probleme de demarage

Bonjour,

Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:46:27, on 31/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\lilia\Bureau\telechargement\HiJackThis trend micro.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hpttpgooogle.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.search4top.net/040C/ie.asp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by Godzilla
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: as Class - {95B187DB-43C8-4AC7-AF7F-C93B79D21F1A} - C:\WINDOWS\system32\MSCTX32.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: pp Class - {89286D74-1E06-4AE0-8AEE-4D4363D5D814} - C:\WINDOWS\system32\MSCTX32.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [setc] C:\Program Files\MySecurityCenter\Programs\setc.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Mode Load Mpeg Less] C:\Documents and Settings\All Users\Application Data\two setup mode load\Log Store.exe
O4 - HKLM\..\Run: [Piolet] C:\Program Files\Piolet\Piolet.exe SILENT
O4 - HKLM\..\Run: [MS32DLL] C:\WINDOWS\MS32DLL.dll.vbs
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [UserBarb] C:\DOCUME~1\Benamas\APPLIC~1\CREATI~1\surf dash web.exe
O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [PC SpeedScan Pro] C:\Program Files\Ascentive\PC SpeedScan Pro\PCSpeedScan.exe -m
O4 - HKCU\..\Run: [ccleaner] "C:\Documents and Settings\lilia\Mes documents\Telechargement\CCleaner\CCleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?3d94efd8a37a4d659c5098494d48e74c
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?3d94efd8a37a4d659c5098494d48e74c
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin9.valueactive.com/Register/Branding/olr33...
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 7536 bytes

Re,

[#ff0000]! Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]

Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.

Double clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.

Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\combofix.txt*) dans ta prochaine réponse.

AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
* le nom de la partition peut changer

bonjour,


j'ai tout désactiver.
log bloc notes :

ComboFix 08-11-01.04 - Benamas 2008-11-02 12:25:52.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.170 [GMT 1:00]
Lancé depuis: C:\Documents and Settings\Benamas\Bureau\telechargement\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Benamas\Local Settings\Application Data\cdyuae.dat
C:\Documents and Settings\Benamas\Local Settings\Application Data\cdyuae_nav.dat
C:\Documents and Settings\Benamas\Local Settings\Application Data\cdyuae_navps.dat
C:\Program Files\AntiSpywareExpert
C:\Program Files\AntiSpywareExpert\BL.dat
C:\Program Files\AntiSpywareExpert\WL.dat
C:\Program Files\PCPrivacyCleaner

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-02 au 2008-11-02 ))))))))))))))))))))))))))))))))))))
.

