Bonjour
Voila un souci d'affichage de fenetre pub CID, aprés plusieur consultation de divers forum et ayant enlevé un programme "MSN plus CID", j'ai toujours c'est fenêtre CID
Window XP Média Center Edition Version 2002 Service pack 2
AMD Athlon 64 3500+ 2,2Ghz, 960Mo de RAM
Antivir comme virus, Spybot ne détecte rien, CCleaner et AD-Aware idem
Voila un rapport Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:42:44, on 14/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\VM305_STI.EXE
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S241.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S29C.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera V
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [cash tick] C:\DOCUME~1\HP_ADM~1\APPLIC~1\BASHSI~1\Slow that.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/5 [...] plugin.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/adva [...] module.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB01D9B8-00A5-4059-9492-FFDB3AD55327}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
--
End of file - 11306 bytes
Rapport Navilog:
Search Navipromo version 3.5.2 commencé le 14/04/2008 à 11:47:51,51
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "HP_Administrateur"
Mise à jour le 29.03.2008 à 22h00 par IL-MAFIOSO
Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS
Executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans C:\WINDOWS ***
*** Recherche dossiers dans C:\Program Files ***
*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***
*** Recherche dossiers dans "C:\Documents and Settings\HP_Administrateur\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\HP_Administrateur\menudm~1\progra~1" ***
*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***
*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net
Aucun Fichier trouvé
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans C:\WINDOWS\system32 *
* Recherche dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" *
* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans C:\WINDOWS\system32 :
* Dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" :
* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche fichiers connus :
*** Analyse terminée le 14/04/2008 à 11:52:06,20 ***
Message édité par mikha73 le 24-05-2008 à 13:13:52
Salut A l'aiiiiiiiideeeeeeeeeeeeeeeeeeeeeeeeee
aidez-moi s'il vous plait ..............merci.........
Bonjour,
Télécharge Lop S&D.exe sur ton Bureau.
- Double-clique dessus pour lancer l'installation
- Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
- Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
- Patiente jusqu'à la fin du scan
- Poste le rapport généré (C:\lopR.txt)
(Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)
Répondre à Angeldark
-----------------------[ Lop S&D 4.2.0-3 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Administrateur ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 02/05/2008 | 12:07:15,32 ] [ PC : MARIOBEA ]
[ MAJ : 30-04-2008 | 18:35 ]
-------------[ Listing des dossiers dans Application Data ]------------
[10/10/2005|15:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[13/03/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[14/02/2008|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/03/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[14/09/2007|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ball Shim Dupe Tick
[06/10/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime
[19/10/2006|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/02/2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DFX
[29/09/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[01/02/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[19/10/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/10/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[19/10/2006|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/02/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/05/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/01/2007|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[19/10/2006|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/03/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[19/10/2006|13:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[27/04/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/03/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[27/04/2008|10:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
[14/05/2007|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[30/01/2007|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[28/03/2007|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[03/12/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[25/03/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[02/02/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[10/10/2005|15:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[26/03/2007|15:43] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Adobe
[04/01/2007|12:42] C:\DOCUME~1\HP_ADM~1\APPLIC~1\AdobeUM
[23/01/2007|18:17] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Ahead
[27/04/2008|10:41] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Bash Site Log
[27/12/2007|15:02] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CamfrogWEB
[04/01/2007|11:31] C:\DOCUME~1\HP_ADM~1\APPLIC~1\COWON
[25/03/2007|19:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\HP_ADM~1\APPLIC~1\desktop.ini
[03/01/2007|21:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\dvdcss
[30/04/2007|20:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\EPSON
[22/08/2007|16:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[08/10/2007|15:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GlarySoft
[26/03/2007|15:34] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Google
[14/01/2007|16:55] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Help
[30/01/2007|20:36] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Hemera
[03/01/2007|21:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\HPQ
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Identities
[01/02/2008|21:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\InstallShield
[03/10/2007|19:20] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Lavasoft
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Leadertech
[03/01/2007|18:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Macromedia
[01/02/2008|20:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Microsoft
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla
[13/01/2008|18:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\NeroDCTemplates
[20/01/2007|00:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Real
[01/02/2008|19:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Skype
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sonic
[19/01/2007|23:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sun
[26/03/2007|15:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Symantec
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Talkback
[14/02/2007|19:06] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Template
[03/01/2007|18:04] C:\DOCUME~1\HP_ADM~1\APPLIC~1\vlc
[17/08/2007|14:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\wklnhst.dat
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Zylom
[29/03/2008|15:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[19/10/2006|12:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[19/10/2006|12:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[26/03/2007|15:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[02/05/2008 12:00][--ah-----] C:\WINDOWS\tasks\AE4C7265906FE755.job
