S'abonner :  Newsletters    Magazines
Avis sur les produits Avis sur les logiciels Avis sur les jeux Actualités A propos de 01net
743 utilisateurs connectés
Forum de 01net / Sécurité / trojan-spy.win32@mx

trojan-spy.win32@mx

David_-_ le 21 novembre 2008 à 20h35
Bonjour
depuis quelque temps déjà, j'ai un trojan nommé trojan-spy.win32@mx. Pourriez-vous m'aider à m'en débarrasser s'il-vous-plaît? À cause de ce trojan, des dizaines de pops-up pornographique s'ouvrent, et un triangle jaune avec un point d'exclamation s'ouvre pour me dire que mon ordinateur est infecté et de cliquer sur Ok, mais lorsque l'on clique sur Ok, cela nous amènes sur des sites de programmes de trojan (system doctor, malware, etc.)
Merci de bien vouloir m'aider.
Voici le raport hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 20:14:55, on 21/11/2008
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
EDITION MODERATEUR : Règle du forum à respecter :

Pas de rapport avant qu'il n'en soit demandé un !

Veuillez lire l'article suivant :
http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/a_(...)

Merci d'en prendre connaissance.



-->Message édité par naheulbeuk le 21/11/2008 22:38:25<--
répondre
naheulbeuk le 21 novembre 2008 à 22h38
bonsoir,

1) Télécharge SmitFraudFix
Guide d'utilisation : http://www.site-naheulbeuk.com/smitfraudfix.php

Double clic sur SmitfraudFix.exe pour le lancer
Choisis l'option 1 (Recherche)
Post moi le rapport !

2) Redémarre en mode sans échec (F8 lors du boot)
Aide : http://www.site-naheulbeuk.com/smitfraudfix.php#nettoyage
Relance SmitfraudFix et choisis cette fois l’option 2 et réponds oui à chaque question

3) Redémarre en mode normal
Post moi le 2ème rapport !

:hello:
-------
Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
Et son forum : http://www.site-naheulbeuk.com/forum/
répondre
David_-_ le 22 novembre 2008 à 00h16
naheulbeuk a écrit :
bonsoir,

1) Télécharge SmitFraudFix
Guide d'utilisation : http://www.site-naheulbeuk.com/smitfraudfix.php

Double clic sur SmitfraudFix.exe pour le lancer
Choisis l'option 1 (Recherche)
Post moi le rapport !

2) Redémarre en mode sans échec (F8 lors du boot)
Aide : http://www.site-naheulbeuk.com/smitfraudfix.php#nettoyage
Relance SmitfraudFix et choisis cette fois l’option 2 et réponds oui à chaque question

3) Redémarre en mode normal
Post moi le 2ème rapport !

:hello:


bonsoir

voila le raport en mode normal

mitFraudFix v2.376

Scan done at 0:10:21,81, 22/11/2008
Run from C:\Users\David\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\SYSTEM32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\SYSTEM32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Fighters\configservice.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Fighters\licenseservice.exe
C:\Program Files\Fighters\updateservice.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Fighters\ScannerService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\SYSTEM32\taskeng.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SYSTEM32\taskeng.exe
C:\Program Files\WebMediaViewer\qttask.exe
C:\Program Files\WebMediaViewer\hpmon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\ctfmon.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\eMule\emule.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Windows\SYSTEM32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\DllHost.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David\AppData\Local\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\David\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, following keys are not inevitably infected!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~1\\KASPER~1\\KASPER~1\\mzvkbd.dll"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{F2C44A40-7606-416A-BD52-AB4A241303B9}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End



répondre
David_-_ le 22 novembre 2008 à 00h47
naheulbeuk a écrit :
bonsoir,

1) Télécharge SmitFraudFix
Guide d'utilisation : http://www.site-naheulbeuk.com/smitfraudfix.php

Double clic sur SmitfraudFix.exe pour le lancer
Choisis l'option 1 (Recherche)
Post moi le rapport !

2) Redémarre en mode sans échec (F8 lors du boot)
Aide : http://www.site-naheulbeuk.com/smitfraudfix.php#nettoyage
Relance SmitfraudFix et choisis cette fois l’option 2 et réponds oui à chaque question

3) Redémarre en mode normal
Post moi le 2ème rapport !

:hello:


et voila le raport en mode sans échec

SmitFraudFix v2.376

Scan done at 0:24:00,15, 22/11/2008
Run from C:\Users\David\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost
::1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
[.....] EDIT BY NAHEULBEUK
-->Message édité par naheulbeuk le 22/11/2008 11:38:14<--
répondre
naheulbeuk le 22 novembre 2008 à 11h36
re, :)

Télécharge ComboFix (créé par sUBs) sur ton Bureau

Démarre en mode sans échec : http://forum.telecharger.01net.com/telecharger/virus_et_assimiles/failles_de_(...)


  • Double clique combofix.exe.
  • Tape sur la touche 1 pour démarrer le scan puis laisse toi guider.
  • ComboFix redémarrera ton PC
  • Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    :p
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • répondre
    David_-_ le 22 novembre 2008 à 14h31
    naheulbeuk a écrit :
    re, :)

    Télécharge ComboFix (créé par sUBs) sur ton Bureau

    Démarre en mode sans échec : http://forum.telecharger.01net.com/telecharger/virus_et_assimiles/failles_de_(...)


  • Double clique combofix.exe.
  • Tape sur la touche 1 pour démarrer le scan puis laisse toi guider.
  • ComboFix redémarrera ton PC
  • Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    :p


    • bonjour

    voila le raport

    ComboFix 08-11-21.05 - David 2008-11-22 14:10:54.1 - NTFSx86 MINIMAL
    Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1527 [GMT 1:00]
    Lancé depuis: c:\users\David\Desktop\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\users\David\AppData\Local\kcqiy.dat
    c:\users\David\AppData\Local\kcqiy.exe
    c:\users\David\AppData\Local\kcqiy_nav.dat
    c:\users\David\AppData\Local\kcqiy_navps.dat
    c:\users\David\AppData\Local\meuakui_navfx.dat
    c:\users\David\Documents\My Documents.url
    c:\windows\Downloaded Program Files\setup.inf

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-22 au 2008-11-22 ))))))))))))))))))))))))))))))))))))
    .

    Pas de nouveau fichier créé dans ce laps de temps

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-22 13:07 892,960 --sha-w c:\windows\system32\drivers\fidbox2.dat
    2008-11-22 13:07 5,723,680 --sha-w c:\windows\system32\drivers\fidbox.dat
    2008-11-22 13:07 46,844 --sha-w c:\windows\system32\drivers\fidbox.idx
    2008-11-22 13:07 4,132 --sha-w c:\windows\system32\drivers\fidbox2.idx
    2008-11-22 12:57 --------- d-----w c:\users\David\AppData\Roaming\Skype
    2008-11-22 12:56 --------- d-----w c:\users\David\AppData\Roaming\skypePM
    2008-11-22 12:56 --------- d-----w c:\users\David\AppData\Roaming\Free Download Manager
    2008-11-22 12:55 --------- d-----w c:\programdata\Kaspersky Lab
    2008-11-21 23:40 --------- d-----w c:\program files\Fighters
    2008-11-21 23:24 691 ----a-w c:\users\David\AppData\Roaming\GetValue.vbs
    2008-11-21 23:24 35 ----a-w c:\users\David\AppData\Roaming\SetValue.bat
    2008-11-21 23:24 1,750 ----a-w c:\windows\System32\tmp.reg
    2008-11-21 23:03 --------- d-----w c:\program files\Navilog1
    2008-11-21 17:00 --------- d-----w c:\users\David\AppData\Roaming\dvdcss
    2008-11-21 16:32 --------- d-----w c:\programdata\Spybot - Search & Destroy
    2008-11-21 16:32 --------- d-----w c:\program files\BitTorrent Fastest Tool
    2008-11-18 15:24 --------- d-----w c:\programdata\Grisoft
    2008-11-16 23:16 --------- d-----w c:\programdata\Fighters
    2008-11-16 19:14 --------- d-----w c:\programdata\Boob gram iso
    2008-11-16 19:14 --------- d-----w c:\programdata\aim rect help creative
    2008-11-16 19:08 --------- d-----w c:\program files\Enigma Software Group
    2008-11-16 00:25 --------- d-----w c:\programdata\Lavasoft
    2008-11-15 17:21 --------- d-----w c:\program files\Spybot - Search & Destroy
    2008-11-15 17:19 --------- d---a-w c:\programdata\TEMP
    2008-11-15 01:07 --------- d-----w c:\program files\CCleaner
    2008-11-15 01:03 --------- d-----w c:\program files\WebMediaViewer
    2008-11-15 00:26 --------- d-----w c:\users\David\AppData\Roaming\uTorrent
    2008-11-13 02:12 --------- d-----w c:\program files\Steam
    2008-11-12 20:32 --------- d-----w c:\program files\Common Files\Steam
    2008-11-12 20:27 --------- d-----w c:\program files\Common Files\Adobe
    2008-11-11 18:15 --------- d-----w c:\users\David\AppData\Roaming\NeroDCTemplates
    2008-11-09 18:14 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-11-09 18:14 --------- d-----w c:\users\David\AppData\Roaming\LG Electronics
    2008-11-09 17:43 --------- d-----w c:\program files\LG Electronics
    2008-11-09 17:11 --------- d-----w c:\users\David\AppData\Roaming\LGSync
    2008-11-09 02:37 --------- d-----w c:\program files\FREE Music Downloader
    2008-11-04 21:43 --------- d-----w c:\program files\ICQ6
    2008-11-04 21:42 --------- d-----w c:\programdata\ICQ
    2008-11-04 21:42 --------- d-----w c:\program files\ICQ6Toolbar
    2008-10-22 14:45 21,248 ----a-w c:\windows\Help\OEM\scripts\HPScript.exe
    2008-10-18 12:32 --------- d-----w c:\programdata\Roxio
    2008-10-16 18:35 --------- d-----w c:\program files\Windows Mail
    2008-10-14 18:54 --------- d-----w c:\users\David\AppData\Roaming\GlobalSCAPE
    2008-10-14 18:54 --------- d-----w c:\programdata\GlobalSCAPE
    2008-10-14 18:54 --------- d-----w c:\program files\GlobalSCAPE
    2008-10-14 18:53 --------- d-----w c:\program files\Common Files\InstallShield
    2008-10-14 18:53 --------- d-----w c:\program files\AskBarDis
    2008-10-13 18:19 667,978 ----a-w c:\windows\unins000.exe
    2008-10-13 18:17 --------- d-----w c:\program files\clock-desktop
    2008-10-13 18:09 48,456 ----a-w c:\windows\System32\UninstallElectricSheep.exe
    2008-10-13 18:00 --------- d-----w c:\program files\UselessCreations
    2008-10-10 06:58 82,944 ----a-w c:\windows\System32\o4Patch.exe
    2008-10-10 06:58 82,944 ----a-w c:\windows\System32\IEDFix.C.exe
    2008-10-08 15:32 --------- d-----w c:\users\David\AppData\Roaming\Thinstall
    2008-10-08 02:05 --------- d-----w c:\programdata\WindowsSearch
    2008-10-06 16:45 --------- d-----w c:\program files\Download Direct
    2008-10-03 18:15 191,488 ----a-w c:\windows\System32\hlvdd.dll
    2008-10-03 18:12 --------- d-----w c:\program files\Alcohol Soft
    2008-10-03 18:04 716,272 ----a-w c:\windows\system32\drivers\sptd.sys
    2008-10-03 13:53 --------- d-----w c:\program files\uTorrent
    2008-10-02 03:49 827,392 ----a-w c:\windows\System32\wininet.dll
    2008-10-01 13:51 87,552 ----a-w c:\windows\System32\VACFix.exe
    2008-09-30 15:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll
    2008-09-28 18:57 --------- d-----w c:\program files\GTR 2
    2008-09-24 16:12 --------- d-----w c:\program files\Common Files\xing shared
    2008-09-24 16:12 --------- d-----w c:\program files\Common Files\Real
    2008-09-23 13:15 --------- d-----w c:\program files\Common Files\SWF Studio
    2008-09-18 05:09 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
    2008-09-18 05:09 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
    2008-09-18 04:56 147,456 ----a-w c:\windows\System32\Faultrep.dll
    2008-09-18 04:56 125,952 ----a-w c:\windows\System32\wersvc.dll
    2008-09-18 02:16 2,032,640 ----a-w c:\windows\System32\win32k.sys
    2008-09-10 03:40 1,334,272 ----a-w c:\windows\System32\msxml6.dll
    2008-09-05 05:14 1,191,936 ----a-w c:\windows\System32\msxml3.dll
    2008-09-03 03:59 468,992 ----a-w c:\windows\System32\newdev.dll
    2008-09-03 03:58 74,752 ----a-w c:\windows\System32\newdev.exe
    2008-05-09 21:30 174 --sha-w c:\program files\desktop.ini
    2008-04-17 21:37 32 ----a-w c:\users\All Users\ezsid.dat
    2008-04-17 21:37 32 ----a-w c:\programdata\ezsid.dat
    2008-01-16 17:14 0 ----a-w c:\users\David\AppData\Roaming\wklnhst.dat
    2007-04-23 12:21 269,824 ----a-w c:\windows\inf\WG111v3\Vista64\wg111v3.sys
    2007-04-23 12:19 227,328 ----a-w c:\windows\inf\WG111v3\WG111v3.sys
    2007-04-23 12:19 227,328 ----a-w c:\windows\inf\WG111v3\Vista\wg111v3.sys
    2006-12-15 09:30 98,304 ----a-w c:\windows\inf\WG111v3\UScanM.exe
    2006-12-15 09:30 315,392 ----a-w c:\windows\inf\WG111v3\InstallDriver.exe
    2006-12-15 09:30 28,672 ----a-w c:\windows\inf\WG111v3\SetDrv.exe
    2006-12-15 09:30 212,992 ----a-w c:\windows\inf\WG111v3\CopyWHQLDriver.exe
    2006-12-15 09:30 20,480 ----a-w c:\windows\inf\WG111v3\RTWUPath.exe
    2006-12-15 09:30 19,968 ----a-w c:\windows\inf\WG111v3\RTWREFU.EXE
    2008-07-31 18:01 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    2008-07-31 18:01 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    2008-07-31 18:01 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    2008-05-11 14:31 22 --sha-w c:\windows\SMINST\HPCD.sys
    .

