Tom's Guide > Forum > Sécurité - Virus > PUB intempestives ... [RESOLU]
PUB intempestives ... [RESOLU] - Sécurité - Virus
TomsGuide.com : 800 000 inscrits répondent à toutes vos questions high-tech et informatique. Pour obtenir de l'aide, inscrivez-vous gratuitement !
Répondre
Mot :    Pseudo :           
 
sylvain57920   24-09-2008 à 19:51:49

Bonsoir,

Je sais que le sujet à déja était poser maintes et maintes fois mais bon :ange:

Voilà mon problème, dès que je suis sur internet (ou des que j'utilise MSN par exemple) j'ai des pub intempestives qui viennent (toujours ouvertes avec IE).

Mon PC est un Vista Edition Familial Premium.
J'ai McAfee comme anti-virus.

A oui et tant que j'y pense depuis cette après-midi (quand j'ai allumé mon PC) Windows me dit qu'il n'a trouver aucun anti-virus sur l'ordinateur tandis qu'avant il voyait McAfee.

J'espère que vous pourrez m'aider comme vous l'avez déjà souvent fait. :D


Et j'allais oublier ! quand je clique sur l'icone (sur msn) pour accéder à mes email j'ai souvent une page blanche avec comme adresse ceci ==> http://pops-icle.com/ad.html et des fois un message qui dit : This ad delivered by Popsicle


Message édité par sylvain57920 le 27-09-2008 à 16:27:14
------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
Répondre
Liens sponsorisés
Inscrivez-vous ou connectez-vous pour masquer ceci.
Angeldark   24-09-2008 à 20:34:18
- 0 +

Bonjour,

Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   24-09-2008 à 21:56:30
- 0 +

Bonsoir Angeldark,

Déjà merci de m'avoir répondu aussi vite :D

Voici le rapport Hijackthis :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:54:25, on 24/09/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\ico.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Windows\tsnp2std.exe
C:\Windows\vsnp2std.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Trust\Trust R-Series Mouse\KMConfig.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Trust\Trust R-Series Mouse\KMProcess.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\OLITEC\Moniteur WiFi OLITEC\Moniteur WiFi OLITEC.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe
C:\Program Files\Windows Mail\WindowsMailGadget.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Sylvain\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Popsicle - {A67B8FE1-8E6D-44D6-8D74-9C28E7BFF35C} - C:\Users\Public\Documents\Popsicle\ADVPro.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Bluetooth HCI Monitor] RunDll32 HCIMNTR.DLL,RunCheckHCIMode
O4 - HKLM\..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe KMConfig.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Anti Setup] "C:\ProgramData\bendfordford.k2mjlu"
O4 - HKCU\..\Run: [Ball that ford software] "C:\ProgramData\setup data film.0azuj"
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Moniteur WiFi OLITEC.exe.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr [...] dfr-fr.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: dlcf_device - - C:\Windows\system32\dlcfcoms.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: SessionLauncher - Unknown owner - C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 11941 bytes

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   25-09-2008 à 17:05:55
- 0 +

Re,

Télécharge Lop S&D.exe (Eric_71) sur ton Bureau.

  • Lance l'installation du programme en exécutant le fichier téléchargé.
  • Double-clique maintenant sur le raccourci de LopS&D.
  • Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
  • Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
  • Poste le rapport généré (C:\lopR.txt*)

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   25-09-2008 à 19:54:10
- 0 +

Salut,

voici le rapport :