2008-10-31 16:56 . 2008-10-31 16:56 <REP> d-------- C:\Program Files\Lavasoft
2008-10-31 16:32 . 2008-10-31 16:32 <REP> d-------- C:\Program Files\MSN Toolbar Suite
2008-10-31 16:32 . 2008-10-31 16:32 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MSN Search Toolbar
2008-10-31 16:20 . 2008-10-31 16:20 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-10-30 22:22 . 2008-10-31 11:59 <REP> d-------- C:\Program Files\QUAD Utilities
2008-10-30 22:06 . 2002-12-14 17:41 246,272 --a------ C:\WINDOWS\system32\mswmdm.dll
2008-10-30 22:06 . 2002-12-14 17:41 246,272 --a--c--- C:\WINDOWS\system32\dllcache\mswmdm.dll
2008-10-30 22:06 . 2002-11-27 03:03 159,232 --a--c--- C:\WINDOWS\system32\dllcache\CEWMDM.dll
2008-10-30 22:06 . 2002-11-27 03:03 159,232 --a------ C:\WINDOWS\system32\CEWMDM.dll
2008-10-30 22:06 . 2002-12-17 18:45 52,736 --a------ C:\WINDOWS\system32\mspmsnsv.dll
2008-10-30 22:06 . 2002-12-17 18:45 52,736 --a--c--- C:\WINDOWS\system32\dllcache\mspmsnsv.dll
2008-10-30 22:06 . 2002-11-27 03:03 27,136 --a------ C:\WINDOWS\system32\wmdmlog.dll
2008-10-30 22:06 . 2002-11-27 03:03 27,136 --a--c--- C:\WINDOWS\system32\dllcache\wmdmlog.dll
2008-10-30 22:06 . 2002-11-27 03:03 23,552 --a------ C:\WINDOWS\system32\wmdmps.dll
2008-10-30 22:06 . 2002-11-27 03:03 23,552 --a--c--- C:\WINDOWS\system32\dllcache\wmdmps.dll
2008-10-30 21:38 . 2008-10-30 21:38 <REP> d-------- C:\Documents and Settings\Benamas\Application Data\MSNInstaller
2008-10-30 21:29 . 2008-10-30 21:41 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
2008-10-30 21:29 . 2008-10-30 21:41 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
2008-10-30 19:52 . 2008-10-30 21:21 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-10-30 18:21 . 2008-04-17 16:22 208,896 --a------ C:\WINDOWS\system32\ConTest.dll
2008-10-30 18:21 . 2007-10-17 10:19 20,480 --a------ C:\WINDOWS\system32\SysRestore.dll
2008-10-29 22:29 . 2008-10-30 21:36 <REP> d-------- C:\Program Files\Fichiers communs\BitDefender
2008-10-28 19:22 . 2008-10-28 19:22 <REP> d-------- C:\Program Files\Fichiers communs\PC Tools
2008-10-28 13:42 . 2008-10-28 19:11 <REP> d-------- C:\Documents and Settings\Benamas\Application Data\EoRezo
2008-10-28 13:41 . 2008-10-28 19:07 <REP> d-------- C:\Program Files\EoRezo
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Program Files\inKline Global
2008-10-25 10:09 . 2008-05-21 13:11 <REP> d--h----- C:\Documents and Settings\moha\Voisinage réseau
2008-10-25 10:09 . 2008-05-21 13:11 <REP> d--h----- C:\Documents and Settings\moha\Voisinage d'impression
2008-10-25 10:09 . 2008-05-21 11:30 <REP> d--h----- C:\Documents and Settings\moha\Modèles
2008-10-25 10:09 . 2008-10-25 10:37 <REP> dr------- C:\Documents and Settings\moha\Mes documents
2008-10-25 10:09 . 2008-05-21 13:11 <REP> dr------- C:\Documents and Settings\moha\Menu Démarrer
2008-10-25 10:09 . 2008-10-25 11:04 <REP> d-------- C:\Documents and Settings\moha
2008-10-23 17:28 . 2008-10-23 17:28 <REP> d-------- C:\Program Files\CREATIVE DUMB
2008-10-16 19:44 . 2008-10-16 19:44 <REP> d-------- C:\Documents and Settings\Benamas\Application Data\ESET
2008-10-16 19:42 . 2008-10-16 19:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-10-12 10:38 . 2008-10-12 10:38 <REP> d--hs---- C:\WINDOWS\ftpcache
2008-10-12 10:38 . 2008-10-12 10:38 <REP> d-------- C:\Program Files\Free
2008-10-10 17:03 . 2008-10-12 17:02 <REP> d-------- C:\Program Files\Fichiers communs\Symantec Shared
2008-10-04 21:33 . 2008-10-30 21:00 <REP> d-------- C:\WINDOWS\system32\Adobe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-31 16:19 --------- d-----w C:\Program Files\Google
2008-10-31 13:06 --------- d-----w C:\Program Files\eMule
2008-10-30 21:24 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-30 20:36 --------- d-----w C:\Program Files\BitDefender
2008-10-30 20:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-30 20:25 --------- d-----w C:\Program Files\Windows Media Connect 2
2008-10-30 20:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-30 20:19 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-10-30 20:17 81,984 ----a-w C:\WINDOWS\system32\bdod.bin
2008-10-30 19:56 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-10-30 14:17 --------- d-----w C:\Documents and Settings\Benamas\Application Data\CREATIVE DUMB
2008-10-28 22:12 5,632 ----a-w C:\WINDOWS\system32\drivers\StarOpen.sys
2008-10-23 16:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\two setup mode load
2008-10-19 19:09 --------- d-----w C:\Program Files\NOS
2008-10-19 19:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\NOS
2008-10-19 17:37 --------- d-----w C:\Program Files\Piolet
2008-10-16 19:14 --------- d-----w C:\Program Files\MySecurityCenter
2008-09-24 10:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microgaming
2008-09-24 10:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\MGS
2008-09-22 15:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avg8
2008-09-22 15:50 45,568 ----a-w C:\WINDOWS\system32\avgfwdx.dll
2008-09-22 15:50 23,296 ----a-w C:\WINDOWS\system32\drivers\avgfwdx.sys
2008-09-20 14:24 --------- d-----w C:\Program Files\Circle Developement
2008-09-15 16:28 --------- d-----w C:\Program Files\eChanblard
2008-09-15 16:25 --------- d-----w C:\Program Files\Woonoz
2008-09-15 16:23 --------- d-----w C:\Program Files\QuickTime
2008-09-15 16:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-09-15 16:12 --------- d-----w C:\Documents and Settings\Benamas\Application Data\Apple Computer
2008-09-15 15:39 1,846,144 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-14 15:27 --------- d-----w C:\Program Files\ArcSoft
2008-09-13 13:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-09-05 08:09 1,376,528 ----a-w C:\WINDOWS\system32\MSVBVM60.DLL
2008-09-03 20:49 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-08-20 05:37 663,552 ----a-w C:\WINDOWS\system32\wininet.dll
2008-08-14 13:44 2,182,400 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 13:44 2,059,776 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-06 18:16 4,608 ----a-w C:\WINDOWS\system32\w95inf32.dll
2008-08-06 18:16 2,272 ----a-w C:\WINDOWS\system32\w95inf16.dll
2008-06-04 10:07 15,397 ----a-w C:\Program Files\settings.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
2008-10-31 16:42 522224 --a------ C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-31 39408]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"Mode Load Mpeg Less"="C:\Documents and Settings\All Users\Application Data\two setup mode load\Log Store.exe" [2008-11-02 10031616]
"VTTimer"="VTTimer.exe" [2006-01-26 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2006-01-26 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-01-26 C:\WINDOWS\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Windows Desktop Search.lnk - C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe [2005-09-20 18:10:04 238080]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=

