Problème de Pub (CID ou yes messenger)

Salut mickel

essaye avec : SpyBot - Search & Destroy
Ad-aware Se personal

sé deux la sont tres bon comme anti-spyware.
telechargere les et fais des analyse et bien sure des mise a jours.

di moi quoi apres sa :)



@+ bonne chance

Salut à vous

il faut employer les gros moyens !

Télécharge ceci :

Lien : http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.

++

Le moyen d'aimer une chose est de se dire qu'on pourrait la perdre (Gilbert Keith Chesterton)

bonsoir ,


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:16:58, on 27/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\AlertModule\AlertModule.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SearchPageURL.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
End of file - 3709 bytes

--

hjfhdbfn dnbd x,n ndbvib

bonsoir tout le monde reponder moi svp
merci mes cher amis francais.
hjfhdbfn dnbd x,n ndbvib

Bonsoir :

Télécharge ceci: (by Moe) :

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

Double clic sur Lopxpsetup.exe pour lancer l'installation
Au menu, choisir l'option 1
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
Une rapport sera alors crée, à copie/colle en entier sur le forum.


++
Le moyen d'aimer une chose est de se dire qu'on pourrait la perdre (Gilbert Keith Chesterton)

salut ok je vais essayer

je te remerci
hjfhdbfn dnbd x,n ndbvib

defois mon deuxieme pc a des pub je lance un jackthis.
hjfhdbfn dnbd x,n ndbvib

re et voici et aussi defois ma souris se deplace tout seul c pas normal ou defois au demarrage de windows ne se connecte pas c'est un virus ou un probleme de ma souris c un microsoft avec fil.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:11, on 28/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
G:\LES FICHES SUR LES ENFANTS\GATT\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\rundll32.exe
G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\Res.EXE
C:\PROGRA~1\Goto Software\Vade Retro\Vaderetro_oe.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\inKline Global\PC Booster\PCBooster.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\INTEGRAL\pinmenu.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\AlertModule\AlertModule.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Fichiers communs\DVDVideoSoft\LanguageEditor.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SearchPageURL.dll
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQToolbar\toolbaru.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQToolbar\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQToolbar\toolbaru.dll
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [USB Storage Toolbox] "G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\Res.EXE"
O4 - HKLM\..\Run: [Vaderetro Outlook] "C:\PROGRA~1\Goto Software\Vade Retro\VrMoRegister.exe -s"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\Goto Software\Vade Retro\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [Part browse safe hold] C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\Mags Open.exe
O4 - HKLM\..\Run: [up shim comp hold] C:\Documents and Settings\All Users\Application Data\Barb Info Hold Audio\start drv size.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\InstallShield\UpdateService\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\PCBooster.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [SweetIM] "C:\Program Files\Macrogaming\SweetIM\SweetIM.exe"
O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: Intégrateur PROjectMT 98.lnk = ?
O4 - Startup: Shrink Pic.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O8 - Extra context menu item: &Clean Traces - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\DAP\dapextie2.htm
O8 - Extra context menu item: Download All Files by HiDownload - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\HiDownload\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\HiDownload\HDGet.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\HiDownload\hidownload.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://eugenemontel31.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - G:\LES FICHES SUR LES ENFANTS\GATT\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: VideoAcceleratorEngine - Speedbit Ltd. - G:\LES FICHES SUR LES ENFANTS\GATT\Mickaël\DAP\SpeedBit Video Accelerator\VideoAcceleratorEngine.exe
End of file - 9668 bytes

--

hjfhdbfn dnbd x,n ndbvib

coucou aider moi merci.

mes cher amis

mickael
hjfhdbfn dnbd x,n ndbvib

salut

poste le rapporlopxp !!

++
Le moyen d'aimer une chose est de se dire qu'on pourrait la perdre (Gilbert Keith Chesterton)

salut ca marche pas ton logiciel dossier inacessible


hjfhdbfn dnbd x,n ndbvib

???

il suffit de clicé sur le lien ! je viens d'essayer, cher moi ça fonctionne très bien ....