[27/04/2008 01:42][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
AE4C7265906FE755.job <--> c:\docume~1\hp_adm~1\applic~1\bashsi~1\mapilitesoap.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[17/08/2007|14:17] C:\Program Files\ABBYY FineReader 6.0 Sprint
[28/03/2008|16:34] C:\Program Files\Ad-Aware SE Personal
[14/02/2008|16:55] C:\Program Files\Adobe
[06/10/2007|09:57] C:\Program Files\Alwil Software
[13/03/2008|13:44] C:\Program Files\Avira
[27/04/2008|10:39] C:\Program Files\Bash Site Log
[03/01/2007|18:07] C:\Program Files\CCleaner
[26/12/2007|17:36] C:\Program Files\CFWebAdvancedU
[30/01/2007|20:35] C:\Program Files\Clic-Go 150 000 Cliparts Volume 2
[28/03/2007|15:53] C:\Program Files\Common
[12/11/2005|02:09] C:\Program Files\ComPlus Applications
[28/03/2007|14:48] C:\Program Files\Controle Parental
[19/10/2006|13:29] C:\Program Files\DivX
[19/10/2006|13:43] C:\Program Files\EasyBits
[14/05/2007|17:07] C:\Program Files\epson
[03/01/2007|17:48] C:\Program Files\ESTsoft
[28/03/2008|16:38] C:\Program Files\Fichiers communs
[19/10/2006|12:53] C:\Program Files\FrenchOtto
[19/10/2006|12:53] C:\Program Files\GemMasterFrench
[01/02/2008|20:03] C:\Program Files\Google
[18/08/2007|10:43] C:\Program Files\Hercules
[19/10/2006|13:42] C:\Program Files\Hewlett-Packard
[19/10/2006|13:25] C:\Program Files\HP
[19/10/2006|13:22] C:\Program Files\HP DigitalMedia Archive
[01/02/2008|21:19] C:\Program Files\InstallShield Installation Information
[10/04/2008|03:09] C:\Program Files\Internet Explorer
[14/01/2007|17:20] C:\Program Files\Inventel
[01/04/2008|23:17] C:\Program Files\Java
[01/02/2008|20:30] C:\Program Files\JetAudio
[26/04/2008|12:20] C:\Program Files\Kiwee Toolbar2
[10/04/2008|17:04] C:\Program Files\Lavalys
[19/08/2007|15:37] C:\Program Files\Lavasoft
[01/02/2008|17:16] C:\Program Files\Macrogaming
[03/01/2007|18:10] C:\Program Files\Matroska Pack
[03/01/2007|18:10] C:\Program Files\MatroskaProp
[19/10/2006|13:04] C:\Program Files\Messenger
[17/05/2007|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|04:24] C:\Program Files\microsoft frontpage
[03/01/2007|17:37] C:\Program Files\Microsoft Office
[15/11/2007|11:30] C:\Program Files\Microsoft SQL Server Compact Edition
[03/01/2007|17:37] C:\Program Files\Microsoft Visual Studio
[19/10/2006|13:26] C:\Program Files\Microsoft Works
[15/11/2005|04:24] C:\Program Files\Movie Maker
[10/04/2008|08:22] C:\Program Files\Mozilla Firefox
[24/01/2007|13:20] C:\Program Files\MSN
[15/11/2005|04:25] C:\Program Files\MSN Gaming Zone
[18/01/2007|04:02] C:\Program Files\MSXML 4.0
[19/10/2006|13:28] C:\Program Files\muvee Technologies
[27/04/2008|00:14] C:\Program Files\Navilog1
[03/01/2007|18:01] C:\Program Files\Nero
[15/11/2005|04:25] C:\Program Files\NetMeeting
[15/11/2005|04:25] C:\Program Files\Online Services
[18/06/2007|17:00] C:\Program Files\Outlook Express
[15/08/2007|11:17] C:\Program Files\QuickTime
[19/10/2006|13:22] C:\Program Files\Real
[01/02/2008|19:35] C:\Program Files\Realtek
[23/03/2008|14:02] C:\Program Files\RegCleaner
[22/03/2008|14:44] C:\Program Files\Registry Repair
[01/02/2008|21:03] C:\Program Files\SAGEM
[19/03/2007|16:45] C:\Program Files\Securitoo
[19/10/2006|13:44] C:\Program Files\Services en ligne
[01/05/2007|14:34] C:\Program Files\Skype
[19/10/2006|13:24] C:\Program Files\Sonic
[25/04/2008|00:00] C:\Program Files\SpeedFan
[14/08/2007|21:22] C:\Program Files\Spybot - Search & Destroy
[26/03/2007|15:46] C:\Program Files\Symantec
[12/11/2005|02:09] C:\Program Files\Uninstall Information
[03/01/2007|18:04] C:\Program Files\VideoLAN
[27/04/2008|01:47] C:\Program Files\Wanadoo
[28/02/2008|04:01] C:\Program Files\Windows Live
[28/03/2007|15:24] C:\Program Files\Windows Live Toolbar
[28/03/2008|16:37] C:\Program Files\Windows Media Connect 2
[01/02/2008|19:33] C:\Program Files\Windows Media Player
[15/11/2005|04:25] C:\Program Files\Windows NT
[15/11/2005|04:25] C:\Program Files\Windows Plus
[12/11/2005|02:09] C:\Program Files\WindowsUpdate
[18/05/2007|13:55] C:\Program Files\WinRAR
[15/11/2005|04:26] C:\Program Files\xerox
[01/02/2008|20:02] C:\Program Files\Yahoo!
[02/02/2007|20:59] C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[14/02/2008|16:56] C:\Program Files\Fichiers communs\Adobe
[03/01/2007|18:01] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|17:37] C:\Program Files\Fichiers communs\Designer
[14/01/2007|17:20] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[19/10/2006|13:18] C:\Program Files\Fichiers communs\HP
[19/10/2006|13:40] C:\Program Files\Fichiers communs\InstallShield
[19/10/2006|12:59] C:\Program Files\Fichiers communs\Java
[03/01/2007|18:48] C:\Program Files\Fichiers communs\LightScribe
[19/10/2006|13:24] C:\Program Files\Fichiers communs\LS Getting Started
[15/11/2007|11:34] C:\Program Files\Fichiers communs\Microsoft Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\MSSoap
[19/10/2006|13:28] C:\Program Files\Fichiers communs\muvee Technologies
[15/11/2005|04:24] C:\Program Files\Fichiers communs\ODBC
[19/10/2006|13:22] C:\Program Files\Fichiers communs\Real
[15/11/2005|04:24] C:\Program Files\Fichiers communs\Services
[01/05/2007|14:34] C:\Program Files\Fichiers communs\Skype
[19/10/2006|13:23] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\SpeechEngines
[19/10/2006|13:23] C:\Program Files\Fichiers communs\SureThing Shared
[06/10/2007|09:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|17:00] C:\Program Files\Fichiers communs\System
[19/10/2006|13:24] C:\Program Files\Fichiers communs\TiVo Shared
[15/11/2007|11:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[01/02/2008|17:14] C:\Program Files\Fichiers communs\Wise Installation Wizard
[19/10/2006|13:22] C:\Program Files\Fichiers communs\xing shared
---------------------------[ Process ]--------------------------
... 61
iexplore.exe ~ [2104]
iexplore.exe ~ [1368]
iexplore.exe ~ [2708]
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\defy barb.exe
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\hkeaksie.exe
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\rwvwhqqx.exe
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\sggtsesh.exe
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\Slow that.exe
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\surfgramboldelse.exe
C:\Program Files\bashsi~1
C:\WINDOWS\Tasks\AE4C7265906FE755.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cash tick"="C:\\DOCUME~1\\HP_ADM~1\\APPLIC~1\\BASHSI~1\\Slow that.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"close surf mail dupe"="C:\\Documents and Settings\\All Users\\Application Data\\Tick Find Close Surf\\defy barb.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD
-> 72 ( 70 ## added by CiD )
/!\ 1 Not 127.0.0.1 !!
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-02 12:08:14
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
/!\ [Fich:251][Doss:5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
/!\ [Fich:251][Doss:0] C:\DOCUME~1\HP_ADM~1\Cookies
/!\ [Fich:12285][Doss:12] C:\DOCUME~1\HP_ADM~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 12:09:03,18 ]----------------------
voila le rapport (ci-dessus) et merci
Re,
- Relance Lop S&D.
- Choisis cette fois- ci l'option 2 (Suppression)
- Ne ferme pas la fenêtre lors de la suppression !
- Poste le rapport généré (C:\lopR.txt*).