S3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-09-22 23296]
S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-09-22 23296]

*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Tâches planifiées'

2008-11-02 C:\WINDOWS\Tasks\ADE9E82991929B41.job
- c:\docume~1\benamas\applic~1\creati~1\Grey Manager Okay.exe [2008-10-23 17:35]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-UserBarb - C:\DOCUME~1\Benamas\APPLIC~1\CREATI~1\surf dash web.exe
HKCU-Run-Performance Center - C:\Program Files\Ascentive\Performance Center\APCMain.exe
HKCU-Run-PC SpeedScan Pro - C:\Program Files\Ascentive\PC SpeedScan Pro\PCSpeedScan.exe
HKCU-Run-ccleaner - C:\Documents and Settings\Benamas\Mes documents\Telechargement\CCleaner\CCleaner.exe
HKLM-Run-setc - C:\Program Files\MySecurityCenter\Programs\setc.exe
HKLM-Run-Piolet - C:\Program Files\Piolet\Piolet.exe
HKLM-Run-EoEngine - (no file)


.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\Benamas\Application Data\Mozilla\Firefox\Profiles\icxan0dy.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.lo.st
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.ustart.org
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-02 12:27:17
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2008-11-02 12:28:51
ComboFix-quarantined-files.txt 2008-11-02 11:28:49

Avant-CF: 72 195 862 528 octets libres
Après-CF: 72,415,809,536 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

173 --- E O F --- 2008-10-24 19:56:05

Reposte un rapport Hijackthis.

bonjour,
là en ce moment j'ai sur la barre bleu d'internet microsoft internet explorer normalement c bon mais j'ai toujours des pub cid

voila mon rapport.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:53, on 03/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Benamas\Bureau\telechargement\HiJackThis trend micro.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hpttpgooogle.com/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.search4top.net/040C/ie.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: as Class - {95B187DB-43C8-4AC7-AF7F-C93B79D21F1A} - C:\WINDOWS\system32\MSCTX32.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: pp Class - {89286D74-1E06-4AE0-8AEE-4D4363D5D814} - C:\WINDOWS\system32\MSCTX32.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Mode Load Mpeg Less] C:\Documents and Settings\All Users\Application Data\two setup mode load\Log Store.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?3d94efd8a37a4d659c5098494d48e74c
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?3d94efd8a37a4d659c5098494d48e74c
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {95B187DB-43C8-4AC7-AF7F-C93B79D21F1A} (as Class) - http://www.top15music.com/search/MSCTX32.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin9.valueactive.com/Register/Branding/olr33...
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 6792 bytes

Re,

Télécharge Lop S&D.exe ([#ff0000]Eric_71[/#f]) sur ton Bureau.

Lance l'installation du programme en exécutant le fichier téléchargé.

Double-clique maintenant sur le raccourci de LopS&D.

Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.

Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.

