fenêtre CID

bonjour

Télécharge Lop S&D.exe sur ton bureau

Double-clique dessus pour lancer l'installation

Puis double-clique sur le raccourci Lop S&D présent sur ton bureau

Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )

Patiente jusqu'à la fin du scan

Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

voici le résultat :




-----------------------[ Lop S&D 4.1.0-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Propri‚taire ] [ "C:\Lop SD" ]
[ 10/04/2008 | 14:08:40,39 ] [ PC : CHABANAI-55A163 ]
[ MAJ : 08-04-2008 | 23:37 ]

-------------[ Listing des dossiers dans Application Data ]------------

[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[03/03/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[03/03/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[20/02/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/06/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[10/02/2007|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/07/2007|13:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[07/04/2007|20:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/01/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[23/01/2007|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[13/01/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\junk exit scr wait
[09/04/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[03/03/2008|21:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/06/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[07/06/2006|10:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OLYMPUS
[13/02/2008|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[13/01/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping
[05/01/2008|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[27/04/2006|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[28/02/2007|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[03/04/2006|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2008|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[22/02/2006|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[27/03/2008|10:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[22/02/2006|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\.
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\..
[17/12/2006|20:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\addon.dat
[30/01/2007|21:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[20/02/2007|18:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[14/02/2007|15:46] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[09/06/2007|22:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\ConvertTemp
[30/07/2007|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
[05/06/2007|18:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\DivX
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\dvdcss
[25/08/2006|12:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[24/03/2008|22:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\gtk-2.0
[22/02/2006|20:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[31/01/2007|17:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\HP
[22/02/2006|19:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[05/04/2008|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\Image Zone Express
[03/04/2006|19:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
[20/02/2007|22:02] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
[13/01/2008|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Listoozefunk
[22/02/2006|21:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[04/11/2007|09:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[19/06/2007|20:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Web Folders
[04/03/2006|14:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller
[22/02/2006|23:14] C:\DOCUME~1\PROPRI~1\APPLIC~1\Musicmatch
[07/09/2007|08:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Printer Info Cache
[25/09/2006|18:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Samsung
[22/02/2006|22:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Shareaza
[13/01/2008|21:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[22/05/2007|22:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\STOIK
[23/02/2006|15:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[09/03/2008|18:07] C:\DOCUME~1\PROPRI~1\APPLIC~1\Temporary
[08/11/2006|21:57] C:\DOCUME~1\PROPRI~1\APPLIC~1\TransRender
[08/06/2007|20:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[18/11/2007|13:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR

[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\.
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\..
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\Macromedia

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[10/04/2008 14:00][--ah-----] C:\WINDOWS\tasks\A250D0D593FF44E9.job
[07/04/2008 20:53][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Effectuer une analyse complŠte du systŠme - Propri‚taire.job
[08/04/2008 13:49][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/04/2008 11:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[09/04/2008|21:25] C:\Program Files\.
[09/04/2008|21:25] C:\Program Files\..
[30/01/2007|21:29] C:\Program Files\Adobe
[22/02/2006|21:37] C:\Program Files\Ahead
[22/05/2007|22:31] C:\Program Files\AliveMedia
[18/08/2007|20:51] C:\Program Files\Apple Software Update
[22/02/2006|20:08] C:\Program Files\ATI Technologies
[22/02/2006|20:04] C:\Program Files\AvRack
[05/11/2007|21:14] C:\Program Files\BitTorrent Fastest Tool
[12/09/2006|19:54] C:\Program Files\Common Files
[22/02/2006|19:51] C:\Program Files\ComPlus Applications
[22/02/2006|21:00] C:\Program Files\CyberLink
[28/07/2007|21:15] C:\Program Files\directx
[04/06/2007|18:24] C:\Program Files\DivX
[01/09/2007|21:20] C:\Program Files\Easy GIF Animator
[01/09/2007|21:20] C:\Program Files\Easy Gif Animator Extension
[05/03/2008|21:54] C:\Program Files\eMule
[03/03/2008|12:05] C:\Program Files\Fichiers communs
[19/06/2007|20:37] C:\Program Files\FoneSync
[09/11/2007|23:08] C:\Program Files\GeoGebra
[01/09/2007|21:45] C:\Program Files\GIMP-2.0
[08/04/2007|09:54] C:\Program Files\Google
[31/03/2006|22:13] C:\Program Files\Goto.Games
[23/01/2007|18:49] C:\Program Files\Hewlett-Packard
[23/01/2007|18:52] C:\Program Files\HP
[03/06/2007|21:29] C:\Program Files\Insania Alpha 5.0
[28/07/2007|21:13] C:\Program Files\InstallShield Installation Information
[10/04/2008|01:14] C:\Program Files\Internet Explorer
[09/01/2008|14:51] C:\Program Files\iPod
[09/01/2008|14:51] C:\Program Files\iTunes
[25/08/2006|12:50] C:\Program Files\Java
[03/04/2006|19:53] C:\Program Files\Lavasoft
[13/01/2008|23:03] C:\Program Files\Listoozefunk
[31/08/2006|12:31] C:\Program Files\Macrogaming
[22/02/2006|17:27] C:\Program Files\Messenger
[27/02/2008|15:11] C:\Program Files\Messenger Plus! Live
[28/02/2008|22:26] C:\Program Files\MessengerPlus! 3
[19/06/2007|20:47] C:\Program Files\Microsoft AutoRoute
[19/06/2007|20:51] C:\Program Files\Microsoft Encarta
[22/02/2006|19:54] C:\Program Files\microsoft frontpage
[01/09/2007|21:15] C:\Program Files\Microsoft GIF Animator
[19/06/2007|20:46] C:\Program Files\Microsoft Money
[19/06/2007|20:43] C:\Program Files\Microsoft Office
[19/06/2007|20:50] C:\Program Files\Microsoft Picture It! PhotoPub
[27/03/2008|10:25] C:\Program Files\Microsoft SQL Server Compact Edition
[19/06/2007|20:45] C:\Program Files\Microsoft Works
[19/06/2007|20:30] C:\Program Files\Microsoft Works Suite 2001
[05/06/2007|20:01] C:\Program Files\Morgan
[22/02/2006|19:52] C:\Program Files\Movie Maker
[23/02/2006|11:52] C:\Program Files\MSN
[22/07/2006|20:32] C:\Program Files\MSN Games
[22/02/2006|19:51] C:\Program Files\MSN Gaming Zone
[03/03/2008|12:09] C:\Program Files\MSN Messenger
[18/11/2006|19:02] C:\Program Files\MSXML 4.0
[22/02/2006|21:01] C:\Program Files\MUSICMATCH
[10/12/2006|00:02] C:\Program Files\NetMeeting
[14/12/2007|09:51] C:\Program Files\Norton AntiVirus
[07/06/2006|09:58] C:\Program Files\OLYMPUS
[22/02/2006|19:51] C:\Program Files\Online Services
[13/06/2007|18:02] C:\Program Files\Outlook Express
[28/04/2007|13:39] C:\Program Files\Pharmatheque
[22/02/2006|21:37] C:\Program Files\Philips
[14/02/2008|13:25] C:\Program Files\Picasa2
[14/01/2008|21:01] C:\Program Files\QuickTime
[22/02/2006|20:04] C:\Program Files\Realtek Sound Manager
[25/09/2006|18:04] C:\Program Files\Samsung
[28/10/2006|22:41] C:\Program Files\Seagrand
[22/02/2006|19:52] C:\Program Files\Services en ligne
[28/05/2007|21:47] C:\Program Files\Shareaza
[28/02/2007|22:22] C:\Program Files\Skype
[03/06/2007|21:40] C:\Program Files\Slayers Online
[21/11/2007|11:38] C:\Program Files\Spybot - Search & Destroy
[22/05/2007|22:38] C:\Program Files\STOIK Imaging
[01/12/2007|12:05] C:\Program Files\Symantec
[09/04/2008|21:25] C:\Program Files\Trend Micro
[06/03/2006|22:07] C:\Program Files\Ubisoft
[23/02/2008|23:17] C:\Program Files\UnFREEz
[22/02/2006|19:58] C:\Program Files\Uninstall Information
[13/04/2007|19:00] C:\Program Files\VideoConverter
[08/06/2007|20:52] C:\Program Files\VideoLAN
[16/04/2006|18:40] C:\Program Files\vrmax+
[28/03/2008|19:01] C:\Program Files\Windows Live
[19/02/2007|16:39] C:\Program Files\Windows Media Connect 2
[19/02/2007|16:39] C:\Program Files\Windows Media Player
[22/02/2006|19:50] C:\Program Files\Windows NT
[07/11/2007|10:31] C:\Program Files\Windows Sidebar
[22/02/2006|19:53] C:\Program Files\WindowsUpdate
[18/11/2007|13:41] C:\Program Files\WinRAR
[25/02/2006|20:30] C:\Program Files\World of Warcraft
[22/02/2006|19:54] C:\Program Files\xerox
[22/02/2006|21:54] C:\Program Files\Yahoo!
[09/11/2007|23:07] C:\Program Files\Zero G Registry

