Posez votre question Format imprimable Liste des forums Aidez-les Statistiques Rechercher Charte Forum Virus-Sécurité

Rapport critique Bitdefender ^^

Dernière réponse le 1 aoû 2008 à 05:45:34 Ptitlu08, le 1 aoû 2008 à 02:28:33

Signaler ce message aux modérateurs

Bonjour, alors voilà comme conseillé je vous fais part de mon rapport bitdefender. Voyant avec peur les 56 fichiers infectés je comprend un peu mieux pourquoi mon ordinateur rame ^^ et j'espère donc avoir une réponse d'un expert en informatique (c'est à dre tout le contraire de moi) pour sauver mon pauvre pc lol.
Voilà:

Statistics

Time

00:39:38

Files

58322

Folders

3139

Boot Sectors

2

Archives

648

Packed Files

3392

Results

Identified Viruses

1

Infected Files

56

Suspect Files

0

Warnings

0

Disinfected

0

Deleted Files

56

Engines Info

Virus Definitions

1411538

Engine build

AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins

15

Archive plugins

35

Unpack plugins

6

E-mail plugins

6

System plugins

4

Scan Settings

First Action

Disinfect

Second Action

Delete

Heuristics

Yes

Enable Warnings

Yes

Scanned Extensions

*;

Exclude Extensions

Scan Emails

Yes

Scan Archives

Yes

Scan Packed

Yes

Scan Files

Yes

Scan Boot

Yes

Scanned File

Status

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\BookSecondKindAcid.exe

Infected with: Trojan.Swizzor.1

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\BookSecondKindAcid.exe

Disinfection failed

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\BookSecondKindAcid.exe

Deleted

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\Cornsectante.exe

Infected with: Trojan.Swizzor.1

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\Cornsectante.exe

Disinfection failed

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\Cornsectante.exe

Deleted

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\mathheckthird.exe

Infected with: Trojan.Swizzor.1

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\mathheckthird.exe

Disinfection failed

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\mathheckthird.exe

Deleted

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\opslyfww.exe

Infected with: Trojan.Swizzor.1

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\opslyfww.exe

Disinfection failed

C:\Documents and Settings\Computer\Application Data\Dupe bags amok\opslyfww.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP16\A0000638.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP16\A0000638.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP16\A0000638.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000645.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000645.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000645.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000705.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000705.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000705.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000716.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000716.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP17\A0000716.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP18\A0001466.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP18\A0001466.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP18\A0001466.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP19\A0001647.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP19\A0001647.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP19\A0001647.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP20\A0001753.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP20\A0001753.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP20\A0001753.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP21\A0001759.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP21\A0001759.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP21\A0001759.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP21\A0001775.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP21\A0001775.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP21\A0001775.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP22\A0001779.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP22\A0001779.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP22\A0001779.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP22\A0001788.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP22\A0001788.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP22\A0001788.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP23\A0001795.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP23\A0001795.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP23\A0001795.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001831.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001831.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001831.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001856.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001856.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001856.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001978.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001978.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001978.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001995.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001995.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP25\A0001995.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002009.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002009.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002009.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002075.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002075.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002075.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002092.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002092.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP26\A0002092.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP27\A0002097.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP27\A0002097.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP27\A0002097.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP32\A0002305.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP32\A0002305.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP32\A0002305.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002369.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002369.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002369.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002393.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002393.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002393.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002408.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002408.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP33\A0002408.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP34\A0002414.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP34\A0002414.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP34\A0002414.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP35\A0002429.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP35\A0002429.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP35\A0002429.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP36\A0002456.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP36\A0002456.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP36\A0002456.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP36\A0002470.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP36\A0002470.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP36\A0002470.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002478.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002478.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002478.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002488.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002488.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002488.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002509.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002509.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP37\A0002509.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP38\A0002515.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP38\A0002515.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP38\A0002515.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP39\A0002529.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP39\A0002529.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP39\A0002529.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP39\A0002561.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP39\A0002561.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP39\A0002561.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP40\A0002570.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP40\A0002570.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP40\A0002570.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0002593.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0002593.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0002593.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0002612.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0002612.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0002612.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0003605.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0003605.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0003605.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0004606.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0004606.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP41\A0004606.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004617.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004617.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004617.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004627.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004627.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004627.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004654.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004654.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP42\A0004654.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP43\A0004657.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP43\A0004657.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP43\A0004657.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP43\A0004672.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP43\A0004672.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP43\A0004672.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP44\A0004677.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP44\A0004677.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP44\A0004677.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004691.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004691.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004691.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004692.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004692.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004692.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004693.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004693.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP45\A0004693.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006956.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006956.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006956.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006957.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006957.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006957.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006958.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006958.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006958.exe

