[Résolu]Mon Ordinateur s'eteint ( téléchargements, analyse disque )

salut ,c'est un portable ,une tour, qu'el systeme,xp,vista,...merci de donner + d'infos

Bonjour,

Télécharge Hijackthis (de Trend Micro) sur ton Bureau.

• Double clique sur HJTInstall.exe pour lancer l'installation.
• Clique sur Install.
• Double clique sur le raccourci d'HijackThis qui vient d'être créé pour le lancer. (Clique droit -> lancer en tant qu'admin si sous Vista)
• Accepte la licence en cliquant sur Yes.
• Clique sur Do a system scan and save a logfile.
• Poste ici le rapport généré.

Note : Le rapport se trouve également ici : C:\Program Files\Trend Micro\Hijackthis\Hijackthis.log

Aide : Comment utiliser HijackThis.

Re,

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

• Lance l'installation du programme en exécutant le fichier téléchargé.
• Double-clique maintenant sur le raccourci de Toolbar-S&D.
• Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
• Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
• Poste le rapport généré. (C:\TB.txt)

Jai retrouvé, j'espère que le fichier est Bon...

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : thierry raguet ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
[ 27/07/2008 | 14:13:59,37 ] [ PC : YOUR-E3H5ZY71RR ]
[ MAJ : 25-07-2008 | 17:35 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\JMK7BPGT\tracking_conduit[1].swf
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\C2R7K2WR\hdr_selectionner[1].gif
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@hotbar[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@mysearchnow[1].txt
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\HTPCNX7Q\btn-AccurateMySearch01[1].gif
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\SB73YW1T\mysearchnow[1].htm
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@myway[2].txt
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar
C:\Program Files\MyWebSearch\SrchAstt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@mywebsearch[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@search.mywebsearch[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@hosted.zango[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@www.zango[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@zango[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@2020search[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@ws1.2020search[1].txt
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\CLUR0TQN\sn=wanadoo.vig&pn=sky_hp_abhd_une[1].w&sz=160x600&ord=9688488241
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\M5O4R7R9\1618848245@Right3,Frame2,x01,TopLeft,Middle,Position1,Position2,Position3[1]
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\QH7GXWZ6\cosmique-1[74].jpg
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\QH7GXWZ6\epicurien13-1[45].jpg
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\SSKP46AI\var7=ecommerce;var7=pourelles;var7=footbasketgolf;var7=news;var7=environment;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=8848044278623215[1]
C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\Y3ZM0N3M\ue;var7=ecommerce;var7=news;var8=2;var9=2;var10=2;var11=20;var11=29;var14=24;var14=34;var14=54;var14=59;var14=62;tile=1;sz=300x250;ord=6962288848349112[1]
C:\WINDOWS\System32\f3PSSavr.scr
C:\DOCUME~1\THIERR~1\MENUDM~1\PROGRA~1\DMARRA~1\MyWebSearch Email Plugin.lnk

-----------\\ ToolBar S&D 1.0.7 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : thierry raguet ] [ "C:\Toolbar SD" ] [ Selection : 2 ]
[ 27/07/2008 | 23:29:37,00 ] [ PC : YOUR-E3H5ZY71RR ]
[ MAJ : 25-07-2008 | 17:35 ]

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\JMK7BPGT\tracking_conduit[1].swf
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\C2R7K2WR\hdr_selectionner[1].gif
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@hotbar[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@mysearchnow[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\HTPCNX7Q\btn-AccurateMySearch01[1].gif
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\SB73YW1T\mysearchnow[1].htm
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@myway[2].txt
Supprime! - C:\Program Files\MyWebSearch\bar
Supprime! - C:\Program Files\MyWebSearch\SrchAstt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@mywebsearch[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@search.mywebsearch[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@hosted.zango[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@www.zango[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@zango[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@2020search[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@ws1.2020search[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\CLUR0TQN\sn=wanadoo.vig&pn=sky_hp_abhd_une[1].w&sz=160x600&ord=9688488241
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\M5O4R7R9\1618848245@Right3,Frame2,x01,TopLeft,Middle,Position1,Position2,Position3[1]
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\QH7GXWZ6\cosmique-1[74].jpg
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\QH7GXWZ6\epicurien13-1[45].jpg
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\SSKP46AI\var7=ecommerce;var7=pourelles;var7=footbasketgolf;var7=news;var7=environment;var8=0;var9=0;var10=0;var11=;var14=;tile=1;sz=300x250;ord=8848044278623215[1]
Supprime! - C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5\Y3ZM0N3M\ue;var7=ecommerce;var7=news;var8=2;var9=2;var10=2;var11=20;var11=29;var14=24;var14=34;var14=54;var14=59;var14=62;tile=1;sz=300x250;ord=6962288848349112[1]
Supprime! - C:\WINDOWS\System32\f3PSSavr.scr
Supprime! - C:\DOCUME~1\THIERR~1\MENUDM~1\PROGRA~1\DMARRA~1\MyWebSearch Email Plugin.lnk
Supprime! - C:\Program Files\MyWebSearch

-----------\\ Recherche de Fichiers / Dossiers ...


Rapport hijackthis fait en seconde position :


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.msn.fr/"
"Search Bar"="http://kezivmcqztsyheqkopuz.com/a6dX8u9tn0V/tKma179hmyoWBHhHCXNGZH/wSxEtxgNoBNWncXRxLf_MgxKRp1JH.htm"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


-----------\\ Fin du rapport a 7:44:35,50



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:49:37, on 28/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\PROGRA~1\Wanadoo\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Outlook Express\msimn.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://kezivmcqztsyheqkopuz.com/a6 [...] KRp1JH.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7A36AA2C-0B08-A720-50CE-8E8514A48C1C} - C:\DOCUME~1\THIERR~1\APPLIC~1\KEEPEX~1\aciduser.exe (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - C:\WINDOWS\mslagent\4b_1,0,1,1_mslagent.dll (file missing)
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [COOLVIEW] C:\DOCUME~1\THIERR~1\APPLIC~1\4STYLE~1\winstorecity.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [WOOKIT] "C:\PROGRA~1\Wanadoo\Shell.exe" appLaunchClientZone.shl|PARAM= cnx
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb029
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {17E7DE1A-E636-46E2-B626-E928F7966A2F} (hWebPass Control) - http://www.internetpayant.com/kit/ctrl/hWebPass.ocx
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/288a47 [...] 601_fr.cab
O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com [...] /mDKid.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://jeuxvideo.wanadoo.fr/components/Metaboli.ocx
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1 [...] 586-jc.cab
O16 - DPF: {92ABACFE-EF6E-42C7-A824-D50A914B5B70} (MastaCash Loader Class) - http://dx.mastacash.com/loader.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.c [...] oader5.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/conten [...] loader.cab
O16 - DPF: {F1154108-FB75-47EB-9A7E-4DD28DBDAF34} - http://www.threedegrees.com/td_netd.cab
O20 - AppInit_DLLs: sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
O23 - Service: Remote Accounts Sharing (WksPatch) - Unknown owner - C:\WINDOWS\System32\drivers\svchost.exe (file missing)
O24 - Desktop Component 0: (no name) - file:///CDOCUME~1/THIERR~1/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
O24 - Desktop Component 1: (no name) - http://guidetv.wanadoo.fr/i/2005-0 [...] ker-02.jpg

--
End of file - 11304 bytes

Re

Télécharge Lop S&D.exe (d’ Eric 71) sur ton bureau.