    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    2008-07-17 16:20 279944 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

    [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Knob ante"="c:\programdata\Sizefirstfirst.dgjsobl" [X]
    "Help Creative Meow City"="c:\programdata\settings soft slow.p65saf9" [X]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
    "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
    "Yahoo! Pager"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 4670704]
    "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
    "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-04-30 22058792]
    "ICQ"="c:\program files\ICQ6\ICQ.exe" [2008-09-01 173304]
    "Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2008-05-20 2474031]
    "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
    "eMuleAutoStart"="c:\program files\eMule\emule.exe" [2007-05-13 5308416]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-09-24 185872]
    "KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "GrpConv"="grpconv -o" [X]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run]
    "QuickTime Task"="c:\program files\WebMediaViewer\qttask.exe" [2008-11-15 53323]
    "VMware hptray"="c:\program files\WebMediaViewer\hpmon.exe" [2008-11-15 68776]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2006-05-29 1708032]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableLUA"= 0 (0x0)
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
    @=""

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
    --a------ 2008-03-20 17:46 217544 c:\program files\Alcohol Soft\Alcohol 120\AxCmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
    --a------ 2008-08-28 09:18 3660848 c:\program files\Veoh Networks\Veoh\VeohClient.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "UacDisableNotify"=dword:00000001
    "InternetSettingsDisableNotify"=dword:00000001
    "AutoUpdateDisableNotify"=dword:00000001
    "AntiVirusDisableNotify"="0x00000000"
    "UpdatesDisableNotify"="0x00000000"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{F9B36BA3-7057-4DF1-9780-049C2D7F1001}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{4A0D9D09-8F96-4D18-883E-7D9CDC186ED4}"= UDP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
    "{A01465C8-079E-401B-BCCD-A175B6CEE783}"= TCP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
    "{938D931D-9082-4DC3-B9DC-BE1E3D25FEEF}"= UDP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
    "{5CB8A0AE-EB52-4A96-B1C3-6C48F839FB7C}"= TCP:c:\program files\NETGEAR\WG111v3\WG111v3.exe:NETGEAR WG111v3 Smart Wizard
    "TCP Query User{25E55316-DEDC-498B-AF2B-56EC292173A6}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
    "UDP Query User{912E4E59-B96D-4370-8632-2868D9C7AAA4}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
    "TCP Query User{15BAAD66-B2D7-49C1-8D88-9B81D4B2EF99}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
    "UDP Query User{A8584EB4-3AA2-4CA4-B108-56CC5DFDAF72}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
    "TCP Query User{55EC8BEF-D3EB-4E34-AF29-387F5833590A}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "UDP Query User{78448651-DCCD-4AB2-9713-65AEFBFF8793}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "TCP Query User{66992400-D655-4245-A553-C306ED1F3686}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "UDP Query User{7D710BB4-F2C0-4F2F-B42F-60D5C219CFF6}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
    "TCP Query User{B51E6EBA-FA4D-4E56-AF60-37E1ED792078}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
    "UDP Query User{96A0456A-1367-424D-ADDE-FCB7BABA6AEF}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
    "TCP Query User{B3D056E8-94BA-4265-A81F-8FA0F85E409A}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
    "UDP Query User{9BD39EC0-65C8-470B-8EE1-336ACB189944}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
    "TCP Query User{6E9216C0-CE51-4983-A06C-39F32D141240}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
    "UDP Query User{5D3A1DC9-1DAF-4004-8503-03150D5F422F}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
    "TCP Query User{10E6EF2C-43D4-4D54-8A99-BBAE7EE5F7F2}c:\\program files\\real\\realplayer\\realplay.exe"= UDP:c:\program files\real\realplayer\realplay.exe:RealPlayer
    "UDP Query User{3FF824EE-C01A-42C5-9059-F77292F42015}c:\\program files\\real\\realplayer\\realplay.exe"= TCP:c:\program files\real\realplayer\realplay.exe:RealPlayer
    "{163C996C-CEEA-4C25-89BB-58EC49A0909B}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{4A78B6FF-FAF2-4697-BE50-FF6736F8C911}"= c:\program files\Skype\Phone\Skype.exe:Skype
    "TCP Query User{383A6089-F64A-46F9-A43A-206D807FDB6D}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= UDP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
    "UDP Query User{4D89C847-68FF-42AF-AE13-C9F50A69FBAA}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= TCP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
    "TCP Query User{D6B1126B-51DC-4753-8C35-82902336EC3F}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
    "UDP Query User{0CB43A4C-8F6D-4FBC-95E9-3891725D91D5}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
    "TCP Query User{2787A6A5-C037-4010-8021-ADA4DB628531}c:\\program files\\webmediaplayer\\webmediaplayer.exe"= UDP:c:\program files\webmediaplayer\webmediaplayer.exe:WebMediaPlayer
    "UDP Query User{660DF119-7DD2-4C96-ABF5-459D1B51DDB3}c:\\program files\\webmediaplayer\\webmediaplayer.exe"= TCP:c:\program files\webmediaplayer\webmediaplayer.exe:WebMediaPlayer
    "TCP Query User{83853563-0030-4EEA-8B0E-16ED0EBDB50E}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= UDP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
    "UDP Query User{FC3116CD-2C49-4C89-97F7-64B99A64ECA1}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\french\\setup.exe"= TCP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\french\setup.exe:Programme d'installation de Kaspersky Anti-Virus 7.0
    "{E1198D60-F0E7-4B76-9568-B36987592896}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
    "{DE736E3F-15FD-4F43-900D-86C234139E58}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
    "{F9EF5560-14C8-41E9-912B-76E592E0A2CD}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
    "{E1FBB334-C170-4B4E-8ADA-9F8B337C6AC8}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
    "TCP Query User{6EF90AFA-3980-4D8C-B66A-F9912454F008}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
    "UDP Query User{70B166BB-D4CD-4417-AC42-F4E8F6958A97}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
    "TCP Query User{22E90A89-6D5A-43BB-8651-2A1840746ADA}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
    "UDP Query User{D6653D4A-669C-4059-BCFD-B46EE0A13DDC}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
    "TCP Query User{B1EFAC10-5A88-4D84-83C2-F44157644354}c:\\users\\david\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= UDP:c:\users\david\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
    "UDP Query User{357DAA7D-D3CE-40B4-9D15-94897281F38F}c:\\users\\david\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= TCP:c:\users\david\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
    "TCP Query User{A5BEDDC2-9B73-470A-880B-F3A14D786C1C}c:\\program files\\windows sidebar\\sidebar.exe"= UDP:c:\program files\windows sidebar\sidebar.exe:Volet Windows
    "UDP Query User{111FD349-0356-4722-B7E4-47D03659ED5C}c:\\program files\\windows sidebar\\sidebar.exe"= TCP:c:\program files\windows sidebar\sidebar.exe:Volet Windows
    "{67241D21-5E4C-4E0A-AC1B-22F2D90AC525}"= UDP:c:\program files\VoipBuster.com\VoipBuster\VoipBuster.exe:VoipBuster
    "{6E09D35A-721F-4221-8CBB-C8F1AC7775F7}"= TCP:c:\program files\VoipBuster.com\VoipBuster\VoipBuster.exe:VoipBuster
    "TCP Query User{D7C8A304-EF8C-4F8A-ADED-0FFDE6F5ECB8}c:\\program files\\utorrent\\utorrent.exe"= UDP:c:\program files\utorrent\utorrent.exe:uTorrent
    "UDP Query User{5EDB9FD8-7C4E-4613-B8D2-AAA08A4DF991}c:\\program files\\utorrent\\utorrent.exe"= TCP:c:\program files\utorrent\utorrent.exe:uTorrent
    "{F8407F76-923A-496D-BC57-77E6FAA1E088}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
    "{754B51AF-8AA2-4280-A8F4-885CCCA24AEF}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
    "TCP Query User{C3B743B7-1FC7-4D4C-8D91-46EA11EDB3A4}c:\\windows\\system32\\electricsheep.scr"= UDP:c:\windows\system32\electricsheep.scr:ElectricSheep
    "UDP Query User{35E28DEB-239D-4D9B-A2C8-6A6CEE2EE25E}c:\\windows\\system32\\electricsheep.scr"= TCP:c:\windows\system32\electricsheep.scr:ElectricSheep

    S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784]
    S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2008-03-26 20496]
    S3 LVRS;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs.sys [2008-09-07 627864]
    S3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\DRIVERS\wg111v3.sys [2008-10-24 227328]
    S3 Steam Client Service;Steam Client Service;c:\program files\Common Files\Steam\SteamService.exe /RunAsService [2008-11-12 99576]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ

    *Newly Created Service* - ECACHE
    *Newly Created Service* - PROCEXP90
    .
    Contenu du dossier 'Tâches planifiées'

    2008-11-21 c:\windows\Tasks\User_Feed_Synchronization-{31DF0D02-808A-4ED2-9355-0EAF40D469EC}.job
    - c:\windows\system32\msfeedssync.exe [2008-01-19 08:33]
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    HKCU-Run-HPAdvisor - c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
    HKCU-Run-fsm - (no file)
    HKCU-Run-DLD.EXE - (no file)
    HKCU-RunOnce-Shockwave Updater - c:\windows\System32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; FDM; .NET
    HKLM-RunOnce-<NO NAME> - (no file)
    MSConfigStartUp-Software Informer - c:\program files\Free Download Manager\softinfo.exe
    MSConfigStartUp-spywarefighterguard - c:\program files\Fighters\spywarefighter\SpywarefighterUser.exe


    .
    ------- Examen supplémentaire -------
    .
    FireFox -: Profile - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\xap7e7td.default\
    FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/
    FF -: plugin - c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
    FF -: plugin - c:\program files\Virtools\3D Life Player\npvirtools.dll
    FF -: plugin - c:\program files\Yahoo!\Shared\npYState.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-22 14:15:59
    Windows 6.0.6001 Service Pack 1 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    Heure de fin: 2008-11-22 14:16:56
    ComboFix-quarantined-files.txt 2008-11-22 13:16:42

    Avant-CF: Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
    Après-CF: 151,677,186,048 octets libres

    277 --- E O F --- 2008-11-21 21:20:23
    répondre
    naheulbeuk le 22 novembre 2008 à 14h36
    re,

  • Télécharge Toolbar-S&D (de la Team IDN) sur ton Bureau : http://eric.71.mespages.googlepages.com/ToolBarSD.exe
  • Si tu es sous Vista Clique-droit sur le fichier téléchargé > Exécuter en tant qu'administrateur
  • Toujours pour les utilisateurs Vista : Clique-droit sur le raccourci de Toolbar-S&D > Exécuter en tant qu'administrateur
  • Choisis F pour Français, et valide par Entrée
  • Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
  • Poste le rapport généré. (C:\TB.txt)

    ;)
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • répondre
    David_-_ le 22 novembre 2008 à 15h02
    naheulbeuk a écrit :
    re,

  • Télécharge Toolbar-S&D (de la Team IDN) sur ton Bureau : http://eric.71.mespages.googlepages.com/ToolBarSD.exe
  • Si tu es sous Vista Clique-droit sur le fichier téléchargé > Exécuter en tant qu'administrateur
  • Toujours pour les utilisateurs Vista : Clique-droit sur le raccourci de Toolbar-S&D > Exécuter en tant qu'administrateur
  • Choisis F pour Français, et valide par Entrée
  • Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
  • Poste le rapport généré. (C:\TB.txt)

    ;)


    • re,

    -----------\\ ToolBar S&D 1.2.5 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : David ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total:225 Go (Free:139 Go)
    D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)
    J:\ (CD or DVD)

    "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
    Option : [1] ( 22/11/2008|14:47 )

    [ UAC => 0 ]

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\Program Files\AskBarDis
    C:\Program Files\AskBarDis\bar
    C:\Program Files\AskBarDis\unins000.dat
    C:\Program Files\AskBarDis\unins000.exe
    C:\Program Files\AskBarDis\bar\bin
    C:\Program Files\AskBarDis\bar\Settings
    C:\Program Files\AskBarDis\bar\bin\askBar.dll
    C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
    C:\Program Files\AskBarDis\bar\bin\psvince.dll
    C:\Program Files\AskBarDis\bar\Settings\config.dat
    C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
    C:\Program Files\AskTBar
    C:\Program Files\AskTBar\bar
    C:\Windows\iun6002.exe

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Start Page"="http://www.google.fr/"
    "Local Page"="C:\\windows\\system32\\blank.htm"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Rambler Search"="http://www.rambler.ru/srch?utf8=1&umon=icq6def&words={searchTerms}"
    "ICQ Search"="http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Local Page"="C:\\windows\\system32\\blank.htm"


    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


    [ UAC => 1 ]


    1 - "C:\ToolBar SD\TB_1.txt" - 22/11/2008|14:48 - Option : [1]

    -----------\\ Fin du rapport a 14:48:35,22

    répondre
    naheulbeuk le 22 novembre 2008 à 15h52
    re,

    Utilisateur de Vista : Vérifie que l'UAC est désactivé
  • Relance Toolbar-S&D,
  • Choisis 2 puis valide en appuyant par Entrée
    /!\ Ne ferme pas la fenêtre pendant le scan /!\

    ;)
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • répondre
    David_-_ le 22 novembre 2008 à 17h03
    naheulbeuk a écrit :
    re,

    Utilisateur de Vista : Vérifie que l'UAC est désactivé
  • Relance Toolbar-S&D,
  • Choisis 2 puis valide en appuyant par Entrée
    /!\ Ne ferme pas la fenêtre pendant le scan /!\

    ;)

    • voila le raport mais je ne sais pas comment voir si l UAC est desactive

    -----------\\ ToolBar S&D 1.2.5 XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : David ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total:225 Go (Free:142 Go)
    D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)
    J:\ (CD or DVD)

    "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
    Option : [2] ( 22/11/2008|16:53 )

    [ UAC => 1 ]

    -----------\\ SUPPRESSION

    Supprime! - C:\Program Files\AskBarDis\bar
    Supprime! - C:\Program Files\AskBarDis\unins000.dat
    Supprime! - C:\Program Files\AskBarDis\unins000.exe
    Supprime! - C:\Program Files\AskTBar\bar
    Supprime! - C:\Windows\iun6002.exe
    Supprime! - C:\Program Files\AskBarDis
    Supprime! - C:\Program Files\AskTBar

    -----------\\ Recherche de Fichiers / Dossiers ...


    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Start Page"="http://www.google.fr/"
    "Local Page"="C:\\windows\\system32\\blank.htm"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Rambler Search"="http://www.rambler.ru/srch?utf8=1&umon=icq6def&words={searchTerms}"
    "ICQ Search"="http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Start Page"="http://www.msn.com/"
    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Local Page"="C:\\windows\\system32\\blank.htm"


    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


    [ UAC => 1 ]


    1 - "C:\ToolBar SD\TB_1.txt" - 22/11/2008|14:48 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 22/11/2008|16:57 - Option : [2]

    -----------\\ Fin du rapport a 16:57:08,92

    répondre
    naheulbeuk le 22 novembre 2008 à 17h06
    re, :)

    Télécharge HijackThis

    Guide d'utilisation : http://www.site-naheulbeuk.com/hijackthis.php

    Clique alors sur "Do a system scan and save a logfile"
    Le scan se fait très rapidement, puis un bloc-note apparaît
    (le "logfile")
    Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
    le texte est alors séléctionné, retourne dans "Edition" toujours
    en laissant le texte séléctionné, et clique sur copier.
    Colle le contenu ici dans ta prochaine réponse !

    ;)
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    répondre
    David_-_ le 22 novembre 2008 à 17h35
    naheulbeuk a écrit :
    re, :)

    Télécharge HijackThis

    Guide d'utilisation : http://www.site-naheulbeuk.com/hijackthis.php

    Clique alors sur "Do a system scan and save a logfile"
    Le scan se fait très rapidement, puis un bloc-note apparaît
    (le "logfile")
    Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
    le texte est alors séléctionné, retourne dans "Edition" toujours
    en laissant le texte séléctionné, et clique sur copier.
    Colle le contenu ici dans ta prochaine réponse !

    ;)


    voila

    Logfile of HijackThis v1.99.1
    Scan saved at 17:33:55, on 22/11/2008
    Platform: Unknown Windows (WinNT 6.00.1905 SP1)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Running processes:
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\WebMediaViewer\qttask.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\ICQ6\ICQ.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\eMule\emule.exe
    C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\System32\mobsync.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\ctfmon.exe
    C:\Program Files\WebMediaViewer\qttaskm.exe
    C:\Program Files\WebMediaViewer\hpmom.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Windows\system32\conime.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Windows\system32\jusched.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\VideoLAN\VLC\vlc.exe
    C:\Users\David\Desktop\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
    R3 - URLSearchHook: (no name) - - (no file)
    R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
    O2 - BHO: (no name) - {64466B8E-20A7-4A4A-AFF4-AAD9CA68B52C} - C:\Program Files\WebMediaViewer\hpmun.dll
    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O3 - Toolbar: Rambler-Àññèñòåíò - {468CD8A9-7C25-45FA-969E-3D925C689DC4} - C:\Program Files\Rambler Assistant\ramblertoolbarU5090.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
    O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Knob ante] "C:\ProgramData\Sizefirstfirst.dgjsobl"
    O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
    O4 - HKCU\..\Run: [Help Creative Meow City] "C:\ProgramData\settings soft slow.p65saf9"
    O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; FDM)" -"http://www.jeux-gratuits.com/jeu/125/jeu+gratuit+sudoku+ultimate+sudoku/"
    O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
    O9 - Extra button: C????????? ?????? ???-??????? - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
    O9 - Extra button: (no name) - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
    O11 - Options group: [INTERNATIONAL] International*
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O13 - Gopher Prefix:
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
    O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll
    O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
    O23 - Service: Kaspersky Anti-Virus (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" -r (file missing)
    O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

    répondre
    naheulbeuk le 22 novembre 2008 à 17h50
    re, :)

    il reste une infection lop et quelques programmes infectés à virer ;)

    Désactive l'UAC ( Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valide par OK , il te sera demandé de redémarrer , fais le )

    Télécharge Lop S&D de Angeldark et Eric71 sur ton bureau.