Deleted

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006959.exe

Infected with: Trojan.Swizzor.1

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006959.exe

Disinfection failed

C:\System Volume Information\_restore{038D86D9-1B74-4D00-8C8E-837E5A56A149}\RP49\A0006959.exe

Deleted

Configuration: Windows XP
Internet Explorer 7.0

Posez votre question Répondre

Destrio5, le 1 aoû 2008 à 02:48:15

Salut,

T'es infecté par Lop/Swizzor. Cette infection provoque des pubs CID.

---> Télécharge Lop S&D sur ton Bureau
http://eric.71.mespages.googlepages.com/LopSD.exe
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde dans le tutorial :
http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 03:09:48

Effectivement j'ai beaucoup de pub en ce moment et également un ralentissement de l'affichage des pages internet es ce dû au même virus? En tout cas merci de ton aide
Voilà:

--------------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Computer ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 01/08/2008 | 3:04:00,11 ] [ PC : SHIKOCOMPUTER ]
[ MAJ : 25-07-2008 | 17:45 ]

--------------------\\ Listing des dossiers dans APPLIC~1

[03/07/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[03/07/2008|11:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/08/2008|00:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[30/07/2008|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[25/07/2008|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons
[01/08/2008|03:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\services
[01/08/2008|03:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
[01/08/2008|02:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[03/07/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[03/07/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[03/07/2008|11:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[03/07/2008|12:45] C:\DOCUME~1\Computer\APPLIC~1\Adobe
[20/07/2008|20:25] C:\DOCUME~1\Computer\APPLIC~1\ArcSoft
[03/07/2008|12:42] C:\DOCUME~1\Computer\APPLIC~1\AVGTOOLBAR
[03/07/2008|11:47] C:\DOCUME~1\Computer\APPLIC~1\desktop.ini
[01/08/2008|02:16] C:\DOCUME~1\Computer\APPLIC~1\Dupe bags amok
[01/08/2008|00:11] C:\DOCUME~1\Computer\APPLIC~1\Grisoft
[20/07/2008|23:18] C:\DOCUME~1\Computer\APPLIC~1\Help
[03/07/2008|10:08] C:\DOCUME~1\Computer\APPLIC~1\Identities
[03/07/2008|10:52] C:\DOCUME~1\Computer\APPLIC~1\Macromedia
[25/07/2008|17:26] C:\DOCUME~1\Computer\APPLIC~1\Microsoft
[03/07/2008|11:11] C:\DOCUME~1\Computer\APPLIC~1\Mozilla
[03/07/2008|10:58] C:\DOCUME~1\Computer\APPLIC~1\MSNInstaller
[10/07/2008|20:43] C:\DOCUME~1\Computer\APPLIC~1\SumatraPDF
[03/07/2008|10:00] C:\DOCUME~1\Computer\APPLIC~1\Sun
[03/07/2008|12:13] C:\DOCUME~1\Computer\APPLIC~1\vlc
[03/07/2008|12:09] C:\DOCUME~1\Computer\APPLIC~1\Winamp
[05/07/2008|19:23] C:\DOCUME~1\Computer\APPLIC~1\WinRAR