Le moyen d'aimer une chose est de se dire qu'on pourrait la perdre (Gilbert Keith Chesterton)

bonsoir c'est bon j'ai arriver .


Rapport Lopxp fait le 28/11/2007 à 22:18:35
Exécuté dans : C:\Program Files\Lopxp


Liste des processus actifs :

PID : 1684 C:\WINDOWS\Explorer.EXE
PID : 1948 C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PID : 1984 C:\Program Files\MSN Messenger\msnmsgr.exe
PID : 2024 C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
PID : 264 C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
PID : 280 C:\PROGRA~1\Wanadoo\ComComp.exe
PID : 296 C:\PROGRA~1\Wanadoo\Toaster.exe
PID : 300 C:\PROGRA~1\Wanadoo\Inactivity.exe
PID : 308 C:\PROGRA~1\Wanadoo\PollingModule.exe
PID : 328 C:\WINDOWS\System32\AlertModule\AlertModule.exe
PID : 1604 C:\WINDOWS\system32\wscntfy.exe
PID : 2532 C:\PROGRA~1\Wanadoo\Watch.exe
PID : 1168 C:\Program Files\Mozilla Firefox\firefox.exe
PID : 3220 C:\WINDOWS\system32\cmd.exe
PID : 1240 C:\Documents and Settings\the undertaker\Mes documents\tools\pv.exe



___________________________________________________________________________

[Tâches planifiées]



___________________________________________________________________________

[Listing des dossiers Application Data]


cr: Date Création | mo: Date Modification -=- Nom Long -= Nom Court (8.3)


+- C:\Documents and Settings\All Users\Application Data

cr: 08/11/2006 13:26:37 | mo: 08/11/2006 13:26:37 -=- Ahead ----= Ahead
cr: 24/10/2006 08:42:12 | mo: 24/11/2006 13:01:12 -=- DVDSHR~1 -= DVD Shrink
cr: 24/10/2006 10:02:27 | mo: 10/05/2007 12:11:34 -=- MICROS~1 -= Microsoft

+- C:\Documents and Settings\All Users.WINDOWS\Application Data

cr: 23/09/2007 20:39:48 | mo: 23/09/2007 20:39:48 -=- DVDSHR~1 -= DVD Shrink
cr: 09/11/2007 21:14:05 | mo: 09/11/2007 21:14:05 -=- Google ---= Google
cr: 17/11/2007 22:30:15 | mo: 17/11/2007 22:30:15 -=- Lavasoft -= Lavasoft
cr: 30/10/2007 23:25:05 | mo: 30/10/2007 23:25:05 -=- Messenger Plus! -= Messenger Plus!
cr: 23/09/2007 21:32:57 | mo: 26/11/2007 21:47:19 -=- MICROS~1 -= Microsoft
cr: 23/09/2007 20:35:47 | mo: 23/09/2007 20:35:47 -=- MSNMES~1.013 -= MSN Messenger 6.2.0137
cr: 16/11/2007 21:52:50 | mo: 16/11/2007 21:52:50 -=- PY_Software -= PY_Software
cr: 15/11/2007 22:48:40 | mo: 16/11/2007 17:39:42 -=- Spybot - Search & Destroy -= Spybot - Search & Destroy
cr: 03/10/2007 17:59:33 | mo: 03/10/2007 17:59:33 -=- Windows Live Toolbar -= Windows Live Toolbar

+- C:\Documents and Settings\Boomscud\Application Data

cr: 24/10/2006 08:36:16 | mo: 23/09/2007 20:33:50 -=- MICROS~1 -= Microsoft
cr: 24/10/2006 08:40:34 | mo: 24/10/2006 08:40:34 -=- Sun ------= Sun