  • Double-clique dessus pour lancer l'installation
  • Puis double-clique sur le raccourci Lop S&D présent sur ton bureau
  • Séléctionne la langue souhaitée, puis choisis l'Option 1 ( Recherche )
  • Patiente jusqu'à la fin du scan
  • Poste le rapport généré ( C:\lopR.txt )

    ( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide).

    :p
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • répondre
    David_-_ le 22 novembre 2008 à 18h18
    naheulbeuk a écrit :
    re, :)

    il reste une infection lop et quelques programmes infectés à virer ;)

    Désactive l'UAC ( Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valide par OK , il te sera demandé de redémarrer , fais le )

    Télécharge Lop S&D de Angeldark et Eric71 sur ton bureau.

  • Double-clique dessus pour lancer l'installation
  • Puis double-clique sur le raccourci Lop S&D présent sur ton bureau
  • Séléctionne la langue souhaitée, puis choisis l'Option 1 ( Recherche )
  • Patiente jusqu'à la fin du scan
  • Poste le rapport généré ( C:\lopR.txt )

    ( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide).

    :p


    • voila

    --------------------\\ Lop S&D 4.2.4-9c XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : David ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total:225 Go (Free:142 Go)
    D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)
    J:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
    Option : [1] ( 22/11/2008|18:12 )

    [ UAC => 0 ]

    --------------------\\ Listing des dossiers dans Local

    [02/07/2008|15:03] C:\Users\David\AppData\Local\Adobe
    [29/04/2008|15:06] C:\Users\David\AppData\Local\Ahead
    [16/01/2008|15:33] C:\Users\David\AppData\Local\Application Data
    [18/11/2008|20:34] C:\Users\David\AppData\Local\d3d9caps.dat
    [19/11/2008|15:45] C:\Users\David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [16/01/2008|21:52] C:\Users\David\AppData\Local\eMule
    [01/07/2008|20:09] C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
    [14/10/2008|19:54] C:\Users\David\AppData\Local\GlobalSCAPE
    [22/11/2008|17:00] C:\Users\David\AppData\Local\Google
    [16/01/2008|15:39] C:\Users\David\AppData\Local\Hewlett-Packard
    [16/01/2008|15:33] C:\Users\David\AppData\Local\Historique
    [15/04/2008|16:46] C:\Users\David\AppData\Local\HP
    [22/11/2008|18:04] C:\Users\David\AppData\Local\IconCache.db
    [16/07/2008|15:41] C:\Users\David\AppData\Local\Installer19396
    [16/07/2008|15:49] C:\Users\David\AppData\Local\Installer9544
    [22/11/2008|00:00] C:\Users\David\AppData\Local\Microsoft
    [11/02/2008|23:53] C:\Users\David\AppData\Local\Microsoft Games
    [27/03/2008|18:10] C:\Users\David\AppData\Local\Mozilla
    [29/04/2008|15:11] C:\Users\David\AppData\Local\Nero
    [26/06/2008|11:07] C:\Users\David\AppData\Local\Panda Software
    [19/02/2008|18:31] C:\Users\David\AppData\Local\Sony
    [22/11/2008|18:10] C:\Users\David\AppData\Local\Temp
    [08/10/2008|16:42] C:\Users\David\AppData\Local\TempData.ldb
    [08/10/2008|16:41] C:\Users\David\AppData\Local\TempData.mdb
    [16/01/2008|15:33] C:\Users\David\AppData\Local\Temporary Internet Files
    [30/06/2008|10:51] C:\Users\David\AppData\Local\Virtools
    [30/01/2008|19:55] C:\Users\David\AppData\Local\VirtualStore

    --------------------\\ Tâches planifiées dans C:\Windows\tasks

    [21/11/2008 18:02][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{31DF0D02-808A-4ED2-9355-0EAF40D469EC}.job
    [22/11/2008 18:07][--ah-----] C:\Windows\tasks\SA.DAT
    [22/11/2008 18:05][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    --------------------\\ Listing des dossiers dans C:\ProgramData

