ed590866

Bonjour, j'ai fait toutes les mises à jour demandées... ca fonctionne impeccablement Ordi plus rapide au démarrage et dans l'utilisation courante. Merci bcp!! par contre est-ce qu'il est possible de faire une sauvegarde automatique par les taches planifiés pour recuperer l'ordi en cas de nouvelle infection.. Merci encore pour ton aide...dois-je effectuer une évaluation sur le forum, si oui comment fait-on...

ok j ai fait tout ce que tu m as indiqué je vois demain pour finaliser le reste un grand merci

en allant me balader sur un autre message j ai vu une réponse qui je pense me concerne dis moi si c'est bien pour moi.. Dans un premier temps, on va désinstaller ensemble les outils utilisés. Ensuite on voit pour les conseils Rends toi dans ton Menu Démarrer > Exécuter et copie-colle : combofix /u Puis valide. Rends toi dans ton Panneau de configuration et désinstalle les entrées suivantes : USBFIX Malwarebytes' Anti-Malware <= je te suggère de le conserver. Dans sa version gratuite, il n'y a pas de modules résidents, mais tu pourras continuer à le mettre à jour et à effectuer des analyses de contrôle de temps en temps. HijackThis Supprime les éléments suivants de ton Bureau s'ils sont encore présents : cha3bi.bat msupdtrsvc.exe.vir rsit.exe CFScript.txt combofix.exe mbam-setup.exe rsit.exe SmitfraudFix.exe UsbFix.exe ZHPDiag.exe Supprime les fichiers et répertoires suivants si encore présents : C:\ComboFix.txt C:\ComboFix-quarantined-files.txt C:\ComboFix2.txt C:\ComboFix3.txt C:\Qoobox C:\rapport.txt C:\UsbFix.txt C:\UsbFix C:\rsit Vide ta Corbeille. Puisque ton pc ne présente aucun disfonctionnement, je te fais désactiver et réactiver ta restauration système de sorte d'effacer tous tes anciens points de restauration. Histoire de repartir sur des bases saines. Suis la manipulation indiquée : Ne t'inquiète pas, en la réactivant, Windows recréera automatiquement un point de restauration qui sera, lui, propre. Procède comme ceci : Citation -clic droit sur Poste de travail / Propriétés / onglet Système de restauration - coche la case "Désactiver le système de restauration..." - clique sur "Appliquer" puis "oui" - - redémarre, reviens sur ce panneau - décoche la case "Désactiver le système de restauration..." pour remettre les choses en place. - clique sur "Appliquer" puis "Ok" Reviens m'indiquer si tout s'est bien passé, ensuite on voit pour les différents conseils de sécurisation et d'optimisation.

ok redemarrage effectué on peut lancer la suite... et si tu as des conseils pour bien nettoyer le PC...vieux doc, fichiers inutiles, etc je suis preneur ca peut pas lui faire de mal

voici le rapport après avoir supprimer la selection Malwarebytes' Anti-Malware 1.37 Version de la base de données: 2244 Windows 5.1.2600 Service Pack 3 07/06/2009 20:43:45 mbam-log-2009-06-07 (20-43-45).txt Type de recherche: Examen rapide Eléments examinés: 98540 Temps écoulé: 4 minute(s), 3 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 8 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\c:\WINDOWS\downloaded program files\popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\WINDOWS\downloaded program files\popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully. je dois redemarrer le PC qui fonctionne déjà bcp mieux maintenant...d'avance un 1er remerciement

je transmet le rapport mbam Malwarebytes' Anti-Malware 1.37 Version de la base de données: 2244 Windows 5.1.2600 Service Pack 3 07/06/2009 19:49:56 mbam-log-2009-06-07 (19-49-47).txt Type de recherche: Examen complet (C:\|) Eléments examinés: 162168 Temps écoulé: 26 minute(s), 27 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 6 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/popcaploader.dll (Adware.PopCap) -> No action taken. HKEY_CLASSES_ROOT\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> No action taken. HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> No action taken. HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> No action taken. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> No action taken. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> No action taken. Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\c:\WINDOWS\downloaded program files\popcaploader.dll (Adware.PopCap) -> No action taken. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\WINDOWS\downloaded program files\popcaploader.dll (Adware.PopCap) -> No action taken.

