Fenêtres CID

Résolu/Fermé
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008 - 24 juil. 2008 à 13:22
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 - 29 juil. 2008 à 23:10
Bonjour,
au secours, j'ai besoin d'aide
en effet je suis envahie par les fenêtres cid depuis un bon moment maintenant et je n'arrive pas à m'en débarrasser
j'ai déjà essayé de supprimer les programmes ayant pu être à l'origine mais rien y fait
j'ai épluché ce forum mais malheureusement je ne suis pas une experte
Si quelqu'un pouvait m'éclairer se serait bien sympa voici le rapport hijackthis
Merki d'avance

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:07:41, on 24/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\HP\KBD\KBD.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\HP_Propriétaire\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail?service=communiquer&u=http://webmail.wanadoo.fr/wanadoo/inbox.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand2526.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Bat Wave Base Dale] C:\Documents and Settings\All Users\Application Data\Link Axis Bat Wave\Win bone.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [Style vga] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FRAGFO~1\Intradashdart.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{75A5386E-CE60-449F-8D1D-C78E6D0E2CD3}: NameServer = 80.10.246.1 81.253.149.2
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe
O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

10 réponses

verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180
24 juil. 2008 à 13:25
Bonjour,

Télécharge LopS&D.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

Installe le logiciel.
Une icône va apparaitre sur le bureau. Double clique dessus pour lancer le logiciel
Tu choisis la langue et l'option 1 pour effectuer la recherche.
A la fin de la recherche, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message.
A+
0
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
24 juil. 2008 à 14:13
Merci
Voilà ce que ça donne:


--------------------\\ Lop S&D 4.2.2-3 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 3 ]
[ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 24/07/2008 | 14:07:30,93 ] [ PC : NOM-EB85C523610 ]
[ MAJ : 22-07-2008 | 17:35 ]

--------------------\\ Listing des dossiers dans Application Data

[14/04/2007|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
[02/03/2008|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[28/10/2006|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[28/04/2008|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/03/2008|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[03/07/2007|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[03/06/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[21/05/2005|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVG7
[25/10/2005|00:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[08/03/2007|20:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[24/11/2004|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[20/08/2007|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[08/03/2007|23:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/03/2007|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes
[20/09/2007|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/01/2008|20:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[29/04/2005|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft(2)
[04/04/2005|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[04/04/2005|20:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[29/04/2005|00:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[09/03/2005|17:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[23/04/2008|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[24/07/2008|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
[17/01/2008|21:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[02/01/2007|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[25/12/2006|14:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com Personal Firewall
[08/03/2008|20:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[02/03/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09/03/2005|17:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[03/04/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[10/03/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[02/03/2008|15:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[18/08/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[30/12/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[09/03/2005|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[09/03/2005|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[07/09/2007|13:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[30/06/2007|20:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[13/05/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2005|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[24/07/2008|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[02/03/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[24/10/2005|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/03/2007|00:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[08/03/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[09/03/2005|17:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[24/11/2004|00:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[09/03/2005|17:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[09/03/2005|17:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[09/03/2005|16:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[02/03/2008|16:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ACD Systems
[15/12/2006|00:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[09/02/2007|13:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[02/03/2008|16:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[09/03/2005|17:07] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[29/04/2005|00:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVG7
[21/05/2005|20:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Copernic
[30/12/2005|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Datalayer
[24/11/2004|00:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
[20/10/2007|17:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
[24/07/2008|13:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfourbolt
[12/05/2006|22:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
[17/12/2005|00:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[30/03/2005|22:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[12/10/2007|19:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[26/03/2006|15:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
[25/10/2005|09:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Lavasoft
[24/12/2006|13:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[30/03/2005|22:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[28/03/2005|16:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\McAfee
[29/04/2005|00:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\McAfee.com Personal Firewall
[14/04/2007|14:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[20/08/2007|16:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[28/10/2006|11:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[20/11/2005|16:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSN6
[30/03/2005|23:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[18/08/2007|20:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nokia
[01/02/2007|00:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OfficeUpdate12
[18/08/2007|21:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Suite
[27/05/2007|16:07] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pokerth
[30/05/2008|23:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
[18/08/2007|20:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ROUTE 66 Sync
[09/03/2005|17:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[21/06/2008|21:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SiteAdvisor
[09/03/2005|16:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[28/03/2005|16:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[04/01/2007|01:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
[25/05/2006|20:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
[04/12/2006|23:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Teleca
[02/03/2008|12:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TuneUp Software
[11/05/2008|20:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
[13/01/2008|12:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

[29/04/2005|00:55] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[24/07/2006|10:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[30/03/2005|22:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[28/03/2005|16:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee.com Personal Firewall
[11/07/2007|01:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[21/11/2007|13:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor

[11/03/2008|13:42] C:\DOCUME~1\max\APPLIC~1\ACD Systems
[24/04/2008|20:10] C:\DOCUME~1\max\APPLIC~1\Adobe
[09/05/2005|21:08] C:\DOCUME~1\max\APPLIC~1\AdobeUM
[10/03/2008|21:48] C:\DOCUME~1\max\APPLIC~1\Ahead
[26/02/2008|21:20] C:\DOCUME~1\max\APPLIC~1\Apple Computer
[29/04/2005|15:43] C:\DOCUME~1\max\APPLIC~1\AVG7
[02/07/2007|18:04] C:\DOCUME~1\max\APPLIC~1\CDRusersDB.v12
[31/12/2005|15:10] C:\DOCUME~1\max\APPLIC~1\Datalayer
[24/11/2004|00:13] C:\DOCUME~1\max\APPLIC~1\desktop.ini
[26/11/2006|00:56] C:\DOCUME~1\max\APPLIC~1\DivX
[04/07/2008|08:17] C:\DOCUME~1\max\APPLIC~1\fragfourbolt
[11/03/2007|12:55] C:\DOCUME~1\max\APPLIC~1\FrostWire
[03/04/2005|02:57] C:\DOCUME~1\max\APPLIC~1\GDIPFONTCACHEV1.DAT
[22/02/2006|22:20] C:\DOCUME~1\max\APPLIC~1\Google
[05/01/2008|03:12] C:\DOCUME~1\max\APPLIC~1\Grisoft
[31/03/2005|00:10] C:\DOCUME~1\max\APPLIC~1\Help
[25/11/2004|05:26] C:\DOCUME~1\max\APPLIC~1\Identities
[26/02/2008|20:54] C:\DOCUME~1\max\APPLIC~1\InstallShield
[06/04/2005|13:39] C:\DOCUME~1\max\APPLIC~1\InterVideo
[29/04/2005|20:24] C:\DOCUME~1\max\APPLIC~1\Lavasoft
[27/08/2007|04:20] C:\DOCUME~1\max\APPLIC~1\Leadertech
[26/02/2008|21:18] C:\DOCUME~1\max\APPLIC~1\LG Electronics
[01/02/2007|19:49] C:\DOCUME~1\max\APPLIC~1\Macromedia
[11/12/2005|22:05] C:\DOCUME~1\max\APPLIC~1\McAfee
[27/05/2005|19:53] C:\DOCUME~1\max\APPLIC~1\McAfee.com Personal Firewall
[26/02/2008|21:20] C:\DOCUME~1\max\APPLIC~1\Microsoft
[06/11/2006|14:54] C:\DOCUME~1\max\APPLIC~1\Mozilla
[08/09/2005|21:04] C:\DOCUME~1\max\APPLIC~1\MSN6
[31/03/2005|19:40] C:\DOCUME~1\max\APPLIC~1\MSNInstaller
[11/03/2007|13:39] C:\DOCUME~1\max\APPLIC~1\muvee Technologies
[17/02/2006|22:32] C:\DOCUME~1\max\APPLIC~1\Nokia
[19/08/2007|00:09] C:\DOCUME~1\max\APPLIC~1\PC Suite
[09/05/2007|15:09] C:\DOCUME~1\max\APPLIC~1\pokerth
[17/05/2006|13:39] C:\DOCUME~1\max\APPLIC~1\questdb.v12
[29/04/2005|00:05] C:\DOCUME~1\max\APPLIC~1\Real
[09/03/2005|17:18] C:\DOCUME~1\max\APPLIC~1\SampleView
[30/03/2007|20:51] C:\DOCUME~1\max\APPLIC~1\Screenshot Sender
[12/01/2008|18:49] C:\DOCUME~1\max\APPLIC~1\Shareaza
[26/02/2007|23:30] C:\DOCUME~1\max\APPLIC~1\SiteAdvisor
[27/08/2007|04:34] C:\DOCUME~1\max\APPLIC~1\Sonic
[09/03/2005|16:44] C:\DOCUME~1\max\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\max\APPLIC~1\Symantec
[15/12/2006|09:42] C:\DOCUME~1\max\APPLIC~1\Talkback
[03/12/2006|21:38] C:\DOCUME~1\max\APPLIC~1\Teleca
[17/05/2008|18:27] C:\DOCUME~1\max\APPLIC~1\TuneUp Software
[26/06/2008|18:04] C:\DOCUME~1\max\APPLIC~1\U3
[30/06/2007|20:53] C:\DOCUME~1\max\APPLIC~1\vlc
[01/07/2008|09:16] C:\DOCUME~1\max\APPLIC~1\wklnhst.dat