    [12/11/2008|21:27] C:\ProgramData\Adobe
    [27/01/2008|20:17] C:\ProgramData\Ahead
    [16/11/2008|20:14] C:\ProgramData\aim rect help creative
    [02/11/2006|14:02] C:\ProgramData\Application Data
    [16/11/2008|20:14] C:\ProgramData\Boob gram iso
    [16/01/2008|15:30] C:\ProgramData\Bureau
    [02/11/2006|14:02] C:\ProgramData\Desktop
    [02/11/2006|14:02] C:\ProgramData\Documents
    [16/01/2008|21:52] C:\ProgramData\eMule
    [17/04/2008|22:37] C:\ProgramData\ezsid.dat
    [16/01/2008|15:30] C:\ProgramData\Favoris
    [02/11/2006|14:02] C:\ProgramData\Favorites
    [17/11/2008|00:16] C:\ProgramData\Fighters
    [01/07/2008|20:09] C:\ProgramData\FLEXnet
    [11/06/2008|03:23] C:\ProgramData\FreeDownloadManager.ORG
    [14/10/2008|19:54] C:\ProgramData\GlobalSCAPE
    [22/11/2008|16:59] C:\ProgramData\Google
    [18/11/2008|16:24] C:\ProgramData\Grisoft
    [16/01/2008|15:40] C:\ProgramData\Hewlett-Packard
    [24/10/2007|22:36] C:\ProgramData\HP
    [24/10/2007|22:36] C:\ProgramData\hpzinstall.log
    [04/11/2008|22:42] C:\ProgramData\ICQ
    [22/11/2008|18:07] C:\ProgramData\Kaspersky Lab
    [27/07/2008|02:16] C:\ProgramData\Kaspersky Lab Setup Files
    [16/11/2008|01:25] C:\ProgramData\Lavasoft
    [29/04/2008|14:56] C:\ProgramData\LightScribe
    [07/09/2008|13:09] C:\ProgramData\Logishrd
    [30/04/2008|08:46] C:\ProgramData\Logitech
    [15/03/2008|23:41] C:\ProgramData\LUUnInstall.LiveUpdate
    [16/01/2008|15:30] C:\ProgramData\Menu D‚marrer
    [30/04/2008|08:23] C:\ProgramData\Microsoft
    [16/01/2008|15:30] C:\ProgramData\ModŠles
    [24/10/2007|22:43] C:\ProgramData\muvee Technologies
    [10/06/2008|11:45] C:\ProgramData\NCH Software
    [10/06/2008|11:42] C:\ProgramData\NCH Swift Sound
    [22/08/2008|12:06] C:\ProgramData\Nero
    [30/08/2008|21:31] C:\ProgramData\NVIDIA
    [24/10/2007|22:49] C:\ProgramData\PC-Doctor
    [18/10/2008|13:32] C:\ProgramData\Roxio
    [05/05/2008|17:48] C:\ProgramData\Sect barb funk.mrt72m
    [26/05/2008|23:40] C:\ProgramData\settings soft slow.p65saf9
    [18/06/2008|16:56] C:\ProgramData\Sizefirstfirst.03ioe
    [20/06/2008|23:17] C:\ProgramData\Sizefirstfirst.06bqkpc
    [18/06/2008|17:39] C:\ProgramData\Sizefirstfirst.084whq
    [17/06/2008|17:15] C:\ProgramData\Sizefirstfirst.0g5e2g
    [20/06/2008|21:06] C:\ProgramData\Sizefirstfirst.0tncnig
    [20/06/2008|15:38] C:\ProgramData\Sizefirstfirst.12qat1
    [20/06/2008|18:11] C:\ProgramData\Sizefirstfirst.167kmgy
    [21/06/2008|18:33] C:\ProgramData\Sizefirstfirst.1ywi9
    [17/06/2008|20:10] C:\ProgramData\Sizefirstfirst.256vj
    [19/06/2008|16:19] C:\ProgramData\Sizefirstfirst.2a1xvv
    [20/06/2008|21:50] C:\ProgramData\Sizefirstfirst.2bt10e
    [22/06/2008|20:20] C:\ProgramData\Sizefirstfirst.2jnpd
    [17/06/2008|15:03] C:\ProgramData\Sizefirstfirst.2r9gs
    [18/06/2008|00:54] C:\ProgramData\Sizefirstfirst.2tpq98
    [05/05/2008|17:47] C:\ProgramData\Sizefirstfirst.329e8fl
    [20/06/2008|13:05] C:\ProgramData\Sizefirstfirst.32uuk
    [17/06/2008|17:37] C:\ProgramData\Sizefirstfirst.3314a9
    [22/06/2008|17:25] C:\ProgramData\Sizefirstfirst.34f5fae
    [19/06/2008|14:30] C:\ProgramData\Sizefirstfirst.36acn6s
    [19/06/2008|14:08] C:\ProgramData\Sizefirstfirst.37sbhmj
    [19/06/2008|17:03] C:\ProgramData\Sizefirstfirst.3a0s0dz
    [16/06/2008|23:56] C:\ProgramData\Sizefirstfirst.3bv1v
    [17/06/2008|01:45] C:\ProgramData\Sizefirstfirst.3gu4c
    [21/06/2008|15:16] C:\ProgramData\Sizefirstfirst.3i51e
    [19/06/2008|19:36] C:\ProgramData\Sizefirstfirst.3iid7y
    [20/06/2008|16:22] C:\ProgramData\Sizefirstfirst.3niuu0
    [20/06/2008|22:55] C:\ProgramData\Sizefirstfirst.3r10ju4
    [19/06/2008|13:25] C:\ProgramData\Sizefirstfirst.3t6zw
    [20/06/2008|10:32] C:\ProgramData\Sizefirstfirst.3vvag
    [19/06/2008|21:03] C:\ProgramData\Sizefirstfirst.3z4ti
    [17/06/2008|16:53] C:\ProgramData\Sizefirstfirst.41naqh
    [21/06/2008|17:27] C:\ProgramData\Sizefirstfirst.4an4btr
    [21/06/2008|17:49] C:\ProgramData\Sizefirstfirst.4ldewm
    [20/04/2008|23:18] C:\ProgramData\Sizefirstfirst.4mtfa55
    [18/06/2008|03:27] C:\ProgramData\Sizefirstfirst.4vzuu8r
    [20/06/2008|14:33] C:\ProgramData\Sizefirstfirst.4y5iq0
    [17/06/2008|23:48] C:\ProgramData\Sizefirstfirst.4zfwlx
    [18/06/2008|20:12] C:\ProgramData\Sizefirstfirst.50bun
    [18/06/2008|09:39] C:\ProgramData\Sizefirstfirst.5106kva
    [19/06/2008|22:31] C:\ProgramData\Sizefirstfirst.57za7
    [17/06/2008|01:01] C:\ProgramData\Sizefirstfirst.5e601ea
    [18/06/2008|00:32] C:\ProgramData\Sizefirstfirst.5kluk
    [21/06/2008|14:33] C:\ProgramData\Sizefirstfirst.5kmhrgp
    [18/06/2008|00:10] C:\ProgramData\Sizefirstfirst.5lnyi
    [19/06/2008|19:58] C:\ProgramData\Sizefirstfirst.5q3fa
    [20/06/2008|23:44] C:\ProgramData\Sizefirstfirst.5qq68a
    [17/06/2008|14:19] C:\ProgramData\Sizefirstfirst.5wks1u
    [18/06/2008|16:34] C:\ProgramData\Sizefirstfirst.5xfr0j
    [19/06/2008|18:09] C:\ProgramData\Sizefirstfirst.5z8vb
    [18/06/2008|21:18] C:\ProgramData\Sizefirstfirst.67gb8w
    [18/06/2008|11:28] C:\ProgramData\Sizefirstfirst.67w1pf
    [20/06/2008|17:27] C:\ProgramData\Sizefirstfirst.69thg
    [19/06/2008|15:36] C:\ProgramData\Sizefirstfirst.6dfdt
    [16/06/2008|23:34] C:\ProgramData\Sizefirstfirst.6szufg
    [20/06/2008|13:49] C:\ProgramData\Sizefirstfirst.72j6hhm
    [21/06/2008|20:22] C:\ProgramData\Sizefirstfirst.79nzo
    [20/06/2008|10:11] C:\ProgramData\Sizefirstfirst.7c17ega
    [17/06/2008|22:43] C:\ProgramData\Sizefirstfirst.7nn7be
    [20/06/2008|18:33] C:\ProgramData\Sizefirstfirst.7nu4323
    [17/06/2008|19:48] C:\ProgramData\Sizefirstfirst.84dq28p
    [20/06/2008|22:11] C:\ProgramData\Sizefirstfirst.85k8g
    [17/06/2008|22:21] C:\ProgramData\Sizefirstfirst.8fdww
    [17/06/2008|13:36] C:\ProgramData\Sizefirstfirst.8kc68
    [17/06/2008|16:31] C:\ProgramData\Sizefirstfirst.8lfcqnh
    [17/06/2008|18:42] C:\ProgramData\Sizefirstfirst.8sltu5k
    [20/06/2008|13:27] C:\ProgramData\Sizefirstfirst.8yuel
    [20/06/2008|10:54] C:\ProgramData\Sizefirstfirst.90jvug
    [21/06/2008|13:05] C:\ProgramData\Sizefirstfirst.90ufp9v
    [22/06/2008|21:03] C:\ProgramData\Sizefirstfirst.93ejm
    [18/06/2008|19:07] C:\ProgramData\Sizefirstfirst.95do4
    [18/06/2008|17:17] C:\ProgramData\Sizefirstfirst.97tjud3
    [21/06/2008|14:55] C:\ProgramData\Sizefirstfirst.99l3kf
    [18/06/2008|10:44] C:\ProgramData\Sizefirstfirst.9anedh
    [21/06/2008|14:11] C:\ProgramData\Sizefirstfirst.9g129t
    [22/06/2008|17:03] C:\ProgramData\Sizefirstfirst.9i8gct
    [22/06/2008|16:41] C:\ProgramData\Sizefirstfirst.9i9ubfr
    [18/06/2008|04:32] C:\ProgramData\Sizefirstfirst.a6uduc
    [19/06/2008|22:09] C:\ProgramData\Sizefirstfirst.agxrr
    [17/06/2008|21:59] C:\ProgramData\Sizefirstfirst.aiurj
    [26/05/2008|23:39] C:\ProgramData\Sizefirstfirst.arc2qz
    [18/06/2008|19:50] C:\ProgramData\Sizefirstfirst.ash5tdi
    [19/06/2008|14:52] C:\ProgramData\Sizefirstfirst.b1l8fk5
    [17/06/2008|20:31] C:\ProgramData\Sizefirstfirst.bauw0
    [19/06/2008|15:58] C:\ProgramData\Sizefirstfirst.bi4nu5
    [18/06/2008|15:50] C:\ProgramData\Sizefirstfirst.bo2yi
    [19/06/2008|17:47] C:\ProgramData\Sizefirstfirst.c320z
    [18/06/2008|14:23] C:\ProgramData\Sizefirstfirst.c4kfl
    [22/06/2008|18:30] C:\ProgramData\Sizefirstfirst.cnyib
    [19/06/2008|20:20] C:\ProgramData\Sizefirstfirst.crwn0nt
    [20/06/2008|12:44] C:\ProgramData\Sizefirstfirst.cs9ixr
    [21/06/2008|12:22] C:\ProgramData\Sizefirstfirst.cy84pb
    [18/06/2008|15:28] C:\ProgramData\Sizefirstfirst.d7cjs3d
    [21/06/2008|19:17] C:\ProgramData\Sizefirstfirst.dcfoqhp
    [21/06/2008|15:38] C:\ProgramData\Sizefirstfirst.dchtk
    [21/06/2008|12:43] C:\ProgramData\Sizefirstfirst.de5uo8
    [23/06/2008|09:37] C:\ProgramData\Sizefirstfirst.dgjsobl
    [19/06/2008|16:41] C:\ProgramData\Sizefirstfirst.dpic4s6
    [17/06/2008|13:14] C:\ProgramData\Sizefirstfirst.e1ldq
    [16/06/2008|18:50] C:\ProgramData\Sizefirstfirst.eczm46
    [18/06/2008|04:10] C:\ProgramData\Sizefirstfirst.eopx1
    [18/06/2008|13:17] C:\ProgramData\Sizefirstfirst.f8vzt6m
    [18/06/2008|20:56] C:\ProgramData\Sizefirstfirst.fajbx
    [19/06/2008|21:47] C:\ProgramData\Sizefirstfirst.fbo3y
    [20/06/2008|19:17] C:\ProgramData\Sizefirstfirst.fd6sor3
    [20/06/2008|14:55] C:\ProgramData\Sizefirstfirst.ffg41
    [18/06/2008|18:01] C:\ProgramData\Sizefirstfirst.fgv1jz
    [17/06/2008|20:53] C:\ProgramData\Sizefirstfirst.fr6sb
    [21/06/2008|21:50] C:\ProgramData\Sizefirstfirst.fttdgrp
    [18/06/2008|21:39] C:\ProgramData\Sizefirstfirst.geep84
    [20/06/2008|20:44] C:\ProgramData\Sizefirstfirst.gf7gq9
    [21/06/2008|13:49] C:\ProgramData\Sizefirstfirst.ghgk3
    [16/06/2008|19:12] C:\ProgramData\Sizefirstfirst.gjb8dqp
    [19/06/2008|11:57] C:\ProgramData\Sizefirstfirst.gldaj
    [18/06/2008|04:54] C:\ProgramData\Sizefirstfirst.gu9d4
    [21/06/2008|21:06] C:\ProgramData\Sizefirstfirst.h0wfg6
    [19/06/2008|22:53] C:\ProgramData\Sizefirstfirst.h3a9lt
    [18/06/2008|11:06] C:\ProgramData\Sizefirstfirst.h3qpl
    [17/06/2008|01:23] C:\ProgramData\Sizefirstfirst.h6bxfah
    [18/06/2008|16:12] C:\ProgramData\Sizefirstfirst.hegm0
    [21/06/2008|20:44] C:\ProgramData\Sizefirstfirst.hm3euqw
    [17/06/2008|15:47] C:\ProgramData\Sizefirstfirst.hxtsk
    [16/06/2008|17:01] C:\ProgramData\Sizefirstfirst.hxvrpc
    [17/06/2008|02:07] C:\ProgramData\Sizefirstfirst.i3kzkw
    [22/06/2008|14:52] C:\ProgramData\Sizefirstfirst.i7uyx
    [20/06/2008|09:49] C:\ProgramData\Sizefirstfirst.ibfv73i
    [16/06/2008|17:22] C:\ProgramData\Sizefirstfirst.iej69a
    [16/06/2008|16:39] C:\ProgramData\Sizefirstfirst.ifxft57
    [21/06/2008|22:11] C:\ProgramData\Sizefirstfirst.imp6zer
    [16/06/2008|20:39] C:\ProgramData\Sizefirstfirst.ip7nv
    [22/06/2008|16:19] C:\ProgramData\Sizefirstfirst.ireckq6
    [16/06/2008|23:12] C:\ProgramData\Sizefirstfirst.iyoyh
    [20/06/2008|11:16] C:\ProgramData\Sizefirstfirst.j7rmpn
    [18/06/2008|20:34] C:\ProgramData\Sizefirstfirst.jowj0
    [18/06/2008|05:38] C:\ProgramData\Sizefirstfirst.jt1hz
    [21/06/2008|13:27] C:\ProgramData\Sizefirstfirst.k3316v
    [26/05/2008|23:39] C:\ProgramData\Sizefirstfirst.k3q21t
    [18/06/2008|19:28] C:\ProgramData\Sizefirstfirst.ka761cq
    [20/06/2008|09:05] C:\ProgramData\Sizefirstfirst.kn6lk8f
    [16/06/2008|16:17] C:\ProgramData\Sizefirstfirst.ko3av
    [18/06/2008|08:11] C:\ProgramData\Sizefirstfirst.kot9l
    [17/06/2008|23:26] C:\ProgramData\Sizefirstfirst.l39f1
    [18/06/2008|12:55] C:\ProgramData\Sizefirstfirst.ltfouiy
    [16/06/2008|21:45] C:\ProgramData\Sizefirstfirst.lypwhgk
    [22/06/2008|21:25] C:\ProgramData\Sizefirstfirst.m74h2t0
    [16/06/2008|17:44] C:\ProgramData\Sizefirstfirst.miqpb4n
    [16/06/2008|18:06] C:\ProgramData\Sizefirstfirst.mlrktn
    [18/06/2008|01:16] C:\ProgramData\Sizefirstfirst.mr2vy
    [18/06/2008|05:59] C:\ProgramData\Sizefirstfirst.muu90
    [18/06/2008|01:59] C:\ProgramData\Sizefirstfirst.mwdienx
    [20/06/2008|15:16] C:\ProgramData\Sizefirstfirst.mx74ep
    [18/06/2008|01:37] C:\ProgramData\Sizefirstfirst.n9oioq7
    [18/06/2008|02:43] C:\ProgramData\Sizefirstfirst.naws7
    [18/06/2008|12:12] C:\ProgramData\Sizefirstfirst.nbdf3
    [20/06/2008|17:49] C:\ProgramData\Sizefirstfirst.nheci
    [20/06/2008|22:33] C:\ProgramData\Sizefirstfirst.nkgjyt7
    [18/06/2008|13:39] C:\ProgramData\Sizefirstfirst.nmup08
    [21/06/2008|16:44] C:\ProgramData\Sizefirstfirst.nzvnwfi
    [21/06/2008|21:28] C:\ProgramData\Sizefirstfirst.o4gih
    [18/06/2008|09:17] C:\ProgramData\Sizefirstfirst.oldl0
    [20/06/2008|19:39] C:\ProgramData\Sizefirstfirst.omb5w
    [19/06/2008|13:03] C:\ProgramData\Sizefirstfirst.oqn99zd
    [19/06/2008|21:25] C:\ProgramData\Sizefirstfirst.oxdl80a
    [22/06/2008|15:57] C:\ProgramData\Sizefirstfirst.p1dx1
    [22/06/2008|19:14] C:\ProgramData\Sizefirstfirst.p259siv
    [21/06/2008|20:00] C:\ProgramData\Sizefirstfirst.p7n1w
    [20/06/2008|18:55] C:\ProgramData\Sizefirstfirst.pgi3kj
    [17/06/2008|19:26] C:\ProgramData\Sizefirstfirst.plgqs
    [17/06/2008|13:57] C:\ProgramData\Sizefirstfirst.pn43pr6
    [18/06/2008|22:01] C:\ProgramData\Sizefirstfirst.porbst4
    [21/06/2008|12:00] C:\ProgramData\Sizefirstfirst.ppaj2k4
    [21/06/2008|11:38] C:\ProgramData\Sizefirstfirst.ptazu
    [22/06/2008|18:52] C:\ProgramData\Sizefirstfirst.ptyht
    [20/06/2008|17:06] C:\ProgramData\Sizefirstfirst.q3bdjm
    [20/06/2008|16:44] C:\ProgramData\Sizefirstfirst.q8rdoo
    [19/06/2008|23:14] C:\ProgramData\Sizefirstfirst.qh3hyo
    [21/06/2008|22:33] C:\ProgramData\Sizefirstfirst.qpn97
    [17/06/2008|19:04] C:\ProgramData\Sizefirstfirst.qqy451
    [17/06/2008|02:50] C:\ProgramData\Sizefirstfirst.qt169di
    [18/06/2008|11:50] C:\ProgramData\Sizefirstfirst.r00wz
    [18/06/2008|05:16] C:\ProgramData\Sizefirstfirst.r010x
    [19/06/2008|19:14] C:\ProgramData\Sizefirstfirst.r3w8y
    [20/06/2008|12:22] C:\ProgramData\Sizefirstfirst.r6j85
    [21/06/2008|16:00] C:\ProgramData\Sizefirstfirst.r9ev89
    [19/06/2008|15:14] C:\ProgramData\Sizefirstfirst.ra1c0
    [18/06/2008|03:48] C:\ProgramData\Sizefirstfirst.ra6ug2k
    [16/06/2008|19:34] C:\ProgramData\Sizefirstfirst.rf4dps
    [22/06/2008|18:09] C:\ProgramData\Sizefirstfirst.rfmpz
    [22/06/2008|22:09] C:\ProgramData\Sizefirstfirst.rhbng
    [18/06/2008|12:33] C:\ProgramData\Sizefirstfirst.rhl0pm9
    [18/06/2008|18:23] C:\ProgramData\Sizefirstfirst.rk03fk
    [18/06/2008|08:33] C:\ProgramData\Sizefirstfirst.rv5ym
    [21/06/2008|17:06] C:\ProgramData\Sizefirstfirst.ryfok6
    [19/06/2008|18:30] C:\ProgramData\Sizefirstfirst.s6mqp2
    [19/06/2008|12:19] C:\ProgramData\Sizefirstfirst.s9rqlq
    [21/06/2008|18:55] C:\ProgramData\Sizefirstfirst.say67v
    [16/06/2008|18:28] C:\ProgramData\Sizefirstfirst.splnx
    [19/06/2008|20:41] C:\ProgramData\Sizefirstfirst.t1hapke
    [17/06/2008|14:41] C:\ProgramData\Sizefirstfirst.t334j
    [22/06/2008|15:36] C:\ProgramData\Sizefirstfirst.t46qpq
    [16/06/2008|22:28] C:\ProgramData\Sizefirstfirst.t4uj3p
    [20/06/2008|21:28] C:\ProgramData\Sizefirstfirst.tb36s6p
    [22/06/2008|19:36] C:\ProgramData\Sizefirstfirst.tguhsz
    [19/06/2008|12:41] C:\ProgramData\Sizefirstfirst.th50vtw
    [20/06/2008|16:00] C:\ProgramData\Sizefirstfirst.tjje7
    [16/06/2008|20:17] C:\ProgramData\Sizefirstfirst.tmuupu
    [17/06/2008|00:39] C:\ProgramData\Sizefirstfirst.ty06a
    [17/06/2008|23:04] C:\ProgramData\Sizefirstfirst.u1ggu9
    [22/06/2008|17:47] C:\ProgramData\Sizefirstfirst.u68l2bz
    [20/06/2008|12:00] C:\ProgramData\Sizefirstfirst.uamzzq
    [21/06/2008|22:55] C:\ProgramData\Sizefirstfirst.uhl46m
    [21/06/2008|18:11] C:\ProgramData\Sizefirstfirst.ui4hx5
    [18/06/2008|10:01] C:\ProgramData\Sizefirstfirst.ulolg
    [18/06/2008|10:22] C:\ProgramData\Sizefirstfirst.unv8yx
    [17/06/2008|15:25] C:\ProgramData\Sizefirstfirst.use8n
    [16/06/2008|21:23] C:\ProgramData\Sizefirstfirst.utyi2az
    [16/06/2008|22:06] C:\ProgramData\Sizefirstfirst.uvy91y
    [17/06/2008|18:20] C:\ProgramData\Sizefirstfirst.uwwxv9m
    [20/06/2008|14:11] C:\ProgramData\Sizefirstfirst.w1f77hl
    [20/06/2008|20:22] C:\ProgramData\Sizefirstfirst.w2fzn3
    [20/06/2008|11:38] C:\ProgramData\Sizefirstfirst.w3c30
    [17/06/2008|00:17] C:\ProgramData\Sizefirstfirst.w827m2
    [17/06/2008|21:15] C:\ProgramData\Sizefirstfirst.w8gez
    [22/06/2008|19:58] C:\ProgramData\Sizefirstfirst.wev3gx
    [17/06/2008|16:09] C:\ProgramData\Sizefirstfirst.wf420dp
    [21/06/2008|19:38] C:\ProgramData\Sizefirstfirst.xgeuuq
    [22/06/2008|21:47] C:\ProgramData\Sizefirstfirst.xpnm5
    [18/06/2008|02:21] C:\ProgramData\Sizefirstfirst.xwu30
    [18/06/2008|15:06] C:\ProgramData\Sizefirstfirst.y0de08
    [22/06/2008|20:41] C:\ProgramData\Sizefirstfirst.y1dv5iq
    [18/06/2008|14:01] C:\ProgramData\Sizefirstfirst.y1meh
    [20/06/2008|09:27] C:\ProgramData\Sizefirstfirst.yaejul
    [19/06/2008|13:47] C:\ProgramData\Sizefirstfirst.ybx0t
    [18/06/2008|03:05] C:\ProgramData\Sizefirstfirst.yiyy3r
    [17/06/2008|21:37] C:\ProgramData\Sizefirstfirst.ykavkq
    [19/06/2008|17:25] C:\ProgramData\Sizefirstfirst.yu72ffi
    [16/06/2008|19:55] C:\ProgramData\Sizefirstfirst.yw27dd
    [21/06/2008|16:22] C:\ProgramData\Sizefirstfirst.z0icc
    [18/06/2008|08:55] C:\ProgramData\Sizefirstfirst.z3hq4
    [22/06/2008|15:14] C:\ProgramData\Sizefirstfirst.z4k62
    [17/06/2008|17:59] C:\ProgramData\Sizefirstfirst.z7uohn
    [17/06/2008|02:29] C:\ProgramData\Sizefirstfirst.zb5nqfu
    [16/06/2008|21:01] C:\ProgramData\Sizefirstfirst.zfv6kub
    [18/06/2008|14:44] C:\ProgramData\Sizefirstfirst.zl0ci
    [16/06/2008|22:50] C:\ProgramData\Sizefirstfirst.zmuil
    [19/06/2008|18:52] C:\ProgramData\Sizefirstfirst.zuu7r
    [20/06/2008|20:00] C:\ProgramData\Sizefirstfirst.zx08x
    [18/06/2008|18:45] C:\ProgramData\Sizefirstfirst.zy0ygub
    [22/05/2008|11:54] C:\ProgramData\Skype
    [24/10/2007|22:37] C:\ProgramData\Sonic
    [14/02/2008|23:57] C:\ProgramData\Sony
    [21/11/2008|17:32] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|14:02] C:\ProgramData\Start Menu
    [15/03/2008|23:43] C:\ProgramData\Symantec
    [15/11/2008|18:19] C:\ProgramData\TEMP
    [02/11/2006|14:02] C:\ProgramData\Templates
    [08/10/2008|03:05] C:\ProgramData\WindowsSearch
    [16/01/2008|17:06] C:\ProgramData\WLInstaller
    [29/07/2008|02:16] C:\ProgramData\Yahoo!
    [29/07/2008|02:19] C:\ProgramData\Yahoo! Companion