Poste le rapport généré (C:\lopR.txt*)
* le nom de la partition peut changer

Voila mon rapport.
merci


--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Benamas ( Administrator )
BOOT : Normal boot
Antivirus : Bitdefender Antivirus 8.0 (Not Activated)
Firewall : Bitdefender Firewall 8.0 (Not Activated)
C:\ (Local Disk) - NTFS - Total:78 Go (Free:66 Go)
D:\ (Local Disk) - NTFS - Total:108 Go (Free:107 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
K:\ (USB) - FAT - Total:470 Mo (Free:0 Go)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 03/11/2008|12:42 )

--------------------\\ Listing des dossiers dans APPLIC~1

[30/09/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[15/09/2008|17:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[22/09/2008|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg8
[03/07/2008|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[16/10/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESET
[02/11/2008|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[02/11/2008|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/07/2008|12:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[13/09/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[24/09/2008|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
[24/09/2008|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microgaming
[16/08/2008|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[31/10/2008|16:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
[21/05/2008|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[19/10/2008|20:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[28/05/2008|12:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[18/06/2008|10:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
[30/10/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/10/2008|22:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[23/10/2008|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\two setup mode load
[06/07/2008|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[16/06/2008|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[22/05/2008|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[31/10/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[30/10/2008|21:00] C:\DOCUME~1\Benamas\APPLIC~1\Adobe
[15/09/2008|17:12] C:\DOCUME~1\Benamas\APPLIC~1\Apple Computer
[30/05/2008|17:12] C:\DOCUME~1\Benamas\APPLIC~1\ArcSoft
[31/05/2008|11:03] C:\DOCUME~1\Benamas\APPLIC~1\AVGTOOLBAR
[30/10/2008|15:17] C:\DOCUME~1\Benamas\APPLIC~1\CREATIVE DUMB
[28/10/2008|19:11] C:\DOCUME~1\Benamas\APPLIC~1\EoRezo
[16/10/2008|19:44] C:\DOCUME~1\Benamas\APPLIC~1\ESET
[21/05/2008|19:15] C:\DOCUME~1\Benamas\APPLIC~1\Google
[15/08/2008|17:44] C:\DOCUME~1\Benamas\APPLIC~1\Help
[21/05/2008|11:56] C:\DOCUME~1\Benamas\APPLIC~1\Identities
[30/10/2008|21:00] C:\DOCUME~1\Benamas\APPLIC~1\Macromedia
[31/10/2008|14:36] C:\DOCUME~1\Benamas\APPLIC~1\Microsoft
[21/05/2008|12:09] C:\DOCUME~1\Benamas\APPLIC~1\Mozilla
[30/10/2008|21:38] C:\DOCUME~1\Benamas\APPLIC~1\MSNInstaller
[19/08/2008|12:36] C:\DOCUME~1\Benamas\APPLIC~1\Samsung
[04/07/2008|21:25] C:\DOCUME~1\Benamas\APPLIC~1\VadeRetro

[20/07/2008|21:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[22/09/2008|16:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft


[22/09/2008|16:57] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[03/11/2008 12:00][--ah-----] C:\WINDOWS\tasks\ADE9E82991929B41.job
[03/11/2008 11:22][--ah-----] C:\WINDOWS\tasks\SA.DAT
[02/03/2006 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( ADE9E82991929B41.job )=( c:\docume~1\benamas\applic~1\creati~1\GreyManagerOkay.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[30/09/2008|15:41] C:\Program Files\Adobe
[18/06/2008|11:57] C:\Program Files\algerie-zik
[21/06/2008|13:29] C:\Program Files\Alwil Software
[14/09/2008|16:27] C:\Program Files\ArcSoft
[30/10/2008|21:36] C:\Program Files\BitDefender
[02/11/2008|16:31] C:\Program Files\CCleaner
[20/09/2008|15:24] C:\Program Files\Circle Developement
[21/05/2008|11:31] C:\Program Files\ComPlus Applications
[13/06/2008|20:16] C:\Program Files\Conduit
[23/10/2008|17:28] C:\Program Files\CREATIVE DUMB
[15/09/2008|17:28] C:\Program Files\eChanblard
[31/10/2008|14:06] C:\Program Files\eMule
[28/10/2008|19:07] C:\Program Files\EoRezo
[02/11/2008|13:26] C:\Program Files\Fichiers communs
[12/10/2008|10:38] C:\Program Files\Free
[02/11/2008|16:35] C:\Program Files\Google
[06/07/2008|18:45] C:\Program Files\Goto Software
[28/10/2008|13:27] C:\Program Files\inKline Global
[30/10/2008|21:19] C:\Program Files\InstallShield Installation Information
[15/10/2008|22:14] C:\Program Files\Internet Explorer
[31/10/2008|16:56] C:\Program Files\Lavasoft
[14/08/2008|10:26] C:\Program Files\Messenger
[03/09/2008|21:49] C:\Program Files\Messenger Plus! Live
[18/07/2008|19:34] C:\Program Files\Micro Application
[21/05/2008|11:34] C:\Program Files\microsoft frontpage
[21/05/2008|18:55] C:\Program Files\Microsoft Office
[21/05/2008|18:54] C:\Program Files\Microsoft Visual Studio
[25/07/2008|09:51] C:\Program Files\Microsoft Works
[21/05/2008|18:56] C:\Program Files\Microsoft.NET
[21/05/2008|11:31] C:\Program Files\Movie Maker
[01/06/2008|11:24] C:\Program Files\Mozilla Firefox
[30/10/2008|21:38] C:\Program Files\MSN
[21/05/2008|11:30] C:\Program Files\MSN Gaming Zone
[22/05/2008|10:27] C:\Program Files\MSN Messenger
[31/10/2008|16:32] C:\Program Files\MSN Toolbar Suite
[16/10/2008|20:14] C:\Program Files\MySecurityCenter
[21/05/2008|11:31] C:\Program Files\NetMeeting
[19/10/2008|20:09] C:\Program Files\NOS
[21/05/2008|11:30] C:\Program Files\Online Services
[21/05/2008|20:11] C:\Program Files\Outlook Express
[18/06/2008|10:38] C:\Program Files\Panda Security
[02/11/2008|16:36] C:\Program Files\Picasa2
[19/10/2008|18:37] C:\Program Files\Piolet
[31/10/2008|11:59] C:\Program Files\QUAD Utilities
[15/09/2008|17:23] C:\Program Files\QuickTime
[18/08/2008|19:37] C:\Program Files\Samsung
[21/05/2008|11:32] C:\Program Files\Services en ligne
[30/10/2008|21:21] C:\Program Files\Spybot - Search & Destroy
[18/07/2008|19:46] C:\Program Files\Uninstall Information
[18/06/2008|19:14] C:\Program Files\Windows Live
[30/10/2008|21:25] C:\Program Files\Windows Media Connect 2
[30/10/2008|22:06] C:\Program Files\Windows Media Player
[21/05/2008|11:30] C:\Program Files\Windows NT
[21/05/2008|11:32] C:\Program Files\WindowsUpdate
[15/09/2008|17:25] C:\Program Files\Woonoz
[21/05/2008|11:34] C:\Program Files\xerox
[26/06/2008|11:30] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/10/2008|20:56] C:\Program Files\Fichiers communs\Adobe
[30/10/2008|21:36] C:\Program Files\Fichiers communs\BitDefender
[21/05/2008|18:55] C:\Program Files\Fichiers communs\DESIGNER
[30/10/2008|21:19] C:\Program Files\Fichiers communs\InstallShield
[25/07/2008|09:51] C:\Program Files\Fichiers communs\Microsoft Shared
[21/05/2008|11:31] C:\Program Files\Fichiers communs\MSSoap
[21/05/2008|13:12] C:\Program Files\Fichiers communs\ODBC
[19/06/2008|11:34] C:\Program Files\Fichiers communs\Panda Software
[28/10/2008|19:22] C:\Program Files\Fichiers communs\PC Tools
[21/05/2008|11:31] C:\Program Files\Fichiers communs\Services
[21/05/2008|13:12] C:\Program Files\Fichiers communs\SpeechEngines
[12/10/2008|17:02] C:\Program Files\Fichiers communs\Symantec Shared
[21/05/2008|20:11] C:\Program Files\Fichiers communs\System
[21/05/2008|19:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 31 Processes )

