Users\herve\AppData\Roaming\LimeWire\library.dat
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\filters.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\questions.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\tables.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\installation.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\mojito.props
[23/04/2008|01:41] C:\Users\herve\AppData\Roaming\LimeWire\limewire.props
[22/04/2008|18:52] C:\Users\herve\AppData\Roaming\LimeWire\spam.dat
[22/04/2008|18:52] C:\Users\herve\AppData\Roaming\LimeWire\gnutella.net
[22/04/2008|18:48] C:\Users\herve\AppData\Roaming\LimeWire\createtimes.cache
[10/02/2008|19:18] C:\Users\herve\AppData\Roaming\LimeWire\ttrees.cache
[10/02/2008|19:18] C:\Users\herve\AppData\Roaming\LimeWire\ttroot.cache
[10/02/2008|13:47] C:\Users\herve\AppData\Roaming\LimeWire\responses.cache
[10/02/2008|13:28] C:\Users\herve\AppData\Roaming\LimeWire\version.xml
[10/02/2008|13:28] C:\Users\herve\AppData\Roaming\LimeWire\simpp.xml
[10/02/2008|13:28] C:\Users\herve\AppData\Roaming\LimeWire\fileurns.cache
[10/02/2008|13:27] C:\Users\herve\AppData\Roaming\LimeWire\.AppSpecialShare
[10/02/2008|13:27] C:\Users\herve\AppData\Roaming\LimeWire\themes
[19/10/2007|14:46] C:\Users\herve\AppData\Roaming\Macromedia\Flash Player
[29/04/2008|21:26] C:\Users\herve\AppData\Roaming\Media Player Classic\default.mpcpl
[09/05/2008|17:30] C:\Users\herve\AppData\Roaming\Microsoft\Office
[09/05/2008|17:30] C:\Users\herve\AppData\Roaming\Microsoft\Templates
[09/05/2008|17:30] C:\Users\herve\AppData\Roaming\Microsoft\OneNote
[03/05/2008|12:08] C:\Users\herve\AppData\Roaming\Microsoft\digital locker
[25/04/2008|19:57] C:\Users\herve\AppData\Roaming\Microsoft\Crypto
[22/04/2008|07:26] C:\Users\herve\AppData\Roaming\Microsoft\Windows Photo Gallery
[20/04/2008|20:48] C:\Users\herve\AppData\Roaming\Microsoft\WLTB Custom Buttons
[20/04/2008|20:48] C:\Users\herve\AppData\Roaming\Microsoft\MSNLiveFav
[20/04/2008|20:45] C:\Users\herve\AppData\Roaming\Microsoft\MSN Messenger
[20/04/2008|20:44] C:\Users\herve\AppData\Roaming\Microsoft\IdentityCRL
[10/02/2008|16:50] C:\Users\herve\AppData\Roaming\Microsoft\Windows Media Encoder
[26/01/2008|20:38] C:\Users\herve\AppData\Roaming\Microsoft\eHome
[26/01/2008|18:49] C:\Users\herve\AppData\Roaming\Microsoft\Installer
[06/01/2008|15:00] C:\Users\herve\AppData\Roaming\Microsoft\MMC
[05/01/2008|16:28] C:\Users\herve\AppData\Roaming\Microsoft\Speech
[02/01/2008|17:50] C:\Users\herve\AppData\Roaming\Microsoft\Windows
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\UProof
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\Proof
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\Document Building Blocks
[12/12/2007|20:03] C:\Users\herve\AppData\Roaming\Microsoft\Word
[29/11/2007|17:51] C:\Users\herve\AppData\Roaming\Microsoft\Excel
[29/11/2007|17:51] C:\Users\herve\AppData\Roaming\Microsoft\AddIns
[23/11/2007|09:57] C:\Users\herve\AppData\Roaming\Microsoft\Internet Explorer
[20/11/2007|12:00] C:\Users\herve\AppData\Roaming\Microsoft\Network
[10/11/2007|11:25] C:\Users\herve\AppData\Roaming\Microsoft\HTML Help
[18/10/2007|19:06] C:\Users\herve\AppData\Roaming\Microsoft\OIS
[18/10/2007|17:23] C:\Users\herve\AppData\Roaming\Microsoft\SystemCertificates
[18/10/2007|17:23] C:\Users\herve\AppData\Roaming\Microsoft\Protect
[18/10/2007|17:22] C:\Users\herve\AppData\Roaming\Microsoft\Credentials
