

Sandrine M.
Membres-
Compteur de contenus
9 -
Inscription
-
Dernière visite
Sandrine M.'s Achievements

Junior Member (3/12)
0
Réputation sur la communauté
-
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
Bonjour, A l'aide, les fenêtres CID reviennent. J'ai le sentiment que c'est dû à une miseà jour windows live messenger ou messenger plus que je viens de faire. Est-ce que je dois recommencer la procédure et à partir de quel endroit ? Merci d'avance. -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
Hello, j'ai suivi à la lettre et le rapport est nickel: Aucun virus, logiciel espion, cheval de Troie ou aucune autre menace ACTIVE ou LATENTE n'a été détecté(e) sur votre PC. Je n'ai pas de rapport plus détaillé, ou bien je ne sais pas où le trouver. Qu'en dis-tu ? -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
J'ai pas encore fait mes devoirs mais pourtant les fenêtres CID intempestives ont disparu ... Alors, est-ce que je fais tout ce que tu proposes ou bien j'attends ? -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
Et voici: -----------------------------[ Lop S&D 2.0.7 ]--------------------------- [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ] [ USER: Sandrine ] [ "C:\Program Files\Lop SD" ] [ lun. 21/01/2008 | 14:02:41,06 ] [ CIADELL ] [ MAJ : 20-01-2008 | 23.54 ] //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ -------------[ Listing des dossiers dans Application Data ]------------ [24/11/2005|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\.. [24/11/2005|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic [24/11/2005|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\. [24/11/2005|11:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel [24/11/2005|11:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [24/11/2005|11:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini [21/01/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.. [21/01/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\. [21/01/2008|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater [17/12/2007|11:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mapi Live City Acid [18/12/2006|18:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [29/10/2006|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [13/10/2006|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems [08/10/2006|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [28/09/2006|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [19/07/2006|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [01/03/2006|10:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DragToDiscUserNameD.txt [13/01/2006|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [29/12/2005|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [24/11/2005|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QSLLPSVCShare [24/11/2005|11:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel [19/08/2004|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI [19/08/2004|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini [24/11/2005|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.. [24/11/2005|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic [24/11/2005|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\. [24/11/2005|11:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel [24/11/2005|11:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [24/11/2005|11:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini [19/03/2007|14:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft [16/02/2007|11:06] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia [16/02/2007|11:04] C:\DOCUME~1\INVIT~1\APPLIC~1\.. [16/02/2007|11:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Google [16/02/2007|11:04] C:\DOCUME~1\INVIT~1\APPLIC~1\. [10/07/2006|15:46] C:\DOCUME~1\INVIT~1\APPLIC~1\Roxio [10/07/2006|14:28] C:\DOCUME~1\INVIT~1\APPLIC~1\Real [24/11/2005|11:20] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic [24/11/2005|11:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Intel [24/11/2005|11:14] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini [19/08/2004|14:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\.. [19/08/2004|14:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\. [19/08/2004|14:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [16/07/2007|16:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [19/08/2004|14:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\.. [19/08/2004|14:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\. [21/01/2008|13:57] C:\DOCUME~1\Sandrine\APPLIC~1\Orbit [17/01/2008|13:49] C:\DOCUME~1\Sandrine\APPLIC~1\Dent that bait [22/11/2007|09:45] C:\DOCUME~1\Sandrine\APPLIC~1\Roxio [20/07/2007|07:44] C:\DOCUME~1\Sandrine\APPLIC~1\Screenshot Sender [20/07/2007|07:44] C:\DOCUME~1\Sandrine\APPLIC~1\.. [20/07/2007|07:44] C:\DOCUME~1\Sandrine\APPLIC~1\. [17/07/2007|15:26] C:\DOCUME~1\Sandrine\APPLIC~1\Skype [16/07/2007|12:31] C:\DOCUME~1\Sandrine\APPLIC~1\vlc [01/11/2006|13:33] C:\DOCUME~1\Sandrine\APPLIC~1\Help [30/10/2006|14:55] C:\DOCUME~1\Sandrine\APPLIC~1\Google [13/10/2006|23:54] C:\DOCUME~1\Sandrine\APPLIC~1\ACD Systems [08/10/2006|10:28] C:\DOCUME~1\Sandrine\APPLIC~1\Lavasoft [02/05/2006|09:55] C:\DOCUME~1\Sandrine\APPLIC~1\Apple Computer [22/03/2006|16:27] C:\DOCUME~1\Sandrine\APPLIC~1\Real [10/01/2006|10:30] C:\DOCUME~1\Sandrine\APPLIC~1\Microsoft [04/01/2006|10:03] C:\DOCUME~1\Sandrine\APPLIC~1\Talkback [04/01/2006|10:03] C:\DOCUME~1\Sandrine\APPLIC~1\Mozilla [21/12/2005|17:19] C:\DOCUME~1\Sandrine\APPLIC~1\CyberLink [19/12/2005|10:39] C:\DOCUME~1\Sandrine\APPLIC~1\Macromedia [15/12/2005|11:37] C:\DOCUME~1\Sandrine\APPLIC~1\Microsoft Web Folders [24/11/2005|11:20] C:\DOCUME~1\Sandrine\APPLIC~1\Sonic [24/11/2005|11:17] C:\DOCUME~1\Sandrine\APPLIC~1\Intel [24/11/2005|11:14] C:\DOCUME~1\Sandrine\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\Sandrine\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\Sandrine\APPLIC~1\desktop.ini ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]--------------- [21/01/2008 09:35][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{EF5158B5-A118-4C90-952C-B299F7A7B05B}.job [08/01/2007 22:01][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [21/01/2008 14:00][--ah-----] C:\WINDOWS\tasks\SA.DAT [05/08/2004 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini ---------------[ Listing des dossiers dans C:\Program Files ]-------------- [21/01/2008|14:02] C:\Program Files\Lop SD [21/01/2008|13:48] C:\Program Files\.. [21/01/2008|13:48] C:\Program Files\. [17/01/2008|13:48] C:\Program Files\Dent that bait [08/01/2008|10:21] C:\Program Files\Mozilla Firefox [07/01/2008|09:22] C:\Program Files\Trend Micro [17/12/2007|11:07] C:\Program Files\Messenger Plus! Live [17/12/2007|11:07] C:\Program Files\MSN Messenger [12/12/2007|16:34] C:\Program Files\Internet Explorer [06/09/2007|09:22] C:\Program Files\Audacity [06/09/2007|09:06] C:\Program Files\Xi [04/09/2007|12:45] C:\Program Files\Orbitdownloader [10/08/2007|07:53] C:\Program Files\Winamp [20/07/2007|07:34] C:\Program Files\Google [16/07/2007|16:04] C:\Program Files\Outlook Express [16/07/2007|12:30] C:\Program Files\VideoLAN [16/07/2007|12:20] C:\Program Files\Windows Live [08/01/2007|13:30] C:\Program Files\Copernic Desktop Search 2 [07/01/2007|20:50] C:\Program Files\Windows Media Connect 2 [07/01/2007|20:50] C:\Program Files\Windows Media Player [26/12/2006|17:44] C:\Program Files\CDex_170b2 [25/12/2006|17:57] C:\Program Files\InstallShield Installation Information [24/12/2006|18:14] C:\Program Files\Legacy Interactive [24/12/2006|17:46] C:\Program