--------------------\\ Lop S&D 4.2.4-4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A06
USER : Sylvain ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total : 450 Go Free : 349 Go
D:\ (Local Disk) - NTFS - Total : 14 Go Free : 4 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 25/09/2008|19:50 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[23/09/2008|21:47] C:\Users\Sylvain\AppData\Local\Adobe
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Application Data
[08/09/2008|18:08] C:\Users\Sylvain\AppData\Local\ATI
[20/09/2008|21:47] C:\Users\Sylvain\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[11/09/2008|23:23] C:\Users\Sylvain\AppData\Local\GDIPFONTCACHEV1.DAT
[08/09/2008|20:14] C:\Users\Sylvain\AppData\Local\Google
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Historique
[23/09/2008|22:27] C:\Users\Sylvain\AppData\Local\IconCache.db
[13/09/2008|11:29] C:\Users\Sylvain\AppData\Local\Installer3624
[24/09/2008|13:49] C:\Users\Sylvain\AppData\Local\Microsoft
[13/09/2008|11:14] C:\Users\Sylvain\AppData\Local\Microsoft Games
[21/09/2008|13:01] C:\Users\Sylvain\AppData\Local\Microsoft Help
[20/09/2008|18:55] C:\Users\Sylvain\AppData\Local\MigWiz
[11/09/2008|22:28] C:\Users\Sylvain\AppData\Local\Mozilla
[10/09/2008|14:51] C:\Users\Sylvain\AppData\Local\SingleClick Systems
[08/09/2008|20:25] C:\Users\Sylvain\AppData\Local\SupportSoft
[25/09/2008|19:49] C:\Users\Sylvain\AppData\Local\Temp
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Temporary Internet Files
[15/09/2008|21:47] C:\Users\Sylvain\AppData\Local\VirtualStore
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Windows SideShow