[15/03/2008|18:42] C:\Users\herve\AppData\Roaming\Nokia\NSLauncher
[15/03/2008|18:35] C:\Users\herve\AppData\Roaming\Nokia\Nseries Update Manager
[15/03/2008|19:11] C:\Users\herve\AppData\Roaming\Nokia Multimedia Player\Recent.npl
[17/03/2008|00:36] C:\Users\herve\AppData\Roaming\NSeries\PCSync
[09/05/2008|18:51] C:\Users\herve\AppData\Roaming\OpenOffice.org2\.lock
[25/04/2008|02:18] C:\Users\herve\AppData\Roaming\OpenOffice.org2\user
[15/03/2008|18:42] C:\Users\herve\AppData\Roaming\PC Suite\Settings
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\pcouffin.cat\pcouffin.cat
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\pcouffin.inf\pcouffin.inf
[06/04/2008|15:41] C:\Users\herve\AppData\Roaming\pcouffin.log\pcouffin.log
[06/04/2008|15:40] C:\Users\herve\AppData\Roaming\pcouffin.sys\pcouffin.sys
[04/03/2008|00:29] C:\Users\herve\AppData\Roaming\Playwize\Stats.pwd
[04/03/2008|00:29] C:\Users\herve\AppData\Roaming\Playwize\System2.cfg
[03/03/2008|23:40] C:\Users\herve\AppData\Roaming\Playwize\Profile.dat
[20/01/2008|19:20] C:\Users\herve\AppData\Roaming\Playwize\Character.dat
[20/01/2008|19:14] C:\Users\herve\AppData\Roaming\Playwize\system.cfg
[26/11/2007|20:26] C:\Users\herve\AppData\Roaming\PnkBstrK.sys\PnkBstrK.sys
[15/04/2008|03:29] C:\Users\herve\AppData\Roaming\Printer.ini\Printer.ini
[28/10/2007|10:52] C:\Users\herve\AppData\Roaming\SecuROM\UserData
[18/11/2007|14:41] C:\Users\herve\AppData\Roaming\UserTile.png\UserTile.png
[08/05/2008|09:13] C:\Users\herve\AppData\Roaming\vlc\vlcrc
[05/04/2008|04:16] C:\Users\herve\AppData\Roaming\vlc\cache
[15/04/2008|03:29] C:\Users\herve\AppData\Roaming\Vso\PhotoDVD.log
[15/04/2008|03:29] C:\Users\herve\AppData\Roaming\Vso\PhotoDVD_crash.log
[12/04/2008|03:55] C:\Users\herve\AppData\Roaming\Vso\ImageResizer.log
[06/04/2008|15:46] C:\Users\herve\AppData\Roaming\Vso\PhotoPlayer.log
[19/10/2006|18:54] C:\Users\herve\AppData\Roaming\Vso\resizer_profiles.ini
----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------
[02/05/2008 21:31][--a------] C:\Windows\tasks\Norton Internet Security - Analyse systŠme complŠte - herve.job
[09/05/2008 18:49][--ah-----] C:\Windows\tasks\SA.DAT
[09/05/2008 18:48][--a------] C:\Windows\tasks\SCHEDLGU.TXT
------[ Listing des dossiers dans C:\ProgramData ]------
[09/05/2008|18:50] C:\ProgramData\.zreglib
[06/05/2007|21:22] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[03/04/2008|22:14] C:\ProgramData\Adobe
[15/03/2008|19:10] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[09/12/2007|16:50] C:\ProgramData\AVS4YOU
[18/10/2007|17:18] C:\ProgramData\Bureau
[26/01/2008|20:41] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[13/04/2008|23:41] C:\ProgramData\DVD Shrink
[08/12/2007|18:25] C:\ProgramData\Elaborate Bytes
[09/05/2008|16:15] C:\ProgramData\eMule
[28/11/2007|14:20] C:\ProgramData\eSobi
[18/10/2007|17:18] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[02/01/2008|20:46] C:\ProgramData\InstallShield
[27/04/2008|12:43] C:\ProgramData\LightScribe
[18/10/2007|17:18] C:\ProgramData\Menu D‚marrer
[06/01/2008|14:51] C:\ProgramData\Microsoft
[04/05/2008|07:30] C:\ProgramData\Microsoft Help
[18/10/2007|17:18] C:\ProgramData\ModŠles
[15/03/2008|18:43] C:\ProgramData\Nokia
[15/03/2008|18:42] C:\ProgramData\PC Suite
[10/02/2008|16:07] C:\ProgramData\Philips Intelligent Agent
[08/12/2007|16:22] C:\ProgramData\SlySoft