Files\FileZilla [18/12/2006|18:37] C:\Program Files\Adobe [17/11/2006|22:34] C:\Program Files\MSXML 4.0 [02/11/2006|13:52] C:\Program Files\iTunes [02/11/2006|13:51] C:\Program Files\iPod [02/11/2006|13:49] C:\Program Files\QuickTime [02/11/2006|13:45] C:\Program Files\Apple Software Update [13/10/2006|21:46] C:\Program Files\ACD Systems [13/10/2006|21:46] C:\Program Files\Fichiers communs [13/10/2006|21:41] C:\Program Files\Jasc Software Inc [13/10/2006|12:42] C:\Program Files\Apoint [08/10/2006|10:28] C:\Program Files\Lavasoft [08/10/2006|10:25] C:\Program Files\DivX [28/09/2006|13:38] C:\Program Files\MessengerPlus! 3 [22/08/2006|13:16] C:\Program Files\Larousse Multim‚dia [16/08/2006|22:42] C:\Program Files\WinZip [06/04/2006|14:18] C:\Program Files\WinHTTrack [22/03/2006|16:24] C:\Program Files\Real [01/03/2006|09:57] C:\Program Files\Roxio [13/01/2006|16:46] C:\Program Files\Skype [19/12/2005|14:44] C:\Program Files\Java [19/12/2005|10:59] C:\Program Files\Alwil Software [15/12/2005|11:37] C:\Program Files\microsoft frontpage [08/12/2005|11:00] C:\Program Files\Microsoft Office [24/11/2005|11:19] C:\Program Files\Sonic [24/11/2005|11:18] C:\Program Files\CyberLink [24/11/2005|11:17] C:\Program Files\Broadcom [24/11/2005|11:17] C:\Program Files\Dell [24/11/2005|11:17] C:\Program Files\Intel, Inc [24/11/2005|11:16] C:\Program Files\Intel [24/11/2005|11:16] C:\Program Files\Digital Line Detect [24/11/2005|11:15] C:\Program Files\Modem Helper [24/11/2005|11:15] C:\Program Files\ATI Technologies [24/11/2005|11:15] C:\Program Files\Messenger [24/11/2005|11:01] C:\Program Files\Sigmatel [24/11/2005|11:01] C:\Program Files\CONEXANT [19/08/2004|14:24] C:\Program Files\Uninstall Information [19/08/2004|14:18] C:\Program Files\xerox [19/08/2004|14:16] C:\Program Files\WindowsUpdate [19/08/2004|14:16] C:\Program Files\Services en ligne [19/08/2004|14:16] C:\Program Files\Movie Maker [19/08/2004|14:16] C:\Program Files\NetMeeting [19/08/2004|14:15] C:\Program Files\ComPlus Applications [19/08/2004|14:15] C:\Program Files\Online Services [19/08/2004|14:14] C:\Program Files\MSN Gaming Zone [19/08/2004|14:14] C:\Program Files\MSN [19/08/2004|14:14] C:\Program Files\Windows NT ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------ [16/07/2007|16:04] C:\Program Files\Fichiers communs\System [17/10/2006|11:34] C:\Program Files\Fichiers communs\Microsoft Shared [13/10/2006|21:46] C:\Program Files\Fichiers communs\ACD Systems [13/10/2006|21:46] C:\Program Files\Fichiers communs\.. [13/10/2006|21:46] C:\Program Files\Fichiers communs\. [22/03/2006|16:24] C:\Program Files\Fichiers communs\xing shared [22/03/2006|16:24] C:\Program Files\Fichiers communs\Real [01/03/2006|09:58] C:\Program Files\Fichiers communs\Roxio Shared [20/12/2005|09:43] C:\Program Files\Fichiers communs\Adobe [19/12/2005|10:10] C:\Program Files\Fichiers communs\NSV [08/12/2005|11:02] C:\Program Files\Fichiers communs\Designer [24/11/2005|11:19] C:\Program Files\Fichiers communs\Sonic [24/11/2005|11:18] C:\Program Files\Fichiers communs\SureThing Shared [24/11/2005|11:16] C:\Program Files\Fichiers communs\InstallShield [24/11/2005|11:14] C:\Program Files\Fichiers communs\Java [19/08/2004|14:16] C:\Program Files\Fichiers communs\Services [19/08/2004|14:16] C:\Program Files\Fichiers communs\MSSoap [19/08/2004|14:10] C:\Program Files\Fichiers communs\ODBC [19/08/2004|14:10] C:\Program Files\Fichiers communs\SpeechEngines ----------------------[ Recherche avec S_Lop ]--------------------- Aucun fichier / dossier Lop trouvé ! -----------------[ Recherche de Fichiers / Dossiers Lop ]----------------- Aucun fichier / dossier Lop trouvé ! ----------------------[ Verification du Registre ]---------------------- ..... OK ! --------------------[ Verification du fichier Hosts ]--------------------- Fichier Hosts PROPRE ----------------[ Recherche de fichiers avec Catchme ]----------------- catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-21 14:04:30 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden files ... scan completed successfully hidden files: 0 --------------------[ Recherche d'autres infections ]--------------------- Aucune autre infection trouvée ! /!