• Double-clique dessus pour lancer l'installation
• Puis double-clique sur le raccourci Lop S&D présent sur ton bureau (Si tu es sous Vista, clique droit -> exécuter en tant qu'admin)
• Séléctionne la langue souhaitée , puis choisis l'Option 1 (Recherche)
• Patiente jusqu'à la fin du scan
• Poste le rapport généré (C:\lopR.txt)

Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "Nouvelle tâche (exécuter)"
Tapes explorer et valide. Cela te fera apparaitre ton bureau

Je contacte le développeur.

Le temps qu'il réponde

C:\Lop SD\App-Prog.lsd
C:\Lop SD\AuDoss.lsd
C:\Lop SD\autrinf.cmd
C:\Lop SD\AWF.cmd
C:\Lop SD\Back.cmd
C:\Lop SD\Boo.reg
C:\Lop SD\BooFix.cmd
C:\Lop SD\catchme.exe
C:\Lop SD\DirectFix.cmd
C:\Lop SD\Doss.lsd
C:\Lop SD\Icon_Lop.ico
C:\Lop SD\KILL.cmd
C:\Lop SD\Langues.cmd
C:\Lop SD\LopScript.cmd
C:\Lop SD\LopSD.cmd
C:\Lop SD\lsTasks.exe
C:\Lop SD\osVer.exe
C:\Lop SD\paths.bat
C:\Lop SD\Proc.txt
C:\Lop SD\Process.exe
C:\Lop SD\RegLop.reg
C:\Lop SD\sed.exe
C:\Lop SD\setpath.exe
C:\Lop SD\S_LopV.cmd
C:\Lop SD\S_LopX.cmd
C:\Lop SD\task.txt
C:\Lop SD\Uninstal.exe

Ok, je ne serai plus là.
Envoie un MP à un autre helper pour continuer ta désinfection

Il n'a pas encore répondu.

"Screnn" c'est a dire ?

bonjour,

J'ai enfin, pu faire, un scan avec "lopsd" je t'ai mis le rapport ci dessous:

-------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : thierry raguet ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/08/2008 | 12:12:31,78 ] [ PC : YOUR-E3H5ZY71RR ]
[ MAJ : 25-07-2008 | 17:45 ]

--------------------\\ Listing des dossiers dans APPLIC~1

[29/08/2003|08:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[29/08/2003|07:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[06/04/2007|15:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[01/09/2003|07:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun

[11/07/2007|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/04/2008|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/04/2008|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[06/04/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[14/06/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[27/07/2008|09:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CA
[22/07/2007|14:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
[29/08/2003|08:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[25/02/2007|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Drv Grey Spam
[07/02/2008|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[12/03/2005|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[25/07/2008|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[17/03/2004|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[22/07/2007|14:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pswi_preloaded.exe
[17/08/2004|02:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[18/03/2008|16:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Save live time 4
[29/08/2003|07:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[09/01/2005|02:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[08/05/2008|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
[18/06/2005|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[15/03/2004|17:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[01/07/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[17/07/2007|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[17/07/2006|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[08/12/2006|05:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[14/04/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[29/06/2008|19:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[29/08/2003|08:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[29/08/2003|07:31] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/09/2003|09:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/09/2003|07:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[09/01/2005|01:59] C:\DOCUME~1\EMULE_~1\APPLIC~1\Microsoft

[30/08/2004|02:27] C:\DOCUME~1\INVIT~1\APPLIC~1\Drag'n Drop CD+DVD
[11/10/2004|17:26] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

[09/05/2008|01:00] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Adobe
[19/07/2008|20:41] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Apple Computer
[29/08/2003|08:05] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\desktop.ini
[29/08/2003|07:31] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Identities
[06/04/2007|15:46] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Microsoft
[01/09/2003|07:34] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Sun

[25/02/2007|16:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[06/04/2007|15:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[06/04/2007|15:46] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


[11/10/2004|17:50] C:\DOCUME~1\thierry\APPLIC~1\Microsoft

[13/03/2008|12:27] C:\DOCUME~1\THIERR~1\APPLIC~1\4 Style Eggs
[21/04/2008|13:44] C:\DOCUME~1\THIERR~1\APPLIC~1\Adobe
[17/04/2007|21:40] C:\DOCUME~1\THIERR~1\APPLIC~1\AdobeUM
[26/07/2008|23:35] C:\DOCUME~1\THIERR~1\APPLIC~1\Apple Computer
[16/03/2004|01:06] C:\DOCUME~1\THIERR~1\APPLIC~1\Arcsoft
[26/03/2007|08:00] C:\DOCUME~1\THIERR~1\APPLIC~1\AVG7
[27/06/2008|15:06] C:\DOCUME~1\THIERR~1\APPLIC~1\Canon
[03/08/2007|19:46] C:\DOCUME~1\THIERR~1\APPLIC~1\Corel
[29/08/2003|08:05] C:\DOCUME~1\THIERR~1\APPLIC~1\desktop.ini
[15/03/2004|17:16] C:\DOCUME~1\THIERR~1\APPLIC~1\Drag'n Drop CD+DVD
[18/08/2004|03:55] C:\DOCUME~1\THIERR~1\APPLIC~1\dvdcss
[18/04/2004|23:33] C:\DOCUME~1\THIERR~1\APPLIC~1\eConf
[25/07/2008|18:44] C:\DOCUME~1\THIERR~1\APPLIC~1\EoRezo
[29/06/2008|15:01] C:\DOCUME~1\THIERR~1\APPLIC~1\GetRightToGo
[03/12/2005|21:28] C:\DOCUME~1\THIERR~1\APPLIC~1\Google
[15/03/2004|16:49] C:\DOCUME~1\THIERR~1\APPLIC~1\Help
[10/07/2004|23:39] C:\DOCUME~1\THIERR~1\APPLIC~1\Hewlett-Packard
[21/11/2006|01:29] C:\DOCUME~1\THIERR~1\APPLIC~1\Identities
[15/03/2004|17:13] C:\DOCUME~1\THIERR~1\APPLIC~1\InterVideo
[06/03/2008|17:04] C:\DOCUME~1\THIERR~1\APPLIC~1\ItsLabel
[06/07/2004|05:34] C:\DOCUME~1\THIERR~1\APPLIC~1\Leadertech
[08/08/2006|11:11] C:\DOCUME~1\THIERR~1\APPLIC~1\Macromedia
[25/07/2008|18:29] C:\DOCUME~1\THIERR~1\APPLIC~1\Microsoft
[22/03/2004|22:43] C:\DOCUME~1\THIERR~1\APPLIC~1\mioObjects
[15/06/2007|20:20] C:\DOCUME~1\THIERR~1\APPLIC~1\Mozilla
[21/03/2004|00:47] C:\DOCUME~1\THIERR~1\APPLIC~1\MSN6
[21/07/2004|15:37] C:\DOCUME~1\THIERR~1\APPLIC~1\PeerNetworking
[05/11/2004|02:05] C:\DOCUME~1\THIERR~1\APPLIC~1\Real
[15/03/2004|17:21] C:\DOCUME~1\THIERR~1\APPLIC~1\ScanSoft
[22/06/2007|19:48] C:\DOCUME~1\THIERR~1\APPLIC~1\SecondLife
[01/09/2003|07:34] C:\DOCUME~1\THIERR~1\APPLIC~1\Sun
[31/12/2004|17:32] C:\DOCUME~1\THIERR~1\APPLIC~1\Symantec
[14/02/2005|00:19] C:\DOCUME~1\THIERR~1\APPLIC~1\vlc
[18/04/2004|23:10] C:\DOCUME~1\THIERR~1\APPLIC~1\Wanadoo visio