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/03/2008|12:05] C:\Program Files\Fichiers communs\.
[03/03/2008|12:05] C:\Program Files\Fichiers communs\..
[20/02/2007|18:22] C:\Program Files\Fichiers communs\Adobe
[22/02/2006|21:37] C:\Program Files\Fichiers communs\Ahead
[12/06/2007|12:51] C:\Program Files\Fichiers communs\Apple
[25/02/2006|19:38] C:\Program Files\Fichiers communs\Blizzard Entertainment
[19/06/2007|20:44] C:\Program Files\Fichiers communs\Designer
[01/09/2007|21:42] C:\Program Files\Fichiers communs\GTK
[23/01/2007|18:49] C:\Program Files\Fichiers communs\Hewlett-Packard
[07/09/2007|08:51] C:\Program Files\Fichiers communs\HP
[06/03/2006|22:00] C:\Program Files\Fichiers communs\InstallShield
[23/02/2006|15:51] C:\Program Files\Fichiers communs\Java
[03/03/2008|12:11] C:\Program Files\Fichiers communs\Microsoft Shared
[22/02/2006|19:52] C:\Program Files\Fichiers communs\MSSoap
[22/02/2006|18:12] C:\Program Files\Fichiers communs\Nero
[22/02/2006|20:43] C:\Program Files\Fichiers communs\ODBC
[22/02/2006|19:52] C:\Program Files\Fichiers communs\Services
[28/02/2007|22:22] C:\Program Files\Fichiers communs\Skype
[22/02/2006|20:43] C:\Program Files\Fichiers communs\SpeechEngines
[04/04/2008|10:19] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|18:02] C:\Program Files\Fichiers communs\System
[03/03/2008|12:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

----------------------[ Recherche avec S_Lop ]---------------------

C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bis4E5.exe
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bisA2B.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping\inside heart.exe
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\BitP.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\Program Files\BitTorrent Fastest Tool\UNWISE.EXE
C:\WINDOWS\Tasks\A250D0D593FF44E9.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CHIN PING PHONE PILE"="C:\\Documents and Settings\\All Users\\Application Data\\Proxy Long Chin Ping\\inside heart.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 72 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-10 14:09:13
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\pack.epk
C:\WINDOWS\system32\regkufbgrv_navps.dat
C:\WINDOWS\system32\regkufbgrv_nav.dat
C:\WINDOWS\system32\regkufbgrv.dat
! EGDACCESS !


/!\ [Fich:11645][Doss:110] C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
/!\ [Fich:438][Doss:0] C:\DOCUME~1\PROPRI~1\Cookies
/!\ [Fich:16131][Doss:17] C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 14:11:02,65 ]----------------------

re

1
Relance Lop S&D

Choisis cette fois ci l'Option 2 ( Suppression )

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

2

Télécharge Navilog1.exe (IL-MAFIOSO)
Enregistre-le sur ton Bureau.
Lance l'installation en double cliquant sur navilog.exe.
Une fois l'installation terminée, l'utilitaire s'exécutera automatiquement.
(Si ce n'est pas le cas, double clique sur le raccourci présent sur le Bureau)

Laisse-toi guider par l'utilitaire. Choisis l'option 1 puis valide.
[#ff0000]! N'utilise pas l'option 2, 3 et 4 sans notre accord ![/#f]
Patiente jusqu'à l'apparition de ce message :
"*** Analyse Termine le ..... ***"
Appuie sur une touche comme demandé. Le Bloc-notes va s'ouvrir. Poste-nous son contenu de cette manière :

-> Edition / Sélectionner tout
-> Edition / Copier
-> Clique-Droit / Coller dans ta réponse

NOTE : Le rapport se trouve également ici : C:\fixnavi.txt

2 ème rapport Lop S&D :



-----------------------[ Lop S&D 4.1.0-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Propri‚taire ] [ "C:\Lop SD" ]
[ 10/04/2008 | 22:16:39,93 ] [ PC : CHABANAI-55A163 ]
[ MAJ : 08-04-2008 | 23:37 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping\inside heart.exe
Supprimé! - C:\Program Files\BitTorrent Fastest Tool\BitP.exe
Supprimé! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
Supprimé! - C:\Program Files\BitTorrent Fastest Tool\UNWISE.EXE
Supprimé! - C:\WINDOWS\Tasks\A250D0D593FF44E9.job
Supprimé! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bis4E5.exe
Supprimé! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bisA2B.exe
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping
Supprimé! - C:\Program Files\BitTorrent Fastest Tool
Restauré! - Fichier Hosts