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[03/09/2008 21:49][--a------] C:\Windows\tasks\McDefragTask.job
[03/09/2008 21:49][--a------] C:\Windows\tasks\McQcTask.job
[25/09/2008 19:35][--ah-----] C:\Windows\tasks\SA.DAT
[24/09/2008 22:20][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[08/09/2008|18:22] C:\ProgramData\{3E318E90-4BE6-4440-A0EE-2EAF8419199C}
[03/09/2008|21:47] C:\ProgramData\Adobe
[08/09/2008|18:02] C:\ProgramData\Application Data
[03/09/2008|21:53] C:\ProgramData\ATI
[19/09/2008|17:32] C:\ProgramData\bendfordford.k2mjlu
[19/09/2008|17:32] C:\ProgramData\bendfordford.oqiag
[09/09/2008|20:43] C:\ProgramData\bendfordford.ugweg3
[14/09/2008|23:12] C:\ProgramData\BOONTY
[08/09/2008|18:02] C:\ProgramData\Bureau
[19/09/2008|17:33] C:\ProgramData\bytesafelogo
[19/09/2008|17:33] C:\ProgramData\Comp Jugs Ball That
[08/09/2008|20:26] C:\ProgramData\Dell
[08/09/2008|18:02] C:\ProgramData\Documents
[21/09/2008|14:49] C:\ProgramData\Downloaded Installations
[08/09/2008|18:02] C:\ProgramData\Favoris
[14/09/2008|13:10] C:\ProgramData\FLEXnet
[03/09/2008|21:17] C:\ProgramData\Google
[03/09/2008|21:36] C:\ProgramData\InstallShield
[20/09/2008|12:02] C:\ProgramData\LauncherAccess.dt
[03/09/2008|21:42] C:\ProgramData\McAfee
[08/09/2008|18:02] C:\ProgramData\Menu D‚marrer
[09/09/2008|20:49] C:\ProgramData\Messenger Plus!
[19/09/2008|17:19] C:\ProgramData\Microsoft
[13/09/2008|11:38] C:\ProgramData\Microsoft Help
[08/09/2008|18:02] C:\ProgramData\ModŠles
[03/09/2008|21:49] C:\ProgramData\Roxio
[19/09/2008|17:33] C:\ProgramData\setup data film.0azuj
[10/09/2008|14:51] C:\ProgramData\SingleClick Systems
[03/09/2008|21:39] C:\ProgramData\Sonic
[03/09/2008|21:33] C:\ProgramData\SupportSoft
[10/09/2008|14:57] C:\ProgramData\TEMP
[15/09/2008|21:40] C:\ProgramData\Trymedia
[03/09/2008|21:40] C:\ProgramData\Uninstall
[10/09/2008|17:32] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[23/09/2008|22:07] C:\Program Files\7-Zip
[13/09/2008|11:30] C:\Program Files\Adobe
[03/09/2008|21:15] C:\Program Files\ATI Technologies
[03/09/2008|21:26] C:\Program Files\Bonjour
[19/09/2008|17:32] C:\Program Files\Circle Developement
[03/09/2008|21:42] C:\Program Files\Citrix
[19/09/2008|17:21] C:\Program Files\Common Files
[20/09/2008|12:36] C:\Program Files\Counter-Strike Source
[03/09/2008|21:48] C:\Program Files\Dell
[15/09/2008|18:13] C:\Program Files\Dell Color Printer 725
[10/09/2008|14:51] C:\Program Files\Dell Network Assistant
[03/09/2008|21:33] C:\Program Files\Dell Support Center
[21/09/2008|13:05] C:\Program Files\Dl_cats
[08/09/2008|18:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[09/09/2008|19:21] C:\Program Files\Google
[22/09/2008|18:18] C:\Program Files\InstallShield Installation Information
[03/09/2008|21:14] C:\Program Files\Intel
[21/01/2008|04:35] C:\Program Files\Internet Explorer
[11/09/2008|23:09] C:\Program Files\IZArc
[14/09/2008|11:45] C:\Program Files\Java
[14/09/2008|12:18] C:\Program Files\KGB Archiver
[15/09/2008|19:18] C:\Program Files\LimeWire
[24/09/2008|20:17] C:\Program Files\McAfee
[03/09/2008|21:41] C:\Program Files\McAfee.com
[19/09/2008|17:32] C:\Program Files\Messenger Plus! Live
[19/09/2008|17:25] C:\Program Files\Microsoft
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[11/09/2008|23:16] C:\Program Files\Microsoft Office
[19/09/2008|17:26] C:\Program Files\Microsoft Office Outlook Connector
[13/09/2008|11:28] C:\Program Files\Microsoft Silverlight
[11/09/2008|23:16] C:\Program Files\Microsoft Visual Studio
[11/09/2008|23:14] C:\Program Files\Microsoft Visual Studio 8
[11/09/2008|23:17] C:\Program Files\Microsoft Works
[11/09/2008|23:16] C:\Program Files\Microsoft.NET
[21/01/2008|04:35] C:\Program Files\Movie Maker
[16/09/2008|20:19] C:\Program Files\Mozilla Firefox
[11/09/2008|23:16] C:\Program Files\MSBuild
[09/09/2008|20:38] C:\Program Files\MSXML 4.0
[08/09/2008|21:30] C:\Program Files\OLITEC
[14/09/2008|13:53] C:\Program Files\PhotoFiltre Studio
[15/09/2008|19:21] C:\Program Files\PlayMP3z
[08/09/2008|21:28] C:\Program Files\RALINK
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[03/09/2008|21:40] C:\Program Files\Roxio
[11/09/2008|18:43] C:\Program Files\Samsung
[03/09/2008|21:57] C:\Program Files\Sigmatel
[20/09/2008|12:56] C:\Program Files\Steam
[22/09/2008|18:18] C:\Program Files\Trust
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[17/09/2008|20:38] C:\Program Files\VideoLAN
[21/09/2008|14:50] C:\Program Files\VirginMega
[03/09/2008|21:10] C:\Program Files\WIDCOMM
[21/01/2008|04:35] C:\Program Files\Windows Calendar
[21/01/2008|04:35] C:\Program Files\Windows Collaboration
[21/01/2008|04:35] C:\Program Files\Windows Defender
[21/01/2008|04:35] C:\Program Files\Windows Journal
[19/09/2008|17:24] C:\Program Files\Windows Live
[09/09/2008|20:46] C:\Program Files\Windows Mail
[21/01/2008|04:35] C:\Program Files\Windows Media Player
[08/09/2008|18:02] C:\Program Files\Windows NT
[21/01/2008|04:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|04:35] C:\Program Files\Windows Sidebar
[03/09/2008|21:17] C:\Program Files\XPSMiniViewGadget
[20/09/2008|21:49] C:\Program Files\Xvid