iexplore.exe ~ [PID:3508]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\two setup mode load
C:\DOCUME~1\ALLUSE~1\APPLIC~1\two setup mode load\Log Store.exe
C:\DOCUME~1\Benamas\APPLIC~1\creati~1
C:\DOCUME~1\Benamas\APPLIC~1\creati~1\bgvjerny.exe
C:\DOCUME~1\Benamas\APPLIC~1\creati~1\cgvmmnrn.exe
C:\DOCUME~1\Benamas\APPLIC~1\creati~1\Grey Manager Okay.exe
C:\DOCUME~1\Benamas\APPLIC~1\creati~1\meta bend test else.exe
C:\DOCUME~1\Benamas\APPLIC~1\creati~1\rrfboqwq.exe
C:\DOCUME~1\Benamas\APPLIC~1\creati~1\yemtdkgj.exe
C:\Program Files\creati~1
C:\DOCUME~1\Benamas\LOCALS~1\Temp\nsj43.tmp
C:\DOCUME~1\Benamas\LOCALS~1\Temp\nsoCC.tmp
C:\Program Files\Circle Developement
C:\DOCUME~1\Benamas\Cookies\benamas@advertising[2].txt
C:\DOCUME~1\Benamas\Cookies\benamas@adin.bigpoint[2].txt
C:\DOCUME~1\Benamas\Cookies\benamas@bigpoint[2].txt
C:\DOCUME~1\Benamas\Cookies\benamas@fr.seafight.bigpoint[1].txt
C:\DOCUME~1\Benamas\Cookies\benamas@fr.xblaster.bigpoint[1].txt
C:\DOCUME~1\Benamas\Cookies\benamas@adopt.euroclick[2].txt
C:\DOCUME~1\Benamas\Cookies\benamas@pacificpoker[1].txt
C:\DOCUME~1\Benamas\Cookies\benamas@fr.seafight.bigpoint[1].txt
C:\WINDOWS\Tasks\ADE9E82991929B41.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Mode Load Mpeg Less"="C:\\Documents and Settings\\All Users\\Application Data\\two setup mode load\\Log Store.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-03 12:43:45
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:53][D:5]-> C:\DOCUME~1\Benamas\LOCALS~1\Temp
[F:102][D:0]-> C:\DOCUME~1\Benamas\Cookies
[F:2857][D:8]-> C:\DOCUME~1\Benamas\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 03/11/2008|12:44 - Option : [1]

--------------------\\ Fin du rapport a 12:44:27

Re,

Relance Lop S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
[#ff0000]! Ne ferme pas la fenêtre lors de la suppression ! [/#f]
Un rapport sera généré, poste son contenu ici.

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Benamas ( Administrator )
BOOT : Normal boot
Antivirus : Bitdefender Antivirus 8.0 (Not Activated)
Firewall : Bitdefender Firewall 8.0 (Not Activated)
C:\ (Local Disk) - NTFS - Total:78 Go (Free:66 Go)
D:\ (Local Disk) - NTFS - Total:108 Go (Free:107 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
K:\ (USB) - FAT - Total:470 Mo (Free:0 Go)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 03/11/2008|13:22 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\two setup mode load\Log Store.exe
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1\bgvjerny.exe
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1\cgvmmnrn.exe
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1\Grey Manager Okay.exe
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1\meta bend test else.exe
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1\rrfboqwq.exe
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1\yemtdkgj.exe
Supprime! - C:\DOCUME~1\Benamas\LOCALS~1\Temp\nsj43.tmp
Supprime! - C:\DOCUME~1\Benamas\LOCALS~1\Temp\nsoCC.tmp
Supprime! - C:\DOCUME~1\Benamas\Cookies\benamas@advertising[2].txt
Supprime! - C:\DOCUME~1\Benamas\Cookies\benamas@adin.bigpoint[2].txt
Supprime! - C:\DOCUME~1\Benamas\Cookies\benamas@bigpoint[2].txt
Supprime! - C:\DOCUME~1\Benamas\Cookies\benamas@fr.seafight.bigpoint[1].txt
Supprime! - C:\DOCUME~1\Benamas\Cookies\benamas@fr.xblaster.bigpoint[1].txt
Supprime! - C:\DOCUME~1\Benamas\Cookies\benamas@pacificpoker[1].txt
Supprime! - C:\WINDOWS\Tasks\ADE9E82991929B41.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\two setup mode load
Supprime! - C:\DOCUME~1\Benamas\APPLIC~1\creati~1
Supprime! - C:\Program Files\creati~1
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[30/09/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[15/09/2008|17:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[22/09/2008|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg8
[03/07/2008|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[16/10/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESET
[02/11/2008|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[02/11/2008|16:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/07/2008|12:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[13/09/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[24/09/2008|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
[24/09/2008|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microgaming
[16/08/2008|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[31/10/2008|16:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
[21/05/2008|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[19/10/2008|20:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[28/05/2008|12:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[18/06/2008|10:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
[30/10/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/10/2008|22:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[06/07/2008|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[16/06/2008|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[22/05/2008|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[31/10/2008|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[30/10/2008|21:00] C:\DOCUME~1\Benamas\APPLIC~1\Adobe
[15/09/2008|17:12] C:\DOCUME~1\Benamas\APPLIC~1\Apple Computer
[30/05/2008|17:12] C:\DOCUME~1\Benamas\APPLIC~1\ArcSoft
[31/05/2008|11:03] C:\DOCUME~1\Benamas\APPLIC~1\AVGTOOLBAR
[28/10/2008|19:11] C:\DOCUME~1\Benamas\APPLIC~1\EoRezo
[16/10/2008|19:44] C:\DOCUME~1\Benamas\APPLIC~1\ESET
[21/05/2008|19:15] C:\DOCUME~1\Benamas\APPLIC~1\Google
[15/08/2008|17:44] C:\DOCUME~1\Benamas\APPLIC~1\Help
[21/05/2008|11:56] C:\DOCUME~1\Benamas\APPLIC~1\Identities
[30/10/2008|21:00] C:\DOCUME~1\Benamas\APPLIC~1\Macromedia
[31/10/2008|14:36] C:\DOCUME~1\Benamas\APPLIC~1\Microsoft
[21/05/2008|12:09] C:\DOCUME~1\Benamas\APPLIC~1\Mozilla
[30/10/2008|21:38] C:\DOCUME~1\Benamas\APPLIC~1\MSNInstaller
[19/08/2008|12:36] C:\DOCUME~1\Benamas\APPLIC~1\Samsung
[04/07/2008|21:25] C:\DOCUME~1\Benamas\APPLIC~1\VadeRetro