[03/07/2008|11:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[03/07/2008|09:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/07/2008|10:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[03/07/2008|12:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[04/07/2008|02:05] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[01/08/2008 03:00][--ah-----] C:\WINDOWS\tasks\AE6CDC65962B5411.job
[31/07/2008 14:00][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( AE6CDC65962B5411.job )=( c:\docume~1\computer\applic~1\dupeba~1\mathheckthird.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[08/07/2008|00:04] C:\Program Files\Antipub
[08/07/2008|00:27] C:\Program Files\AntiSMS-0.1-(FR).plsc
[03/07/2008|12:39] C:\Program Files\AVG
[03/07/2008|12:19] C:\Program Files\avg_free_stf_en_8_101a1327.exe
[10/07/2008|22:55] C:\Program Files\bfu.zip
[03/07/2008|13:37] C:\Program Files\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130.zip
[31/07/2008|23:54] C:\Program Files\CCleaner
[03/07/2008|09:56] C:\Program Files\ComPlus Applications
[03/07/2008|10:39] C:\Program Files\CONEXANT
[25/07/2008|23:40] C:\Program Files\Dupe bags amok
[30/07/2008|13:57] C:\Program Files\eMule
[03/07/2008|10:34] C:\Program Files\EPSON
[20/07/2008|20:22] C:\Program Files\Fichiers communs
[18/07/2008|00:31] C:\Program Files\Google
[01/08/2008|00:11] C:\Program Files\Grisoft
[20/07/2008|20:22] C:\Program Files\Hercules
[10/07/2008|23:01] C:\Program Files\HijackThis.lnk
[03/07/2008|11:24] C:\Program Files\IE7-WindowsXP-x86-fra.exe
[07/07/2008|23:50] C:\Program Files\inKline Global
[03/07/2008|12:44] C:\Program Files\install_flash_player.exe
[20/07/2008|20:22] C:\Program Files\InstallShield Installation Information
[11/07/2008|12:40] C:\Program Files\Internet Explorer
[03/07/2008|10:00] C:\Program Files\Java
[03/07/2008|13:45] C:\Program Files\Messenger
[01/08/2008|02:44] C:\Program Files\Messenger Plus! Live
[03/07/2008|10:00] C:\Program Files\microsoft frontpage
[03/07/2008|14:01] C:\Program Files\Movie Maker
[01/08/2008|02:41] C:\Program Files\Mozilla Firefox
[08/07/2008|00:42] C:\Program Files\MsgPlusLive-460.exe
[03/07/2008|10:58] C:\Program Files\MSN
[03/07/2008|09:55] C:\Program Files\MSN Gaming Zone
[03/07/2008|09:56] C:\Program Files\NetMeeting
[03/07/2008|09:55] C:\Program Files\Online Services
[31/07/2008|15:01] C:\Program Files\OpenDNS Updater
[04/07/2008|02:06] C:\Program Files\Outlook Express
[06/07/2008|00:15] C:\Program Files\Panicware
[18/07/2008|00:31] C:\Program Files\Picasa2
[03/07/2008|09:57] C:\Program Files\Services en ligne
[25/07/2008|17:56] C:\Program Files\Spybot - Search & Destroy
[10/07/2008|20:43] C:\Program Files\SumatraPDF
[13/07/2008|00:19] C:\Program Files\TimeAdjuster
[10/07/2008|23:00] C:\Program Files\Trend Micro
[03/07/2008|10:08] C:\Program Files\Uninstall Information
[13/07/2008|00:06] C:\Program Files\URUSoft
[03/07/2008|11:12] C:\Program Files\VideoLAN
[31/07/2008|14:08] C:\Program Files\Wanadoo
[03/07/2008|10:45] C:\Program Files\Wanadoo Messager
[03/07/2008|12:09] C:\Program Files\Winamp
[03/07/2008|12:03] C:\Program Files\winamp5531_full_emusic-7plus_fr-fr.exe
[03/07/2008|11:42] C:\Program Files\windows installer 3.1 eula.doc
[03/07/2008|12:00] C:\Program Files\Windows Live
[03/07/2008|13:50] C:\Program Files\Windows Media Player
[03/07/2008|09:55] C:\Program Files\Windows NT
[03/07/2008|11:41] C:\Program Files\windowsinstaller-kb893803-v2-x86.exe
[03/07/2008|09:57] C:\Program Files\WindowsUpdate
[05/07/2008|14:24] C:\Program Files\WinRAR
[03/07/2008|11:39] C:\Program Files\wlinstaller.exe
[05/07/2008|14:23] C:\Program Files\wrar371fr.exe
[03/07/2008|10:00] C:\Program Files\xerox
[03/07/2008|10:45] C:\Program Files\ZTE Corporation