    --------------------\\ Listing des dossiers dans C:\Program Files

    [12/11/2008|21:26] C:\Program Files\Adobe
    [03/10/2008|19:12] C:\Program Files\Alcohol Soft
    [18/01/2008|00:51] C:\Program Files\Armenian NLS
    [10/06/2008|13:19] C:\Program Files\AtomixMP3
    [10/06/2008|00:23] C:\Program Files\AviSynth 2.5
    [10/06/2008|11:36] C:\Program Files\AVS4YOU
    [16/09/2008|16:22] C:\Program Files\BClub
    [10/06/2008|11:31] C:\Program Files\Best_Security_Tips
    [20/04/2008|23:18] C:\Program Files\BitDownload
    [21/11/2008|17:32] C:\Program Files\BitTorrent Fastest Tool
    [15/11/2008|02:07] C:\Program Files\CCleaner
    [13/10/2008|19:17] C:\Program Files\clock-desktop
    [22/11/2008|14:13] C:\Program Files\Common Files
    [14/09/2008|20:08] C:\Program Files\DivX
    [06/10/2008|17:45] C:\Program Files\Download Direct
    [25/10/2007|07:37] C:\Program Files\EasyBits
    [18/01/2008|22:28] C:\Program Files\EasyBits For Kids
    [16/01/2008|21:52] C:\Program Files\eMule
    [08/06/2008|23:40] C:\Program Files\eMule Turbo Accelerator
    [16/11/2008|20:08] C:\Program Files\Enigma Software Group
    [10/09/2008|13:02] C:\Program Files\EoRezo
    [16/01/2008|15:30] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [22/11/2008|00:40] C:\Program Files\Fighters
    [11/06/2008|03:24] C:\Program Files\Free Download Manager
    [09/11/2008|03:37] C:\Program Files\FREE Music Downloader
    [14/10/2008|19:54] C:\Program Files\GlobalSCAPE
    [22/11/2008|17:00] C:\Program Files\Google
    [18/11/2008|16:24] C:\Program Files\Grisoft
    [28/09/2008|19:57] C:\Program Files\GTR 2
    [24/10/2007|22:50] C:\Program Files\Hewlett-Packard
    [29/08/2008|18:15] C:\Program Files\HP
    [04/11/2008|22:43] C:\Program Files\ICQ6
    [04/11/2008|22:42] C:\Program Files\ICQ6Toolbar
    [09/11/2008|19:14] C:\Program Files\InstallShield Installation Information
    [21/09/2008|02:01] C:\Program Files\Internet Explorer
    [17/08/2008|02:19] C:\Program Files\IZArc
    [10/07/2008|20:17] C:\Program Files\Java
    [27/07/2008|02:24] C:\Program Files\Kaspersky Lab
    [09/11/2008|18:43] C:\Program Files\LG Electronics
    [07/09/2008|13:09] C:\Program Files\Logitech
    [02/11/2006|13:37] C:\Program Files\Microsoft Games
    [24/10/2007|22:46] C:\Program Files\Microsoft Office
    [14/02/2008|23:59] C:\Program Files\Microsoft SQL Server
    [10/09/2008|14:02] C:\Program Files\Microsoft Works
    [09/05/2008|20:49] C:\Program Files\Movie Maker
    [22/11/2008|15:44] C:\Program Files\Mozilla Firefox
    [02/11/2006|13:37] C:\Program Files\MSBuild
    [16/01/2008|17:27] C:\Program Files\MSXML 4.0
    [24/10/2007|22:43] C:\Program Files\muvee Technologies
    [22/11/2008|00:03] C:\Program Files\Navilog1
    [11/06/2008|12:10] C:\Program Files\NCH Software
    [22/08/2008|11:40] C:\Program Files\NCH Swift Sound
    [22/08/2008|12:06] C:\Program Files\Nero
    [29/04/2008|14:55] C:\Program Files\NeroInstall.bak
    [16/01/2008|15:50] C:\Program Files\NETGEAR
    [02/06/2008|17:09] C:\Program Files\Opera
    [24/10/2007|23:04] C:\Program Files\PC-Doctor 5 for Windows
    [04/02/2008|22:47] C:\Program Files\Rambler Assistant
    [06/03/2008|17:56] C:\Program Files\Real
    [28/03/2008|19:47] C:\Program Files\Realtek
    [02/11/2006|13:37] C:\Program Files\Reference Assemblies
    [10/06/2008|00:04] C:\Program Files\Replay Converter
    [24/10/2007|22:42] C:\Program Files\Roxio
    [20/09/2008|16:32] C:\Program Files\San Andreas Mod Installer
    [24/10/2007|22:52] C:\Program Files\Services en ligne
    [22/05/2008|11:54] C:\Program Files\Skype
    [11/06/2008|03:23] C:\Program Files\Software Informer
    [19/03/2008|14:43] C:\Program Files\Sony
    [19/02/2008|18:28] C:\Program Files\Sony Setup
    [15/11/2008|18:21] C:\Program Files\Spybot - Search & Destroy
    [13/11/2008|03:12] C:\Program Files\Steam
    [10/07/2008|20:18] C:\Program Files\Sun
    [15/03/2008|23:41] C:\Program Files\Symantec
    [19/03/2008|19:34] C:\Program Files\SystemRequirementsLab
    [15/02/2008|00:01] C:\Program Files\Uninstall Information
    [13/10/2008|19:00] C:\Program Files\UselessCreations
    [03/10/2008|14:53] C:\Program Files\uTorrent
    [29/01/2008|20:59] C:\Program Files\Veoh Networks
    [17/01/2008|13:57] C:\Program Files\VideoLAN
    [30/06/2008|10:51] C:\Program Files\Virtools
    [22/11/2008|14:51] C:\Program Files\WebMediaViewer
    [09/05/2008|20:49] C:\Program Files\Windows Calendar
    [09/05/2008|20:49] C:\Program Files\Windows Collaboration
    [09/05/2008|20:49] C:\Program Files\Windows Defender
    [09/05/2008|20:49] C:\Program Files\Windows Journal
    [16/01/2008|17:10] C:\Program Files\Windows Live
    [16/10/2008|19:35] C:\Program Files\Windows Mail
    [09/05/2008|20:49] C:\Program Files\Windows Media Player
    [16/01/2008|15:30] C:\Program Files\Windows NT
    [09/05/2008|20:49] C:\Program Files\Windows Photo Gallery
    [09/05/2008|20:49] C:\Program Files\Windows Sidebar
    [29/07/2008|02:13] C:\Program Files\Yahoo!
    [14/09/2008|19:05] C:\Program Files\Zaycev Downloader

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [12/11/2008|21:27] C:\Program Files\Common Files\Adobe
    [27/01/2008|21:12] C:\Program Files\Common Files\Ahead
    [10/06/2008|11:28] C:\Program Files\Common Files\AVSMedia
    [24/10/2007|22:36] C:\Program Files\Common Files\HP
    [14/10/2008|19:53] C:\Program Files\Common Files\InstallShield
    [24/10/2007|22:45] C:\Program Files\Common Files\Java
    [24/10/2007|22:43] C:\Program Files\Common Files\LightScribe
    [07/09/2008|13:11] C:\Program Files\Common Files\logishrd
    [30/04/2008|08:47] C:\Program Files\Common Files\Logitech
    [24/10/2007|22:42] C:\Program Files\Common Files\LS Getting Started
    [16/01/2008|17:11] C:\Program Files\Common Files\microsoft shared
    [24/10/2007|22:43] C:\Program Files\Common Files\muvee Technologies
    [22/08/2008|12:09] C:\Program Files\Common Files\Nero
    [27/03/2008|18:29] C:\Program Files\Common Files\PX Storage Engine
    [24/09/2008|17:12] C:\Program Files\Common Files\Real
    [24/10/2007|22:42] C:\Program Files\Common Files\Roxio Shared
    [02/11/2006|12:18] C:\Program Files\Common Files\Services
    [22/05/2008|11:54] C:\Program Files\Common Files\Skype
    [23/03/2008|19:11] C:\Program Files\Common Files\Softwin
    [24/10/2007|22:42] C:\Program Files\Common Files\Sonic Shared
    [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
    [12/11/2008|21:32] C:\Program Files\Common Files\Steam
    [24/10/2007|22:37] C:\Program Files\Common Files\SureThing Shared
    [23/09/2008|14:15] C:\Program Files\Common Files\SWF Studio
    [15/03/2008|23:43] C:\Program Files\Common Files\Symantec Shared
    [09/05/2008|20:49] C:\Program Files\Common Files\System
    [16/01/2008|17:10] C:\Program Files\Common Files\WindowsLiveInstaller
    [24/09/2008|17:12] C:\Program Files\Common Files\xing shared

    --------------------\\ Process

    ( 80 Processes )

    iexplore.exe ~ [PID:5728]

    --------------------\\ Recherche avec S_Lop

    C:\ProgramData\Sizefirstfirst.03ioe
    C:\ProgramData\Sizefirstfirst.1ywi9
    C:\ProgramData\Sizefirstfirst.256vj
    C:\ProgramData\Sizefirstfirst.2jnpd
    C:\ProgramData\Sizefirstfirst.2r9gs
    C:\ProgramData\Sizefirstfirst.32uuk
    C:\ProgramData\Sizefirstfirst.3bv1v
    C:\ProgramData\Sizefirstfirst.3gu4c
    C:\ProgramData\Sizefirstfirst.3i51e
    C:\ProgramData\Sizefirstfirst.3t6zw
    C:\ProgramData\Sizefirstfirst.3vvag
    C:\ProgramData\Sizefirstfirst.3z4ti
    C:\ProgramData\Sizefirstfirst.50bun
    C:\ProgramData\Sizefirstfirst.57za7
    C:\ProgramData\Sizefirstfirst.5kluk
    C:\ProgramData\Sizefirstfirst.5lnyi
    C:\ProgramData\Sizefirstfirst.5q3fa
    C:\ProgramData\Sizefirstfirst.5z8vb
    C:\ProgramData\Sizefirstfirst.69thg
    C:\ProgramData\Sizefirstfirst.6dfdt
    C:\ProgramData\Sizefirstfirst.79nzo
    C:\ProgramData\Sizefirstfirst.85k8g
    C:\ProgramData\Sizefirstfirst.8fdww
    C:\ProgramData\Sizefirstfirst.8kc68
    C:\ProgramData\Sizefirstfirst.8yuel
    C:\ProgramData\Sizefirstfirst.93ejm
    C:\ProgramData\Sizefirstfirst.95do4
    C:\ProgramData\Sizefirstfirst.agxrr
    C:\ProgramData\Sizefirstfirst.aiurj
    C:\ProgramData\Sizefirstfirst.bauw0
    C:\ProgramData\Sizefirstfirst.bo2yi
    C:\ProgramData\Sizefirstfirst.c320z
    C:\ProgramData\Sizefirstfirst.c4kfl
    C:\ProgramData\Sizefirstfirst.cnyib
    C:\ProgramData\Sizefirstfirst.dchtk
    C:\ProgramData\Sizefirstfirst.e1ldq
    C:\ProgramData\Sizefirstfirst.eopx1
    C:\ProgramData\Sizefirstfirst.fajbx
    C:\ProgramData\Sizefirstfirst.fbo3y
    C:\ProgramData\Sizefirstfirst.ffg41
    C:\ProgramData\Sizefirstfirst.fr6sb
    C:\ProgramData\Sizefirstfirst.ghgk3
    C:\ProgramData\Sizefirstfirst.gldaj
    C:\ProgramData\Sizefirstfirst.gu9d4
    C:\ProgramData\Sizefirstfirst.h3qpl
    C:\ProgramData\Sizefirstfirst.hegm0
    C:\ProgramData\Sizefirstfirst.hxtsk
    C:\ProgramData\Sizefirstfirst.i7uyx
    C:\ProgramData\Sizefirstfirst.ip7nv
    C:\ProgramData\Sizefirstfirst.iyoyh
    C:\ProgramData\Sizefirstfirst.jowj0
    C:\ProgramData\Sizefirstfirst.jt1hz
    C:\ProgramData\Sizefirstfirst.ko3av
    C:\ProgramData\Sizefirstfirst.kot9l
    C:\ProgramData\Sizefirstfirst.l39f1
    C:\ProgramData\Sizefirstfirst.mr2vy
    C:\ProgramData\Sizefirstfirst.muu90
    C:\ProgramData\Sizefirstfirst.naws7
    C:\ProgramData\Sizefirstfirst.nbdf3
    C:\ProgramData\Sizefirstfirst.nheci
    C:\ProgramData\Sizefirstfirst.o4gih
    C:\ProgramData\Sizefirstfirst.oldl0
    C:\ProgramData\Sizefirstfirst.omb5w
    C:\ProgramData\Sizefirstfirst.p1dx1
    C:\ProgramData\Sizefirstfirst.p7n1w
    C:\ProgramData\Sizefirstfirst.plgqs
    C:\ProgramData\Sizefirstfirst.ptazu
    C:\ProgramData\Sizefirstfirst.ptyht
    C:\ProgramData\Sizefirstfirst.qpn97
    C:\ProgramData\Sizefirstfirst.r00wz
    C:\ProgramData\Sizefirstfirst.r010x
    C:\ProgramData\Sizefirstfirst.r3w8y
    C:\ProgramData\Sizefirstfirst.r6j85
    C:\ProgramData\Sizefirstfirst.ra1c0
    C:\ProgramData\Sizefirstfirst.rfmpz
    C:\ProgramData\Sizefirstfirst.rhbng
    C:\ProgramData\Sizefirstfirst.rv5ym
    C:\ProgramData\Sizefirstfirst.splnx
    C:\ProgramData\Sizefirstfirst.t334j
    C:\ProgramData\Sizefirstfirst.tjje7
    C:\ProgramData\Sizefirstfirst.ty06a
    C:\ProgramData\Sizefirstfirst.ulolg
    C:\ProgramData\Sizefirstfirst.use8n
    C:\ProgramData\Sizefirstfirst.w3c30
    C:\ProgramData\Sizefirstfirst.w8gez
    C:\ProgramData\Sizefirstfirst.xpnm5
    C:\ProgramData\Sizefirstfirst.xwu30
    C:\ProgramData\Sizefirstfirst.y1meh
    C:\ProgramData\Sizefirstfirst.ybx0t
    C:\ProgramData\Sizefirstfirst.z0icc
    C:\ProgramData\Sizefirstfirst.z3hq4
    C:\ProgramData\Sizefirstfirst.z4k62
    C:\ProgramData\Sizefirstfirst.zl0ci
    C:\ProgramData\Sizefirstfirst.zmuil
    C:\ProgramData\Sizefirstfirst.zuu7r
    C:\ProgramData\Sizefirstfirst.zx08x
    C:\ProgramData\Sect barb funk.mrt72m
    C:\ProgramData\Sizefirstfirst.084whq
    C:\ProgramData\Sizefirstfirst.0g5e2g
    C:\ProgramData\Sizefirstfirst.12qat1
    C:\ProgramData\Sizefirstfirst.2a1xvv
    C:\ProgramData\Sizefirstfirst.2bt10e
    C:\ProgramData\Sizefirstfirst.2tpq98
    C:\ProgramData\Sizefirstfirst.3314a9
    C:\ProgramData\Sizefirstfirst.3iid7y
    C:\ProgramData\Sizefirstfirst.3niuu0
    C:\ProgramData\Sizefirstfirst.41naqh
    C:\ProgramData\Sizefirstfirst.4ldewm
    C:\ProgramData\Sizefirstfirst.4y5iq0
    C:\ProgramData\Sizefirstfirst.4zfwlx
    C:\ProgramData\Sizefirstfirst.5qq68a
    C:\ProgramData\Sizefirstfirst.5wks1u
    C:\ProgramData\Sizefirstfirst.5xfr0j
    C:\ProgramData\Sizefirstfirst.67gb8w
    C:\ProgramData\Sizefirstfirst.67w1pf
    C:\ProgramData\Sizefirstfirst.6szufg
    C:\ProgramData\Sizefirstfirst.7nn7be
    C:\ProgramData\Sizefirstfirst.90jvug
    C:\ProgramData\Sizefirstfirst.99l3kf
    C:\ProgramData\Sizefirstfirst.9anedh
    C:\ProgramData\Sizefirstfirst.9g129t
    C:\ProgramData\Sizefirstfirst.9i8gct
    C:\ProgramData\Sizefirstfirst.a6uduc
    C:\ProgramData\Sizefirstfirst.arc2qz
    C:\ProgramData\Sizefirstfirst.bi4nu5
    C:\ProgramData\Sizefirstfirst.cs9ixr
    C:\ProgramData\Sizefirstfirst.cy84pb
    C:\ProgramData\Sizefirstfirst.de5uo8
    C:\ProgramData\Sizefirstfirst.eczm46
    C:\ProgramData\Sizefirstfirst.fgv1jz
    C:\ProgramData\Sizefirstfirst.geep84
    C:\ProgramData\Sizefirstfirst.gf7gq9
    C:\ProgramData\Sizefirstfirst.h0wfg6
    C:\ProgramData\Sizefirstfirst.h3a9lt
    C:\ProgramData\Sizefirstfirst.hxvrpc
    C:\ProgramData\Sizefirstfirst.i3kzkw
    C:\ProgramData\Sizefirstfirst.iej69a
    C:\ProgramData\Sizefirstfirst.j7rmpn
    C:\ProgramData\Sizefirstfirst.k3316v
    C:\ProgramData\Sizefirstfirst.k3q21t
    C:\ProgramData\Sizefirstfirst.mlrktn
    C:\ProgramData\Sizefirstfirst.mx74ep
    C:\ProgramData\Sizefirstfirst.nmup08
    C:\ProgramData\Sizefirstfirst.pgi3kj
    C:\ProgramData\Sizefirstfirst.q3bdjm
    C:\ProgramData\Sizefirstfirst.q8rdoo
    C:\ProgramData\Sizefirstfirst.qh3hyo
    C:\ProgramData\Sizefirstfirst.qqy451
    C:\ProgramData\Sizefirstfirst.r9ev89
    C:\ProgramData\Sizefirstfirst.rf4dps
    C:\ProgramData\Sizefirstfirst.rk03fk
    C:\ProgramData\Sizefirstfirst.ryfok6
    C:\ProgramData\Sizefirstfirst.s6mqp2
    C:\ProgramData\Sizefirstfirst.s9rqlq
    C:\ProgramData\Sizefirstfirst.say67v
    C:\ProgramData\Sizefirstfirst.t46qpq
    C:\ProgramData\Sizefirstfirst.t4uj3p
    C:\ProgramData\Sizefirstfirst.tguhsz
    C:\ProgramData\Sizefirstfirst.tmuupu
    C:\ProgramData\Sizefirstfirst.u1ggu9
    C:\ProgramData\Sizefirstfirst.uamzzq
    C:\ProgramData\Sizefirstfirst.uhl46m
    C:\ProgramData\Sizefirstfirst.ui4hx5
    C:\ProgramData\Sizefirstfirst.unv8yx
    C:\ProgramData\Sizefirstfirst.uvy91y
    C:\ProgramData\Sizefirstfirst.w2fzn3
    C:\ProgramData\Sizefirstfirst.w827m2
    C:\ProgramData\Sizefirstfirst.wev3gx
    C:\ProgramData\Sizefirstfirst.xgeuuq
    C:\ProgramData\Sizefirstfirst.y0de08
    C:\ProgramData\Sizefirstfirst.yaejul
    C:\ProgramData\Sizefirstfirst.yiyy3r
    C:\ProgramData\Sizefirstfirst.ykavkq
    C:\ProgramData\Sizefirstfirst.yw27dd
    C:\ProgramData\Sizefirstfirst.z7uohn
    C:\ProgramData\settings soft slow.p65saf9
    C:\ProgramData\Sizefirstfirst.06bqkpc
    C:\ProgramData\Sizefirstfirst.0tncnig
    C:\ProgramData\Sizefirstfirst.167kmgy
    C:\ProgramData\Sizefirstfirst.329e8fl
    C:\ProgramData\Sizefirstfirst.34f5fae
    C:\ProgramData\Sizefirstfirst.36acn6s
    C:\ProgramData\Sizefirstfirst.37sbhmj
    C:\ProgramData\Sizefirstfirst.3a0s0dz
    C:\ProgramData\Sizefirstfirst.3r10ju4
    C:\ProgramData\Sizefirstfirst.4an4btr
    C:\ProgramData\Sizefirstfirst.4mtfa55
    C:\ProgramData\Sizefirstfirst.4vzuu8r
    C:\ProgramData\Sizefirstfirst.5106kva
    C:\ProgramData\Sizefirstfirst.5e601ea
    C:\ProgramData\Sizefirstfirst.5kmhrgp
    C:\ProgramData\Sizefirstfirst.72j6hhm
    C:\ProgramData\Sizefirstfirst.7c17ega
    C:\ProgramData\Sizefirstfirst.7nu4323
    C:\ProgramData\Sizefirstfirst.84dq28p
    C:\ProgramData\Sizefirstfirst.8lfcqnh
    C:\ProgramData\Sizefirstfirst.8sltu5k
    C:\ProgramData\Sizefirstfirst.90ufp9v
    C:\ProgramData\Sizefirstfirst.97tjud3
    C:\ProgramData\Sizefirstfirst.9i9ubfr
    C:\ProgramData\Sizefirstfirst.ash5tdi
    C:\ProgramData\Sizefirstfirst.b1l8fk5
    C:\ProgramData\Sizefirstfirst.crwn0nt
    C:\ProgramData\Sizefirstfirst.d7cjs3d
    C:\ProgramData\Sizefirstfirst.dcfoqhp
    C:\ProgramData\Sizefirstfirst.dgjsobl
    C:\ProgramData\Sizefirstfirst.dpic4s6
    C:\ProgramData\Sizefirstfirst.f8vzt6m
    C:\ProgramData\Sizefirstfirst.fd6sor3
    C:\ProgramData\Sizefirstfirst.fttdgrp
    C:\ProgramData\Sizefirstfirst.gjb8dqp
    C:\ProgramData\Sizefirstfirst.h6bxfah
    C:\ProgramData\Sizefirstfirst.hm3euqw
    C:\ProgramData\Sizefirstfirst.ibfv73i
    C:\ProgramData\Sizefirstfirst.ifxft57
    C:\ProgramData\Sizefirstfirst.imp6zer
    C:\ProgramData\Sizefirstfirst.ireckq6
    C:\ProgramData\Sizefirstfirst.ka761cq
    C:\ProgramData\Sizefirstfirst.kn6lk8f
    C:\ProgramData\Sizefirstfirst.ltfouiy
    C:\ProgramData\Sizefirstfirst.lypwhgk
    C:\ProgramData\Sizefirstfirst.m74h2t0
    C:\ProgramData\Sizefirstfirst.miqpb4n
    C:\ProgramData\Sizefirstfirst.mwdienx
    C:\ProgramData\Sizefirstfirst.n9oioq7
    C:\ProgramData\Sizefirstfirst.nkgjyt7
    C:\ProgramData\Sizefirstfirst.nzvnwfi
    C:\ProgramData\Sizefirstfirst.oqn99zd
    C:\ProgramData\Sizefirstfirst.oxdl80a
    C:\ProgramData\Sizefirstfirst.p259siv
    C:\ProgramData\Sizefirstfirst.pn43pr6
    C:\ProgramData\Sizefirstfirst.porbst4
    C:\ProgramData\Sizefirstfirst.ppaj2k4
    C:\ProgramData\Sizefirstfirst.qt169di
    C:\ProgramData\Sizefirstfirst.ra6ug2k
    C:\ProgramData\Sizefirstfirst.rhl0pm9
    C:\ProgramData\Sizefirstfirst.t1hapke
    C:\ProgramData\Sizefirstfirst.tb36s6p
    C:\ProgramData\Sizefirstfirst.th50vtw
    C:\ProgramData\Sizefirstfirst.u68l2bz
    C:\ProgramData\Sizefirstfirst.utyi2az
    C:\ProgramData\Sizefirstfirst.uwwxv9m
    C:\ProgramData\Sizefirstfirst.w1f77hl
    C:\ProgramData\Sizefirstfirst.wf420dp
    C:\ProgramData\Sizefirstfirst.y1dv5iq
    C:\ProgramData\Sizefirstfirst.yu72ffi
    C:\ProgramData\Sizefirstfirst.zb5nqfu
    C:\ProgramData\Sizefirstfirst.zfv6kub
    C:\ProgramData\Sizefirstfirst.zy0ygub

