PC infecté par : Packed.Win32.Monder.gen [Résolu]

[Résolu] PC infecté par : Packed.Win32.Monder.gen - Sécurité - Virus

Recherche Recherche
Règles Règles
Aide Aide

Dans la même thématique :

Ceci répond-il à votre question ? Oui | Non

Voir les posts : Par défaut Tous Les bonnes notes Les notes insuffisantes

Mot : Pseudo : Filtrer
Bas de page
Auteur	Sujet : [Résolu] PC infecté par : Packed.Win32.Monder.gen

sergio1907

Profil : IDNaute

Plus d'informations

22-04-2008 à 17:52:15

Bonjour tout le monde

Voilà j'ai un problème avec mon pc, il est infecter. Je l'ai supprimer plusieurs fois, et quand je refait une analyse du pc, ce truc est toujours présent :cry:

Après un redémarrage j'ai toujours un message qui apparait:

J'ai essayé pas mal de trucs, mais c'est toujours infecter :cry: .
J'ai fait des recherche mais je pense que demander directement serait mieux

Je vous remercie d'avance pour votre aide
A++ :hello:

Message édité par sergio1907 le 24-04-2008 à 06:08:43

Liens

Angeldark

Profil : Helper

Plus d'informations

22-04-2008 à 17:57:51

Masquer

Bonjour,

Télécharge puis installe Hijackthis (Trend Micro).
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

---------------
Prévention & Protection|Les logiciels gratuits|L'homme du FLCCF

sergio1907

Profil : IDNaute

Plus d'informations

22-04-2008 à 18:05:12

Masquer

Vous êtes très rapide!!
Voici le rapport Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:02:21, on 22/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
C:\PROGRA~1\ANTIVI~1\ANTI-S~1\fsaw.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\mspaint.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.carrefour.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.carrefour.fr/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: 127.255.255.255 serial.alcohol-soft.com
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Base frag grid bows] C:\Documents and Settings\All Users\Application Data\Cast ping base frag\Ball aim.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [3073c4d6] rundll32.exe "C:\WINDOWS\system32\hruccgma.dll",b
O4 - HKLM\..\Run: [BM3340f74a] Rundll32.exe "C:\WINDOWS\system32\iskwilnv.dll",s
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Flag 1] C:\DOCUME~1\SELUK~1\APPLIC~1\ROADAB~1\dart grey.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Startup Defender.lnk = C:\Program Files\Zards software\Startup Defender\Startup Defender.exe
O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\AntivirusFirewall\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.carrefour.fr/
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/micros [...] 6571234203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 6571226250
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

--
End of file - 12427 bytes

Angeldark

Profil : Helper

Plus d'informations

22-04-2008 à 18:09:14

Masquer

Re,

Télécharge Lop S&D.exe sur ton Bureau.

Double-clique dessus pour lancer l'installation
Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
Patiente jusqu'à la fin du scan
Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

---------------
Prévention & Protection|Les logiciels gratuits|L'homme du FLCCF

sergio1907

Profil : IDNaute

Plus d'informations

22-04-2008 à 18:20:09

Masquer

Voici le rapport, comme tu la demandé
ps:Le bureau n'apparait toujours pas après la manip'
Merci de ton aide Angeldark

-----------------------[ Lop S&D 4.1.1-6 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Sel‡uk ] [ "C:\Lop SD" ]
[ 22/04/2008 | 18:12:05,53 ] [ PC : OEM-2B7087C8C3D ]
[ MAJ : 21-04-2008 | 19:45 ]

