jacky_show

Pas de question juste un merci. Heu heu tu fait quoi dans la vie pour savoir tout ça lol

-->- Recherche: D:\Vundofix backups: trouvé ! D:\Documents and Settings\All Users\Bureau\Navilog1.lnk: trouvé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé ! D:\Documents and Settings\luc\Bureau\HijackThis.lnk: trouvé ! D:\Documents and Settings\luc\Bureau\vundoFix.exe: trouvé ! D:\Documents and Settings\luc\Bureau\clean\tar.exe: trouvé ! D:\Documents and Settings\luc\Bureau\clean\remove.reg: trouvé ! D:\Documents and Settings\luc\Bureau\clean\pskill.exe: trouvé ! D:\Documents and Settings\luc\Bureau\clean\LFiles.exe: trouvé ! D:\Documents and Settings\luc\Bureau\clean\gzip.exe: trouvé ! D:\Documents and Settings\luc\Bureau\clean\delsiri.cmd: trouvé ! D:\Documents and Settings\luc\Bureau\clean\delr.cmd: trouvé ! D:\Documents and Settings\luc\Bureau\clean\del3.cmd: trouvé ! D:\Documents and Settings\luc\Bureau\clean\del2.cmd: trouvé ! D:\Documents and Settings\luc\Bureau\clean\clean.cmd: trouvé ! D:\Documents and Settings\luc\Bureau\clean\cherche.cmd: trouvé ! D:\Documents and Settings\luc\Bureau\util\HJTInstall.exe: trouvé ! D:\Program Files\Navilog1: trouvé ! D:\Program Files\Navilog1\Navilog1.bat: trouvé ! D:\Program Files\Trend Micro\HijackThis: trouvé ! D:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé ! --------------------------------- -->- Suppression: D:\Documents and Settings\All Users\Bureau\Navilog1.lnk: supprimé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé ! D:\Documents and Settings\luc\Bureau\HijackThis.lnk: supprimé ! D:\Documents and Settings\luc\Bureau\vundoFix.exe: supprimé ! D:\Documents and Settings\luc\Bureau\clean\tar.exe: supprimé ! D:\Documents and Settings\luc\Bureau\clean\remove.reg: supprimé ! D:\Documents and Settings\luc\Bureau\clean\pskill.exe: supprimé ! D:\Documents and Settings\luc\Bureau\clean\LFiles.exe: supprimé ! D:\Documents and Settings\luc\Bureau\clean\gzip.exe: supprimé ! D:\Documents and Settings\luc\Bureau\clean\delsiri.cmd: supprimé ! D:\Documents and Settings\luc\Bureau\clean\delr.cmd: supprimé ! D:\Documents and Settings\luc\Bureau\clean\del3.cmd: supprimé ! D:\Documents and Settings\luc\Bureau\clean\del2.cmd: supprimé ! D:\Documents and Settings\luc\Bureau\clean\clean.cmd: supprimé ! D:\Documents and Settings\luc\Bureau\clean\cherche.cmd: supprimé ! D:\Documents and Settings\luc\Bureau\util\HJTInstall.exe: supprimé ! D:\Program Files\Navilog1\Navilog1.bat: supprimé ! D:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé ! D:\Vundofix backups: supprimé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé ! D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé ! D:\Program Files\Navilog1: supprimé ! D:\Program Files\Trend Micro\HijackThis: supprimé !