[28/05/2005|12:29] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[09/03/2007|00:14] C:\DOCUME~1\Soso\APPLIC~1\00001190_VTS_0.IFO
[29/06/2008|15:53] C:\DOCUME~1\Soso\APPLIC~1\ACD Systems
[27/04/2008|20:02] C:\DOCUME~1\Soso\APPLIC~1\Adobe
[11/05/2005|16:40] C:\DOCUME~1\Soso\APPLIC~1\AdobeUM
[03/11/2007|15:17] C:\DOCUME~1\Soso\APPLIC~1\Ahead
[03/01/2008|20:08] C:\DOCUME~1\Soso\APPLIC~1\Apple Computer
[01/05/2005|13:27] C:\DOCUME~1\Soso\APPLIC~1\AVG7
[10/03/2007|21:20] C:\DOCUME~1\Soso\APPLIC~1\CopyToDvd
[09/03/2007|20:15] C:\DOCUME~1\Soso\APPLIC~1\CyberLink
[24/11/2004|00:13] C:\DOCUME~1\Soso\APPLIC~1\desktop.ini
[29/10/2006|10:42] C:\DOCUME~1\Soso\APPLIC~1\DivX
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\ezpinst.exe
[01/06/2008|00:42] C:\DOCUME~1\Soso\APPLIC~1\fragfourbolt
[07/07/2006|00:05] C:\DOCUME~1\Soso\APPLIC~1\Google
[06/01/2008|16:08] C:\DOCUME~1\Soso\APPLIC~1\Grisoft
[31/03/2005|17:25] C:\DOCUME~1\Soso\APPLIC~1\Help
[25/11/2004|05:26] C:\DOCUME~1\Soso\APPLIC~1\Identities
[30/06/2007|17:36] C:\DOCUME~1\Soso\APPLIC~1\InstallShield
[23/09/2006|20:48] C:\DOCUME~1\Soso\APPLIC~1\InterVideo
[20/05/2005|18:28] C:\DOCUME~1\Soso\APPLIC~1\Lavasoft
[26/12/2006|18:31] C:\DOCUME~1\Soso\APPLIC~1\Leadertech
[25/08/2007|00:11] C:\DOCUME~1\Soso\APPLIC~1\LimeWire
[02/04/2006|13:26] C:\DOCUME~1\Soso\APPLIC~1\Macromedia
[20/05/2005|18:41] C:\DOCUME~1\Soso\APPLIC~1\McAfee
[28/03/2005|17:02] C:\DOCUME~1\Soso\APPLIC~1\McAfee.com Personal Firewall
[12/05/2008|19:39] C:\DOCUME~1\Soso\APPLIC~1\Microsoft
[08/07/2008|19:08] C:\DOCUME~1\Soso\APPLIC~1\Motive
[28/10/2006|20:03] C:\DOCUME~1\Soso\APPLIC~1\Mozilla
[21/10/2006|11:07] C:\DOCUME~1\Soso\APPLIC~1\MSN6
[01/04/2005|15:36] C:\DOCUME~1\Soso\APPLIC~1\MSNInstaller
[10/03/2007|19:29] C:\DOCUME~1\Soso\APPLIC~1\muvee Technologies
[18/08/2007|23:03] C:\DOCUME~1\Soso\APPLIC~1\PC Suite
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.cat
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.inf
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.log
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.sys
[08/04/2007|21:25] C:\DOCUME~1\Soso\APPLIC~1\pokerth
[03/04/2005|16:11] C:\DOCUME~1\Soso\APPLIC~1\Real
[09/03/2005|17:18] C:\DOCUME~1\Soso\APPLIC~1\SampleView
[04/02/2007|13:40] C:\DOCUME~1\Soso\APPLIC~1\SiteAdvisor
[30/06/2007|20:02] C:\DOCUME~1\Soso\APPLIC~1\Sony Corporation
[09/03/2005|16:44] C:\DOCUME~1\Soso\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\Soso\APPLIC~1\Symantec
[26/12/2006|18:54] C:\DOCUME~1\Soso\APPLIC~1\Talkback
[16/12/2006|20:26] C:\DOCUME~1\Soso\APPLIC~1\Teleca
[23/03/2008|11:13] C:\DOCUME~1\Soso\APPLIC~1\Todae
[08/03/2008|17:04] C:\DOCUME~1\Soso\APPLIC~1\TuneUp Software
[08/07/2008|19:36] C:\DOCUME~1\Soso\APPLIC~1\U3
[30/06/2007|17:53] C:\DOCUME~1\Soso\APPLIC~1\vlc
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\Vso
[29/06/2008|13:26] C:\DOCUME~1\Soso\APPLIC~1\wklnhst.dat
[20/05/2007|00:03] C:\DOCUME~1\Soso\APPLIC~1\Wormux

[09/04/2005|16:02] C:\DOCUME~1\VRO~1\APPLIC~1\Macromedia
[29/04/2005|00:07] C:\DOCUME~1\VRO~1\APPLIC~1\Microsoft
[29/04/2005|00:07] C:\DOCUME~1\VRO~1\APPLIC~1\MSN6
[09/04/2005|16:19] C:\DOCUME~1\VRO~1\APPLIC~1\Real