-------------[ Listing des dossiers dans Application Data ]------------

[02/05/2006|13:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[02/05/2006|13:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[02/05/2006|12:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[11/04/2008|19:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
[21/04/2008|14:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
[02/05/2006|13:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\CyberLink
[28/04/2006|11:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[28/04/2006|09:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[02/05/2006|13:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[02/05/2006|12:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/05/2006|12:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[02/05/2006|12:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[22/04/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[22/04/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[18/04/2008|22:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/05/2006|12:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[11/04/2008|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[22/04/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[22/04/2008|13:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[21/04/2008|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
[11/04/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[11/04/2008|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cast ping base frag
[02/05/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[28/04/2006|11:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[11/04/2008|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[11/04/2008|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[11/04/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[17/04/2008|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[11/04/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[14/04/2008|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/04/2008|22:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[02/05/2006|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[02/05/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[11/04/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[18/04/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[02/05/2006|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[02/05/2006|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[11/04/2008|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[11/04/2008|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\X10 Settings
[11/04/2008|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[02/05/2006|13:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[02/05/2006|13:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[02/05/2006|12:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[11/04/2008|19:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
[21/04/2008|14:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[02/05/2006|13:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\CyberLink
[28/04/2006|11:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[28/04/2006|09:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/05/2006|13:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[02/05/2006|12:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/05/2006|12:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[02/05/2006|12:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[21/04/2008|15:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[21/04/2008|15:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[21/04/2008|15:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\DivX
[11/04/2008|20:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[02/05/2006|10:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

[28/04/2006|09:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[28/04/2006|09:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[28/04/2006|09:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[16/04/2008|03:28] C:\DOCUME~1\NETWOR~1\APPLIC~1\X10 Commander

[21/04/2008|21:52] C:\DOCUME~1\SELUK~1\APPLIC~1\.
[21/04/2008|21:52] C:\DOCUME~1\SELUK~1\APPLIC~1\..
[22/04/2008|18:04] C:\DOCUME~1\SELUK~1\APPLIC~1\.googlewebacchosts
[17/04/2008|16:12] C:\DOCUME~1\SELUK~1\APPLIC~1\Adobe
[17/04/2008|14:09] C:\DOCUME~1\SELUK~1\APPLIC~1\AdobeUM
[11/04/2008|19:50] C:\DOCUME~1\SELUK~1\APPLIC~1\AOL
[22/04/2008|13:14] C:\DOCUME~1\SELUK~1\APPLIC~1\Apple Computer
[21/04/2008|15:04] C:\DOCUME~1\SELUK~1\APPLIC~1\ATI
[12/04/2008|11:03] C:\DOCUME~1\SELUK~1\APPLIC~1\Auslogics
[02/05/2006|13:56] C:\DOCUME~1\SELUK~1\APPLIC~1\CyberLink
[11/04/2008|22:22] C:\DOCUME~1\SELUK~1\APPLIC~1\DAEMON Tools
[18/04/2008|19:56] C:\DOCUME~1\SELUK~1\APPLIC~1\Datalayer
[28/04/2006|11:18] C:\DOCUME~1\SELUK~1\APPLIC~1\desktop.ini
[11/04/2008|22:44] C:\DOCUME~1\SELUK~1\APPLIC~1\F-Secure
[11/04/2008|20:22] C:\DOCUME~1\SELUK~1\APPLIC~1\GRETECH
[16/04/2008|20:30] C:\DOCUME~1\SELUK~1\APPLIC~1\Help
[28/04/2006|09:38] C:\DOCUME~1\SELUK~1\APPLIC~1\Identities
[11/04/2008|22:41] C:\DOCUME~1\SELUK~1\APPLIC~1\ispnews
[20/04/2008|23:47] C:\DOCUME~1\SELUK~1\APPLIC~1\LimeWire
[02/05/2006|13:10] C:\DOCUME~1\SELUK~1\APPLIC~1\Macromedia
[14/04/2008|17:24] C:\DOCUME~1\SELUK~1\APPLIC~1\Media Player Classic
[11/04/2008|23:34] C:\DOCUME~1\SELUK~1\APPLIC~1\Microsoft
[11/04/2008|20:08] C:\DOCUME~1\SELUK~1\APPLIC~1\Mozilla
[12/04/2008|11:21] C:\DOCUME~1\SELUK~1\APPLIC~1\MuralPix
[11/04/2008|22:08] C:\DOCUME~1\SELUK~1\APPLIC~1\Nero
[21/04/2008|21:52] C:\DOCUME~1\SELUK~1\APPLIC~1\Nokia Multimedia Player
[11/04/2008|22:22] C:\DOCUME~1\SELUK~1\APPLIC~1\Notepad++
[11/04/2008|21:19] C:\DOCUME~1\SELUK~1\APPLIC~1\OpenOffice.org2
[18/04/2008|15:18] C:\DOCUME~1\SELUK~1\APPLIC~1\PC Suite
[11/04/2008|20:35] C:\DOCUME~1\SELUK~1\APPLIC~1\road about owns
[11/04/2008|21:32] C:\DOCUME~1\SELUK~1\APPLIC~1\ScanSoft
[14/04/2008|21:01] C:\DOCUME~1\SELUK~1\APPLIC~1\SecuROM
[02/05/2006|12:10] C:\DOCUME~1\SELUK~1\APPLIC~1\Sun
[12/04/2008|00:06] C:\DOCUME~1\SELUK~1\APPLIC~1\SystemRequirementsLab
[12/04/2008|16:04] C:\DOCUME~1\SELUK~1\APPLIC~1\TeamViewer
[22/04/2008|14:56] C:\DOCUME~1\SELUK~1\APPLIC~1\uTorrent
[11/04/2008|20:54] C:\DOCUME~1\SELUK~1\APPLIC~1\vlc
[11/04/2008|20:15] C:\DOCUME~1\SELUK~1\APPLIC~1\WinRAR
[02/05/2006|12:02] C:\DOCUME~1\SELUK~1\APPLIC~1\You've Got Pictures Screensaver