[20/07/2008|21:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[22/09/2008|16:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft


[22/09/2008|16:57] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[03/11/2008 11:22][--ah-----] C:\WINDOWS\tasks\SA.DAT
[02/03/2006 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[30/09/2008|15:41] C:\Program Files\Adobe
[18/06/2008|11:57] C:\Program Files\algerie-zik
[21/06/2008|13:29] C:\Program Files\Alwil Software
[14/09/2008|16:27] C:\Program Files\ArcSoft
[30/10/2008|21:36] C:\Program Files\BitDefender
[02/11/2008|16:31] C:\Program Files\CCleaner
[21/05/2008|11:31] C:\Program Files\ComPlus Applications
[13/06/2008|20:16] C:\Program Files\Conduit
[15/09/2008|17:28] C:\Program Files\eChanblard
[31/10/2008|14:06] C:\Program Files\eMule
[28/10/2008|19:07] C:\Program Files\EoRezo
[02/11/2008|13:26] C:\Program Files\Fichiers communs
[12/10/2008|10:38] C:\Program Files\Free
[02/11/2008|16:35] C:\Program Files\Google
[06/07/2008|18:45] C:\Program Files\Goto Software
[28/10/2008|13:27] C:\Program Files\inKline Global
[30/10/2008|21:19] C:\Program Files\InstallShield Installation Information
[15/10/2008|22:14] C:\Program Files\Internet Explorer
[31/10/2008|16:56] C:\Program Files\Lavasoft
[14/08/2008|10:26] C:\Program Files\Messenger
[03/09/2008|21:49] C:\Program Files\Messenger Plus! Live
[18/07/2008|19:34] C:\Program Files\Micro Application
[21/05/2008|11:34] C:\Program Files\microsoft frontpage
[21/05/2008|18:55] C:\Program Files\Microsoft Office
[21/05/2008|18:54] C:\Program Files\Microsoft Visual Studio
[25/07/2008|09:51] C:\Program Files\Microsoft Works
[21/05/2008|18:56] C:\Program Files\Microsoft.NET
[21/05/2008|11:31] C:\Program Files\Movie Maker
[01/06/2008|11:24] C:\Program Files\Mozilla Firefox
[30/10/2008|21:38] C:\Program Files\MSN
[21/05/2008|11:30] C:\Program Files\MSN Gaming Zone
[22/05/2008|10:27] C:\Program Files\MSN Messenger
[31/10/2008|16:32] C:\Program Files\MSN Toolbar Suite
[16/10/2008|20:14] C:\Program Files\MySecurityCenter
[21/05/2008|11:31] C:\Program Files\NetMeeting
[19/10/2008|20:09] C:\Program Files\NOS
[21/05/2008|11:30] C:\Program Files\Online Services
[21/05/2008|20:11] C:\Program Files\Outlook Express
[18/06/2008|10:38] C:\Program Files\Panda Security
[02/11/2008|16:36] C:\Program Files\Picasa2
[19/10/2008|18:37] C:\Program Files\Piolet
[31/10/2008|11:59] C:\Program Files\QUAD Utilities
[15/09/2008|17:23] C:\Program Files\QuickTime
[18/08/2008|19:37] C:\Program Files\Samsung
[21/05/2008|11:32] C:\Program Files\Services en ligne
[30/10/2008|21:21] C:\Program Files\Spybot - Search & Destroy
[18/07/2008|19:46] C:\Program Files\Uninstall Information
[18/06/2008|19:14] C:\Program Files\Windows Live
[30/10/2008|21:25] C:\Program Files\Windows Media Connect 2
[30/10/2008|22:06] C:\Program Files\Windows Media Player
[21/05/2008|11:30] C:\Program Files\Windows NT
[21/05/2008|11:32] C:\Program Files\WindowsUpdate
[15/09/2008|17:25] C:\Program Files\Woonoz
[21/05/2008|11:34] C:\Program Files\xerox
[26/06/2008|11:30] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/10/2008|20:56] C:\Program Files\Fichiers communs\Adobe
[30/10/2008|21:36] C:\Program Files\Fichiers communs\BitDefender
[21/05/2008|18:55] C:\Program Files\Fichiers communs\DESIGNER
[30/10/2008|21:19] C:\Program Files\Fichiers communs\InstallShield
[25/07/2008|09:51] C:\Program Files\Fichiers communs\Microsoft Shared
[21/05/2008|11:31] C:\Program Files\Fichiers communs\MSSoap
[21/05/2008|13:12] C:\Program Files\Fichiers communs\ODBC
[19/06/2008|11:34] C:\Program Files\Fichiers communs\Panda Software
[28/10/2008|19:22] C:\Program Files\Fichiers communs\PC Tools
[21/05/2008|11:31] C:\Program Files\Fichiers communs\Services
[21/05/2008|13:12] C:\Program Files\Fichiers communs\SpeechEngines
[12/10/2008|17:02] C:\Program Files\Fichiers communs\Symantec Shared
[21/05/2008|20:11] C:\Program Files\Fichiers communs\System
[21/05/2008|19:28] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 30 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Benamas\Cookies\benamas@adopt.euroclick[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-03 13:22:55
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:49][D:3]-> C:\DOCUME~1\Benamas\LOCALS~1\Temp
[F:102][D:0]-> C:\DOCUME~1\Benamas\Cookies
[F:3263][D:8]-> C:\DOCUME~1\Benamas\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 03/11/2008|12:44 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 03/11/2008|13:23 - Option : [2]