\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////

Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping\inside heart.exe
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[03/03/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[03/03/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[20/02/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/06/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[10/02/2007|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/07/2007|13:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[07/04/2007|20:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/01/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[23/01/2007|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[13/01/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\junk exit scr wait
[09/04/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[03/03/2008|21:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/06/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[07/06/2006|10:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OLYMPUS
[13/02/2008|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[13/01/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping
[05/01/2008|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[27/04/2006|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[28/02/2007|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[03/04/2006|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2008|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[22/02/2006|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[27/03/2008|10:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[22/02/2006|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\.
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\..
[17/12/2006|20:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\addon.dat
[30/01/2007|21:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[20/02/2007|18:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[14/02/2007|15:46] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[09/06/2007|22:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\ConvertTemp
[30/07/2007|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
[05/06/2007|18:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\DivX
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\dvdcss
[25/08/2006|12:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[24/03/2008|22:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\gtk-2.0
[22/02/2006|20:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[31/01/2007|17:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\HP
[22/02/2006|19:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[05/04/2008|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\Image Zone Express
[03/04/2006|19:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
[20/02/2007|22:02] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
[13/01/2008|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Listoozefunk
[22/02/2006|21:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[04/11/2007|09:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[19/06/2007|20:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Web Folders
[04/03/2006|14:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller
[22/02/2006|23:14] C:\DOCUME~1\PROPRI~1\APPLIC~1\Musicmatch
[07/09/2007|08:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Printer Info Cache
[25/09/2006|18:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Samsung
[22/02/2006|22:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Shareaza
[13/01/2008|21:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[22/05/2007|22:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\STOIK
[23/02/2006|15:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[09/03/2008|18:07] C:\DOCUME~1\PROPRI~1\APPLIC~1\Temporary
[08/11/2006|21:57] C:\DOCUME~1\PROPRI~1\APPLIC~1\TransRender
[08/06/2007|20:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[18/11/2007|13:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR

[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\.
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\..
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\Macromedia

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[07/04/2008 20:53][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Effectuer une analyse complŠte du systŠme - Propri‚taire.job
[08/04/2008 13:49][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/04/2008 11:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[10/04/2008|22:16] C:\Program Files\.
[10/04/2008|22:16] C:\Program Files\..
[30/01/2007|21:29] C:\Program Files\Adobe
[22/02/2006|21:37] C:\Program Files\Ahead
[22/05/2007|22:31] C:\Program Files\AliveMedia
[18/08/2007|20:51] C:\Program Files\Apple Software Update
[22/02/2006|20:08] C:\Program Files\ATI Technologies
[22/02/2006|20:04] C:\Program Files\AvRack
[12/09/2006|19:54] C:\Program Files\Common Files
[22/02/2006|19:51] C:\Program Files\ComPlus Applications
[22/02/2006|21:00] C:\Program Files\CyberLink
[28/07/2007|21:15] C:\Program Files\directx
[04/06/2007|18:24] C:\Program Files\DivX
[01/09/2007|21:20] C:\Program Files\Easy GIF Animator
[01/09/2007|21:20] C:\Program Files\Easy Gif Animator Extension
[05/03/2008|21:54] C:\Program Files\eMule
[03/03/2008|12:05] C:\Program Files\Fichiers communs
[19/06/2007|20:37] C:\Program Files\FoneSync
[09/11/2007|23:08] C:\Program Files\GeoGebra
[01/09/2007|21:45] C:\Program Files\GIMP-2.0
[08/04/2007|09:54] C:\Program Files\Google
[31/03/2006|22:13] C:\Program Files\Goto.Games
[23/01/2007|18:49] C:\Program Files\Hewlett-Packard
[23/01/2007|18:52] C:\Program Files\HP
[03/06/2007|21:29] C:\Program Files\Insania Alpha 5.0
[28/07/2007|21:13] C:\Program Files\InstallShield Installation Information
[10/04/2008|01:14] C:\Program Files\Internet Explorer
[09/01/2008|14:51] C:\Program Files\iPod
[09/01/2008|14:51] C:\Program Files\iTunes
[25/08/2006|12:50] C:\Program Files\Java
[03/04/2006|19:53] C:\Program Files\Lavasoft
[13/01/2008|23:03] C:\Program Files\Listoozefunk
[31/08/2006|12:31] C:\Program Files\Macrogaming
[22/02/2006|17:27] C:\Program Files\Messenger
[27/02/2008|15:11] C:\Program Files\Messenger Plus! Live
[28/02/2008|22:26] C:\Program Files\MessengerPlus! 3
[19/06/2007|20:47] C:\Program Files\Microsoft AutoRoute
[19/06/2007|20:51] C:\Program Files\Microsoft Encarta
[22/02/2006|19:54] C:\Program Files\microsoft frontpage
[01/09/2007|21:15] C:\Program Files\Microsoft GIF Animator
[19/06/2007|20:46] C:\Program Files\Microsoft Money
[19/06/2007|20:43] C:\Program Files\Microsoft Office
[19/06/2007|20:50] C:\Program Files\Microsoft Picture It! PhotoPub
[27/03/2008|10:25] C:\Program Files\Microsoft SQL Server Compact Edition
[19/06/2007|20:45] C:\Program Files\Microsoft Works
[19/06/2007|20:30] C:\Program Files\Microsoft Works Suite 2001
[05/06/2007|20:01] C:\Program Files\Morgan
[22/02/2006|19:52] C:\Program Files\Movie Maker
[23/02/2006|11:52] C:\Program Files\MSN
[22/07/2006|20:32] C:\Program Files\MSN Games
[22/02/2006|19:51] C:\Program Files\MSN Gaming Zone
[03/03/2008|12:09] C:\Program Files\MSN Messenger
[18/11/2006|19:02] C:\Program Files\MSXML 4.0
[22/02/2006|21:01] C:\Program Files\MUSICMATCH
[10/12/2006|00:02] C:\Program Files\NetMeeting
[14/12/2007|09:51] C:\Program Files\Norton AntiVirus
[07/06/2006|09:58] C:\Program Files\OLYMPUS
[22/02/2006|19:51] C:\Program Files\Online Services
[13/06/2007|18:02] C:\Program Files\Outlook Express
[28/04/2007|13:39] C:\Program Files\Pharmatheque
[22/02/2006|21:37] C:\Program Files\Philips
[14/02/2008|13:25] C:\Program Files\Picasa2
[14/01/2008|21:01] C:\Program Files\QuickTime
[22/02/2006|20:04] C:\Program Files\Realtek Sound Manager
[25/09/2006|18:04] C:\Program Files\Samsung
[28/10/2006|22:41] C:\Program Files\Seagrand
[22/02/2006|19:52] C:\Program Files\Services en ligne
[28/05/2007|21:47] C:\Program Files\Shareaza
[28/02/2007|22:22] C:\Program Files\Skype
[03/06/2007|21:40] C:\Program Files\Slayers Online
[21/11/2007|11:38] C:\Program Files\Spybot - Search & Destroy
[22/05/2007|22:38] C:\Program Files\STOIK Imaging
[01/12/2007|12:05] C:\Program Files\Symantec
[09/04/2008|21:25] C:\Program Files\Trend Micro
[06/03/2006|22:07] C:\Program Files\Ubisoft
[23/02/2008|23:17] C:\Program Files\UnFREEz
[22/02/2006|19:58] C:\Program Files\Uninstall Information
[13/04/2007|19:00] C:\Program Files\VideoConverter
[08/06/2007|20:52] C:\Program Files\VideoLAN
[16/04/2006|18:40] C:\Program Files\vrmax+
[28/03/2008|19:01] C:\Program Files\Windows Live
[19/02/2007|16:39] C:\Program Files\Windows Media Connect 2
[19/02/2007|16:39] C:\Program Files\Windows Media Player
[22/02/2006|19:50] C:\Program Files\Windows NT
[07/11/2007|10:31] C:\Program Files\Windows Sidebar
[22/02/2006|19:53] C:\Program Files\WindowsUpdate
[18/11/2007|13:41] C:\Program Files\WinRAR
[25/02/2006|20:30] C:\Program Files\World of Warcraft
[22/02/2006|19:54] C:\Program Files\xerox
[22/02/2006|21:54] C:\Program Files\Yahoo!
[09/11/2007|23:07] C:\Program Files\Zero G Registry