[02/04/2008|10:24] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\ACD Systems
[14/04/2008|09:31] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Adobe
[06/03/2006|09:54] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\AdobeUM
[01/05/2006|17:31] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Apple Computer
[03/05/2005|18:57] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\AVG7
[30/07/2006|12:09] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Copernic
[24/11/2004|00:13] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\desktop.ini
[11/07/2008|10:59] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfourbolt
[16/01/2006|09:06] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Google
[08/01/2008|10:07] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Grisoft
[17/11/2005|18:42] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Help
[25/11/2004|05:26] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Identities
[24/06/2005|18:02] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Lavasoft
[22/05/2005|12:54] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Macromedia
[03/05/2005|18:57] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\McAfee.com Personal Firewall
[17/06/2007|14:05] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Microsoft
[31/10/2006|10:55] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Mozilla
[18/09/2006|12:10] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\MSN6
[15/03/2007|10:39] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\muvee Technologies
[02/01/2006|15:57] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\PC Suite
[03/05/2007|15:02] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Real
[09/03/2005|17:18] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\SampleView
[29/02/2008|10:28] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\SiteAdvisor
[07/07/2007|00:59] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Sony Corporation
[09/03/2005|16:44] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Symantec
[06/01/2007|12:31] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Talkback
[04/12/2006|09:06] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Teleca
[11/07/2007|22:34] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\vlc
[09/07/2008|20:20] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\wklnhst.dat

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[24/07/2008 14:00][--ah-----] C:\WINDOWS\tasks\AB2FEB9191B8690D.job
[24/07/2008 14:00][--ah-----] C:\WINDOWS\tasks\A9B2589F9185CD7B.job
[24/07/2008 14:00][--ah-----] C:\WINDOWS\tasks\A4FE6337918A135B.job
[24/07/2008 14:00][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[24/07/2008 13:55][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[18/07/2008 17:48][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[15/07/2007 02:32][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/10/2007 01:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[15/06/2005 22:55][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[24/07/2008 12:52][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

( A4FE6337918A135B.job )=( c:\docume~1\soso\applic~1\fragfo~1\BEEPDATEJUMP.exe )
( A9B2589F9185CD7B.job )=( c:\docume~1\max\applic~1\fragfo~1\BEEPDATEJUMP.exe )
( AB2FEB9191B8690D.job )=( c:\docume~1\vro~1.nom\applic~1\fragfo~1\BEEPDATEJUMP.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[22/10/2006|10:22] C:\Program Files\AC3Filter
[02/03/2008|16:12] C:\Program Files\ACD Systems
[04/07/2008|18:57] C:\Program Files\Adobe
[03/07/2007|12:17] C:\Program Files\Apple Software Update
[09/03/2005|17:33] C:\Program Files\ATI Technologies
[26/06/2005|12:27] C:\Program Files\Canon
[08/04/2007|21:03] C:\Program Files\CCleaner
[03/01/2008|20:08] C:\Program Files\Common Files
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[04/12/2005|16:18] C:\Program Files\Copernic Agent
[06/04/2007|12:22] C:\Program Files\Copernic Desktop Search 2
[17/12/2006|16:19] C:\Program Files\CVitae
[08/03/2007|20:00] C:\Program Files\CyberLink
[18/08/2007|20:28] C:\Program Files\DIFX
[20/06/2007|18:16] C:\Program Files\directx
[03/12/2006|20:29] C:\Program Files\Disc2Phone
[02/03/2008|15:49] C:\Program Files\DivX
[08/03/2007|23:59] C:\Program Files\DVD Shrink
[02/03/2008|13:14] C:\Program Files\Easy Internet signup
[28/03/2005|12:46] C:\Program Files\Encarta
[13/05/2008|19:04] C:\Program Files\FairUse Wizard 2
[30/05/2008|23:17] C:\Program Files\Fichiers communs
[24/07/2008|13:01] C:\Program Files\fragfourbolt
[20/09/2007|10:04] C:\Program Files\Google
[31/03/2006|21:00] C:\Program Files\Guitar Pro 5
[09/03/2005|17:12] C:\Program Files\Help and Support Additions
[03/02/2008|16:16] C:\Program Files\Helper
[04/04/2005|20:33] C:\Program Files\Hewlett-Packard
[04/04/2005|20:33] C:\Program Files\HP
[02/03/2008|14:32] C:\Program Files\InstallShield Installation Information
[15/06/2008|20:28] C:\Program Files\Internet Explorer
[09/03/2005|17:35] C:\Program Files\InterVideo
[03/07/2007|12:31] C:\Program Files\iPod
[19/04/2006|09:39] C:\Program Files\Isotope244 Graphics
[03/07/2007|12:31] C:\Program Files\iTunes
[20/10/2007|20:06] C:\Program Files\Java
[07/05/2008|12:51] C:\Program Files\Lavasoft
[26/02/2008|21:10] C:\Program Files\LG Electronics
[26/02/2008|21:10] C:\Program Files\LG PC Suite 2
[09/03/2005|17:35] C:\Program Files\Macrovision Corp
[23/07/2008|20:28] C:\Program Files\McAfee
[02/01/2007|21:46] C:\Program Files\McAfee.com
[12/05/2008|21:24] C:\Program Files\MediaCoder
[25/10/2005|00:33] C:\Program Files\Mes Jeux Install‚s
[12/05/2008|20:22] C:\Program Files\Messenger
[28/03/2008|19:16] C:\Program Files\Messenger Plus! Live
[17/09/2005|15:51] C:\Program Files\Microsoft AutoRoute
[10/05/2007|03:07] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/09/2005|15:48] C:\Program Files\microsoft frontpage
[12/03/2008|14:20] C:\Program Files\microsoft money 2005
[12/05/2008|19:36] C:\Program Files\Microsoft Office
[04/12/2007|19:43] C:\Program Files\Microsoft SQL Server Compact Edition
[02/03/2008|13:14] C:\Program Files\Microsoft Works
[28/03/2005|12:27] C:\Program Files\Microsoft Works Suite 2005
[15/09/2005|19:29] C:\Program Files\Microsoft.NET
[20/08/2007|16:24] C:\Program Files\Mio Technology
[12/05/2008|20:21] C:\Program Files\Movie Maker
[24/07/2008|11:40] C:\Program Files\Mozilla Firefox
[02/03/2008|13:14] C:\Program Files\MP3 Decoder
[12/05/2008|19:35] C:\Program Files\MSECache
[12/05/2008|20:21] C:\Program Files\msn
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[03/01/2008|20:08] C:\Program Files\MSN Messenger
[15/11/2006|14:15] C:\Program Files\MSXML 4.0
[02/03/2008|15:58] C:\Program Files\Nero
[12/05/2008|20:17] C:\Program Files\NetMeeting
[12/05/2008|20:17] C:\Program Files\Outlook Express
[18/08/2007|20:27] C:\Program Files\PC Connectivity Solution
[02/03/2008|13:14] C:\Program Files\Picture It! Premium 10
[08/04/2007|21:06] C:\Program Files\PokerTH
[03/06/2007|15:48] C:\Program Files\QuickTime
[16/07/2006|16:41] C:\Program Files\Raven
[03/04/2005|16:06] C:\Program Files\Real
[01/06/2005|14:25] C:\Program Files\Reject False Icons
[26/07/2006|20:15] C:\Program Files\Rockstar Games
[09/03/2005|17:16] C:\Program Files\Services en ligne
[28/01/2008|09:29] C:\Program Files\Shareaza
[25/05/2008|18:31] C:\Program Files\SiteAdvisor
[09/03/2005|17:04] C:\Program Files\Sonic
[09/03/2005|17:04] C:\Program Files\Sonic RecordNow!
[30/06/2007|17:38] C:\Program Files\Sony
[13/05/2008|10:41] C:\Program Files\Spybot - Search & Destroy
[23/07/2008|21:24] C:\Program Files\TuneUp Utilities 2008
[24/11/2004|03:37] C:\Program Files\Uninstall Information
[30/06/2007|17:53] C:\Program Files\VideoLAN
[01/05/2007|13:20] C:\Program Files\VSO
[24/07/2008|12:59] C:\Program Files\Wanadoo
[02/03/2008|13:14] C:\Program Files\Wanadoo Messager
[27/02/2008|04:02] C:\Program Files\Windows Live
[09/03/2007|00:19] C:\Program Files\Windows Live Favorites
[01/12/2007|14:26] C:\Program Files\Windows Live Toolbar
[29/11/2006|12:44] C:\Program Files\Windows Media Connect 2
[12/05/2008|20:17] C:\Program Files\Windows Media Player
[12/05/2008|20:17] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[30/06/2007|18:03] C:\Program Files\WinRAR
[25/11/2004|05:28] C:\Program Files\xerox
[13/03/2006|00:39] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[02/03/2008|16:12] C:\Program Files\Fichiers communs\ACD Systems
[28/04/2008|14:36] C:\Program Files\Fichiers communs\Adobe
[02/03/2008|16:01] C:\Program Files\Fichiers communs\Ahead
[03/07/2007|12:26] C:\Program Files\Fichiers communs\Apple
[25/10/2005|00:33] C:\Program Files\Fichiers communs\BOONTY Shared
[21/05/2005|20:18] C:\Program Files\Fichiers communs\Copernic
[28/03/2005|12:36] C:\Program Files\Fichiers communs\Designer
[09/03/2005|17:00] C:\Program Files\Fichiers communs\Hewlett-Packard
[09/03/2005|16:55] C:\Program Files\Fichiers communs\HP
[09/03/2005|17:35] C:\Program Files\Fichiers communs\InstallShield
[09/03/2005|16:44] C:\Program Files\Fichiers communs\Java
[17/01/2008|21:46] C:\Program Files\Fichiers communs\McAfee
[12/05/2008|19:36] C:\Program Files\Fichiers communs\Microsoft Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[30/05/2008|23:18] C:\Program Files\Fichiers communs\Real
[02/03/2008|15:07] C:\Program Files\Fichiers communs\Services
[30/06/2007|17:39] C:\Program Files\Fichiers communs\Sony Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[09/03/2005|17:05] C:\Program Files\Fichiers communs\SureThing Shared
[09/03/2007|17:10] C:\Program Files\Fichiers communs\SWF Studio
[12/05/2008|20:17] C:\Program Files\Fichiers communs\System
[17/08/2007|10:00] C:\Program Files\Fichiers communs\Teleca Shared
[02/04/2006|23:50] C:\Program Files\Fichiers communs\Vbox
[04/12/2007|19:35] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[07/05/2008|12:50] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Ace Size.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\AIM GRAM.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Math loud.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\trans army.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1
C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1\BEEP DATE JUMP.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1\inside logo mags about.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1\Intradashdart.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1\omkmfwri.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1\wpfjyhpp.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1
C:\DOCUME~1\max\APPLIC~1\fragfo~1\BEEP DATE JUMP.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\hfpinnyr.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\inside logo mags about.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\Intradashdart.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\meohyavv.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\uunhntrb.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\vpqkqwrr.exe
C:\DOCUME~1\max\APPLIC~1\fragfo~1\ympfsyow.exe
C:\DOCUME~1\Soso\APPLIC~1\fragfo~1
C:\DOCUME~1\Soso\APPLIC~1\fragfo~1\BEEP DATE JUMP.exe
C:\DOCUME~1\Soso\APPLIC~1\fragfo~1\eoqyhcvh.exe
C:\DOCUME~1\Soso\APPLIC~1\fragfo~1\inside logo mags about.exe
C:\DOCUME~1\Soso\APPLIC~1\fragfo~1\Intradashdart.exe
C:\DOCUME~1\Soso\APPLIC~1\fragfo~1\qtvgvpoj.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\BEEP DATE JUMP.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\inside logo mags about.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\Intradashdart.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\lowmyoql.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\maagxpos.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\tmdhziqa.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\vvbfuruz.exe
C:\DOCUME~1\VRO~1.NOM\APPLIC~1\fragfo~1\ycprabmn.exe
C:\Program Files\fragfo~1
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adin.bigpoint[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@bigpoint[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@pacificpoker[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@32vegas[1].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@banner.32vegas[2].txt
C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\A4FE6337918A135B.job
C:\WINDOWS\Tasks\A9B2589F9185CD7B.job
C:\WINDOWS\Tasks\AB2FEB9191B8690D.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Style vga"="C:\\DOCUME~1\\HP_PRO~1\\APPLIC~1\\FRAGFO~1\\Intradashdart.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bat Wave Base Dale"="C:\\Documents and Settings\\All Users\\Application Data\\Link Axis Bat Wave\\Win bone.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 8250 [ 70 ## added by CiD ]