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[03/09/2008|21:47] C:\Program Files\Common Files\Adobe
[14/09/2008|23:12] C:\Program Files\Common Files\BOONTY Shared
[11/09/2008|23:16] C:\Program Files\Common Files\DESIGNER
[03/09/2008|21:36] C:\Program Files\Common Files\InstallShield
[03/09/2008|21:08] C:\Program Files\Common Files\Java
[03/09/2008|21:19] C:\Program Files\Common Files\Macrovision Shared
[03/09/2008|21:41] C:\Program Files\Common Files\McAfee
[19/09/2008|17:24] C:\Program Files\Common Files\microsoft shared
[03/09/2008|21:39] C:\Program Files\Common Files\PX Storage Engine
[03/09/2008|21:39] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[08/09/2008|21:04] C:\Program Files\Common Files\snp2std
[03/09/2008|21:40] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[03/09/2008|21:33] C:\Program Files\Common Files\supportsoft
[03/09/2008|21:38] C:\Program Files\Common Files\SureThing Shared
[19/09/2008|17:26] C:\Program Files\Common Files\System
[19/09/2008|17:21] C:\Program Files\Common Files\Windows Live
[10/09/2008|17:44] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 94 Processes )

iexplore.exe ~ [PID:3576]
iexplore.exe ~ [PID:3864]
iexplore.exe ~ [PID:6924]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\bendfordford.oqiag
C:\ProgramData\setup data film.0azuj
C:\ProgramData\bendfordford.k2mjlu
C:\ProgramData\bendfordford.ugweg3
C:\Users\Sylvain\AppData\Local\Temp\bis2FD6.exe
C:\Users\Sylvain\AppData\Local\Temp\bis70BD.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\ProgramData\Comp Jugs Ball That
C:\ProgramData\Comp Jugs Ball That\Meta Seek.exe
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies\sylvain@www.adserver5[2].txt
C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies\sylvain@advertising[2].txt
C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies\sylvain@adopt.euroclick[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Anti Setup"="\"C:\\ProgramData\\bendfordford.k2mjlu\""
"Ball that ford software"="\"C:\\ProgramData\\setup data film.0azuj\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-25 19:50:30
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Recent\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa (2).lnk
C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Recent\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa.lnk
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa.rar
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\By KaMi-SaMa.txt
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\Keygen.exe
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\PhotoFiltre Studio 9-Setup.exe


[F:15287][D:1623]-> C:\Users\Sylvain\AppData\Local\Temp
[F:439][D:1]-> C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1167][D:5]-> C:\Users\Sylvain\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 25/09/2008|19:52 - Option : [1]

--------------------\\ Fin du rapport a 19:52:55
[ UAC => 1 ]


Encore merci de t'occuper de mon cas ;)

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   25-09-2008 à 20:19:43
- 0 +

De rien :)

Relance Lop S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   25-09-2008 à 20:43:22
- 0 +

Re :)

Voici le rapport :


--------------------\\ Lop S&D 4.2.4-4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A06
USER : Sylvain ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total : 450 Go Free : 349 Go
D:\ (Local Disk) - NTFS - Total : 14 Go Free : 4 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB) - FAT - Total : 952 Mo Free : 0 Go
K:\ (USB) - FAT32 - Total : 3840 Mo Free : 2 Go