(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)
* le nom de la partition peut changer
Répondre à Angeldark
ok le voila:
-----------------------[ Lop S&D 4.2.0-3 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Administrateur ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 03/05/2008 | 15:41:39,04 ] [ PC : MARIOBEA ]
[ MAJ : 30-04-2008 | 18:35 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\defy barb.exe
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\hkeaksie.exe
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\rwvwhqqx.exe
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\sggtsesh.exe
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\Slow that.exe
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\surfgramboldelse.exe
Supprimé! - C:\WINDOWS\Tasks\AE4C7265906FE755.job
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
Supprimé! - C:\Program Files\bashsi~1
Restauré! - Fichier Hosts
\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[10/10/2005|15:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[13/03/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[14/02/2008|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/03/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[14/09/2007|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ball Shim Dupe Tick
[06/10/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime
[19/10/2006|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/02/2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DFX
[29/09/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[01/02/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[19/10/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/10/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[19/10/2006|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/02/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/05/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/01/2007|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[19/10/2006|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/03/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[19/10/2006|13:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[27/04/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/03/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/05/2007|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[30/01/2007|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[28/03/2007|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[03/12/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[25/03/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[02/02/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[10/10/2005|15:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[26/03/2007|15:43] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Adobe
[04/01/2007|12:42] C:\DOCUME~1\HP_ADM~1\APPLIC~1\AdobeUM
[23/01/2007|18:17] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Ahead
[03/05/2008|15:41] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Bash Site Log
[27/12/2007|15:02] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CamfrogWEB
[04/01/2007|11:31] C:\DOCUME~1\HP_ADM~1\APPLIC~1\COWON
[25/03/2007|19:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\HP_ADM~1\APPLIC~1\desktop.ini
[03/01/2007|21:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\dvdcss
[30/04/2007|20:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\EPSON
[22/08/2007|16:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[08/10/2007|15:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GlarySoft
[26/03/2007|15:34] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Google
[14/01/2007|16:55] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Help
[30/01/2007|20:36] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Hemera
[03/01/2007|21:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\HPQ
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Identities
[01/02/2008|21:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\InstallShield
[03/10/2007|19:20] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Lavasoft
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Leadertech
[03/01/2007|18:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Macromedia
[01/02/2008|20:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Microsoft
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla
[13/01/2008|18:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\NeroDCTemplates
[20/01/2007|00:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Real
[01/02/2008|19:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Skype
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sonic
[19/01/2007|23:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sun
[26/03/2007|15:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Symantec
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Talkback
[14/02/2007|19:06] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Template
[03/01/2007|18:04] C:\DOCUME~1\HP_ADM~1\APPLIC~1\vlc
[17/08/2007|14:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\wklnhst.dat
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Zylom
[29/03/2008|15:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[19/10/2006|12:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[19/10/2006|12:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[26/03/2007|15:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[27/04/2008 01:42][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[17/08/2007|14:17] C:\Program Files\ABBYY FineReader 6.0 Sprint
[28/03/2008|16:34] C:\Program Files\Ad-Aware SE Personal
[14/02/2008|16:55] C:\Program Files\Adobe
[06/10/2007|09:57] C:\Program Files\Alwil Software
[13/03/2008|13:44] C:\Program Files\Avira
[03/01/2007|18:07] C:\Program Files\CCleaner
[26/12/2007|17:36] C:\Program Files\CFWebAdvancedU
[30/01/2007|20:35] C:\Program Files\Clic-Go 150 000 Cliparts Volume 2
[28/03/2007|15:53] C:\Program Files\Common
[12/11/2005|02:09] C:\Program Files\ComPlus Applications
[28/03/2007|14:48] C:\Program Files\Controle Parental
[19/10/2006|13:29] C:\Program Files\DivX
[19/10/2006|13:43] C:\Program Files\EasyBits
[14/05/2007|17:07] C:\Program Files\epson
[03/01/2007|17:48] C:\Program Files\ESTsoft
[28/03/2008|16:38] C:\Program Files\Fichiers communs
[19/10/2006|12:53] C:\Program Files\FrenchOtto
[19/10/2006|12:53] C:\Program Files\GemMasterFrench
[01/02/2008|20:03] C:\Program Files\Google
[18/08/2007|10:43] C:\Program Files\Hercules
[19/10/2006|13:42] C:\Program Files\Hewlett-Packard
[19/10/2006|13:25] C:\Program Files\HP
[19/10/2006|13:22] C:\Program Files\HP DigitalMedia Archive
[01/02/2008|21:19] C:\Program Files\InstallShield Installation Information
[10/04/2008|03:09] C:\Program Files\Internet Explorer
[14/01/2007|17:20] C:\Program Files\Inventel
[01/04/2008|23:17] C:\Program Files\Java
[01/02/2008|20:30] C:\Program Files\JetAudio
[26/04/2008|12:20] C:\Program Files\Kiwee Toolbar2
[10/04/2008|17:04] C:\Program Files\Lavalys
[19/08/2007|15:37] C:\Program Files\Lavasoft
[01/02/2008|17:16] C:\Program Files\Macrogaming
[03/01/2007|18:10] C:\Program Files\Matroska Pack
[03/01/2007|18:10] C:\Program Files\MatroskaProp
[19/10/2006|13:04] C:\Program Files\Messenger
[17/05/2007|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|04:24] C:\Program Files\microsoft frontpage
[03/01/2007|17:37] C:\Program Files\Microsoft Office
[15/11/2007|11:30] C:\Program Files\Microsoft SQL Server Compact Edition
[03/01/2007|17:37] C:\Program Files\Microsoft Visual Studio
[19/10/2006|13:26] C:\Program Files\Microsoft Works
[15/11/2005|04:24] C:\Program Files\Movie Maker
[10/04/2008|08:22] C:\Program Files\Mozilla Firefox
[24/01/2007|13:20] C:\Program Files\MSN
[15/11/2005|04:25] C:\Program Files\MSN Gaming Zone
[18/01/2007|04:02] C:\Program Files\MSXML 4.0
[19/10/2006|13:28] C:\Program Files\muvee Technologies
[27/04/2008|00:14] C:\Program Files\Navilog1
[03/01/2007|18:01] C:\Program Files\Nero
[15/11/2005|04:25] C:\Program Files\NetMeeting
[15/11/2005|04:25] C:\Program Files\Online Services
[18/06/2007|17:00] C:\Program Files\Outlook Express
[15/08/2007|11:17] C:\Program Files\QuickTime
[19/10/2006|13:22] C:\Program Files\Real
[01/02/2008|19:35] C:\Program Files\Realtek
[23/03/2008|14:02] C:\Program Files\RegCleaner
[22/03/2008|14:44] C:\Program Files\Registry Repair
[01/02/2008|21:03] C:\Program Files\SAGEM
[19/03/2007|16:45] C:\Program Files\Securitoo
[19/10/2006|13:44] C:\Program Files\Services en ligne
[01/05/2007|14:34] C:\Program Files\Skype
[19/10/2006|13:24] C:\Program Files\Sonic
[25/04/2008|00:00] C:\Program Files\SpeedFan
[14/08/2007|21:22] C:\Program Files\Spybot - Search & Destroy
[26/03/2007|15:46] C:\Program Files\Symantec
[12/11/2005|02:09] C:\Program Files\Uninstall Information
[03/01/2007|18:04] C:\Program Files\VideoLAN
[27/04/2008|01:47] C:\Program Files\Wanadoo
[28/02/2008|04:01] C:\Program Files\Windows Live
[28/03/2007|15:24] C:\Program Files\Windows Live Toolbar
[28/03/2008|16:37] C:\Program Files\Windows Media Connect 2
[01/02/2008|19:33] C:\Program Files\Windows Media Player
[15/11/2005|04:25] C:\Program Files\Windows NT
[15/11/2005|04:25] C:\Program Files\Windows Plus
[12/11/2005|02:09] C:\Program Files\WindowsUpdate
[18/05/2007|13:55] C:\Program Files\WinRAR
[15/11/2005|04:26] C:\Program Files\xerox
[01/02/2008|20:02] C:\Program Files\Yahoo!