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\ProgramData\aim rect help creative
    C:\Program Files\BitDownload
    C:\Program Files\BitTorrent Fastest Tool
    C:\Program Files\BitTorrent Fastest Tool\BitP.exe
    C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
    C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies\david@advertstream[2].txt

    --------------------\\ Verification du Registre

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Knob ante"="\"C:\\ProgramData\\Sizefirstfirst.dgjsobl\""
    "Help Creative Meow City"="\"C:\\ProgramData\\settings soft slow.p65saf9\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-22 18:14:04
    Windows 6.0.6001 Service Pack 1 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 13

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


    [F:17][D:10]-> C:\Users\David\AppData\Local\Temp
    [F:233][D:1]-> C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:2819][D:4]-> C:\Users\David\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:8][D:5]-> C:\$Recycle.Bin

    1 - "C:\Lop SD\LopR_1.txt" - 22/11/2008|18:17 - Option : [1]

    --------------------\\ Fin du rapport a 18:17:41
    [ UAC => 1 ]

    répondre
    naheulbeuk le 22 novembre 2008 à 19h52
    Re,

    Relance Lop S&D

  • Choisis cette fois ci l'Option 2 ( Suppression )
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré ( C:\lopR.txt )

    (Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

    :p
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • répondre
    David_-_ le 23 novembre 2008 à 03h52
    naheulbeuk a écrit :
    Re,

    Relance Lop S&D

  • Choisis cette fois ci l'Option 2 ( Suppression )
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré ( C:\lopR.txt )

    (Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

    :p


    • voila


    --------------------\\ Lop S&D 4.2.4-9c XP/Vista

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : David ( Administrator )
    BOOT : Normal boot
    C:\ (Local Disk) - NTFS - Total:225 Go (Free:141 Go)
    D:\ (Local Disk) - NTFS - Total:7 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (USB)
    G:\ (USB)
    H:\ (USB)
    I:\ (USB)
    J:\ (CD or DVD)

    "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
    Option : [2] ( 22/11/2008|22:26 )

    [ UAC => 1 ]