est ce normal? je n ai plus rien sur mon bureau!!! dois-je relancer le PC

voici le rapport combofix ComboFix 09-06-06.04 - User 07/06/2009 18:49.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.447.82 [GMT 2:00] Lancé depuis: c:\documents and settings\User\Bureau\combofix.exe Commutateurs utilisés :: c:\documents and settings\User\Bureau\CFScript.txt AV: avast! antivirus 4.8.1335 [VPS 090415-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D} FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B} FILE :: "c:\documents and settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll" "c:\windows\system32\nnnOhgdb.dll" "c:\windows\system32\urqPgffd.dll" "c:\windows\tasks\xzbzzezc.job" . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\baaiebib.ini c:\windows\system32\vekhnlko.ini c:\windows\system32\xqxnhqqa.ini c:\windows\tasks\xzbzzezc.job . ((((((((((((((((((((((((((((( Fichiers créés du 2009-05-07 au 2009-06-07 )))))))))))))))))))))))))))))))))))) . Pas de nouveau fichier créé dans ce laps de temps . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-06-07 16:54 . 2008-12-18 17:07 19365920 --sha-w- c:\windows\system32\drivers\fidbox.dat 2009-06-07 16:48 . 2007-04-28 15:58 -------- d-----w- c:\program files\Wanadoo 2009-06-07 16:15 . 2009-06-07 16:15 -------- d-----w- c:\documents and settings\All Users\Application Data\PopCap 2009-06-07 15:18 . 2009-06-07 15:18 -------- d-----w- c:\program files\trend micro 2009-06-06 17:51 . 2008-12-18 17:07 220676 --sha-w- c:\windows\system32\drivers\fidbox.idx 2009-05-30 20:33 . 2008-05-01 10:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-05-22 18:32 . 2009-01-10 10:22 -------- d-----w- c:\program files\Dofus 2009-05-22 15:57 . 2009-04-15 17:23 -------- d-----w- c:\program files\Fighters 2009-05-11 16:10 . 2009-05-11 16:12 1772032 ----a-w- c:\windows\Internet Logs\xDBA.tmp 2009-05-06 18:50 . 2008-12-21 23:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-05-06 16:17 . 2009-05-06 16:17 2967799 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-05-03 14:59 . 2007-12-17 09:13 -------- d-----w- c:\documents and settings\User\Application Data\LimeWire 2009-04-25 18:00 . 2004-08-05 12:00 458980 ----a-w- c:\windows\system32\perfh00C.dat 2009-04-25 18:00 . 2004-08-05 12:00 71836 ----a-w- c:\windows\system32\perfc00C.dat 2009-04-21 18:21 . 2006-08-15 09:03 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-04-21 09:07 . 2009-04-21 15:46 1726464 ----a-w- c:\windows\Internet Logs\xDB9.tmp 2009-04-17 17:53 . 2009-02-21 17:52 4189272 ----a-w- c:\windows\Internet Logs\tvDebug.zip 2009-04-15 17:23 . 2009-04-15 17:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Fighters 2009-04-11 08:52 . 2008-05-01 10:26 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-04-10 15:42 . 2009-03-20 18:00 -------- d-----w- c:\program files\Iminent 2009-04-09 06:33 . 2009-04-09 15:34 421888 ----a-w- c:\windows\Internet Logs\xDB8.tmp 2009-04-08 13:44 . 2009-04-08 18:35 1686016 ----a-w- c:\windows\Internet Logs\xDB7.tmp 2009-04-08 07:47 . 2009-04-08 07:47 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe 2009-04-06 13:32 . 2008-12-21 23:44 38496 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-04-06 13:32 . 2008-12-21 23:44 15504 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-03-28 09:46 . 2009-02-25 13:39 21032 ----a-w- c:\documents and settings\M@rTin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-03-21 10:55 . 2009-03-23 13:30 1653248 ----a-w- c:\windows\Internet Logs\xDB6.tmp 2009-03-21 10:42 . 2009-03-23 13:30 1834496 ----a-w- c:\windows\Internet Logs\xDB5.tmp 2009-03-19 14:32 . 2009-03-19 14:32 23400 ----a-w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86\GEARAspiWDM.sys 2009-03-19 14:32 . 2008-12-29 12:58 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2009-03-16 19:25 . 2006-09-23 18:36 21032 ----a-w- c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "WOOKIT"="c:\progra~1\Wanadoo\Shell.exe" [2004-08-23 122880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016] "Sunkist2k"="c:\program files\Multimedia Card Reader\shwicon2k.exe" [2005-08-25 139264] "SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648] "PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 57393] "IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 40960] "ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 933888] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000] "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184] "WOOWATCH"="c:\progra~1\Wanadoo\Watch.exe" [2004-08-23 20480] "WOOTASKBARICON"="c:\progra~1\Wanadoo\GestMaj.exe" [2004-10-14 32768] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-22 136600] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] "Norman ZANDA"="c:\virusfighter\Bin\ZLH.EXE" [2008-06-02 273520] "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2005-10-10 1519616] "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-04-17 16143872] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588] [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= "c:\\Program Files\\Sierra On-Line\\SIGSPat.exe"= "c:\\Program Files\\Wanadoo\\WOOBrowser\\WOOBrowser.