CleanUp! started on 05/25/08 09:53:24. D:\Documents and Settings\luc\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted D:\Documents and Settings\luc\Local Settings\Temporary Internet Files\Content.Word\~WRS0000.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted D:\Documents and Settings\luc\Local Settings\Temporary Internet Files\Content.Word\~WRS0000.tmp - deleted D:\Documents and Settings\luc\Local Settings\Historique\History.IE5\index.dat - deleted D:\Documents and Settings\luc\Local Settings\Historique\History.IE5\MSHist012008052520080526\index.dat - deleted 'Typed URLs' (Internet Explorer) - removed from the registry. 'Typed URLs' (MSN) - removed from the registry. Visited: luc@file:///D:/Documents%20and%20Settings/luc/Mes%20documents/Mes%20images/Mes%20Photos/chats%20Y%20Lucas%201erpot%20mariage%20leatitia/P1010003.JPG - deleted Visited: luc@file:///D:/Documents%20and%20Settings/luc/Mes%20documents/dossier%20remi/voiture%20xavier.doc - deleted Visited: luc@file:///D:/Documents%20and%20Settings/luc/Mes%20documents/Mes%20images/Mes%20Photos/chats%20Y%20Lucas%201erpot%20mariage%20leatitia/P1010018.JPG - deleted Visited: luc@file:///D:/Documents%20and%20Settings/luc/Mes%20documents/Mes%20images/Mes%20Photos/2008%2011%20mai%20carnaval/DSCF1069.JPG - deleted Visited: luc@file:///D:/Documents%20and%20Settings/luc/Mes%20documents/Mes%20images/Mes%20Photos/2008%2011%20mai%20carnaval/DSCF1063.JPG - deleted D:\Documents and Settings\luc\Cookies\index.dat - deleted D:\Documents and Settings\luc\Local Settings\Application Data\Identities\{5010ADE8-2E65-4257-B4A6-D2423C41FB80}\Microsoft\Outlook Express\cleanup.log - deleted D:\Documents and Settings\luc\Application Data\Microsoft\Outlook Express\News\cleanup.log - deleted D:\Documents and Settings\luc\Application Data\Mozilla\Firefox\Profiles\6nr0sypq.default\history.dat - deleted D:\Documents and Settings\luc\Application Data\Mozilla\Firefox\Profiles\6nr0sypq.default\cookies.txt.old - deleted D:\Documents and Settings\luc\Application Data\Mozilla\Firefox\Profiles\6nr0sypq.default\cookies.txt.old - deleted D:\Documents and Settings\luc\Recent\2008 11 mai carnaval.lnk - deleted D:\Documents and Settings\luc\Recent\chats Y Lucas 1erpot mariage leatitia.lnk - deleted D:\Documents and Settings\luc\Recent\dossier remi.lnk - deleted D:\Documents and Settings\luc\Recent\DSCF1063.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\DSCF1069.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\P1010003.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\P1010018.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\voiture xavier.doc.lnk - deleted D:\Documents and Settings\luc\Recent\2008 11 mai carnaval.lnk - deleted D:\Documents and Settings\luc\Recent\chats Y Lucas 1erpot mariage leatitia.lnk - deleted D:\Documents and Settings\luc\Recent\dossier remi.lnk - deleted D:\Documents and Settings\luc\Recent\DSCF1063.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\DSCF1069.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\P1010003.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\P1010018.JPG.lnk - deleted D:\Documents and Settings\luc\Recent\voiture xavier.doc.lnk - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\D653F3EC.TMP - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R11.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R13.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R15.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R17.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R19.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R1B.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R1D.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R9.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@RB.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@RD.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@RF.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S10.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S12.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S14.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S16.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S18.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S1A.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S1C.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S1E.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@SA.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@SC.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@SE.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$32souris.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$dre_du_jour_24janvier08.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$J_27_02_08_am.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$l_decision_27_02_08_am.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$l_decision_27_02_08_matin.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$l_decision_CP_24_01_08.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~DFC75F.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\D653F3EC.TMP - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R11.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R13.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R15.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R17.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R19.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R1B.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R1D.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@R9.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@RB.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@RD.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@RF.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S10.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S12.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S14.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S16.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S18.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S1A.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S1C.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@S1E.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@SA.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@SC.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\Z@SE.tmp - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$32souris.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$dre_du_jour_24janvier08.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$J_27_02_08_am.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$l_decision_27_02_08_am.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$l_decision_27_02_08_matin.