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[20/07/2008|20:24] C:\Program Files\Fichiers communs\ArcSoft
[07/07/2008|23:58] C:\Program Files\Fichiers communs\InstallShield
[03/07/2008|10:00] C:\Program Files\Fichiers communs\Java
[03/07/2008|12:39] C:\Program Files\Fichiers communs\Microsoft Shared
[03/07/2008|09:56] C:\Program Files\Fichiers communs\MSSoap
[03/07/2008|11:47] C:\Program Files\Fichiers communs\ODBC
[03/07/2008|09:56] C:\Program Files\Fichiers communs\Services
[03/07/2008|11:47] C:\Program Files\Fichiers communs\SpeechEngines
[04/07/2008|02:06] C:\Program Files\Fichiers communs\System
[03/07/2008|11:52] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 48 Processus )

iexplore.exe ~ [2064]
iexplore.exe ~ [4068]
iexplore.exe ~ [3964]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons\great help.exe
C:\DOCUME~1\Computer\APPLIC~1\dupeba~1
C:\Program Files\dupeba~1
C:\WINDOWS\Tasks\AE6CDC65962B5411.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Rule Face"="C:\\DOCUME~1\\Computer\\APPLIC~1\\DUPEBA~1\\Cornsectante.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-01 03:07:05
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 184

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:5][D:2]-> C:\DOCUME~1\Computer\LOCALS~1\Temp
[F:23][D:0]-> C:\DOCUME~1\Computer\Cookies
[F:327][D:4]-> C:\DOCUME~1\Computer\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 3:07:59,45

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 03:11:13

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 03:17:51

--------------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Computer ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 01/08/2008 | 3:13:02,58 ] [ PC : SHIKOCOMPUTER ]
[ MAJ : 25-07-2008 | 17:45 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons\great help.exe
Supprime! - C:\WINDOWS\Tasks\AE6CDC65962B5411.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Readme Live Axis Tons
Supprime! - C:\DOCUME~1\Computer\APPLIC~1\dupeba~1
Supprime! - C:\Program Files\dupeba~1
RestaurÚ! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[03/07/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[03/07/2008|11:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[01/08/2008|00:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[30/07/2008|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/08/2008|03:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\services
[01/08/2008|03:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
[01/08/2008|02:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[03/07/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[03/07/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[03/07/2008|11:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[03/07/2008|12:45] C:\DOCUME~1\Computer\APPLIC~1\Adobe
[20/07/2008|20:25] C:\DOCUME~1\Computer\APPLIC~1\ArcSoft
[03/07/2008|12:42] C:\DOCUME~1\Computer\APPLIC~1\AVGTOOLBAR
[03/07/2008|11:47] C:\DOCUME~1\Computer\APPLIC~1\desktop.ini
[01/08/2008|00:11] C:\DOCUME~1\Computer\APPLIC~1\Grisoft
[20/07/2008|23:18] C:\DOCUME~1\Computer\APPLIC~1\Help
[03/07/2008|10:08] C:\DOCUME~1\Computer\APPLIC~1\Identities
[03/07/2008|10:52] C:\DOCUME~1\Computer\APPLIC~1\Macromedia
[25/07/2008|17:26] C:\DOCUME~1\Computer\APPLIC~1\Microsoft
[03/07/2008|11:11] C:\DOCUME~1\Computer\APPLIC~1\Mozilla
[03/07/2008|10:58] C:\DOCUME~1\Computer\APPLIC~1\MSNInstaller
[10/07/2008|20:43] C:\DOCUME~1\Computer\APPLIC~1\SumatraPDF
[03/07/2008|10:00] C:\DOCUME~1\Computer\APPLIC~1\Sun
[03/07/2008|12:13] C:\DOCUME~1\Computer\APPLIC~1\vlc
[03/07/2008|12:09] C:\DOCUME~1\Computer\APPLIC~1\Winamp
[05/07/2008|19:23] C:\DOCUME~1\Computer\APPLIC~1\WinRAR