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/03/2008|12:05] C:\Program Files\Fichiers communs\.
[03/03/2008|12:05] C:\Program Files\Fichiers communs\..
[20/02/2007|18:22] C:\Program Files\Fichiers communs\Adobe
[22/02/2006|21:37] C:\Program Files\Fichiers communs\Ahead
[12/06/2007|12:51] C:\Program Files\Fichiers communs\Apple
[25/02/2006|19:38] C:\Program Files\Fichiers communs\Blizzard Entertainment
[19/06/2007|20:44] C:\Program Files\Fichiers communs\Designer
[01/09/2007|21:42] C:\Program Files\Fichiers communs\GTK
[23/01/2007|18:49] C:\Program Files\Fichiers communs\Hewlett-Packard
[07/09/2007|08:51] C:\Program Files\Fichiers communs\HP
[06/03/2006|22:00] C:\Program Files\Fichiers communs\InstallShield
[23/02/2006|15:51] C:\Program Files\Fichiers communs\Java
[03/03/2008|12:11] C:\Program Files\Fichiers communs\Microsoft Shared
[22/02/2006|19:52] C:\Program Files\Fichiers communs\MSSoap
[22/02/2006|18:12] C:\Program Files\Fichiers communs\Nero
[22/02/2006|20:43] C:\Program Files\Fichiers communs\ODBC
[22/02/2006|19:52] C:\Program Files\Fichiers communs\Services
[28/02/2007|22:22] C:\Program Files\Fichiers communs\Skype
[22/02/2006|20:43] C:\Program Files\Fichiers communs\SpeechEngines
[04/04/2008|10:19] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|18:02] C:\Program Files\Fichiers communs\System
[03/03/2008|12:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping\inside heart.exe

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-10 22:17:20
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\pack.epk
C:\WINDOWS\system32\regkufbgrv_navps.dat
C:\WINDOWS\system32\regkufbgrv_nav.dat
C:\WINDOWS\system32\regkufbgrv.dat
! EGDACCESS !


/!\ [Fich:11654][Doss:110] C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
/!\ [Fich:479][Doss:0] C:\DOCUME~1\PROPRI~1\Cookies
/!\ [Fich:15936][Doss:17] C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 22:18:55,40 ]----------------------

rapport navilog:


Search Navipromo version 3.5.3 commencé le 10/04/2008 à 22:25:11,28

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Propriétaire"

Mise à jour le 09.04.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\Propriétaire\applic~1" ***



*** Recherche dossiers dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" ***



*** Recherche dossiers dans "C:\Documents and Settings\Propriétaire\menudm~1\progra~1" ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *



*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !


*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :

regkufbgrv.dat trouvé !
regkufbgrv_nav.dat trouvé !
regkufbgrv_navps.dat trouvé !

* Dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" :


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 10/04/2008 à 22:33:50,92 ***

re

1
On refait un passage:
Relance Lop S&D

Choisis cette fois ci l'Option 2 ( Suppression )

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )


2

Double clique sur le raccourci de Navilog1 présent sur ton Bureau.
Suis les instructions. Choisis ensuite l'option 2 puis valide.
Laisse toi guider et réponds aux questions éventuelles.

L'utilitaire va t'informer qu'il va redémarrer l'ordinateur.
[#ff0000]**Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts**[/#f]
Appuie maintenant sur une touche, comme demandé.
(si ton PC ne redémarre pas automatiquement, fais-le manuellement)

Patiente jusqu'à l'apparition de ce message :
"*** Nettoyage Termine le ..... ***"

Le Bloc-notes va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver.
Referme le Bloc-notes. Ton bureau va maintenant réapparaître.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

Poste le rapport sauvegardé auparavant (C:\cleannavi.txt)


Ferme Internet Explorer puis Démarrer/Panneau de Configuration/Options Internet.
Choisis l'onglet Contenu puis onglet Certificats.
Si tu trouves les programmes suivant (en particulier dans Editeurs approuvés), Dis-le moi :

Montorgueil
VIP

3
Ajoute un nouveau rapport Hijackthis.

rapport lop S&D :



-----------------------[ Lop S&D 4.1.0-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Propri‚taire ] [ "C:\Lop SD" ]
[ 11/04/2008 | 0:41:05,46 ] [ PC : CHABANAI-55A163 ]
[ MAJ : 08-04-2008 | 23:37 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping\inside heart.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Proxy Long Chin Ping