--------------------\\ Fin du rapport a 13:23:28

MSScanAppDataDir, tu connais ?

non pourquoi ?

Dossier suspect.
C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
Ce dossier contient des fichiers ?

et comment je fait pour le retrouver je suppose que je doit le supprimer c'est sa.

merci de m' aider.

Démarrer / Exécuter / C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
Tu te retrouves dans le dossier.

je l'ai retrouver mais je ne pouvait le lire et je l'ai supprimer.

merci

Encore des soucis ?

oui en faite j'aimerai savoir quand je telecharge des fichiers normalement mon fichier est jaune comme toujours et là. mais je ne sait pas si tu voit ce que c'est.
c'est comme si c'etait une feuille et au milieu c'est un une page d'internet ou il ya de petit carré de differente couleur et quand je veut cliquer il m'affiche ouvrir avec ....adobe word internet etc... et j'aimerai l'enlever et mettre autre chose car d'habitude il n'est pas comme sa. j'aimerai avoir un coup main ensuite je ne tembee plus car je suis pas trop forte à sa.
merci d'avance

C'est quoi comme type de fichier ? .exe .zip ?

et bien je n'ai occune idée car il n'ya rien ecrit mai je pence exe mais je ne suis pas sur.
merci

Affiche les extensions pour avoir la certitude (recherche Google si tu ne sais pas)

je ne sait meme pas comment on fait lol je sait je suis nulle a sa

Bonjour,
j'ai des petits problèmes avec google. Si je fais une recherche, google et bien sa me sort rien du tout Cependant, quand je fait des recherche sur msn et yahoo mes recherche se font automatiques mai aussi quand je met ma clé usb dans ma tour normalement automatikement je le poste de travail et depuis je ne lai pas.
j'aimerai bien que vous puissez m'aide à resoudre mes problemes.

D'avance merci