[03/07/2008|11:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[03/07/2008|09:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/07/2008|10:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[03/07/2008|12:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[04/07/2008|02:05] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[31/07/2008 14:00][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[08/07/2008|00:04] C:\Program Files\Antipub
[08/07/2008|00:27] C:\Program Files\AntiSMS-0.1-(FR).plsc
[03/07/2008|12:39] C:\Program Files\AVG
[03/07/2008|12:19] C:\Program Files\avg_free_stf_en_8_101a1327.exe
[10/07/2008|22:55] C:\Program Files\bfu.zip
[03/07/2008|13:37] C:\Program Files\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130.zip
[31/07/2008|23:54] C:\Program Files\CCleaner
[03/07/2008|09:56] C:\Program Files\ComPlus Applications
[03/07/2008|10:39] C:\Program Files\CONEXANT
[30/07/2008|13:57] C:\Program Files\eMule
[03/07/2008|10:34] C:\Program Files\EPSON
[20/07/2008|20:22] C:\Program Files\Fichiers communs
[18/07/2008|00:31] C:\Program Files\Google
[01/08/2008|00:11] C:\Program Files\Grisoft
[20/07/2008|20:22] C:\Program Files\Hercules
[10/07/2008|23:01] C:\Program Files\HijackThis.lnk
[03/07/2008|11:24] C:\Program Files\IE7-WindowsXP-x86-fra.exe
[07/07/2008|23:50] C:\Program Files\inKline Global
[03/07/2008|12:44] C:\Program Files\install_flash_player.exe
[20/07/2008|20:22] C:\Program Files\InstallShield Installation Information
[11/07/2008|12:40] C:\Program Files\Internet Explorer
[03/07/2008|10:00] C:\Program Files\Java
[03/07/2008|13:45] C:\Program Files\Messenger
[01/08/2008|02:44] C:\Program Files\Messenger Plus! Live
[03/07/2008|10:00] C:\Program Files\microsoft frontpage
[03/07/2008|14:01] C:\Program Files\Movie Maker
[01/08/2008|02:41] C:\Program Files\Mozilla Firefox
[08/07/2008|00:42] C:\Program Files\MsgPlusLive-460.exe
[03/07/2008|10:58] C:\Program Files\MSN
[03/07/2008|09:55] C:\Program Files\MSN Gaming Zone
[03/07/2008|09:56] C:\Program Files\NetMeeting
[03/07/2008|09:55] C:\Program Files\Online Services
[31/07/2008|15:01] C:\Program Files\OpenDNS Updater
[04/07/2008|02:06] C:\Program Files\Outlook Express
[06/07/2008|00:15] C:\Program Files\Panicware
[18/07/2008|00:31] C:\Program Files\Picasa2
[03/07/2008|09:57] C:\Program Files\Services en ligne
[25/07/2008|17:56] C:\Program Files\Spybot - Search & Destroy
[10/07/2008|20:43] C:\Program Files\SumatraPDF
[13/07/2008|00:19] C:\Program Files\TimeAdjuster
[10/07/2008|23:00] C:\Program Files\Trend Micro
[03/07/2008|10:08] C:\Program Files\Uninstall Information
[13/07/2008|00:06] C:\Program Files\URUSoft
[03/07/2008|11:12] C:\Program Files\VideoLAN
[31/07/2008|14:08] C:\Program Files\Wanadoo
[03/07/2008|10:45] C:\Program Files\Wanadoo Messager
[03/07/2008|12:09] C:\Program Files\Winamp
[03/07/2008|12:03] C:\Program Files\winamp5531_full_emusic-7plus_fr-fr.exe
[03/07/2008|11:42] C:\Program Files\windows installer 3.1 eula.doc
[03/07/2008|12:00] C:\Program Files\Windows Live
[03/07/2008|13:50] C:\Program Files\Windows Media Player
[03/07/2008|09:55] C:\Program Files\Windows NT
[03/07/2008|11:41] C:\Program Files\windowsinstaller-kb893803-v2-x86.exe
[03/07/2008|09:57] C:\Program Files\WindowsUpdate
[05/07/2008|14:24] C:\Program Files\WinRAR
[03/07/2008|11:39] C:\Program Files\wlinstaller.exe
[05/07/2008|14:23] C:\Program Files\wrar371fr.exe
[03/07/2008|10:00] C:\Program Files\xerox
[03/07/2008|10:45] C:\Program Files\ZTE Corporation