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [11/04/2008 09:45 114768] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11/04/2008 09:45 20560] R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [16/03/2009 21:19 55152] R2 OPTENET_FILTER;Control Parental;c:\program files\Controle Parental\bin\optproxy.exe [28/04/2007 17:49 564400] S3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360] S3 ultradfg;ultradfg;c:\windows\system32\drivers\ultradfg.sys [13/11/2008 11:52 24576] . Contenu du dossier 'Tâches planifiées' 2009-05-12 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] . - - - - ORPHELINS SUPPRIMES - - - - SafeBoot-procexp90.Sys . ------- Examen supplémentaire ------- . uDefault_Search_URL = hxxp://www.google.com/ie uInternet Connection Wizard,ShellNext = iexplore uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: { - c:\program files\Messenger\msmsgs.exe DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game03.zylom.com/activex/zylomgamesplayer.cab DPF: {C1029C96-C060-44EA-9752-502B62E6C8C4} - hxxp://www.myprogression.com/lms/501b2i/plugins/pgldr.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-07 18:54 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\Root\LEGACY_ATI7OWXX\0000] @DACL=(02 0000) "Service"="ati7owxx" "Legacy"=dword:00000001 "ConfigFlags"=dword:00000000 "Class"="LegacyDriver" "ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}" "DeviceDesc"="ati7owxx" "Capabilities"=dword:00000000 . Heure de fin: 2009-06-07 18:56 ComboFix-quarantined-files.txt 2009-06-07 16:56 ComboFix2.txt 2009-06-07 10:41 Avant-CF: 123 010 101 248 octets libres Après-CF: 123 073 081 344 octets libres 158 --- E O F --- 2009-05-28 17:54

ok opération en cours

quand je veux telecharger CFScript.txt sur dl.free.fr j ai ce message RegLockDel:: [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}] [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6DB063F1-DE9D-4C84-8620-23B0AFEEB39D}] File:: c:\WINDOWS\system32\urqPgffd.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll C:\WINDOWS\tasks\xzbzzezc.job C:\WINDOWS\system32\nnnOhgdb.dll

d'abord merci de ta patiente avec le novice que je suis..... et c'est toujours intéressant de savoir ce que vous faites, en tout cas moi j'aime bien comprendre ce qui se passe. voici le rapport: SystemLook v1.0 by jpshortstuff (22.05.09) Log created at 18:10 on 07/06/2009 by User (Administrator - Elevation successful) ========== filefind ========== Searching for "nnnOhgdb.dll" No files found. Searching for "urqPgffd.dll" No files found. -=End Of File=-

j'espère ne pas avoir fait d'erreurs mais le résultat me semble bizarre SystemLook v1.0 by jpshortstuff (22.05.09) Log created at 17:59 on 07/06/2009 by User (Administrator - Elevation successful) ========== contents ========== C:\WINDOWS\tasks\xzbzzezc.job - Opened succesfully. ò:àÑ!BIÎ8å¶FF< s!Ù !C:\WINDOWS\system32\rundll32.exe-"C:\WINDOWS\system32\nnnOhgdb.dll",ShellPathUser0×Ù < -=End Of File=-

Ok, je ne savais pas pour les majuscules...je ne suis pas un crieur!!! voici le 1er rapport Lop S&D --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3400+ ) BIOS : Default System BIOS USER : User ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090415-0] 4.8.1335 (Not Activated) Firewall : ZoneAlarm Firewall 7.0.483.000 (Not Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:149 Go (Free:112 Go) D:\ (CD or DVD) E:\ (CD or DVD) G:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) K:\ (USB) - FAT32 - Total:952 Mo (Free:0 Go) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 07/06/2009|17:44 ) \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\DOCUME~1\User\Cookies\user@advertising[1].txt Supprime! - C:\Program Files\Circle Developement - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans APPLIC~1 [04/02/2009|18:32] C:\DOCUME~1\-MARIE~1\APPLIC~1\Adobe [18/01/2009|12:35] C:\DOCUME~1\-MARIE~1\APPLIC~1\Identities [18/01/2009|16:38] C:\DOCUME~1\-MARIE~1\APPLIC~1\Microsoft [15/08/2006|10:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [15/03/2009|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3} [08/04/2009|10:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [25/06/2007|09:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [29/12/2008|14:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [29/12/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [30/12/2006|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother [15/04/2009|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters [01/08/2008|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo [14/03/2009|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [30/12/2006|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [20/09/2007|19:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier [22/12/2008|01:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [12/05/2008|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [16/03/2009|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [26/11/2006|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles [03/11/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst [25/03/2007|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime [30/12/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft [30/05/2009|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [18/12/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com [03/11/2008|14:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP [15/08/2006|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [06/01/2007|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar [01/03/2008|12:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [29/12/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion [15/12/2007|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom [15/08/2006|10:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [18/05/2007|14:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [31/01/2009|10:58] C:\DOCUME~1\M@rTin\APPLIC~1\Adobe [14/03/2009|12:46] C:\DOCUME~1\M@rTin\APPLIC~1\Apple Computer [14/03/2009|12:42] C:\DOCUME~1\M@rTin\APPLIC~1\Google [18/01/2009|16:28] C:\DOCUME~1\M@rTin\APPLIC~1\Identities [31/01/2009|10:58] C:\DOCUME~1\M@rTin\APPLIC~1\Macromedia [28/03/2009|12:18] C:\DOCUME~1\M@rTin\APPLIC~1\Microsoft [25/02/2009|15:40] C:\DOCUME~1\M@rTin\APPLIC~1\ScanSoft [31/01/2009|11:03] C:\DOCUME~1\M@rTin\APPLIC~1\WinRAR [07/02/2007|18:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [23/06/2008|20:12] C:\DOCUME~1\User\APPLIC~1\Adobe [28/08/2007|17:31] C:\DOCUME~1\User\APPLIC~1\AdobeUM [23/03/2009|16:58] C:\DOCUME~1\User\APPLIC~1\Apple Computer [04/01/2007|12:30] C:\DOCUME~1\User\APPLIC~1\Brother [26/11/2006|17:20] C:\DOCUME~1\User\APPLIC~1\CyberLink [24/12/2006|14:44] C:\DOCUME~1\User\APPLIC~1\DIMAGE [30/07/2008|17:04] C:\DOCUME~1\User\APPLIC~1\dvdcss [23/03/2009|18:24] C:\DOCUME~1\User\APPLIC~1\FUJIFILM [07/09/2008|16:33] C:\DOCUME~1\User\APPLIC~1\Gamelab [18/12/2006|11:22] C:\DOCUME~1\User\APPLIC~1\Google [17/02/2007|22:58] C:\DOCUME~1\User\APPLIC~1\Help [24/05/2008|19:17] C:\DOCUME~1\User\APPLIC~1\Identities [03/05/2009|16:59] C:\DOCUME~1\User\APPLIC~1\LimeWire [23/12/2006|20:08] C:\DOCUME~1\User\APPLIC~1\Macromedia [22/12/2008|01:44] C:\DOCUME~1\User\APPLIC~1\Malwarebytes [04/06/2007|10:25] C:\DOCUME~1\User\APPLIC~1\Media Player Classic [17/03/2009|09:31] C:\DOCUME~1\User\APPLIC~1\Microsoft [06/01/2007|18:11] C:\DOCUME~1\User\APPLIC~1\Microsoft Web Folders [06/01/2007|18:26] C:\DOCUME~1\User\APPLIC~1\MSNInstaller [03/11/2008|14:24] C:\DOCUME~1\User\APPLIC~1\PlayFirst [18/05/2008|12:16] C:\DOCUME~1\User\APPLIC~1\ScanSoft [03/06/2008|18:37] C:\DOCUME~1\User\APPLIC~1\Sun [26/10/2008|16:08] C:\DOCUME~1\User\APPLIC~1\Uniblue [13/03/2007|21:46] C:\DOCUME~1\User\APPLIC~1\vlc [06/06/2008|20:00] C:\DOCUME~1\User\APPLIC~1\WinRAR [26/10/2008|13:15] C:\DOCUME~1\User\APPLIC~1\Zylom --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [12/05/2009 18:19][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [07/06/2009 13:00][--a------] C:\WINDOWS\tasks\xzbzzezc.job [07/06/2009 12:41][--ah-----] C:\WINDOWS\tasks\SA.DAT [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [25/06/2007|09:41] C:\Program Files\Adobe [07/02/2007|19:48] C:\Program Files\Alwil Software [15/08/2006|11:05] C:\Program Files\AMD [29/12/2008|14:56] C:\Program Files\Apple Software Update [15/03/2009|10:22] C:\Program Files\Bonjour [30/12/2006|14:34] C:\Program Files\Brother [17/06/2008|17:50] C:\Program Files\capb2i [22/12/2008|00:21] C:\Program Files\CCleaner [30/12/2006|14:34] C:\Program Files\Common Files [15/08/2006|10:46] C:\Program Files\ComPlus Applications [28/04/2007|17:49] C:\Program Files\Controle Parental [13/03/2007|21:56] C:\Program Files\CyberLink [23/02/2007|19:25] C:\Program Files\DiMAGE Viewer [13/03/2007|21:48] C:\Program Files\DivX [22/05/2009|20:32] C:\Program Files\Dofus [16/03/2009|20:39] C:\Program Files\Fichiers communs [22/05/2009|17:57] C:\Program Files\Fighters [03/11/2008|20:19] C:\Program Files\Gamenext [31/10/2008|11:35] C:\Program Files\GamesBar [25/01/2009|19:21] C:\Program Files\GeoplanGeospace [17/03/2009|20:40] C:\Program Files\Google [10/04/2009|17:42] C:\Program Files\Iminent [21/04/2009|20:21] C:\Program Files\InstallShield Installation Information [16/03/2009|20:59] C:\Program Files\Internet Explorer [08/04/2009|10:14] C:\Program