Win32:BHO-KD

bonsoir

Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

ok

Télécharge BTFix de Bibi26.

• Dézippe l'archive sur ton Bureau.
• Ouvre le dossier BTFix.
• Double clique sur BTFix.exe.
• Clique sur Rechercher.
• Un rapport va apparaître, copie/colle-le dans ta prochaine réponse.

BTFix 1.079 (par bibi26) - 20/02/2008 22:03:55 - Analyse
Lancé depuis C:\Documents and Settings\pauline bocquet\Bureau\btfix\BTFix\BTFix.exe

---> Fichiers/Dossiers trouvés

- C:\WINDOWS\system32\adssite-remove.exe
- C:\WINDOWS\system32\rightonadz-uninst.exe
- C:\WINDOWS\system32\adssite_sidebar.dll
- C:\WINDOWS\system32\mysidesearch_sidebar.dll
- C:\Program Files\IntelligentAdvisor\

---> Analyse terminée

BTFix 1.079 (par bibi26) - 20/02/2008 22:06:42 - Nettoyage - Mode normal
Lancé depuis C:\Documents and Settings\pauline bocquet\Bureau\btfix\BTFix\BTFix.exe

---> Fichiers/dossiers supprimés (Première passe)

- Fichiers temporaires effacés
- C:\WINDOWS\system32\adssite-remove.exe
- C:\WINDOWS\system32\rightonadz-uninst.exe
- C:\WINDOWS\system32\adssite_sidebar.dll
- C:\WINDOWS\system32\mysidesearch_sidebar.dll
- C:\Program Files\IntelligentAdvisor\

---> Nettoyage terminé

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:10:28, on 20/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Creative\Shared Files\CTSched.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\explorer.exe
C:\DOCUME~1\PAULIN~1\LOCALS~1\Temp\Répertoire temporaire 4 pour hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {DAA91AB5-2C21-47B3-8C10-C326E04320EE} - C:\WINDOWS\system32\csseqch.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Biomenu] "C:\Program Files\Protector Suite QL\menusw.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NI.UGESV_0001_N122M2811] "C:\Documents and Settings\pauline bocquet\Local Settings\Temporary Internet Files\Content.IE5\ZZX5PTL6\setup_fr[1].exe"
O4 - HKLM\..\Run: [Kind Mess Surf Settings] C:\Documents and Settings\All Users\Application Data\grey ante kind mess\Plan Eq.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [road draw] C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\DVD OPTION START.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.75\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.75\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=https://smb-support.vaio-link.com/eSupport/PortalJSP/Portal.jsp
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

--
End of file - 10480 bytes

-----------------------------[ Lop S&D 2.3.6 ]---------------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : pauline bocquet ] [ "C:\Program Files\Lop SD" ]
[ 20/02/2008 | 22:19:30,94 ] [ PC : PAULINE ]
[ MAJ : 20-02-2008 | 21:11 ]