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[20/07/2008|20:24] C:\Program Files\Fichiers communs\ArcSoft
[07/07/2008|23:58] C:\Program Files\Fichiers communs\InstallShield
[03/07/2008|10:00] C:\Program Files\Fichiers communs\Java
[03/07/2008|12:39] C:\Program Files\Fichiers communs\Microsoft Shared
[03/07/2008|09:56] C:\Program Files\Fichiers communs\MSSoap
[03/07/2008|11:47] C:\Program Files\Fichiers communs\ODBC
[03/07/2008|09:56] C:\Program Files\Fichiers communs\Services
[03/07/2008|11:47] C:\Program Files\Fichiers communs\SpeechEngines
[04/07/2008|02:06] C:\Program Files\Fichiers communs\System
[03/07/2008|11:52] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 43 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-01 03:15:23
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 184

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:5][D:2]-> C:\DOCUME~1\Computer\LOCALS~1\Temp
[F:24][D:0]-> C:\DOCUME~1\Computer\Cookies
[F:362][D:4]-> C:\DOCUME~1\Computer\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 3:16:13,08

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 03:19:04

- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 03:21:11

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:20:41, on 01/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\OpenDNS Updater\OpenDNS Updater.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AbsoluteTransfer module - {18CB1A7B-94CD-4582-8022-ADA16851E44B} - C:\Documents and Settings\All Users\Application Data\services\services.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [s9201] "C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\av2008xp.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{44B94250-40D6-46E3-9460-09A542208D23}: NameServer = 80.10.246.130 81.253.149.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B641EAD-52CD-4489-A7E8-93FAA13FA464}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
End of file - 8526 bytes

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 03:23:57

- Télécharge et installe MalwareByte's Anti-Malware :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

- Mets-le à jour

- Redémarre en mode sans échec (Recommandé) :
http://www.malekal.com/modesansechec.php

- Choisis ta session habituelle

- Fais un scan complet avec MalwareByte's Anti-Malware

- Supprime tout ce que le logiciel trouve, enregistre le rapport

- Redémarre en mode normal et poste le rapport ici

Tutorial :
http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 04:32:33

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1013
Windows 5.1.2600 Service Pack 2

04:26:58 01/08/2008
mbam-log-8-1-2008 (04-26-58).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 62692
Temps écoulé: 42 minute(s), 58 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 6
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\absolutetransfer.absolutetransfer (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8b8df25f-2c47-4473-8e1c-7f54ac7ef481} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{18cb1a7b-94cd-4582-8022-ada16851e44b} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18cb1a7b-94cd-4582-8022-ada16851e44b} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\absolutetransfer.absolutetransfer.1 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\SoftLand Ltd (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\s9201 (Rogue.XPAntivirus) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\BASE (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\DELETED (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\LOG (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\SAVED (Rogue.XPAntivirus) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\services\services.dll (Trojan.BHO) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\av2008xp.exe (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\LOG\20080801030132424.log (Rogue.XPAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SoftLand Ltd\Antivirus 2008 XP\LOG\20080801033603203.log (Rogue.XPAntivirus) -> Quarantined and deleted successfully.