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[22/04/2008 13:03][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[22/04/2008 02:02][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
[22/04/2008 18:00][--ah-----] C:\WINDOWS\tasks\AF85952C91AE0728.job
[22/04/2008 17:22][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[22/04/2008|18:01] C:\Program Files\.
[22/04/2008|18:01] C:\Program Files\..
[18/04/2008|22:05] C:\Program Files\Adobe
[13/04/2008|22:12] C:\Program Files\Alcohol Soft
[16/04/2008|16:23] C:\Program Files\Amadis Software
[11/04/2008|22:38] C:\Program Files\AntivirusFirewall
[22/04/2008|13:03] C:\Program Files\Apple Software Update
[11/04/2008|21:30] C:\Program Files\ArcSoft
[21/04/2008|14:59] C:\Program Files\ATI Technologies
[12/04/2008|11:03] C:\Program Files\Auslogics
[11/04/2008|22:35] C:\Program Files\CA
[11/04/2008|21:34] C:\Program Files\Canon
[11/04/2008|21:28] C:\Program Files\CanonBJ
[11/04/2008|20:09] C:\Program Files\CCleaner
[17/04/2008|18:36] C:\Program Files\Circle Developement
[02/05/2006|10:14] C:\Program Files\Common Files
[02/05/2006|12:07] C:\Program Files\CyberLink
[11/04/2008|22:40] C:\Program Files\DAEMON Tools Lite
[19/04/2008|02:48] C:\Program Files\DVDVideoSoft
[22/04/2008|13:13] C:\Program Files\Fichiers communs
[18/04/2008|22:53] C:\Program Files\Google
[11/04/2008|20:28] C:\Program Files\GRETECH
[12/04/2008|10:53] C:\Program Files\inKline Global
[21/04/2008|14:59] C:\Program Files\InstallShield Installation Information
[02/05/2006|10:51] C:\Program Files\Intel
[12/04/2008|10:39] C:\Program Files\Internet Explorer
[22/04/2008|13:14] C:\Program Files\iPod
[22/04/2008|13:14] C:\Program Files\iTunes
[11/04/2008|22:13] C:\Program Files\Java
[18/04/2008|22:15] C:\Program Files\K-Lite Codec Pack
[15/04/2008|21:53] C:\Program Files\KONAMI
[17/04/2008|23:52] C:\Program Files\Lavasoft
[02/05/2006|12:02] C:\Program Files\Learn2.com
[11/04/2008|20:18] C:\Program Files\LimeWire
[02/05/2006|11:23] C:\Program Files\Messenger
[11/04/2008|20:34] C:\Program Files\Messenger Plus! Live
[13/04/2008|03:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[28/04/2006|09:30] C:\Program Files\microsoft frontpage
[11/04/2008|21:04] C:\Program Files\Microsoft LifeCam
[11/04/2008|23:37] C:\Program Files\Microsoft Plus! Digital Media Edition
[28/04/2006|09:27] C:\Program Files\Movie Maker
[22/04/2008|17:25] C:\Program Files\Mozilla Firefox
[28/04/2006|09:22] C:\Program Files\MSN
[28/04/2006|09:23] C:\Program Files\MSN Gaming Zone
[13/04/2008|03:01] C:\Program Files\MSXML 4.0
[12/04/2008|11:21] C:\Program Files\MuralPix
[11/04/2008|22:06] C:\Program Files\Nero
[11/04/2008|22:09] C:\Program Files\NeroInstall.bak
[28/04/2006|09:27] C:\Program Files\NetMeeting
[21/04/2008|21:34] C:\Program Files\Nokia
[11/04/2008|20:32] C:\Program Files\Notepad++
[28/04/2006|09:25] C:\Program Files\Online Services
[11/04/2008|21:11] C:\Program Files\OpenOffice.org 2.4
[11/04/2008|22:20] C:\Program Files\Outlook Express
[14/04/2008|15:18] C:\Program Files\QuickTime
[02/05/2006|12:02] C:\Program Files\Real
[11/04/2008|20:34] C:\Program Files\road about owns
[11/04/2008|21:32] C:\Program Files\ScanSoft
[28/04/2006|09:28] C:\Program Files\Services en ligne
[18/04/2008|20:50] C:\Program Files\Spybot - Search & Destroy
[12/04/2008|00:06] C:\Program Files\SystemRequirementsLab
[12/04/2008|15:55] C:\Program Files\TeamViewer3
[21/04/2008|00:58] C:\Program Files\Torrents Open Registrations Checker
[21/04/2008|00:58] C:\Program Files\Tracker Checker 2
[22/04/2008|18:01] C:\Program Files\Trend Micro
[12/04/2008|10:39] C:\Program Files\Uninstall Information
[15/04/2008|02:53] C:\Program Files\uTorrent
[11/04/2008|20:43] C:\Program Files\VideoLAN
[02/05/2006|12:02] C:\Program Files\Viewpoint
[02/05/2006|11:18] C:\Program Files\Windows Journal Viewer
[11/04/2008|20:02] C:\Program Files\Windows Live
[11/04/2008|20:52] C:\Program Files\Windows Media Connect 2
[16/04/2008|19:27] C:\Program Files\Windows Media Player
[28/04/2006|09:23] C:\Program Files\Windows NT
[28/04/2006|09:24] C:\Program Files\Windows Plus
[11/04/2008|20:16] C:\Program Files\WinRAR
[02/05/2006|10:14] C:\Program Files\X10 Hardware
[28/04/2006|09:30] C:\Program Files\xerox
[11/04/2008|20:09] C:\Program Files\Yahoo!
[17/04/2008|17:20] C:\Program Files\Zards software