-------------[ Listing des dossiers dans Application Data ]------------

[07/03/2006|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[07/03/2006|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[02/08/2005|14:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[22/09/2005|16:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
[02/08/2005|11:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[07/03/2006|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[02/08/2005|09:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[02/08/2005|15:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/08/2005|14:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation
[02/08/2005|14:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[07/02/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[07/02/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[29/09/2007|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/02/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[29/09/2007|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[02/08/2005|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[09/09/2007|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/02/2008|18:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess
[12/10/2007|22:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[02/08/2005|12:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[13/01/2008|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[04/11/2007|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[16/02/2008|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/12/2007|09:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[02/08/2005|14:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[02/08/2005|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[09/09/2007|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[26/10/2007|19:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[01/12/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[07/03/2006|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[07/03/2006|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[02/08/2005|14:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[22/09/2005|16:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[02/08/2005|11:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[07/03/2006|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
[02/08/2005|09:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/08/2005|15:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/08/2005|14:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation
[02/08/2005|14:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[02/08/2005|09:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[02/08/2005|09:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[26/10/2007|19:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[02/08/2005|09:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[02/08/2005|09:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[02/08/2005|09:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[07/02/2008|21:08] C:\DOCUME~1\PAULIN~1\APPLIC~1\.
[07/02/2008|21:08] C:\DOCUME~1\PAULIN~1\APPLIC~1\..
[27/01/2008|20:45] C:\DOCUME~1\PAULIN~1\APPLIC~1\Adobe
[13/10/2007|19:40] C:\DOCUME~1\PAULIN~1\APPLIC~1\AdobeUM
[22/09/2005|16:20] C:\DOCUME~1\PAULIN~1\APPLIC~1\ATI
[07/02/2008|21:07] C:\DOCUME~1\PAULIN~1\APPLIC~1\Azureus
[15/09/2007|11:07] C:\DOCUME~1\PAULIN~1\APPLIC~1\Creative
[02/08/2005|11:40] C:\DOCUME~1\PAULIN~1\APPLIC~1\desktop.ini
[09/09/2007|11:04] C:\DOCUME~1\PAULIN~1\APPLIC~1\DivX
[14/02/2008|18:59] C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide
[29/09/2007|18:56] C:\DOCUME~1\PAULIN~1\APPLIC~1\Google
[02/08/2005|09:48] C:\DOCUME~1\PAULIN~1\APPLIC~1\Identities
[09/09/2007|22:24] C:\DOCUME~1\PAULIN~1\APPLIC~1\Leadertech
[14/02/2008|21:38] C:\DOCUME~1\PAULIN~1\APPLIC~1\LimeWire
[09/09/2007|08:03] C:\DOCUME~1\PAULIN~1\APPLIC~1\Macromedia
[02/12/2007|11:30] C:\DOCUME~1\PAULIN~1\APPLIC~1\Microsoft
[13/01/2008|12:40] C:\DOCUME~1\PAULIN~1\APPLIC~1\Morpheus Software
[13/02/2008|18:54] C:\DOCUME~1\PAULIN~1\APPLIC~1\Protector Suite
[26/09/2007|14:39] C:\DOCUME~1\PAULIN~1\APPLIC~1\Samsung
[30/12/2007|23:00] C:\DOCUME~1\PAULIN~1\APPLIC~1\setup_fr[1].exe
[09/09/2007|22:24] C:\DOCUME~1\PAULIN~1\APPLIC~1\Sonic
[30/11/2007|19:08] C:\DOCUME~1\PAULIN~1\APPLIC~1\Sony Corporation
[09/09/2007|10:02] C:\DOCUME~1\PAULIN~1\APPLIC~1\Sun
[26/07/2007|00:24] C:\DOCUME~1\PAULIN~1\APPLIC~1\Symantec
[12/10/2007|19:22] C:\DOCUME~1\PAULIN~1\APPLIC~1\Template
[17/12/2007|20:16] C:\DOCUME~1\PAULIN~1\APPLIC~1\Todae
[11/12/2007|18:02] C:\DOCUME~1\PAULIN~1\APPLIC~1\wklnhst.dat

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[20/02/2008 22:00][--ah-----] C:\WINDOWS\tasks\A6E59072918A007A.job [--284--]
[20/02/2008 20:00][--a------] C:\WINDOWS\tasks\HPpromotions hp photosmart 7700 series.job [--370--]
[20/02/2008 19:00][--a------] C:\WINDOWS\tasks\HP Usg Daily.job [--362--]
[20/02/2008 18:57][--ah-----] C:\WINDOWS\tasks\SA.DAT [--6--]
[05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini [--65--]

