Menu

Doutes sur mon pc [Résolu/Fermé]

- - Dernière réponse :  Utilisateur anonyme - 9 sept. 2011 à 02:15
Bonjour,
voilà j'ai par erreur télécharger et voulu installer un programme "cracké" ce week-end .
Je me suis arrêter pendant l'installation mais depuis j'ai des demandes de reconnexion inhabituelles sur certains site , et des script non a jour sur des sites "sécurisés" m'informant qu'il peut s'agir d'une tentative d'usurpation de compte.
Si quelqu'un peut m'aider ,
Merci


Afficher la suite 

20/39 réponses

0
Merci
salut

▶ Télécharge ici : USBFIX sur ton bureau

branche tous tes periphériques sans les ouvrir

/!\ Désactive provisoirement et seulement le temps de l'utilisation d'USBFIX, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."


sur l'icône Usbfix située sur ton Bureau.
Sur la page, clique sur le bouton :

▶ choisi l option Suppression

▶ UsbFix scannera ton pc , laisse travailler l outil.

▶ Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

0
Merci
salut , et merci ,

############################## | UsbFix 7.058 | [Suppression]

Utilisateur: jul (Administrateur) # PC-DE-JUL [Acer Aspire 7720Z]
Mis à jour le 24/08/2011 par El Desaparecido
Lancé à 22:40:45 | 06/09/2011
Site Web: http://www.teamxscript.org
Submit your sample: http://www.teamxscript.org/Upload.php
Contact: TeamXscript.ElDesaparecidogmail.com

CPU: Intel(R) Pentium(R) Dual CPU T2310 @ 1.46GHz
CPU 2: Intel(R) Pentium(R) Dual CPU T2310 @ 1.46GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6000 32-Bit) #
Internet Explorer 8.0.6001.18882

Pare-feu Windows: Activé
Antivirus: AntiVir Desktop 9.0.1.32 [(!) Disabled | Updated]
Firewall: COMODO Firewall 3.9 [Enabled]
RAM -> 2037 Mo
C:\ (%systemdrive%) -> Disque fixe # 149 Go (108 Go libre(s) - 73%) [ACER] # NTFS
D:\ -> CD-ROM
F:\ -> Disque fixe # 149 Go (79 Go libre(s) - 53%) [disc ext.] # NTFS

################## | Éléments infectieux |

Supprimé! C:\$RECYCLE.BIN\S-1-5-21-1025881203-4125200965-4179068395-1000
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-1025881203-4125200965-4179068395-1000
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-2040550631-2067710888-1924595009-1000
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-2185714862-1715470902-345682795-1000
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-4187750918-704574256-2899026658-1000
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-531355463-3968803650-1137473047-1000

################## | Registre |


################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{a8c30937-ecee-11df-ad7b-001b385d4b78}