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~$l_decision_CP_24_01_08.doc - deleted D:\DOCUME~1\luc\LOCALS~1\Temp\~DFC75F.tmp - deleted D:\WINDOWS\002163_.tmp - deleted D:\WINDOWS\DUMP3604.tmp - deleted D:\WINDOWS\SET3.tmp - deleted D:\WINDOWS\SETA.tmp - deleted D:\WINDOWS\temp\hpqddsvc.log - deleted D:\WINDOWS\temp\Perflib_Perfdata_2e8.dat - deleted D:\WINDOWS\temp\WGAErrLog.txt - deleted D:\WINDOWS\temp\WGANotify.settings - deleted D:\Documents and Settings\NetworkService\Cookies\index.dat - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\index.dat - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\7Q3W7SUH\Behaviors[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\7Q3W7SUH\Context[1].htm - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\7Q3W7SUH\coUAprint[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\7Q3W7SUH\shared[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\BD76DV4E\Common[1].js - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\BD76DV4E\coUA[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\BD76DV4E\HHWRAPPER[1].htm - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\BD76DV4E\NavBar[1].xml - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\BD76DV4E\shared[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\WY6DPLOQ\blank[1].htm - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\WY6DPLOQ\logo[1].bmp - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\WY6DPLOQ\NavBar[1].htm - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\WY6DPLOQ\shared[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\WY6DPLOQ\Uabrand[1].gif - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\arrow_green_normal[1].bmp - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\Common[1].js - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\firstpage[1].htm - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\note[1].gif - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\shared[1].css - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\shared[1].js - deleted D:\Documents and Settings\NetworkService\locals~1\tempor~1\Content.IE5\XKB6URUV\shared[2].css - deleted D:\Documents and Settings\NetworkService\Cookies\index.dat - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\7Q3W7SUH\Behaviors[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\7Q3W7SUH\Context[1].htm - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\7Q3W7SUH\coUAprint[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\7Q3W7SUH\shared[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BD76DV4E\Common[1].js - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BD76DV4E\coUA[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BD76DV4E\HHWRAPPER[1].htm - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BD76DV4E\NavBar[1].xml - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BD76DV4E\shared[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WY6DPLOQ\blank[1].htm - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WY6DPLOQ\logo[1].bmp - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WY6DPLOQ\NavBar[1].htm - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WY6DPLOQ\shared[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WY6DPLOQ\Uabrand[1].gif - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\arrow_green_normal[1].bmp - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\Common[1].js - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\firstpage[1].htm - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\note[1].gif - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\shared[1].css - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\shared[1].js - deleted D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\XKB6URUV\shared[2].css - deleted D:\Documents and Settings\luc\Cookies\index.dat - deleted D:\Documents and Settings\luc\locals~1\tempor~1\Content.IE5\index.dat - deleted D:\Documents and Settings\luc\locals~1\tempor~1\Content.Word\~WRS0000.tmp - deleted D:\Documents and Settings\luc\Cookies\index.dat - deleted D:\Documents and Settings\luc\Local Settings\Temp\D653F3EC.TMP - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R11.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R13.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R15.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R17.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R19.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R1B.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R1D.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@R9.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@RB.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@RD.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@RF.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S10.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S12.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S14.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S16.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S18.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S1A.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S1C.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@S1E.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@SA.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@SC.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\Z@SE.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temp\~$32souris.doc - deleted D:\Documents and Settings\luc\Local Settings\Temp\~$dre_du_jour_24janvier08.doc - deleted D:\Documents and Settings\luc\Local Settings\Temp\~$J_27_02_08_am.doc - deleted D:\Documents and Settings\luc\Local Settings\Temp\~$l_decision_27_02_08_am.doc - deleted D:\Documents and Settings\luc\Local Settings\Temp\~$l_decision_27_02_08_matin.doc - deleted D:\Documents and Settings\luc\Local Settings\Temp\~$l_decision_CP_24_01_08.doc - deleted D:\Documents and Settings\luc\Local Settings\Temp\~DFC75F.tmp - deleted D:\Documents and Settings\luc\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted D:\Documents and Settings\luc\Local Settings\Temporary Internet Files\Content.Word\~WRS0000.tmp - deleted D:\Documents and Settings\LocalService\Cookies\index.dat - deleted D:\Documents and Settings\LocalService\locals~1\tempor~1\Content.IE5\index.dat - deleted D:\Documents and Settings\LocalService\Cookies\index.dat - deleted D:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat - deleted D:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat - deleted D:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat - deleted D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted D:\Documents and Settings\Default User\Cookies\index.dat - deleted D:\Documents and Settings\Default User\locals~1\tempor~1\Content.IE5\index.dat - deleted D:\Documents and Settings\Default User\Cookies\index.dat - deleted D:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted 'Run MRU' list - removed from the registry. 'Doc Find Spec MRU' list - removed from the registry. 'FindComputerMRU' list - removed from the registry. 'ComputerNameMRU' list - removed from the registry. 'ContainingTextMRU' list - removed from the registry. 'FilesNamedMRU' list - removed from the registry. Search Assistant MRU list - removed from the registry. Explorer Open/Save MRU list - removed from the registry. Explorer Last Visited MRU list - removed from the registry. Paint Recent File List - removed from the registry. WordPad Recent File List - removed from the registry. Telnet's MRU list - removed from the registry. Windows Media Player Recent File List - removed from the registry. WinZip Extract MRU list - removed from the registry. WinZip File MRU list - removed from the registry. CleanUp! 4.5.2 recovered 8.3 MB of disk space from 194 files. CleanUp! finished on 05/25/08 09:53:25.