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[20/02/2008|22:19] C:\Program Files\.
[20/02/2008|22:19] C:\Program Files\..
[11/12/2007|11:58] C:\Program Files\Adobe
[09/09/2007|08:10] C:\Program Files\Alwil Software
[02/09/2005|16:50] C:\Program Files\Apoint2K
[22/09/2005|16:17] C:\Program Files\ATI Technologies
[02/08/2005|09:54] C:\Program Files\CONEXANT
[15/09/2007|09:45] C:\Program Files\Creative
[14/12/2007|13:52] C:\Program Files\DivX
[03/01/2008|22:56] C:\Program Files\Fichiers communs
[14/02/2008|18:58] C:\Program Files\Ford Error Hide
[07/03/2006|09:05] C:\Program Files\GDS
[09/09/2007|12:25] C:\Program Files\Google
[05/11/2007|13:04] C:\Program Files\Guitar Pro 5
[12/10/2007|22:00] C:\Program Files\Hewlett-Packard
[12/10/2007|21:59] C:\Program Files\HP
[03/01/2008|23:04] C:\Program Files\Incomplete
[24/01/2008|18:52] C:\Program Files\InstallShield Installation Information
[02/08/2005|12:16] C:\Program Files\Intel
[14/02/2008|18:56] C:\Program Files\Internet Explorer
[02/08/2005|14:52] C:\Program Files\InterVideo
[09/09/2007|06:59] C:\Program Files\Inventel
[02/08/2005|14:51] C:\Program Files\Java
[03/01/2008|22:46] C:\Program Files\LimeWire
[20/02/2008|22:19] C:\Program Files\Lop SD
[01/12/2007|09:27] C:\Program Files\Maxis
[02/08/2005|10:00] C:\Program Files\Messenger
[23/12/2007|20:15] C:\Program Files\Messenger Plus! Live
[13/10/2007|09:24] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/08/2005|09:48] C:\Program Files\microsoft frontpage
[08/02/2008|21:53] C:\Program Files\Microsoft Office
[01/12/2007|20:51] C:\Program Files\Microsoft SQL Server Compact Edition
[01/12/2007|09:05] C:\Program Files\Microsoft Works
[02/08/2005|09:46] C:\Program Files\Movie Maker
[17/08/2007|20:01] C:\Program Files\MP3 Player Utilities 3.75
[08/02/2008|21:52] C:\Program Files\MSECache
[02/08/2005|09:45] C:\Program Files\MSN
[02/08/2005|09:45] C:\Program Files\MSN Gaming Zone
[10/09/2007|02:01] C:\Program Files\MSXML 4.0
[02/08/2005|09:46] C:\Program Files\NetMeeting
[02/08/2005|09:45] C:\Program Files\Online Services
[10/09/2007|02:06] C:\Program Files\Outlook Express
[26/12/2007|23:53] C:\Program Files\PlayMP3z
[26/07/2007|00:10] C:\Program Files\Protector Suite QL
[02/09/2007|21:21] C:\Program Files\Raccourcis de programmes
[02/08/2005|10:28] C:\Program Files\Realtek
[26/09/2007|14:37] C:\Program Files\Samsung
[09/09/2007|07:20] C:\Program Files\Securitoo
[02/08/2005|09:47] C:\Program Files\Services en ligne
[26/07/2007|00:08] C:\Program Files\Sony
[29/09/2007|20:18] C:\Program Files\Steam
[09/09/2007|09:57] C:\Program Files\Symantec
[02/08/2005|09:51] C:\Program Files\Uninstall Information
[02/08/2005|14:53] C:\Program Files\Utimaco
[18/12/2007|19:51] C:\Program Files\Vista Start Menu
[20/02/2008|21:21] C:\Program Files\Wanadoo
[07/03/2006|08:57] C:\Program Files\Webex
[07/02/2008|21:09] C:\Program Files\Windows Live
[08/02/2008|11:12] C:\Program Files\Windows Live Toolbar
[26/10/2007|19:24] C:\Program Files\Windows Media Connect 2
[20/01/2008|16:07] C:\Program Files\Windows Media Player
[02/08/2005|09:45] C:\Program Files\Windows NT
[02/08/2005|09:47] C:\Program Files\WindowsUpdate
[02/08/2005|09:48] C:\Program Files\xerox