################## | Listing |

[06/09/2011 - 22:46:45 | SHD ] C:\$RECYCLE.BIN
[17/02/2010 - 20:57:15 | D ] C:\Acer
[10/08/2007 - 16:40:27 | D ] C:\Book
[10/08/2007 - 16:43:41 | D ] C:\Boot
[02/11/2006 - 11:53:57 | RASH | 438840] C:\bootmgr
[10/08/2007 - 16:43:42 | N | 8192] C:\BOOTSECT.BAK
[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings
[02/09/2010 - 00:56:53 | D ] C:\DownloaderData
[05/06/2011 - 09:27:21 | D ] C:\downloads
[18/02/2010 - 05:31:07 | D ] C:\DRV
[04/07/2010 - 18:42:39 | N | 328452] C:\ExtractLog.txt
[06/09/2011 - 16:42:45 | ASH | 2137006080] C:\hiberfil.sys
[14/11/2010 - 22:25:57 | D ] C:\HiTRUSTDrive
[17/02/2010 - 20:52:17 | D ] C:\Intel
[28/04/2010 - 13:27:41 | N | 0] C:\IO.SYS
[06/07/2011 - 21:58:10 | N | 2917] C:\IPH.PH
[06/07/2010 - 14:57:53 | N | 127] C:\mbam-error.txt
[28/04/2010 - 13:27:41 | N | 0] C:\MSDOS.SYS
[10/08/2007 - 09:52:33 | RHD ] C:\MSOCache
[10/08/2007 - 09:43:42 | D ] C:\MyWorks
[06/09/2011 - 16:42:44 | ASH | 2450931712] C:\pagefile.sys
[06/09/2011 - 22:37:13 | D ] C:\Program Files
[04/09/2011 - 22:20:39 | HD ] C:\ProgramData
[07/12/2010 - 13:55:28 | D ] C:\rsit
[22/02/2010 - 23:01:18 | D ] C:\Securitoo
[06/09/2011 - 02:38:45 | SHD ] C:\System Volume Information
[06/09/2011 - 22:46:45 | D ] C:\UsbFix
[06/09/2011 - 22:40:46 | A | 2861] C:\UsbFix.txt
[17/02/2010 - 20:48:59 | D ] C:\Users
[28/02/2011 - 01:31:07 | N | 133877] C:\video.pass
[05/09/2011 - 01:45:01 | D ] C:\Windows
[24/06/2010 - 12:41:43 | D ] C:\ZMSoft
[06/09/2011 - 22:46:45 | SHD ] F:\$RECYCLE.BIN
[16/07/2011 - 23:15:49 | N | 54644] F:\022rlgja.jpg
[18/07/2011 - 13:02:44 | N | 21945] F:\12476-chat-14-marque-chat-1.jpg
[11/07/2010 - 07:32:32 | D ] F:\2010-06-05
[21/05/2011 - 08:06:46 | D ] F:\2010-07-11
[18/07/2011 - 12:52:39 | N | 19734] F:\58815547.gif
[16/07/2011 - 23:32:55 | N | 32979] F:\9782203013636FS.gif
[16/07/2011 - 23:33:15 | N | 44280] F:\9782203340336FS.gif
[06/06/2011 - 22:38:23 | D ] F:\album photo
[24/07/2011 - 16:34:55 | D ] F:\bbl
[06/03/2010 - 19:03:40 | D ] F:\brecellien
[09/05/2011 - 22:52:22 | D ] F:\carte napoléonnienne
[23/08/2010 - 20:54:15 | D ] F:\chez mamie
[06/06/2011 - 22:32:25 | D ] F:\darzel
[16/08/2011 - 17:18:09 | D ] F:\doc divers et PDF
[16/07/2011 - 23:32:01 | N | 36154] F:\Ectac.Philippe-Geluck.le-chat0149.jpg
[14/06/2011 - 13:21:36 | D ] F:\fleur
[06/06/2011 - 22:18:02 | D ] F:\Foot
[11/07/2010 - 07:36:09 | D ] F:\fée
[14/08/2011 - 01:02:53 | D ] F:\jardin Pinot
[17/03/2011 - 21:14:22 | D ] F:\jeu
[06/06/2011 - 22:38:45 | D ] F:\kervan
[15/08/2008 - 21:16:46 | N | 17112] F:\kw7kua1k.jpg
[16/07/2011 - 23:17:54 | N | 147507] F:\le chat 3.jpg
[06/06/2011 - 22:34:11 | D ] F:\le rest
[16/07/2011 - 23:22:54 | N | 57508] F:\le-chat-noel.jpg
[16/07/2011 - 23:30:26 | N | 26398] F:\Le-Chat.jpg
[16/07/2011 - 23:16:19 | N | 21030] F:\lechat5.jpg
[16/07/2011 - 23:17:00 | N | 22600] F:\lechat7.jpg
[06/06/2011 - 22:37:53 | D ] F:\lianver
[16/07/2011 - 23:21:44 | N | 231083] F:\mnq-lechat.jpg
[16/07/2011 - 18:11:29 | D ] F:\musique
[06/06/2011 - 22:15:04 | D ] F:\Neige
[16/07/2011 - 23:44:13 | D ] F:\Nouveau dossier
[04/03/2010 - 19:51:08 | D ] F:\oiseau
[06/06/2011 - 22:11:17 | D ] F:\parole k bale
[30/06/2011 - 08:46:38 | D ] F:\personne
[06/06/2011 - 22:24:19 | D ] F:\Plantes fleurs
[06/06/2011 - 22:30:19 | D ] F:\premiere photo
[15/07/2010 - 14:08:56 | D ] F:\PrintScreen Files
[17/08/2011 - 05:32:33 | D ] F:\programme d'installation
[07/07/2011 - 23:31:29 | D ] F:\samsung
[19/07/2011 - 18:40:46 | N | 5008854] F:\Scorpions - Wind of Change with lyrics.mp3
[02/02/2011 - 00:35:56 | SHD ] F:\System Volume Information
[18/08/2011 - 21:15:58 | D ] F:\telephone
[02/02/2011 - 00:36:27 | ASH | 17920] F:\Thumbs.db
[11/08/2011 - 00:19:38 | D ] F:\vidéo

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
F:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
0
Merci
Télécharge ici :OTL

enregistre le sur ton Bureau.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."


sur OTL.exe pour le lancer.

