Bonjour,
Des fenetres Pop-up s'ouvrent sur mon ordinateur, souvent marquées "CID ...".
J'ai fait un rapport Hijackthis que vous trouverez ci-dessous. Quelqu'un peut-il m'aider à remettre de l'ordre ?
Merci d'avance de votre aide
Annie
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:19:24, on 11/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Trust\MI-4500X WIRELESS OPTICAL MOUSE\Mouse32a.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Trust\MI-4500X WIRELESS OPTICAL MOUSE\Mouse32a.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Part browse safe hold] C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\long amen.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [draw global] C:\DOCUME~1\COMPAQ~1\APPLIC~1\01THIS~1\Readme Load.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [IETI] C:\Program Files\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IETI] C:\Program Files\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-156d3ee34a500e8d.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) - http://www.miniclip.com/igloader/igloader.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O21 - SSODL: drivers - {521837CD-A3A8-4970-9CEE-01DB39ACF034} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
Voici le rapport généré :
-----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Compaq_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 11/08/2008 | 15:27:07,35 ] [ PC : FAMILLECOLBERT ]
[ MAJ : 09-07-2008 | 21:02 ]
-------------[ Listing des dossiers dans Application Data ]------------
[17/07/2006|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/08/2006|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[21/06/2008|22:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Audio 4 part browse
[23/11/2004|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[25/05/2006|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Global Software Publishing
[28/10/2006|17:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[16/02/2008|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
[04/01/2006|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[16/07/2007|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin
[29/10/2007|23:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
[23/07/2007|14:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[03/11/2007|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[21/02/2008|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople
[27/10/2007|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
[05/01/2008|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[02/11/2007|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Runic
[20/04/2008|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
[04/01/2006|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/07/2007|15:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[19/02/2008|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
[02/11/2007|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SugarGames
[26/05/2006|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[02/11/2007|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio
[14/07/2006|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[17/02/2007|11:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[22/04/2008|10:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[15/07/2007|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom
[04/07/2007|12:33] C:\DOCUME~1\COMPAQ~1\APPLIC~1\$_hpcst$.hpc
[21/06/2008|22:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\01thisdate
[16/07/2006|20:32] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe
[21/07/2006|12:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM
[01/08/2006|15:10] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer
[25/07/2006|14:01] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ATOUT p'tit CLIC Lecture
[12/04/2007|21:43] C:\DOCUME~1\COMPAQ~1\APPLIC~1\bang
[31/07/2007|11:51] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Beep Industries
[23/11/2004|17:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\desktop.ini
[19/04/2008|18:45] C:\DOCUME~1\COMPAQ~1\APPLIC~1\DivX
[31/08/2004|18:21] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Enregistrement Hachette
[18/02/2008|17:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Fuzzy Games
[15/07/2007|16:42] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Gaijin Ent
[19/04/2008|21:09] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Gamelab
[28/10/2006|20:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google
[25/05/2006|11:16] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Help
[24/05/2006|19:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HPQ
[20/04/2008|14:23] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities
[04/01/2008|22:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\InterVideo
[23/07/2007|20:37] C:\DOCUME~1\COMPAQ~1\APPLIC~1\iWin
[04/01/2008|22:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Jane s Hotel