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/01/2008|22:56] C:\Program Files\Fichiers communs\.
[03/01/2008|22:56] C:\Program Files\Fichiers communs\..
[29/09/2007|21:16] C:\Program Files\Fichiers communs\Adobe
[07/10/2007|19:30] C:\Program Files\Fichiers communs\InstallShield
[02/08/2005|14:50] C:\Program Files\Fichiers communs\Java
[08/02/2008|21:53] C:\Program Files\Fichiers communs\Microsoft Shared
[02/08/2005|09:46] C:\Program Files\Fichiers communs\MSSoap
[02/08/2005|11:40] C:\Program Files\Fichiers communs\ODBC
[26/07/2007|00:10] C:\Program Files\Fichiers communs\Protector Suite QL
[02/08/2005|09:46] C:\Program Files\Fichiers communs\Services
[26/07/2007|00:11] C:\Program Files\Fichiers communs\Sonic Shared
[02/08/2005|14:51] C:\Program Files\Fichiers communs\Sony Shared
[02/08/2005|11:40] C:\Program Files\Fichiers communs\SpeechEngines
[09/09/2007|10:31] C:\Program Files\Fichiers communs\Symantec Shared
[01/12/2007|09:02] C:\Program Files\Fichiers communs\System
[01/12/2007|20:46] C:\Program Files\Fichiers communs\WindowsLiveInstaller

----------------------[ Recherche avec S_Lop ]---------------------

C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\32locksmfcd.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\dmyyiupy.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\DVD OPTION START.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\ibnchqrh.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\nhrratsn.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\nxccaegv.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\recttypemapiooze.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\sfpbvodv.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\tphffwdq.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\FORDER~1\ysbcdyhu.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\32locksmfcd.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\dmyyiupy.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\DVD OPTION START.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\ibnchqrh.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\nhrratsn.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\nxccaegv.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\recttypemapiooze.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\sfpbvodv.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\tphffwdq.exe
C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\ysbcdyhu.exe
C:\Program Files\Ford Error Hide
C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess
C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess\grid hole.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess\Plan Eq.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess\window hold.exe
C:\WINDOWS\Tasks\A6E59072918A007A.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\uninstall\fork live bait]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\PAULIN~1\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"road draw"="C:\\DOCUME~1\\PAULIN~1\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Kind Mess Surf Settings"="C:\\Documents and Settings\\All Users\\Application Data\\grey ante kind mess\\Plan Eq.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 72 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-20 22:20:45
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden files ...
scan completed successfully
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

/!\ [Fich:26][Doss:35] C:\DOCUME~1\PAULIN~1\LOCALS~1\Temp
/!\ [Fich:461][Doss:0] C:\DOCUME~1\PAULIN~1\Cookies
/!\ [Fich:5530][Doss:26] C:\DOCUME~1\PAULIN~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 22:21:02,58 ]----------------------

