Bonjour,
Un virus nommé CID a affecter mon ordinateur;
par la suite j'ai fais quelques recherche et je me suis procurer le logiciel hijackthis!
Voila ce que me donne le rapport:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:25:19, on 05/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Progra~1\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Panicware\Pop-Up Stopper\dpps2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\program files\steam\steam.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
C:\WINDOWS\system32\RegSrvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\1XConfig.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Documents and Settings\Damien\Bureau\HiJackThis\HijackThis.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ContextEnhancer - {4C6C4BA2-1646-0F3A-1FAE-B393C162C92E} - C:\Program Files\ContextEnhancer\ContextEnhancer-2.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [ATIPTA] C:\Progra~1\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Save and Restore] "C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Boob Idle Software Acid] C:\Documents and Settings\All Users\Application Data\Part Long Boob Idle\Burn Team.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB001" /M "Stylus C86"
O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\Program Files\Panicware\Pop-Up Stopper\dpps2.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [kinddent] C:\DOCUME~1\Damien\APPLIC~1\idleplay\Site Once.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D6E0974A-3646-4F99-AEB3-0F571CCBE9A1}: NameServer = 212.151.136.242,212.151.136.246
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - http://libusb-win32.sourceforge.net - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Norton Save and Restore - Symantec Corporation - C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Je ne sais pas trop comment m'en sortir merci d'avance de votre aide si précieuse :)
Bonne soirée
Je vais essayer cela tout de suite je vous tiens au courant!
Bonne journée!
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Damien ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 07/06/2008 | 12:24:08,35 ] [ PC : NOM-A960FA12DDA ]
[ MAJ : 01-06-2008 | 15:51 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Supprimé! - C:\DOCUME~1\Damien\LOCALS~1\Temp\bis1A.exe
Restauré! - Fichier Hosts
//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[17/04/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[18/02/2008|23:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[18/02/2008|23:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[29/02/2008|10:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/02/2008|13:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[18/02/2008|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[22/03/2008|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installer.log
[15/04/2008|12:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[29/05/2008|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[09/03/2008|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[18/02/2008|13:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[01/05/2008|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Part Long Boob Idle
[11/05/2008|20:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Samsung
[18/02/2008|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[17/05/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[08/05/2008|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[18/02/2008|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[04/06/2008|21:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[05/03/2008|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[20/02/2008|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[17/04/2008|19:46] C:\DOCUME~1\Autre\APPLIC~1\Adobe
[11/05/2008|14:54] C:\DOCUME~1\Autre\APPLIC~1\Apple Computer
[18/02/2008|12:07] C:\DOCUME~1\Autre\APPLIC~1\desktop.ini