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[18/07/2008 23:29][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[07/08/2008 12:00][--ah-----] C:\WINDOWS\tasks\B17F36659068AA49.job
[30/08/2002 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
[07/08/2008 11:39][--ah-c---] C:\WINDOWS\tasks\SA.DAT

( B17F36659068AA49.job )=( c:\docume~1\thierr~1\applic~1\4style~1\moveerrorsettings.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[26/02/2007|01:31] C:\Program Files\4 Style Eggs
[09/01/2005|02:01] C:\Program Files\a2
[09/01/2005|02:10] C:\Program Files\a2 free
[11/07/2007|14:23] C:\Program Files\Adobe
[11/10/2004|04:41] C:\Program Files\Alwil Software
[11/10/2004|17:51] C:\Program Files\Apoint2K
[18/07/2008|23:31] C:\Program Files\Apple Software Update
[15/03/2004|17:19] C:\Program Files\ArcSoft
[11/10/2004|17:51] C:\Program Files\Atheros
[28/03/2005|17:49] C:\Program Files\AvantGo Connect
[28/07/2008|08:36] C:\Program Files\Bonjour
[14/06/2007|20:37] C:\Program Files\Boonty
[12/03/2005|23:22] C:\Program Files\BoontyGames
[27/07/2008|09:50] C:\Program Files\CA
[09/01/2005|01:57] C:\Program Files\Calendrier
[12/05/2006|23:18] C:\Program Files\Calendrier 2006
[15/03/2004|17:21] C:\Program Files\Canon
[16/03/2006|20:13] C:\Program Files\Club-Internet(2)
[05/05/2004|16:36] C:\Program Files\Common Files
[29/08/2003|07:11] C:\Program Files\ComPlus Applications
[09/08/2007|14:03] C:\Program Files\Corel
[20/03/2004|22:20] C:\Program Files\DFX
[09/05/2007|18:40] C:\Program Files\Dial-Messenger
[21/07/2004|16:25] C:\Program Files\directx
[09/01/2005|02:01] C:\Program Files\DivX
[20/07/2005|12:56] C:\Program Files\Drag'n Drop CD+DVD
[14/10/2005|20:48] C:\Program Files\eMule
[11/10/2004|17:21] C:\Program Files\EO Video
[25/07/2008|18:44] C:\Program Files\EoRezo
[11/10/2004|17:53] C:\Program Files\EzButton
[11/10/2004|17:50] C:\Program Files\EzButton(2)
[09/01/2005|02:12] C:\Program Files\fdjeux
[24/07/2008|19:31] C:\Program Files\Fichiers communs
[12/05/2006|23:21] C:\Program Files\FileZilla
[29/04/2004|18:23] C:\Program Files\FunWebProducts
[10/08/2004|06:29] C:\Program Files\FusionSoft DVD Player XP
[09/01/2005|02:01] C:\Program Files\GetRight
[08/08/2006|11:11] C:\Program Files\Google
[25/02/2007|16:16] C:\Program Files\Grisoft
[11/10/2004|17:13] C:\Program Files\Grisoft(2)
[09/01/2005|01:58] C:\Program Files\Hewlett-Packard
[28/03/2005|11:11] C:\Program Files\HP
[11/10/2004|17:25] C:\Program Files\HP(2)
[11/10/2004|16:34] C:\Program Files\HP(3)
[12/05/2004|13:23] C:\Program Files\IncrediMail
[24/07/2008|19:33] C:\Program Files\InstallShield Installation Information
[12/11/2004|03:45] C:\Program Files\Instant Access
[29/08/2003|07:36] C:\Program Files\Intel
[11/06/2008|11:11] C:\Program Files\Internet Explorer
[26/02/2005|19:52] C:\Program Files\InterVideo
[18/04/2007|10:59] C:\Program Files\Inventel
[14/07/2007|14:30] C:\Program Files\Java
[07/02/2008|16:25] C:\Program Files\Kodak
[24/07/2008|19:31] C:\Program Files\Logitech
[25/02/2007|22:18] C:\Program Files\Masta
[11/10/2004|17:58] C:\Program Files\MaXimus DVD v1.2
[17/03/2004|16:21] C:\Program Files\Messager Wanadoo
[26/02/2005|19:58] C:\Program Files\Messenger
[09/01/2005|02:01] C:\Program Files\Messenger Plus! 3(3)
[03/01/2007|04:06] C:\Program Files\Microsoft ActiveSync
[09/05/2007|22:02] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[29/08/2003|07:15] C:\Program Files\microsoft frontpage
[28/03/2005|17:44] C:\Program Files\Microsoft Office
[28/03/2005|17:45] C:\Program Files\Microsoft Visual Studio
[15/03/2004|17:07] C:\Program Files\Microsoft.NET
[20/02/2005|23:01] C:\Program Files\Movie Maker
[21/03/2004|00:51] C:\Program Files\MSN
[09/01/2005|01:57] C:\Program Files\MSN Apps(2)
[09/01/2005|01:56] C:\Program Files\MSN Apps(3)
[09/01/2005|01:52] C:\Program Files\MSN Apps(4)
[09/01/2005|01:41] C:\Program Files\MSN Apps(5)
[29/08/2003|07:10] C:\Program Files\MSN Gaming Zone
[14/04/2008|15:42] C:\Program Files\MSN Messenger
[16/11/2006|09:03] C:\Program Files\MSXML 4.0
[11/06/2004|12:58] C:\Program Files\MUSICMATCH
[05/02/2007|18:06] C:\Program Files\NetMeeting
[30/06/2008|03:22] C:\Program Files\Norton AntiVirus
[11/10/2004|17:55] C:\Program Files\OfficeUpdate11
[08/07/2007|09:40] C:\Program Files\orange
[13/06/2007|10:10] C:\Program Files\Outlook Express
[20/02/2005|22:24] C:\Program Files\palmOne
[06/06/2008|21:06] C:\Program Files\Panda Security
[22/07/2007|14:27] C:\Program Files\Pixarra
[25/07/2008|18:45] C:\Program Files\Player Metaboli
[11/10/2004|17:56] C:\Program Files\QuickTime(2)
[09/01/2005|02:12] C:\Program Files\Real
[15/01/2005|17:07] C:\Program Files\RM-X Player V3
[17/03/2004|15:36] C:\Program Files\SAGEM
[09/01/2005|02:00] C:\Program Files\Satsuki Decoder Pack
[15/03/2004|17:20] C:\Program Files\ScanSoft
[16/10/2005|12:33] C:\Program Files\Screendragon VS4
[29/08/2003|07:12] C:\Program Files\Services en ligne
[11/06/2005|20:46] C:\Program Files\Softwin
[09/01/2005|01:56] C:\Program Files\StarAcademy4(2)
[09/01/2005|01:55] C:\Program Files\Symantec(2)
[11/10/2004|17:50] C:\Program Files\TOSHIBA
[27/07/2008|13:01] C:\Program Files\Trend Micro
[18/04/2004|23:31] C:\Program Files\Trillian
[04/07/2004|01:07] C:\Program Files\Uninstall Information
[30/10/2005|16:56] C:\Program Files\VideoLAN
[05/11/2004|00:18] C:\Program Files\VirginMega
[11/10/2004|17:58] C:\Program Files\Virtuosa
[09/01/2005|01:55] C:\Program Files\Virus Uninstall 2.0 SE
[07/08/2008|12:08] C:\Program Files\Wanadoo
[11/03/2006|18:09] C:\Program Files\Wanadoo Jeux
[18/04/2004|23:09] C:\Program Files\Wanadoovisio
[11/10/2004|17:54] C:\Program Files\WebPass
[25/07/2008|18:23] C:\Program Files\Windows Live
[25/07/2008|10:45] C:\Program Files\Windows Live Toolbar
[21/07/2004|15:00] C:\Program Files\Windows Media Components
[19/02/2006|09:06] C:\Program Files\Windows Media Player
[20/02/2005|22:56] C:\Program Files\Windows NT
[18/06/2007|19:57] C:\Program Files\WindowsUpdate
[11/10/2004|17:50] C:\Program Files\WinZip
[29/08/2003|07:15] C:\Program Files\xerox
[12/11/2004|03:55] C:\Program Files\Xi
[09/05/2007|18:43] C:\Program Files\Yahoo!
[16/07/2007|01:44] C:\Program Files\YesMessenger
[24/03/2004|10:56] C:\Program Files\Zone Labs