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[11/04/2008|00:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[11/04/2008|00:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[20/02/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/06/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[10/02/2007|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/07/2007|13:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[07/04/2007|20:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/01/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[23/01/2007|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[13/01/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\junk exit scr wait
[09/04/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[03/03/2008|21:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/06/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[07/06/2006|10:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OLYMPUS
[13/02/2008|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[05/01/2008|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[27/04/2006|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[28/02/2007|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[03/04/2006|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2008|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[22/02/2006|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[27/03/2008|10:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[22/02/2006|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\.
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\..
[17/12/2006|20:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\addon.dat
[30/01/2007|21:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[20/02/2007|18:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[14/02/2007|15:46] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[09/06/2007|22:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\ConvertTemp
[30/07/2007|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
[05/06/2007|18:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\DivX
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\dvdcss
[25/08/2006|12:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[24/03/2008|22:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\gtk-2.0
[22/02/2006|20:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[31/01/2007|17:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\HP
[22/02/2006|19:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[05/04/2008|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\Image Zone Express
[03/04/2006|19:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
[20/02/2007|22:02] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
[13/01/2008|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Listoozefunk
[22/02/2006|21:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[04/11/2007|09:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[19/06/2007|20:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Web Folders
[04/03/2006|14:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller
[22/02/2006|23:14] C:\DOCUME~1\PROPRI~1\APPLIC~1\Musicmatch
[07/09/2007|08:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Printer Info Cache
[25/09/2006|18:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Samsung
[22/02/2006|22:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Shareaza
[13/01/2008|21:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[22/05/2007|22:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\STOIK
[23/02/2006|15:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[09/03/2008|18:07] C:\DOCUME~1\PROPRI~1\APPLIC~1\Temporary
[08/11/2006|21:57] C:\DOCUME~1\PROPRI~1\APPLIC~1\TransRender
[08/06/2007|20:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[18/11/2007|13:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR

[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\.
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\..
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\Macromedia

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[07/04/2008 20:53][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Effectuer une analyse complŠte du systŠme - Propri‚taire.job
[08/04/2008 13:49][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/04/2008 11:01][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[10/04/2008|22:21] C:\Program Files\.
[10/04/2008|22:21] C:\Program Files\..
[30/01/2007|21:29] C:\Program Files\Adobe
[22/02/2006|21:37] C:\Program Files\Ahead
[22/05/2007|22:31] C:\Program Files\AliveMedia
[18/08/2007|20:51] C:\Program Files\Apple Software Update
[22/02/2006|20:08] C:\Program Files\ATI Technologies
[22/02/2006|20:04] C:\Program Files\AvRack
[12/09/2006|19:54] C:\Program Files\Common Files
[22/02/2006|19:51] C:\Program Files\ComPlus Applications
[22/02/2006|21:00] C:\Program Files\CyberLink
[28/07/2007|21:15] C:\Program Files\directx
[04/06/2007|18:24] C:\Program Files\DivX
[01/09/2007|21:20] C:\Program Files\Easy GIF Animator
[01/09/2007|21:20] C:\Program Files\Easy Gif Animator Extension
[05/03/2008|21:54] C:\Program Files\eMule
[03/03/2008|12:05] C:\Program Files\Fichiers communs
[19/06/2007|20:37] C:\Program Files\FoneSync
[09/11/2007|23:08] C:\Program Files\GeoGebra
[01/09/2007|21:45] C:\Program Files\GIMP-2.0
[08/04/2007|09:54] C:\Program Files\Google
[31/03/2006|22:13] C:\Program Files\Goto.Games
[23/01/2007|18:49] C:\Program Files\Hewlett-Packard
[23/01/2007|18:52] C:\Program Files\HP
[03/06/2007|21:29] C:\Program Files\Insania Alpha 5.0
[28/07/2007|21:13] C:\Program Files\InstallShield Installation Information
[10/04/2008|01:14] C:\Program Files\Internet Explorer
[09/01/2008|14:51] C:\Program Files\iPod
[09/01/2008|14:51] C:\Program Files\iTunes
[25/08/2006|12:50] C:\Program Files\Java
[03/04/2006|19:53] C:\Program Files\Lavasoft
[13/01/2008|23:03] C:\Program Files\Listoozefunk
[31/08/2006|12:31] C:\Program Files\Macrogaming
[22/02/2006|17:27] C:\Program Files\Messenger
[27/02/2008|15:11] C:\Program Files\Messenger Plus! Live
[28/02/2008|22:26] C:\Program Files\MessengerPlus! 3
[19/06/2007|20:47] C:\Program Files\Microsoft AutoRoute
[19/06/2007|20:51] C:\Program Files\Microsoft Encarta
[22/02/2006|19:54] C:\Program Files\microsoft frontpage
[01/09/2007|21:15] C:\Program Files\Microsoft GIF Animator
[19/06/2007|20:46] C:\Program Files\Microsoft Money
[19/06/2007|20:43] C:\Program Files\Microsoft Office
[19/06/2007|20:50] C:\Program Files\Microsoft Picture It! PhotoPub
[27/03/2008|10:25] C:\Program Files\Microsoft SQL Server Compact Edition
[19/06/2007|20:45] C:\Program Files\Microsoft Works
[19/06/2007|20:30] C:\Program Files\Microsoft Works Suite 2001
[05/06/2007|20:01] C:\Program Files\Morgan
[22/02/2006|19:52] C:\Program Files\Movie Maker
[23/02/2006|11:52] C:\Program Files\MSN
[22/07/2006|20:32] C:\Program Files\MSN Games
[22/02/2006|19:51] C:\Program Files\MSN Gaming Zone
[03/03/2008|12:09] C:\Program Files\MSN Messenger
[18/11/2006|19:02] C:\Program Files\MSXML 4.0
[22/02/2006|21:01] C:\Program Files\MUSICMATCH
[10/04/2008|22:34] C:\Program Files\Navilog1
[10/12/2006|00:02] C:\Program Files\NetMeeting
[14/12/2007|09:51] C:\Program Files\Norton AntiVirus
[07/06/2006|09:58] C:\Program Files\OLYMPUS
[22/02/2006|19:51] C:\Program Files\Online Services
[13/06/2007|18:02] C:\Program Files\Outlook Express
[28/04/2007|13:39] C:\Program Files\Pharmatheque
[22/02/2006|21:37] C:\Program Files\Philips
[14/02/2008|13:25] C:\Program Files\Picasa2
[14/01/2008|21:01] C:\Program Files\QuickTime
[22/02/2006|20:04] C:\Program Files\Realtek Sound Manager
[25/09/2006|18:04] C:\Program Files\Samsung
[28/10/2006|22:41] C:\Program Files\Seagrand
[22/02/2006|19:52] C:\Program Files\Services en ligne
[28/05/2007|21:47] C:\Program Files\Shareaza
[28/02/2007|22:22] C:\Program Files\Skype
[03/06/2007|21:40] C:\Program Files\Slayers Online
[21/11/2007|11:38] C:\Program Files\Spybot - Search & Destroy
[22/05/2007|22:38] C:\Program Files\STOIK Imaging
[01/12/2007|12:05] C:\Program Files\Symantec
[09/04/2008|21:25] C:\Program Files\Trend Micro
[06/03/2006|22:07] C:\Program Files\Ubisoft
[23/02/2008|23:17] C:\Program Files\UnFREEz
[22/02/2006|19:58] C:\Program Files\Uninstall Information
[13/04/2007|19:00] C:\Program Files\VideoConverter
[08/06/2007|20:52] C:\Program Files\VideoLAN
[16/04/2006|18:40] C:\Program Files\vrmax+
[28/03/2008|19:01] C:\Program Files\Windows Live
[19/02/2007|16:39] C:\Program Files\Windows Media Connect 2
[19/02/2007|16:39] C:\Program Files\Windows Media Player
[22/02/2006|19:50] C:\Program Files\Windows NT
[07/11/2007|10:31] C:\Program Files\Windows Sidebar
[22/02/2006|19:53] C:\Program Files\WindowsUpdate
[18/11/2007|13:41] C:\Program Files\WinRAR
[25/02/2006|20:30] C:\Program Files\World of Warcraft
[22/02/2006|19:54] C:\Program Files\xerox
[22/02/2006|21:54] C:\Program Files\Yahoo!
[09/11/2007|23:07] C:\Program Files\Zero G Registry