[17/07/2007|08:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\La Bataille pour la Terre du Milieu
[31/12/2007|10:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\La Bataille pour la Terre du Milieu T II
[22/05/2006|20:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Leadertech
[19/05/2007|14:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia
[20/02/2008|19:59] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Magic Academy
[20/02/2008|17:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft
[13/04/2007|23:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Mozilla
[25/05/2006|14:33] C:\DOCUME~1\COMPAQ~1\APPLIC~1\MSNInstaller
[28/07/2007|20:32] C:\DOCUME~1\COMPAQ~1\APPLIC~1\My Games
[05/01/2008|12:25] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PlayFirst
[29/04/2006|15:40] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Real
[27/10/2007|22:40] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sandlot Games
[28/12/2007|17:48] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SecuROM
[04/08/2008|11:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Skype
[05/08/2006|14:08] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic
[27/05/2006|21:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun
[21/02/2008|22:48] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Super-Cow
[30/04/2006|09:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Symantec
[13/04/2007|23:05] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Talkback
[01/05/2006|16:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Template
[19/07/2007|19:58] C:\DOCUME~1\COMPAQ~1\APPLIC~1\wklnhst.dat
[20/04/2008|14:23] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Zylom
[01/01/2007|16:59] C:\DOCUME~1\COMPAQ~2\APPLIC~1\Macromedia
[23/11/2004|17:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[04/01/2006|18:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[04/01/2006|18:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[04/01/2006|18:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[04/01/2006|18:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[10/04/2007|08:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[24/05/2006|19:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec
[04/01/2006|18:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[11/08/2008 15:00][--ah-----] C:\WINDOWS\tasks\ABFA0B9D91FD807D.job
[11/08/2008 14:45][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[11/08/2008 15:07][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[11/08/2008 09:45][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
ABFA0B9D91FD807D.job <--> c:\docume~1\compaq~1\applic~1\01this~1\MeetDupeIntra.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[21/06/2008|22:38] C:\Program Files\01thisdate
[04/01/2006|18:00] C:\Program Files\Adobe
[27/05/2006|11:00] C:\Program Files\Alwil Software
[04/01/2006|18:00] C:\Program Files\ATI Technologies
[07/08/2006|13:29] C:\Program Files\AvantGo Connect
[11/08/2008|09:27] C:\Program Files\CCleaner
[11/08/2008|11:15] C:\Program Files\Circle Developement
[07/08/2006|13:29] C:\Program Files\Common Files
[04/01/2006|18:00] C:\Program Files\ComPlus Applications
[19/04/2008|18:42] C:\Program Files\DivX
[29/07/2008|17:59] C:\Program Files\Dofus
[07/04/2007|09:45] C:\Program Files\Dofus-Arena
[04/07/2007|12:55] C:\Program Files\EA GAMES
[28/12/2007|17:25] C:\Program Files\EA SPORTS
[25/02/2007|13:25] C:\Program Files\Electronic Arts
[19/04/2008|18:37] C:\Program Files\eMule
[22/04/2008|10:43] C:\Program Files\Fichiers communs
[27/10/2007|17:04] C:\Program Files\Google
[04/01/2006|18:01] C:\Program Files\Hewlett-Packard
[04/01/2006|18:02] C:\Program Files\Hp
[03/11/2007|17:37] C:\Program Files\IKEA HomePlanner
[28/12/2007|17:46] C:\Program Files\InstallShield Installation Information
[22/06/2008|03:08] C:\Program Files\Internet Explorer
[04/01/2006|18:02] C:\Program Files\InterVideo
[01/08/2006|15:08] C:\Program Files\iPod
[01/08/2006|15:09] C:\Program Files\iTunes
[11/04/2007|22:45] C:\Program Files\Java
[28/07/2007|14:46] C:\Program Files\LimeWire
[04/01/2006|18:02] C:\Program Files\Messenger
[05/01/2008|19:32] C:\Program Files\Messenger Plus! Live
[04/07/2007|12:32] C:\Program Files\Microsoft ActiveSync
[13/05/2007|10:11] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[04/01/2006|18:02] C:\Program Files\microsoft frontpage
[04/01/2006|18:03] C:\Program Files\Microsoft Office
[04/01/2006|18:02] C:\Program Files\Microsoft Works
[04/01/2006|18:03] C:\Program Files\Movie Maker
[11/08/2008|15:23] C:\Program Files\Mozilla Firefox
[25/05/2006|14:33] C:\Program Files\MSN
[04/01/2006|18:03] C:\Program Files\MSN Gaming Zone
[22/04/2008|10:44] C:\Program Files\MSN Messenger
[20/11/2006|23:14] C:\Program Files\MSXML 4.0
[04/01/2006|18:03] C:\Program Files\NetMeeting
[16/02/2008|10:46] C:\Program Files\NRJ
[03/11/2007|12:51] C:\Program Files\OrangeHSS
[16/06/2007|10:20] C:\Program Files\Outlook Express