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[11/07/2007|14:23] C:\Program Files\Fichiers communs\Adobe
[30/04/2008|16:00] C:\Program Files\Fichiers communs\Apple
[14/06/2007|20:37] C:\Program Files\Fichiers communs\BOONTY Shared
[19/12/2006|17:12] C:\Program Files\Fichiers communs\DESIGNER
[22/07/2007|14:45] C:\Program Files\Fichiers communs\InstallShield
[01/09/2003|07:33] C:\Program Files\Fichiers communs\Java
[21/07/2004|16:25] C:\Program Files\Fichiers communs\Logitech
[12/03/2005|21:58] C:\Program Files\Fichiers communs\Macrovision Shared
[25/07/2008|18:21] C:\Program Files\Fichiers communs\Microsoft Shared
[29/08/2003|07:11] C:\Program Files\Fichiers communs\MSSoap
[29/08/2003|08:06] C:\Program Files\Fichiers communs\ODBC
[06/06/2008|20:40] C:\Program Files\Fichiers communs\Panda Software
[05/11/2004|02:05] C:\Program Files\Fichiers communs\Real
[15/03/2004|17:21] C:\Program Files\Fichiers communs\ScanSoft Shared
[29/08/2003|07:11] C:\Program Files\Fichiers communs\Services
[15/10/2006|17:50] C:\Program Files\Fichiers communs\Softwin
[29/08/2003|08:05] C:\Program Files\Fichiers communs\SpeechEngines
[01/07/2008|13:08] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|10:10] C:\Program Files\Fichiers communs\System
[15/06/2004|04:54] C:\Program Files\Fichiers communs\Totem Shared
[14/04/2008|15:38] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 41 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\THIERR~1\APPLIC~1\4style~1
C:\Program Files\4style~1
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@advertstream[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@ad.havasadvertisingsports[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@advertising[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@banner.casinoking[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@banner.cotedazurpalace[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@cotedazurpalace[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@adopt.euroclick[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@partygaming.122.2o7[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@partypoker[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@32vegas[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@banner.32vegas[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@www.32vegas[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@gamedata.2xmoinscher[1].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@2xmoinscher[2].txt
C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@www.2xmoinscher[1].txt
C:\WINDOWS\Tasks\B17F36659068AA49.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COOLVIEW"="C:\\DOCUME~1\\THIERR~1\\APPLIC~1\\4STYLE~1\\winstorecity.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 72 [ 70 ## added by CiD ]

/!\ 1 Not 127.0.0.1 !!

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-07 12:21:17
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\Program Files\Instant Access
C:\Program Files\Instant Access\Center
C:\Program Files\Instant Access\DesktopIcons
C:\Program Files\Instant Access\Dialer
C:\Program Files\Instant Access\Multi
C:\Program Files\Instant Access\P2E

C:\WINDOWS\System32\zfqmdegvl.dat
C:\WINDOWS\System32\zfqmdegvl_nav.dat
C:\WINDOWS\System32\zfqmdegvl_navps.dat
==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[10].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[11].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[12].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[13].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[14].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[15].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[16].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[17].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[18].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[19].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[1].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[20].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[21].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[22].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[23].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[24].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[25].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[26].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[27].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[28].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[29].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[2].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[30].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[31].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[32].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[33].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[34].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[35].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[36].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[37].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[38].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[39].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[3].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[40].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[41].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[42].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[43].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[44].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[45].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[46].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[47].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[48].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[49].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[4].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[50].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[51].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[52].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[53].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[54].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[55].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[56].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[57].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[58].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[59].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[5].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[60].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[61].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[62].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[63].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[64].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[65].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[66].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[67].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[68].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[69].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[6].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[70].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[71].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[72].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[73].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[74].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[75].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[76].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[77].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[78].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[79].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[7].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[80].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[81].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[82].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[83].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[84].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[85].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[86].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[87].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[88].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[89].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[8].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[90].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[91].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[92].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[93].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[94].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[95].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[96].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[97].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[98].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[99].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[9].jpg


[F:3551][D:182]-> C:\DOCUME~1\THIERR~1\LOCALS~1\Temp
[F:3353][D:0]-> C:\DOCUME~1\THIERR~1\Cookies
[F:291751][D:78]-> C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 15:09:22,67

Cordialement.