Je n'est pas encore fait la dernière manip mais vous m'épatez !! C'est étonnant de voir qu'il a des gens si disponible et si sérieux sur le net. Merci beaucoup pour votre aide RAPIDE et SERIEUSE ! . Je termine la manip dans quelque minute.

25/05/2008 a 9:02:59,71 *** Recherche des fichiers dans D: *** Recherche des fichiers dans D:\WINDOWS\ *** Recherche des fichiers dans D:\WINDOWS\system32 *** Recherche des fichiers dans D:\Program Files

Ok merci plus de probleme. Merci pour votre aide

Clean Navipromo version 3.5.7 commencé le 24/05/2008 à 18:36:05,26 Outil exécuté depuis D:\Program Files\navilog1 Session actuelle : "luc" Mise à jour le 11.05.2008 à 18h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Mode suppression automatique avec prise en charge résultats Catchme et GNS Nettoyage exécuté au redémarrage de l'ordinateur *** Creation backups fichiers trouvés par Catchme *** Copie vers "D:\Program Files\navilog1\Backupnavi" Copie D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd.dat réalisée avec succès ! Copie D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd.exe réalisée avec succès ! Copie D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd_nav.dat réalisée avec succès ! Copie D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd_navps.dat réalisée avec succès ! *** Suppression des fichiers trouvés avec Catchme *** D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd.dat supprimé ! D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd.exe supprimé ! D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd_nav.dat supprimé ! D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd_navps.dat supprimé ! ** 2ème passage avec résultats Catchme ** * Dans "D:\WINDOWS\system32" * D:\WINDOWS\prefetch\mwztysnhd*.pf trouvé ! Copie D:\WINDOWS\prefetch\mwztysnhd*.pf réalisée avec succès ! D:\WINDOWS\prefetch\mwztysnhd*.pf supprimé ! * Dans "D:\Documents and Settings\luc\locals~1\applic~1" * *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans "D:\WINDOWS\System32" * * Suppression dans "D:\Documents and Settings\luc\locals~1\applic~1" * *** Suppression dossiers dans "D:\WINDOWS" *** *** Suppression dossiers dans "D:\Program Files" *** *** Suppression dossiers dans "d:\docume~1\alluse~1\applic~1" *** *** Suppression dossiers dans "d:\docume~1\alluse~1\menudm~1\progra~1" *** *** Suppression dossiers dans "D:\Documents and Settings\luc\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\luc\locals~1\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\luc\menudm~1\progra~1" *** *** Suppression fichiers *** *** Suppression fichiers temporaires *** Nettoyage contenu D:\WINDOWS\Temp effectué ! Nettoyage contenu D:\Documents and Settings\luc\locals~1\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans "D:\WINDOWS\system32" * * Dans "D:\Documents and Settings\luc\locals~1\applic~1" * hveepxflp_navfx.dat trouvé ! Copie hveepxflp_navfx.dat réalisée avec succès ! hveepxflp_navfx.dat supprimé ! myrvbdrq_navfx.dat trouvé ! Copie myrvbdrq_navfx.dat réalisée avec succès ! myrvbdrq_navfx.dat supprimé ! *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup supprimé ! Certificat Electronic-Group supprimé ! Certificat OOO-Favorit supprimé ! Certificat Sunny-Day-Design-Ltdt absent ! *** Nettoyage terminé le 24/05/2008 à 18:39:45,81 *** Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:41:57, on 24/05/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe D:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe D:\Program Files\Cobian Backup 8\cbService.exe D:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe D:\WINDOWS\System32\GEARSec.exe D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe D:\WINDOWS\system32\nvsvc32.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\wuauclt.exe D:\WINDOWS\notepad.exe D:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe D:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe D:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Windows Live\Messenger\MsnMsgr.Exe D:\Program Files\Google\Google Updater\GoogleUpdater.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Cloneur Expert Monitor] "D:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe" O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "D:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [Norton Ghost 9.0] D:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - Global Startup: Outil de mise à jour Google.lnk = D:\Program Files\Google\Google Updater\GoogleUpdater.exe O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1206263799421 O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - D:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Cobian Backup 8 service (CobBMService) - Luis Cobian - D:\Program Files\Cobian Backup 8\cbService.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - D:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: GEARSecurity - GEAR Software - D:\WINDOWS\System32\GEARSec.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Norton Ghost - Symantec Corporation - D:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe -- End of file - 5127 bytes