    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitP.exe
    Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
    Supprime! - C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies\david@advertstream[2].txt
    Supprime! - C:\ProgramData\Sizefirstfirst.03ioe
    Supprime! - C:\ProgramData\Sizefirstfirst.1ywi9
    Supprime! - C:\ProgramData\Sizefirstfirst.256vj
    Supprime! - C:\ProgramData\Sizefirstfirst.2jnpd
    Supprime! - C:\ProgramData\Sizefirstfirst.2r9gs
    Supprime! - C:\ProgramData\Sizefirstfirst.32uuk
    Supprime! - C:\ProgramData\Sizefirstfirst.3bv1v
    Supprime! - C:\ProgramData\Sizefirstfirst.3gu4c
    Supprime! - C:\ProgramData\Sizefirstfirst.3i51e
    Supprime! - C:\ProgramData\Sizefirstfirst.3t6zw
    Supprime! - C:\ProgramData\Sizefirstfirst.3vvag
    Supprime! - C:\ProgramData\Sizefirstfirst.3z4ti
    Supprime! - C:\ProgramData\Sizefirstfirst.50bun
    Supprime! - C:\ProgramData\Sizefirstfirst.57za7
    Supprime! - C:\ProgramData\Sizefirstfirst.5kluk
    Supprime! - C:\ProgramData\Sizefirstfirst.5lnyi
    Supprime! - C:\ProgramData\Sizefirstfirst.5q3fa
    Supprime! - C:\ProgramData\Sizefirstfirst.5z8vb
    Supprime! - C:\ProgramData\Sizefirstfirst.69thg
    Supprime! - C:\ProgramData\Sizefirstfirst.6dfdt
    Supprime! - C:\ProgramData\Sizefirstfirst.79nzo
    Supprime! - C:\ProgramData\Sizefirstfirst.85k8g
    Supprime! - C:\ProgramData\Sizefirstfirst.8fdww
    Supprime! - C:\ProgramData\Sizefirstfirst.8kc68
    Supprime! - C:\ProgramData\Sizefirstfirst.8yuel
    Supprime! - C:\ProgramData\Sizefirstfirst.93ejm
    Supprime! - C:\ProgramData\Sizefirstfirst.95do4
    Supprime! - C:\ProgramData\Sizefirstfirst.agxrr
    Supprime! - C:\ProgramData\Sizefirstfirst.aiurj
    Supprime! - C:\ProgramData\Sizefirstfirst.bauw0
    Supprime! - C:\ProgramData\Sizefirstfirst.bo2yi
    Supprime! - C:\ProgramData\Sizefirstfirst.c320z
    Supprime! - C:\ProgramData\Sizefirstfirst.c4kfl
    Supprime! - C:\ProgramData\Sizefirstfirst.cnyib
    Supprime! - C:\ProgramData\Sizefirstfirst.dchtk
    Supprime! - C:\ProgramData\Sizefirstfirst.e1ldq
    Supprime! - C:\ProgramData\Sizefirstfirst.eopx1
    Supprime! - C:\ProgramData\Sizefirstfirst.fajbx
    Supprime! - C:\ProgramData\Sizefirstfirst.fbo3y
    Supprime! - C:\ProgramData\Sizefirstfirst.ffg41
    Supprime! - C:\ProgramData\Sizefirstfirst.fr6sb
    Supprime! - C:\ProgramData\Sizefirstfirst.ghgk3
    Supprime! - C:\ProgramData\Sizefirstfirst.gldaj
    Supprime! - C:\ProgramData\Sizefirstfirst.gu9d4
    Supprime! - C:\ProgramData\Sizefirstfirst.h3qpl
    Supprime! - C:\ProgramData\Sizefirstfirst.hegm0
    Supprime! - C:\ProgramData\Sizefirstfirst.hxtsk
    Supprime! - C:\ProgramData\Sizefirstfirst.i7uyx
    Supprime! - C:\ProgramData\Sizefirstfirst.ip7nv
    Supprime! - C:\ProgramData\Sizefirstfirst.iyoyh
    Supprime! - C:\ProgramData\Sizefirstfirst.jowj0
    Supprime! - C:\ProgramData\Sizefirstfirst.jt1hz
    Supprime! - C:\ProgramData\Sizefirstfirst.ko3av
    Supprime! - C:\ProgramData\Sizefirstfirst.kot9l
    Supprime! - C:\ProgramData\Sizefirstfirst.l39f1
    Supprime! - C:\ProgramData\Sizefirstfirst.mr2vy
    Supprime! - C:\ProgramData\Sizefirstfirst.muu90
    Supprime! - C:\ProgramData\Sizefirstfirst.naws7
    Supprime! - C:\ProgramData\Sizefirstfirst.nbdf3
    Supprime! - C:\ProgramData\Sizefirstfirst.nheci
    Supprime! - C:\ProgramData\Sizefirstfirst.o4gih
    Supprime! - C:\ProgramData\Sizefirstfirst.oldl0
    Supprime! - C:\ProgramData\Sizefirstfirst.omb5w
    Supprime! - C:\ProgramData\Sizefirstfirst.p1dx1
    Supprime! - C:\ProgramData\Sizefirstfirst.p7n1w
    Supprime! - C:\ProgramData\Sizefirstfirst.plgqs
    Supprime! - C:\ProgramData\Sizefirstfirst.ptazu
    Supprime! - C:\ProgramData\Sizefirstfirst.ptyht
    Supprime! - C:\ProgramData\Sizefirstfirst.qpn97
    Supprime! - C:\ProgramData\Sizefirstfirst.r00wz
    Supprime! - C:\ProgramData\Sizefirstfirst.r010x
    Supprime! - C:\ProgramData\Sizefirstfirst.r3w8y
    Supprime! - C:\ProgramData\Sizefirstfirst.r6j85
    Supprime! - C:\ProgramData\Sizefirstfirst.ra1c0
    Supprime! - C:\ProgramData\Sizefirstfirst.rfmpz
    Supprime! - C:\ProgramData\Sizefirstfirst.rhbng
    Supprime! - C:\ProgramData\Sizefirstfirst.rv5ym
    Supprime! - C:\ProgramData\Sizefirstfirst.splnx
    Supprime! - C:\ProgramData\Sizefirstfirst.t334j
    Supprime! - C:\ProgramData\Sizefirstfirst.tjje7
    Supprime! - C:\ProgramData\Sizefirstfirst.ty06a
    Supprime! - C:\ProgramData\Sizefirstfirst.ulolg
    Supprime! - C:\ProgramData\Sizefirstfirst.use8n
    Supprime! - C:\ProgramData\Sizefirstfirst.w3c30
    Supprime! - C:\ProgramData\Sizefirstfirst.w8gez
    Supprime! - C:\ProgramData\Sizefirstfirst.xpnm5
    Supprime! - C:\ProgramData\Sizefirstfirst.xwu30
    Supprime! - C:\ProgramData\Sizefirstfirst.y1meh
    Supprime! - C:\ProgramData\Sizefirstfirst.ybx0t
    Supprime! - C:\ProgramData\Sizefirstfirst.z0icc
    Supprime! - C:\ProgramData\Sizefirstfirst.z3hq4
    Supprime! - C:\ProgramData\Sizefirstfirst.z4k62
    Supprime! - C:\ProgramData\Sizefirstfirst.zl0ci
    Supprime! - C:\ProgramData\Sizefirstfirst.zmuil
    Supprime! - C:\ProgramData\Sizefirstfirst.zuu7r
    Supprime! - C:\ProgramData\Sizefirstfirst.zx08x
    Supprime! - C:\ProgramData\Sect barb funk.mrt72m
    Supprime! - C:\ProgramData\Sizefirstfirst.084whq
    Supprime! - C:\ProgramData\Sizefirstfirst.0g5e2g
    Supprime! - C:\ProgramData\Sizefirstfirst.12qat1
    Supprime! - C:\ProgramData\Sizefirstfirst.2a1xvv
    Supprime! - C:\ProgramData\Sizefirstfirst.2bt10e
    Supprime! - C:\ProgramData\Sizefirstfirst.2tpq98
    Supprime! - C:\ProgramData\Sizefirstfirst.3314a9
    Supprime! - C:\ProgramData\Sizefirstfirst.3iid7y
    Supprime! - C:\ProgramData\Sizefirstfirst.3niuu0
    Supprime! - C:\ProgramData\Sizefirstfirst.41naqh
    Supprime! - C:\ProgramData\Sizefirstfirst.4ldewm
    Supprime! - C:\ProgramData\Sizefirstfirst.4y5iq0
    Supprime! - C:\ProgramData\Sizefirstfirst.4zfwlx
    Supprime! - C:\ProgramData\Sizefirstfirst.5qq68a
    Supprime! - C:\ProgramData\Sizefirstfirst.5wks1u
    Supprime! - C:\ProgramData\Sizefirstfirst.5xfr0j
    Supprime! - C:\ProgramData\Sizefirstfirst.67gb8w
    Supprime! - C:\ProgramData\Sizefirstfirst.67w1pf
    Supprime! - C:\ProgramData\Sizefirstfirst.6szufg
    Supprime! - C:\ProgramData\Sizefirstfirst.7nn7be
    Supprime! - C:\ProgramData\Sizefirstfirst.90jvug
    Supprime! - C:\ProgramData\Sizefirstfirst.99l3kf
    Supprime! - C:\ProgramData\Sizefirstfirst.9anedh
    Supprime! - C:\ProgramData\Sizefirstfirst.9g129t
    Supprime! - C:\ProgramData\Sizefirstfirst.9i8gct
    Supprime! - C:\ProgramData\Sizefirstfirst.a6uduc
    Supprime! - C:\ProgramData\Sizefirstfirst.arc2qz
    Supprime! - C:\ProgramData\Sizefirstfirst.bi4nu5
    Supprime! - C:\ProgramData\Sizefirstfirst.cs9ixr
    Supprime! - C:\ProgramData\Sizefirstfirst.cy84pb
    Supprime! - C:\ProgramData\Sizefirstfirst.de5uo8
    Supprime! - C:\ProgramData\Sizefirstfirst.eczm46
    Supprime! - C:\ProgramData\Sizefirstfirst.fgv1jz
    Supprime! - C:\ProgramData\Sizefirstfirst.geep84
    Supprime! - C:\ProgramData\Sizefirstfirst.gf7gq9
    Supprime! - C:\ProgramData\Sizefirstfirst.h0wfg6
    Supprime! - C:\ProgramData\Sizefirstfirst.h3a9lt
    Supprime! - C:\ProgramData\Sizefirstfirst.hxvrpc
    Supprime! - C:\ProgramData\Sizefirstfirst.i3kzkw
    Supprime! - C:\ProgramData\Sizefirstfirst.iej69a
    Supprime! - C:\ProgramData\Sizefirstfirst.j7rmpn
    Supprime! - C:\ProgramData\Sizefirstfirst.k3316v
    Supprime! - C:\ProgramData\Sizefirstfirst.k3q21t
    Supprime! - C:\ProgramData\Sizefirstfirst.mlrktn
    Supprime! - C:\ProgramData\Sizefirstfirst.mx74ep
    Supprime! - C:\ProgramData\Sizefirstfirst.nmup08
    Supprime! - C:\ProgramData\Sizefirstfirst.pgi3kj
    Supprime! - C:\ProgramData\Sizefirstfirst.q3bdjm
    Supprime! - C:\ProgramData\Sizefirstfirst.q8rdoo
    Supprime! - C:\ProgramData\Sizefirstfirst.qh3hyo
    Supprime! - C:\ProgramData\Sizefirstfirst.qqy451
    Supprime! - C:\ProgramData\Sizefirstfirst.r9ev89
    Supprime! - C:\ProgramData\Sizefirstfirst.rf4dps
    Supprime! - C:\ProgramData\Sizefirstfirst.rk03fk
    Supprime! - C:\ProgramData\Sizefirstfirst.ryfok6
    Supprime! - C:\ProgramData\Sizefirstfirst.s6mqp2
    Supprime! - C:\ProgramData\Sizefirstfirst.s9rqlq
    Supprime! - C:\ProgramData\Sizefirstfirst.say67v
    Supprime! - C:\ProgramData\Sizefirstfirst.t46qpq
    Supprime! - C:\ProgramData\Sizefirstfirst.t4uj3p
    Supprime! - C:\ProgramData\Sizefirstfirst.tguhsz
    Supprime! - C:\ProgramData\Sizefirstfirst.tmuupu
    Supprime! - C:\ProgramData\Sizefirstfirst.u1ggu9
    Supprime! - C:\ProgramData\Sizefirstfirst.uamzzq
    Supprime! - C:\ProgramData\Sizefirstfirst.uhl46m
    Supprime! - C:\ProgramData\Sizefirstfirst.ui4hx5
    Supprime! - C:\ProgramData\Sizefirstfirst.unv8yx
    Supprime! - C:\ProgramData\Sizefirstfirst.uvy91y
    Supprime! - C:\ProgramData\Sizefirstfirst.w2fzn3
    Supprime! - C:\ProgramData\Sizefirstfirst.w827m2
    Supprime! - C:\ProgramData\Sizefirstfirst.wev3gx
    Supprime! - C:\ProgramData\Sizefirstfirst.xgeuuq
    Supprime! - C:\ProgramData\Sizefirstfirst.y0de08
    Supprime! - C:\ProgramData\Sizefirstfirst.yaejul
    Supprime! - C:\ProgramData\Sizefirstfirst.yiyy3r
    Supprime! - C:\ProgramData\Sizefirstfirst.ykavkq
    Supprime! - C:\ProgramData\Sizefirstfirst.yw27dd
    Supprime! - C:\ProgramData\Sizefirstfirst.z7uohn
    Supprime! - C:\ProgramData\settings soft slow.p65saf9
    Supprime! - C:\ProgramData\Sizefirstfirst.06bqkpc
    Supprime! - C:\ProgramData\Sizefirstfirst.0tncnig
    Supprime! - C:\ProgramData\Sizefirstfirst.167kmgy
    Supprime! - C:\ProgramData\Sizefirstfirst.329e8fl
    Supprime! - C:\ProgramData\Sizefirstfirst.34f5fae
    Supprime! - C:\ProgramData\Sizefirstfirst.36acn6s
    Supprime! - C:\ProgramData\Sizefirstfirst.37sbhmj
    Supprime! - C:\ProgramData\Sizefirstfirst.3a0s0dz
    Supprime! - C:\ProgramData\Sizefirstfirst.3r10ju4
    Supprime! - C:\ProgramData\Sizefirstfirst.4an4btr
    Supprime! - C:\ProgramData\Sizefirstfirst.4mtfa55
    Supprime! - C:\ProgramData\Sizefirstfirst.4vzuu8r
    Supprime! - C:\ProgramData\Sizefirstfirst.5106kva
    Supprime! - C:\ProgramData\Sizefirstfirst.5e601ea
    Supprime! - C:\ProgramData\Sizefirstfirst.5kmhrgp
    Supprime! - C:\ProgramData\Sizefirstfirst.72j6hhm
    Supprime! - C:\ProgramData\Sizefirstfirst.7c17ega
    Supprime! - C:\ProgramData\Sizefirstfirst.7nu4323
    Supprime! - C:\ProgramData\Sizefirstfirst.84dq28p
    Supprime! - C:\ProgramData\Sizefirstfirst.8lfcqnh
    Supprime! - C:\ProgramData\Sizefirstfirst.8sltu5k
    Supprime! - C:\ProgramData\Sizefirstfirst.90ufp9v
    Supprime! - C:\ProgramData\Sizefirstfirst.97tjud3
    Supprime! - C:\ProgramData\Sizefirstfirst.9i9ubfr
    Supprime! - C:\ProgramData\Sizefirstfirst.ash5tdi
    Supprime! - C:\ProgramData\Sizefirstfirst.b1l8fk5
    Supprime! - C:\ProgramData\Sizefirstfirst.crwn0nt
    Supprime! - C:\ProgramData\Sizefirstfirst.d7cjs3d
    Supprime! - C:\ProgramData\Sizefirstfirst.dcfoqhp
    Supprime! - C:\ProgramData\Sizefirstfirst.dgjsobl
    Supprime! - C:\ProgramData\Sizefirstfirst.dpic4s6
    Supprime! - C:\ProgramData\Sizefirstfirst.f8vzt6m
    Supprime! - C:\ProgramData\Sizefirstfirst.fd6sor3
    Supprime! - C:\ProgramData\Sizefirstfirst.fttdgrp
    Supprime! - C:\ProgramData\Sizefirstfirst.gjb8dqp
    Supprime! - C:\ProgramData\Sizefirstfirst.h6bxfah
    Supprime! - C:\ProgramData\Sizefirstfirst.hm3euqw
    Supprime! - C:\ProgramData\Sizefirstfirst.ibfv73i
    Supprime! - C:\ProgramData\Sizefirstfirst.ifxft57
    Supprime! - C:\ProgramData\Sizefirstfirst.imp6zer
    Supprime! - C:\ProgramData\Sizefirstfirst.ireckq6
    Supprime! - C:\ProgramData\Sizefirstfirst.ka761cq
    Supprime! - C:\ProgramData\Sizefirstfirst.kn6lk8f
    Supprime! - C:\ProgramData\Sizefirstfirst.ltfouiy
    Supprime! - C:\ProgramData\Sizefirstfirst.lypwhgk
    Supprime! - C:\ProgramData\Sizefirstfirst.m74h2t0
    Supprime! - C:\ProgramData\Sizefirstfirst.miqpb4n
    Supprime! - C:\ProgramData\Sizefirstfirst.mwdienx
    Supprime! - C:\ProgramData\Sizefirstfirst.n9oioq7
    Supprime! - C:\ProgramData\Sizefirstfirst.nkgjyt7
    Supprime! - C:\ProgramData\Sizefirstfirst.nzvnwfi
    Supprime! - C:\ProgramData\Sizefirstfirst.oqn99zd
    Supprime! - C:\ProgramData\Sizefirstfirst.oxdl80a
    Supprime! - C:\ProgramData\Sizefirstfirst.p259siv
    Supprime! - C:\ProgramData\Sizefirstfirst.pn43pr6
    Supprime! - C:\ProgramData\Sizefirstfirst.porbst4
    Supprime! - C:\ProgramData\Sizefirstfirst.ppaj2k4
    Supprime! - C:\ProgramData\Sizefirstfirst.qt169di
    Supprime! - C:\ProgramData\Sizefirstfirst.ra6ug2k
    Supprime! - C:\ProgramData\Sizefirstfirst.rhl0pm9
    Supprime! - C:\ProgramData\Sizefirstfirst.t1hapke
    Supprime! - C:\ProgramData\Sizefirstfirst.tb36s6p
    Supprime! - C:\ProgramData\Sizefirstfirst.th50vtw
    Supprime! - C:\ProgramData\Sizefirstfirst.u68l2bz
    Supprime! - C:\ProgramData\Sizefirstfirst.utyi2az
    Supprime! - C:\ProgramData\Sizefirstfirst.uwwxv9m
    Supprime! - C:\ProgramData\Sizefirstfirst.w1f77hl
    Supprime! - C:\ProgramData\Sizefirstfirst.wf420dp
    Supprime! - C:\ProgramData\Sizefirstfirst.y1dv5iq
    Supprime! - C:\ProgramData\Sizefirstfirst.yu72ffi
    Supprime! - C:\ProgramData\Sizefirstfirst.zb5nqfu
    Supprime! - C:\ProgramData\Sizefirstfirst.zfv6kub
    Supprime! - C:\ProgramData\Sizefirstfirst.zy0ygub
    Supprime! - C:\ProgramData\aim rect help creative
    Supprime! - C:\Program Files\BitDownload
    Supprime! - C:\Program Files\BitTorrent Fastest Tool
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


    --------------------\\ Listing des dossiers dans Local

    [02/07/2008|15:03] C:\Users\David\AppData\Local\Adobe
    [29/04/2008|15:06] C:\Users\David\AppData\Local\Ahead
    [16/01/2008|15:33] C:\Users\David\AppData\Local\Application Data
    [18/11/2008|20:34] C:\Users\David\AppData\Local\d3d9caps.dat
    [19/11/2008|15:45] C:\Users\David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [16/01/2008|21:52] C:\Users\David\AppData\Local\eMule
    [01/07/2008|20:09] C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
    [14/10/2008|19:54] C:\Users\David\AppData\Local\GlobalSCAPE
    [22/11/2008|17:00] C:\Users\David\AppData\Local\Google
    [16/01/2008|15:39] C:\Users\David\AppData\Local\Hewlett-Packard
    [16/01/2008|15:33] C:\Users\David\AppData\Local\Historique
    [15/04/2008|16:46] C:\Users\David\AppData\Local\HP
    [22/11/2008|18:04] C:\Users\David\AppData\Local\IconCache.db
    [16/07/2008|15:41] C:\Users\David\AppData\Local\Installer19396
    [16/07/2008|15:49] C:\Users\David\AppData\Local\Installer9544
    [22/11/2008|00:00] C:\Users\David\AppData\Local\Microsoft
    [11/02/2008|23:53] C:\Users\David\AppData\Local\Microsoft Games
    [27/03/2008|18:10] C:\Users\David\AppData\Local\Mozilla
    [29/04/2008|15:11] C:\Users\David\AppData\Local\Nero
    [26/06/2008|11:07] C:\Users\David\AppData\Local\Panda Software
    [19/02/2008|18:31] C:\Users\David\AppData\Local\Sony
    [22/11/2008|22:26] C:\Users\David\AppData\Local\Temp
    [08/10/2008|16:42] C:\Users\David\AppData\Local\TempData.ldb
    [08/10/2008|16:41] C:\Users\David\AppData\Local\TempData.mdb
    [16/01/2008|15:33] C:\Users\David\AppData\Local\Temporary Internet Files
    [30/06/2008|10:51] C:\Users\David\AppData\Local\Virtools
    [30/01/2008|19:55] C:\Users\David\AppData\Local\VirtualStore

    --------------------\\ Tâches planifiées dans C:\Windows\tasks

    [22/11/2008 18:55][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{31DF0D02-808A-4ED2-9355-0EAF40D469EC}.job
    [22/11/2008 18:07][--ah-----] C:\Windows\tasks\SA.DAT
    [22/11/2008 18:05][--a------] C:\Windows\tasks\SCHEDLGU.TXT

