High-Tech Santé Médecine Droit-Finances

Réalisation

vidéo numérique

Rechercher : dans
Par :

Help Cheval de Troie CiD & RON Too1 Du-little

Dernière réponse le 1 fév 2009 à 23:04:08 PlanetGong, le 1 fév 2009 à 16:03:41 
 Signaler ce message aux modérateurs

Bonjour,

J'ai besoin d'aide pour nettoyer le pc.
Infection de CiD et j'ai également trouvé le processus RON Too1 Du-little qui semble etre un autre virus.

Merci d'avance.

Et c'est en sciant que Leonard devint scie

Configuration: Windows XP
Internet Explorer 7.0

Meilleures réponses pour « Help Cheval de Troie CiD & RON Too1 Du little » dans :
Aucun port ouvert = pas de cheval de Troie VoirMythe Si je n'ai aucun port ouvert, je suis sûr que je n'ai pas de cheval de Troie sur mon ordinateur. Réalité FAUX. Explications Un port ouvert n'est pas nécessaire pour contrôler un ordinateur sur lequel est installé un cheval de Troie. ...
Introduction aux chevaux de Troie VoirLes chevaux de Troie On appelle « Cheval de Troie » (en anglais trojan horse) un programme informatique effectuant des opérations malicieuses à l'insu de l'utilisateur. Le nom « Cheval de Troie » provient d'une légende narrée dans l'Iliade (de...
Posez votre question Répondre

1

gil le fantom, le 1 fév 2009 à 16:13:01

Bonjour

tu télécharge Lop S&D.exe sur ton Bureau.http://eric.71.mespages.googlepages.com/LopSD.exe

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

   
Répondre à gil le fantom

2

PlanetGong, le 1 fév 2009 à 16:30:40

Salut,

Merci de ton coup de main.

Ci-dessous le rapport demandé.

Juste une précision (peut etre sans importance ?...) depuis la derniere mise a jour windows, mon disque C est quasi plein (tout ce qui était sur la partition D a été tranférée sous C. Je n'ai aucune idée comment y remédier, mais cela ralenti sérieusement le pc lors des scan divers !


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.50GHz )
BIOS : Phoenix NoteBIOS 4.0 Release 6.0
USER : Richard ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 15.0.0.60 (Activated)
Firewall : Norton Internet Security 15.0.0.60 (Activated)
C:\ (Local Disk) - NTFS - Total:27 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:20 Go (Free:13 Go)
E:\ (USB)
G:\ (Local Disk) - FAT32 - Total:465 Go (Free:343 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 01/02/2009|15:20 )

--------------------\\ Listing des dossiers dans APPLIC~1

[04/07/2007|12:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[03/03/2005|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[04/03/2005|13:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[04/03/2005|13:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[04/03/2005|13:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation
[05/07/2007|08:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\SUPERAntiSpyware.com
[04/03/2005|13:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[30/12/2008|18:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[12/12/2008|02:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[10/03/2007|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[07/02/2008|01:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[07/02/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[31/01/2009|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[23/07/2008|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[30/08/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[01/11/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Citrix
[15/11/2007|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DataViz
[23/07/2008|22:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[20/09/2006|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[25/10/2006|03:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/07/2007|00:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[15/11/2007|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotSync
[11/01/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Insight Software
[11/01/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Insight Software Solutions
[16/11/2006|09:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[01/02/2009|15:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kontiki
[16/06/2007|13:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[18/09/2005|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[03/09/2008|04:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Memeo
[30/08/2008|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/08/2007|08:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[02/08/2005|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
[10/03/2006|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[24/03/2008|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[24/03/2008|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[12/12/2008|07:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[15/12/2007|09:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCPitstop
[12/05/2007|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[14/08/2005|15:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[04/03/2005|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[13/06/2008|21:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sky
[26/10/2008|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[27/07/2005|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[30/08/2008|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[01/02/2009|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/01/2009|22:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy
[05/07/2007|08:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com
[27/01/2009|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/09/2008|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[09/02/2008|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[28/06/2007|09:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[23/11/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[27/07/2005|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
[19/01/2006|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[04/10/2007|05:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
[12/08/2005|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/06/2007|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!
[21/11/2006|09:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[21/09/2005|11:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[27/05/2008|10:17] C:\DOCUME~1\Dan\APPLIC~1\Adobe
[05/09/2007|20:37] C:\DOCUME~1\Dan\APPLIC~1\FaxCtr
[02/03/2008|15:58] C:\DOCUME~1\Dan\APPLIC~1\Google
[18/11/2007|17:53] C:\DOCUME~1\Dan\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Dan\APPLIC~1\Identities
[26/09/2005|16:17] C:\DOCUME~1\Dan\APPLIC~1\InterVideo
[02/09/2005|10:35] C:\DOCUME~1\Dan\APPLIC~1\Macromedia
[28/03/2006|07:05] C:\DOCUME~1\Dan\APPLIC~1\Microsoft
[30/09/2007|11:24] C:\DOCUME~1\Dan\APPLIC~1\OpenOffice.org2
[17/03/2007|19:31] C:\DOCUME~1\Dan\APPLIC~1\Real
[19/06/2006|06:56] C:\DOCUME~1\Dan\APPLIC~1\sony
[31/08/2005|17:02] C:\DOCUME~1\Dan\APPLIC~1\Sony Corporation
[15/07/2007|18:48] C:\DOCUME~1\Dan\APPLIC~1\Sony Ericsson
[02/09/2005|11:03] C:\DOCUME~1\Dan\APPLIC~1\Sun
[30/09/2007|09:54] C:\DOCUME~1\Dan\APPLIC~1\Symantec
[15/07/2007|18:50] C:\DOCUME~1\Dan\APPLIC~1\Teleca
[21/12/2006|07:34] C:\DOCUME~1\Dan\APPLIC~1\Yahoo!

[04/03/2005|13:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[03/03/2005|17:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[04/03/2005|13:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[04/03/2005|13:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[04/03/2005|13:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation
[04/03/2005|13:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[19/05/2008|17:23] C:\DOCUME~1\Fidou\APPLIC~1\Adobe
[20/04/2008|15:56] C:\DOCUME~1\Fidou\APPLIC~1\AdobeUM
[26/03/2006|11:39] C:\DOCUME~1\Fidou\APPLIC~1\Apple Computer
[11/09/2007|07:44] C:\DOCUME~1\Fidou\APPLIC~1\DivX
[30/09/2007|09:44] C:\DOCUME~1\Fidou\APPLIC~1\FaxCtr
[31/10/2006|19:42] C:\DOCUME~1\Fidou\APPLIC~1\Google
[28/03/2006|09:54] C:\DOCUME~1\Fidou\APPLIC~1\Help
[18/11/2007|11:04] C:\DOCUME~1\Fidou\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Fidou\APPLIC~1\Identities
[24/11/2005|18:56] C:\DOCUME~1\Fidou\APPLIC~1\InterVideo
[20/08/2005|16:21] C:\DOCUME~1\Fidou\APPLIC~1\Macromedia
[28/01/2008|13:38] C:\DOCUME~1\Fidou\APPLIC~1\Media Player Classic
[08/12/2008|18:30] C:\DOCUME~1\Fidou\APPLIC~1\Microsoft
[23/03/2008|14:15] C:\DOCUME~1\Fidou\APPLIC~1\Motive
[08/11/2007|11:10] C:\DOCUME~1\Fidou\APPLIC~1\Mozilla
[30/01/2009|23:10] C:\DOCUME~1\Fidou\APPLIC~1\OpenOffice.org2
[27/05/2006|10:23] C:\DOCUME~1\Fidou\APPLIC~1\Real
[16/01/2009|22:38] C:\DOCUME~1\Fidou\APPLIC~1\Skype
[03/08/2005|22:08] C:\DOCUME~1\Fidou\APPLIC~1\sony
[26/08/2006|16:01] C:\DOCUME~1\Fidou\APPLIC~1\Sony Corporation
[15/07/2007|16:11] C:\DOCUME~1\Fidou\APPLIC~1\Sony Ericsson
[05/08/2005|19:02] C:\DOCUME~1\Fidou\APPLIC~1\Sun
[30/09/2007|08:19] C:\DOCUME~1\Fidou\APPLIC~1\Symantec
[15/07/2007|16:13] C:\DOCUME~1\Fidou\APPLIC~1\Teleca
[08/11/2007|11:10] C:\DOCUME~1\Fidou\APPLIC~1\TomTom
[07/10/2007|13:30] C:\DOCUME~1\Fidou\APPLIC~1\vlc
[21/11/2006|21:31] C:\DOCUME~1\Fidou\APPLIC~1\Yahoo!

[03/04/2007|17:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\FaxCtr
[26/08/2005|23:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[31/01/2009|12:00] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[26/08/2005|23:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\sony
[16/11/2008|15:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Sony Corporation
[12/09/2007|20:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Yahoo!

[19/01/2007|07:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[11/10/2005|00:30] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[31/01/2009|12:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[05/11/2005|21:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec


[20/09/2008|18:24] C:\DOCUME~1\Richard\APPLIC~1\AccurateRip
[27/11/2008|09:14] C:\DOCUME~1\Richard\APPLIC~1\Adobe
[14/05/2008|07:32] C:\DOCUME~1\Richard\APPLIC~1\AdobeUM
[23/03/2007|18:52] C:\DOCUME~1\Richard\APPLIC~1\Ahead
[07/06/2008|11:57] C:\DOCUME~1\Richard\APPLIC~1\Apple Computer
[06/12/2008|18:55] C:\DOCUME~1\Richard\APPLIC~1\ArcSoft
[31/01/2009|12:48] C:\DOCUME~1\Richard\APPLIC~1\AVGTOOLBAR
[23/07/2008|23:07] C:\DOCUME~1\Richard\APPLIC~1\AVS4YOU
[27/11/2008|09:14] C:\DOCUME~1\Richard\APPLIC~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[20/09/2008|18:27] C:\DOCUME~1\Richard\APPLIC~1\dBpoweramp
[15/11/2006|12:40] C:\DOCUME~1\Richard\APPLIC~1\DivX
[07/03/2006|11:34] C:\DOCUME~1\Richard\APPLIC~1\DownloadManager
[30/12/2008|14:52] C:\DOCUME~1\Richard\APPLIC~1\dvdcss
[02/01/2007|17:07] C:\DOCUME~1\Richard\APPLIC~1\EoRezo
[21/09/2006|08:25] C:\DOCUME~1\Richard\APPLIC~1\FaxCtr
[30/01/2009|22:35] C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide
[19/11/2006|12:35] C:\DOCUME~1\Richard\APPLIC~1\Google
[11/09/2005|19:18] C:\DOCUME~1\Richard\APPLIC~1\Help
[15/11/2007|09:29] C:\DOCUME~1\Richard\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Richard\APPLIC~1\Identities
[08/11/2007|11:18] C:\DOCUME~1\Richard\APPLIC~1\InstallShield
[29/07/2005|16:05] C:\DOCUME~1\Richard\APPLIC~1\InterVideo
[26/04/2007|21:37] C:\DOCUME~1\Richard\APPLIC~1\Lavasoft
[15/11/2007|10:50] C:\DOCUME~1\Richard\APPLIC~1\Leadertech
[04/03/2005|13:45] C:\DOCUME~1\Richard\APPLIC~1\Macromedia
[31/05/2007|00:23] C:\DOCUME~1\Richard\APPLIC~1\Media Player Classic
[31/08/2008|07:57] C:\DOCUME~1\Richard\APPLIC~1\Microsoft
[01/11/2008|12:24] C:\DOCUME~1\Richard\APPLIC~1\Motive
[01/05/2008|20:24] C:\DOCUME~1\Richard\APPLIC~1\Mozilla
[05/11/2005|11:37] C:\DOCUME~1\Richard\APPLIC~1\MSNInstaller
[14/06/2008|12:29] C:\DOCUME~1\Richard\APPLIC~1\NCH Swift Sound
[20/01/2009|08:42] C:\DOCUME~1\Richard\APPLIC~1\OpenOffice.org2
[23/07/2008|20:29] C:\DOCUME~1\Richard\APPLIC~1\Real
[12/08/2005|10:37] C:\DOCUME~1\Richard\APPLIC~1\Roxio
[10/03/2007|14:56] C:\DOCUME~1\Richard\APPLIC~1\Simple Star
[01/02/2009|14:39] C:\DOCUME~1\Richard\APPLIC~1\Skype
[01/02/2009|10:13] C:\DOCUME~1\Richard\APPLIC~1\skypePM
[10/03/2007|15:47] C:\DOCUME~1\Richard\APPLIC~1\Snapfish
[29/07/2005|16:03] C:\DOCUME~1\Richard\APPLIC~1\sony
[04/09/2008|11:37] C:\DOCUME~1\Richard\APPLIC~1\Sony Corporation
[14/07/2007|11:42] C:\DOCUME~1\Richard\APPLIC~1\Sony Ericsson
[28/07/2005|21:09] C:\DOCUME~1\Richard\APPLIC~1\Sun
[05/07/2007|09:10] C:\DOCUME~1\Richard\APPLIC~1\SUPERAntiSpyware.com
[28/09/2007|21:51] C:\DOCUME~1\Richard\APPLIC~1\Symantec
[04/03/2007|15:16] C:\DOCUME~1\Richard\APPLIC~1\Talkback
[14/07/2007|11:43] C:\DOCUME~1\Richard\APPLIC~1\Teleca
[14/09/2007|10:03] C:\DOCUME~1\Richard\APPLIC~1\TomTom
[23/10/2006|04:26] C:\DOCUME~1\Richard\APPLIC~1\vlc
[04/10/2007|06:21] C:\DOCUME~1\Richard\APPLIC~1\Vso
[20/11/2006|23:01] C:\DOCUME~1\Richard\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[01/02/2009 15:00][--ah-----] C:\WINDOWS\tasks\B9A16FDD909F1C65.job
[30/12/2008 16:55][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[12/01/2009 21:20][--a------] C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Richard.job
[01/02/2009 14:27][--ah-----] C:\WINDOWS\tasks\SA.DAT
[04/08/2004 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( B9A16FDD909F1C65.job )=( c:\docume~1\richard\applic~1\forder~1\32locksmfcd.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[30/01/2009|22:34] C:\Program Files\3wPlayer
[21/09/2006|10:14] C:\Program Files\Abbyy FineReader 6.0 Sprint
[25/11/2008|07:49] C:\Program Files\Adobe
[23/03/2007|12:53] C:\Program Files\Ahead
[03/07/2007|08:17] C:\Program Files\Alwil Software
[08/07/2007|10:28] C:\Program Files\Apoint
[11/09/2008|18:13] C:\Program Files\Apple Software Update
[06/12/2008|18:49] C:\Program Files\ArcSoft
[02/09/2008|05:31] C:\Program Files\Avanquest update
[31/01/2009|12:04] C:\Program Files\AVG
[20/09/2008|17:42] C:\Program Files\AVS4YOU
[03/10/2007|22:27] C:\Program Files\BearFlix
[31/01/2009|13:45] C:\Program Files\BitTorrent Fastest Tool
[09/08/2005|08:21] C:\Program Files\Boardgamecentral
[30/12/2008|18:10] C:\Program Files\Bonjour
[26/07/2006|08:40] C:\Program Files\BT Broadband 2091
[01/11/2008|12:25] C:\Program Files\BT Broadband Desktop Help
[31/01/2009|11:37] C:\Program Files\CCleaner
[24/07/2008|06:14] C:\Program Files\CDRWIN5
[25/01/2009|23:55] C:\Program Files\Common Files
[03/03/2005|17:35] C:\Program Files\ComPlus Applications
[05/08/2005|22:47] C:\Program Files\CONEXANT
[11/05/2006|11:42] C:\Program Files\Crimsonland
[23/07/2008|22:55] C:\Program Files\Cucusoft
[24/07/2008|07:25] C:\Program Files\DivX
[27/11/2007|22:28] C:\Program Files\Documents To Go
[03/08/2006|15:36] C:\Program Files\DVRRemoteViewer16
[01/02/2009|06:36] C:\Program Files\eMule
[04/03/2005|13:44] C:\Program Files\FlashPlayer
[30/01/2009|22:35] C:\Program Files\Ford Error Hide
[04/12/2006|08:19] C:\Program Files\GammonEmpire
[02/09/2007|17:36] C:\Program Files\Ganymede
[13/01/2008|17:03] C:\Program Files\Google
[05/01/2007|15:16] C:\Program Files\Grisoft
[09/07/2007|23:23] C:\Program Files\HighJackThis
[06/12/2008|18:53] C:\Program Files\InstallShield Installation Information
[10/04/2006|11:21] C:\Program Files\Intel
[03/10/2007|22:32] C:\Program Files\InterActual
[12/12/2008|21:48] C:\Program Files\Internet Explorer
[04/03/2005|13:39] C:\Program Files\InterVideo
[30/12/2008|18:06] C:\Program Files\iPod
[04/03/2005|13:36] C:\Program Files\ISP
[30/12/2008|18:07] C:\Program Files\iTunes
[14/08/2008|20:55] C:\Program Files\Java
[23/03/2007|13:21] C:\Program Files\K-Lite Codec Pack
[13/06/2008|21:42] C:\Program Files\Kontiki
[16/06/2007|13:50] C:\Program Files\Lavasoft
[08/07/2007|10:42] C:\Program Files\Lexmark 3400 Series
[05/01/2007|14:57] C:\Program Files\Lexmark Toolbar
[07/01/2009|07:36] C:\Program Files\lx_cats
[12/01/2009|07:33] C:\Program Files\Macro Express3
[06/09/2008|10:08] C:\Program Files\Messenger
[30/08/2007|17:04] C:\Program Files\Micro Application
[07/08/2007|05:53] C:\Program Files\Microsoft ActiveSync
[03/03/2005|17:38] C:\Program Files\microsoft frontpage
[27/07/2005|21:52] C:\Program Files\Microsoft Office
[08/12/2008|06:12] C:\Program Files\Microsoft Silverlight
[27/07/2005|21:36] C:\Program Files\Microsoft SQL Server
[27/07/2005|21:47] C:\Program Files\Microsoft Works
[17/05/2007|15:03] C:\Program Files\Mindscape
[17/08/2007|11:06] C:\Program Files\MoodLogic
[27/07/2005|21:35] C:\Program Files\Moodlogic HTML
[06/09/2008|09:46] C:\Program Files\Movie Maker
[05/03/2007|20:03] C:\Program Files\Mozilla Firefox
[05/11/2005|11:37] C:\Program Files\MSN
[03/03/2005|17:34] C:\Program Files\MSN Gaming Zone
[17/11/2006|23:59] C:\Program Files\MSXML 4.0
[17/06/2007|15:47] C:\Program Files\Multi_Media
[10/03/2006|11:41] C:\Program Files\Napster
[14/06/2008|12:27] C:\Program Files\NCH Software
[14/06/2008|12:30] C:\Program Files\NCH Swift Sound
[06/09/2008|09:39] C:\Program Files\NetMeeting
[21/12/2007|21:45] C:\Program Files\Norton Internet Security
[13/07/2008|17:00] C:\Program Files\Norton Security Scan
[12/12/2008|07:48] C:\Program Files\NOS
[03/03/2005|17:36] C:\Program Files\Online Services
[03/10/2007|22:15] C:\Program Files\OpenOffice.org 2.2
[04/04/2008|05:35] C:\Program Files\OpenOffice.org 2.3
[19/06/2008|06:42] C:\Program Files\OpenOffice.org 2.4
[06/09/2008|09:39] C:\Program Files\Outlook Express
[26/02/2006|18:24] C:\Program Files\PacQuest 3D
[15/11/2007|10:59] C:\Program Files\palmOne
[06/12/2008|18:51] C:\Program Files\PC VGA Camer@ Plus
[01/03/2008|17:49] C:\Program Files\Picasa2
[11/08/2005|23:57] C:\Program Files\Program Shortcuts
[10/02/2006|00:51] C:\Program Files\quicksnooker
[30/12/2008|17:59] C:\Program Files\QuickTime
[22/11/2005|17:58] C:\Program Files\QuickZip4
[11/05/2006|09:59] C:\Program Files\Real
[11/12/2005|00:04] C:\Program Files\Realore
[22/06/2007|20:56] C:\Program Files\Realtek
[24/02/2006|10:34] C:\Program Files\ReflexiveArcade
[17/09/2005|09:27] C:\Program Files\Sega
[13/06/2008|21:41] C:\Program Files\Sky
[26/10/2008|11:17] C:\Program Files\Skype
[22/10/2008|05:08] C:\Program Files\Sony
[30/08/2008|23:09] C:\Program Files\Sony Ericsson
[09/03/2007|08:27] C:\Program Files\Sony Handheld
[31/01/2009|10:27] C:\Program Files\Spybot - Search & Destroy
[22/03/2008|17:50] C:\Program Files\Sun
[05/07/2007|09:10] C:\Program Files\SUPERAntiSpyware
[04/06/2008|06:07] C:\Program Files\Symantec
[05/10/2006|07:19] C:\Program Files\Symantec Technical Support
[12/10/2008|09:57] C:\Program Files\TomTom HOME 2
[27/07/2005|21:37] C:\Program Files\Uninstall Information
[04/03/2005|13:45] C:\Program Files\Utimaco
[01/06/2007|10:58] C:\Program Files\VideoLAN
[04/10/2007|06:21] C:\Program Files\VSO
[30/08/2008|16:58] C:\Program Files\Western Digital
[30/08/2008|16:52] C:\Program Files\Western Digital Technologies
[23/07/2008|21:37] C:\Program Files\Winamp
[23/07/2008|21:50] C:\Program Files\WinAVI Video Converter
[23/03/2007|11:44] C:\Program Files\Windows Media Connect 2
[06/09/2008|09:39] C:\Program Files\Windows Media Player
[06/09/2008|09:39] C:\Program Files\Windows NT
[28/09/2007|21:47] C:\Program Files\Windows Sidebar
[03/03/2005|17:36] C:\Program Files\WindowsUpdate
[03/03/2005|17:38] C:\Program Files\xerox
[13/09/2008|09:14] C:\Program Files\Xvid
[04/03/2005|13:45] C:\Program Files\Yahoo HTML
[20/11/2006|23:00] C:\Program Files\Yahoo!
[04/03/2005|13:45] C:\Program Files\YahooMFU