Files\iPod [08/04/2009|10:16] C:\Program Files\iTunes [22/02/2009|13:37] C:\Program Files\Java [04/06/2007|10:24] C:\Program Files\K-Lite Codec Pack [12/03/2009|19:26] C:\Program Files\LimeWire [16/04/2007|15:24] C:\Program Files\LucasArts [06/05/2009|20:50] C:\Program Files\Malwarebytes' Anti-Malware [24/08/2008|11:15] C:\Program Files\Messenger [03/11/2008|18:55] C:\Program Files\Messenger Plus! Live [16/03/2009|20:53] C:\Program Files\Microsoft [06/01/2007|18:11] C:\Program Files\microsoft frontpage [06/01/2007|18:11] C:\Program Files\Microsoft Office [17/03/2009|09:12] C:\Program Files\Microsoft Silverlight [16/03/2009|20:56] C:\Program Files\Microsoft SQL Server Compact Edition [16/03/2009|20:57] C:\Program Files\Microsoft Sync Framework [08/06/2008|15:15] C:\Program Files\Movie Maker [09/07/2007|21:08] C:\Program Files\MSN [19/01/2007|19:32] C:\Program Files\MSN Apps [15/08/2006|10:46] C:\Program Files\MSN Gaming Zone [19/01/2007|20:03] C:\Program Files\MSN Toolbar [07/12/2008|19:55] C:\Program Files\MSXML 4.0 [15/08/2006|11:09] C:\Program Files\Multimedia Card Reader [08/06/2008|15:12] C:\Program Files\NetMeeting [03/11/2008|14:22] C:\Program Files\Oberon Media [15/08/2006|10:46] C:\Program Files\Online Services [01/08/2008|14:51] C:\Program Files\orange [08/06/2008|15:12] C:\Program Files\Outlook Express [15/03/2009|10:21] C:\Program Files\QuickTime [15/08/2006|11:03] C:\Program Files\Realtek [19/07/2007|18:35] C:\Program Files\SAGEM [30/12/2006|14:32] C:\Program Files\ScanSoft [23/02/2007|21:23] C:\Program Files\Services en ligne [22/06/2007|22:57] C:\Program Files\Sierra On-Line [11/04/2009|10:52] C:\Program Files\Spybot - Search & Destroy [20/12/2008|14:17] C:\Program Files\SUPERAntiSpyware [02/03/2007|12:38] C:\Program Files\test [07/06/2009|17:18] C:\Program Files\trend micro [15/08/2006|10:56] C:\Program Files\Uninstall Information [22/04/2007|15:07] C:\Program Files\VideoLAN [11/01/2009|19:29] C:\Program Files\Wakfu [07/06/2009|16:33] C:\Program Files\Wanadoo [13/03/2007|22:13] C:\Program Files\Webteh [24/03/2009|20:32] C:\Program Files\Windows Live [16/03/2009|20:53] C:\Program Files\Windows Live SkyDrive [07/01/2007|13:56] C:\Program Files\Windows Live Toolbar [03/05/2007|17:42] C:\Program Files\Windows Media Connect 2 [08/06/2008|15:12] C:\Program Files\Windows Media Player [08/06/2008|15:12] C:\Program Files\Windows NT [15/08/2006|10:48] C:\Program Files\WindowsUpdate [05/06/2008|17:39] C:\Program Files\WinRAR [15/08/2006|10:50] C:\Program Files\xerox [22/12/2008|00:22] C:\Program Files\Yahoo! [18/12/2008|18:53] C:\Program Files\Zone Labs [27/10/2008|08:55] C:\Program Files\Zylom Games --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [25/06/2007|09:43] C:\Program Files\Fichiers communs\Adobe [08/04/2009|10:14] C:\Program Files\Fichiers communs\Apple [06/01/2007|18:13] C:\Program Files\Fichiers communs\Designer [30/12/2006|14:32] C:\Program Files\Fichiers communs\InstallShield [17/12/2007|11:09] C:\Program Files\Fichiers communs\Java [25/03/2007|17:09] C:\Program Files\Fichiers communs\Logitech [05/03/2009|20:01] C:\Program Files\Fichiers communs\Microsoft Shared [15/08/2006|10:47] C:\Program Files\Fichiers communs\MSSoap [17/04/2008|19:02] C:\Program Files\Fichiers communs\Oberon Media [15/08/2006|12:40] C:\Program Files\Fichiers communs\ODBC [30/12/2006|14:32] C:\Program Files\Fichiers communs\ScanSoft Shared [15/08/2006|10:47] C:\Program Files\Fichiers communs\Services [15/08/2006|12:40] C:\Program Files\Fichiers communs\SpeechEngines [08/06/2008|15:12] C:\Program Files\Fichiers communs\System [16/03/2009|20:39] C:\Program Files\Fichiers communs\Windows Live [01/03/2008|12:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller --------------------\\ Process ( 48 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-07 17:46:42 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 20 --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [F:41][D:4]-> C:\DOCUME~1\User\LOCALS~1\Temp [F:80][D:0]-> C:\DOCUME~1\User\Cookies [F:4104][D:8]-> C:\DOCUME~1\User\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 07/06/2009|17:37 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 07/06/2009|17:47 - Option : [2] --------------------\\ Fin du rapport a 17:47:51 rapport Look : SystemLook v1.0 by jpshortstuff (22.05.09) Log created at 17:50 on 07/06/2009 by User (Administrator - Elevation successful) No Context: --------------------\\ Lop S&D 4.2.5-0 XP/Vista No Context: Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 No Context: X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3400+ ) No Context: BIOS : Default System BIOS No Context: USER : User ( Administrator ) No Context: BOOT : Normal boot No Context: Antivirus : avast! antivirus 4.8.1335 [VPS 090415-0] 4.8.1335 (Not Activated) No Context: Firewall : ZoneAlarm Firewall 7.0.483.000 (Not Activated) No Context: A:\ (USB) No Context: C:\ (Local Disk) - NTFS - Total:149 Go (Free:112 Go) No Context: D:\ (CD or DVD) No Context: E:\ (CD or DVD) No Context: G:\ (USB) No Context: H:\ (USB) No Context: I:\ (USB) No Context: J:\ (USB) No Context: K:\ (USB) - FAT32 - Total:952 Mo (Free:0 Go) No Context: "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) No Context: Option : [2] ( 07/06/2009|17:44 ) No Context: \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION No Context: Supprime! - C:\DOCUME~1\User\Cookies\user@advertising[1].txt No Context: Supprime! - C:\Program Files\Circle Developement No Context: - No Context: [ Fichier Hosts ] .. Restaure! No Context: No Context: \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ No Context: No Context: --------------------\\ Listing des dossiers dans APPLIC~1 No Context: [04/02/2009|18:32] C:\DOCUME~1\-MARIE~1\APPLIC~1\Adobe No Context: [18/01/2009|12:35] C:\DOCUME~1\-MARIE~1\APPLIC~1\Identities No Context: [18/01/2009|16:38] C:\DOCUME~1\-MARIE~1\APPLIC~1\Microsoft No Context: [15/08/2006|10:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft No Context: [15/03/2009|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3} No Context: [08/04/2009|10:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} No Context: [25/06/2007|09:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe No Context: [29/12/2008|14:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple No Context: [29/12/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer No Context: [30/12/2006|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother No Context: [15/04/2009|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters No Context: [01/08/2008|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo No Context: [14/03/2009|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google No Context: [30/12/2006|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield No Context: [20/09/2007|19:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier No Context: [22/12/2008|01:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes No Context: [12/05/2008|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! No Context: [16/03/2009|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft No Context: [26/11/2006|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles No Context: [03/11/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst No Context: [25/03/2007|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime No Context: [30/12/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft No Context: [30/05/2009|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy No Context: [18/12/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com No Context: [03/11/2008|14:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP No Context: [15/08/2006|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage No Context: [06/01/2007|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar No Context: [01/03/2008|12:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller No Context: [29/12/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion No Context: [15/12/2007|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom No Context: [15/08/2006|10:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft No Context: [18/05/2007|14:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft No Context: [31/01/2009|10:58] C:\DOCUME~1\M@rTin\APPLIC~1\Adobe No Context: [14/03/2009|12:46] C:\DOCUME~1\M@rTin\APPLIC~1\Apple Computer No Context: [14/03/2009|12:42] C:\DOCUME~1\M@rTin\APPLIC~1\Google No Context: [18/01/2009|16:28] C:\DOCUME~1\M@rTin\APPLIC~1\Identities No Context: [31/01/2009|10:58] C:\DOCUME~1\M@rTin\APPLIC~1\Macromedia No Context: [28/03/2009|12:18] C:\DOCUME~1\M@rTin\APPLIC~1\Microsoft No Context: [25/02/2009|15:40] C:\DOCUME~1\M@rTin\APPLIC~1\ScanSoft No Context: [31/01/2009|11:03] C:\DOCUME~1\M@rTin\APPLIC~1\WinRAR No Context: [07/02/2007|18:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft No Context: [23/06/2008|20:12] C:\DOCUME~1\User\APPLIC~1\Adobe No Context: [28/08/2007|17:31] C:\DOCUME~1\User\APPLIC~1\AdobeUM No Context: [23/03/2009|16:58] C:\DOCUME~1\User\APPLIC~1\Apple Computer No Context: [04/01/2007|12:30] C:\DOCUME~1\User\APPLIC~1\Brother No Context: [26/11/2006|17:20] C:\DOCUME~1\User\APPLIC~1\CyberLink No Context: [24/12/2006|14:44] C:\DOCUME~1\User\APPLIC~1\DIMAGE No Context: [30/07/2008|17:04] C:\DOCUME~1\User\APPLIC~1\dvdcss No Context: [23/03/2009|18:24] C:\DOCUME~1\User\APPLIC~1\FUJIFILM No Context: [07/09/2008|16:33] C:\DOCUME~1\User\APPLIC~1\Gamelab No Context: [18/12/2006|11:22] C:\DOCUME~1\User\APPLIC~1\Google No Context: [17/02/2007|22:58] C:\DOCUME~1\User\APPLIC~1\Help No Context: [24/05/2008|19:17] C:\DOCUME~1\User\APPLIC~1\Identities