[04/01/2006|18:03] C:\Program Files\PC-Doctor 5 for Windows
[25/07/2006|14:34] C:\Program Files\Picasa2
[01/08/2006|15:10] C:\Program Files\QuickTime
[04/01/2006|18:04] C:\Program Files\Real
[03/11/2007|13:11] C:\Program Files\SAGEM
[29/04/2006|19:12] C:\Program Files\Services en ligne
[26/07/2007|15:20] C:\Program Files\Skype
[04/01/2006|18:04] C:\Program Files\Sonic
[22/07/2007|22:13] C:\Program Files\Sunbelt Software
[26/05/2006|16:34] C:\Program Files\Symantec
[31/07/2006|18:27] C:\Program Files\Trust
[04/01/2006|18:05] C:\Program Files\Uninstall Information
[03/11/2007|13:01] C:\Program Files\Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter
[19/05/2007|11:42] C:\Program Files\Wanadoo
[22/04/2008|10:43] C:\Program Files\Windows Live
[28/12/2007|23:07] C:\Program Files\Windows Live Favorites
[28/12/2007|23:07] C:\Program Files\Windows Live Toolbar
[13/04/2007|23:23] C:\Program Files\Windows Media Connect 2
[13/04/2007|23:23] C:\Program Files\Windows Media Player
[04/01/2006|18:05] C:\Program Files\Windows NT
[04/01/2006|18:05] C:\Program Files\WindowsUpdate
[04/01/2006|18:05] C:\Program Files\xerox
[22/04/2008|10:52] C:\Program Files\Zylom Games
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[04/01/2006|18:00] C:\Program Files\Fichiers communs\Adobe
[29/04/2006|15:43] C:\Program Files\Fichiers communs\AOL
[22/02/2007|16:31] C:\Program Files\Fichiers communs\France Telecom
[15/08/2006|01:46] C:\Program Files\Fichiers communs\InstallShield
[04/01/2006|18:00] C:\Program Files\Fichiers communs\Java
[22/04/2008|10:43] C:\Program Files\Fichiers communs\Microsoft Shared
[04/01/2006|18:00] C:\Program Files\Fichiers communs\MSSoap
[04/01/2006|18:00] C:\Program Files\Fichiers communs\ODBC
[13/04/2007|23:00] C:\Program Files\Fichiers communs\Real
[04/01/2006|18:00] C:\Program Files\Fichiers communs\Roxio Shared
[29/10/2007|15:04] C:\Program Files\Fichiers communs\Sandlot Shared
[04/01/2006|18:01] C:\Program Files\Fichiers communs\Services
[26/07/2007|15:20] C:\Program Files\Fichiers communs\Skype
[04/01/2006|18:01] C:\Program Files\Fichiers communs\Sonic Shared
[04/01/2006|18:01] C:\Program Files\Fichiers communs\SpeechEngines
[04/01/2006|18:01] C:\Program Files\Fichiers communs\SureThing Shared
[26/05/2006|16:34] C:\Program Files\Fichiers communs\Symantec Shared
[16/06/2007|10:37] C:\Program Files\Fichiers communs\System
[04/01/2006|18:01] C:\Program Files\Fichiers communs\TiVo Shared
[22/04/2008|10:43] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[03/11/2007|17:36] C:\Program Files\Fichiers communs\Wise Installation Wizard
[13/04/2007|23:00] C:\Program Files\Fichiers communs\xing shared
---------------------------[ Process ]--------------------------
... 50
iexplore.exe ~ [1692]
iexplore.exe ~ [2052]
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Audio 4 part browse
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Audio 4 part browse\long amen.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\01this~1
C:\DOCUME~1\COMPAQ~1\APPLIC~1\01this~1\ayfmlfbm.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\01this~1\Logostupidcurbthird.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\01this~1\Meet Dupe Intra.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\01this~1\Readme Load.exe
C:\DOCUME~1\COMPAQ~1\APPLIC~1\01this~1\ssbqkjuy.exe
C:\Program Files\01this~1
C:\Program Files\Circle Developement
C:\WINDOWS\Prefetch\LONG AMEN.EXE-06F9EE62.pf
C:\WINDOWS\Prefetch\AYFMLFBM.EXE-10EF0B92.pf
C:\WINDOWS\Prefetch\MEET DUPE INTRA.EXE-35D54046.pf
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adopt.euroclick[1].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@2xmoinscher[2].txt
C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\ABFA0B9D91FD807D.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"draw global"="C:\\DOCUME~1\\COMPAQ~1\\APPLIC~1\\01THIS~1\\Readme Load.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Part browse safe hold"="C:\\Documents and Settings\\All Users\\Application Data\\Audio 4 part browse\\long amen.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 72 ( 70 ## added by CiD )
/!\ 1 Not 127.0.0.1 !!
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-11 15:31:04
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
=> C:\DOCUME~1\COMPAQ~1\MESDOC~1\Ma musique\didi\diego rock tibo\+ùSUZANNE VEGA\Craking\01 Cracking.wma
=> C:\DOCUME~1\COMPAQ~1\MESDOC~1\Ma musique\iTunes\iTunes Music\Suzanne Vega\Suzanne Vega\01 Cracking.m4a
=> C:\Documents and Settings\Compaq_Propri‚taire\Mes documents\Ma musique\didi\diego rock tibo\+ùSUZANNE VEGA\Craking\01 Cracking.wma
=> C:\Documents and Settings\Compaq_Propri‚taire\Mes documents\Ma musique\iTunes\iTunes Music\Suzanne Vega\Suzanne Vega\01 Cracking.m4a
[F:47][D:4]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
[F:32][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
[F:647][D:4]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 15:32:36,45 ]----------------------