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[25/11/2008|08:02] C:\Program Files\Common Files\Adobe
[25/11/2008|07:47] C:\Program Files\Common Files\Adobe AIR
[23/03/2007|12:47] C:\Program Files\Common Files\Ahead
[30/12/2008|18:06] C:\Program Files\Common Files\Apple
[06/12/2008|18:50] C:\Program Files\Common Files\ArcSoft
[20/09/2008|17:42] C:\Program Files\Common Files\AVSMedia
[15/11/2007|11:00] C:\Program Files\Common Files\DataViz
[27/07/2005|21:50] C:\Program Files\Common Files\DESIGNER
[25/01/2009|23:56] C:\Program Files\Common Files\Download Manager
[30/09/2005|04:27] C:\Program Files\Common Files\EPSON
[04/03/2005|13:38] C:\Program Files\Common Files\InstallShield
[04/03/2005|13:34] C:\Program Files\Common Files\Java
[18/09/2005|20:36] C:\Program Files\Common Files\Macrovision Shared
[08/12/2008|16:36] C:\Program Files\Common Files\Microsoft Shared
[01/11/2008|12:31] C:\Program Files\Common Files\Motive
[03/03/2005|17:35] C:\Program Files\Common Files\MSSoap
[10/03/2007|14:48] C:\Program Files\Common Files\Nero
[18/08/2005|00:02] C:\Program Files\Common Files\NSV
[03/03/2005|17:29] C:\Program Files\Common Files\ODBC
[06/12/2008|18:51] C:\Program Files\Common Files\PAC7302
[23/07/2008|20:26] C:\Program Files\Common Files\Real
[20/11/2006|22:53] C:\Program Files\Common Files\Scanner
[03/03/2005|17:35] C:\Program Files\Common Files\Services
[26/10/2008|11:17] C:\Program Files\Common Files\Skype
[12/07/2006|07:22] C:\Program Files\Common Files\Sony Shared
[03/03/2005|17:28] C:\Program Files\Common Files\SpeechEngines
[29/07/2005|16:03] C:\Program Files\Common Files\SWF Studio
[01/02/2009|10:20] C:\Program Files\Common Files\Symantec Shared
[06/09/2008|09:39] C:\Program Files\Common Files\System
[24/07/2008|06:13] C:\Program Files\Common Files\Wise Installation Wizard
[23/07/2008|20:27] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 66 Processes )

IEXPLORE.EXE ~ [PID:3444]
IEXPLORE.EXE ~ [PID:260]
IEXPLORE.EXE ~ [PID:3024]
IEXPLORE.EXE ~ [PID:4792]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\Richard\APPLIC~1\FORDER~1
C:\DOCUME~1\Richard\APPLIC~1\FORDER~1\32locksmfcd.exe
C:\DOCUME~1\Richard\APPLIC~1\FORDER~1\DVD OPTION START.exe
C:\DOCUME~1\Richard\APPLIC~1\FORDER~1\gsibsvkt.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide
C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\32locksmfcd.exe
C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\DVD OPTION START.exe
C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\gsibsvkt.exe
C:\Program Files\Ford Error Hide
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy\Ping regs.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy\Ping regs.exe
C:\DOCUME~1\Richard\APPLIC~1\forder~1
C:\DOCUME~1\Richard\APPLIC~1\forder~1\32locksmfcd.exe
C:\DOCUME~1\Richard\APPLIC~1\forder~1\DVD OPTION START.exe
C:\DOCUME~1\Richard\APPLIC~1\forder~1\gsibsvkt.exe
C:\Program Files\forder~1
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\Checklime.exe
C:\Program Files\BitTorrent Fastest Tool\dw2712.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\Program Files\Multi_Media
C:\Program Files\Multi_Media\INSTALL.LOG
C:\Program Files\3wPlayer
C:\DOCUME~1\Richard\Cookies\richard@www.adserver5[1].txt
C:\DOCUME~1\Richard\Cookies\richard@advertising.marketnetwork[2].txt
C:\DOCUME~1\Richard\Cookies\richard@adin.bigpoint[2].txt
C:\DOCUME~1\Richard\Cookies\richard@bigpoint[2].txt
C:\DOCUME~1\Richard\Cookies\richard@gb.darkorbit.bigpoint[1].txt
C:\DOCUME~1\Richard\Cookies\richard@uk.seafight.bigpoint[1].txt
C:\DOCUME~1\Richard\Cookies\richard@partypoker[2].txt
C:\DOCUME~1\Richard\Cookies\richard@uk.seafight.bigpoint[1].txt
C:\WINDOWS\Tasks\B9A16FDD909F1C65.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fork Live Bait]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\Richard\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"road draw"="C:\\DOCUME~1\\Richard\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe"
"road draw"="C:\\DOCUME~1\\Richard\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"soft defy soap wave"="C:\\Documents and Settings\\All Users\\Application Data\\Stupid Vc Soft Defy\\Ping regs.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-01 15:24:14
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:337][D:14]-> C:\DOCUME~1\Richard\LOCALS~1\Temp
[F:97][D:0]-> C:\DOCUME~1\Richard\Cookies
[F:258][D:8]-> C:\DOCUME~1\Richard\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 01/02/2009|15:26 - Option : [1]

--------------------\\ Fin du rapport a 15:26:52

Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

3

gil le fantom, le 1 fév 2009 à 16:41:49

Relance Lop S&D


* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)


(Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

   
Répondre à gil le fantom

4

PlanetGong, le 1 fév 2009 à 16:54:42

Et voila...c'est grave Docteur ?


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.50GHz )
BIOS : Phoenix NoteBIOS 4.0 Release 6.0
USER : Richard ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 15.0.0.60 (Activated)
Firewall : Norton Internet Security 15.0.0.60 (Activated)
C:\ (Local Disk) - NTFS - Total:27 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:20 Go (Free:13 Go)
E:\ (USB)
G:\ (Local Disk) - FAT32 - Total:465 Go (Free:343 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 01/02/2009|15:20 )

--------------------\\ Listing des dossiers dans APPLIC~1

[04/07/2007|12:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[03/03/2005|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[04/03/2005|13:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[04/03/2005|13:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[04/03/2005|13:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation
[05/07/2007|08:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\SUPERAntiSpyware.com
[04/03/2005|13:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[30/12/2008|18:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[12/12/2008|02:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[10/03/2007|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[07/02/2008|01:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[07/02/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[31/01/2009|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[23/07/2008|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[30/08/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[01/11/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Citrix
[15/11/2007|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DataViz
[23/07/2008|22:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[20/09/2006|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[25/10/2006|03:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/07/2007|00:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[15/11/2007|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotSync
[11/01/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Insight Software
[11/01/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Insight Software Solutions
[16/11/2006|09:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[01/02/2009|15:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kontiki
[16/06/2007|13:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[18/09/2005|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[03/09/2008|04:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Memeo
[30/08/2008|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/08/2007|08:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[02/08/2005|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
[10/03/2006|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[24/03/2008|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[24/03/2008|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[12/12/2008|07:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[15/12/2007|09:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCPitstop
[12/05/2007|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[14/08/2005|15:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[04/03/2005|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[13/06/2008|21:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sky
[26/10/2008|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[27/07/2005|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[30/08/2008|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[01/02/2009|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/01/2009|22:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy
[05/07/2007|08:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com
[27/01/2009|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/09/2008|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[09/02/2008|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[28/06/2007|09:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[23/11/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[27/07/2005|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
[19/01/2006|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[04/10/2007|05:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
[12/08/2005|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/06/2007|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!
[21/11/2006|09:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[21/09/2005|11:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[27/05/2008|10:17] C:\DOCUME~1\Dan\APPLIC~1\Adobe
[05/09/2007|20:37] C:\DOCUME~1\Dan\APPLIC~1\FaxCtr
[02/03/2008|15:58] C:\DOCUME~1\Dan\APPLIC~1\Google
[18/11/2007|17:53] C:\DOCUME~1\Dan\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Dan\APPLIC~1\Identities
[26/09/2005|16:17] C:\DOCUME~1\Dan\APPLIC~1\InterVideo
[02/09/2005|10:35] C:\DOCUME~1\Dan\APPLIC~1\Macromedia
[28/03/2006|07:05] C:\DOCUME~1\Dan\APPLIC~1\Microsoft
[30/09/2007|11:24] C:\DOCUME~1\Dan\APPLIC~1\OpenOffice.org2
[17/03/2007|19:31] C:\DOCUME~1\Dan\APPLIC~1\Real
[19/06/2006|06:56] C:\DOCUME~1\Dan\APPLIC~1\sony
[31/08/2005|17:02] C:\DOCUME~1\Dan\APPLIC~1\Sony Corporation
[15/07/2007|18:48] C:\DOCUME~1\Dan\APPLIC~1\Sony Ericsson
[02/09/2005|11:03] C:\DOCUME~1\Dan\APPLIC~1\Sun
[30/09/2007|09:54] C:\DOCUME~1\Dan\APPLIC~1\Symantec
[15/07/2007|18:50] C:\DOCUME~1\Dan\APPLIC~1\Teleca
[21/12/2006|07:34] C:\DOCUME~1\Dan\APPLIC~1\Yahoo!