No Context: [03/05/2009|16:59] C:\DOCUME~1\User\APPLIC~1\LimeWire No Context: [23/12/2006|20:08] C:\DOCUME~1\User\APPLIC~1\Macromedia No Context: [22/12/2008|01:44] C:\DOCUME~1\User\APPLIC~1\Malwarebytes No Context: [04/06/2007|10:25] C:\DOCUME~1\User\APPLIC~1\Media Player Classic No Context: [17/03/2009|09:31] C:\DOCUME~1\User\APPLIC~1\Microsoft No Context: [06/01/2007|18:11] C:\DOCUME~1\User\APPLIC~1\Microsoft Web Folders No Context: [06/01/2007|18:26] C:\DOCUME~1\User\APPLIC~1\MSNInstaller No Context: [03/11/2008|14:24] C:\DOCUME~1\User\APPLIC~1\PlayFirst No Context: [18/05/2008|12:16] C:\DOCUME~1\User\APPLIC~1\ScanSoft No Context: [03/06/2008|18:37] C:\DOCUME~1\User\APPLIC~1\Sun No Context: [26/10/2008|16:08] C:\DOCUME~1\User\APPLIC~1\Uniblue No Context: [13/03/2007|21:46] C:\DOCUME~1\User\APPLIC~1\vlc No Context: [06/06/2008|20:00] C:\DOCUME~1\User\APPLIC~1\WinRAR No Context: [26/10/2008|13:15] C:\DOCUME~1\User\APPLIC~1\Zylom No Context: No Context: --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks No Context: [12/05/2009 18:19][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job No Context: [07/06/2009 13:00][--a------] C:\WINDOWS\tasks\xzbzzezc.job No Context: [07/06/2009 12:41][--ah-----] C:\WINDOWS\tasks\SA.DAT No Context: [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini No Context: --------------------\\ Listing des dossiers dans C:\Program Files No Context: [25/06/2007|09:41] C:\Program Files\Adobe No Context: [07/02/2007|19:48] C:\Program Files\Alwil Software No Context: [15/08/2006|11:05] C:\Program Files\AMD No Context: [29/12/2008|14:56] C:\Program Files\Apple Software Update No Context: [15/03/2009|10:22] C:\Program Files\Bonjour No Context: [30/12/2006|14:34] C:\Program Files\Brother No Context: [17/06/2008|17:50] C:\Program Files\capb2i No Context: [22/12/2008|00:21] C:\Program Files\CCleaner No Context: [30/12/2006|14:34] C:\Program Files\Common Files No Context: [15/08/2006|10:46] C:\Program Files\ComPlus Applications No Context: [28/04/2007|17:49] C:\Program Files\Controle Parental No Context: [13/03/2007|21:56] C:\Program Files\CyberLink No Context: [23/02/2007|19:25] C:\Program Files\DiMAGE Viewer No Context: [13/03/2007|21:48] C:\Program Files\DivX No Context: [22/05/2009|20:32] C:\Program Files\Dofus No Context: [16/03/2009|20:39] C:\Program Files\Fichiers communs No Context: [22/05/2009|17:57] C:\Program Files\Fighters No Context: [03/11/2008|20:19] C:\Program Files\Gamenext No Context: [31/10/2008|11:35] C:\Program Files\GamesBar No Context: [25/01/2009|19:21] C:\Program Files\GeoplanGeospace No Context: [17/03/2009|20:40] C:\Program Files\Google No Context: [10/04/2009|17:42] C:\Program Files\Iminent No Context: [21/04/2009|20:21] C:\Program Files\InstallShield Installation Information No Context: [16/03/2009|20:59] C:\Program Files\Internet Explorer No Context: [08/04/2009|10:14] C:\Program Files\iPod No Context: [08/04/2009|10:16] C:\Program Files\iTunes No Context: [22/02/2009|13:37] C:\Program Files\Java No Context: [04/06/2007|10:24] C:\Program Files\K-Lite Codec Pack No Context: [12/03/2009|19:26] C:\Program Files\LimeWire No Context: [16/04/2007|15:24] C:\Program Files\LucasArts No Context: [06/05/2009|20:50] C:\Program Files\Malwarebytes' Anti-Malware No Context: [24/08/2008|11:15] C:\Program Files\Messenger No Context: [03/11/2008|18:55] C:\Program Files\Messenger Plus! Live No Context: [16/03/2009|20:53] C:\Program Files\Microsoft No Context: [06/01/2007|18:11] C:\Program Files\microsoft frontpage No Context: [06/01/2007|18:11] C:\Program Files\Microsoft Office No Context: [17/03/2009|09:12] C:\Program Files\Microsoft Silverlight No Context: [16/03/2009|20:56] C:\Program Files\Microsoft SQL Server Compact Edition No Context: [16/03/2009|20:57] C:\Program Files\Microsoft Sync Framework No Context: [08/06/2008|15:15] C:\Program Files\Movie Maker No Context: [09/07/2007|21:08] C:\Program Files\MSN No Context: [19/01/2007|19:32] C:\Program Files\MSN Apps No Context: [15/08/2006|10:46] C:\Program Files\MSN Gaming Zone No Context: [19/01/2007|20:03] C:\Program Files\MSN Toolbar No Context: [07/12/2008|19:55] C:\Program Files\MSXML 4.0 No Context: [15/08/2006|11:09] C:\Program Files\Multimedia Card Reader No Context: [08/06/2008|15:12] C:\Program Files\NetMeeting No Context: [03/11/2008|14:22] C:\Program Files\Oberon Media No Context: [15/08/2006|10:46] C:\Program Files\Online Services No Context: [01/08/2008|14:51] C:\Program Files\orange No Context: [08/06/2008|15:12] C:\Program Files\Outlook Express No Context: [15/03/2009|10:21] C:\Program Files\QuickTime No Context: [15/08/2006|11:03] C:\Program Files\Realtek No Context: [19/07/2007|18:35] C:\Program Files\SAGEM No Context: [30/12/2006|14:32] C:\Program Files\ScanSoft No Context: [23/02/2007|21:23] C:\Program