+- C:\Documents and Settings\the undertaker\Application Data

cr: 26/11/2007 18:18:53 | mo: 26/11/2007 18:18:53 -=- Identities ------= Identities
cr: 26/11/2007 18:50:24 | mo: 26/11/2007 18:50:24 -=- Macromedia ------= Macromedia
cr: 26/11/2007 18:18:16 | mo: 27/11/2007 20:00:16 -=- Microsoft ------= Microsoft
cr: 26/11/2007 18:40:47 | mo: 27/11/2007 08:02:45 -=- Mozilla --= Mozilla
cr: 27/11/2007 08:02:42 | mo: 27/11/2007 08:02:42 -=- Talkback -= Talkback

+- C:\Documents and Settings\the undertaker\Local Settings\Application Data

cr: 26/11/2007 18:21:49 | mo: 26/11/2007 18:21:49 -=- Help -----= Help
cr: 27/11/2007 08:42:17 | mo: 27/11/2007 08:42:17 -=- Identities -----= Identities
cr: 26/11/2007 18:18:16 | mo: 28/11/2007 20:44:10 -=- Microsoft -----= Microsoft
cr: 26/11/2007 18:40:47 | mo: 26/11/2007 18:40:47 -=- Mozilla --= Mozilla

___________________________________________________________________________

[Listing du dossier Program Files]