[04/03/2005|13:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[03/03/2005|17:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[04/03/2005|13:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[04/03/2005|13:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[04/03/2005|13:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation
[04/03/2005|13:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[19/05/2008|17:23] C:\DOCUME~1\Fidou\APPLIC~1\Adobe
[20/04/2008|15:56] C:\DOCUME~1\Fidou\APPLIC~1\AdobeUM
[26/03/2006|11:39] C:\DOCUME~1\Fidou\APPLIC~1\Apple Computer
[11/09/2007|07:44] C:\DOCUME~1\Fidou\APPLIC~1\DivX
[30/09/2007|09:44] C:\DOCUME~1\Fidou\APPLIC~1\FaxCtr
[31/10/2006|19:42] C:\DOCUME~1\Fidou\APPLIC~1\Google
[28/03/2006|09:54] C:\DOCUME~1\Fidou\APPLIC~1\Help
[18/11/2007|11:04] C:\DOCUME~1\Fidou\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Fidou\APPLIC~1\Identities
[24/11/2005|18:56] C:\DOCUME~1\Fidou\APPLIC~1\InterVideo
[20/08/2005|16:21] C:\DOCUME~1\Fidou\APPLIC~1\Macromedia
[28/01/2008|13:38] C:\DOCUME~1\Fidou\APPLIC~1\Media Player Classic
[08/12/2008|18:30] C:\DOCUME~1\Fidou\APPLIC~1\Microsoft
[23/03/2008|14:15] C:\DOCUME~1\Fidou\APPLIC~1\Motive
[08/11/2007|11:10] C:\DOCUME~1\Fidou\APPLIC~1\Mozilla
[30/01/2009|23:10] C:\DOCUME~1\Fidou\APPLIC~1\OpenOffice.org2
[27/05/2006|10:23] C:\DOCUME~1\Fidou\APPLIC~1\Real
[16/01/2009|22:38] C:\DOCUME~1\Fidou\APPLIC~1\Skype
[03/08/2005|22:08] C:\DOCUME~1\Fidou\APPLIC~1\sony
[26/08/2006|16:01] C:\DOCUME~1\Fidou\APPLIC~1\Sony Corporation
[15/07/2007|16:11] C:\DOCUME~1\Fidou\APPLIC~1\Sony Ericsson
[05/08/2005|19:02] C:\DOCUME~1\Fidou\APPLIC~1\Sun
[30/09/2007|08:19] C:\DOCUME~1\Fidou\APPLIC~1\Symantec
[15/07/2007|16:13] C:\DOCUME~1\Fidou\APPLIC~1\Teleca
[08/11/2007|11:10] C:\DOCUME~1\Fidou\APPLIC~1\TomTom
[07/10/2007|13:30] C:\DOCUME~1\Fidou\APPLIC~1\vlc
[21/11/2006|21:31] C:\DOCUME~1\Fidou\APPLIC~1\Yahoo!

[03/04/2007|17:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\FaxCtr
[26/08/2005|23:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[31/01/2009|12:00] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[26/08/2005|23:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\sony
[16/11/2008|15:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Sony Corporation
[12/09/2007|20:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Yahoo!

[19/01/2007|07:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[11/10/2005|00:30] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[31/01/2009|12:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[05/11/2005|21:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec


[20/09/2008|18:24] C:\DOCUME~1\Richard\APPLIC~1\AccurateRip
[27/11/2008|09:14] C:\DOCUME~1\Richard\APPLIC~1\Adobe
[14/05/2008|07:32] C:\DOCUME~1\Richard\APPLIC~1\AdobeUM
[23/03/2007|18:52] C:\DOCUME~1\Richard\APPLIC~1\Ahead
[07/06/2008|11:57] C:\DOCUME~1\Richard\APPLIC~1\Apple Computer
[06/12/2008|18:55] C:\DOCUME~1\Richard\APPLIC~1\ArcSoft
[31/01/2009|12:48] C:\DOCUME~1\Richard\APPLIC~1\AVGTOOLBAR
[23/07/2008|23:07] C:\DOCUME~1\Richard\APPLIC~1\AVS4YOU
[27/11/2008|09:14] C:\DOCUME~1\Richard\APPLIC~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[20/09/2008|18:27] C:\DOCUME~1\Richard\APPLIC~1\dBpoweramp
[15/11/2006|12:40] C:\DOCUME~1\Richard\APPLIC~1\DivX
[07/03/2006|11:34] C:\DOCUME~1\Richard\APPLIC~1\DownloadManager
[30/12/2008|14:52] C:\DOCUME~1\Richard\APPLIC~1\dvdcss
[02/01/2007|17:07] C:\DOCUME~1\Richard\APPLIC~1\EoRezo
[21/09/2006|08:25] C:\DOCUME~1\Richard\APPLIC~1\FaxCtr
[30/01/2009|22:35] C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide
[19/11/2006|12:35] C:\DOCUME~1\Richard\APPLIC~1\Google
[11/09/2005|19:18] C:\DOCUME~1\Richard\APPLIC~1\Help
[15/11/2007|09:29] C:\DOCUME~1\Richard\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Richard\APPLIC~1\Identities
[08/11/2007|11:18] C:\DOCUME~1\Richard\APPLIC~1\InstallShield
[29/07/2005|16:05] C:\DOCUME~1\Richard\APPLIC~1\InterVideo
[26/04/2007|21:37] C:\DOCUME~1\Richard\APPLIC~1\Lavasoft
[15/11/2007|10:50] C:\DOCUME~1\Richard\APPLIC~1\Leadertech
[04/03/2005|13:45] C:\DOCUME~1\Richard\APPLIC~1\Macromedia
[31/05/2007|00:23] C:\DOCUME~1\Richard\APPLIC~1\Media Player Classic
[31/08/2008|07:57] C:\DOCUME~1\Richard\APPLIC~1\Microsoft
[01/11/2008|12:24] C:\DOCUME~1\Richard\APPLIC~1\Motive
[01/05/2008|20:24] C:\DOCUME~1\Richard\APPLIC~1\Mozilla
[05/11/2005|11:37] C:\DOCUME~1\Richard\APPLIC~1\MSNInstaller
[14/06/2008|12:29] C:\DOCUME~1\Richard\APPLIC~1\NCH Swift Sound
[20/01/2009|08:42] C:\DOCUME~1\Richard\APPLIC~1\OpenOffice.org2
[23/07/2008|20:29] C:\DOCUME~1\Richard\APPLIC~1\Real
[12/08/2005|10:37] C:\DOCUME~1\Richard\APPLIC~1\Roxio
[10/03/2007|14:56] C:\DOCUME~1\Richard\APPLIC~1\Simple Star
[01/02/2009|14:39] C:\DOCUME~1\Richard\APPLIC~1\Skype
[01/02/2009|10:13] C:\DOCUME~1\Richard\APPLIC~1\skypePM
[10/03/2007|15:47] C:\DOCUME~1\Richard\APPLIC~1\Snapfish
[29/07/2005|16:03] C:\DOCUME~1\Richard\APPLIC~1\sony
[04/09/2008|11:37] C:\DOCUME~1\Richard\APPLIC~1\Sony Corporation
[14/07/2007|11:42] C:\DOCUME~1\Richard\APPLIC~1\Sony Ericsson
[28/07/2005|21:09] C:\DOCUME~1\Richard\APPLIC~1\Sun
[05/07/2007|09:10] C:\DOCUME~1\Richard\APPLIC~1\SUPERAntiSpyware.com
[28/09/2007|21:51] C:\DOCUME~1\Richard\APPLIC~1\Symantec
[04/03/2007|15:16] C:\DOCUME~1\Richard\APPLIC~1\Talkback
[14/07/2007|11:43] C:\DOCUME~1\Richard\APPLIC~1\Teleca
[14/09/2007|10:03] C:\DOCUME~1\Richard\APPLIC~1\TomTom
[23/10/2006|04:26] C:\DOCUME~1\Richard\APPLIC~1\vlc
[04/10/2007|06:21] C:\DOCUME~1\Richard\APPLIC~1\Vso
[20/11/2006|23:01] C:\DOCUME~1\Richard\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[01/02/2009 15:00][--ah-----] C:\WINDOWS\tasks\B9A16FDD909F1C65.job
[30/12/2008 16:55][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[12/01/2009 21:20][--a------] C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Richard.job
[01/02/2009 14:27][--ah-----] C:\WINDOWS\tasks\SA.DAT
[04/08/2004 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( B9A16FDD909F1C65.job )=( c:\docume~1\richard\applic~1\forder~1\32locksmfcd.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[30/01/2009|22:34] C:\Program Files\3wPlayer
[21/09/2006|10:14] C:\Program Files\Abbyy FineReader 6.0 Sprint
[25/11/2008|07:49] C:\Program Files\Adobe
[23/03/2007|12:53] C:\Program Files\Ahead
[03/07/2007|08:17] C:\Program Files\Alwil Software
[08/07/2007|10:28] C:\Program Files\Apoint
[11/09/2008|18:13] C:\Program Files\Apple Software Update
[06/12/2008|18:49] C:\Program Files\ArcSoft
[02/09/2008|05:31] C:\Program Files\Avanquest update
[31/01/2009|12:04] C:\Program Files\AVG
[20/09/2008|17:42] C:\Program Files\AVS4YOU
[03/10/2007|22:27] C:\Program Files\BearFlix
[31/01/2009|13:45] C:\Program Files\BitTorrent Fastest Tool
[09/08/2005|08:21] C:\Program Files\Boardgamecentral
[30/12/2008|18:10] C:\Program Files\Bonjour
[26/07/2006|08:40] C:\Program Files\BT Broadband 2091
[01/11/2008|12:25] C:\Program Files\BT Broadband Desktop Help
[31/01/2009|11:37] C:\Program Files\CCleaner
[24/07/2008|06:14] C:\Program Files\CDRWIN5
[25/01/2009|23:55] C:\Program Files\Common Files
[03/03/2005|17:35] C:\Program Files\ComPlus Applications
[05/08/2005|22:47] C:\Program Files\CONEXANT
[11/05/2006|11:42] C:\Program Files\Crimsonland
[23/07/2008|22:55] C:\Program Files\Cucusoft
[24/07/2008|07:25] C:\Program Files\DivX
[27/11/2007|22:28] C:\Program Files\Documents To Go
[03/08/2006|15:36] C:\Program Files\DVRRemoteViewer16
[01/02/2009|06:36] C:\Program Files\eMule
[04/03/2005|13:44] C:\Program Files\FlashPlayer
[30/01/2009|22:35] C:\Program Files\Ford Error Hide
[04/12/2006|08:19] C:\Program Files\GammonEmpire
[02/09/2007|17:36] C:\Program Files\Ganymede
[13/01/2008|17:03] C:\Program Files\Google
[05/01/2007|15:16] C:\Program Files\Grisoft
[09/07/2007|23:23] C:\Program Files\HighJackThis
[06/12/2008|18:53] C:\Program Files\InstallShield Installation Information
[10/04/2006|11:21] C:\Program Files\Intel
[03/10/2007|22:32] C:\Program Files\InterActual
[12/12/2008|21:48] C:\Program Files\Internet Explorer
[04/03/2005|13:39] C:\Program Files\InterVideo
[30/12/2008|18:06] C:\Program Files\iPod
[04/03/2005|13:36] C:\Program Files\ISP
[30/12/2008|18:07] C:\Program Files\iTunes
[14/08/2008|20:55] C:\Program Files\Java
[23/03/2007|13:21] C:\Program Files\K-Lite Codec Pack
[13/06/2008|21:42] C:\Program Files\Kontiki
[16/06/2007|13:50] C:\Program Files\Lavasoft
[08/07/2007|10:42] C:\Program Files\Lexmark 3400 Series
[05/01/2007|14:57] C:\Program Files\Lexmark Toolbar
[07/01/2009|07:36] C:\Program Files\lx_cats
[12/01/2009|07:33] C:\Program Files\Macro Express3
[06/09/2008|10:08] C:\Program Files\Messenger
[30/08/2007|17:04] C:\Program Files\Micro Application
[07/08/2007|05:53] C:\Program Files\Microsoft ActiveSync
[03/03/2005|17:38] C:\Program Files\microsoft frontpage
[27/07/2005|21:52] C:\Program Files\Microsoft Office
[08/12/2008|06:12] C:\Program Files\Microsoft Silverlight
[27/07/2005|21:36] C:\Program Files\Microsoft SQL Server
[27/07/2005|21:47] C:\Program Files\Microsoft Works
[17/05/2007|15:03] C:\Program Files\Mindscape
[17/08/2007|11:06] C:\Program Files\MoodLogic
[27/07/2005|21:35] C:\Program Files\Moodlogic HTML
[06/09/2008|09:46] C:\Program Files\Movie Maker
[05/03/2007|20:03] C:\Program Files\Mozilla Firefox
[05/11/2005|11:37] C:\Program Files\MSN
[03/03/2005|17:34] C:\Program Files\MSN Gaming Zone
[17/11/2006|23:59] C:\Program Files\MSXML 4.0
[17/06/2007|15:47] C:\Program Files\Multi_Media
[10/03/2006|11:41] C:\Program Files\Napster
[14/06/2008|12:27] C:\Program Files\NCH Software
[14/06/2008|12:30] C:\Program Files\NCH Swift Sound
[06/09/2008|09:39] C:\Program Files\NetMeeting
[21/12/2007|21:45] C:\Program Files\Norton Internet Security
[13/07/2008|17:00] C:\Program Files\Norton Security Scan
[12/12/2008|07:48] C:\Program Files\NOS
[03/03/2005|17:36] C:\Program Files\Online Services
[03/10/2007|22:15] C:\Program Files\OpenOffice.org 2.2
[04/04/2008|05:35] C:\Program Files\OpenOffice.org 2.3
[19/06/2008|06:42] C:\Program Files\OpenOffice.org 2.4
[06/09/2008|09:39] C:\Program Files\Outlook Express
[26/02/2006|18:24] C:\Program Files\PacQuest 3D
[15/11/2007|10:59] C:\Program Files\palmOne
[06/12/2008|18:51] C:\Program Files\PC VGA Camer@ Plus
[01/03/2008|17:49] C:\Program Files\Picasa2
[11/08/2005|23:57] C:\Program Files\Program Shortcuts
[10/02/2006|00:51] C:\Program Files\quicksnooker
[30/12/2008|17:59] C:\Program Files\QuickTime
[22/11/2005|17:58] C:\Program Files\QuickZip4
[11/05/2006|09:59] C:\Program Files\Real
[11/12/2005|00:04] C:\Program Files\Realore
[22/06/2007|20:56] C:\Program Files\Realtek
[24/02/2006|10:34] C:\Program Files\ReflexiveArcade
[17/09/2005|09:27] C:\Program Files\Sega
[13/06/2008|21:41] C:\Program Files\Sky
[26/10/2008|11:17] C:\Program Files\Skype
[22/10/2008|05:08] C:\Program Files\Sony
[30/08/2008|23:09] C:\Program Files\Sony Ericsson
[09/03/2007|08:27] C:\Program Files\Sony Handheld
[31/01/2009|10:27] C:\Program Files\Spybot - Search & Destroy
[22/03/2008|17:50] C:\Program Files\Sun
[05/07/2007|09:10] C:\Program Files\SUPERAntiSpyware
[04/06/2008|06:07] C:\Program Files\Symantec
[05/10/2006|07:19] C:\Program Files\Symantec Technical Support
[12/10/2008|09:57] C:\Program Files\TomTom HOME 2
[27/07/2005|21:37] C:\Program Files\Uninstall Information
[04/03/2005|13:45] C:\Program Files\Utimaco
[01/06/2007|10:58] C:\Program Files\VideoLAN
[04/10/2007|06:21] C:\Program Files\VSO
[30/08/2008|16:58] C:\Program Files\Western Digital
[30/08/2008|16:52] C:\Program Files\Western Digital Technologies
[23/07/2008|21:37] C:\Program Files\Winamp
[23/07/2008|21:50] C:\Program Files\WinAVI Video Converter
[23/03/2007|11:44] C:\Program Files\Windows Media Connect 2
[06/09/2008|09:39] C:\Program Files\Windows Media Player
[06/09/2008|09:39] C:\Program Files\Windows NT
[28/09/2007|21:47] C:\Program Files\Windows Sidebar
[03/03/2005|17:36] C:\Program Files\WindowsUpdate
[03/03/2005|17:38] C:\Program Files\xerox
[13/09/2008|09:14] C:\Program Files\Xvid
[04/03/2005|13:45] C:\Program Files\Yahoo HTML
[20/11/2006|23:00] C:\Program Files\Yahoo!
[04/03/2005|13:45] C:\Program Files\YahooMFU