Bonjour,

Concernant ta demande , celle-ci a été faite sur"Hardware", ton collègue m'a demandé les températures ainsi que la config"post le 6_08_2008 19h46, en attente de réponse.Merci encore pour ta compréhension

Je fais les manipulations demandées de suite.

Cordialement

RE,

Voici les rapports :



--------------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : thierry raguet ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 08/08/2008 | 9:55:45,85 ] [ PC : YOUR-E3H5ZY71RR ]
[ MAJ : 25-07-2008 | 17:45 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@advertstream[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@ad.havasadvertisingsports[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@advertising[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@banner.casinoking[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@adopt.euroclick[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@partygaming.122.2o7[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@partypoker[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@32vegas[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@banner.32vegas[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@www.32vegas[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry raguet@gamedata.2xmoinscher[1].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@2xmoinscher[2].txt
Supprime! - C:\DOCUME~1\THIERR~1\Cookies\thierry_raguet@www.2xmoinscher[1].txt
Supprime! - C:\WINDOWS\Tasks\B17F36659068AA49.job
Supprime! - C:\DOCUME~1\THIERR~1\APPLIC~1\4style~1
Supprime! - C:\Program Files\4style~1
RestaurÚ! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[29/08/2003|08:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[29/08/2003|07:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[06/04/2007|15:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[01/09/2003|07:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun

[11/07/2007|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/04/2008|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/04/2008|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[06/04/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
[14/06/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[27/07/2008|09:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CA
[22/07/2007|14:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
[29/08/2003|08:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[25/02/2007|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Drv Grey Spam
[07/02/2008|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[12/03/2005|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[25/07/2008|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[17/03/2004|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[22/07/2007|14:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pswi_preloaded.exe
[17/08/2004|02:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[18/03/2008|16:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Save live time 4
[29/08/2003|07:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[09/01/2005|02:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[08/05/2008|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
[18/06/2005|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[15/03/2004|17:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[01/07/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[17/07/2007|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[17/07/2006|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[08/12/2006|05:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[14/04/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[29/06/2008|19:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[29/08/2003|08:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[29/08/2003|07:31] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/09/2003|09:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/09/2003|07:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[09/01/2005|01:59] C:\DOCUME~1\EMULE_~1\APPLIC~1\Microsoft

[30/08/2004|02:27] C:\DOCUME~1\INVIT~1\APPLIC~1\Drag'n Drop CD+DVD
[11/10/2004|17:26] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

[09/05/2008|01:00] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Adobe
[19/07/2008|20:41] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Apple Computer
[29/08/2003|08:05] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\desktop.ini
[29/08/2003|07:31] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Identities
[06/04/2007|15:46] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Microsoft
[01/09/2003|07:34] C:\DOCUME~1\INVIT~1.YOU\APPLIC~1\Sun

[25/02/2007|16:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[06/04/2007|15:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[06/04/2007|15:46] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


[11/10/2004|17:50] C:\DOCUME~1\thierry\APPLIC~1\Microsoft

[21/04/2008|13:44] C:\DOCUME~1\THIERR~1\APPLIC~1\Adobe
[17/04/2007|21:40] C:\DOCUME~1\THIERR~1\APPLIC~1\AdobeUM
[26/07/2008|23:35] C:\DOCUME~1\THIERR~1\APPLIC~1\Apple Computer
[16/03/2004|01:06] C:\DOCUME~1\THIERR~1\APPLIC~1\Arcsoft
[26/03/2007|08:00] C:\DOCUME~1\THIERR~1\APPLIC~1\AVG7
[27/06/2008|15:06] C:\DOCUME~1\THIERR~1\APPLIC~1\Canon
[03/08/2007|19:46] C:\DOCUME~1\THIERR~1\APPLIC~1\Corel
[29/08/2003|08:05] C:\DOCUME~1\THIERR~1\APPLIC~1\desktop.ini
[15/03/2004|17:16] C:\DOCUME~1\THIERR~1\APPLIC~1\Drag'n Drop CD+DVD
[18/08/2004|03:55] C:\DOCUME~1\THIERR~1\APPLIC~1\dvdcss
[18/04/2004|23:33] C:\DOCUME~1\THIERR~1\APPLIC~1\eConf
[25/07/2008|18:44] C:\DOCUME~1\THIERR~1\APPLIC~1\EoRezo
[29/06/2008|15:01] C:\DOCUME~1\THIERR~1\APPLIC~1\GetRightToGo
[03/12/2005|21:28] C:\DOCUME~1\THIERR~1\APPLIC~1\Google
[15/03/2004|16:49] C:\DOCUME~1\THIERR~1\APPLIC~1\Help
[10/07/2004|23:39] C:\DOCUME~1\THIERR~1\APPLIC~1\Hewlett-Packard
[21/11/2006|01:29] C:\DOCUME~1\THIERR~1\APPLIC~1\Identities
[15/03/2004|17:13] C:\DOCUME~1\THIERR~1\APPLIC~1\InterVideo
[06/03/2008|17:04] C:\DOCUME~1\THIERR~1\APPLIC~1\ItsLabel
[06/07/2004|05:34] C:\DOCUME~1\THIERR~1\APPLIC~1\Leadertech
[08/08/2006|11:11] C:\DOCUME~1\THIERR~1\APPLIC~1\Macromedia
[25/07/2008|18:29] C:\DOCUME~1\THIERR~1\APPLIC~1\Microsoft
[22/03/2004|22:43] C:\DOCUME~1\THIERR~1\APPLIC~1\mioObjects
[15/06/2007|20:20] C:\DOCUME~1\THIERR~1\APPLIC~1\Mozilla
[21/03/2004|00:47] C:\DOCUME~1\THIERR~1\APPLIC~1\MSN6
[21/07/2004|15:37] C:\DOCUME~1\THIERR~1\APPLIC~1\PeerNetworking
[05/11/2004|02:05] C:\DOCUME~1\THIERR~1\APPLIC~1\Real
[15/03/2004|17:21] C:\DOCUME~1\THIERR~1\APPLIC~1\ScanSoft
[22/06/2007|19:48] C:\DOCUME~1\THIERR~1\APPLIC~1\SecondLife
[01/09/2003|07:34] C:\DOCUME~1\THIERR~1\APPLIC~1\Sun
[31/12/2004|17:32] C:\DOCUME~1\THIERR~1\APPLIC~1\Symantec
[14/02/2005|00:19] C:\DOCUME~1\THIERR~1\APPLIC~1\vlc
[18/04/2004|23:10] C:\DOCUME~1\THIERR~1\APPLIC~1\Wanadoo visio