+- C:\Program Files

cr: 22/11/2007 22:10:59 | mo: 22/11/2007 22:11:06 -=- 7-Zip ----= 7-Zip
cr: 21/11/2007 22:22:07 | mo: 21/11/2007 22:25:35 -=- A4Desk ---= A4Desk
cr: 21/11/2007 22:14:53 | mo: 21/11/2007 22:14:54 -=- A4Desktrialfr ---= A4Desktrialfr
cr: 16/11/2007 21:51:54 | mo: 23/11/2007 22:26:34 -=- Active WebCam ---= Active WebCam
cr: 12/12/2006 19:23:32 | mo: 23/09/2007 20:34:13 -=- Adobe ----= Adobe
cr: 30/11/2006 17:20:48 | mo: 08/12/2006 18:09:47 -=- ADSL Drivers ----= ADSL Drivers
cr: 30/10/2007 23:23:09 | mo: 30/10/2007 23:23:09 -=- Adverts --= Adverts
cr: 24/10/2006 08:38:29 | mo: 21/08/2004 12:24:27 -=- Ahead ----= Ahead
cr: 03/10/2007 13:20:41 | mo: 03/10/2007 13:20:41 -=- Alwil Software ----= Alwil Software
cr: 20/11/2007 22:01:23 | mo: 27/11/2007 21:52:21 -=- Amor AVI MPEG WMV RM to MP3 Converter ----= Amor AVI MPEG WMV RM to MP3 Converter
cr: 18/11/2007 19:47:16 | mo: 25/11/2007 21:37:53 -=- Ares -----= Ares
cr: 28/10/2007 22:58:51 | mo: 28/10/2007 22:58:51 -=- Autofr ---= Autofr
cr: 15/11/2007 22:28:15 | mo: 16/11/2007 17:13:14 -=- AxBx -----= AxBx
cr: 28/06/2007 23:48:18 | mo: 28/06/2007 23:48:18 -=- Bullfrog -= Bullfrog
cr: 16/11/2007 22:24:13 | mo: 16/11/2007 22:25:27 -=- CCleaner -= CCleaner
cr: 22/09/2007 20:51:56 | mo: 22/09/2007 20:51:56 -=- COMPLU~1 -= ComPlus Applications
cr: 29/09/2007 19:26:14 | mo: 29/09/2007 19:26:14 -=- Croteam --= Croteam
cr: 27/10/2007 21:21:26 | mo: 30/10/2007 22:42:35 -=- Dachshund Software --= Dachshund Software
cr: 31/10/2006 13:48:26 | mo: 31/10/2006 13:48:26 -=- Davilex --= Davilex
cr: 18/11/2007 22:26:07 | mo: 25/11/2007 21:39:06 -=- DivX -----= DivX
cr: 01/08/2007 09:20:57 | mo: 01/08/2007 09:21:07 -=- DVCam 3(PC Camera) -----= DVCam 3(PC Camera)
cr: 24/10/2006 08:42:10 | mo: 23/09/2007 20:39:48 -=- DVDSHR~1 -= DVD Shrink
cr: 20/10/2007 13:36:10 | mo: 20/10/2007 13:36:10 -=- Eidos ----= Eidos
cr: 27/06/2007 23:47:49 | mo: 27/06/2007 23:47:49 -=- Eidos Interactive ----= Eidos Interactive
cr: 26/09/2007 20:11:49 | mo: 26/09/2007 20:27:22 -=- Electronic Arts ----= Electronic Arts
cr: 16/05/2007 19:44:14 | mo: 30/10/2007 22:43:46 -=- Executive Software ----= Executive Software
cr: 24/10/2006 10:04:33 | mo: 17/11/2007 22:26:37 -=- FICHIE~1 -= Fichiers communs
cr: 24/10/2006 08:37:23 | mo: 03/10/2007 20:41:36 -=- FlashGet -= FlashGet
cr: 17/08/2007 19:28:59 | mo: 17/08/2007 19:29:16 -=- Future Beat 3D -= Future Beat 3D
cr: 24/10/2006 09:47:13 | mo: 24/10/2006 09:47:13 -=- Hasbro Interactive -= Hasbro Interactive
cr: 02/11/2007 08:26:45 | mo: 03/11/2007 20:27:39 -=- HotTVPlayer -= HotTVPlayer
cr: 12/05/2007 18:25:45 | mo: 12/05/2007 18:25:45 -=- Infogrames -= Infogrames
cr: 16/11/2007 17:14:25 | mo: 16/11/2007 17:14:25 -=- inKline Global -= inKline Global
cr: 29/10/2006 16:38:07 | mo: 16/11/2007 17:14:23 -=- InstallShield Installation Information -= InstallShield Installation Information
cr: 24/10/2006 08:22:33 | mo: 26/10/2007 21:42:40 -=- INTERN~1 -= internet explorer
cr: 03/10/2007 13:34:54 | mo: 03/10/2007 13:34:54 -=- Inventel -= Inventel
cr: 31/10/2007 22:02:43 | mo: 31/10/2007 22:02:43 -=- Lavalys --= Lavalys
cr: 17/11/2007 22:30:16 | mo: 17/11/2007 22:30:16 -=- Lavasoft -= Lavasoft
cr: 31/10/2006 14:17:12 | mo: 31/07/2007 09:46:46 -=- Maxis ----= Maxis
cr: 30/10/2007 23:22:45 | mo: 30/10/2007 23:22:53 -=- Messenger Plus! Live ----= Messenger Plus! Live
cr: 24/10/2006 08:22:33 | mo: 24/10/2006 08:22:33 -=- MICROS~1 -= microsoft frontpage