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[25/11/2008|08:02] C:\Program Files\Common Files\Adobe
[25/11/2008|07:47] C:\Program Files\Common Files\Adobe AIR
[23/03/2007|12:47] C:\Program Files\Common Files\Ahead
[30/12/2008|18:06] C:\Program Files\Common Files\Apple
[06/12/2008|18:50] C:\Program Files\Common Files\ArcSoft
[20/09/2008|17:42] C:\Program Files\Common Files\AVSMedia
[15/11/2007|11:00] C:\Program Files\Common Files\DataViz
[27/07/2005|21:50] C:\Program Files\Common Files\DESIGNER
[25/01/2009|23:56] C:\Program Files\Common Files\Download Manager
[30/09/2005|04:27] C:\Program Files\Common Files\EPSON
[04/03/2005|13:38] C:\Program Files\Common Files\InstallShield
[04/03/2005|13:34] C:\Program Files\Common Files\Java
[18/09/2005|20:36] C:\Program Files\Common Files\Macrovision Shared
[08/12/2008|16:36] C:\Program Files\Common Files\Microsoft Shared
[01/11/2008|12:31] C:\Program Files\Common Files\Motive
[03/03/2005|17:35] C:\Program Files\Common Files\MSSoap
[10/03/2007|14:48] C:\Program Files\Common Files\Nero
[18/08/2005|00:02] C:\Program Files\Common Files\NSV
[03/03/2005|17:29] C:\Program Files\Common Files\ODBC
[06/12/2008|18:51] C:\Program Files\Common Files\PAC7302
[23/07/2008|20:26] C:\Program Files\Common Files\Real
[20/11/2006|22:53] C:\Program Files\Common Files\Scanner
[03/03/2005|17:35] C:\Program Files\Common Files\Services
[26/10/2008|11:17] C:\Program Files\Common Files\Skype
[12/07/2006|07:22] C:\Program Files\Common Files\Sony Shared
[03/03/2005|17:28] C:\Program Files\Common Files\SpeechEngines
[29/07/2005|16:03] C:\Program Files\Common Files\SWF Studio
[01/02/2009|10:20] C:\Program Files\Common Files\Symantec Shared
[06/09/2008|09:39] C:\Program Files\Common Files\System
[24/07/2008|06:13] C:\Program Files\Common Files\Wise Installation Wizard
[23/07/2008|20:27] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 66 Processes )

IEXPLORE.EXE ~ [PID:3444]
IEXPLORE.EXE ~ [PID:260]
IEXPLORE.EXE ~ [PID:3024]
IEXPLORE.EXE ~ [PID:4792]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\Richard\APPLIC~1\FORDER~1
C:\DOCUME~1\Richard\APPLIC~1\FORDER~1\32locksmfcd.exe
C:\DOCUME~1\Richard\APPLIC~1\FORDER~1\DVD OPTION START.exe
C:\DOCUME~1\Richard\APPLIC~1\FORDER~1\gsibsvkt.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide
C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\32locksmfcd.exe
C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\DVD OPTION START.exe
C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\gsibsvkt.exe
C:\Program Files\Ford Error Hide
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy\Ping regs.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy\Ping regs.exe
C:\DOCUME~1\Richard\APPLIC~1\forder~1
C:\DOCUME~1\Richard\APPLIC~1\forder~1\32locksmfcd.exe
C:\DOCUME~1\Richard\APPLIC~1\forder~1\DVD OPTION START.exe
C:\DOCUME~1\Richard\APPLIC~1\forder~1\gsibsvkt.exe
C:\Program Files\forder~1
C:\Program Files\BitTorrent Fastest Tool
C:\Program Files\BitTorrent Fastest Tool\Checklime.exe
C:\Program Files\BitTorrent Fastest Tool\dw2712.exe
C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
C:\Program Files\Multi_Media
C:\Program Files\Multi_Media\INSTALL.LOG
C:\Program Files\3wPlayer
C:\DOCUME~1\Richard\Cookies\richard@www.adserver5[1].txt
C:\DOCUME~1\Richard\Cookies\richard@advertising.marketnetwork[2].txt
C:\DOCUME~1\Richard\Cookies\richard@adin.bigpoint[2].txt
C:\DOCUME~1\Richard\Cookies\richard@bigpoint[2].txt
C:\DOCUME~1\Richard\Cookies\richard@gb.darkorbit.bigpoint[1].txt
C:\DOCUME~1\Richard\Cookies\richard@uk.seafight.bigpoint[1].txt
C:\DOCUME~1\Richard\Cookies\richard@partypoker[2].txt
C:\DOCUME~1\Richard\Cookies\richard@uk.seafight.bigpoint[1].txt
C:\WINDOWS\Tasks\B9A16FDD909F1C65.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fork Live Bait]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\Richard\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"road draw"="C:\\DOCUME~1\\Richard\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe"
"road draw"="C:\\DOCUME~1\\Richard\\APPLIC~1\\FORDER~1\\DVD OPTION START.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"soft defy soap wave"="C:\\Documents and Settings\\All Users\\Application Data\\Stupid Vc Soft Defy\\Ping regs.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-01 15:24:14
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:337][D:14]-> C:\DOCUME~1\Richard\LOCALS~1\Temp
[F:97][D:0]-> C:\DOCUME~1\Richard\Cookies
[F:258][D:8]-> C:\DOCUME~1\Richard\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 01/02/2009|15:26 - Option : [1]

--------------------\\ Fin du rapport a 15:26:52

Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

5

gil le fantom, le 1 fév 2009 à 17:01:35

Tu n'as pas mis le rapport de l'option 2

   
Répondre à gil le fantom

6

PlanetGong, le 1 fév 2009 à 17:05:58

Désolé ! Le voila...