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[22/04/2008|13:13] C:\Program Files\Fichiers communs\.
[22/04/2008|13:13] C:\Program Files\Fichiers communs\..
[18/04/2008|22:06] C:\Program Files\Fichiers communs\Adobe
[11/04/2008|19:52] C:\Program Files\Fichiers communs\AOL
[11/04/2008|19:51] C:\Program Files\Fichiers communs\aolshare
[22/04/2008|13:13] C:\Program Files\Fichiers communs\Apple
[19/04/2008|02:49] C:\Program Files\Fichiers communs\DVDVideoSoft
[21/04/2008|14:55] C:\Program Files\Fichiers communs\InstallShield
[02/05/2006|11:56] C:\Program Files\Fichiers communs\Java
[15/04/2008|00:37] C:\Program Files\Fichiers communs\Microsoft Shared
[28/04/2006|09:27] C:\Program Files\Fichiers communs\MSSoap
[11/04/2008|22:07] C:\Program Files\Fichiers communs\Nero
[21/04/2008|21:33] C:\Program Files\Fichiers communs\Nokia
[02/05/2006|12:02] C:\Program Files\Fichiers communs\Nullsoft
[21/04/2008|21:33] C:\Program Files\Fichiers communs\PCSuite
[02/05/2006|12:02] C:\Program Files\Fichiers communs\Real
[11/04/2008|21:32] C:\Program Files\Fichiers communs\ScanSoft Shared
[28/04/2006|09:27] C:\Program Files\Fichiers communs\Services
[28/04/2006|11:18] C:\Program Files\Fichiers communs\SpeechEngines
[11/04/2008|22:20] C:\Program Files\Fichiers communs\System
[11/04/2008|20:02] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[18/04/2008|20:51] C:\Program Files\Fichiers communs\Wise Installation Wizard