[08/05/2008|11:19] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[05/05/2008|02:13] C:\ProgramData\Symantec
[02/11/2006|15:02] C:\ProgramData\Templates
[23/04/2008|14:52] C:\ProgramData\WLInstaller
[18/10/2007|18:23] C:\ProgramData\Yahoo! Companion
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[06/05/2007|21:33] C:\Program Files\Acer Arcade Live
[04/06/2007|04:44] C:\Program Files\Acer Inc
[06/05/2007|21:22] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[04/12/2007|11:29] C:\Program Files\Adobe
[08/05/2008|13:32] C:\Program Files\Alwil Software
[04/06/2007|04:39] C:\Program Files\ATI
[04/06/2007|04:41] C:\Program Files\ATI Technologies
[10/02/2008|17:29] C:\Program Files\AviSynth 2.5
[09/12/2007|16:49] C:\Program Files\AVS4YOU
[27/03/2008|21:36] C:\Program Files\Codemasters
[20/04/2008|20:38] C:\Program Files\Common Files
[26/01/2008|18:47] C:\Program Files\Creative Labs
[11/04/2008|21:54] C:\Program Files\Cyanide
[06/05/2007|21:30] C:\Program Files\CyberLink
[22/11/2007|11:44] C:\Program Files\desktop.ini
[08/05/2008|12:44] C:\Program Files\DosPop Toolbar
[08/12/2007|19:38] C:\Program Files\DVD Shrink
[11/04/2008|21:50] C:\Program Files\EA GAMES
[11/04/2008|21:58] C:\Program Files\EA SPORTS
[10/02/2008|16:17] C:\Program Files\Elaborate Bytes
[06/05/2007|21:34] C:\Program Files\eSobi
[26/01/2008|18:49] C:\Program Files\FFVIII
[18/10/2007|17:18] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/01/2008|20:35] C:\Program Files\Hercules
[26/04/2008|10:26] C:\Program Files\InstallShield Installation Information
[19/04/2008|02:40] C:\Program Files\Internet Explorer
[10/02/2008|13:27] C:\Program Files\Java
[18/10/2007|18:23] C:\Program Files\K-Lite Codec Pack
[09/05/2008|17:38] C:\Program Files\Lopxp
[18/03/2008|19:44] C:\Program Files\Micro Application
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[06/05/2007|21:22] C:\Program Files\Microsoft Office
[20/04/2008|20:47] C:\Program Files\Microsoft SQL Server Compact Edition
[06/05/2007|21:22] C:\Program Files\Microsoft Works
[06/05/2007|21:20] C:\Program Files\Microsoft.NET
[02/11/2006|14:42] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[20/11/2007|13:28] C:\Program Files\MSXML 4.0
[06/05/2007|21:18] C:\Program Files\NewTech Infosystems
[15/03/2008|18:43] C:\Program Files\Nokia
[07/02/2008|19:09] C:\Program Files\Norton Internet Security
[24/04/2008|23:09] C:\Program Files\OpenOffice.org 2.4
[18/04/2008|17:15] C:\Program Files\Orange
[05/01/2008|17:51] C:\Program Files\OrangeHSS
[20/01/2008|19:20] C:\Program Files\PartoucheWize
[15/03/2008|18:39] C:\Program Files\PC Connectivity Solution
[10/02/2008|16:07] C:\Program Files\Philips Intelligent Agent
[06/04/2008|15:35] C:\Program Files\PhotoFiltre Studio
[20/10/2007|17:40] C:\Program Files\PlayOnline
[22/10/2007|07:14] C:\Program Files\QuickTime
[06/05/2007|21:05] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[10/02/2008|17:28] C:\Program Files\Ripp-it_AM
[11/04/2008|21:55] C:\Program Files\RTL Wintergames 2007
[09/05/2008|16:13] C:\Program Files\Runtime Software
[18/04/2008|17:04] C:\Program Files\SAGEM
[18/04/2008|17:04] C:\Program Files\Securitoo
[11/04/2008|21:58] C:\Program Files\SEGA
[08/12/2007|20:46] C:\Program Files\SlySoft
[08/05/2008|09:22] C:\Program Files\Spybot - Search & Destroy
[07/02/2008|18:57] C:\Program Files\Symantec
[08/05/2008|20:42] C:\Program Files\Trend Micro
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[06/04/2008|15:36] C:\Program Files\VCW VicMan's Photo Editor