[18/02/2008|12:15] C:\DOCUME~1\Autre\APPLIC~1\Identities
[18/02/2008|12:21] C:\DOCUME~1\Autre\APPLIC~1\InterTrust
[15/04/2008|12:53] C:\DOCUME~1\Autre\APPLIC~1\Jasc
[07/04/2008|13:23] C:\DOCUME~1\Autre\APPLIC~1\Macromedia
[17/04/2008|13:11] C:\DOCUME~1\Autre\APPLIC~1\Microsoft
[15/04/2008|12:28] C:\DOCUME~1\Autre\APPLIC~1\Mozilla
[16/04/2008|00:32] C:\DOCUME~1\Autre\APPLIC~1\Sun
[21/04/2008|21:03] C:\DOCUME~1\Autre\APPLIC~1\uTorrent
[20/02/2008|18:07] C:\DOCUME~1\Damien\APPLIC~1\Adobe
[20/02/2008|18:26] C:\DOCUME~1\Damien\APPLIC~1\Ahead
[18/02/2008|23:22] C:\DOCUME~1\Damien\APPLIC~1\Apple Computer
[11/05/2008|09:24] C:\DOCUME~1\Damien\APPLIC~1\Artweaver
[18/02/2008|13:00] C:\DOCUME~1\Damien\APPLIC~1\AVS4YOU
[18/02/2008|12:07] C:\DOCUME~1\Damien\APPLIC~1\desktop.ini
[24/05/2008|14:40] C:\DOCUME~1\Damien\APPLIC~1\FileZilla
[18/02/2008|12:59] C:\DOCUME~1\Damien\APPLIC~1\Google
[21/05/2008|19:06] C:\DOCUME~1\Damien\APPLIC~1\gtk-2.0
[21/02/2008|22:34] C:\DOCUME~1\Damien\APPLIC~1\Help
[18/02/2008|12:15] C:\DOCUME~1\Damien\APPLIC~1\Identities
[01/05/2008|10:56] C:\DOCUME~1\Damien\APPLIC~1\idleplay
[18/02/2008|12:21] C:\DOCUME~1\Damien\APPLIC~1\InterTrust
[18/02/2008|13:49] C:\DOCUME~1\Damien\APPLIC~1\Macromedia
[12/04/2008|14:22] C:\DOCUME~1\Damien\APPLIC~1\Microsoft
[18/02/2008|13:05] C:\DOCUME~1\Damien\APPLIC~1\Mozilla
[02/03/2008|15:49] C:\DOCUME~1\Damien\APPLIC~1\Nvu
[07/06/2008|12:09] C:\DOCUME~1\Damien\APPLIC~1\OpenOffice.org2
[27/04/2008|14:52] C:\DOCUME~1\Damien\APPLIC~1\Paltalk
[08/05/2008|20:26] C:\DOCUME~1\Damien\APPLIC~1\Publish Providers
[07/06/2008|12:11] C:\DOCUME~1\Damien\APPLIC~1\Skype
[07/06/2008|12:09] C:\DOCUME~1\Damien\APPLIC~1\skypePM
[24/05/2008|23:39] C:\DOCUME~1\Damien\APPLIC~1\Sony
[08/05/2008|19:40] C:\DOCUME~1\Damien\APPLIC~1\Sony Setup
[20/02/2008|15:21] C:\DOCUME~1\Damien\APPLIC~1\Sun
[12/04/2008|11:53] C:\DOCUME~1\Damien\APPLIC~1\vlc
[18/02/2008|12:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[18/02/2008|12:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[18/02/2008|12:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
[19/02/2008|17:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[18/02/2008|12:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[18/02/2008|12:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[06/06/2008 22:00][--ah-----] C:\WINDOWS\tasks\AE7152B0918AC630.job
[31/05/2008 20:53][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[07/06/2008 12:06][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
AE7152B0918AC630.job <--> c:\docume~1\damien\applic~1\idleplay\SOAPINSIDETHUNK.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[15/04/2008|12:21] C:\Program Files\Adobe
[12/04/2008|12:03] C:\Program Files\adslTV
[24/02/2008|12:57] C:\Program Files\Alcohol Soft
[18/02/2008|12:53] C:\Program Files\Alwil Software
[05/05/2008|17:50] C:\Program Files\Apple Software Update
[20/05/2008|19:30] C:\Program Files\AskPBar
[12/04/2008|11:49] C:\Program Files\Asus
[18/02/2008|13:13] C:\Program Files\ASUSTek
[18/02/2008|12:24] C:\Program Files\ATI Technologies
[19/02/2008|13:04] C:\Program Files\Audacity
[19/05/2008|21:24] C:\Program Files\AVerMedia
[18/02/2008|12:59] C:\Program Files\AVS4YOU
[18/02/2008|12:13] C:\Program Files\ComPlus Applications
[07/06/2008|12:13] C:\Program Files\ContextEnhancer
[18/02/2008|13:14] C:\Program Files\CyberLink
[12/04/2008|11:45] C:\Program Files\DivX
[19/05/2008|21:26] C:\Program Files\EPSON
[27/02/2008|13:29] C:\Program Files\FBrowserAdvisor
[17/05/2008|17:13] C:\Program Files\Fichiers communs
[02/03/2008|16:16] C:\Program Files\FileZilla Client
[12/04/2008|13:32] C:\Program Files\free-downloads.net
[11/05/2008|09:24] C:\Program Files\GIMP-2.0
[18/02/2008|12:59] C:\Program Files\Google
[01/05/2008|10:55] C:\Program Files\idleplay
[06/04/2008|14:12] C:\Program Files\Image-Line
[19/05/2008|21:25] C:\Program Files\InstallShield Installation Information
[18/02/2008|12:26] C:\Program Files\Intel