\ [Fich:306][Doss:22] C:\DOCUME~1\Sandrine\LOCALS~1\Temp /!\ [Fich:1387][Doss:12] C:\DOCUME~1\Sandrine\LOCALS~1\TEMPOR~1\content.IE5 --------------------[ Fin du rapport a 14:05:16,07 ]---------------------- -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
D'abord encore merci pour cette aide désintéressée. Voici le rapport: -----------------------------[ Lop S&D 2.0.7 ]--------------------------- [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ] [ USER: Sandrine ] [ "C:\Program Files\Lop SD" ] [ lun. 21/01/2008 | 10:32:03,96 ] [ CIADELL ] [ MAJ : 20-01-2008 | 23.54 ] -------------[ Listing des dossiers dans Application Data ]------------ [24/11/2005|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\.. [24/11/2005|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic [24/11/2005|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\. [24/11/2005|11:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel [24/11/2005|11:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [24/11/2005|11:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini [18/01/2008|15:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater [17/01/2008|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wait Find Browse New [17/12/2007|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.. [17/12/2007|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\. [17/12/2007|11:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mapi Live City Acid [18/12/2006|18:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [29/10/2006|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [13/10/2006|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems [08/10/2006|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [28/09/2006|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [19/07/2006|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [01/03/2006|10:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DragToDiscUserNameD.txt [13/01/2006|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [29/12/2005|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [24/11/2005|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QSLLPSVCShare [24/11/2005|11:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel [19/08/2004|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI [19/08/2004|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini [24/11/2005|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\.. [24/11/2005|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic [24/11/2005|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\. [24/11/2005|11:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel [24/11/2005|11:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [24/11/2005|11:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini [19/03/2007|14:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft [16/02/2007|11:06] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia [16/02/2007|11:04] C:\DOCUME~1\INVIT~1\APPLIC~1\.. [16/02/2007|11:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Google [16/02/2007|11:04] C:\DOCUME~1\INVIT~1\APPLIC~1\. [10/07/2006|15:46] C:\DOCUME~1\INVIT~1\APPLIC~1\Roxio [10/07/2006|14:28] C:\DOCUME~1\INVIT~1\APPLIC~1\Real [24/11/2005|11:20] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic [24/11/2005|11:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Intel [24/11/2005|11:14] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini [19/08/2004|14:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\.. [19/08/2004|14:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\. [19/08/2004|14:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [16/07/2007|16:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [19/08/2004|14:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\.. [19/08/2004|14:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\. [21/01/2008|10:31] C:\DOCUME~1\Sandrine\APPLIC~1\Orbit [17/01/2008|13:49] C:\DOCUME~1\Sandrine\APPLIC~1\Dent that bait [22/11/2007|09:45] C:\DOCUME~1\Sandrine\APPLIC~1\Roxio [20/07/2007|07:44] C:\DOCUME~1\Sandrine\APPLIC~1\Screenshot Sender [20/07/2007|07:44] C:\DOCUME~1\Sandrine\APPLIC~1\.. [20/07/2007|07:44] C:\DOCUME~1\Sandrine\APPLIC~1\. [17/07/2007|15:26] C:\DOCUME~1\Sandrine\APPLIC~1\Skype [16/07/2007|12:31] C:\DOCUME~1\Sandrine\APPLIC~1\vlc [01/11/2006|13:33] C:\DOCUME~1\Sandrine\APPLIC~1\Help [30/10/2006|14:55] C:\DOCUME~1\Sandrine\APPLIC~1\Google [13/10/2006|23:54] C:\DOCUME~1\Sandrine\APPLIC~1\ACD Systems [08/10/2006|10:28] C:\DOCUME~1\Sandrine\APPLIC~1\Lavasoft [02/05/2006|09:55] C:\DOCUME~1\Sandrine\APPLIC~1\Apple Computer [22/03/2006|16:27] C:\DOCUME~1\Sandrine\APPLIC~1\Real [10/01/2006|10:30] C:\DOCUME~1\Sandrine\APPLIC~1\Microsoft [04/01/2006|10:03] C:\DOCUME~1\Sandrine\APPLIC~1\Talkback [04/01/2006|10:03] C:\DOCUME~1\Sandrine\APPLIC~1\Mozilla [21/12/2005|17:19] C:\DOCUME~1\Sandrine\APPLIC~1\CyberLink [19/12/2005|10:39] C:\DOCUME~1\Sandrine\APPLIC~1\Macromedia [15/12/2005|11:37] C:\DOCUME~1\Sandrine\APPLIC~1\Microsoft Web Folders [24/11/2005|11:20] C:\DOCUME~1\Sandrine\APPLIC~1\Sonic [24/11/2005|11:17] C:\DOCUME~1\Sandrine\APPLIC~1\Intel [24/11/2005|11:14] C:\DOCUME~1\Sandrine\APPLIC~1\Sun [19/08/2004|14:24] C:\DOCUME~1\Sandrine\APPLIC~1\Identities [19/08/2004|14:10] C:\DOCUME~1\Sandrine\APPLIC~1\desktop.ini ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]--------------- [21/01/2008 10:00][--ah-----] C:\WINDOWS\tasks\A8CE0BF4918586BC.job [21/01/2008 09:35][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{EF5158B5-A118-4C90-952C-B299F7A7B05B}.job [08/01/2007 22:01][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [21/01/2008 09:33][--ah-----] C:\WINDOWS\tasks\SA.DAT [05/08/2004 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini ---------------[ Listing des dossiers dans C:\Program Files ]-------------- [21/01/2008|10:32] C:\Program Files\Lop SD [21/01/2008|10:31] C:\Program Files\.. [21/01/2008|10:31] C:\Program Files\. [17/01/2008|13:48] C:\Program Files\Dent that bait [08/01/2008|10:21] C:\Program Files\Mozilla Firefox [07/01/2008|09:22] C:\Program Files\Trend Micro [17/12/2007|11:07] C:\Program Files\Circle Developement [17/12/2007|11:07] C:\Program Files\Messenger Plus! Live [17/12/2007|11:07] C:\Program Files\MSN Messenger [12/12/2007|16:34] C:\Program Files\Internet Explorer [06/09/2007|09:22] C:\Program Files\Audacity [06/09/2007|09:06] C:\Program Files\Xi [04/09/2007|12:45] C:\Program Files\Orbitdownloader [10/08/2007|07:53] C:\Program Files\Winamp [20/07/2007|07:34] C:\Program Files\Google [16/07/2007|16:04] C:\Program Files\Outlook Express [16/07/2007|12:30] C:\Program Files\VideoLAN [16/07/2007|12:20] C:\Program Files\Windows Live [08/01/2007|13:30] C:\Program Files\Copernic Desktop Search 2 [07/01/2007|20:50] C:\Program Files\Windows Media Connect 2 [07/01/2007|20:50] C:\Program Files\Windows Media Player [26/12/2006|17:44] C:\Program Files\CDex_170b2 [25/12/2006|17:57] C:\Program Files\InstallShield Installation Information [24/12/2006|18:14] C:\Program Files\Legacy Interactive [24/12/2006|17:46] C:\Program Files\FileZilla [18/12/2006|18:37] C:\Program Files\Adobe [17/11/2006|22:34] C:\Program Files\MSXML 4.0 [02/11/2006|13:52] C:\Program Files\iTunes [02/11/2006|13:51] C:\Program Files\iPod [02/11/2006|13:49] C:\Program Files\QuickTime [02/11/2006|13:45] C:\Program Files\Apple Software Update [13/10/2006|21:46] C:\Program Files\ACD Systems [13/10/2006|21:46] C:\Program Files\Fichiers communs [13/10/2006|21:41] C:\Program Files\Jasc Software Inc [13/10/2006|12:42] C:\Program Files\Apoint [08/10/2006|10:28] C:\Program Files\Lavasoft [08/10/2006|10:25] C:\Program Files\DivX [28/09/2006|13:38] C:\Program Files\MessengerPlus! 