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.50GHz )
BIOS : Phoenix NoteBIOS 4.0 Release 6.0
USER : Richard ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 15.0.0.60 (Activated)
Firewall : Norton Internet Security 15.0.0.60 (Activated)
C:\ (Local Disk) - NTFS - Total:27 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:20 Go (Free:13 Go)
E:\ (USB)
G:\ (Local Disk) - FAT32 - Total:465 Go (Free:343 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 01/02/2009|15:47 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\32locksmfcd.exe
Supprime! - C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\DVD OPTION START.exe
Supprime! - C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide\gsibsvkt.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy\Ping regs.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy\Ping regs.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\Checklime.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\dw2712.exe
Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media\INSTALL.LOG
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@www.adserver5[1].txt
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@advertising.marketnetwork[2].txt
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@adin.bigpoint[2].txt
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@bigpoint[2].txt
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@gb.darkorbit.bigpoint[1].txt
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@uk.seafight.bigpoint[1].txt
Supprime! - C:\DOCUME~1\Richard\Cookies\richard@partypoker[2].txt
Supprime! - C:\WINDOWS\Tasks\B9A16FDD909F1C65.job
Supprime! - C:\DOCUME~1\Richard\APPLIC~1\Ford Error Hide
Supprime! - C:\Program Files\Ford Error Hide
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stupid Vc Soft Defy
Supprime! - C:\Program Files\BitTorrent Fastest Tool
Supprime! - C:\Program Files\Multi_Media
Supprime! - C:\Program Files\3wPlayer
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[04/07/2007|12:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[03/03/2005|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[04/03/2005|13:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[04/03/2005|13:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[04/03/2005|13:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation
[05/07/2007|08:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\SUPERAntiSpyware.com
[04/03/2005|13:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[30/12/2008|18:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[12/12/2008|02:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[10/03/2007|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[07/02/2008|01:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[07/02/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[31/01/2009|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[23/07/2008|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[30/08/2008|23:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[01/11/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Citrix
[15/11/2007|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DataViz
[23/07/2008|22:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[20/09/2006|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
[25/10/2006|03:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/07/2007|00:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[15/11/2007|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotSync
[11/01/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Insight Software
[11/01/2009|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Insight Software Solutions
[16/11/2006|09:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[01/02/2009|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kontiki
[16/06/2007|13:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[18/09/2005|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[03/09/2008|04:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Memeo
[30/08/2008|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/08/2007|08:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[02/08/2005|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MotiveSysIDs
[10/03/2006|11:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[24/03/2008|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[24/03/2008|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
[12/12/2008|07:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[15/12/2007|09:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCPitstop
[12/05/2007|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PopCap
[14/08/2005|15:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[04/03/2005|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[13/06/2008|21:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sky
[26/10/2008|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[27/07/2005|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[30/08/2008|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[01/02/2009|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[05/07/2007|08:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com
[27/01/2009|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/09/2008|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[09/02/2008|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
[28/06/2007|09:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[23/11/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[27/07/2005|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
[04/10/2007|05:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
[12/08/2005|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/06/2007|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\yahoo!
[21/11/2006|09:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[21/09/2005|11:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[27/05/2008|10:17] C:\DOCUME~1\Dan\APPLIC~1\Adobe
[05/09/2007|20:37] C:\DOCUME~1\Dan\APPLIC~1\FaxCtr
[02/03/2008|15:58] C:\DOCUME~1\Dan\APPLIC~1\Google
[18/11/2007|17:53] C:\DOCUME~1\Dan\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Dan\APPLIC~1\Identities
[26/09/2005|16:17] C:\DOCUME~1\Dan\APPLIC~1\InterVideo
[02/09/2005|10:35] C:\DOCUME~1\Dan\APPLIC~1\Macromedia
[28/03/2006|07:05] C:\DOCUME~1\Dan\APPLIC~1\Microsoft
[30/09/2007|11:24] C:\DOCUME~1\Dan\APPLIC~1\OpenOffice.org2
[17/03/2007|19:31] C:\DOCUME~1\Dan\APPLIC~1\Real
[19/06/2006|06:56] C:\DOCUME~1\Dan\APPLIC~1\sony
[31/08/2005|17:02] C:\DOCUME~1\Dan\APPLIC~1\Sony Corporation
[15/07/2007|18:48] C:\DOCUME~1\Dan\APPLIC~1\Sony Ericsson
[02/09/2005|11:03] C:\DOCUME~1\Dan\APPLIC~1\Sun
[30/09/2007|09:54] C:\DOCUME~1\Dan\APPLIC~1\Symantec
[15/07/2007|18:50] C:\DOCUME~1\Dan\APPLIC~1\Teleca
[21/12/2006|07:34] C:\DOCUME~1\Dan\APPLIC~1\Yahoo!

[04/03/2005|13:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[03/03/2005|17:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[04/03/2005|13:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[04/03/2005|13:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[04/03/2005|13:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation
[04/03/2005|13:40] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[19/05/2008|17:23] C:\DOCUME~1\Fidou\APPLIC~1\Adobe
[20/04/2008|15:56] C:\DOCUME~1\Fidou\APPLIC~1\AdobeUM
[26/03/2006|11:39] C:\DOCUME~1\Fidou\APPLIC~1\Apple Computer
[11/09/2007|07:44] C:\DOCUME~1\Fidou\APPLIC~1\DivX
[30/09/2007|09:44] C:\DOCUME~1\Fidou\APPLIC~1\FaxCtr
[31/10/2006|19:42] C:\DOCUME~1\Fidou\APPLIC~1\Google
[28/03/2006|09:54] C:\DOCUME~1\Fidou\APPLIC~1\Help
[18/11/2007|11:04] C:\DOCUME~1\Fidou\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Fidou\APPLIC~1\Identities
[24/11/2005|18:56] C:\DOCUME~1\Fidou\APPLIC~1\InterVideo
[20/08/2005|16:21] C:\DOCUME~1\Fidou\APPLIC~1\Macromedia
[28/01/2008|13:38] C:\DOCUME~1\Fidou\APPLIC~1\Media Player Classic
[08/12/2008|18:30] C:\DOCUME~1\Fidou\APPLIC~1\Microsoft
[23/03/2008|14:15] C:\DOCUME~1\Fidou\APPLIC~1\Motive
[08/11/2007|11:10] C:\DOCUME~1\Fidou\APPLIC~1\Mozilla
[30/01/2009|23:10] C:\DOCUME~1\Fidou\APPLIC~1\OpenOffice.org2
[27/05/2006|10:23] C:\DOCUME~1\Fidou\APPLIC~1\Real
[16/01/2009|22:38] C:\DOCUME~1\Fidou\APPLIC~1\Skype
[03/08/2005|22:08] C:\DOCUME~1\Fidou\APPLIC~1\sony
[26/08/2006|16:01] C:\DOCUME~1\Fidou\APPLIC~1\Sony Corporation
[15/07/2007|16:11] C:\DOCUME~1\Fidou\APPLIC~1\Sony Ericsson
[05/08/2005|19:02] C:\DOCUME~1\Fidou\APPLIC~1\Sun
[30/09/2007|08:19] C:\DOCUME~1\Fidou\APPLIC~1\Symantec
[15/07/2007|16:13] C:\DOCUME~1\Fidou\APPLIC~1\Teleca
[08/11/2007|11:10] C:\DOCUME~1\Fidou\APPLIC~1\TomTom
[07/10/2007|13:30] C:\DOCUME~1\Fidou\APPLIC~1\vlc
[21/11/2006|21:31] C:\DOCUME~1\Fidou\APPLIC~1\Yahoo!

[03/04/2007|17:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\FaxCtr
[26/08/2005|23:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[31/01/2009|12:00] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[26/08/2005|23:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\sony
[16/11/2008|15:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Sony Corporation
[12/09/2007|20:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Yahoo!

[19/01/2007|07:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel
[11/10/2005|00:30] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[31/01/2009|12:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[05/11/2005|21:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec


[20/09/2008|18:24] C:\DOCUME~1\Richard\APPLIC~1\AccurateRip
[27/11/2008|09:14] C:\DOCUME~1\Richard\APPLIC~1\Adobe
[14/05/2008|07:32] C:\DOCUME~1\Richard\APPLIC~1\AdobeUM
[23/03/2007|18:52] C:\DOCUME~1\Richard\APPLIC~1\Ahead
[07/06/2008|11:57] C:\DOCUME~1\Richard\APPLIC~1\Apple Computer
[06/12/2008|18:55] C:\DOCUME~1\Richard\APPLIC~1\ArcSoft
[31/01/2009|12:48] C:\DOCUME~1\Richard\APPLIC~1\AVGTOOLBAR
[23/07/2008|23:07] C:\DOCUME~1\Richard\APPLIC~1\AVS4YOU
[27/11/2008|09:14] C:\DOCUME~1\Richard\APPLIC~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[20/09/2008|18:27] C:\DOCUME~1\Richard\APPLIC~1\dBpoweramp
[15/11/2006|12:40] C:\DOCUME~1\Richard\APPLIC~1\DivX
[07/03/2006|11:34] C:\DOCUME~1\Richard\APPLIC~1\DownloadManager
[30/12/2008|14:52] C:\DOCUME~1\Richard\APPLIC~1\dvdcss
[02/01/2007|17:07] C:\DOCUME~1\Richard\APPLIC~1\EoRezo
[21/09/2006|08:25] C:\DOCUME~1\Richard\APPLIC~1\FaxCtr
[19/11/2006|12:35] C:\DOCUME~1\Richard\APPLIC~1\Google
[11/09/2005|19:18] C:\DOCUME~1\Richard\APPLIC~1\Help
[15/11/2007|09:29] C:\DOCUME~1\Richard\APPLIC~1\HotSync
[03/03/2005|17:38] C:\DOCUME~1\Richard\APPLIC~1\Identities
[08/11/2007|11:18] C:\DOCUME~1\Richard\APPLIC~1\InstallShield
[29/07/2005|16:05] C:\DOCUME~1\Richard\APPLIC~1\InterVideo
[26/04/2007|21:37] C:\DOCUME~1\Richard\APPLIC~1\Lavasoft
[15/11/2007|10:50] C:\DOCUME~1\Richard\APPLIC~1\Leadertech
[04/03/2005|13:45] C:\DOCUME~1\Richard\APPLIC~1\Macromedia
[31/05/2007|00:23] C:\DOCUME~1\Richard\APPLIC~1\Media Player Classic
[31/08/2008|07:57] C:\DOCUME~1\Richard\APPLIC~1\Microsoft
[01/11/2008|12:24] C:\DOCUME~1\Richard\APPLIC~1\Motive
[01/05/2008|20:24] C:\DOCUME~1\Richard\APPLIC~1\Mozilla
[05/11/2005|11:37] C:\DOCUME~1\Richard\APPLIC~1\MSNInstaller
[14/06/2008|12:29] C:\DOCUME~1\Richard\APPLIC~1\NCH Swift Sound
[20/01/2009|08:42] C:\DOCUME~1\Richard\APPLIC~1\OpenOffice.org2
[23/07/2008|20:29] C:\DOCUME~1\Richard\APPLIC~1\Real
[12/08/2005|10:37] C:\DOCUME~1\Richard\APPLIC~1\Roxio
[10/03/2007|14:56] C:\DOCUME~1\Richard\APPLIC~1\Simple Star
[01/02/2009|14:39] C:\DOCUME~1\Richard\APPLIC~1\Skype
[01/02/2009|10:13] C:\DOCUME~1\Richard\APPLIC~1\skypePM
[10/03/2007|15:47] C:\DOCUME~1\Richard\APPLIC~1\Snapfish
[29/07/2005|16:03] C:\DOCUME~1\Richard\APPLIC~1\sony
[04/09/2008|11:37] C:\DOCUME~1\Richard\APPLIC~1\Sony Corporation
[14/07/2007|11:42] C:\DOCUME~1\Richard\APPLIC~1\Sony Ericsson
[28/07/2005|21:09] C:\DOCUME~1\Richard\APPLIC~1\Sun
[05/07/2007|09:10] C:\DOCUME~1\Richard\APPLIC~1\SUPERAntiSpyware.com
[28/09/2007|21:51] C:\DOCUME~1\Richard\APPLIC~1\Symantec
[04/03/2007|15:16] C:\DOCUME~1\Richard\APPLIC~1\Talkback
[14/07/2007|11:43] C:\DOCUME~1\Richard\APPLIC~1\Teleca
[14/09/2007|10:03] C:\DOCUME~1\Richard\APPLIC~1\TomTom
[23/10/2006|04:26] C:\DOCUME~1\Richard\APPLIC~1\vlc
[04/10/2007|06:21] C:\DOCUME~1\Richard\APPLIC~1\Vso
[20/11/2006|23:01] C:\DOCUME~1\Richard\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[30/12/2008 16:55][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[12/01/2009 21:20][--a------] C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Richard.job
[01/02/2009 14:27][--ah-----] C:\WINDOWS\tasks\SA.DAT
[04/08/2004 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[21/09/2006|10:14] C:\Program Files\Abbyy FineReader 6.0 Sprint
[25/11/2008|07:49] C:\Program Files\Adobe
[23/03/2007|12:53] C:\Program Files\Ahead
[03/07/2007|08:17] C:\Program Files\Alwil Software
[08/07/2007|10:28] C:\Program Files\Apoint
[11/09/2008|18:13] C:\Program Files\Apple Software Update
[06/12/2008|18:49] C:\Program Files\ArcSoft
[02/09/2008|05:31] C:\Program Files\Avanquest update
[31/01/2009|12:04] C:\Program Files\AVG
[20/09/2008|17:42] C:\Program Files\AVS4YOU
[03/10/2007|22:27] C:\Program Files\BearFlix
[09/08/2005|08:21] C:\Program Files\Boardgamecentral
[30/12/2008|18:10] C:\Program Files\Bonjour
[26/07/2006|08:40] C:\Program Files\BT Broadband 2091
[01/11/2008|12:25] C:\Program Files\BT Broadband Desktop Help
[31/01/2009|11:37] C:\Program Files\CCleaner
[24/07/2008|06:14] C:\Program Files\CDRWIN5
[25/01/2009|23:55] C:\Program Files\Common Files
[03/03/2005|17:35] C:\Program Files\ComPlus Applications
[05/08/2005|22:47] C:\Program Files\CONEXANT
[11/05/2006|11:42] C:\Program Files\Crimsonland
[23/07/2008|22:55] C:\Program Files\Cucusoft
[24/07/2008|07:25] C:\Program Files\DivX
[27/11/2007|22:28] C:\Program Files\Documents To Go
[03/08/2006|15:36] C:\Program Files\DVRRemoteViewer16
[01/02/2009|06:36] C:\Program Files\eMule
[04/03/2005|13:44] C:\Program Files\FlashPlayer
[04/12/2006|08:19] C:\Program Files\GammonEmpire
[02/09/2007|17:36] C:\Program Files\Ganymede
[13/01/2008|17:03] C:\Program Files\Google
[05/01/2007|15:16] C:\Program Files\Grisoft
[09/07/2007|23:23] C:\Program Files\HighJackThis
[06/12/2008|18:53] C:\Program Files\InstallShield Installation Information
[10/04/2006|11:21] C:\Program Files\Intel
[03/10/2007|22:32] C:\Program Files\InterActual
[12/12/2008|21:48] C:\Program Files\Internet Explorer
[04/03/2005|13:39] C:\Program Files\InterVideo
[30/12/2008|18:06] C:\Program Files\iPod
[04/03/2005|13:36] C:\Program Files\ISP
[30/12/2008|18:07] C:\Program Files\iTunes
[14/08/2008|20:55] C:\Program Files\Java
[23/03/2007|13:21] C:\Program Files\K-Lite Codec Pack
[13/06/2008|21:42] C:\Program Files\Kontiki
[16/06/2007|13:50] C:\Program Files\Lavasoft
[08/07/2007|10:42] C:\Program Files\Lexmark 3400 Series
[05/01/2007|14:57] C:\Program Files\Lexmark Toolbar
[07/01/2009|07:36] C:\Program Files\lx_cats
[12/01/2009|07:33] C:\Program Files\Macro Express3
[06/09/2008|10:08] C:\Program Files\Messenger
[30/08/2007|17:04] C:\Program Files\Micro Application
[07/08/2007|05:53] C:\Program Files\Microsoft ActiveSync
[03/03/2005|17:38] C:\Program Files\microsoft frontpage
[27/07/2005|21:52] C:\Program Files\Microsoft Office
[08/12/2008|06:12] C:\Program Files\Microsoft Silverlight
[27/07/2005|21:36] C:\Program Files\Microsoft SQL Server
[27/07/2005|21:47] C:\Program Files\Microsoft Works
[17/05/2007|15:03] C:\Program Files\Mindscape
[17/08/2007|11:06] C:\Program Files\MoodLogic
[27/07/2005|21:35] C:\Program Files\Moodlogic HTML
[06/09/2008|09:46] C:\Program Files\Movie Maker
[05/03/2007|20:03] C:\Program Files\Mozilla Firefox
[05/11/2005|11:37] C:\Program Files\MSN
[03/03/2005|17:34] C:\Program Files\MSN Gaming Zone
[17/11/2006|23:59] C:\Program Files\MSXML 4.0
[10/03/2006|11:41] C:\Program Files\Napster
[14/06/2008|12:27] C:\Program Files\NCH Software
[14/06/2008|12:30] C:\Program Files\NCH Swift Sound
[06/09/2008|09:39] C:\Program Files\NetMeeting
[21/12/2007|21:45] C:\Program Files\Norton Internet Security
[13/07/2008|17:00] C:\Program Files\Norton Security Scan
[12/12/2008|07:48] C:\Program Files\NOS
[03/03/2005|17:36] C:\Program Files\Online Services
[03/10/2007|22:15] C:\Program Files\OpenOffice.org 2.2
[04/04/2008|05:35] C:\Program Files\OpenOffice.org 2.3
[19/06/2008|06:42] C:\Program Files\OpenOffice.org 2.4
[06/09/2008|09:39] C:\Program Files\Outlook Express
[26/02/2006|18:24] C:\Program Files\PacQuest 3D
[15/11/2007|10:59] C:\Program Files\palmOne
[06/12/2008|18:51] C:\Program Files\PC VGA Camer@ Plus
[01/03/2008|17:49] C:\Program Files\Picasa2
[11/08/2005|23:57] C:\Program Files\Program Shortcuts
[10/02/2006|00:51] C:\Program Files\quicksnooker
[30/12/2008|17:59] C:\Program Files\QuickTime
[22/11/2005|17:58] C:\Program Files\QuickZip4
[11/05/2006|09:59] C:\Program Files\Real
[11/12/2005|00:04] C:\Program Files\Realore
[22/06/2007|20:56] C:\Program Files\Realtek
[24/02/2006|10:34] C:\Program Files\ReflexiveArcade
[17/09/2005|09:27] C:\Program Files\Sega
[13/06/2008|21:41] C:\Program Files\Sky
[26/10/2008|11:17] C:\Program Files\Skype
[22/10/2008|05:08] C:\Program Files\Sony
[30/08/2008|23:09] C:\Program Files\Sony Ericsson
[09/03/2007|08:27] C:\Program Files\Sony Handheld
[31/01/2009|10:27] C:\Program Files\Spybot - Search & Destroy
[22/03/2008|17:50] C:\Program Files\Sun
[05/07/2007|09:10] C:\Program Files\SUPERAntiSpyware
[04/06/2008|06:07] C:\Program Files\Symantec
[05/10/2006|07:19] C:\Program Files\Symantec Technical Support
[12/10/2008|09:57] C:\Program Files\TomTom HOME 2
[27/07/2005|21:37] C:\Program Files\Uninstall Information
[04/03/2005|13:45] C:\Program Files\Utimaco
[01/06/2007|10:58] C:\Program Files\VideoLAN
[04/10/2007|06:21] C:\Program Files\VSO
[30/08/2008|16:58] C:\Program Files\Western Digital
[30/08/2008|16:52] C:\Program Files\Western Digital Technologies
[23/07/2008|21:37] C:\Program Files\Winamp
[23/07/2008|21:50] C:\Program Files\WinAVI Video Converter
[23/03/2007|11:44] C:\Program Files\Windows Media Connect 2
[06/09/2008|09:39] C:\Program Files\Windows Media Player
[06/09/2008|09:39] C:\Program Files\Windows NT
[28/09/2007|21:47] C:\Program Files\Windows Sidebar
[03/03/2005|17:36] C:\Program Files\WindowsUpdate
[03/03/2005|17:38] C:\Program Files\xerox
[13/09/2008|09:14] C:\Program Files\Xvid
[04/03/2005|13:45] C:\Program Files\Yahoo HTML
[20/11/2006|23:00] C:\Program Files\Yahoo!
[04/03/2005|13:45] C:\Program Files\YahooMFU