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 25/09/2008|20:21 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\ProgramData\Comp Jugs Ball That\Meta Seek.exe
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies\sylvain@www.adserver5[2].txt
Supprime! - C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies\sylvain@advertising[2].txt
Supprime! - C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies\sylvain@adopt.euroclick[2].txt
Supprime! - C:\ProgramData\bendfordford.oqiag
Supprime! - C:\ProgramData\setup data film.0azuj
Supprime! - C:\ProgramData\bendfordford.k2mjlu
Supprime! - C:\ProgramData\bendfordford.ugweg3
Supprime! - C:\Users\Sylvain\AppData\Local\Temp\bis2FD6.exe
Supprime! - C:\Users\Sylvain\AppData\Local\Temp\bis70BD.exe
Supprime! - C:\ProgramData\Comp Jugs Ball That
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[23/09/2008|21:47] C:\Users\Sylvain\AppData\Local\Adobe
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Application Data
[08/09/2008|18:08] C:\Users\Sylvain\AppData\Local\ATI
[20/09/2008|21:47] C:\Users\Sylvain\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[11/09/2008|23:23] C:\Users\Sylvain\AppData\Local\GDIPFONTCACHEV1.DAT
[08/09/2008|20:14] C:\Users\Sylvain\AppData\Local\Google
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Historique
[23/09/2008|22:27] C:\Users\Sylvain\AppData\Local\IconCache.db
[13/09/2008|11:29] C:\Users\Sylvain\AppData\Local\Installer3624
[24/09/2008|13:49] C:\Users\Sylvain\AppData\Local\Microsoft
[13/09/2008|11:14] C:\Users\Sylvain\AppData\Local\Microsoft Games
[21/09/2008|13:01] C:\Users\Sylvain\AppData\Local\Microsoft Help
[20/09/2008|18:55] C:\Users\Sylvain\AppData\Local\MigWiz
[11/09/2008|22:28] C:\Users\Sylvain\AppData\Local\Mozilla
[10/09/2008|14:51] C:\Users\Sylvain\AppData\Local\SingleClick Systems
[08/09/2008|20:25] C:\Users\Sylvain\AppData\Local\SupportSoft
[25/09/2008|20:22] C:\Users\Sylvain\AppData\Local\Temp
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Temporary Internet Files
[15/09/2008|21:47] C:\Users\Sylvain\AppData\Local\VirtualStore
[08/09/2008|18:05] C:\Users\Sylvain\AppData\Local\Windows SideShow