/!\ 1 Not 127.0.0.1 !!

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-24 14:09:43
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\DVT Keygen
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\FFF Keygen
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\DVT Keygen\dvt.nfo
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\DVT Keygen\Keymaker.exe
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\DVT Keygen\Serial.txt
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\FFF Keygen\FFF.NFO
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\FFF Keygen\Keygen.exe
=> C:\DOCUME~1\HP_PRO~1\Bureau\DivX Pro 6.8.0.5 for Windows + Keys - language.EN.DE.FR.JA.SPANISH - By Blackmamba\FFF Keygen\serial.txt


[F:473][D:5]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:256][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:16271][D:28]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 14:11:16,57
0
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180
24 juil. 2008 à 14:21
so45,

C'est avec le crack DivX Pro 6.8.0.5 indiqué en bas du rapport que tu as attrapé cette infection.
Je te conseille de le supprimer au plus vite.

1) Relance le logiciel LopS&D.
Choisis l'option 2 pour supprimer l'infection et réinitialiser le fichier Hosts.
Patiente pendant le nettoyage.

A la fin du nettoyage, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message.

Désinstalle LopS&D par la panneau de configuration et Ajout/Suppression de programmes.
Puis redémarre l'ordinateur.

2) hijackthis est mal installé ( sur le bureau ).
Va dans le panneau de configuration --> Ajout/suppression de programmes.
Tu devrais trouver Hijackthis dans la liste.
Sinon, supprime l'exécutable présent sur ton bureau.

Pour installer Hijackthis correctement :
télécharge et installe HijackThis .
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
Choisir « Download Hijackthis Installer »

Après l'installation, un raccourci sera crée sur le bureau. Double-clique dessus pour le lancer.
Choisir l'option Do a system scan and save a logfile.

Le rapport va s'ouvrir. Tu copies/colles le contenu de ce rapport dans ton prochain message.