[02/02/2007|20:59] C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[14/02/2008|16:56] C:\Program Files\Fichiers communs\Adobe
[03/01/2007|18:01] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|17:37] C:\Program Files\Fichiers communs\Designer
[14/01/2007|17:20] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[19/10/2006|13:18] C:\Program Files\Fichiers communs\HP
[19/10/2006|13:40] C:\Program Files\Fichiers communs\InstallShield
[19/10/2006|12:59] C:\Program Files\Fichiers communs\Java
[03/01/2007|18:48] C:\Program Files\Fichiers communs\LightScribe
[19/10/2006|13:24] C:\Program Files\Fichiers communs\LS Getting Started
[15/11/2007|11:34] C:\Program Files\Fichiers communs\Microsoft Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\MSSoap
[19/10/2006|13:28] C:\Program Files\Fichiers communs\muvee Technologies
[15/11/2005|04:24] C:\Program Files\Fichiers communs\ODBC
[19/10/2006|13:22] C:\Program Files\Fichiers communs\Real
[15/11/2005|04:24] C:\Program Files\Fichiers communs\Services
[01/05/2007|14:34] C:\Program Files\Fichiers communs\Skype
[19/10/2006|13:23] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\SpeechEngines
[19/10/2006|13:23] C:\Program Files\Fichiers communs\SureThing Shared
[06/10/2007|09:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|17:00] C:\Program Files\Fichiers communs\System
[19/10/2006|13:24] C:\Program Files\Fichiers communs\TiVo Shared
[15/11/2007|11:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[01/02/2008|17:14] C:\Program Files\Fichiers communs\Wise Installation Wizard
[19/10/2006|13:22] C:\Program Files\Fichiers communs\xing shared
---------------------------[ Process ]--------------------------
... 56
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-03 15:42:30
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
/!\ [Fich:255][Doss:5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
/!\ [Fich:260][Doss:0] C:\DOCUME~1\HP_ADM~1\Cookies
/!\ [Fich:12674][Doss:16] C:\DOCUME~1\HP_ADM~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 15:43:30,76 ]----------------------
Tu peux relancer l'option 2 ?
Répondre à Angeldark
ok voila le rapport de la 2eme fois:
-----------------------[ Lop S&D 4.2.0-3 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Administrateur ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 03/05/2008 | 23:17:35,65 ] [ PC : MARIOBEA ]
[ MAJ : 30-04-2008 | 18:35 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
Echec ! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[10/10/2005|15:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[13/03/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[14/02/2008|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/03/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[14/09/2007|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ball Shim Dupe Tick
[06/10/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime
[19/10/2006|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/02/2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DFX
[29/09/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[01/02/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[19/10/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/10/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[19/10/2006|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/02/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/05/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/01/2007|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[19/10/2006|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/03/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[19/10/2006|13:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[27/04/2008|01:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/03/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/05/2007|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[30/01/2007|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[28/03/2007|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[03/12/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[25/03/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[02/02/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[10/10/2005|15:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[26/03/2007|15:43] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Adobe
[04/01/2007|12:42] C:\DOCUME~1\HP_ADM~1\APPLIC~1\AdobeUM
[23/01/2007|18:17] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Ahead
[03/05/2008|15:41] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Bash Site Log
[27/12/2007|15:02] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CamfrogWEB
[04/01/2007|11:31] C:\DOCUME~1\HP_ADM~1\APPLIC~1\COWON
[25/03/2007|19:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\HP_ADM~1\APPLIC~1\desktop.ini
[03/01/2007|21:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\dvdcss
[30/04/2007|20:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\EPSON
[22/08/2007|16:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[08/10/2007|15:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GlarySoft
[26/03/2007|15:34] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Google
[14/01/2007|16:55] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Help
[30/01/2007|20:36] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Hemera
[03/01/2007|21:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\HPQ
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Identities
[01/02/2008|21:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\InstallShield
[03/10/2007|19:20] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Lavasoft
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Leadertech
[03/01/2007|18:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Macromedia
[01/02/2008|20:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Microsoft
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla
[13/01/2008|18:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\NeroDCTemplates
[20/01/2007|00:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Real
[01/02/2008|19:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Skype
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sonic
[19/01/2007|23:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sun
[26/03/2007|15:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Symantec
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Talkback
[14/02/2007|19:06] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Template