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 04:37:44

---> Relance MBAM, va dans Quarantaine et supprime tout

Important : Désactive TeaTimer, le résident de Spybot, il gêne la désinfection en empêchant la modification des BHO.

---> Démarre Spybot, clique sur Mode, coche Mode avancé
---> A gauche, clique sur Outils, puis sur Résident
---> Décoche la case devant Résident "TeaTimer" :
http://apu.mabul.org/up/5/apu-5-gpdx9e06cwz2dypom2q7n6nc.jpg
---> Quitte Spybot

Note : Je te conseille de ne pas le réactiver, il a été incapable d'empêcher l'infection de ton PC.

---> Mets à jour Java :
http://www.java.com/fr/download/manual.jsp

---> Redémarre ton PC et poste un nouveau rapport HijackThis

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 04:56:37

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:55:45, on 01/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\PROGRA~1\AVG\AVG8\avgupd.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: (no name) - {18CB1A7B-94CD-4582-8022-ADA16851E44B} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{44B94250-40D6-46E3-9460-09A542208D23}: NameServer = 81.253.149.1 80.10.246.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B641EAD-52CD-4489-A7E8-93FAA13FA464}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
End of file - 7837 bytes

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 05:01:45

As-tu encore des problèmes ?

---> Relance HijackThis et choisis Do a system scan only

---> Coche les cases qui sont devant les lignes suivantes :

O2 - BHO: (no name) - {18CB1A7B-94CD-4582-8022-ADA16851E44B} - (no file)

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Redémarre ton PC et poste un nouveau rapport HijackThis

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 05:04:44

Mon problème est résolut je pense plus de CID et un affichage des page plus que satisfaisant. Tu penses qu'il est préférable de relancer hijackthis quand même?

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 05:10:55

Oui, bien sûr.

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 05:18:01

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 05:17:18, on 01/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\ATI-CPanel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{44B94250-40D6-46E3-9460-09A542208D23}: NameServer = 80.10.246.130 81.253.149.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B641EAD-52CD-4489-A7E8-93FAA13FA464}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
End of file - 7408 bytes

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 05:21:28

Ok, c'est bon. Pour finir :

---> Désinstalle Lop S&D

---> Télécharge CCleaner (N'installe pas la Yahoo Toolbar) :
http://www.ccleaner.com/download/downloading

---> Lance-le. Va dans "Options" puis "Avancé", tu décoches la case "Effacer uniquement les fichiers etc...". Tu vas dans "Nettoyeur", tu fais "Analyse". Une fois terminé, tu lances le nettoyage. Puis tu vas dans "Registre", tu fais "Chercher des erreurs". Une fois terminé, tu répares toutes les erreurs sans sauvegarder la base de registre.

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
http://www.vulgarisation-informatique.com/creer-point-restauration.php

---> Si tu veux un bon parefeu, prends Comodo ou Online Armor.

---> Fais un scan complet avec ton antivirus pour vérifier

;)

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 05:34:47

Merci pour tout! Une dernière question qui n'a rien avoir mais sais -tu comment ,sachant que j'utilise un modem, comment lancer la conexion automatiquement au démarrage de windows?

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 05:37:58

Tu utilises quel modem et tu es chez quel FAI ?

Répondre à Destrio5

Ptitlu08, le 1 aoû 2008 à 05:38:52

ZTE ZXDSL852 de chez wanadoo

Répondre à Ptitlu08

Destrio5, le 1 aoû 2008 à 05:42:18

Je crois qu'il faut que tu utilises le gestionnaire Orange mais c'est un gros logiciel.

Avec la livebox, c'est plus pratique, pas besoin du gestionnaire.

Répondre à Destrio5

20 réponses 12 Suivant

Posez votre question Répondre