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[18/07/2008 23:29][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[30/08/2002 15:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
[08/08/2008 09:22][--ah-c---] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[09/01/2005|02:01] C:\Program Files\a2
[09/01/2005|02:10] C:\Program Files\a2 free
[11/07/2007|14:23] C:\Program Files\Adobe
[11/10/2004|04:41] C:\Program Files\Alwil Software
[11/10/2004|17:51] C:\Program Files\Apoint2K
[18/07/2008|23:31] C:\Program Files\Apple Software Update
[15/03/2004|17:19] C:\Program Files\ArcSoft
[11/10/2004|17:51] C:\Program Files\Atheros
[28/03/2005|17:49] C:\Program Files\AvantGo Connect
[28/07/2008|08:36] C:\Program Files\Bonjour
[14/06/2007|20:37] C:\Program Files\Boonty
[12/03/2005|23:22] C:\Program Files\BoontyGames
[27/07/2008|09:50] C:\Program Files\CA
[09/01/2005|01:57] C:\Program Files\Calendrier
[12/05/2006|23:18] C:\Program Files\Calendrier 2006
[15/03/2004|17:21] C:\Program Files\Canon
[16/03/2006|20:13] C:\Program Files\Club-Internet(2)
[05/05/2004|16:36] C:\Program Files\Common Files
[29/08/2003|07:11] C:\Program Files\ComPlus Applications
[09/08/2007|14:03] C:\Program Files\Corel
[20/03/2004|22:20] C:\Program Files\DFX
[09/05/2007|18:40] C:\Program Files\Dial-Messenger
[21/07/2004|16:25] C:\Program Files\directx
[09/01/2005|02:01] C:\Program Files\DivX
[20/07/2005|12:56] C:\Program Files\Drag'n Drop CD+DVD
[14/10/2005|20:48] C:\Program Files\eMule
[11/10/2004|17:21] C:\Program Files\EO Video
[25/07/2008|18:44] C:\Program Files\EoRezo
[11/10/2004|17:53] C:\Program Files\EzButton
[11/10/2004|17:50] C:\Program Files\EzButton(2)
[09/01/2005|02:12] C:\Program Files\fdjeux
[24/07/2008|19:31] C:\Program Files\Fichiers communs
[12/05/2006|23:21] C:\Program Files\FileZilla
[29/04/2004|18:23] C:\Program Files\FunWebProducts
[10/08/2004|06:29] C:\Program Files\FusionSoft DVD Player XP
[09/01/2005|02:01] C:\Program Files\GetRight
[08/08/2006|11:11] C:\Program Files\Google
[25/02/2007|16:16] C:\Program Files\Grisoft
[11/10/2004|17:13] C:\Program Files\Grisoft(2)
[09/01/2005|01:58] C:\Program Files\Hewlett-Packard
[28/03/2005|11:11] C:\Program Files\HP
[11/10/2004|17:25] C:\Program Files\HP(2)
[11/10/2004|16:34] C:\Program Files\HP(3)
[12/05/2004|13:23] C:\Program Files\IncrediMail
[24/07/2008|19:33] C:\Program Files\InstallShield Installation Information
[12/11/2004|03:45] C:\Program Files\Instant Access
[29/08/2003|07:36] C:\Program Files\Intel
[11/06/2008|11:11] C:\Program Files\Internet Explorer
[26/02/2005|19:52] C:\Program Files\InterVideo
[18/04/2007|10:59] C:\Program Files\Inventel
[14/07/2007|14:30] C:\Program Files\Java
[07/02/2008|16:25] C:\Program Files\Kodak
[07/08/2008|18:32] C:\Program Files\Lavalys
[24/07/2008|19:31] C:\Program Files\Logitech
[25/02/2007|22:18] C:\Program Files\Masta
[11/10/2004|17:58] C:\Program Files\MaXimus DVD v1.2
[17/03/2004|16:21] C:\Program Files\Messager Wanadoo
[26/02/2005|19:58] C:\Program Files\Messenger
[09/01/2005|02:01] C:\Program Files\Messenger Plus! 3(3)
[03/01/2007|04:06] C:\Program Files\Microsoft ActiveSync
[09/05/2007|22:02] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[29/08/2003|07:15] C:\Program Files\microsoft frontpage
[28/03/2005|17:44] C:\Program Files\Microsoft Office
[28/03/2005|17:45] C:\Program Files\Microsoft Visual Studio
[15/03/2004|17:07] C:\Program Files\Microsoft.NET
[20/02/2005|23:01] C:\Program Files\Movie Maker
[21/03/2004|00:51] C:\Program Files\MSN
[09/01/2005|01:57] C:\Program Files\MSN Apps(2)
[09/01/2005|01:56] C:\Program Files\MSN Apps(3)
[09/01/2005|01:52] C:\Program Files\MSN Apps(4)
[09/01/2005|01:41] C:\Program Files\MSN Apps(5)
[29/08/2003|07:10] C:\Program Files\MSN Gaming Zone
[14/04/2008|15:42] C:\Program Files\MSN Messenger
[16/11/2006|09:03] C:\Program Files\MSXML 4.0
[11/06/2004|12:58] C:\Program Files\MUSICMATCH
[08/08/2008|09:54] C:\Program Files\Navilog1
[05/02/2007|18:06] C:\Program Files\NetMeeting
[30/06/2008|03:22] C:\Program Files\Norton AntiVirus
[11/10/2004|17:55] C:\Program Files\OfficeUpdate11
[08/07/2007|09:40] C:\Program Files\orange
[13/06/2007|10:10] C:\Program Files\Outlook Express
[20/02/2005|22:24] C:\Program Files\palmOne
[06/06/2008|21:06] C:\Program Files\Panda Security
[22/07/2007|14:27] C:\Program Files\Pixarra
[25/07/2008|18:45] C:\Program Files\Player Metaboli
[11/10/2004|17:56] C:\Program Files\QuickTime(2)
[09/01/2005|02:12] C:\Program Files\Real
[15/01/2005|17:07] C:\Program Files\RM-X Player V3
[17/03/2004|15:36] C:\Program Files\SAGEM
[09/01/2005|02:00] C:\Program Files\Satsuki Decoder Pack
[15/03/2004|17:20] C:\Program Files\ScanSoft
[16/10/2005|12:33] C:\Program Files\Screendragon VS4
[29/08/2003|07:12] C:\Program Files\Services en ligne
[11/06/2005|20:46] C:\Program Files\Softwin
[09/01/2005|01:56] C:\Program Files\StarAcademy4(2)
[09/01/2005|01:55] C:\Program Files\Symantec(2)
[11/10/2004|17:50] C:\Program Files\TOSHIBA
[27/07/2008|13:01] C:\Program Files\Trend Micro
[18/04/2004|23:31] C:\Program Files\Trillian
[04/07/2004|01:07] C:\Program Files\Uninstall Information
[30/10/2005|16:56] C:\Program Files\VideoLAN
[05/11/2004|00:18] C:\Program Files\VirginMega
[11/10/2004|17:58] C:\Program Files\Virtuosa
[09/01/2005|01:55] C:\Program Files\Virus Uninstall 2.0 SE
[08/08/2008|09:52] C:\Program Files\Wanadoo
[11/03/2006|18:09] C:\Program Files\Wanadoo Jeux
[18/04/2004|23:09] C:\Program Files\Wanadoovisio
[11/10/2004|17:54] C:\Program Files\WebPass
[25/07/2008|18:23] C:\Program Files\Windows Live
[25/07/2008|10:45] C:\Program Files\Windows Live Toolbar
[21/07/2004|15:00] C:\Program Files\Windows Media Components
[19/02/2006|09:06] C:\Program Files\Windows Media Player
[20/02/2005|22:56] C:\Program Files\Windows NT
[18/06/2007|19:57] C:\Program Files\WindowsUpdate
[11/10/2004|17:50] C:\Program Files\WinZip
[29/08/2003|07:15] C:\Program Files\xerox
[12/11/2004|03:55] C:\Program Files\Xi
[09/05/2007|18:43] C:\Program Files\Yahoo!
[16/07/2007|01:44] C:\Program Files\YesMessenger
[24/03/2004|10:56] C:\Program Files\Zone Labs