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[03/09/2008 21:49][--a------] C:\Windows\tasks\McDefragTask.job
[03/09/2008 21:49][--a------] C:\Windows\tasks\McQcTask.job
[25/09/2008 19:35][--ah-----] C:\Windows\tasks\SA.DAT
[24/09/2008 22:20][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[08/09/2008|18:22] C:\ProgramData\{3E318E90-4BE6-4440-A0EE-2EAF8419199C}
[03/09/2008|21:47] C:\ProgramData\Adobe
[08/09/2008|18:02] C:\ProgramData\Application Data
[03/09/2008|21:53] C:\ProgramData\ATI
[14/09/2008|23:12] C:\ProgramData\BOONTY
[08/09/2008|18:02] C:\ProgramData\Bureau
[19/09/2008|17:33] C:\ProgramData\bytesafelogo
[08/09/2008|20:26] C:\ProgramData\Dell
[08/09/2008|18:02] C:\ProgramData\Documents
[21/09/2008|14:49] C:\ProgramData\Downloaded Installations
[08/09/2008|18:02] C:\ProgramData\Favoris
[14/09/2008|13:10] C:\ProgramData\FLEXnet
[03/09/2008|21:17] C:\ProgramData\Google
[03/09/2008|21:36] C:\ProgramData\InstallShield
[25/09/2008|20:05] C:\ProgramData\LauncherAccess.dt
[03/09/2008|21:42] C:\ProgramData\McAfee
[08/09/2008|18:02] C:\ProgramData\Menu D‚marrer
[09/09/2008|20:49] C:\ProgramData\Messenger Plus!
[19/09/2008|17:19] C:\ProgramData\Microsoft
[13/09/2008|11:38] C:\ProgramData\Microsoft Help
[08/09/2008|18:02] C:\ProgramData\ModŠles
[03/09/2008|21:49] C:\ProgramData\Roxio
[10/09/2008|14:51] C:\ProgramData\SingleClick Systems
[03/09/2008|21:39] C:\ProgramData\Sonic
[03/09/2008|21:33] C:\ProgramData\SupportSoft
[10/09/2008|14:57] C:\ProgramData\TEMP
[15/09/2008|21:40] C:\ProgramData\Trymedia
[03/09/2008|21:40] C:\ProgramData\Uninstall
[10/09/2008|17:32] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[23/09/2008|22:07] C:\Program Files\7-Zip
[13/09/2008|11:30] C:\Program Files\Adobe
[03/09/2008|21:15] C:\Program Files\ATI Technologies
[03/09/2008|21:26] C:\Program Files\Bonjour
[03/09/2008|21:42] C:\Program Files\Citrix
[19/09/2008|17:21] C:\Program Files\Common Files
[20/09/2008|12:36] C:\Program Files\Counter-Strike Source
[03/09/2008|21:48] C:\Program Files\Dell
[15/09/2008|18:13] C:\Program Files\Dell Color Printer 725
[10/09/2008|14:51] C:\Program Files\Dell Network Assistant
[03/09/2008|21:33] C:\Program Files\Dell Support Center
[21/09/2008|13:05] C:\Program Files\Dl_cats
[08/09/2008|18:02] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[09/09/2008|19:21] C:\Program Files\Google
[22/09/2008|18:18] C:\Program Files\InstallShield Installation Information
[03/09/2008|21:14] C:\Program Files\Intel
[21/01/2008|04:35] C:\Program Files\Internet Explorer
[11/09/2008|23:09] C:\Program Files\IZArc
[14/09/2008|11:45] C:\Program Files\Java
[14/09/2008|12:18] C:\Program Files\KGB Archiver
[15/09/2008|19:18] C:\Program Files\LimeWire
[24/09/2008|20:17] C:\Program Files\McAfee
[03/09/2008|21:41] C:\Program Files\McAfee.com
[19/09/2008|17:32] C:\Program Files\Messenger Plus! Live
[19/09/2008|17:25] C:\Program Files\Microsoft
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[11/09/2008|23:16] C:\Program Files\Microsoft Office
[19/09/2008|17:26] C:\Program Files\Microsoft Office Outlook Connector
[13/09/2008|11:28] C:\Program Files\Microsoft Silverlight
[11/09/2008|23:16] C:\Program Files\Microsoft Visual Studio
[11/09/2008|23:14] C:\Program Files\Microsoft Visual Studio 8
[11/09/2008|23:17] C:\Program Files\Microsoft Works
[11/09/2008|23:16] C:\Program Files\Microsoft.NET
[21/01/2008|04:35] C:\Program Files\Movie Maker
[16/09/2008|20:19] C:\Program Files\Mozilla Firefox
[11/09/2008|23:16] C:\Program Files\MSBuild
[09/09/2008|20:38] C:\Program Files\MSXML 4.0
[08/09/2008|21:30] C:\Program Files\OLITEC
[14/09/2008|13:53] C:\Program Files\PhotoFiltre Studio
[15/09/2008|19:21] C:\Program Files\PlayMP3z
[08/09/2008|21:28] C:\Program Files\RALINK
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[03/09/2008|21:40] C:\Program Files\Roxio
[11/09/2008|18:43] C:\Program Files\Samsung
[03/09/2008|21:57] C:\Program Files\Sigmatel
[20/09/2008|12:56] C:\Program Files\Steam
[22/09/2008|18:18] C:\Program Files\Trust
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[17/09/2008|20:38] C:\Program Files\VideoLAN
[21/09/2008|14:50] C:\Program Files\VirginMega
[03/09/2008|21:10] C:\Program Files\WIDCOMM
[21/01/2008|04:35] C:\Program Files\Windows Calendar
[21/01/2008|04:35] C:\Program Files\Windows Collaboration
[21/01/2008|04:35] C:\Program Files\Windows Defender
[21/01/2008|04:35] C:\Program Files\Windows Journal
[19/09/2008|17:24] C:\Program Files\Windows Live
[09/09/2008|20:46] C:\Program Files\Windows Mail
[21/01/2008|04:35] C:\Program Files\Windows Media Player
[08/09/2008|18:02] C:\Program Files\Windows NT
[21/01/2008|04:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|04:35] C:\Program Files\Windows Sidebar
[03/09/2008|21:17] C:\Program Files\XPSMiniViewGadget
[20/09/2008|21:49] C:\Program Files\Xvid