-----------------------------[ Lop S&D 2.3.6 ]---------------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : pauline bocquet ] [ "C:\Program Files\Lop SD" ]
[ 20/02/2008 | 22:27:42,76 ] [ PC : PAULINE ]
[ MAJ : 20-02-2008 | 21:11 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\32locksmfcd.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\dmyyiupy.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\DVD OPTION START.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\ibnchqrh.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\nhrratsn.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\nxccaegv.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\recttypemapiooze.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\sfpbvodv.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\tphffwdq.exe
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide\ysbcdyhu.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess\grid hole.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess\Plan Eq.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess\window hold.exe
Supprimé! - C:\WINDOWS\Tasks\A6E59072918A007A.job
Supprimé! - C:\DOCUME~1\PAULIN~1\APPLIC~1\Ford Error Hide
Supprimé! - C:\Program Files\Ford Error Hide
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\grey ante kind mess
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[07/03/2006|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[07/03/2006|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[02/08/2005|14:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[22/09/2005|16:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
[02/08/2005|11:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[07/03/2006|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[02/08/2005|09:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[02/08/2005|15:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/08/2005|14:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation
[02/08/2005|14:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[20/02/2008|22:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[20/02/2008|22:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[29/09/2007|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/02/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[29/09/2007|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[02/08/2005|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[09/09/2007|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[12/10/2007|22:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[02/08/2005|12:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[13/01/2008|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[04/11/2007|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[16/02/2008|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/12/2007|09:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[02/08/2005|14:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[02/08/2005|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[09/09/2007|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[26/10/2007|19:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[01/12/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[07/03/2006|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[07/03/2006|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[02/08/2005|14:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[22/09/2005|16:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[02/08/2005|11:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[07/03/2006|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
[02/08/2005|09:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/08/2005|15:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/08/2005|14:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation
[02/08/2005|14:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[02/08/2005|09:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[02/08/2005|09:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[26/10/2007|19:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[02/08/2005|09:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[02/08/2005|09:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[02/08/2005|09:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[20/02/2008|22:27] C:\DOCUME~1\PAULIN~1\APPLIC~1\.
[20/02/2008|22:27] C:\DOCUME~1\PAULIN~1\APPLIC~1\..
[27/01/2008|20:45] C:\DOCUME~1\PAULIN~1\APPLIC~1\Adobe
[13/10/2007|19:40] C:\DOCUME~1\PAULIN~1\APPLIC~1\AdobeUM
[22/09/2005|16:20] C:\DOCUME~1\PAULIN~1\APPLIC~1\ATI
[07/02/2008|21:07] C:\DOCUME~1\PAULIN~1\APPLIC~1\Azureus
[15/09/2007|11:07] C:\DOCUME~1\PAULIN~1\APPLIC~1\Creative
[02/08/2005|11:40] C:\DOCUME~1\PAULIN~1\APPLIC~1\desktop.ini
[09/09/2007|11:04] C:\DOCUME~1\PAULIN~1\APPLIC~1\DivX
[29/09/2007|18:56] C:\DOCUME~1\PAULIN~1\APPLIC~1\Google
[02/08/2005|09:48] C:\DOCUME~1\PAULIN~1\APPLIC~1\Identities
[09/09/2007|22:24] C:\DOCUME~1\PAULIN~1\APPLIC~1\Leadertech
[14/02/2008|21:38] C:\DOCUME~1\PAULIN~1\APPLIC~1\LimeWire
[09/09/2007|08:03] C:\DOCUME~1\PAULIN~1\APPLIC~1\Macromedia
[02/12/2007|11:30] C:\DOCUME~1\PAULIN~1\APPLIC~1\Microsoft
[13/01/2008|12:40] C:\DOCUME~1\PAULIN~1\APPLIC~1\Morpheus Software
[13/02/2008|18:54] C:\DOCUME~1\PAULIN~1\APPLIC~1\Protector Suite
[26/09/2007|14:39] C:\DOCUME~1\PAULIN~1\APPLIC~1\Samsung
[30/12/2007|23:00] C:\DOCUME~1\PAULIN~1\APPLIC~1\setup_fr[1].exe
[09/09/2007|22:24] C:\DOCUME~1\PAULIN~1\APPLIC~1\Sonic
[30/11/2007|19:08] C:\DOCUME~1\PAULIN~1\APPLIC~1\Sony Corporation
[09/09/2007|10:02] C:\DOCUME~1\PAULIN~1\APPLIC~1\Sun
[26/07/2007|00:24] C:\DOCUME~1\PAULIN~1\APPLIC~1\Symantec
[12/10/2007|19:22] C:\DOCUME~1\PAULIN~1\APPLIC~1\Template
[17/12/2007|20:16] C:\DOCUME~1\PAULIN~1\APPLIC~1\Todae
[11/12/2007|18:02] C:\DOCUME~1\PAULIN~1\APPLIC~1\wklnhst.dat

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[20/02/2008 20:00][--a------] C:\WINDOWS\tasks\HPpromotions hp photosmart 7700 series.job [--370--]
[20/02/2008 19:00][--a------] C:\WINDOWS\tasks\HP Usg Daily.job [--362--]
[20/02/2008 18:57][--ah-----] C:\WINDOWS\tasks\SA.DAT [--6--]
[05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini [--65--]