A+
0
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
24 juil. 2008 à 14:59
Et de 1:

--------------------\\ Lop S&D 4.2.2-3 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 3 ]
[ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 24/07/2008 | 14:47:12,37 ] [ PC : NOM-EB85C523610 ]
[ MAJ : 22-07-2008 | 17:35 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Ace Size.exe
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1\Intradashdart.exe
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@adopt.euroclick[2].txt
Supprime! - C:\DOCUME~1\HP_PRO~1\Cookies\hp_propriétaire@pacificpoker[1].txt
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\fragfo~1

\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////

Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Application Data

[14/04/2007|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
[02/03/2008|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[28/10/2006|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\addr_file.html
[28/04/2008|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/03/2008|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[03/07/2007|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[03/06/2007|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[21/05/2005|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVG7
[25/10/2005|00:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[08/03/2007|20:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[24/11/2004|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[20/08/2007|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[08/03/2007|23:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[09/03/2007|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes
[20/09/2007|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/01/2008|20:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[29/04/2005|00:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft(2)
[04/04/2005|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[04/04/2005|20:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[29/04/2005|00:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[09/03/2005|17:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[23/04/2008|16:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[24/07/2008|14:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
[17/01/2008|21:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[02/01/2007|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[25/12/2006|14:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com Personal Firewall
[08/03/2008|20:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[02/03/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09/03/2005|17:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[03/04/2005|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[10/03/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[02/03/2008|15:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[18/08/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[30/12/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
[09/03/2005|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[09/03/2005|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[07/09/2007|13:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[30/06/2007|20:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[13/05/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[28/03/2005|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[24/07/2008|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[02/03/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[24/10/2005|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/03/2007|00:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[08/03/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[09/03/2005|17:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[24/11/2004|00:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[09/03/2005|17:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[09/03/2005|17:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[09/03/2005|16:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[02/03/2008|16:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ACD Systems
[15/12/2006|00:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[09/02/2007|13:52] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[02/03/2008|16:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[09/03/2005|17:07] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
[29/04/2005|00:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AVG7
[21/05/2005|20:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Copernic
[30/12/2005|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Datalayer
[24/11/2004|00:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
[20/10/2007|17:04] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
[12/05/2006|22:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\GdiplusUpgrade_MSIApproach_Wrapper.log
[17/12/2005|00:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[30/03/2005|22:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
[12/10/2007|19:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[26/03/2006|15:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
[25/10/2005|09:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Lavasoft
[24/12/2006|13:03] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[30/03/2005|22:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[28/03/2005|16:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\McAfee
[29/04/2005|00:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\McAfee.com Personal Firewall
[14/04/2007|14:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[20/08/2007|16:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Motive
[28/10/2006|11:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
[20/11/2005|16:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSN6
[30/03/2005|23:39] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[18/08/2007|20:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nokia
[01/02/2007|00:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OfficeUpdate12
[18/08/2007|21:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Suite
[27/05/2007|16:07] C:\DOCUME~1\HP_PRO~1\APPLIC~1\pokerth
[30/05/2008|23:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
[18/08/2007|20:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ROUTE 66 Sync
[09/03/2005|17:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
[21/06/2008|21:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SiteAdvisor
[09/03/2005|16:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[28/03/2005|16:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
[04/01/2007|01:49] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
[25/05/2006|20:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TaoUSign
[04/12/2006|23:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Teleca
[02/03/2008|12:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TuneUp Software
[11/05/2008|20:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
[13/01/2008|12:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

[29/04/2005|00:55] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[24/07/2006|10:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[30/03/2005|22:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[28/03/2005|16:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee.com Personal Firewall
[11/07/2007|01:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[21/11/2007|13:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor

[11/03/2008|13:42] C:\DOCUME~1\max\APPLIC~1\ACD Systems
[24/04/2008|20:10] C:\DOCUME~1\max\APPLIC~1\Adobe
[09/05/2005|21:08] C:\DOCUME~1\max\APPLIC~1\AdobeUM
[10/03/2008|21:48] C:\DOCUME~1\max\APPLIC~1\Ahead
[26/02/2008|21:20] C:\DOCUME~1\max\APPLIC~1\Apple Computer
[29/04/2005|15:43] C:\DOCUME~1\max\APPLIC~1\AVG7
[02/07/2007|18:04] C:\DOCUME~1\max\APPLIC~1\CDRusersDB.v12
[31/12/2005|15:10] C:\DOCUME~1\max\APPLIC~1\Datalayer
[24/11/2004|00:13] C:\DOCUME~1\max\APPLIC~1\desktop.ini
[26/11/2006|00:56] C:\DOCUME~1\max\APPLIC~1\DivX
[11/03/2007|12:55] C:\DOCUME~1\max\APPLIC~1\FrostWire
[03/04/2005|02:57] C:\DOCUME~1\max\APPLIC~1\GDIPFONTCACHEV1.DAT
[22/02/2006|22:20] C:\DOCUME~1\max\APPLIC~1\Google
[05/01/2008|03:12] C:\DOCUME~1\max\APPLIC~1\Grisoft
[31/03/2005|00:10] C:\DOCUME~1\max\APPLIC~1\Help
[25/11/2004|05:26] C:\DOCUME~1\max\APPLIC~1\Identities
[26/02/2008|20:54] C:\DOCUME~1\max\APPLIC~1\InstallShield
[06/04/2005|13:39] C:\DOCUME~1\max\APPLIC~1\InterVideo
[29/04/2005|20:24] C:\DOCUME~1\max\APPLIC~1\Lavasoft
[27/08/2007|04:20] C:\DOCUME~1\max\APPLIC~1\Leadertech
[26/02/2008|21:18] C:\DOCUME~1\max\APPLIC~1\LG Electronics
[01/02/2007|19:49] C:\DOCUME~1\max\APPLIC~1\Macromedia
[11/12/2005|22:05] C:\DOCUME~1\max\APPLIC~1\McAfee
[27/05/2005|19:53] C:\DOCUME~1\max\APPLIC~1\McAfee.com Personal Firewall
[26/02/2008|21:20] C:\DOCUME~1\max\APPLIC~1\Microsoft
[06/11/2006|14:54] C:\DOCUME~1\max\APPLIC~1\Mozilla
[08/09/2005|21:04] C:\DOCUME~1\max\APPLIC~1\MSN6
[31/03/2005|19:40] C:\DOCUME~1\max\APPLIC~1\MSNInstaller
[11/03/2007|13:39] C:\DOCUME~1\max\APPLIC~1\muvee Technologies
[17/02/2006|22:32] C:\DOCUME~1\max\APPLIC~1\Nokia
[19/08/2007|00:09] C:\DOCUME~1\max\APPLIC~1\PC Suite
[09/05/2007|15:09] C:\DOCUME~1\max\APPLIC~1\pokerth
[17/05/2006|13:39] C:\DOCUME~1\max\APPLIC~1\questdb.v12
[29/04/2005|00:05] C:\DOCUME~1\max\APPLIC~1\Real
[09/03/2005|17:18] C:\DOCUME~1\max\APPLIC~1\SampleView
[30/03/2007|20:51] C:\DOCUME~1\max\APPLIC~1\Screenshot Sender
[12/01/2008|18:49] C:\DOCUME~1\max\APPLIC~1\Shareaza
[26/02/2007|23:30] C:\DOCUME~1\max\APPLIC~1\SiteAdvisor
[27/08/2007|04:34] C:\DOCUME~1\max\APPLIC~1\Sonic
[09/03/2005|16:44] C:\DOCUME~1\max\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\max\APPLIC~1\Symantec
[15/12/2006|09:42] C:\DOCUME~1\max\APPLIC~1\Talkback
[03/12/2006|21:38] C:\DOCUME~1\max\APPLIC~1\Teleca
[17/05/2008|18:27] C:\DOCUME~1\max\APPLIC~1\TuneUp Software
[26/06/2008|18:04] C:\DOCUME~1\max\APPLIC~1\U3
[30/06/2007|20:53] C:\DOCUME~1\max\APPLIC~1\vlc
[01/07/2008|09:16] C:\DOCUME~1\max\APPLIC~1\wklnhst.dat