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[03/09/2008|21:47] C:\Program Files\Common Files\Adobe
[14/09/2008|23:12] C:\Program Files\Common Files\BOONTY Shared
[11/09/2008|23:16] C:\Program Files\Common Files\DESIGNER
[03/09/2008|21:36] C:\Program Files\Common Files\InstallShield
[03/09/2008|21:08] C:\Program Files\Common Files\Java
[03/09/2008|21:19] C:\Program Files\Common Files\Macrovision Shared
[03/09/2008|21:41] C:\Program Files\Common Files\McAfee
[19/09/2008|17:24] C:\Program Files\Common Files\microsoft shared
[03/09/2008|21:39] C:\Program Files\Common Files\PX Storage Engine
[03/09/2008|21:39] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[08/09/2008|21:04] C:\Program Files\Common Files\snp2std
[03/09/2008|21:40] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[03/09/2008|21:33] C:\Program Files\Common Files\supportsoft
[03/09/2008|21:38] C:\Program Files\Common Files\SureThing Shared
[19/09/2008|17:26] C:\Program Files\Common Files\System
[19/09/2008|17:21] C:\Program Files\Common Files\Windows Live
[10/09/2008|17:44] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 93 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-25 20:22:24
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Recent\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa (2).lnk
C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Recent\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa.lnk
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa.rar
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\By KaMi-SaMa.txt
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\Keygen.exe
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\PhotoFiltre Studio 9-Setup.exe


[F:15284][D:1624]-> C:\Users\Sylvain\AppData\Local\Temp
[F:440][D:1]-> C:\Users\Sylvain\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1189][D:5]-> C:\Users\Sylvain\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 25/09/2008|19:52 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 25/09/2008|20:24 - Option : [2]

--------------------\\ Fin du rapport a 20:24:40
[ UAC => 1 ]

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   25-09-2008 à 21:02:27
- 0 +

Reposte un rapport Hijackthis.

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   25-09-2008 à 21:07:47
- 0 +

Voilà le rapport Hijackthis :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:07:13, on 25/09/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\ico.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Windows\tsnp2std.exe
C:\Windows\vsnp2std.exe
C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe
C:\Program Files\Trust\Trust R-Series Mouse\KMConfig.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Trust\Trust R-Series Mouse\KMProcess.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
C:\Program Files\Windows Mail\WindowsMailGadget.exe
C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\OLITEC\Moniteur WiFi OLITEC\Moniteur WiFi OLITEC.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Sylvain\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Popsicle - {A67B8FE1-8E6D-44D6-8D74-9C28E7BFF35C} - C:\Users\Public\Documents\Popsicle\ADVPro.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Bluetooth HCI Monitor] RunDll32 HCIMNTR.DLL,RunCheckHCIMode
O4 - HKLM\..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe KMConfig.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Moniteur WiFi OLITEC.exe.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: dlcf_device - - C:\Windows\system32\dlcfcoms.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: SessionLauncher - Unknown owner - C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 11629 bytes

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   25-09-2008 à 21:10:40
- 0 +

Fais le ménage dans tes cracks...

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   25-09-2008 à 21:11:58
- 0 +

Euh c'est-à-dire ?
Dsl mais là je suis perdu ^^

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   26-09-2008 à 19:32:47
- 0 +

Citation :

C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Recent\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa (2).lnk
C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Recent\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa.lnk
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa.rar
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\By KaMi-SaMa.txt
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\Keygen.exe
C:\Users\Sylvain\Desktop\Photofiltre Studio 9 FR Incl Keygen By KaMi-SaMa\PhotoFiltre Studio 9-Setup.exe


:)

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   26-09-2008 à 22:53:33
- 0 +

Salut ^^

Dsl pour le temps de réponse :s

D'après toi c'est donc photofiltre (cracké) qui me mettrait toute ces pubs ?