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[20/02/2008|22:27] C:\Program Files\.
[20/02/2008|22:27] C:\Program Files\..
[11/12/2007|11:58] C:\Program Files\Adobe
[09/09/2007|08:10] C:\Program Files\Alwil Software
[02/09/2005|16:50] C:\Program Files\Apoint2K
[22/09/2005|16:17] C:\Program Files\ATI Technologies
[02/08/2005|09:54] C:\Program Files\CONEXANT
[15/09/2007|09:45] C:\Program Files\Creative
[14/12/2007|13:52] C:\Program Files\DivX
[03/01/2008|22:56] C:\Program Files\Fichiers communs
[07/03/2006|09:05] C:\Program Files\GDS
[09/09/2007|12:25] C:\Program Files\Google
[05/11/2007|13:04] C:\Program Files\Guitar Pro 5
[12/10/2007|22:00] C:\Program Files\Hewlett-Packard
[12/10/2007|21:59] C:\Program Files\HP
[03/01/2008|23:04] C:\Program Files\Incomplete
[24/01/2008|18:52] C:\Program Files\InstallShield Installation Information
[02/08/2005|12:16] C:\Program Files\Intel
[14/02/2008|18:56] C:\Program Files\Internet Explorer
[02/08/2005|14:52] C:\Program Files\InterVideo
[09/09/2007|06:59] C:\Program Files\Inventel
[02/08/2005|14:51] C:\Program Files\Java
[03/01/2008|22:46] C:\Program Files\LimeWire
[20/02/2008|22:27] C:\Program Files\Lop SD
[01/12/2007|09:27] C:\Program Files\Maxis
[02/08/2005|10:00] C:\Program Files\Messenger
[23/12/2007|20:15] C:\Program Files\Messenger Plus! Live
[13/10/2007|09:24] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/08/2005|09:48] C:\Program Files\microsoft frontpage
[08/02/2008|21:53] C:\Program Files\Microsoft Office
[01/12/2007|20:51] C:\Program Files\Microsoft SQL Server Compact Edition
[01/12/2007|09:05] C:\Program Files\Microsoft Works
[02/08/2005|09:46] C:\Program Files\Movie Maker
[17/08/2007|20:01] C:\Program Files\MP3 Player Utilities 3.75
[08/02/2008|21:52] C:\Program Files\MSECache
[02/08/2005|09:45] C:\Program Files\MSN
[02/08/2005|09:45] C:\Program Files\MSN Gaming Zone
[10/09/2007|02:01] C:\Program Files\MSXML 4.0
[02/08/2005|09:46] C:\Program Files\NetMeeting
[02/08/2005|09:45] C:\Program Files\Online Services
[10/09/2007|02:06] C:\Program Files\Outlook Express
[26/12/2007|23:53] C:\Program Files\PlayMP3z
[26/07/2007|00:10] C:\Program Files\Protector Suite QL
[02/09/2007|21:21] C:\Program Files\Raccourcis de programmes
[02/08/2005|10:28] C:\Program Files\Realtek
[26/09/2007|14:37] C:\Program Files\Samsung
[09/09/2007|07:20] C:\Program Files\Securitoo
[02/08/2005|09:47] C:\Program Files\Services en ligne
[26/07/2007|00:08] C:\Program Files\Sony
[29/09/2007|20:18] C:\Program Files\Steam
[09/09/2007|09:57] C:\Program Files\Symantec
[02/08/2005|09:51] C:\Program Files\Uninstall Information
[02/08/2005|14:53] C:\Program Files\Utimaco
[18/12/2007|19:51] C:\Program Files\Vista Start Menu
[20/02/2008|21:21] C:\Program Files\Wanadoo
[07/03/2006|08:57] C:\Program Files\Webex
[07/02/2008|21:09] C:\Program Files\Windows Live
[08/02/2008|11:12] C:\Program Files\Windows Live Toolbar
[26/10/2007|19:24] C:\Program Files\Windows Media Connect 2
[20/01/2008|16:07] C:\Program Files\Windows Media Player
[02/08/2005|09:45] C:\Program Files\Windows NT
[02/08/2005|09:47] C:\Program Files\WindowsUpdate
[02/08/2005|09:48] C:\Program Files\xerox