[03/01/2007|18:04] C:\DOCUME~1\HP_ADM~1\APPLIC~1\vlc
[17/08/2007|14:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\wklnhst.dat
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Zylom
[29/03/2008|15:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[19/10/2006|12:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[19/10/2006|12:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[26/03/2007|15:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[27/04/2008 01:42][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[17/08/2007|14:17] C:\Program Files\ABBYY FineReader 6.0 Sprint
[28/03/2008|16:34] C:\Program Files\Ad-Aware SE Personal
[14/02/2008|16:55] C:\Program Files\Adobe
[06/10/2007|09:57] C:\Program Files\Alwil Software
[13/03/2008|13:44] C:\Program Files\Avira
[03/01/2007|18:07] C:\Program Files\CCleaner
[26/12/2007|17:36] C:\Program Files\CFWebAdvancedU
[30/01/2007|20:35] C:\Program Files\Clic-Go 150 000 Cliparts Volume 2
[28/03/2007|15:53] C:\Program Files\Common
[12/11/2005|02:09] C:\Program Files\ComPlus Applications
[28/03/2007|14:48] C:\Program Files\Controle Parental
[19/10/2006|13:29] C:\Program Files\DivX
[19/10/2006|13:43] C:\Program Files\EasyBits
[14/05/2007|17:07] C:\Program Files\epson
[03/01/2007|17:48] C:\Program Files\ESTsoft
[28/03/2008|16:38] C:\Program Files\Fichiers communs
[19/10/2006|12:53] C:\Program Files\FrenchOtto
[19/10/2006|12:53] C:\Program Files\GemMasterFrench
[01/02/2008|20:03] C:\Program Files\Google
[18/08/2007|10:43] C:\Program Files\Hercules
[19/10/2006|13:42] C:\Program Files\Hewlett-Packard
[19/10/2006|13:25] C:\Program Files\HP
[19/10/2006|13:22] C:\Program Files\HP DigitalMedia Archive
[01/02/2008|21:19] C:\Program Files\InstallShield Installation Information
[10/04/2008|03:09] C:\Program Files\Internet Explorer
[14/01/2007|17:20] C:\Program Files\Inventel
[01/04/2008|23:17] C:\Program Files\Java
[01/02/2008|20:30] C:\Program Files\JetAudio
[26/04/2008|12:20] C:\Program Files\Kiwee Toolbar2
[10/04/2008|17:04] C:\Program Files\Lavalys
[19/08/2007|15:37] C:\Program Files\Lavasoft
[01/02/2008|17:16] C:\Program Files\Macrogaming
[03/01/2007|18:10] C:\Program Files\Matroska Pack
[03/01/2007|18:10] C:\Program Files\MatroskaProp
[19/10/2006|13:04] C:\Program Files\Messenger
[17/05/2007|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|04:24] C:\Program Files\microsoft frontpage
[03/01/2007|17:37] C:\Program Files\Microsoft Office
[15/11/2007|11:30] C:\Program Files\Microsoft SQL Server Compact Edition
[03/01/2007|17:37] C:\Program Files\Microsoft Visual Studio
[19/10/2006|13:26] C:\Program Files\Microsoft Works
[15/11/2005|04:24] C:\Program Files\Movie Maker
[10/04/2008|08:22] C:\Program Files\Mozilla Firefox
[24/01/2007|13:20] C:\Program Files\MSN
[15/11/2005|04:25] C:\Program Files\MSN Gaming Zone
[18/01/2007|04:02] C:\Program Files\MSXML 4.0
[19/10/2006|13:28] C:\Program Files\muvee Technologies
[27/04/2008|00:14] C:\Program Files\Navilog1
[03/01/2007|18:01] C:\Program Files\Nero
[15/11/2005|04:25] C:\Program Files\NetMeeting
[15/11/2005|04:25] C:\Program Files\Online Services
[18/06/2007|17:00] C:\Program Files\Outlook Express
[15/08/2007|11:17] C:\Program Files\QuickTime
[19/10/2006|13:22] C:\Program Files\Real
[01/02/2008|19:35] C:\Program Files\Realtek
[23/03/2008|14:02] C:\Program Files\RegCleaner
[22/03/2008|14:44] C:\Program Files\Registry Repair
[01/02/2008|21:03] C:\Program Files\SAGEM
[19/03/2007|16:45] C:\Program Files\Securitoo
[19/10/2006|13:44] C:\Program Files\Services en ligne
[01/05/2007|14:34] C:\Program Files\Skype
[19/10/2006|13:24] C:\Program Files\Sonic
[25/04/2008|00:00] C:\Program Files\SpeedFan
[14/08/2007|21:22] C:\Program Files\Spybot - Search & Destroy
[26/03/2007|15:46] C:\Program Files\Symantec
[12/11/2005|02:09] C:\Program Files\Uninstall Information
[03/01/2007|18:04] C:\Program Files\VideoLAN
[27/04/2008|01:47] C:\Program Files\Wanadoo
[28/02/2008|04:01] C:\Program Files\Windows Live
[28/03/2007|15:24] C:\Program Files\Windows Live Toolbar
[28/03/2008|16:37] C:\Program Files\Windows Media Connect 2
[01/02/2008|19:33] C:\Program Files\Windows Media Player
[15/11/2005|04:25] C:\Program Files\Windows NT
[15/11/2005|04:25] C:\Program Files\Windows Plus
[12/11/2005|02:09] C:\Program Files\WindowsUpdate
[18/05/2007|13:55] C:\Program Files\WinRAR
[15/11/2005|04:26] C:\Program Files\xerox
[01/02/2008|20:02] C:\Program Files\Yahoo!
[02/02/2007|20:59] C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[14/02/2008|16:56] C:\Program Files\Fichiers communs\Adobe
[03/01/2007|18:01] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|17:37] C:\Program Files\Fichiers communs\Designer
[14/01/2007|17:20] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[19/10/2006|13:18] C:\Program Files\Fichiers communs\HP
[19/10/2006|13:40] C:\Program Files\Fichiers communs\InstallShield
[19/10/2006|12:59] C:\Program Files\Fichiers communs\Java
[03/01/2007|18:48] C:\Program Files\Fichiers communs\LightScribe
[19/10/2006|13:24] C:\Program Files\Fichiers communs\LS Getting Started
[15/11/2007|11:34] C:\Program Files\Fichiers communs\Microsoft Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\MSSoap
[19/10/2006|13:28] C:\Program Files\Fichiers communs\muvee Technologies
[15/11/2005|04:24] C:\Program Files\Fichiers communs\ODBC
[19/10/2006|13:22] C:\Program Files\Fichiers communs\Real
[15/11/2005|04:24] C:\Program Files\Fichiers communs\Services
[01/05/2007|14:34] C:\Program Files\Fichiers communs\Skype
[19/10/2006|13:23] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\SpeechEngines
[19/10/2006|13:23] C:\Program Files\Fichiers communs\SureThing Shared
[06/10/2007|09:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|17:00] C:\Program Files\Fichiers communs\System
[19/10/2006|13:24] C:\Program Files\Fichiers communs\TiVo Shared
[15/11/2007|11:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[01/02/2008|17:14] C:\Program Files\Fichiers communs\Wise Installation Wizard
[19/10/2006|13:22] C:\Program Files\Fichiers communs\xing shared
---------------------------[ Process ]--------------------------
... 56
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-03 23:18:27
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
/!\ [Fich:254][Doss:5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
/!\ [Fich:262][Doss:0] C:\DOCUME~1\HP_ADM~1\Cookies
/!\ [Fich:10987][Doss:16] C:\DOCUME~1\HP_ADM~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 23:19:13,52 ]----------------------
Lance le l'option 2 en sans échec, cela devrait fonctionner.