Et qu'est-ce que tu me conseil de faire ? de supprimer cela ?

Encore merci de t'occuper de mon cas ;)

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   27-09-2008 à 13:30:26
- 0 +

Bah ça peut être l'origine. Oui supprime les cracks.

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   27-09-2008 à 16:26:37
- 0 +

Salut,

J'ai supprimé : O2 - BHO: Popsicle - {A67B8FE1-8E6D-44D6-8D74-9C28E7BFF35C} - C:\Users\Public\Documents\Popsicle\ADVPro.dll

Et depuis je n'ai plus de page de PUB. Merci de ton aide ;) .

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Angeldark   27-09-2008 à 17:59:18
- 0 +

C'est surtout Lop-S&D qui a viré tes pubs mais bon...
Reposte quand même un rapport Hijackthis.

------------------------------ Prévention & Protection||Vous m'aimez ? Cliquez :o
 Répondre à Angeldark
sylvain57920   27-09-2008 à 19:18:22
- 0 +

Ben j'avais toujours des PUB même après avoir utilisé Lop-S&D, mais bon voici le rapport Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:17:04, on 27/09/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\ico.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Windows\tsnp2std.exe
C:\Windows\vsnp2std.exe
C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe
C:\Program Files\Micro Application\Securite Internet 2008\avp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Trust\Trust R-Series Mouse\KMConfig.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Trust\Trust R-Series Mouse\KMProcess.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe
C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Windows Mail\WindowsMailGadget.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\OLITEC\Moniteur WiFi OLITEC\Moniteur WiFi OLITEC.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\DllHost.exe
c:\PROGRA~1\mcafee\msc\mcuimgr.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Users\Sylvain\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5080904
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Popsicle - {A67B8FE1-8E6D-44D6-8D74-9C28E7BFF35C} - C:\Users\Public\Documents\Popsicle\ADVPro.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Bluetooth HCI Monitor] RunDll32 HCIMNTR.DLL,RunCheckHCIMode
O4 - HKLM\..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe KMConfig.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Micro Application\Securite Internet 2008\avp.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Moniteur WiFi OLITEC.exe.lnk = ?
O8 - Extra context menu item: Ajouter aux Anti-Banner - C:\Program Files\Micro Application\Securite Internet 2008\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Micro Application\Securite Internet 2008\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,C:\PROGRA~1\MICROA~1\SECURI~1\adialhk.dll,C:\PROGRA~1\MICROA~1\SECURI~1\r3hook.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Sécurité Internet 2008 (AVP) - Micro Application - C:\Program Files\Micro Application\Securite Internet 2008\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: dlcf_device - - C:\Windows\system32\dlcfcoms.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: SessionLauncher - Unknown owner - C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 12159 bytes

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
sylvain57920   29-09-2008 à 19:20:37
- 0 +

Ok merci de ton aide ! :D

Salut !

------------------------------ la vie est longue et courte en même temps c'est pour cela qu'il ne faut pas en perdre une miette.

http://forum-aide-compagnie.1fr1.net/
 Répondre à sylvain57920
Créer un nouveau sujet Répondre
Tom's Guide > Forum > Sécurité - Virus > PUB intempestives ... [RESOLU]
Aller à :

Il y a 2160 utilisateurs connus et inconnus. Pour voir la liste des connectés connus, cliquez ici.

Plan du forum
Forum Bestofmedia ©
2000-2009 Bestofmedia Group
Page générée en 0,460 secondes
Attention

Vous allez répondre sur un sujet resté inactif pendant plus de 6 mois.
Assurez-vous d'apporter des éléments nouveaux à la discussion avant de poursuivre.

Répondre Annuler
Liens