cr: 24/10/2006 13:53:45 | mo: 24/10/2006 13:53:45 -=- Microsoft Games -= Microsoft Games
cr: 03/10/2007 20:55:55 | mo: 19/10/2007 21:28:50 -=- Miranda IM -= Miranda IM
cr: 24/10/2006 08:22:33 | mo: 24/10/2006 08:22:33 -=- MOVIEM~1 -= movie maker
cr: 24/10/2006 08:41:38 | mo: 24/10/2006 08:41:38 -=- mozilla --= mozilla
cr: 03/10/2007 19:01:20 | mo: 27/11/2007 22:51:19 -=- Mozilla Firefox --= Mozilla Firefox
cr: 12/11/2007 20:44:19 | mo: 27/11/2007 22:33:22 -=- Mozilla Thunderbird --= Mozilla Thunderbird
cr: 23/09/2007 19:58:46 | mo: 23/09/2007 19:58:46 -=- MSNGAM~1 -= msn gaming zone
cr: 19/10/2007 21:10:55 | mo: 30/10/2007 23:22:50 -=- MSN Messenger -= MSN Messenger
cr: 18/08/2007 20:43:58 | mo: 18/08/2007 20:43:59 -=- Multimedia Combo Set -= Multimedia Combo Set
cr: 24/10/2006 08:22:33 | mo: 22/09/2007 20:55:10 -=- NETMEE~1 -= netmeeting
cr: 24/10/2006 08:22:33 | mo: 26/10/2007 21:42:40 -=- OUTLOO~1 -= outlook express
cr: 10/11/2007 21:57:11 | mo: 25/11/2007 21:39:38 -=- RayV -----= RayV
cr: 23/09/2007 20:39:31 | mo: 23/09/2007 20:39:32 -=- SATSUK~1 -= Satsuki Decodeur Pack
cr: 03/10/2007 13:35:05 | mo: 03/10/2007 13:35:05 -=- Securitoo -= Securitoo
cr: 22/09/2007 20:56:48 | mo: 22/09/2007 20:56:48 -=- SERVIC~1 -= Services en ligne
cr: 18/10/2007 20:24:06 | mo: 18/10/2007 20:45:23 -=- SM -------= SM
cr: 15/11/2007 22:48:40 | mo: 15/11/2007 22:49:01 -=- Spybot - Search & Destroy -------= Spybot - Search & Destroy
cr: 27/11/2007 22:15:53 | mo: 27/11/2007 22:15:53 -=- Trend Micro -------= Trend Micro
cr: 25/11/2007 21:33:58 | mo: 25/11/2007 21:33:58 -=- Uninstall Information -------= Uninstall Information
cr: 03/11/2006 15:07:05 | mo: 03/11/2006 15:07:05 -=- VideoLAN -= VideoLAN
cr: 03/10/2007 13:35:57 | mo: 28/11/2007 21:19:57 -=- Wanadoo --= Wanadoo
cr: 27/06/2007 10:34:09 | mo: 29/06/2007 23:57:19 -=- Wildlife Park --= Wildlife Park
cr: 24/10/2006 08:41:13 | mo: 05/11/2007 22:11:35 -=- WINAMP ---= WINAMP
cr: 30/10/2007 23:22:50 | mo: 30/10/2007 23:22:50 -=- Windows Live ---= Windows Live
cr: 03/10/2007 17:59:07 | mo: 18/10/2007 20:45:20 -=- Windows Live Toolbar ---= Windows Live Toolbar
cr: 24/10/2006 08:22:33 | mo: 22/09/2007 20:55:11 -=- WINDOW~1 -= windows media player
cr: 24/10/2006 08:22:33 | mo: 22/09/2007 20:50:53 -=- WINDOW~2 -= windows nt
cr: 22/09/2007 20:56:59 | mo: 22/09/2007 20:56:59 -=- WINDOW~3 -= WindowsUpdate
cr: 24/10/2006 08:41:33 | mo: 26/09/2007 18:59:46 -=- WinRAR ---= WinRAR
cr: 24/10/2006 08:22:34 | mo: 24/10/2006 08:22:34 -=- xerox ----= xerox
cr: 16/11/2007 22:24:44 | mo: 27/11/2007 21:50:36 -=- Yahoo! ---= Yahoo!
cr: 24/11/2007 22:17:18 | mo: 24/11/2007 22:17:18 -=- ZillaSoft.ws ---= ZillaSoft.ws

___________________________________________________________________________

[Recherche programmes connus, liés à CiD]


C:\Program Files\Messenger Plus! Live


___________________________________________________________________________

[Clés registre de démarrage]


___________________________________________________________________________

[Popups autorisés]


[-] Internet Explorer :

La version d'Internet Explorer utilisée, ne gère pas l'autorisation des popups.

[-] Mozilla Firefox

hjfhdbfn dnbd x,n ndbvib

Salut

les deux rapports hijackthis ne correspondent pas du tout, l'un présente une infection, lop, l'autre pas ...

il faut exécuter lopxp sur le PC infecté !! ;-)

++
Le moyen d'aimer une chose est de se dire qu'on pourrait la perdre (Gilbert Keith Chesterton)