[10/04/2008|17:51] C:\Program Files\Internet Explorer
[04/05/2008|20:54] C:\Program Files\iPod
[04/05/2008|20:54] C:\Program Files\iTunes
[15/04/2008|11:57] C:\Program Files\Jasc Software Inc
[19/02/2008|21:50] C:\Program Files\Java
[24/02/2008|13:29] C:\Program Files\KONAMI
[15/04/2008|12:16] C:\Program Files\LeechFTP
[23/03/2008|11:28] C:\Program Files\LibUSB-Win32-0.1.10.1
[19/02/2008|21:50] C:\Program Files\LimeWire
[18/02/2008|17:20] C:\Program Files\Messenger
[28/05/2008|19:46] C:\Program Files\Messenger Plus! Live
[19/02/2008|17:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[18/02/2008|12:15] C:\Program Files\microsoft frontpage
[18/02/2008|13:04] C:\Program Files\Movie Maker
[07/06/2008|12:12] C:\Program Files\Mozilla Firefox
[08/05/2008|19:56] C:\Program Files\MSBuild
[16/04/2008|18:57] C:\Program Files\MSN
[18/02/2008|12:12] C:\Program Files\MSN Gaming Zone
[14/05/2008|12:20] C:\Program Files\MSXML 4.0
[10/05/2008|10:17] C:\Program Files\MSXML 6.0
[18/02/2008|13:30] C:\Program Files\Nero
[18/02/2008|13:01] C:\Program Files\NetMeeting
[18/02/2008|16:05] C:\Program Files\Norton Save and Restore
[02/03/2008|15:49] C:\Program Files\Nvu
[18/02/2008|12:12] C:\Program Files\Online Services
[21/04/2008|21:00] C:\Program Files\Ontrack
[10/05/2008|11:38] C:\Program Files\OpenOffice.org 2.4
[18/02/2008|17:19] C:\Program Files\Outlook Express
[06/04/2008|14:11] C:\Program Files\Outsim
[27/04/2008|14:52] C:\Program Files\Paltalk Messenger
[24/05/2008|20:26] C:\Program Files\Panicware
[17/04/2008|00:10] C:\Program Files\PC Inspector File Recovery
[20/02/2008|22:14] C:\Program Files\Pcsx2_0.9.4
[25/02/2008|21:31] C:\Program Files\QuickMediaConverter
[04/05/2008|20:52] C:\Program Files\QuickTime
[08/05/2008|19:50] C:\Program Files\Reference Assemblies
[11/05/2008|20:16] C:\Program Files\Samsung
[18/02/2008|12:13] C:\Program Files\Services en ligne
[17/05/2008|17:13] C:\Program Files\Skype
[10/05/2008|11:27] C:\Program Files\SoftChris
[08/05/2008|20:17] C:\Program Files\Sony
[08/05/2008|19:39] C:\Program Files\Sony Setup
[07/06/2008|12:16] C:\Program Files\Steam
[18/02/2008|15:33] C:\Program Files\Symantec
[20/02/2008|19:09] C:\Program Files\THQ
[18/02/2008|12:23] C:\Program Files\Trend Micro
[18/02/2008|12:29] C:\Program Files\Uninstall Information
[18/02/2008|15:41] C:\Program Files\VideoLAN
[08/05/2008|20:18] C:\Program Files\VstPlugins
[05/06/2008|20:32] C:\Program Files\Windows Live
[05/03/2008|15:02] C:\Program Files\Windows Media Connect 2
[05/03/2008|17:42] C:\Program Files\Windows Media Player
[18/02/2008|13:01] C:\Program Files\Windows NT
[18/02/2008|12:13] C:\Program Files\WindowsUpdate
[18/02/2008|12:57] C:\Program Files\WinRAR
[26/04/2008|21:11] C:\Program Files\World of Warcraft
[13/04/2008|18:42] C:\Program Files\WowCartographe
[18/02/2008|12:15] C:\Program Files\xerox
[25/04/2008|17:21] C:\Program Files\xplane
[21/02/2008|22:36] C:\Program Files\X-System
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[10/05/2008|21:51] C:\Program Files\Fichiers communs\Adobe
[15/04/2008|12:23] C:\Program Files\Fichiers communs\Adobe Systems Shared
[18/02/2008|13:36] C:\Program Files\Fichiers communs\Ahead
[18/02/2008|23:15] C:\Program Files\Fichiers communs\Apple
[19/05/2008|21:24] C:\Program Files\Fichiers communs\AVerMedia
[18/02/2008|12:59] C:\Program Files\Fichiers communs\AVSMedia
[24/02/2008|17:19] C:\Program Files\Fichiers communs\Blizzard Entertainment
[10/05/2008|11:11] C:\Program Files\Fichiers communs\EPSON
[18/02/2008|15:32] C:\Program Files\Fichiers communs\InstallShield
[19/02/2008|21:44] C:\Program Files\Fichiers communs\Java
[22/03/2008|21:48] C:\Program Files\Fichiers communs\Logitech
[08/05/2008|20:13] C:\Program Files\Fichiers communs\Microsoft Shared
[18/02/2008|12:13] C:\Program Files\Fichiers communs\MSSoap
[18/02/2008|12:07] C:\Program Files\Fichiers communs\ODBC
[18/02/2008|12:13] C:\Program Files\Fichiers communs\Services