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/03/2008|12:05] C:\Program Files\Fichiers communs\.
[03/03/2008|12:05] C:\Program Files\Fichiers communs\..
[20/02/2007|18:22] C:\Program Files\Fichiers communs\Adobe
[22/02/2006|21:37] C:\Program Files\Fichiers communs\Ahead
[12/06/2007|12:51] C:\Program Files\Fichiers communs\Apple
[25/02/2006|19:38] C:\Program Files\Fichiers communs\Blizzard Entertainment
[19/06/2007|20:44] C:\Program Files\Fichiers communs\Designer
[01/09/2007|21:42] C:\Program Files\Fichiers communs\GTK
[23/01/2007|18:49] C:\Program Files\Fichiers communs\Hewlett-Packard
[07/09/2007|08:51] C:\Program Files\Fichiers communs\HP
[06/03/2006|22:00] C:\Program Files\Fichiers communs\InstallShield
[23/02/2006|15:51] C:\Program Files\Fichiers communs\Java
[03/03/2008|12:11] C:\Program Files\Fichiers communs\Microsoft Shared
[22/02/2006|19:52] C:\Program Files\Fichiers communs\MSSoap
[22/02/2006|18:12] C:\Program Files\Fichiers communs\Nero
[22/02/2006|20:43] C:\Program Files\Fichiers communs\ODBC
[22/02/2006|19:52] C:\Program Files\Fichiers communs\Services
[28/02/2007|22:22] C:\Program Files\Fichiers communs\Skype
[22/02/2006|20:43] C:\Program Files\Fichiers communs\SpeechEngines
[04/04/2008|10:19] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|18:02] C:\Program Files\Fichiers communs\System
[03/03/2008|12:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-11 00:41:40
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\pack.epk
C:\WINDOWS\system32\regkufbgrv_navps.dat
C:\WINDOWS\system32\regkufbgrv_nav.dat
C:\WINDOWS\system32\regkufbgrv.dat
! EGDACCESS !


/!\ [Fich:11652][Doss:110] C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
/!\ [Fich:477][Doss:0] C:\DOCUME~1\PROPRI~1\Cookies
/!\ [Fich:14191][Doss:17] C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 0:43:05,76 ]----------------------

rapport navilog:


Clean Navipromo version 3.5.3 commencé le 11/04/2008 à 0:47:40,43

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Propriétaire"

Mise à jour le 09.04.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS



*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans C:\WINDOWS\System32 *


* Suppression dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" *


* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *



*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***


*** Suppression dossiers dans "C:\Documents and Settings\Propriétaire\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Propriétaire\menudm~1\progra~1" ***


*** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Propri‚taire\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans C:\WINDOWS\system32 *

regkufbgrv.dat trouvé !
Copie regkufbgrv.dat réalisée avec succès !
regkufbgrv.dat supprimé !

regkufbgrv_nav.dat trouvé !
Copie regkufbgrv_nav.dat réalisée avec succès !
regkufbgrv_nav.dat supprimé !

regkufbgrv_navps.dat trouvé !
Copie regkufbgrv_navps.dat réalisée avec succès !
regkufbgrv_navps.dat supprimé !


* Dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" *


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 11/04/2008 à 0:53:40,01 ***

je n'ai pas de programmes :

Montorgueil
VIP

rapport hijackthis:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:01:19, on 11/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MoneyAgent] C:\Program Files\Microsoft Money\System\Money Express.exe
O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" /Startup
O4 - HKCU\..\Run: [BOLDIDOL] C:\DOCUME~1\PROPRI~1\APPLIC~1\LISTOO~1\Mode Bike Build.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267....
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Ra...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by117fd.bay117.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPl...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213....
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 11721 bytes

bonjour

~Télécharge OTMoveIt (d'OldTimer). Sauvegarde-le sur ton Bureau.

~Lance Hijackthis “Do a system scan only”.
Coche les lignes qui suivent si encore présentes et uniquement celles-là.

O4 - HKCU\..\Run: [BOLDIDOL] C:\DOCUME~1\PROPRI~1\APPLIC~1\LISTOO~1\Mode Bike Build.exe


Clique sur Fix checked (en bas à gauche)


Sélectionne TOUS les emplacements en gras ci-dessous :

C:\DOCUME~1\PROPRI~1\APPLIC~1\Listoozefunk
C:\Program Files\Listoozefunk
C:\DOCUME~1\ALLUSE~1\APPLIC~1\junk exit scr wait

---> Clique-droit puis Copier (ou Ctrl+C)

Double-clique sur OTMoveIt.exe afin de le lancer.
Fais un Clique-droit sur le cadre de gauche puis choisis Coller (ou Ctrl+V).
Clique maintenant sur MoveIt![/#f]

[#ff0e00]Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

problème quand j'ai coché :

O4 - HKCU\..\Run: [BOLDIDOL] C:\DOCUME~1\PROPRI~1\APPLIC~1\LISTOO~1\Mode Bike Build.exe


et que j'ai cliqué sur Fix checked ça n'a rien fait et maintenan la ligne que j'ai coché a disparu

que faire ?


merci

re
continue la procédure  

voici le résultat de otmove:


C:\DOCUME~1\PROPRI~1\APPLIC~1\Listoozefunk moved successfully.
C:\Program Files\Listoozefunk moved successfully.
C:\DOCUME~1\ALLUSE~1\APPLIC~1\junk exit scr wait moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04112008_235343

bonjour

reposte un log hijackthis stp

tiens:



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:25:12, on 12/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MoneyAgent] C:\Program Files\Microsoft Money\System\Money Express.exe
O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" /Startup
O4 - HKCU\..\Run: [BOLDIDOL] C:\DOCUME~1\PROPRI~1\APPLIC~1\LISTOO~1\Mode Bike Build.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267....
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Ra...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by117fd.bay117.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPl...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213....
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 11744 bytes

re

supprime ta version de lop S&D, télécharge la nouvelle version et refais un scan option 1

poste le rapport  

rapport :