=> Clique ici pour voir la Configuration

▶Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

▶▶▶ NE LE POSTE PAS SUR LE FORUM (il est trop long)

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

▶ Clique sur Parcourir et cherche le fichier ci-dessus.

▶ Clique sur Ouvrir.

▶ Clique sur "Cliquez ici pour déposer le fichier".

juste au niveau du bouton , en fin de chargement du fichier , Un lien de cette forme apparaitra :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

▶ Copie ce lien dans ta réponse.

▶▶ Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.
0
Merci
Voici les deux rapports

http://www.cijoint.fr/cjlink.php?file=cj201109/cijDKyRrtQ.txt

http://www.cijoint.fr/cjlink.php?file=cj201109/cijNCO1owN.txt
0
Merci
ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."


sur OTL.exe pour le lancer.


▶Copie la liste qui se trouve en gras ci-dessous,

▶ colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
IE - HKU\S-1-5-21-1983090944-2096534422-3734612226-1000\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1983090944-2096534422-3734612226-1000\..\URLSearchHook: {4F9B7F52-5DF6-4880-81B2-3AB6D49B69A0} - Reg Error: Key error. File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
O2 - BHO: (TBSB06155 Class) - {2DA14D1D-AE74-4A74-A0FE-C79504755DB8} - D:\seeearch.dll ()
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Seeearch) - {09B445AE-2345-4FCA-85AE-FB3626ECEBDD} - D:\seeearch.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1983090944-2096534422-3734612226-1000\..\Toolbar\WebBrowser: (Seeearch) - {09B445AE-2345-4FCA-85AE-FB3626ECEBDD} - D:\seeearch.dll ()
O3 - HKU\S-1-5-21-1983090944-2096534422-3734612226-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found
O4 - HKLM\..\Run: [EeeStorageBackup] File not found
O4 - HKU\S-1-5-19\..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20\..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-21-1983090944-2096534422-3734612226-1003\..\RunOnce: [mctadmin] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O9 - Extra Button: Seeearch - {09B445AE-2345-4FCA-85AE-FB3626ECEBDD} - D:\seeearch.dll ()
O9 - Extra 'Tools' menuitem : Seeearch - {09B445AE-2345-4FCA-85AE-FB3626ECEBDD} - D:\seeearch.dll ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O33 - MountPoints2\{00d71095-b5d5-11df-9088-485b390b0ee3}\Shell - "" = AutoRun
O33 - MountPoints2\{00d71095-b5d5-11df-9088-485b390b0ee3}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{56787f93-e78b-11df-b72c-bc53c0feb177}\Shell - "" = AutoRun
O33 - MountPoints2\{56787f93-e78b-11df-b72c-bc53c0feb177}\Shell\AutoRun\command - "" = G:\Autorun.exe

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"iTunesHelper"=-
"QuickTime Task"=-
"Setwallpaper"=-

:Files
C:\Users\Guillaume\AppData\Local\{*}

:commands
[CLEARALLRESTOREPOINTS]
[emptytemp]
[start explorer]
[reboot]



▶ Clique sur "Correction" pour lancer la suppression.


▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.
0
Merci
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
Process firefox.exe killed successfully!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4F9B7F52-5DF6-4880-81B2-3AB6D49B69A0}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DA14D1D-AE74-4A74-A0FE-C79504755DB8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2DA14D1D-AE74-4A74-A0FE-C79504755DB8}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53707962-6F74-2D53-2644-206D7942484F}\ not found.
File C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_USERS\S-1-5-19\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
Registry key HKEY_USERS\S-1-5-20\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1003\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ not found.
File C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
File G:\Startme.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
File G:\Autorun.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
========== FILES ==========
File\Folder C:\Users\Guillaume\AppData\Local\{*} not found.
========== COMMANDS ==========


[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: jul
->Temp folder emptied: 69791005 bytes
->Temporary Internet Files folder emptied: 197017 bytes
->Java cache emptied: 11634893 bytes
->FireFox cache emptied: 79410699 bytes
->Flash cache emptied: 4122 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 868984 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 303180 bytes
RecycleBin emptied: 319051 bytes