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/01/2008|22:56] C:\Program Files\Fichiers communs\.
[03/01/2008|22:56] C:\Program Files\Fichiers communs\..
[29/09/2007|21:16] C:\Program Files\Fichiers communs\Adobe
[07/10/2007|19:30] C:\Program Files\Fichiers communs\InstallShield
[02/08/2005|14:50] C:\Program Files\Fichiers communs\Java
[08/02/2008|21:53] C:\Program Files\Fichiers communs\Microsoft Shared
[02/08/2005|09:46] C:\Program Files\Fichiers communs\MSSoap
[02/08/2005|11:40] C:\Program Files\Fichiers communs\ODBC
[26/07/2007|00:10] C:\Program Files\Fichiers communs\Protector Suite QL
[02/08/2005|09:46] C:\Program Files\Fichiers communs\Services
[26/07/2007|00:11] C:\Program Files\Fichiers communs\Sonic Shared
[02/08/2005|14:51] C:\Program Files\Fichiers communs\Sony Shared
[02/08/2005|11:40] C:\Program Files\Fichiers communs\SpeechEngines
[09/09/2007|10:31] C:\Program Files\Fichiers communs\Symantec Shared
[01/12/2007|09:02] C:\Program Files\Fichiers communs\System
[01/12/2007|20:46] C:\Program Files\Fichiers communs\WindowsLiveInstaller

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-20 22:28:41
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden files ...
scan completed successfully
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

/!\ [Fich:27][Doss:36] C:\DOCUME~1\PAULIN~1\LOCALS~1\Temp
/!\ [Fich:461][Doss:0] C:\DOCUME~1\PAULIN~1\Cookies
/!\ [Fich:5717][Doss:26] C:\DOCUME~1\PAULIN~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 22:28:54,41 ]----------------------

~Télécharge OTMoveIt (d'OldTimer). Sauvegarde-le sur ton Bureau.

~Lance Hijackthis “Do a system scan only”.
Coche les lignes qui suivent si encore présentes et uniquement celles-là.

O2 - BHO: (no name) - {DAA91AB5-2C21-47B3-8C10-C326E04320EE} - C:\WINDOWS\system32\csseqch.dll (file missing)
O4 - HKLM\..\Run: [NI.UGESV_0001_N122M2811] "C:\Documents and Settings\pauline bocquet\Local Settings\Temporary Internet Files\Content.IE5\ZZX5PTL6\setup_fr[1].exe"

Clique sur Fix checked (en bas à gauche)


Sélectionne TOUS les emplacements en gras ci-dessous :

C:\Documents and Settings\pauline bocquet\Local Settings\Temporary Internet Files\Content.IE5\ZZX5PTL6

---> Clique-droit puis Copier (ou Ctrl+C)

Double-clique sur OTMoveIt.exe afin de le lancer.
Fais un Clique-droit sur le cadre de gauche puis choisis Coller (ou Ctrl+V).
Clique maintenant sur MoveIt!

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

->Informations sur le logiciel<-

ok

deux dernières petites choses:

1
~Télécharge CCleaner:

http://www.filehippo.com/download_ccleaner/

~Lors de l'installation décoche: "Ajouter la Barre d'Outils Yahoo! Ccleaner"
Clique sur le bouton nettoyeur, tu fais " lancer le nettoyage "
Clique sur le bouton erreurs, tu fais "chercher les erreurs ", puis "réparer les erreurs".
Tuto de CCleaner: (merci à Malekal) .
http://www.malekal.com/tutorial_CCleaner.html

2

~Fais une analyse antivirus en ligne sur le site de Kaspersky
http://webscanner.kaspersky.fr/

~ Clique sur Online Scanner.
~Accepte l'installation du contrôle ActiveX en cliquant sur le bouton Install.

~Sélectionne le poste de travail comme analyse.

~Enregistre le rapport en cliquant sur le bouton "Enregistrer rapport sous". Nomme-le, tu feras un copier/coller dans ta prochaine réponse.

Tuto du scan en ligne

tu n'as pas cette interface?


chez moi, c'est comme ça
le bouton erreurs est juste sous le bouton nettoyeur (à gauche)

après avoir trouvé les erreurs il ne veut pas me supprimer certaines... je fais quoi??

je suis dsl du tps que ça prend.. :s

j'espere que je pourrais finir...

bonjour à tous....

mon probleme avec le virus Win32:BHO-KD n'est toujours pas résolue..

aidez moi... merci