[26/04/2008|10:26] C:\Program Files\VID_0E8F&PID_3020
[22/10/2007|07:28] C:\Program Files\VideoLAN
[06/04/2008|15:48] C:\Program Files\vso
[06/04/2008|15:36] C:\Program Files\Web Photo Album
[22/11/2007|11:41] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[22/11/2007|11:41] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[03/05/2008|11:56] C:\Program Files\Windows Live
[22/04/2008|02:15] C:\Program Files\Windows Live Toolbar
[19/04/2008|02:40] C:\Program Files\Windows Mail
[10/02/2008|16:46] C:\Program Files\Windows Media Components
[21/11/2007|09:13] C:\Program Files\Windows Media Player
[18/10/2007|17:18] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[15/01/2008|00:16] C:\Program Files\Windows Sidebar
[20/12/2007|11:14] C:\Program Files\WM Recorder 10.2
[18/10/2007|17:22] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Common Files ]------
[04/12/2007|11:29] C:\Program Files\Common Files\Adobe
[09/12/2007|16:49] C:\Program Files\Common Files\AVSMedia
[06/05/2007|21:20] C:\Program Files\Common Files\DESIGNER
[20/11/2007|11:54] C:\Program Files\Common Files\France Telecom
[02/01/2008|20:46] C:\Program Files\Common Files\InstallShield
[10/02/2008|13:18] C:\Program Files\Common Files\Java
[06/05/2007|21:17] C:\Program Files\Common Files\LightScribe
[04/05/2008|07:26] C:\Program Files\Common Files\microsoft shared
[06/05/2007|21:17] C:\Program Files\Common Files\muvee Technologies
[06/05/2007|21:18] C:\Program Files\Common Files\NewTech Infosystems
[15/03/2008|18:43] C:\Program Files\Common Files\Nokia
[15/03/2008|18:41] C:\Program Files\Common Files\PCSuite
[20/10/2007|17:40] C:\Program Files\Common Files\PlayOnline
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[07/02/2008|18:58] C:\Program Files\Common Files\Symantec Shared
[22/11/2007|11:41] C:\Program Files\Common Files\System
[20/04/2008|20:42] C:\Program Files\Common Files\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 85
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
Aucun fichier / dossier Lop trouvé !
----------------------[ Verification du Registre ]----------------------
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-09 18:52:45
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
=> C:\Users\herve\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.iso
=> C:\Users\herve\AppData\Roaming\Microsoft\Windows\Recent\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.lnk
=> C:\Users\herve\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.iso
=> C:\Users\herve\AppData\Roaming\Microsoft\Windows\Recent\Harry Potter et l'Ordre du Ph‚nix_jeu PC version Fr_keygen et crack inclus.lnk
/!\ [Fich:649][Doss:111] C:\Users\herve\AppData\Local\Temp
/!\ [Fich:1032][Doss:1] C:\Users\herve\AppData\Roaming\MICROS~1\Windows\Cookies
/!\ [Fich:2730][Doss:15] C:\Users\herve\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[ UAC => 1 ]
--------------------[ Fin du rapport a 18:54:09,77 ]----------------------
|
|
|
|
|
Télécharge HijackThis
Guide d'utilisation : http://mickael.barroux.free.fr/securite/hijackthis.php
Clique alors sur "Do a system scan and save a logfile"
Le scan se fait très rapidement, puis un bloc-note apparaît
(le "logfile")
Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
le texte est alors séléctionné, retourne dans "Edition" toujours
en laissant le texte séléctionné, et clique sur copier.