3 [22/08/2006|13:16] C:\Program Files\Larousse Multim‚dia [16/08/2006|22:42] C:\Program Files\WinZip [06/04/2006|14:18] C:\Program Files\WinHTTrack [22/03/2006|16:24] C:\Program Files\Real [01/03/2006|09:57] C:\Program Files\Roxio [13/01/2006|16:46] C:\Program Files\Skype [19/12/2005|14:44] C:\Program Files\Java [19/12/2005|10:59] C:\Program Files\Alwil Software [15/12/2005|11:37] C:\Program Files\microsoft frontpage [08/12/2005|11:00] C:\Program Files\Microsoft Office [24/11/2005|11:19] C:\Program Files\Sonic [24/11/2005|11:18] C:\Program Files\CyberLink [24/11/2005|11:17] C:\Program Files\Broadcom [24/11/2005|11:17] C:\Program Files\Dell [24/11/2005|11:17] C:\Program Files\Intel, Inc [24/11/2005|11:16] C:\Program Files\Intel [24/11/2005|11:16] C:\Program Files\Digital Line Detect [24/11/2005|11:15] C:\Program Files\Modem Helper [24/11/2005|11:15] C:\Program Files\ATI Technologies [24/11/2005|11:15] C:\Program Files\Messenger [24/11/2005|11:01] C:\Program Files\Sigmatel [24/11/2005|11:01] C:\Program Files\CONEXANT [19/08/2004|14:24] C:\Program Files\Uninstall Information [19/08/2004|14:18] C:\Program Files\xerox [19/08/2004|14:16] C:\Program Files\WindowsUpdate [19/08/2004|14:16] C:\Program Files\Services en ligne [19/08/2004|14:16] C:\Program Files\Movie Maker [19/08/2004|14:16] C:\Program Files\NetMeeting [19/08/2004|14:15] C:\Program Files\ComPlus Applications [19/08/2004|14:15] C:\Program Files\Online Services [19/08/2004|14:14] C:\Program Files\MSN Gaming Zone [19/08/2004|14:14] C:\Program Files\MSN [19/08/2004|14:14] C:\Program Files\Windows NT ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------ [16/07/2007|16:04] C:\Program Files\Fichiers communs\System [17/10/2006|11:34] C:\Program Files\Fichiers communs\Microsoft Shared [13/10/2006|21:46] C:\Program Files\Fichiers communs\ACD Systems [13/10/2006|21:46] C:\Program Files\Fichiers communs\.. [13/10/2006|21:46] C:\Program Files\Fichiers communs\. [22/03/2006|16:24] C:\Program Files\Fichiers communs\xing shared [22/03/2006|16:24] C:\Program Files\Fichiers communs\Real [01/03/2006|09:58] C:\Program Files\Fichiers communs\Roxio Shared [20/12/2005|09:43] C:\Program Files\Fichiers communs\Adobe [19/12/2005|10:10] C:\Program Files\Fichiers communs\NSV [08/12/2005|11:02] C:\Program Files\Fichiers communs\Designer [24/11/2005|11:19] C:\Program Files\Fichiers communs\Sonic [24/11/2005|11:18] C:\Program Files\Fichiers communs\SureThing Shared [24/11/2005|11:16] C:\Program Files\Fichiers communs\InstallShield [24/11/2005|11:14] C:\Program Files\Fichiers communs\Java [19/08/2004|14:16] C:\Program Files\Fichiers communs\Services [19/08/2004|14:16] C:\Program Files\Fichiers communs\MSSoap [19/08/2004|14:10] C:\Program Files\Fichiers communs\ODBC [19/08/2004|14:10] C:\Program Files\Fichiers communs\SpeechEngines ----------------------[ Recherche avec S_Lop ]--------------------- C:\Documents and Settings\Sandrine\Local Settings\Temp\bisC.exe -----------------[ Recherche de Fichiers / Dossiers Lop ]----------------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wait Find Browse New C:\Program Files\Circle Developement C:\Program Files\Circle Developement\Uninstall.exe C:\DOCUME~1\Sandrine\Cookies\sandrine@orbitdownloader[2].txt C:\WINDOWS\Tasks\A8CE0BF4918586BC.job ----------------------[ Verification du Registre ]---------------------- ..... OK ! --------------------[ Verification du fichier Hosts ]--------------------- Fichier Hosts MODIFIE 127.0.0.1 localhost 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 127.0.0.1 cdn.errorsafe.com ## added by CiD 127.0.0.1 cdn.winsoftware.com ## added by CiD 127.0.0.1 de.errorsafe.com ## added by CiD 127.0.0.1 de.winantivirus.com ## added by CiD 127.0.0.1 download.cdn.drivecleaner.com ## added by CiD 127.0.0.1 download.cdn.errorsafe.com ## added by CiD 127.0.0.1 download.cdn.winsoftware.com ## added by CiD 127.0.0.1 download.errorsafe.com ## added by CiD 127.0.0.1 download.systemdoctor.com ## added by CiD 127.0.0.1 download.winantispyware.com ## added by CiD 127.0.0.1 download.windrivecleaner.com ## added by CiD 127.0.0.1 download.winfixer.com ## added by CiD 127.0.0.1 drivecleaner.com ## added by CiD 127.0.0.1 dynamique.drivecleaner.com ## added by CiD 127.0.0.1 errorprotector.com ## added by CiD 127.0.0.1 errorsafe.com ## added by CiD 127.0.0.1 es.winantivirus.com ## added by CiD 127.0.0.1 fr.winantivirus.com ## added by CiD 127.0.0.1 fr.winfixer.com ## added by CiD 127.0.0.1 go.drivecleaner.com ## added by CiD 127.0.0.1 go.errorsafe.com ## added by CiD 127.0.0.1 go.winantispyware.com ## added by CiD 127.0.0.1 go.winantivirus.com ## added by CiD 127.0.0.1 hk.winantivirus.com ## added by CiD 127.0.0.1 instlog.errorsafe.com ## added by CiD 127.0.0.1 instlog.winantivirus.com ## added by CiD 127.0.0.1 instlog.winfixer.com ## added by CiD 127.0.0.1 jsp.drivecleaner.com ## added by CiD 127.0.0.1 kb.errorsafe.com ## added by CiD 127.0.0.1 kb.winantivirus.com ## added by CiD 127.0.0.1 nl.errorsafe.com ## added by CiD 127.0.0.1 se.errorsafe.com ## added by CiD 127.0.0.1 secure.drivecleaner.com ## added by CiD 127.0.0.1 secure.errorsafe.com ## added by CiD 127.0.0.1 secure.winantispam.com ## added by CiD 127.0.0.1 secure.winantispy.com ## added by CiD 127.0.0.1 secure.winantivirus.com ## added by CiD 127.0.0.1 support.winantivirus.com ## added by CiD 127.0.0.1 trial.updates.winsoftware.com ## added by CiD 127.0.0.1 ulog.winantivirus.com ## added by CiD 127.0.0.1 utils.errorsafe.com ## added by CiD 127.0.0.1 utils.winantivirus.com ## added by CiD 127.0.0.1 utils.winfixer.com ## added by CiD 127.0.0.1 winantispyware.com ## added by CiD 127.0.0.1 winantivirus.com ## added by CiD 127.0.0.1 winfixer.com ## added by CiD 127.0.0.1 winfixer2006.com ## added by CiD 127.0.0.1 winsoftware.com ## added by CiD 127.0.0.1 www.drivecleaner.com ## added by CiD 127.0.0.1 www.errorprotector.com ## added by CiD 127.0.0.1 www.errorsafe.com ## added by CiD 127.0.0.1 www.systemdoctor.com ## added by CiD 127.0.0.1 www.utils.winfixer.com ## added by CiD 127.0.0.1 www.win-anti-virus-pro.com ## added by CiD 127.0.0.1 www.win-virus-pro.com ## added by CiD 127.0.0.1 www.winantispam.com ## added by CiD 127.0.0.1 www.winantispy.com ## added by CiD 127.0.0.1 www.winantispyware.com ## added by CiD 127.0.0.1 www.winantivirus.com ## added by CiD 127.0.0.1 www.winantiviruspro.com ## added by CiD 127.0.0.1 www.windrivecleaner.com ## added by CiD 127.0.0.1 www.windrivesafe.com ## added by CiD 127.0.0.1 www.winfixer.com ## added by CiD 127.0.0.1 www.winfixer2006.com ## added by CiD 127.0.0.1 www.winsoftware.com ## added by CiD ----------------[ Recherche de fichiers avec Catchme ]----------------- catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-21 10:34:11 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden files ... scan completed successfully hidden files: 0 --------------------[ Recherche d'autres infections ]--------------------- Aucune autre infection trouvée ! /!\ [Fich:305][Doss:22] C:\DOCUME~1\Sandrine\LOCALS~1\Temp /!\ [Fich:1431][Doss:12] C:\DOCUME~1\Sandrine\LOCALS~1\TEMPOR~1\content.IE5 --------------------[ Fin du rapport a 10:35:04,90 ]---------------------- -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