----------------------[ Recherche avec S_Lop ]---------------------

C:\DOCUME~1\SELUK~1\LOCALS~1\Temp\bis243.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cast ping base frag
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cast ping base frag\Ball aim.exe
C:\Program Files\Circle Developement
C:\WINDOWS\Tasks\AF85952C91AE0728.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Base frag grid bows"="C:\\Documents and Settings\\All Users\\Application Data\\Cast ping base frag\\Ball aim.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 8251 ( 70 ## added by CiD )

/!\ 2 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-22 18:12:52
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\system32\hgNnmnmp.ini2
C:\WINDOWS\system32\hOWENqru.ini2
C:\WINDOWS\system32\ilkUDJjl.ini2
C:\WINDOWS\system32\IPprqqru.ini2
C:\WINDOWS\system32\VCMUFfhk.ini2
! VUNDO Possible !

/!\ [Fich:358][Doss:52] C:\DOCUME~1\SELUK~1\LOCALS~1\Temp
/!\ [Fich:38][Doss:0] C:\DOCUME~1\SELUK~1\Cookies
/!\ [Fich:1531][Doss:5] C:\DOCUME~1\SELUK~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 18:13:50,75 ]----------------------

Angeldark

Profil : Helper

Plus d'informations

22-04-2008 à 18:38:22

Masquer

Re,

Relance Lop S&D

Choisis cette fois ci l'Option 2 (Suppression)
Ne ferme pas la fenêtre lors de la suppression !
Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

---------------
Prévention & Protection|Les logiciels gratuits|L'homme du FLCCF

sergio1907

Profil : IDNaute

Plus d'informations

22-04-2008 à 18:50:29

Masquer

Je ne vois toujours pas le Bureau, j'ai fai exactemen comme tu a dit mais je n'arrive pas à accédé au Bureau.

Mais j'ai réussi à faire ce que tu ma dit, et voici le rapport

ps: je pourrai te répondre seulement aprés 21h, car j'ai un entrainement lol donc je dois y aller.Mais tu peux continuer a me dire ce qu'il faut faire, je le ferai dés que je rentre
En tous cas merci de ton aide

-----------------------[ Lop S&D 4.1.1-6 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Sel‡uk ] [ "C:\Lop SD" ]
[ 22/04/2008 | 18:43:25,23 ] [ PC : OEM-2B7087C8C3D ]
[ MAJ : 21-04-2008 | 19:45 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cast ping base frag\Ball aim.exe
Supprimé! - C:\WINDOWS\Tasks\AF85952C91AE0728.job
Supprimé! - C:\DOCUME~1\SELUK~1\LOCALS~1\Temp\bis243.exe
Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Cast ping base frag
Supprimé! - C:\Program Files\Circle Developement
Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

-------------[ Listing des dossiers dans Application Data ]------------

[02/05/2006|13:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\.
[02/05/2006|13:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\..
[02/05/2006|12:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[11/04/2008|19:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
[21/04/2008|14:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
[02/05/2006|13:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\CyberLink
[28/04/2006|11:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[28/04/2006|09:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[02/05/2006|13:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[02/05/2006|12:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[02/05/2006|12:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[02/05/2006|12:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[22/04/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.
[22/04/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\..
[18/04/2008|22:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/05/2006|12:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[11/04/2008|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[22/04/2008|13:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[22/04/2008|13:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[21/04/2008|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
[11/04/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[02/05/2006|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[28/04/2006|11:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[11/04/2008|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[11/04/2008|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[11/04/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[17/04/2008|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[11/04/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[14/04/2008|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/04/2008|22:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[02/05/2006|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[02/05/2006|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[11/04/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[18/04/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[02/05/2006|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[02/05/2006|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[11/04/2008|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[11/04/2008|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\X10 Settings
[11/04/2008|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[02/05/2006|13:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.
[02/05/2006|13:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\..
[02/05/2006|12:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[11/04/2008|19:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
[21/04/2008|14:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[02/05/2006|13:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\CyberLink
[28/04/2006|11:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[28/04/2006|09:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[02/05/2006|13:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[02/05/2006|12:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/05/2006|12:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[02/05/2006|12:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[21/04/2008|15:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\.
[21/04/2008|15:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\..
[21/04/2008|15:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\DivX
[11/04/2008|20:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[02/05/2006|10:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