Répondre à Angeldark
voila le rapport avec l'option 2 fait en mode sans échec:
-----------------------[ Lop S&D 4.2.0-3 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Administrateur ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 08/05/2008 | 12:16:40,28 ] [ PC : MARIOBEA ]
[ MAJ : 30-04-2008 | 18:35 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1\mapi lite soap.exe
Supprimé! - C:\DOCUME~1\HP_ADM~1\APPLIC~1\bashsi~1
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[10/10/2005|15:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[13/03/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[14/02/2008|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/03/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[14/09/2007|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ball Shim Dupe Tick
[06/10/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime
[19/10/2006|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/02/2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DFX
[29/09/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[01/02/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[19/10/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/10/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[19/10/2006|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/02/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/05/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/01/2007|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[19/10/2006|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/03/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[19/10/2006|13:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[05/05/2008|17:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/03/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/05/2007|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[30/01/2007|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[28/03/2007|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[03/12/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[25/03/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[02/02/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[10/10/2005|15:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[26/03/2007|15:43] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Adobe
[04/01/2007|12:42] C:\DOCUME~1\HP_ADM~1\APPLIC~1\AdobeUM
[23/01/2007|18:17] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Ahead
[27/12/2007|15:02] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CamfrogWEB
[04/01/2007|11:31] C:\DOCUME~1\HP_ADM~1\APPLIC~1\COWON
[25/03/2007|19:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\HP_ADM~1\APPLIC~1\desktop.ini
[03/01/2007|21:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\dvdcss
[30/04/2007|20:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\EPSON
[22/08/2007|16:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[08/10/2007|15:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GlarySoft
[26/03/2007|15:34] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Google
[14/01/2007|16:55] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Help
[30/01/2007|20:36] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Hemera
[03/01/2007|21:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\HPQ
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Identities
[01/02/2008|21:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\InstallShield
[03/10/2007|19:20] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Lavasoft
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Leadertech
[03/01/2007|18:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Macromedia
[06/05/2008|15:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Microsoft
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla
[13/01/2008|18:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\NeroDCTemplates
[20/01/2007|00:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Real
[01/02/2008|19:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Skype
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sonic
[19/01/2007|23:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sun
[26/03/2007|15:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Symantec
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Talkback
[14/02/2007|19:06] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Template
[03/01/2007|18:04] C:\DOCUME~1\HP_ADM~1\APPLIC~1\vlc
[17/08/2007|14:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\wklnhst.dat
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Zylom
[29/03/2008|15:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[19/10/2006|12:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[19/10/2006|12:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[26/03/2007|15:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[08/05/2008 12:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[17/08/2007|14:17] C:\Program Files\ABBYY FineReader 6.0 Sprint
[28/03/2008|16:34] C:\Program Files\Ad-Aware SE Personal
[14/02/2008|16:55] C:\Program Files\Adobe
[06/10/2007|09:57] C:\Program Files\Alwil Software
[13/03/2008|13:44] C:\Program Files\Avira
[03/01/2007|18:07] C:\Program Files\CCleaner
[26/12/2007|17:36] C:\Program Files\CFWebAdvancedU
[30/01/2007|20:35] C:\Program Files\Clic-Go 150 000 Cliparts Volume 2
[28/03/2007|15:53] C:\Program Files\Common
[12/11/2005|02:09] C:\Program Files\ComPlus Applications
[28/03/2007|14:48] C:\Program Files\Controle Parental
[19/10/2006|13:29] C:\Program Files\DivX
[19/10/2006|13:43] C:\Program Files\EasyBits
[14/05/2007|17:07] C:\Program Files\epson
[03/01/2007|17:48] C:\Program Files\ESTsoft
[28/03/2008|16:38] C:\Program Files\Fichiers communs
[19/10/2006|12:53] C:\Program Files\FrenchOtto
[19/10/2006|12:53] C:\Program Files\GemMasterFrench
[01/02/2008|20:03] C:\Program Files\Google
[18/08/2007|10:43] C:\Program Files\Hercules
[19/10/2006|13:42] C:\Program Files\Hewlett-Packard
[19/10/2006|13:25] C:\Program Files\HP
[19/10/2006|13:22] C:\Program Files\HP DigitalMedia Archive
[01/02/2008|21:19] C:\Program Files\InstallShield Installation Information
[10/04/2008|03:09] C:\Program Files\Internet Explorer
[14/01/2007|17:20] C:\Program Files\Inventel
[01/04/2008|23:17] C:\Program Files\Java
[01/02/2008|20:30] C:\Program Files\JetAudio
[26/04/2008|12:20] C:\Program Files\Kiwee Toolbar2
[10/04/2008|17:04] C:\Program Files\Lavalys
[19/08/2007|15:37] C:\Program Files\Lavasoft
[01/02/2008|17:16] C:\Program Files\Macrogaming
[03/01/2007|18:10] C:\Program Files\Matroska Pack
[03/01/2007|18:10] C:\Program Files\MatroskaProp
[19/10/2006|13:04] C:\Program Files\Messenger
[17/05/2007|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|04:24] C:\Program Files\microsoft frontpage
[03/01/2007|17:37] C:\Program Files\Microsoft Office
[15/11/2007|11:30] C:\Program Files\Microsoft SQL Server Compact Edition
[03/01/2007|17:37] C:\Program Files\Microsoft Visual Studio
[19/10/2006|13:26] C:\Program Files\Microsoft Works
[15/11/2005|04:24] C:\Program Files\Movie Maker
[10/04/2008|08:22] C:\Program Files\Mozilla Firefox
[24/01/2007|13:20] C:\Program Files\MSN
[15/11/2005|04:25] C:\Program Files\MSN Gaming Zone
[18/01/2007|04:02] C:\Program Files\MSXML 4.0
[19/10/2006|13:28] C:\Program Files\muvee Technologies
[27/04/2008|00:14] C:\Program Files\Navilog1
[03/01/2007|18:01] C:\Program Files\Nero
[15/11/2005|04:25] C:\Program Files\NetMeeting
[15/11/2005|04:25] C:\Program Files\Online Services
[18/06/2007|17:00] C:\Program Files\Outlook Express
[15/08/2007|11:17] C:\Program Files\QuickTime
[19/10/2006|13:22] C:\Program Files\Real
[01/02/2008|19:35] C:\Program Files\Realtek
[23/03/2008|14:02] C:\Program Files\RegCleaner
[22/03/2008|14:44] C:\Program Files\Registry Repair
[01/02/2008|21:03] C:\Program Files\SAGEM
[19/03/2007|16:45] C:\Program Files\Securitoo
[19/10/2006|13:44] C:\Program Files\Services en ligne
[01/05/2007|14:34] C:\Program Files\Skype
[19/10/2006|13:24] C:\Program Files\Sonic
[08/05/2008|00:00] C:\Program Files\SpeedFan
[14/08/2007|21:22] C:\Program Files\Spybot - Search & Destroy
[26/03/2007|15:46] C:\Program Files\Symantec
[12/11/2005|02:09] C:\Program Files\Uninstall Information
[03/01/2007|18:04] C:\Program Files\VideoLAN
[27/04/2008|01:47] C:\Program Files\Wanadoo
[28/02/2008|04:01] C:\Program Files\Windows Live
[28/03/2007|15:24] C:\Program Files\Windows Live Toolbar
[28/03/2008|16:37] C:\Program Files\Windows Media Connect 2
[01/02/2008|19:33] C:\Program Files\Windows Media Player
[15/11/2005|04:25] C:\Program Files\Windows NT
[15/11/2005|04:25] C:\Program Files\Windows Plus
[12/11/2005|02:09] C:\Program Files\WindowsUpdate
[18/05/2007|13:55] C:\Program Files\WinRAR
[15/11/2005|04:26] C:\Program Files\xerox
[01/02/2008|20:02] C:\Program Files\Yahoo!