[17/05/2008|17:13] C:\Program Files\Fichiers communs\Skype
[18/02/2008|12:07] C:\Program Files\Fichiers communs\SpeechEngines
[18/02/2008|16:09] C:\Program Files\Fichiers communs\Symantec Shared
[18/02/2008|17:19] C:\Program Files\Fichiers communs\System
[18/02/2008|13:57] C:\Program Files\Fichiers communs\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 65
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Part Long Boob Idle
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Part Long Boob Idle\Burn Team.exe
C:\DOCUME~1\Damien\APPLIC~1\idleplay
C:\DOCUME~1\Damien\APPLIC~1\idleplay\managerjumpplatformstyle.exe
C:\DOCUME~1\Damien\APPLIC~1\idleplay\pficrxay.exe
C:\DOCUME~1\Damien\APPLIC~1\idleplay\Site Once.exe
C:\DOCUME~1\Damien\APPLIC~1\idleplay\SOAPINSIDETHUNK.exe
C:\DOCUME~1\Damien\APPLIC~1\idleplay\vddxtpcc.exe
C:\Program Files\idleplay
C:\WINDOWS\Prefetch\BURN TEAM.EXE-2BB838CB.pf
C:\WINDOWS\Prefetch\SITE ONCE.EXE-03385AA9.pf
C:\WINDOWS\Prefetch\SOAPINSIDETHUNK.EXE-18AAF79F.pf
C:\DOCUME~1\Damien\Cookies\damien@www.adserver5[1].txt
C:\DOCUME~1\Damien\Cookies\damien@adin.bigpoint[2].txt
C:\DOCUME~1\Damien\Cookies\damien@bigpoint[2].txt
C:\DOCUME~1\Damien\Cookies\damien@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\Damien\Cookies\damien@banner.casinoking[2].txt
C:\DOCUME~1\Damien\Cookies\damien@casinoking[1].txt
C:\DOCUME~1\Damien\Cookies\damien@banner.cotedazurpalace[2].txt
C:\DOCUME~1\Damien\Cookies\damien@cotedazurpalace[2].txt
C:\DOCUME~1\Damien\Cookies\damien@adopt.euroclick[2].txt
C:\DOCUME~1\Damien\Cookies\damien@pacificpoker[2].txt
C:\DOCUME~1\Damien\Cookies\damien@partygaming.122.2o7[1].txt
C:\DOCUME~1\Damien\Cookies\damien@partypoker[2].txt
C:\DOCUME~1\Damien\Cookies\damien@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\Damien\Cookies\damien@cachewww.32vegas[2].txt
C:\DOCUME~1\Damien\Cookies\damien@vegas-millions[1].txt
C:\DOCUME~1\Damien\Cookies\damien@www.vegasaffiliates[1].txt
C:\DOCUME~1\Damien\Cookies\damien@888[1].txt
C:\DOCUME~1\Damien\Cookies\damien@888[2].txt
C:\WINDOWS\Tasks\AE7152B0918AC630.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"kinddent"="C:\\DOCUME~1\\Damien\\APPLIC~1\\idleplay\\Site Once.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Boob Idle Software Acid"="C:\\Documents and Settings\\All Users\\Application Data\\Part Long Boob Idle\\Burn Team.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-07 12:25:09
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
=> C:\Documents and Settings\Damien\Application Data\Macromedia\Flash Player\#SharedObjects\HS6L925Y\crackle.com
=> C:\Documents and Settings\Damien\Application Data\Macromedia\Flash Player\#SharedObjects\HS6L925Y\crackle.com\crackleSettings.sol
=> C:\Documents and Settings\Damien\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com
=> C:\Documents and Settings\Damien\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com\settings.sol
=> C:\Documents and Settings\Damien\Bureau\torrent\Warhammer 40,000 - Dawn of War\No Cd Crack
=> C:\Documents and Settings\Damien\Bureau\torrent\Warhammer 40,000 - Dawn of War\No Cd Crack\W40k.exe
=> C:\Documents and Settings\Damien\Recent\Crack.lnk
=> C:\Documents and Settings\Damien\Bureau\torrent\Warhammer 40,000 - Dawn of War\Keygen
=> C:\Documents and Settings\Damien\Bureau\torrent\Warhammer 40,000 - Dawn of War\Game Images\HAANDI's multikeygen (9).exe
=> C:\Documents and Settings\Damien\Bureau\torrent\Warhammer 40,000 - Dawn of War\Keygen\HAANDI's multikeygen (9).exe
[F:2032][D:88]-> C:\DOCUME~1\Damien\LOCALS~1\Temp
[F:200][D:0]-> C:\DOCUME~1\Damien\Cookies
[F:899][D:4]-> C:\DOCUME~1\Damien\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled
--------------------[ Fin du rapport a 12:26:12,58 ]----------------------
Je crois que le problème est "long boob idle" très jolie nom -_-'
j'ai regarder sur un internet c'est un cheval de trois me semble t'il...
par contre je ne sais pas comment l'enlever
Merci de votre reponse