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[11/07/2007|14:23] C:\Program Files\Fichiers communs\Adobe
[30/04/2008|16:00] C:\Program Files\Fichiers communs\Apple
[14/06/2007|20:37] C:\Program Files\Fichiers communs\BOONTY Shared
[19/12/2006|17:12] C:\Program Files\Fichiers communs\DESIGNER
[22/07/2007|14:45] C:\Program Files\Fichiers communs\InstallShield
[01/09/2003|07:33] C:\Program Files\Fichiers communs\Java
[21/07/2004|16:25] C:\Program Files\Fichiers communs\Logitech
[12/03/2005|21:58] C:\Program Files\Fichiers communs\Macrovision Shared
[25/07/2008|18:21] C:\Program Files\Fichiers communs\Microsoft Shared
[29/08/2003|07:11] C:\Program Files\Fichiers communs\MSSoap
[29/08/2003|08:06] C:\Program Files\Fichiers communs\ODBC
[06/06/2008|20:40] C:\Program Files\Fichiers communs\Panda Software
[05/11/2004|02:05] C:\Program Files\Fichiers communs\Real
[15/03/2004|17:21] C:\Program Files\Fichiers communs\ScanSoft Shared
[29/08/2003|07:11] C:\Program Files\Fichiers communs\Services
[15/10/2006|17:50] C:\Program Files\Fichiers communs\Softwin
[29/08/2003|08:05] C:\Program Files\Fichiers communs\SpeechEngines
[01/07/2008|13:08] C:\Program Files\Fichiers communs\Symantec Shared
[13/06/2007|10:10] C:\Program Files\Fichiers communs\System
[15/06/2004|04:54] C:\Program Files\Fichiers communs\Totem Shared
[14/04/2008|15:38] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 40 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-08 10:06:09
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\Program Files\Instant Access
C:\Program Files\Instant Access\Center
C:\Program Files\Instant Access\DesktopIcons
C:\Program Files\Instant Access\Dialer
C:\Program Files\Instant Access\Multi
C:\Program Files\Instant Access\P2E

C:\WINDOWS\System32\zfqmdegvl.dat
C:\WINDOWS\System32\zfqmdegvl_nav.dat
C:\WINDOWS\System32\zfqmdegvl_navps.dat
==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[10].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[11].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[12].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[13].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[14].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[15].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[16].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[17].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[18].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[19].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[1].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[20].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[21].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[22].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[23].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[24].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[25].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[26].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[27].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[28].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[29].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[2].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[30].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[31].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[32].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[33].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[34].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[35].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[36].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[37].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[38].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[39].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[3].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[40].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[41].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[42].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[43].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[44].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[45].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[46].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[47].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[48].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[49].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[4].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[50].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[51].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[52].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[53].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[54].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[55].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[56].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[57].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[58].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[59].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[5].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[60].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[61].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[62].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[63].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[64].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[65].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[66].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[67].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[68].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[69].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[6].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[70].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[71].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[72].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[73].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[74].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[75].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[76].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[77].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[78].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[79].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[7].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[80].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[81].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[82].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[83].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[84].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[85].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[86].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[87].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[88].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[89].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[8].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[90].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[91].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[92].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[93].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[94].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[95].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[96].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[97].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[98].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[99].jpg
=> C:\DOCUME~1\THIERR~1\Local Settings\Temporary Internet Files\Content.IE5\QH7GXWZ6\ttcrack-1[9].jpg


[F:3563][D:183]-> C:\DOCUME~1\THIERR~1\LOCALS~1\Temp
[F:3344][D:0]-> C:\DOCUME~1\THIERR~1\Cookies
[F:293154][D:78]-> C:\DOCUME~1\THIERR~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 12:57:17,34




Search Navipromo version 3.6.2 commencé le 08/08/2008 à 13:03:59,96

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "thierry raguet"

Mise à jour le 07.08.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***

...\Instant Access trouvé !

*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\THIERR~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\EMULE_~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1.YOU\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\thierry\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\THIERR~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\EMULE_~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1.YOU\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\thierry\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\THIERR~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1.YOU\menudm~1\progra~1" ***


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\DOCUME~1\THIERR~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\EMULE_~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\INVIT~1.YOU\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\thierry\locals~1\applic~1" *



*** Recherche fichiers ***


C:\WINDOWS\Downloaded Program Files\EGCOMSERVICE_pack.inf trouvé !
C:\WINDOWS\Downloaded Program Files\netia32.inf trouvé !
C:\WINDOWS\Downloaded Program Files\netpe32.inf trouvé !
C:\WINDOWS\Downloaded Program Files\nethv32.inf trouvé !
C:\WINDOWS\Downloaded Program Files\LiveService.inf trouvé !
C:\WINDOWS\system32\eglivecam.dll trouvé !
C:\WINDOWS\system32\msegcompid.dll trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !
HKEY_CURRENT_USER\Software\mc trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

zfqmdegvl.dat trouvé !
zfqmdegvl_nav.dat trouvé !
zfqmdegvl_navps.dat trouvé !

* Dans "C:\DOCUME~1\THIERR~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\EMULE_~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\INVIT~1.YOU\locals~1\applic~1" :


* Dans "C:\DOCUME~1\thierry\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 08/08/2008 à 13:08:02,46 ***


Cordialement

Bonjour,

Voici les rapports que tu m'as demandé da

Bonjour,

Le certificat "Montorgueil" est bien installé, voir dans precedent message. correspond a la 4 colonne <aucun>

Bonjour,

J'ai fais les manipulations demandées, il ya un souci, impossible de faire un copier coller sur 'Link to topic' et sur la case 'Browse to the file' il n'y a qu'un chemin d'accès'Parcourir' j'ai donc, fais la manipulation suivante:

parcourir===bureau====certificat "Montorgueil"et valider, le rapport a été envoyé.

Je resume un seul certificat a pu etre envoyé.