[02/02/2007|20:59] C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[14/02/2008|16:56] C:\Program Files\Fichiers communs\Adobe
[03/01/2007|18:01] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|17:37] C:\Program Files\Fichiers communs\Designer
[14/01/2007|17:20] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[19/10/2006|13:18] C:\Program Files\Fichiers communs\HP
[19/10/2006|13:40] C:\Program Files\Fichiers communs\InstallShield
[19/10/2006|12:59] C:\Program Files\Fichiers communs\Java
[03/01/2007|18:48] C:\Program Files\Fichiers communs\LightScribe
[19/10/2006|13:24] C:\Program Files\Fichiers communs\LS Getting Started
[15/11/2007|11:34] C:\Program Files\Fichiers communs\Microsoft Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\MSSoap
[19/10/2006|13:28] C:\Program Files\Fichiers communs\muvee Technologies
[15/11/2005|04:24] C:\Program Files\Fichiers communs\ODBC
[19/10/2006|13:22] C:\Program Files\Fichiers communs\Real
[15/11/2005|04:24] C:\Program Files\Fichiers communs\Services
[01/05/2007|14:34] C:\Program Files\Fichiers communs\Skype
[19/10/2006|13:23] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\SpeechEngines
[19/10/2006|13:23] C:\Program Files\Fichiers communs\SureThing Shared
[06/10/2007|09:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|17:00] C:\Program Files\Fichiers communs\System
[19/10/2006|13:24] C:\Program Files\Fichiers communs\TiVo Shared
[15/11/2007|11:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[01/02/2008|17:14] C:\Program Files\Fichiers communs\Wise Installation Wizard
[19/10/2006|13:22] C:\Program Files\Fichiers communs\xing shared
---------------------------[ Process ]--------------------------
... 13
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
Aucun fichier / dossier Lop trouvé !
----------------------[ Verification du Registre ]----------------------
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-08 12:17:21
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
/!\ [Fich:301][Doss:3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
/!\ [Fich:114][Doss:0] C:\DOCUME~1\HP_ADM~1\Cookies
/!\ [Fich:4034][Doss:14] C:\DOCUME~1\HP_ADM~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 12:18:14,09 ]----------------------
Reposte un rapport Hijackthis.
Répondre à Angeldark
Désolé de le posté si tard mais j'ai eu un souci d'internet
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:35:05, on 22/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\CCleaner\ccleaner.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S241.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S29C.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera V
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/too [...] ontrol.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/5 [...] plugin.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/adva [...] module.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB01D9B8-00A5-4059-9492-FFDB3AD55327}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
--
End of file - 10968 bytes
Re,
Copie (Ctrl+C) le texte se situant dans le cadre ci-dessous :
C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime |
- Relance Lop S&D.
- Choisis cette fois-ci l'option 4 (LopScript). Une page blanche va s'ouvrir, colle (Ctrl+V) le texte précedemment copié.
- Ferme cette page, il te sera demandé de l'enregistrer, accepte.
! Ne ferme pas la fenêtre lors de la suppression !
- Poste le rapport généré (C:\lopR.txt*)
(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)
* le nom de la partition peut changer
Message édité par Angeldark le 24-05-2008 à 21:02:15
Répondre à Angeldark
Voilà le rapport:
-----------------------[ Lop S&D 4.2.0-3 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Administrateur ] [ "C:\Lop SD" ] [ Selection : 4 ]
[ 24/05/2008 | 12:32:20,33 ] [ PC : MARIOBEA ]
[ MAJ : 30-04-2008 | 18:35 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ LopScript //////////////////////////////////
C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[10/10/2005|15:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[13/03/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[14/02/2008|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/03/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[14/09/2007|02:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ball Shim Dupe Tick
[06/10/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\boobdeletesizetime
[19/10/2006|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/02/2008|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DFX
[29/09/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[01/02/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[19/10/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[19/10/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[19/10/2006|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/02/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/05/2007|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/01/2007|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[19/10/2006|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/03/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[19/10/2006|13:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[22/05/2008|23:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[26/03/2007|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/05/2007|17:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[30/01/2007|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[28/03/2007|14:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[03/12/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[25/03/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[02/02/2007|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[10/10/2005|15:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[15/11/2005|04:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[19/10/2006|14:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[19/10/2006|13:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[26/03/2007|15:43] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Adobe
[04/01/2007|12:42] C:\DOCUME~1\HP_ADM~1\APPLIC~1\AdobeUM
[23/01/2007|18:17] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Ahead
[27/12/2007|15:02] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CamfrogWEB
[04/01/2007|11:31] C:\DOCUME~1\HP_ADM~1\APPLIC~1\COWON
[25/03/2007|19:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CyberLink
[10/10/2005|15:24] C:\DOCUME~1\HP_ADM~1\APPLIC~1\desktop.ini
[03/01/2007|21:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\dvdcss
[30/04/2007|20:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\EPSON
[22/08/2007|16:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GDIPFONTCACHEV1.DAT
[08/10/2007|15:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\GlarySoft
[26/03/2007|15:34] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Google
[14/01/2007|16:55] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Help
[30/01/2007|20:36] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Hemera
[03/01/2007|21:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\HPQ
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Identities
[01/02/2008|21:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\InstallShield
[03/10/2007|19:20] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Lavasoft
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Leadertech
[03/01/2007|18:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Macromedia
[06/05/2008|15:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Microsoft