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[25/11/2008|08:02] C:\Program Files\Common Files\Adobe
[25/11/2008|07:47] C:\Program Files\Common Files\Adobe AIR
[23/03/2007|12:47] C:\Program Files\Common Files\Ahead
[30/12/2008|18:06] C:\Program Files\Common Files\Apple
[06/12/2008|18:50] C:\Program Files\Common Files\ArcSoft
[20/09/2008|17:42] C:\Program Files\Common Files\AVSMedia
[15/11/2007|11:00] C:\Program Files\Common Files\DataViz
[27/07/2005|21:50] C:\Program Files\Common Files\DESIGNER
[25/01/2009|23:56] C:\Program Files\Common Files\Download Manager
[30/09/2005|04:27] C:\Program Files\Common Files\EPSON
[04/03/2005|13:38] C:\Program Files\Common Files\InstallShield
[04/03/2005|13:34] C:\Program Files\Common Files\Java
[18/09/2005|20:36] C:\Program Files\Common Files\Macrovision Shared
[08/12/2008|16:36] C:\Program Files\Common Files\Microsoft Shared
[01/11/2008|12:31] C:\Program Files\Common Files\Motive
[03/03/2005|17:35] C:\Program Files\Common Files\MSSoap
[10/03/2007|14:48] C:\Program Files\Common Files\Nero
[18/08/2005|00:02] C:\Program Files\Common Files\NSV
[03/03/2005|17:29] C:\Program Files\Common Files\ODBC
[06/12/2008|18:51] C:\Program Files\Common Files\PAC7302
[23/07/2008|20:26] C:\Program Files\Common Files\Real
[20/11/2006|22:53] C:\Program Files\Common Files\Scanner
[03/03/2005|17:35] C:\Program Files\Common Files\Services
[26/10/2008|11:17] C:\Program Files\Common Files\Skype
[12/07/2006|07:22] C:\Program Files\Common Files\Sony Shared
[03/03/2005|17:28] C:\Program Files\Common Files\SpeechEngines
[29/07/2005|16:03] C:\Program Files\Common Files\SWF Studio
[01/02/2009|10:20] C:\Program Files\Common Files\Symantec Shared
[06/09/2008|09:39] C:\Program Files\Common Files\System
[24/07/2008|06:13] C:\Program Files\Common Files\Wise Installation Wizard
[23/07/2008|20:27] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 65 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Richard\Cookies\richard@www.adserver5[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-01 15:50:58
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:336][D:14]-> C:\DOCUME~1\Richard\LOCALS~1\Temp
[F:98][D:0]-> C:\DOCUME~1\Richard\Cookies
[F:181][D:8]-> C:\DOCUME~1\Richard\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 01/02/2009|15:26 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 01/02/2009|15:53 - Option : [2]

Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

7

gil le fantom, le 1 fév 2009 à 17:09:58

Tu poste un rapport hijackthis http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

si problème voir l'aide
http://perso.orange.fr/rginformatique/section%20virus/demohi­jack.htm

tu Clic sur Do a system scan and save the log
tu me colle le rapport sur ta réponse

   
Répondre à gil le fantom

8

PlanetGong, le 1 fév 2009 à 17:29:20

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:27:12, on 01/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
C:\Program Files\Sony\VAIO Launcher\Launcher.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Yahoo!\browser\ybrowser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R3 - URLSearchHook: (no name) - {b8a5b62c-517f-42a5-85ae-29b5497fb15f} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - G:\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: Phishing Agent - {B34E20E5-96B2-46AC-9D68-C6B2CD293C2C} - C:\WINDOWS\Drivers\PhishAgnt.dll (file missing)
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O3 - Toolbar: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [PC Pitstop Optimize2 Reminder] C:\Program Files\PCPitstop\Optimize2\Reminder.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [kdx] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BVRPLiveUpdate] C:\Program Files\Avanquest update\Engine\Setup.exe -s /PATCH,/SRCUPDATEC:\DOCUME~1\ALLUSE~1\APPLIC~1\SONYER~1\SONYER~1\LIVEUP~1\LISTOF~1.DAT
O4 - HKLM\..\Run: [VAIO Update 4] "C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IgfxSys] rundll32.exe "C:\WINDOWS\Drivers\IgfxSys.dll",StartProtector
O4 - HKLM\..\Run: [jqpoysuwcqoaov] C:\WINDOWS\System32\regsvr32.exe /s "C:\DOCUME~1\Richard\LOCALS~1\Temp\wmaamcmghb.dll"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [Skype] "G:\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [TomTomHOME.exe] "G:\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: VAIO Launcher.lnk = C:\Program Files\Sony\VAIO Launcher\Launcher.exe (User 'Default user')
O4 - Startup: VAIO Launcher.lnk = C:\Program Files\Sony\VAIO Launcher\Launcher.exe
O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
O8 - Extra context menu item: Transfer by Image Converter 2 - C:\Program Files\Sony\Image Converter 2\menu.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - G:\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://bt.yahoo.com
O15 - Trusted Zone: *.registration.sonystyle-europe.com (HKLM)
O16 - DPF: Yahoo! Dominoes - http://download2.games.yahoo.com/games/clients/y/dot9_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download2.games.yahoo.com/games/clients/y/poti_x.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab34120.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/26.33/uploader2.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab35645.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://webgames.d.tmsrv.com/...
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (ZPA_Backgammon Object) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab36385.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE
O24 - Desktop Component 0: Privacy Protection - About:Home
End of file - 19531 bytes

--

Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

9

gil le fantom, le 1 fév 2009 à 17:33:41

OK

tu télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien :

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

tu clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

tu suis les indications et tu n'apporte aucune modication aux réglages par défaut et en fin d'installation,vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

tu fais "Exécuter un examen complet"

Si des malwares ont été détectés, leur liste s'affiche.
tu clique sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

tu me poste le rapport

   
Répondre à gil le fantom

15

PlanetGong, le 1 fév 2009 à 22:35:07

Voici le rapport MBAM.

Fais-moi savoir a la fin si je supprime les programmes télechargés (MBAM, HIGHJACKTHIS, Lop S&D).

A+


Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1713
Windows 5.1.2600 Service Pack 3

01/02/2009 21:12:20
mbam-log-2009-02-01 (21-12-19).txt

Type de recherche: Examen complet (C:\|D:\|G:\|)
Eléments examinés: 187603
Temps écoulé: 4 hour(s), 9 minute(s), 41 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 10
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} (Adware.Need2Find) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e596df5f-4239-4d40-8367-ebadf0165917} (Rogue.Installer) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{53e0b6e8-a51d-448b-b692-40b67b285543} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jqpoysuwcqoaov (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www2.iesearch.com/) Good: (http://www.google.com/) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\eMule\Uninstall.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{46DC962F-A2D1-4267-B515-6377F620BB7C}\RP367\A0123738.exe (Adware.NetPumper) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\regsvr32.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

10

PlanetGong, le 1 fév 2009 à 17:57:18

Well...c'est en cours; mais ca a l'air d'etre du "lourd"...cela risque de prendre du temps !...

A+

Encore merci.
Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

11

gil le fantom, le 1 fév 2009 à 18:06:46

Il faut le laissé travailler,on a tout le temps

A plus tard

   
Répondre à gil le fantom

12

PlanetGong, le 1 fév 2009 à 18:10:48

WOW ! Ton profil dit "2629 messages postés depuis le 18 Janvier"...!...ca fait presque 200 messages par jour !...c'est du plein temps !!!

Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

13

gil le fantom, le 1 fév 2009 à 18:27:23

Depuis le 18 janvier 2008 et non 2009,je ne suis pas du genre a passer mes journée devant un PC.
J'aide de temps en temps selon mes envies et mes connaissances, sans en abuser.

   
Répondre à gil le fantom

14

PlanetGong, le 1 fév 2009 à 18:33:42

Ahhhh...tout s'explique...cela ramene la moyenne a 7 par jour, c'est plus raisonable !
Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong

16

gil le fantom, le 1 fév 2009 à 22:47:44

MBAM tu le garde,tu peut faire un petit nettoyage avec ccleaner

Pour supprimer les outils de désinfections
tu télécharge ToolsCleaner de A.Roshtein sur ton Bureau.
http://pc-system.fr/TC/ChangelogTC.html
· Clique sur Recherche et laisse le scan se terminer.
· Clique, sur Suppression pour finaliser.
· Tu peux, si tu le souhaites, te servir des Options facultatives.
· Clique sur Quitter, pour que le rapport puisse se créer.
· Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

   
Répondre à gil le fantom

17

 PlanetGong, le 1 fév 2009 à 23:04:08

T'es vraiment le fantom le + cool depuis Kasper !

Voici le log:

[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\Documents and Settings\All Users\Start Menu\Programs\HijackThis: trouvé !
C:\Documents and Settings\All Users\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Richard\Desktop\HijackThis.lnk: trouvé !
C:\Documents and Settings\Richard\My Documents\SmitFraudfix: trouvé !
C:\Documents and Settings\Richard\My Documents\smitfraudfix\SmitFraudfix: trouvé !
C:\Program Files\HighJackThis\hijackthis.log: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Start Menu\Programs\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Richard\Desktop\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\lopR.txt: supprimé !
C:\Program Files\HighJackThis\hijackthis.log: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\Documents and Settings\All Users\Start Menu\Programs\HijackThis: supprimé !
C:\Documents and Settings\Richard\My Documents\SmitFraudfix: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !
Et c'est en sciant que Leonard devint scie

   
Répondre à PlanetGong
Posez votre question Répondre
Ils ont besoin de votre aide