[28/05/2005|12:29] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[09/03/2007|00:14] C:\DOCUME~1\Soso\APPLIC~1\00001190_VTS_0.IFO
[29/06/2008|15:53] C:\DOCUME~1\Soso\APPLIC~1\ACD Systems
[27/04/2008|20:02] C:\DOCUME~1\Soso\APPLIC~1\Adobe
[11/05/2005|16:40] C:\DOCUME~1\Soso\APPLIC~1\AdobeUM
[03/11/2007|15:17] C:\DOCUME~1\Soso\APPLIC~1\Ahead
[03/01/2008|20:08] C:\DOCUME~1\Soso\APPLIC~1\Apple Computer
[01/05/2005|13:27] C:\DOCUME~1\Soso\APPLIC~1\AVG7
[10/03/2007|21:20] C:\DOCUME~1\Soso\APPLIC~1\CopyToDvd
[09/03/2007|20:15] C:\DOCUME~1\Soso\APPLIC~1\CyberLink
[24/11/2004|00:13] C:\DOCUME~1\Soso\APPLIC~1\desktop.ini
[29/10/2006|10:42] C:\DOCUME~1\Soso\APPLIC~1\DivX
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\ezpinst.exe
[07/07/2006|00:05] C:\DOCUME~1\Soso\APPLIC~1\Google
[06/01/2008|16:08] C:\DOCUME~1\Soso\APPLIC~1\Grisoft
[31/03/2005|17:25] C:\DOCUME~1\Soso\APPLIC~1\Help
[25/11/2004|05:26] C:\DOCUME~1\Soso\APPLIC~1\Identities
[30/06/2007|17:36] C:\DOCUME~1\Soso\APPLIC~1\InstallShield
[23/09/2006|20:48] C:\DOCUME~1\Soso\APPLIC~1\InterVideo
[20/05/2005|18:28] C:\DOCUME~1\Soso\APPLIC~1\Lavasoft
[26/12/2006|18:31] C:\DOCUME~1\Soso\APPLIC~1\Leadertech
[25/08/2007|00:11] C:\DOCUME~1\Soso\APPLIC~1\LimeWire
[02/04/2006|13:26] C:\DOCUME~1\Soso\APPLIC~1\Macromedia
[20/05/2005|18:41] C:\DOCUME~1\Soso\APPLIC~1\McAfee
[28/03/2005|17:02] C:\DOCUME~1\Soso\APPLIC~1\McAfee.com Personal Firewall
[12/05/2008|19:39] C:\DOCUME~1\Soso\APPLIC~1\Microsoft
[08/07/2008|19:08] C:\DOCUME~1\Soso\APPLIC~1\Motive
[28/10/2006|20:03] C:\DOCUME~1\Soso\APPLIC~1\Mozilla
[21/10/2006|11:07] C:\DOCUME~1\Soso\APPLIC~1\MSN6
[01/04/2005|15:36] C:\DOCUME~1\Soso\APPLIC~1\MSNInstaller
[10/03/2007|19:29] C:\DOCUME~1\Soso\APPLIC~1\muvee Technologies
[18/08/2007|23:03] C:\DOCUME~1\Soso\APPLIC~1\PC Suite
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.cat
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.inf
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.log
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\pcouffin.sys
[08/04/2007|21:25] C:\DOCUME~1\Soso\APPLIC~1\pokerth
[03/04/2005|16:11] C:\DOCUME~1\Soso\APPLIC~1\Real
[09/03/2005|17:18] C:\DOCUME~1\Soso\APPLIC~1\SampleView
[04/02/2007|13:40] C:\DOCUME~1\Soso\APPLIC~1\SiteAdvisor
[30/06/2007|20:02] C:\DOCUME~1\Soso\APPLIC~1\Sony Corporation
[09/03/2005|16:44] C:\DOCUME~1\Soso\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\Soso\APPLIC~1\Symantec
[26/12/2006|18:54] C:\DOCUME~1\Soso\APPLIC~1\Talkback
[16/12/2006|20:26] C:\DOCUME~1\Soso\APPLIC~1\Teleca
[23/03/2008|11:13] C:\DOCUME~1\Soso\APPLIC~1\Todae
[08/03/2008|17:04] C:\DOCUME~1\Soso\APPLIC~1\TuneUp Software
[08/07/2008|19:36] C:\DOCUME~1\Soso\APPLIC~1\U3
[30/06/2007|17:53] C:\DOCUME~1\Soso\APPLIC~1\vlc
[01/05/2007|13:20] C:\DOCUME~1\Soso\APPLIC~1\Vso
[29/06/2008|13:26] C:\DOCUME~1\Soso\APPLIC~1\wklnhst.dat
[20/05/2007|00:03] C:\DOCUME~1\Soso\APPLIC~1\Wormux

[09/04/2005|16:02] C:\DOCUME~1\VRO~1\APPLIC~1\Macromedia
[29/04/2005|00:07] C:\DOCUME~1\VRO~1\APPLIC~1\Microsoft
[29/04/2005|00:07] C:\DOCUME~1\VRO~1\APPLIC~1\MSN6
[09/04/2005|16:19] C:\DOCUME~1\VRO~1\APPLIC~1\Real

[02/04/2008|10:24] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\ACD Systems
[14/04/2008|09:31] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Adobe
[06/03/2006|09:54] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\AdobeUM
[01/05/2006|17:31] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Apple Computer
[03/05/2005|18:57] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\AVG7
[30/07/2006|12:09] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Copernic
[24/11/2004|00:13] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\desktop.ini
[16/01/2006|09:06] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Google
[08/01/2008|10:07] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Grisoft
[17/11/2005|18:42] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Help
[25/11/2004|05:26] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Identities
[24/06/2005|18:02] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Lavasoft
[22/05/2005|12:54] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Macromedia
[03/05/2005|18:57] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\McAfee.com Personal Firewall
[17/06/2007|14:05] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Microsoft
[31/10/2006|10:55] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Mozilla
[18/09/2006|12:10] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\MSN6
[15/03/2007|10:39] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\muvee Technologies
[02/01/2006|15:57] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\PC Suite
[03/05/2007|15:02] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Real
[09/03/2005|17:18] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\SampleView
[29/02/2008|10:28] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\SiteAdvisor
[07/07/2007|00:59] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Sony Corporation
[09/03/2005|16:44] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Sun
[09/03/2005|17:26] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Symantec
[06/01/2007|12:31] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Talkback
[04/12/2006|09:06] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\Teleca
[11/07/2007|22:34] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\vlc
[09/07/2008|20:20] C:\DOCUME~1\VRO~1.NOM\APPLIC~1\wklnhst.dat