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla
[13/01/2008|18:15] C:\DOCUME~1\HP_ADM~1\APPLIC~1\NeroDCTemplates
[20/01/2007|00:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Real
[01/02/2008|19:54] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Skype
[03/01/2007|21:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sonic
[19/01/2007|23:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Sun
[26/03/2007|15:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Symantec
[23/04/2007|21:28] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Talkback
[14/02/2007|19:06] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Template
[03/01/2007|18:04] C:\DOCUME~1\HP_ADM~1\APPLIC~1\vlc
[17/08/2007|14:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\wklnhst.dat
[02/02/2007|20:59] C:\DOCUME~1\HP_ADM~1\APPLIC~1\Zylom
[29/03/2008|15:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[19/10/2006|12:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[19/10/2006|12:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[26/03/2007|15:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[23/05/2008 06:51][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[17/08/2007|14:17] C:\Program Files\ABBYY FineReader 6.0 Sprint
[28/03/2008|16:34] C:\Program Files\Ad-Aware SE Personal
[14/02/2008|16:55] C:\Program Files\Adobe
[06/10/2007|09:57] C:\Program Files\Alwil Software
[13/03/2008|13:44] C:\Program Files\Avira
[03/01/2007|18:07] C:\Program Files\CCleaner
[26/12/2007|17:36] C:\Program Files\CFWebAdvancedU
[30/01/2007|20:35] C:\Program Files\Clic-Go 150 000 Cliparts Volume 2
[28/03/2007|15:53] C:\Program Files\Common
[12/11/2005|02:09] C:\Program Files\ComPlus Applications
[28/03/2007|14:48] C:\Program Files\Controle Parental
[19/10/2006|13:29] C:\Program Files\DivX
[19/10/2006|13:43] C:\Program Files\EasyBits
[14/05/2007|17:07] C:\Program Files\epson
[03/01/2007|17:48] C:\Program Files\ESTsoft
[28/03/2008|16:38] C:\Program Files\Fichiers communs
[19/10/2006|12:53] C:\Program Files\FrenchOtto
[19/10/2006|12:53] C:\Program Files\GemMasterFrench
[01/02/2008|20:03] C:\Program Files\Google
[18/08/2007|10:43] C:\Program Files\Hercules
[19/10/2006|13:42] C:\Program Files\Hewlett-Packard
[19/10/2006|13:25] C:\Program Files\HP
[19/10/2006|13:22] C:\Program Files\HP DigitalMedia Archive
[01/02/2008|21:19] C:\Program Files\InstallShield Installation Information
[10/04/2008|03:09] C:\Program Files\Internet Explorer
[14/01/2007|17:20] C:\Program Files\Inventel
[01/04/2008|23:17] C:\Program Files\Java
[01/02/2008|20:30] C:\Program Files\JetAudio
[26/04/2008|12:20] C:\Program Files\Kiwee Toolbar2
[10/04/2008|17:04] C:\Program Files\Lavalys
[19/08/2007|15:37] C:\Program Files\Lavasoft
[01/02/2008|17:16] C:\Program Files\Macrogaming
[03/01/2007|18:10] C:\Program Files\Matroska Pack
[03/01/2007|18:10] C:\Program Files\MatroskaProp
[19/10/2006|13:04] C:\Program Files\Messenger
[17/05/2007|15:04] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[15/11/2005|04:24] C:\Program Files\microsoft frontpage
[03/01/2007|17:37] C:\Program Files\Microsoft Office
[15/11/2007|11:30] C:\Program Files\Microsoft SQL Server Compact Edition
[03/01/2007|17:37] C:\Program Files\Microsoft Visual Studio
[19/10/2006|13:26] C:\Program Files\Microsoft Works
[15/11/2005|04:24] C:\Program Files\Movie Maker
[20/05/2008|14:09] C:\Program Files\Mozilla Firefox
[24/01/2007|13:20] C:\Program Files\MSN
[15/11/2005|04:25] C:\Program Files\MSN Gaming Zone
[18/01/2007|04:02] C:\Program Files\MSXML 4.0
[19/10/2006|13:28] C:\Program Files\muvee Technologies
[27/04/2008|00:14] C:\Program Files\Navilog1
[03/01/2007|18:01] C:\Program Files\Nero
[15/11/2005|04:25] C:\Program Files\NetMeeting
[15/11/2005|04:25] C:\Program Files\Online Services
[18/06/2007|17:00] C:\Program Files\Outlook Express
[15/08/2007|11:17] C:\Program Files\QuickTime
[19/10/2006|13:22] C:\Program Files\Real
[01/02/2008|19:35] C:\Program Files\Realtek
[23/03/2008|14:02] C:\Program Files\RegCleaner
[22/03/2008|14:44] C:\Program Files\Registry Repair
[01/02/2008|21:03] C:\Program Files\SAGEM
[19/03/2007|16:45] C:\Program Files\Securitoo
[19/10/2006|13:44] C:\Program Files\Services en ligne
[01/05/2007|14:34] C:\Program Files\Skype
[19/10/2006|13:24] C:\Program Files\Sonic
[08/05/2008|00:00] C:\Program Files\SpeedFan
[14/08/2007|21:22] C:\Program Files\Spybot - Search & Destroy
[26/03/2007|15:46] C:\Program Files\Symantec
[12/11/2005|02:09] C:\Program Files\Uninstall Information
[03/01/2007|18:04] C:\Program Files\VideoLAN
[23/05/2008|06:51] C:\Program Files\Wanadoo
[28/02/2008|04:01] C:\Program Files\Windows Live
[28/03/2007|15:24] C:\Program Files\Windows Live Toolbar
[28/03/2008|16:37] C:\Program Files\Windows Media Connect 2
[01/02/2008|19:33] C:\Program Files\Windows Media Player
[15/11/2005|04:25] C:\Program Files\Windows NT
[15/11/2005|04:25] C:\Program Files\Windows Plus
[12/11/2005|02:09] C:\Program Files\WindowsUpdate
[18/05/2007|13:55] C:\Program Files\WinRAR
[15/11/2005|04:26] C:\Program Files\xerox
[01/02/2008|20:02] C:\Program Files\Yahoo!
[02/02/2007|20:59] C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[14/02/2008|16:56] C:\Program Files\Fichiers communs\Adobe
[03/01/2007|18:01] C:\Program Files\Fichiers communs\Ahead
[03/01/2007|17:37] C:\Program Files\Fichiers communs\Designer
[14/01/2007|17:20] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[19/10/2006|13:18] C:\Program Files\Fichiers communs\HP
[19/10/2006|13:40] C:\Program Files\Fichiers communs\InstallShield
[19/10/2006|12:59] C:\Program Files\Fichiers communs\Java
[03/01/2007|18:48] C:\Program Files\Fichiers communs\LightScribe
[19/10/2006|13:24] C:\Program Files\Fichiers communs\LS Getting Started
[15/11/2007|11:34] C:\Program Files\Fichiers communs\Microsoft Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\MSSoap
[19/10/2006|13:28] C:\Program Files\Fichiers communs\muvee Technologies
[15/11/2005|04:24] C:\Program Files\Fichiers communs\ODBC
[19/10/2006|13:22] C:\Program Files\Fichiers communs\Real
[15/11/2005|04:24] C:\Program Files\Fichiers communs\Services
[01/05/2007|14:34] C:\Program Files\Fichiers communs\Skype
[19/10/2006|13:23] C:\Program Files\Fichiers communs\Sonic Shared
[15/11/2005|04:24] C:\Program Files\Fichiers communs\SpeechEngines
[19/10/2006|13:23] C:\Program Files\Fichiers communs\SureThing Shared
[06/10/2007|09:46] C:\Program Files\Fichiers communs\Symantec Shared
[18/06/2007|17:00] C:\Program Files\Fichiers communs\System
[19/10/2006|13:24] C:\Program Files\Fichiers communs\TiVo Shared
[15/11/2007|11:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[01/02/2008|17:14] C:\Program Files\Fichiers communs\Wise Installation Wizard
[19/10/2006|13:22] C:\Program Files\Fichiers communs\xing shared
---------------------------[ Process ]--------------------------
... 59
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
Aucun fichier / dossier Lop trouvé !
----------------------[ Verification du Registre ]----------------------
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-24 12:33:06
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
/!\ [Fich:376][Doss:4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
/!\ [Fich:82][Doss:0] C:\DOCUME~1\HP_ADM~1\Cookies
/!\ [Fich:2196][Doss:4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 12:33:34,22 ]----------------------
Ton pc e comporte mieux ?
Répondre à Angeldark
oui le pc va baucoup mieux je t'en remerci et ton équipe aussi pour le travail que vous faites sur ce forum
Bon surf 
Répondre à Angeldark
Il y a 2258 utilisateurs connus et inconnus. Pour voir la liste des connectés connus, cliquez ici.