Help, I need somebody, comme dit la chanson ... -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
Je pense ne pas m'être trompée. Voici le rapport demandé: Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 8C86-1468 R‚pertoire de C:\WINDOWS\tasks 07/01/2008 09:20 <REP> . 07/01/2008 09:20 <REP> .. 07/01/2008 15:00 272 AD120B009185BB5C.job 08/01/2007 22:01 284 AppleSoftwareUpdate.job 05/08/2004 13:00 65 desktop.ini 08/01/2008 09:21 6 SA.DAT 07/01/2008 09:15 428 User_Feed_Synchronization-{EF5158B5-A118-4C90-952C-B299F7A7B05B}.job 5 fichier(s) 1.055 octets R‚pertoire de C:\Documents and Settings\Sandrine\Bureau -
CID Adserver
Sandrine M. a répondu à un(e) sujet de Sandrine M. dans Analyses et éradication malwares
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:22:26, on 7/01/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\basfipm.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Orbitdownloader\orbitdm.exe C:\Program Files\Orbitdownloader\orbitnet.exe C:\Program Files\Alwil Software\Avast4\setup\avast.setup C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.fr/myway R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lesoir.be/actualite/le_fil_info/index_popup.shtml R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.fr/myway R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [intelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [browse new fork rule] C:\Documents and Settings\All Users\Application Data\Wait Find Browse New\aim file.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [hole idol] C:\DOCUME~1\Sandrine\APPLIC~1\DENTTH~1\4 bone 64.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Broadcom ASF IP monitoring service v6.0.4 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\system32\basfipm.exe O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Sandrine/LOCALS~1/Temp/msoclip1/01/clip_image002.jpg -- End of file - 8799 bytes Je ne sais pas comment faire ce que tu demandes: Faire un Copier/Coller de la ligne ci-dessous ( dans la zone "Code" ) dans le Bloc-note ( sans le mot Code ) : Je ne comprends pas. Où est la zone code ? Et de quel fichier bloc-note parles-tu ? Merci beaucoup de ton aide (et désolée de n'avoir répondu plus vite mais j'étais en congé). -
Bonjour, Depuis hier, des fenêtres multiples CID Adserver s'ouvre alors que je surfe avec IE. J'ai téléchargé Hijack this comme proposé et voici le rapport. Merci de votre aide. Je précise que c'est arrivé après que j'ai accepté d'instaler le sponsor MSN. Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 10:03:21, on 18/12/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\basfipm.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Orbitdownloader\orbitdm.exe C:\Program Files\Orbitdownloader\orbitnet.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Documents and Settings\Sandrine\Local Settings\Temporary Internet Files\Content.IE5\8I5L32AZ\HiJackThis_v2[1].exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.fr/myway R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lesoir.be/actualite/le_fil_info/index_popup.shtml R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.fr/myway R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [intelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [browse new fork rule] C:\Documents and Settings\All Users\Application Data\Wait Find Browse New\bows ping.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [hole idol] C:\DOCUME~1\Sandrine\APPLIC~1\DENTTH~1\4 bone 64.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Broadcom ASF IP monitoring service v6.0.4 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\system32\basfipm.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Sandrine/LOCALS~1/Temp/msoclip1/01/clip_image002.jpg -- End of file - 10430 bytes