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[24/07/2008 14:00][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[24/07/2008 13:55][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[18/07/2008 17:48][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[15/07/2007 02:32][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/10/2007 01:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[15/06/2005 22:55][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job
[24/07/2008 12:52][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/10/2006|10:22] C:\Program Files\AC3Filter
[02/03/2008|16:12] C:\Program Files\ACD Systems
[04/07/2008|18:57] C:\Program Files\Adobe
[03/07/2007|12:17] C:\Program Files\Apple Software Update
[09/03/2005|17:33] C:\Program Files\ATI Technologies
[26/06/2005|12:27] C:\Program Files\Canon
[08/04/2007|21:03] C:\Program Files\CCleaner
[03/01/2008|20:08] C:\Program Files\Common Files
[24/11/2004|03:37] C:\Program Files\ComPlus Applications
[04/12/2005|16:18] C:\Program Files\Copernic Agent
[06/04/2007|12:22] C:\Program Files\Copernic Desktop Search 2
[17/12/2006|16:19] C:\Program Files\CVitae
[08/03/2007|20:00] C:\Program Files\CyberLink
[18/08/2007|20:28] C:\Program Files\DIFX
[20/06/2007|18:16] C:\Program Files\directx
[03/12/2006|20:29] C:\Program Files\Disc2Phone
[24/07/2008|14:45] C:\Program Files\DivX
[08/03/2007|23:59] C:\Program Files\DVD Shrink
[02/03/2008|13:14] C:\Program Files\Easy Internet signup
[28/03/2005|12:46] C:\Program Files\Encarta
[13/05/2008|19:04] C:\Program Files\FairUse Wizard 2
[30/05/2008|23:17] C:\Program Files\Fichiers communs
[20/09/2007|10:04] C:\Program Files\Google
[31/03/2006|21:00] C:\Program Files\Guitar Pro 5
[09/03/2005|17:12] C:\Program Files\Help and Support Additions
[03/02/2008|16:16] C:\Program Files\Helper
[04/04/2005|20:33] C:\Program Files\Hewlett-Packard
[04/04/2005|20:33] C:\Program Files\HP
[02/03/2008|14:32] C:\Program Files\InstallShield Installation Information
[15/06/2008|20:28] C:\Program Files\Internet Explorer
[09/03/2005|17:35] C:\Program Files\InterVideo
[03/07/2007|12:31] C:\Program Files\iPod
[19/04/2006|09:39] C:\Program Files\Isotope244 Graphics
[03/07/2007|12:31] C:\Program Files\iTunes
[20/10/2007|20:06] C:\Program Files\Java
[07/05/2008|12:51] C:\Program Files\Lavasoft
[26/02/2008|21:10] C:\Program Files\LG Electronics
[26/02/2008|21:10] C:\Program Files\LG PC Suite 2
[09/03/2005|17:35] C:\Program Files\Macrovision Corp
[23/07/2008|20:28] C:\Program Files\McAfee
[02/01/2007|21:46] C:\Program Files\McAfee.com
[12/05/2008|21:24] C:\Program Files\MediaCoder
[25/10/2005|00:33] C:\Program Files\Mes Jeux Install‚s
[12/05/2008|20:22] C:\Program Files\Messenger
[28/03/2008|19:16] C:\Program Files\Messenger Plus! Live
[17/09/2005|15:51] C:\Program Files\Microsoft AutoRoute
[10/05/2007|03:07] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/09/2005|15:48] C:\Program Files\microsoft frontpage
[12/03/2008|14:20] C:\Program Files\microsoft money 2005
[12/05/2008|19:36] C:\Program Files\Microsoft Office
[04/12/2007|19:43] C:\Program Files\Microsoft SQL Server Compact Edition
[02/03/2008|13:14] C:\Program Files\Microsoft Works
[28/03/2005|12:27] C:\Program Files\Microsoft Works Suite 2005
[15/09/2005|19:29] C:\Program Files\Microsoft.NET
[20/08/2007|16:24] C:\Program Files\Mio Technology
[12/05/2008|20:21] C:\Program Files\Movie Maker
[24/07/2008|11:40] C:\Program Files\Mozilla Firefox
[02/03/2008|13:14] C:\Program Files\MP3 Decoder
[12/05/2008|19:35] C:\Program Files\MSECache
[12/05/2008|20:21] C:\Program Files\msn
[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
[03/01/2008|20:08] C:\Program Files\MSN Messenger
[15/11/2006|14:15] C:\Program Files\MSXML 4.0
[02/03/2008|15:58] C:\Program Files\Nero
[12/05/2008|20:17] C:\Program Files\NetMeeting
[12/05/2008|20:17] C:\Program Files\Outlook Express
[18/08/2007|20:27] C:\Program Files\PC Connectivity Solution
[02/03/2008|13:14] C:\Program Files\Picture It! Premium 10
[08/04/2007|21:06] C:\Program Files\PokerTH
[03/06/2007|15:48] C:\Program Files\QuickTime
[16/07/2006|16:41] C:\Program Files\Raven
[03/04/2005|16:06] C:\Program Files\Real
[01/06/2005|14:25] C:\Program Files\Reject False Icons
[26/07/2006|20:15] C:\Program Files\Rockstar Games
[09/03/2005|17:16] C:\Program Files\Services en ligne
[28/01/2008|09:29] C:\Program Files\Shareaza
[25/05/2008|18:31] C:\Program Files\SiteAdvisor
[09/03/2005|17:04] C:\Program Files\Sonic
[09/03/2005|17:04] C:\Program Files\Sonic RecordNow!
[30/06/2007|17:38] C:\Program Files\Sony
[13/05/2008|10:41] C:\Program Files\Spybot - Search & Destroy
[23/07/2008|21:24] C:\Program Files\TuneUp Utilities 2008
[24/11/2004|03:37] C:\Program Files\Uninstall Information
[30/06/2007|17:53] C:\Program Files\VideoLAN
[01/05/2007|13:20] C:\Program Files\VSO
[24/07/2008|12:59] C:\Program Files\Wanadoo
[02/03/2008|13:14] C:\Program Files\Wanadoo Messager
[27/02/2008|04:02] C:\Program Files\Windows Live
[09/03/2007|00:19] C:\Program Files\Windows Live Favorites
[01/12/2007|14:26] C:\Program Files\Windows Live Toolbar
[29/11/2006|12:44] C:\Program Files\Windows Media Connect 2
[12/05/2008|20:17] C:\Program Files\Windows Media Player
[12/05/2008|20:17] C:\Program Files\Windows NT
[24/11/2004|03:37] C:\Program Files\WindowsUpdate
[30/06/2007|18:03] C:\Program Files\WinRAR
[25/11/2004|05:28] C:\Program Files\xerox
[13/03/2006|00:39] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[02/03/2008|16:12] C:\Program Files\Fichiers communs\ACD Systems
[28/04/2008|14:36] C:\Program Files\Fichiers communs\Adobe
[02/03/2008|16:01] C:\Program Files\Fichiers communs\Ahead
[03/07/2007|12:26] C:\Program Files\Fichiers communs\Apple
[25/10/2005|00:33] C:\Program Files\Fichiers communs\BOONTY Shared
[21/05/2005|20:18] C:\Program Files\Fichiers communs\Copernic
[28/03/2005|12:36] C:\Program Files\Fichiers communs\Designer
[09/03/2005|17:00] C:\Program Files\Fichiers communs\Hewlett-Packard
[09/03/2005|16:55] C:\Program Files\Fichiers communs\HP
[09/03/2005|17:35] C:\Program Files\Fichiers communs\InstallShield
[09/03/2005|16:44] C:\Program Files\Fichiers communs\Java
[17/01/2008|21:46] C:\Program Files\Fichiers communs\McAfee
[12/05/2008|19:36] C:\Program Files\Fichiers communs\Microsoft Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
[30/05/2008|23:18] C:\Program Files\Fichiers communs\Real
[02/03/2008|15:07] C:\Program Files\Fichiers communs\Services
[30/06/2007|17:39] C:\Program Files\Fichiers communs\Sony Shared
[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
[09/03/2005|17:05] C:\Program Files\Fichiers communs\SureThing Shared
[09/03/2007|17:10] C:\Program Files\Fichiers communs\SWF Studio
[12/05/2008|20:17] C:\Program Files\Fichiers communs\System
[17/08/2007|10:00] C:\Program Files\Fichiers communs\Teleca Shared
[02/04/2006|23:50] C:\Program Files\Fichiers communs\Vbox
[04/12/2007|19:35] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[07/05/2008|12:50] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-24 14:49:38
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:479][D:6]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:250][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:16354][D:28]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 14:51:11,56
0
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
24 juil. 2008 à 15:11
Et voilà le 2:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:07:08, on 24/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\HP\KBD\KBD.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail?service=communiquer&u=http://webmail.wanadoo.fr/wanadoo/inbox.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand2526.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [Style vga] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FRAGFO~1\Intradashdart.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe
O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
0
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180
24 juil. 2008 à 15:17
1) LopS&D n'a pas réussi à tout supprimer :

Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave

On va utiliser un autre outil pour les supprimer.