[28/04/2006|09:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\.
[28/04/2006|09:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\..
[28/04/2006|09:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[16/04/2008|03:28] C:\DOCUME~1\NETWOR~1\APPLIC~1\X10 Commander

[21/04/2008|21:52] C:\DOCUME~1\SELUK~1\APPLIC~1\.
[21/04/2008|21:52] C:\DOCUME~1\SELUK~1\APPLIC~1\..
[22/04/2008|18:34] C:\DOCUME~1\SELUK~1\APPLIC~1\.googlewebacchosts
[17/04/2008|16:12] C:\DOCUME~1\SELUK~1\APPLIC~1\Adobe
[17/04/2008|14:09] C:\DOCUME~1\SELUK~1\APPLIC~1\AdobeUM
[11/04/2008|19:50] C:\DOCUME~1\SELUK~1\APPLIC~1\AOL
[22/04/2008|13:14] C:\DOCUME~1\SELUK~1\APPLIC~1\Apple Computer
[21/04/2008|15:04] C:\DOCUME~1\SELUK~1\APPLIC~1\ATI
[12/04/2008|11:03] C:\DOCUME~1\SELUK~1\APPLIC~1\Auslogics
[02/05/2006|13:56] C:\DOCUME~1\SELUK~1\APPLIC~1\CyberLink
[11/04/2008|22:22] C:\DOCUME~1\SELUK~1\APPLIC~1\DAEMON Tools
[18/04/2008|19:56] C:\DOCUME~1\SELUK~1\APPLIC~1\Datalayer
[28/04/2006|11:18] C:\DOCUME~1\SELUK~1\APPLIC~1\desktop.ini
[11/04/2008|22:44] C:\DOCUME~1\SELUK~1\APPLIC~1\F-Secure
[11/04/2008|20:22] C:\DOCUME~1\SELUK~1\APPLIC~1\GRETECH
[16/04/2008|20:30] C:\DOCUME~1\SELUK~1\APPLIC~1\Help
[28/04/2006|09:38] C:\DOCUME~1\SELUK~1\APPLIC~1\Identities
[11/04/2008|22:41] C:\DOCUME~1\SELUK~1\APPLIC~1\ispnews
[20/04/2008|23:47] C:\DOCUME~1\SELUK~1\APPLIC~1\LimeWire
[02/05/2006|13:10] C:\DOCUME~1\SELUK~1\APPLIC~1\Macromedia
[14/04/2008|17:24] C:\DOCUME~1\SELUK~1\APPLIC~1\Media Player Classic
[11/04/2008|23:34] C:\DOCUME~1\SELUK~1\APPLIC~1\Microsoft
[11/04/2008|20:08] C:\DOCUME~1\SELUK~1\APPLIC~1\Mozilla
[12/04/2008|11:21] C:\DOCUME~1\SELUK~1\APPLIC~1\MuralPix
[11/04/2008|22:08] C:\DOCUME~1\SELUK~1\APPLIC~1\Nero
[21/04/2008|21:52] C:\DOCUME~1\SELUK~1\APPLIC~1\Nokia Multimedia Player
[11/04/2008|22:22] C:\DOCUME~1\SELUK~1\APPLIC~1\Notepad++
[11/04/2008|21:19] C:\DOCUME~1\SELUK~1\APPLIC~1\OpenOffice.org2
[18/04/2008|15:18] C:\DOCUME~1\SELUK~1\APPLIC~1\PC Suite
[11/04/2008|20:35] C:\DOCUME~1\SELUK~1\APPLIC~1\road about owns
[11/04/2008|21:32] C:\DOCUME~1\SELUK~1\APPLIC~1\ScanSoft
[14/04/2008|21:01] C:\DOCUME~1\SELUK~1\APPLIC~1\SecuROM
[02/05/2006|12:10] C:\DOCUME~1\SELUK~1\APPLIC~1\Sun
[12/04/2008|00:06] C:\DOCUME~1\SELUK~1\APPLIC~1\SystemRequirementsLab
[12/04/2008|16:04] C:\DOCUME~1\SELUK~1\APPLIC~1\TeamViewer
[22/04/2008|14:56] C:\DOCUME~1\SELUK~1\APPLIC~1\uTorrent
[11/04/2008|20:54] C:\DOCUME~1\SELUK~1\APPLIC~1\vlc
[11/04/2008|20:15] C:\DOCUME~1\SELUK~1\APPLIC~1\WinRAR
[02/05/2006|12:02] C:\DOCUME~1\SELUK~1\APPLIC~1\You've Got Pictures Screensaver