    --------------------\\ Listing des dossiers dans C:\ProgramData

    [12/11/2008|21:27] C:\ProgramData\Adobe
    [27/01/2008|20:17] C:\ProgramData\Ahead
    [02/11/2006|14:02] C:\ProgramData\Application Data
    [16/11/2008|20:14] C:\ProgramData\Boob gram iso
    [16/01/2008|15:30] C:\ProgramData\Bureau
    [02/11/2006|14:02] C:\ProgramData\Desktop
    [02/11/2006|14:02] C:\ProgramData\Documents
    [16/01/2008|21:52] C:\ProgramData\eMule
    [17/04/2008|22:37] C:\ProgramData\ezsid.dat
    [16/01/2008|15:30] C:\ProgramData\Favoris
    [02/11/2006|14:02] C:\ProgramData\Favorites
    [17/11/2008|00:16] C:\ProgramData\Fighters
    [01/07/2008|20:09] C:\ProgramData\FLEXnet
    [11/06/2008|03:23] C:\ProgramData\FreeDownloadManager.ORG
    [14/10/2008|19:54] C:\ProgramData\GlobalSCAPE
    [22/11/2008|16:59] C:\ProgramData\Google
    [18/11/2008|16:24] C:\ProgramData\Grisoft
    [16/01/2008|15:40] C:\ProgramData\Hewlett-Packard
    [24/10/2007|22:36] C:\ProgramData\HP
    [24/10/2007|22:36] C:\ProgramData\hpzinstall.log
    [04/11/2008|22:42] C:\ProgramData\ICQ
    [22/11/2008|18:07] C:\ProgramData\Kaspersky Lab
    [27/07/2008|02:16] C:\ProgramData\Kaspersky Lab Setup Files
    [16/11/2008|01:25] C:\ProgramData\Lavasoft
    [29/04/2008|14:56] C:\ProgramData\LightScribe
    [07/09/2008|13:09] C:\ProgramData\Logishrd
    [30/04/2008|08:46] C:\ProgramData\Logitech
    [15/03/2008|23:41] C:\ProgramData\LUUnInstall.LiveUpdate
    [16/01/2008|15:30] C:\ProgramData\Menu D‚marrer
    [30/04/2008|08:23] C:\ProgramData\Microsoft
    [16/01/2008|15:30] C:\ProgramData\ModŠles
    [24/10/2007|22:43] C:\ProgramData\muvee Technologies
    [10/06/2008|11:45] C:\ProgramData\NCH Software
    [10/06/2008|11:42] C:\ProgramData\NCH Swift Sound
    [22/08/2008|12:06] C:\ProgramData\Nero
    [30/08/2008|21:31] C:\ProgramData\NVIDIA
    [24/10/2007|22:49] C:\ProgramData\PC-Doctor
    [18/10/2008|13:32] C:\ProgramData\Roxio
    [22/05/2008|11:54] C:\ProgramData\Skype
    [24/10/2007|22:37] C:\ProgramData\Sonic
    [14/02/2008|23:57] C:\ProgramData\Sony
    [21/11/2008|17:32] C:\ProgramData\Spybot - Search & Destroy
    [02/11/2006|14:02] C:\ProgramData\Start Menu
    [15/03/2008|23:43] C:\ProgramData\Symantec
    [15/11/2008|18:19] C:\ProgramData\TEMP
    [02/11/2006|14:02] C:\ProgramData\Templates
    [08/10/2008|03:05] C:\ProgramData\WindowsSearch
    [16/01/2008|17:06] C:\ProgramData\WLInstaller
    [29/07/2008|02:16] C:\ProgramData\Yahoo!
    [29/07/2008|02:19] C:\ProgramData\Yahoo! Companion

    --------------------\\ Listing des dossiers dans C:\Program Files

    [12/11/2008|21:26] C:\Program Files\Adobe
    [03/10/2008|19:12] C:\Program Files\Alcohol Soft
    [18/01/2008|00:51] C:\Program Files\Armenian NLS
    [10/06/2008|13:19] C:\Program Files\AtomixMP3
    [10/06/2008|00:23] C:\Program Files\AviSynth 2.5
    [10/06/2008|11:36] C:\Program Files\AVS4YOU
    [16/09/2008|16:22] C:\Program Files\BClub
    [10/06/2008|11:31] C:\Program Files\Best_Security_Tips
    [15/11/2008|02:07] C:\Program Files\CCleaner
    [13/10/2008|19:17] C:\Program Files\clock-desktop
    [22/11/2008|14:13] C:\Program Files\Common Files
    [14/09/2008|20:08] C:\Program Files\DivX
    [06/10/2008|17:45] C:\Program Files\Download Direct
    [25/10/2007|07:37] C:\Program Files\EasyBits
    [18/01/2008|22:28] C:\Program Files\EasyBits For Kids
    [16/01/2008|21:52] C:\Program Files\eMule
    [08/06/2008|23:40] C:\Program Files\eMule Turbo Accelerator
    [16/11/2008|20:08] C:\Program Files\Enigma Software Group
    [10/09/2008|13:02] C:\Program Files\EoRezo
    [16/01/2008|15:30] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
    [22/11/2008|00:40] C:\Program Files\Fighters
    [11/06/2008|03:24] C:\Program Files\Free Download Manager
    [09/11/2008|03:37] C:\Program Files\FREE Music Downloader
    [14/10/2008|19:54] C:\Program Files\GlobalSCAPE
    [22/11/2008|17:00] C:\Program Files\Google
    [18/11/2008|16:24] C:\Program Files\Grisoft
    [28/09/2008|19:57] C:\Program Files\GTR 2
    [24/10/2007|22:50] C:\Program Files\Hewlett-Packard
    [29/08/2008|18:15] C:\Program Files\HP
    [04/11/2008|22:43] C:\Program Files\ICQ6
    [04/11/2008|22:42] C:\Program Files\ICQ6Toolbar
    [09/11/2008|19:14] C:\Program Files\InstallShield Installation Information
    [21/09/2008|02:01] C:\Program Files\Internet Explorer
    [17/08/2008|02:19] C:\Program Files\IZArc
    [10/07/2008|20:17] C:\Program Files\Java
    [27/07/2008|02:24] C:\Program Files\Kaspersky Lab
    [09/11/2008|18:43] C:\Program Files\LG Electronics
    [07/09/2008|13:09] C:\Program Files\Logitech
    [02/11/2006|13:37] C:\Program Files\Microsoft Games
    [24/10/2007|22:46] C:\Program Files\Microsoft Office
    [14/02/2008|23:59] C:\Program Files\Microsoft SQL Server
    [10/09/2008|14:02] C:\Program Files\Microsoft Works
    [09/05/2008|20:49] C:\Program Files\Movie Maker
    [22/11/2008|15:44] C:\Program Files\Mozilla Firefox
    [02/11/2006|13:37] C:\Program Files\MSBuild
    [16/01/2008|17:27] C:\Program Files\MSXML 4.0
    [24/10/2007|22:43] C:\Program Files\muvee Technologies
    [22/11/2008|00:03] C:\Program Files\Navilog1
    [11/06/2008|12:10] C:\Program Files\NCH Software
    [22/08/2008|11:40] C:\Program Files\NCH Swift Sound
    [22/08/2008|12:06] C:\Program Files\Nero
    [29/04/2008|14:55] C:\Program Files\NeroInstall.bak
    [16/01/2008|15:50] C:\Program Files\NETGEAR
    [02/06/2008|17:09] C:\Program Files\Opera
    [24/10/2007|23:04] C:\Program Files\PC-Doctor 5 for Windows
    [04/02/2008|22:47] C:\Program Files\Rambler Assistant
    [06/03/2008|17:56] C:\Program Files\Real
    [28/03/2008|19:47] C:\Program Files\Realtek
    [02/11/2006|13:37] C:\Program Files\Reference Assemblies
    [10/06/2008|00:04] C:\Program Files\Replay Converter
    [24/10/2007|22:42] C:\Program Files\Roxio
    [20/09/2008|16:32] C:\Program Files\San Andreas Mod Installer
    [24/10/2007|22:52] C:\Program Files\Services en ligne
    [22/05/2008|11:54] C:\Program Files\Skype
    [11/06/2008|03:23] C:\Program Files\Software Informer
    [19/03/2008|14:43] C:\Program Files\Sony
    [19/02/2008|18:28] C:\Program Files\Sony Setup
    [15/11/2008|18:21] C:\Program Files\Spybot - Search & Destroy
    [13/11/2008|03:12] C:\Program Files\Steam
    [10/07/2008|20:18] C:\Program Files\Sun
    [15/03/2008|23:41] C:\Program Files\Symantec
    [19/03/2008|19:34] C:\Program Files\SystemRequirementsLab
    [15/02/2008|00:01] C:\Program Files\Uninstall Information
    [13/10/2008|19:00] C:\Program Files\UselessCreations
    [03/10/2008|14:53] C:\Program Files\uTorrent
    [29/01/2008|20:59] C:\Program Files\Veoh Networks
    [17/01/2008|13:57] C:\Program Files\VideoLAN
    [30/06/2008|10:51] C:\Program Files\Virtools
    [22/11/2008|14:51] C:\Program Files\WebMediaViewer
    [09/05/2008|20:49] C:\Program Files\Windows Calendar
    [09/05/2008|20:49] C:\Program Files\Windows Collaboration
    [09/05/2008|20:49] C:\Program Files\Windows Defender
    [09/05/2008|20:49] C:\Program Files\Windows Journal
    [16/01/2008|17:10] C:\Program Files\Windows Live
    [16/10/2008|19:35] C:\Program Files\Windows Mail
    [09/05/2008|20:49] C:\Program Files\Windows Media Player
    [16/01/2008|15:30] C:\Program Files\Windows NT
    [09/05/2008|20:49] C:\Program Files\Windows Photo Gallery
    [09/05/2008|20:49] C:\Program Files\Windows Sidebar
    [29/07/2008|02:13] C:\Program Files\Yahoo!
    [14/09/2008|19:05] C:\Program Files\Zaycev Downloader

    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

    [12/11/2008|21:27] C:\Program Files\Common Files\Adobe
    [27/01/2008|21:12] C:\Program Files\Common Files\Ahead
    [10/06/2008|11:28] C:\Program Files\Common Files\AVSMedia
    [24/10/2007|22:36] C:\Program Files\Common Files\HP
    [14/10/2008|19:53] C:\Program Files\Common Files\InstallShield
    [24/10/2007|22:45] C:\Program Files\Common Files\Java
    [24/10/2007|22:43] C:\Program Files\Common Files\LightScribe
    [07/09/2008|13:11] C:\Program Files\Common Files\logishrd
    [30/04/2008|08:47] C:\Program Files\Common Files\Logitech
    [24/10/2007|22:42] C:\Program Files\Common Files\LS Getting Started
    [16/01/2008|17:11] C:\Program Files\Common Files\microsoft shared
    [24/10/2007|22:43] C:\Program Files\Common Files\muvee Technologies
    [22/08/2008|12:09] C:\Program Files\Common Files\Nero
    [27/03/2008|18:29] C:\Program Files\Common Files\PX Storage Engine
    [24/09/2008|17:12] C:\Program Files\Common Files\Real
    [24/10/2007|22:42] C:\Program Files\Common Files\Roxio Shared
    [02/11/2006|12:18] C:\Program Files\Common Files\Services
    [22/05/2008|11:54] C:\Program Files\Common Files\Skype
    [23/03/2008|19:11] C:\Program Files\Common Files\Softwin
    [24/10/2007|22:42] C:\Program Files\Common Files\Sonic Shared
    [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
    [12/11/2008|21:32] C:\Program Files\Common Files\Steam
    [24/10/2007|22:37] C:\Program Files\Common Files\SureThing Shared
    [23/09/2008|14:15] C:\Program Files\Common Files\SWF Studio
    [15/03/2008|23:43] C:\Program Files\Common Files\Symantec Shared
    [09/05/2008|20:49] C:\Program Files\Common Files\System
    [16/01/2008|17:10] C:\Program Files\Common Files\WindowsLiveInstaller
    [24/09/2008|17:12] C:\Program Files\Common Files\xing shared

    --------------------\\ Process

    ( 76 Processes )

    iexplore.exe ~ [PID:17684]

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE


    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-22 22:29:51
    Windows 6.0.6001 Service Pack 1 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 13

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\SERIAL.txt
    C:\Users\David\Desktop\Dacuments De David\Programs\Sony SoundForge 9 + crack\soundforge90a_enu.exe


    [F:18][D:10]-> C:\Users\David\AppData\Local\Temp
    [F:238][D:1]-> C:\Users\David\AppData\Roaming\MICROS~1\Windows\Cookies
    [F:3088][D:4]-> C:\Users\David\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
    [F:8][D:5]-> C:\$Recycle.Bin

    1 - "C:\Lop SD\LopR_1.txt" - 22/11/2008|18:17 - Option : [1]
    2 - "C:\Lop SD\LopR_2.txt" - 22/11/2008|22:33 - Option : [2]

    --------------------\\ Fin du rapport a 22:33:04
    [ UAC => 1 ]

    répondre
    naheulbeuk le 23 novembre 2008 à 11h07
    bonjour, l'infection lop est virée :p

    1/ désinstalle ces programmes via ajout/suppr de programmes si présents :

    - WebMediaViewer
    - EoRezo

    2/ supprime ces dossiers si encore présents :

    C:\Program Files\WebMediaViewer
    C:\Program Files\EoRezo

    3/ vide ta corbeille

    4/ repost moi un nouveau rapport hijackthis stp

    bon dimanche :super:
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    répondre
    David_-_ le 23 novembre 2008 à 15h38
    naheulbeuk a écrit :
    bonjour, l'infection lop est virée :p

    1/ désinstalle ces programmes via ajout/suppr de programmes si présents :

    - WebMediaViewer
    - EoRezo

    2/ supprime ces dossiers si encore présents :

    C:\Program Files\WebMediaViewer
    C:\Program Files\EoRezo

    3/ vide ta corbeille

    4/ repost moi un nouveau rapport hijackthis stp

    bon dimanche :super:


    voila leraport, l triangle jaune est disparu mais l pages pub pas encore l reapares.

    Logfile of HijackThis v1.99.1
    Scan saved at 15:34:07, on 23/11/2008
    Platform: Unknown Windows (WinNT 6.00.1905 SP1)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Running processes:
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\ICQ6\ICQ.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\ehome\ehtray.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\eMule\emule.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\hp\kbd\kbd.exe
    C:\Windows\system32\rundll32.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
    C:\Windows\system32\conime.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
    C:\Users\David\Desktop\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
    R3 - URLSearchHook: (no name) - - (no file)
    R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
    O2 - BHO: (no name) - {04EE7F17-A81D-499F-ADD1-E75ABCC13220} - C:\Windows\system32\mlJYrrqQ.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O3 - Toolbar: Rambler-Àññèñòåíò - {468CD8A9-7C25-45FA-969E-3D925C689DC4} - C:\Program Files\Rambler Assistant\ramblertoolbarU5090.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
    O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
    O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\vtUOHWol.dll,#1
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
    O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\David\AppData\Local\Temp\ddcDspom.dll,#1
    O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
    O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
    O9 - Extra button: C????????? ?????? ???-??????? - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
    O9 - Extra button: (no name) - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.ietoolexpress.com/redirect.php (file missing)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
    O11 - Options group: [INTERNATIONAL] International*
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O13 - Gopher Prefix:
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
    O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll dchuaw.dll
    O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
    O23 - Service: Kaspersky Anti-Virus (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" -r (file missing)
    O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

    répondre
    David_-_ le 23 novembre 2008 à 16h01
    mon ordi est devenu tres lent de que je ves sur inetrnet ( internet explorer ou mozilla firefox) il se bloque
    répondre
    naheulbeuk le 23 novembre 2008 à 16h04
    t'inquiète on va arranger ca ;)

    Passe un coup de MalwareBytes (scan complet) et nettoie tout ce qu'il trouve
    Aide : http://www.site-naheulbeuk.com/malwarebytes.php
    Post moi le rapport généré à la fin dans ta prochaine réponse :)

    :hello:
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    répondre
    David_-_ le 24 novembre 2008 à 01h16
    naheulbeuk a écrit :
    t'inquiète on va arranger ca ;)

    Passe un coup de MalwareBytes (scan complet) et nettoie tout ce qu'il trouve
    Aide : http://www.site-naheulbeuk.com/malwarebytes.php
    Post moi le rapport généré à la fin dans ta prochaine réponse :)

    :hello:


    voila

    http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/tr(...)
    répondre
    naheulbeuk le 24 novembre 2008 à 10h20
    euh c'est pas le rapport que tu m'as posté là... :/
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    répondre
    David_-_ le 24 novembre 2008 à 18h12
    naheulbeuk a écrit :
    euh c'est pas le rapport que tu m'as posté là... :/


    tout a rentrer dans l ordre tou march super bien merci!!!!!!!! :super: :hello:
    répondre


    PRODUITS

    TÉLÉCHARGER - LOGICIELS

    JEUX VIDÉOS

    LOISIRS

    01NET PRO

    AVIS ET COMMENTAIRES

    A PROPOS DE 01NET

    Forum de 01net / Sécurité / trojan-spy.win32@mx
    publicité
    Escale bien être
    Le plus grand spa d'Irlande

    01Informatique
    01 INFORMATIQUE
    L'hebdo de référence des décideurs informatiques.
    Micro Hebdo
    MICRO HEBDO
    L'hebdo qui vous simplifie la micro
    et Internet.
    L'Ordinateur Individuel
    L'ORDINATEUR INDIVIDUEL
    Le mensuel informatique qui vous informe et vous conseille.
    Nous contacter  |  Charte de confiance  |  Voir notice légale

    01net.  -  01men  -  RMC  -  BFM Radio  -  BFM TV  -  La Tribune  -  TousLesPodcasts  -  01informatique.fr  -  Association RMC-BFM
    Tous droits réservés © 1999 - 2009 Internext - 01net.