Colle le contenu ici dans ta prochaine réponse !
|
|
|
|
|
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:17:24, on 09/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe
C:\Program Files\Philips Intelligent Agent\Philips Intelligent Agent.exe
C:\Windows\System32\p2phost.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
C:\Windows\system32\cmd.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Orange\Deskboard\deskboard.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Windows\explorer.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\herve\Desktop\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.dospop.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.dospop.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: TBSB09293 - {57F9FEF0-6EAE-4030-A68A-30FDC38B1B13} - C:\PROGRA~1\DOSPOP~1\dospop.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: DosPop Toolbar - {BFB5F154-9212-46F3-B547-AC6106030A54} - C:\Program Files\DosPop Toolbar\dospop.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\NewSetApanel.cmd
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Philips Intelligent Agent] "C:\Program Files\Philips Intelligent Agent\Philips Intelligent Agent.exe" /SILENT
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Error mail] "C:\ProgramData\Upload Bags Bags.06969mb"
O4 - HKCU\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\iso eq save.pzesz"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [] (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Moniteur WiFi OLITEC.exe.lnk = ?
O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: http://www.orange.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
--
End of file - 12353 bytes
|
|
|
|
|
re,
fais ceci dans l'ordre et en entier :
Note: Cette procédure a été créée spécifiquement pour cet utilisateur ! Si vous n'êtes pas cet utilisateur en question, ne suivez pas ces instructions au risque d'endommager votre PC !!!
1/ relance hijackthis et coche les cases devant ces lignes (si présentes) :
O2 - BHO: TBSB09293 - {57F9FEF0-6EAE-4030-A68A-30FDC38B1B13} - C:\PROGRA~1\DOSPOP~1\dospop.dll
O4 - HKCU\..\Run: [Error mail] "C:\ProgramData\Upload Bags Bags.06969mb"
O4 - HKCU\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\iso eq save.pzesz"
Puis ferme toutes les autres fenêtres autres que hijackthis et clic sur "fix checked"
2/ ferme hijackthis
3/ désinstalle DosPop Toolbar via ajout/suppr de programmes si présent
4/ supprime le dossier C:\Program Files\DosPop Toolbar (si présent) puis vide ta corbeille
5/ fais moi un screen du contenu de ton dossier C:\ProgramData\
aide pour faire un screen et le poster :
http://adub115.free.fr/Tutos/TutoCapture.pdf
-->Message édité par naheulbeuk le 09/05/2008 19:35:37<--
|
|
|
|
|
|
dospop toolbar ne veut pas se d'ésintaller
|
|
|
|
|
j'arrive pas a désinstaller dospop toolbar dans panneau de configuration/desinstaller un programme je clic sur dospop toobar une fenetre souvre me demandant si je suis a l'origine de l'action je clic sur oui logiquement une fenetre devrait s'ouvrir pour que je confirme la desinstallation du fichier mais rien ne se passe y a t'il une raison a cela
|
|
|
|
|
|
continue le reste stp
|
|
|
|
|
|
|
|
j'epere que c'est screen que tu voulais
|
|
|
|
|
ok ca c'est bon 
Passe un coup de MalwareBytes et supprime tout ce qu'il trouve :
pour cela, suis ce tuto : http://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
Post moi le rapport généré à la fin dans ta prochaine réponse
|
|
|
|
|
voila le rapport
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 737
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 197858
Temps écoulé: 30 minute(s), 36 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 13
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\tbsb09293.ietoolbar (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\tbsb09293.ietoolbar.1 (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\tbsb09293.tbsb09293 (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\tbsb09293.tbsb09293.3 (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bfb5f154-9212-46f3-b547-ac6106030a54} (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{9ebb289a-2d7b-465b-825f-1530b813e95a} (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cd5c92ae-97b0-4bc3-ba65-ba0308d543bf} (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{77aa25e8-6083-4949-a831-9cb11861dc10} (Adware.DosPopToolbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook.1 (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ca3eb689-8f09-4026-aa10-b9534c69 | |