Cordialement

RE,


Voici le rapport

-----------\\ ToolBar S&D 1.0.8 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : thierry raguet ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
[ 09/08/2008 | 14:41:25,10 ] [ PC : YOUR-E3H5ZY71RR ]
[ MAJ : 04-08-2008 | 23:15 ]

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.msn.fr/"
"Search Bar"="http://kezivmcqztsyheqkopuz.com/a6dX8u9tn0V/tKma179hmyoWBHhHCXNGZH/wSxEtxgNoBNWncXRxLf_MgxKRp1JH.htm"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


-----------\\ Fin du rapport a 15:25:15,37

J'effectue les secondes manipulations et je post de suite.

Cordialement

Bonjour,

J'ai enfin terminé le scaning sur"SDFix.exe", rapport a l'instant :


catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-10 20:38:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0






SDFix: Version 1.214
Run by thierry raguet on 09/08/2008 at 17:50

Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\THIERR~1\Bureau\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

No Trojan Files Found






Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-10 20:38:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:*:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WcesMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WcesMgr.exe:*:Enabled:ActiveSync Application"
"C:\\Program Files\\FileZilla\\FileZilla.exe"="C:\\Program Files\\FileZilla\\FileZilla.exe:*:Enabled:FileZilla"
"C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"="C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Kodak Photo Voice\\Kodak Photo Voice.exe"="C:\\Program Files\\Kodak Photo Voice\\Kodak Photo Voice.exe:*:Enabled:Kodak Photo Voice"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\Player Video StarAcademy Orange\\starac06.exe"="C:\\Program Files\\Player Video StarAcademy Orange\\starac06.exe:*isabledneClick"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\system32\\rtcshare.exe"="C:\\WINDOWS\\system32\\rtcshare.exe:*:Enabledartage de l'application RTC"
"C:\\Program Files\\NetMeeting\\conf.exe"="C:\\Program Files\\NetMeeting\\conf.exe:*:Enabled:Windows© NetMeeting©"
"C:\\Documents and Settings\\thierry raguet\\Bureau\\SecondLife\\SecondLife.exe"="C:\\Documents and Settings\\thierry raguet\\Bureau\\SecondLife\\SecondLife.exe:*:Enabled:Second Life"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

Remaining Files :



Files with Hidden Attributes :

Wed 25 Jul 2007 88 ..SHR --- "C:\WINDOWS\system32\BAE532773E.sys"
Fri 3 Aug 2007 3,350 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Sat 21 Aug 2004 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 21 Aug 2004 4,348 ...H. --- "C:\Documents and Settings\thierry raguet\Mes documents\drmv1key.bak"
Sat 11 Dec 2004 20 A..H. --- "C:\Documents and Settings\thierry raguet\Mes documents\drmv1lic.bak"
Thu 18 Mar 2004 400 A.SH. --- "C:\Documents and Settings\thierry raguet\Mes documents\drmv2key.bak"
Thu 8 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\24af2a69c06a4de03e35dc89d706475f\BIT3.tmp"
Sat 21 Aug 2004 4,348 ...H. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Wed 13 Dec 2006 20 A..H. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Sat 7 Jan 2006 576 ...H. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Wed 13 Dec 2006 228,864 A..H. --- "C:\Documents and Settings\Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv2lic.bak"
Mon 26 Jul 2004 7,155 A..H. --- "C:\Program Files\MSN Apps(4)\Updater(2)\01.02.3000(2).1001\fr(2)\BIT202.tmp"
Sun 9 Jan 2005 0 A..H. --- "C:\Program Files\MSN Apps(5)\Updater(2)\01.02.3000(2).1001\fr(2)\BITA5.tmp"

Finished!


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:14:31, on 11/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\PROGRA~1\Wanadoo\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Outlook Express\msimn.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://kezivmcqztsyheqkopuz.com/a6 [...] KRp1JH.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7A36AA2C-0B08-A720-50CE-8E8514A48C1C} - C:\DOCUME~1\THIERR~1\APPLIC~1\KEEPEX~1\aciduser.exe (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - C:\WINDOWS\mslagent\4b_1,0,1,1_mslagent.dll (file missing)
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [WOOKIT] "C:\PROGRA~1\Wanadoo\Shell.exe" appLaunchClientZone.shl|PARAM= cnx
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb029
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {17E7DE1A-E636-46E2-B626-E928F7966A2F} (hWebPass Control) - http://www.internetpayant.com/kit/ctrl/hWebPass.ocx
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/288a47 [...] 601_fr.cab
O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com [...] /mDKid.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://jeuxvideo.wanadoo.fr/components/Metaboli.ocx
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1 [...] 586-jc.cab
O16 - DPF: {92ABACFE-EF6E-42C7-A824-D50A914B5B70} (MastaCash Loader Class) - http://dx.mastacash.com/loader.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.c [...] oader5.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/conten [...] loader.cab
O16 - DPF: {F1154108-FB75-47EB-9A7E-4DD28DBDAF34} - http://www.threedegrees.com/td_netd.cab
O20 - AppInit_DLLs: sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll sockspy.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
O23 - Service: Remote Accounts Sharing (WksPatch) - Unknown owner - C:\WINDOWS\System32\drivers\svchost.exe (file missing)
O24 - Desktop Component 0: (no name) - file:///CDOCUME~1/THIERR~1/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
O24 - Desktop Component 1: (no name) - http://guidetv.wanadoo.fr/i/2005-0 [...] ker-02.jpg

--
End of file - 11370 bytes


Cordialement

Bonsoir ,

Concernant ma demande, le conseiller me dit qu'il n'y aurait pas de souci de ce coté là"HARDARWE", notamment sur la température....ou autres, il me préconise une mise à jour "Windows"? , mais toi, qu'en penses -tu ? aurais -je mal exposé le souci? je fais les manipulations demandées et je te renvoie tout le détail des opérations.

Cordialement

re

lis bien la procédure

pour:
C:\Program Files\EoRezo
C:\DOCUME~1\THIERR~1\APPLIC~1\KEEPEX~1
C:\Program Files\MyWebSearch
tu les copies sur le forum (comme tu viens de le faire) et tu les colles dans OTMoveIt.

pour CCleaner:
à droite de
http://www.filehippo.com/download_ [...] 32cc49ecc/

vi
clique yes

et poste le rapport
C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

Re,

"WksPatch" n'est pas accepter dans la zone de dialogue ? j'ai respecté scrupuleusement ce que tu m'as demandé: sans espace( ni avant ni après) , meme orthographe.

Cordialement

bonsoir

on va le supprimer autrement alors.

Désactive ton antivirus et tout autre type de protection.
Télécharge ComboFix de sUBs :
ComboFix.exe
et sauvegarde le sur ton bureau et pas ailleurs!

Double-clic sur ComboFix, Il va te poser une question, suis les invites puis attends que combofix ait terminé, il est possible que ton PC reboot, c’est normal, un rapport sera créé.Poste le rapport\Combofix.txt
clique dessus pour l'ouvrir, puis édition "sélectionner tout", édition "copier"

viens sur le forum et édition "coller"

ajoute un nouveau rapport Hijackthis.