-----------------------[ Lop S&D 4.1.0-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Propri‚taire ] [ "C:\Lop SD" ]
[ 12/04/2008 | 22:47:54,62 ] [ PC : CHABANAI-55A163 ]
[ MAJ : 08-04-2008 | 23:37 ]

-------------[ Listing des dossiers dans Application Data ]------------

[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[11/04/2008|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[11/04/2008|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[20/02/2007|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[12/06/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[10/02/2007|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/07/2007|13:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[07/04/2007|20:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/01/2007|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[23/01/2007|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[09/04/2008|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
[03/03/2008|21:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[19/06/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[07/06/2006|10:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OLYMPUS
[13/02/2008|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[05/01/2008|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[27/04/2006|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[28/02/2007|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[03/04/2006|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2008|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[22/02/2006|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[27/03/2008|10:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[22/02/2006|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[22/02/2006|20:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[22/02/2006|19:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[22/02/2006|19:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[22/02/2006|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[22/02/2006|19:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[12/04/2008|00:15] C:\DOCUME~1\PROPRI~1\APPLIC~1\.
[12/04/2008|00:15] C:\DOCUME~1\PROPRI~1\APPLIC~1\..
[17/12/2006|20:37] C:\DOCUME~1\PROPRI~1\APPLIC~1\addon.dat
[30/01/2007|21:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[20/02/2007|18:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[14/02/2007|15:46] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[09/06/2007|22:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\ConvertTemp
[30/07/2007|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\CyberLink
[22/02/2006|20:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
[05/06/2007|18:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\DivX
[25/01/2008|20:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\dvdcss
[25/08/2006|12:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[24/03/2008|22:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\gtk-2.0
[22/02/2006|20:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[31/01/2007|17:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\HP
[22/02/2006|19:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[05/04/2008|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\Image Zone Express
[03/04/2006|19:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
[20/02/2007|22:02] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
[12/04/2008|00:15] C:\DOCUME~1\PROPRI~1\APPLIC~1\Listoozefunk
[22/02/2006|21:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[04/11/2007|09:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[19/06/2007|20:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Web Folders
[04/03/2006|14:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller
[22/02/2006|23:14] C:\DOCUME~1\PROPRI~1\APPLIC~1\Musicmatch
[07/09/2007|08:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Printer Info Cache
[25/09/2006|18:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Samsung
[22/02/2006|22:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Shareaza
[13/01/2008|21:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[22/05/2007|22:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\STOIK
[23/02/2006|15:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[09/03/2008|18:07] C:\DOCUME~1\PROPRI~1\APPLIC~1\Temporary
[08/11/2006|21:57] C:\DOCUME~1\PROPRI~1\APPLIC~1\TransRender
[08/06/2007|20:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[18/11/2007|13:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\WinRAR

[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\.
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\..
[26/02/2006|22:57] C:\DOCUME~1\PROPRI~2\APPLIC~1\Macromedia

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[07/04/2008 20:53][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Effectuer une analyse complŠte du systŠme - Propri‚taire.job
[08/04/2008 13:49][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[12/04/2008 11:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[11/04/2008|23:53] C:\Program Files\.
[11/04/2008|23:53] C:\Program Files\..
[30/01/2007|21:29] C:\Program Files\Adobe
[22/02/2006|21:37] C:\Program Files\Ahead
[22/05/2007|22:31] C:\Program Files\AliveMedia
[18/08/2007|20:51] C:\Program Files\Apple Software Update
[22/02/2006|20:08] C:\Program Files\ATI Technologies
[22/02/2006|20:04] C:\Program Files\AvRack
[12/09/2006|19:54] C:\Program Files\Common Files
[22/02/2006|19:51] C:\Program Files\ComPlus Applications
[22/02/2006|21:00] C:\Program Files\CyberLink
[28/07/2007|21:15] C:\Program Files\directx
[04/06/2007|18:24] C:\Program Files\DivX
[01/09/2007|21:20] C:\Program Files\Easy GIF Animator
[01/09/2007|21:20] C:\Program Files\Easy Gif Animator Extension
[05/03/2008|21:54] C:\Program Files\eMule
[03/03/2008|12:05] C:\Program Files\Fichiers communs
[19/06/2007|20:37] C:\Program Files\FoneSync
[09/11/2007|23:08] C:\Program Files\GeoGebra
[01/09/2007|21:45] C:\Program Files\GIMP-2.0
[08/04/2007|09:54] C:\Program Files\Google
[31/03/2006|22:13] C:\Program Files\Goto.Games
[23/01/2007|18:49] C:\Program Files\Hewlett-Packard
[23/01/2007|18:52] C:\Program Files\HP
[03/06/2007|21:29] C:\Program Files\Insania Alpha 5.0
[28/07/2007|21:13] C:\Program Files\InstallShield Installation Information
[10/04/2008|01:14] C:\Program Files\Internet Explorer
[09/01/2008|14:51] C:\Program Files\iPod
[09/01/2008|14:51] C:\Program Files\iTunes
[25/08/2006|12:50] C:\Program Files\Java
[03/04/2006|19:53] C:\Program Files\Lavasoft
[31/08/2006|12:31] C:\Program Files\Macrogaming
[22/02/2006|17:27] C:\Program Files\Messenger
[27/02/2008|15:11] C:\Program Files\Messenger Plus! Live
[28/02/2008|22:26] C:\Program Files\MessengerPlus! 3
[19/06/2007|20:47] C:\Program Files\Microsoft AutoRoute
[19/06/2007|20:51] C:\Program Files\Microsoft Encarta
[22/02/2006|19:54] C:\Program Files\microsoft frontpage
[01/09/2007|21:15] C:\Program Files\Microsoft GIF Animator
[19/06/2007|20:46] C:\Program Files\Microsoft Money
[19/06/2007|20:43] C:\Program Files\Microsoft Office
[19/06/2007|20:50] C:\Program Files\Microsoft Picture It! PhotoPub
[27/03/2008|10:25] C:\Program Files\Microsoft SQL Server Compact Edition
[19/06/2007|20:45] C:\Program Files\Microsoft Works
[19/06/2007|20:30] C:\Program Files\Microsoft Works Suite 2001
[05/06/2007|20:01] C:\Program Files\Morgan
[22/02/2006|19:52] C:\Program Files\Movie Maker
[23/02/2006|11:52] C:\Program Files\MSN
[22/07/2006|20:32] C:\Program Files\MSN Games
[22/02/2006|19:51] C:\Program Files\MSN Gaming Zone
[03/03/2008|12:09] C:\Program Files\MSN Messenger
[18/11/2006|19:02] C:\Program Files\MSXML 4.0
[22/02/2006|21:01] C:\Program Files\MUSICMATCH
[11/04/2008|00:53] C:\Program Files\Navilog1
[10/12/2006|00:02] C:\Program Files\NetMeeting
[14/12/2007|09:51] C:\Program Files\Norton AntiVirus
[07/06/2006|09:58] C:\Program Files\OLYMPUS
[22/02/2006|19:51] C:\Program Files\Online Services
[13/06/2007|18:02] C:\Program Files\Outlook Express
[28/04/2007|13:39] C:\Program Files\Pharmatheque
[22/02/2006|21:37] C:\Program Files\Philips
[14/02/2008|13:25] C:\Program Files\Picasa2
[14/01/2008|21:01] C:\Program Files\QuickTime
[22/02/2006|20:04] C:\Program Files\Realtek Sound Manager
[25/09/2006|18:04] C:\Program Files\Samsung
[28/10/2006|22:41] C:\Program Files\Seagrand
[22/02/2006|19:52] C:\Program Files\Services en ligne
[28/05/2007|21:47] C:\Program Files\Shareaza
[28/02/2007|22:22] C:\Program Files\Skype
[03/06/2007|21:40] C:\Program Files\Slayers Online
[21/11/2007|11:38] C:\Program Files\Spybot - Search & Destroy
[22/05/2007|22:38] C:\Program Files\STOIK Imaging
[01/12/2007|12:05] C:\Program Files\Symantec
[09/04/2008|21:25] C:\Program Files\Trend Micro
[06/03/2006|22:07] C:\Program Files\Ubisoft
[23/02/2008|23:17] C:\Program Files\UnFREEz
[22/02/2006|19:58] C:\Program Files\Uninstall Information
[13/04/2007|19:00] C:\Program Files\VideoConverter
[08/06/2007|20:52] C:\Program Files\VideoLAN
[16/04/2006|18:40] C:\Program Files\vrmax+
[28/03/2008|19:01] C:\Program Files\Windows Live
[19/02/2007|16:39] C:\Program Files\Windows Media Connect 2
[19/02/2007|16:39] C:\Program Files\Windows Media Player
[22/02/2006|19:50] C:\Program Files\Windows NT
[07/11/2007|10:31] C:\Program Files\Windows Sidebar
[22/02/2006|19:53] C:\Program Files\WindowsUpdate
[18/11/2007|13:41] C:\Program Files\WinRAR
[25/02/2006|20:30] C:\Program Files\World of Warcraft
[22/02/2006|19:54] C:\Program Files\xerox
[22/02/2006|21:54] C:\Program Files\Yahoo!
[09/11/2007|23:07] C:\Program Files\Zero G Registry