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[22/04/2008 13:03][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[22/04/2008 02:02][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
[22/04/2008 17:22][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[22/04/2008|18:43] C:\Program Files\.
[22/04/2008|18:43] C:\Program Files\..
[18/04/2008|22:05] C:\Program Files\Adobe
[13/04/2008|22:12] C:\Program Files\Alcohol Soft
[16/04/2008|16:23] C:\Program Files\Amadis Software
[11/04/2008|22:38] C:\Program Files\AntivirusFirewall
[22/04/2008|13:03] C:\Program Files\Apple Software Update
[11/04/2008|21:30] C:\Program Files\ArcSoft
[21/04/2008|14:59] C:\Program Files\ATI Technologies
[12/04/2008|11:03] C:\Program Files\Auslogics
[11/04/2008|22:35] C:\Program Files\CA
[11/04/2008|21:34] C:\Program Files\Canon
[11/04/2008|21:28] C:\Program Files\CanonBJ
[11/04/2008|20:09] C:\Program Files\CCleaner
[02/05/2006|10:14] C:\Program Files\Common Files
[02/05/2006|12:07] C:\Program Files\CyberLink
[11/04/2008|22:40] C:\Program Files\DAEMON Tools Lite
[19/04/2008|02:48] C:\Program Files\DVDVideoSoft
[22/04/2008|13:13] C:\Program Files\Fichiers communs
[18/04/2008|22:53] C:\Program Files\Google
[11/04/2008|20:28] C:\Program Files\GRETECH
[12/04/2008|10:53] C:\Program Files\inKline Global
[21/04/2008|14:59] C:\Program Files\InstallShield Installation Information
[02/05/2006|10:51] C:\Program Files\Intel
[12/04/2008|10:39] C:\Program Files\Internet Explorer
[22/04/2008|13:14] C:\Program Files\iPod
[22/04/2008|13:14] C:\Program Files\iTunes
[11/04/2008|22:13] C:\Program Files\Java
[18/04/2008|22:15] C:\Program Files\K-Lite Codec Pack
[15/04/2008|21:53] C:\Program Files\KONAMI
[17/04/2008|23:52] C:\Program Files\Lavasoft
[02/05/2006|12:02] C:\Program Files\Learn2.com
[11/04/2008|20:18] C:\Program Files\LimeWire
[02/05/2006|11:23] C:\Program Files\Messenger
[11/04/2008|20:34] C:\Program Files\Messenger Plus! Live
[13/04/2008|03:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[28/04/2006|09:30] C:\Program Files\microsoft frontpage
[11/04/2008|21:04] C:\Program Files\Microsoft LifeCam
[11/04/2008|23:37] C:\Program Files\Microsoft Plus! Digital Media Edition
[28/04/2006|09:27] C:\Program Files\Movie Maker
[22/04/2008|17:25] C:\Program Files\Mozilla Firefox
[28/04/2006|09:22] C:\Program Files\MSN
[28/04/2006|09:23] C:\Program Files\MSN Gaming Zone
[13/04/2008|03:01] C:\Program Files\MSXML 4.0
[12/04/2008|11:21] C:\Program Files\MuralPix
[11/04/2008|22:06] C:\Program Files\Nero
[11/04/2008|22:09] C:\Program Files\NeroInstall.bak
[28/04/2006|09:27] C:\Program Files\NetMeeting
[21/04/2008|21:34] C:\Program Files\Nokia
[11/04/2008|20:32] C:\Program Files\Notepad++
[28/04/2006|09:25] C:\Program Files\Online Services
[11/04/2008|21:11] C:\Program Files\OpenOffice.org 2.4
[11/04/2008|22:20] C:\Program Files\Outlook Express
[14/04/2008|15:18] C:\Program Files\QuickTime
[02/05/2006|12:02] C:\Program Files\Real
[11/04/2008|20:34] C:\Program Files\road about owns
[11/04/2008|21:32] C:\Program Files\ScanSoft
[28/04/2006|09:28] C:\Program Files\Services en ligne
[18/04/2008|20:50] C:\Program Files\Spybot - Search & Destroy
[12/04/2008|00:06] C:\Program Files\SystemRequirementsLab
[12/04/2008|15:55] C:\Program Files\TeamViewer3
[21/04/2008|00:58] C:\Program Files\Torrents Open Registrations Checker
[21/04/2008|00:58] C:\Program Files\Tracker Checker 2
[22/04/2008|18:01] C:\Program Files\Trend Micro
[12/04/2008|10:39] C:\Program Files\Uninstall Information
[15/04/2008|02:53] C:\Program Files\uTorrent
[11/04/2008|20:43] C:\Program Files\VideoLAN
[02/05/2006|12:02] C:\Program Files\Viewpoint
[02/05/2006|11:18] C:\Program Files\Windows Journal Viewer
[11/04/2008|20:02] C:\Program Files\Windows Live
[11/04/2008|20:52] C:\Program Files\Windows Media Connect 2
[16/04/2008|19:27] C:\Program Files\Windows Media Player
[28/04/2006|09:23] C:\Program Files\Windows NT
[28/04/2006|09:24] C:\Program Files\Windows Plus
[11/04/2008|20:16] C:\Program Files\WinRAR
[02/05/2006|10:14] C:\Program Files\X10 Hardware
[28/04/2006|09:30] C:\Program Files\xerox
[11/04/2008|20:09] C:\Program Files\Yahoo!
[17/04/2008|17:20] C:\Program Files\Zards software