Télécharge OTMoveIt (de Old_Timer) sur ton Bureau.
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

Double-clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve en citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave

clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre "Results".
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

2) Nettoie le rapport Hijackthis :

Lance Hijackthis et tu choisis " Do a system scan only ".
Tu sélectionnes les lignes suivantes :

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Style vga] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FRAGFO~1\Intradashdart.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)

Tu choisis l'option " Fixchecked" en bas de la page.

3) Après m'avoir posté le rapport de OTMoveIT2 et nettoyer Hijackthis, on va vérifier la présence d'autres infections.
Note ou imprime les consignes suivantes car la désinfection se fera en mode sans échec.

Tu télécharges MalwareBytes.
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Tu l'installes. Choisis les options par défaut.
A la fin de l’installation, il te sera demandé de mettre à jour MalwareBytes et de l’exécuter .
Ne choisis que la mise à jour. Le logiciel sera lancé en mode sans échec.

Tu relances l'ordinateur en mode sans échec ( touche F8 après redémarrage ).
Tu choisis ton compte utilisateur.

Pour lancer MalwareBytes, double-clique sur le raccourci du bureau.

Dans l’onglet Recherche, sélectionne Exécuter un examen complet.
Clique sur recherche. Tu ne sélectionnes que les disques durs de l’ordinateur.
Clique sur lancer l’examen.

A la fin de la recherche, Comme il est demandé, clique sur afficher les résultats de la recherche.
Choisis alors Supprimer la selection pour nettoyer les infections.
Tu postes le rapport dans ton prochain message.
Si tu ne le retrouves pas, ouvre MalwareBytes et regarde dans l’onglet Rapport/logs. Il y est.
Clique dessus et choisir ouvrir.

Le scan dure environ 50 mn.

A +
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
24 juil. 2008 à 15:30
Première étape:

File move failed. C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe scheduled to be moved on reboot.
Folder move failed. C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07242008_152111

Files moved on Reboot...
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave\Win bone.exe moved successfully.
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Link Axis Bat Wave moved successfully.
0
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180
24 juil. 2008 à 15:34
Très bien, passe à la suite.

A+
0
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
24 juil. 2008 à 22:13
ça y est terminé



Malwarebytes' Anti-Malware 1.23
Version de la base de données: 986
Windows 5.1.2600 Service Pack 3

20:45:31 24/07/2008
mbam-log-7-24-2008 (20-45-31).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 224995
Temps écoulé: 4 hour(s), 51 minute(s), 35 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Helper (Adware.BHO) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
0
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180
24 juil. 2008 à 22:17
quand je disais 50 mn, c'est effectivement parfois plus .

Par contre, le rapport est bon.

je vais te demander de faire une dernière vérification :
Tu vas aller sur le site de Kaspersky:
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

Clique sur Demarrer Online-scanner ( en bas de page à droite ) pour commencer l'analyse.
Il te sera demandé d'installer un logiciel de Kaspersky, accepte.

A la fin de cette analyse, clique sur enregistrer le rapport.
Poste le contenu de ce rapport dans ton prochain message.

A+
0
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
25 juil. 2008 à 00:03
Et voila le rapport kaspersky

KASPERSKY ON-LINE SCANNER REPORT
Friday, July 25, 2008 12:00:39 AM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky On-line Scanner version : 5.0.83.0
Dernière mise à jour de la base antivirus Kaspersky : 24/07/2008
Enregistrements dans la base antivirus Kaspersky : 893565
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Zones critiques:
C:\WINDOWS
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\

Statistiques de l'analyse:
Total d'objets analysés: 31719
Nombre de virus trouvés: 0
Nombre d'objets infectés: 0 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 00:44:16

Nom de l'objet infecté / Nom du virus / Dernière action
C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
C:\WINDOWS\Temp\mcmsc_mhRqR7T02U7ey94 L'objet est verrouillé ignoré
C:\WINDOWS\Temp\mcmsc_Xqba7Rn2wnAq9Up L'objet est verrouillé ignoré
C:\WINDOWS\Temp\mcmsc_ZJc8ZrEowH8N80Q L'objet est verrouillé ignoré
C:\WINDOWS\Temp\sqlite_GMj4dOtXS0Zo1ez L'objet est verrouillé ignoré
C:\WINDOWS\Temp\sqlite_zAlbEFkdFbaiHIZ L'objet est verrouillé ignoré
C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\hpodvd09.log L'objet est verrouillé ignoré
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\sqlite_nIHc5WSZM5pIxaM L'objet est verrouillé ignoré
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\~DFD174.tmp L'objet est verrouillé ignoré

Analyse terminée.
0
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180 > so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
25 juil. 2008 à 00:06
C'est nickel. Tout est propre.

Je te donne les consignes de nettoyage.

1) On va enlever les logiciels qui ont été utilisés..
Télécharge ToolsCleaner .sur le bureau
ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
Double-clique sur ToolsCleaner2.exe --> Recherche --> Suppression.
Il est possible que ton bureau disparaisse.

Si l’écran ne réapparait pas, tape sur les touches Ctrl + Alt + Supp. Ceci ouvre le gestionnaire de taches.
Dans l’onglet Processus, clique sur le menu Fichier, puis Executer et tape Explorer. Valide.

2) Tu vas utiliser CCleaner.
https://www.commentcamarche.net/telecharger/ 168 ccleaner

utilise les fonctions nettoyeur et Erreurs.

3) Les points de restauration :
- Panneau de configuation --> Système --> Restauration du sytème
décocher " Désactiver la restauration .... "
Il te sera demandé de redémarrer ton ordinateur. Accepte.
Ceci va supprimer les points de restauration existants et infectés ( 3 virus )
- Tu vas recréer un point de restauration propre.
Pour recréer un point de restauration :
Démarrer --> Programmes --> Accessoires --> Outils système --> Restauration système
Choisis "Créer un point de restauration". Suis les invites.

Après tout ca, ton PC devrait être propre et protégé.
Si tu as le moindre problème, poste un message.

peux-tu a lors mettre le sujet en résolu ? Merci

Salut.

A+ ( je ne l'espère pas. cela voudrait dire que ton PC est infecté !! )
0
so45 Messages postés 8 Date d'inscription jeudi 24 juillet 2008 Statut Membre Dernière intervention 25 juillet 2008
25 juil. 2008 à 10:15
Trop fort apparemment problème résolu

Jte remercie beaucoup.
0
LINDA62 Messages postés 7 Date d'inscription lundi 28 juillet 2008 Statut Membre Dernière intervention 29 juillet 2008
29 juil. 2008 à 22:42
SALUT

Moi j ai le meme pb que toi mais je suis encore plus nulle que toi je n'y connais ABSOLUMENT RIEN du tout .

Déjà, je voudrais savoir comment tu as fais pour avoir ce rapport. Si tu as télécharger un logiciel j aimerais bien savoir lequel.

Merci d'avance pour ton aide.
0
verni29 Messages postés 6699 Date d'inscription dimanche 6 juillet 2008 Statut Contributeur sécurité Dernière intervention 26 décembre 2016 180
29 juil. 2008 à 23:10
Linda62,

Pour cela, il te suffit d'ouvrir une autre discussion ( en haut de la page : " Posez votre question " ).
Une personne de CCM te répondra et te guidera dans la démarche.
Salut
0