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[03/03/2008|12:05] C:\Program Files\Fichiers communs\.
[03/03/2008|12:05] C:\Program Files\Fichiers communs\..
[20/02/2007|18:22] C:\Program Files\Fichiers communs\Adobe
[22/02/2006|21:37] C:\Program Files\Fichiers communs\Ahead
[12/06/2007|12:51] C:\Program Files\Fichiers communs\Apple
[25/02/2006|19:38] C:\Program Files\Fichiers communs\Blizzard Entertainment
[19/06/2007|20:44] C:\Program Files\Fichiers communs\Designer
[01/09/2007|21:42] C:\Program Files\Fichiers communs\GTK
[23/01/2007|18:49] C:\Program Files\Fichiers communs\Hewlett-Packard
[07/09/2007|08:51] C:\Program Files\Fichiers communs\HP
[06/03/2006|22:00] C:\Program Files\Fichiers communs\InstallShield
[23/02/2006|15:51] C:\Program Files\Fichiers communs\Java
[03/03/2008|12:11] C:\Program Files\Fichiers communs\Microsoft Shared
[22/02/2006|19:52] C:\Program Files\Fichiers communs\MSSoap
[22/02/2006|18:12] C:\Program Files\Fichiers communs\Nero
[22/02/2006|20:43] C:\Program Files\Fichiers communs\ODBC
[22/02/2006|19:52] C:\Program Files\Fichiers communs\Services
[28/02/2007|22:22] C:\Program Files\Fichiers communs\Skype
[22/02/2006|20:43] C:\Program Files\Fichiers communs\SpeechEngines
[04/04/2008|10:19] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|18:02] C:\Program Files\Fichiers communs\System
[03/03/2008|12:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-12 22:48:28
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

/!\ [Fich:106][Doss:2] C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
/!\ [Fich:492][Doss:0] C:\DOCUME~1\PROPRI~1\Cookies
/!\ [Fich:15354][Doss:17] C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 22:50:09,85 ]----------------------

bonjour

~Redémarre l'ordinateur en mode sans échec (F8 au démarrage de l'ordinateur)
Aide


~Lance Hijackthis “Do a system scan only”.
Coche les lignes qui suivent si encore présentes et uniquement celles-là.


O4 - HKCU\..\Run: [BOLDIDOL] C:\DOCUME~1\PROPRI~1\APPLIC~1\LISTOO~1\Mode Bike Build.exe

Clique sur Fix checked (en bas à gauche)


supprime le dossier en gras

C:\Documents and Settings\propriétaire\application data\Listoozefunk

+++++++++

redémarre normalement et poste un nouveau log hijackthis

rapport hijackthis :



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:16:55, on 13/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MoneyAgent] C:\Program Files\Microsoft Money\System\Money Express.exe
O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" /Startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267....
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Ra...
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by117fd.bay117.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPl...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213....
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 11510 bytes

re

Télécharge MalwareByte's Anti-Malware et installe le.

~Redémarre l'ordinateur en mode sans échec (F8 au démarrage de l'ordinateur)
Aide

Lance MalwareByte's Anti-Malware et sélectionne "Exécuter un examen complet". Patiente le temps du scan.

Une fois le scan terminé,clique sur "Afficher les résultats" et enregistre le rapport sur ton Bureau.

Clique enfin sur "Supprimer la sélection".

Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.
Aide

voila le rapport:


Malwarebytes' Anti-Malware 1.11
Version de la base de données: 622

Type de recherche: Examen complet (C:\|)
Eléments examinés: 113476
Temps écoulé: 42 minute(s), 2 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\mysearchnow.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.mysearchnow.com (Malware.Trace) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Propriétaire\Application Data\addon.dat (Malware.Trace) -> No action taken.

bonjour

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> No action taken.

tu as mal lu la procédure, il fallait cliquer à la fin:

Une fois le scan terminé,clique sur "Afficher les résultats" et enregistre le rapport sur ton Bureau.

Clique enfin sur "Supprimer la sélection".

recommence stp