Search Navipromo version 3.5.7 commencé le 24/05/2008 à 17:49:26,60 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis D:\Program Files\navilog1 Session actuelle : "luc" Mise à jour le 11.05.2008 à 18h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Recherche executé en mode normal *** Recherche Programmes installés *** *** Recherche dossiers dans "D:\WINDOWS" *** *** Recherche dossiers dans "D:\Program Files" *** *** Recherche dossiers dans "d:\docume~1\alluse~1\applic~1" *** *** Recherche dossiers dans "d:\docume~1\alluse~1\menudm~1\progra~1" *** *** Recherche dossiers dans "D:\Documents and Settings\luc\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\luc\locals~1\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\luc\menudm~1\progra~1" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net Fichier(s) caché(s) : D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd.dat D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd.exe D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd_nav.dat D:\Documents and Settings\luc\Local Settings\Application Data\mwztysnhd_navps.dat *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "D:\WINDOWS\system32" * * Recherche dans "D:\Documents and Settings\luc\locals~1\applic~1" * Fichiers trouvés : mwztysnhd.exe trouvé ! *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** HKEY_CURRENT_USER\Software\Lanconfig trouvé ! *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "D:\WINDOWS\system32" : * Dans "D:\Documents and Settings\luc\locals~1\applic~1" : hveepxflp_navfx.dat trouvé ! mwztysnhd.dat trouvé ! myrvbdrq_navfx.dat trouvé ! 3)Recherche Certificats : Certificat Egroup trouvé ! Certificat Electronic-Group trouvé ! Certificat OOO-Favorit trouvé ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche fichiers connus : *** Analyse terminée le 24/05/2008 à 18:02:51,65 ***

Bonjour, J'ai un problème, j'ai Firefox et à chaque fois que je l'utilise il m'ouvre des onglets publicitaires. j'ai antivir le scan est ok, spybot ok, adaware ok, malware ok. Je n'ai plus de solution..... voici le rapport hijack. Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe D:\Program Files\Cobian Backup 8\cbService.exe D:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe D:\WINDOWS\System32\GEARSec.exe D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe D:\WINDOWS\system32\nvsvc32.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe D:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe D:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Windows Live\Messenger\MsnMsgr.Exe D:\Program Files\Google\Google Updater\GoogleUpdater.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Windows Live\Messenger\usnsvc.exe d:\program files\avira\antivir personaledition classic\avcenter.exe D:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe D:\Program Files\Windows Live Toolbar\MSNTBUP.EXE D:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Cloneur Expert Monitor] "D:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe" O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "D:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [Norton Ghost 9.0] D:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - Global Startup: Outil de mise à jour Google.lnk = D:\Program Files\Google\Google Updater\GoogleUpdater.exe O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1206263799421 O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - D:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Cobian Backup 8 service (CobBMService) - Luis Cobian - D:\Program Files\Cobian Backup 8\cbService.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - D:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: GEARSecurity - GEAR Software - D:\WINDOWS\System32\GEARSec.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Norton Ghost - Symantec Corporation - D:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe -- End of file - 5375 bytes