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[22/04/2008|13:13] C:\Program Files\Fichiers communs\.
[22/04/2008|13:13] C:\Program Files\Fichiers communs\..
[18/04/2008|22:06] C:\Program Files\Fichiers communs\Adobe
[11/04/2008|19:52] C:\Program Files\Fichiers communs\AOL
[11/04/2008|19:51] C:\Program Files\Fichiers communs\aolshare
[22/04/2008|13:13] C:\Program Files\Fichiers communs\Apple
[19/04/2008|02:49] C:\Program Files\Fichiers communs\DVDVideoSoft
[21/04/2008|14:55] C:\Program Files\Fichiers communs\InstallShield
[02/05/2006|11:56] C:\Program Files\Fichiers communs\Java
[15/04/2008|00:37] C:\Program Files\Fichiers communs\Microsoft Shared
[28/04/2006|09:27] C:\Program Files\Fichiers communs\MSSoap
[11/04/2008|22:07] C:\Program Files\Fichiers communs\Nero
[21/04/2008|21:33] C:\Program Files\Fichiers communs\Nokia
[02/05/2006|12:02] C:\Program Files\Fichiers communs\Nullsoft
[21/04/2008|21:33] C:\Program Files\Fichiers communs\PCSuite
[02/05/2006|12:02] C:\Program Files\Fichiers communs\Real
[11/04/2008|21:32] C:\Program Files\Fichiers communs\ScanSoft Shared
[28/04/2006|09:27] C:\Program Files\Fichiers communs\Services
[28/04/2006|11:18] C:\Program Files\Fichiers communs\SpeechEngines
[11/04/2008|22:20] C:\Program Files\Fichiers communs\System
[11/04/2008|20:02] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[18/04/2008|20:51] C:\Program Files\Fichiers communs\Wise Installation Wizard

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-22 18:44:13
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\system32\hgNnmnmp.ini2
C:\WINDOWS\system32\hOWENqru.ini2
C:\WINDOWS\system32\ilkUDJjl.ini2
C:\WINDOWS\system32\IPprqqru.ini2
C:\WINDOWS\system32\VCMUFfhk.ini2
! VUNDO Possible !

/!\ [Fich:358][Doss:52] C:\DOCUME~1\SELUK~1\LOCALS~1\Temp
/!\ [Fich:38][Doss:0] C:\DOCUME~1\SELUK~1\Cookies
/!\ [Fich:1531][Doss:5] C:\DOCUME~1\SELUK~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 18:45:08,65 ]----------------------

sergio1907

Profil : IDNaute

Plus d'informations

22-04-2008 à 18:52:51

Masquer

Surprise, j'ai réussi à avoir le Bureau après plusieurs essai
Merci et A+

Angeldark

Profil : Helper

Plus d'informations

Dans l'actualité

Les téléchargements

Les dernières actualités

Les derniers dossiers