Total Files Cleaned = 155,00 mb


OTL by OldTimer - Version 3.2.27.0 log created on 09072011_002034
0
Merci
Le rapport ne s'est pas ouvert automatiquement après le redémarrage par contre j'ai deux fichiers desktop.ini qui y sont apparu ...
0
Merci
refais un scan OTL comme precedemment demandé voir ?
0
Merci
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
Process firefox.exe killed successfully!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4F9B7F52-5DF6-4880-81B2-3AB6D49B69A0}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DA14D1D-AE74-4A74-A0FE-C79504755DB8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2DA14D1D-AE74-4A74-A0FE-C79504755DB8}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53707962-6F74-2D53-2644-206D7942484F}\ not found.
File C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_USERS\S-1-5-19\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
Registry key HKEY_USERS\S-1-5-20\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
Registry key HKEY_USERS\S-1-5-21-1983090944-2096534422-3734612226-1003\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B445AE-2345-4FCA-85AE-FB3626ECEBDD}\ not found.
File D:\seeearch.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ not found.
File C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00d71095-b5d5-11df-9088-485b390b0ee3}\ not found.
File G:\Startme.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56787f93-e78b-11df-b72c-bc53c0feb177}\ not found.
File G:\Autorun.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run not found.
========== FILES ==========
File\Folder C:\Users\Guillaume\AppData\Local\{*} not found.
========== COMMANDS ==========


[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: jul
->Temp folder emptied: 69791005 bytes
->Temporary Internet Files folder emptied: 197017 bytes
->Java cache emptied: 11634893 bytes
->FireFox cache emptied: 79410699 bytes
->Flash cache emptied: 4122 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 868984 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 303180 bytes
RecycleBin emptied: 319051 bytes

Total Files Cleaned = 155,00 mb


OTL by OldTimer - Version 3.2.27.0 log created on 09072011_002034

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
0
Merci
oui dsl ce rapport c'est affiché a peine lancé OTL
j'ai copier direct avant de me rendre compte que c'était pas comme ça taleur
j'ai du retélécharger OTL c'est normal ? si oui ce n'était pas la mm adresse de téléchargement ...
0
Merci
http://www.cijoint.fr/cjlink.php?file=cj201109/cijhuJerBd.txt

http://www.cijoint.fr/cjlink.php?file=cj201109/cijhuJerBd.txt
0
Merci
tu m'as envoyé 2 fois le extra :)
0
Merci
hum je n'ai pas du attendre la fin du téléchargement pour copier le lien dsl :)

sinon j'aurai vu que ci joint ne veut pas prendre le fichier OTL.txt qui est sur mon bureau ...
0
Merci
http://www.cijoint.fr/cjlink.php?file=cj201109/cijWMwYA4M.txt
Utilisateur anonyme -
Télécharge et enregistre ADWcleaner sur ton bureau :

ADWCleaner (Merci à Xplode)

Lance le,

clique sur suppression et poste son rapport.
0
Merci
# AdwCleaner v1.304 - Rapport créé le 07/09/2011 à 01:29:03
# Mis à jour le 05/09/11 à 14h30 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium (32 bits)
# Nom d'utilisateur : jul - PC-DE-JUL (Administrateur)
# Exécuté depuis : C:\Users\jul\Desktop\adwcleaner.exe
# Option [Suppression]


***** [KillNav] *****

# firefox.exe [PID:5624] -> Tué

***** [Processus] *****


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\Viewpoint
Dossier Supprimé : C:\Program Files\Viewpoint

***** [Registre] *****

Clé Supprimée : HKLM\SOFTWARE\MetaStream
Clé Supprimée : HKLM\SOFTWARE\Viewpoint
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.18882

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v6.0.1 (fr)

Profil : 5it9rhsb.default
Fichier : C:\Users\jul\AppData\Roaming\Mozilla\Firefox\Profiles\5it9rhsb.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [1822 octets] - [07/09/2011 01:29:03]

########## EOF - C:\AdwCleaner[S1].txt - [1950 octets] ##########
0
Merci
fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.


▶ Télécharge ici :

Malwarebytes

▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

▶ Lance Malwarebyte's .

Fais un examen dit "Complet" .

▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
▶ à la fin tu cliques sur "résultat" .
Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

0
Merci
ok mais je lancerai ça demain matin ,faut que je dorme un peu aussi :)
Merci a+