Files\Services en ligne No Context: [22/06/2007|22:57] C:\Program Files\Sierra On-Line No Context: [11/04/2009|10:52] C:\Program Files\Spybot - Search & Destroy No Context: [20/12/2008|14:17] C:\Program Files\SUPERAntiSpyware No Context: [02/03/2007|12:38] C:\Program Files\test No Context: [07/06/2009|17:18] C:\Program Files\trend micro No Context: [15/08/2006|10:56] C:\Program Files\Uninstall Information No Context: [22/04/2007|15:07] C:\Program Files\VideoLAN No Context: [11/01/2009|19:29] C:\Program Files\Wakfu No Context: [07/06/2009|16:33] C:\Program Files\Wanadoo No Context: [13/03/2007|22:13] C:\Program Files\Webteh No Context: [24/03/2009|20:32] C:\Program Files\Windows Live No Context: [16/03/2009|20:53] C:\Program Files\Windows Live SkyDrive No Context: [07/01/2007|13:56] C:\Program Files\Windows Live Toolbar No Context: [03/05/2007|17:42] C:\Program Files\Windows Media Connect 2 No Context: [08/06/2008|15:12] C:\Program Files\Windows Media Player No Context: [08/06/2008|15:12] C:\Program Files\Windows NT No Context: [15/08/2006|10:48] C:\Program Files\WindowsUpdate No Context: [05/06/2008|17:39] C:\Program Files\WinRAR No Context: [15/08/2006|10:50] C:\Program Files\xerox No Context: [22/12/2008|00:22] C:\Program Files\Yahoo! No Context: [18/12/2008|18:53] C:\Program Files\Zone Labs No Context: [27/10/2008|08:55] C:\Program Files\Zylom Games No Context: --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs No Context: [25/06/2007|09:43] C:\Program Files\Fichiers communs\Adobe No Context: [08/04/2009|10:14] C:\Program Files\Fichiers communs\Apple No Context: [06/01/2007|18:13] C:\Program Files\Fichiers communs\Designer No Context: [30/12/2006|14:32] C:\Program Files\Fichiers communs\InstallShield No Context: [17/12/2007|11:09] C:\Program Files\Fichiers communs\Java No Context: [25/03/2007|17:09] C:\Program Files\Fichiers communs\Logitech No Context: [05/03/2009|20:01] C:\Program Files\Fichiers communs\Microsoft Shared No Context: [15/08/2006|10:47] C:\Program Files\Fichiers communs\MSSoap No Context: [17/04/2008|19:02] C:\Program Files\Fichiers communs\Oberon Media No Context: [15/08/2006|12:40] C:\Program Files\Fichiers communs\ODBC No Context: [30/12/2006|14:32] C:\Program Files\Fichiers communs\ScanSoft Shared No Context: [15/08/2006|10:47] C:\Program Files\Fichiers communs\Services No Context: [15/08/2006|12:40] C:\Program Files\Fichiers communs\SpeechEngines No Context: [08/06/2008|15:12] C:\Program Files\Fichiers communs\System No Context: [16/03/2009|20:39] C:\Program Files\Fichiers communs\Windows Live No Context: [01/03/2008|12:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller No Context: --------------------\\ Process No Context: ( 48 Processes ) No Context: ... OK ! No Context: --------------------\\ Recherche avec S_Lop No Context: Aucun fichier / dossier Lop trouvé ! No Context: No Context: --------------------\\ Recherche de Fichiers / Dossiers Lop No Context: Aucun fichier / dossier Lop trouvé ! No Context: No Context: --------------------\\ Verification du Registre No Context: No Context: ..... OK ! No Context: --------------------\\ Verification du fichier Hosts No Context: Fichier Hosts PROPRE No Context: --------------------\\ Recherche de fichiers avec Catchme No Context: No Context: catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net No Context: Rootkit scan 2009-06-07 17:46:42 No Context: Windows 5.1.2600 Service Pack 3 NTFS No Context: scanning hidden processes ... No Context: scanning hidden files ... No Context: scan completed successfully No Context: hidden processes: 0 No Context: hidden files: 20 No Context: No Context: --------------------\\ Recherche d'autres infections No Context: Aucune autre infection trouvée ! No Context: [F:41][D:4]-> C:\DOCUME~1\User\LOCALS~1\Temp No Context: [F:80][D:0]-> C:\DOCUME~1\User\Cookies No Context: [F:4104][D:8]-> C:\DOCUME~1\User\LOCALS~1\TEMPOR~1\content.IE5 No Context: 1 - "C:\Lop SD\LopR_1.txt" - 07/06/2009|17:37 - Option : [1] No Context: 2 - "C:\Lop SD\LopR_2.txt" - 07/06/2009|17:47 - Option : [2] No Context: --------------------\\ Fin du rapport a 17:47:51 -=End Of File=-

VOICI LE DERNIER RAPPORT --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3400+ ) BIOS : Default System BIOS USER : User ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090415-0] 4.8.1335 (Not Activated) Firewall : ZoneAlarm Firewall 7.0.483.000 (Not Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:149 Go (Free:112 Go) D:\ (CD or DVD) E:\ (CD or DVD) G:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) K:\ (USB) - FAT32 - Total:952 Mo (Free:0 Go) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 07/06/2009|17:33 ) --------------------\\ Listing des dossiers dans APPLIC~1 [04/02/2009|18:32] C:\DOCUME~1\-MARIE~1\APPLIC~1\Adobe [18/01/2009|12:35] C:\DOCUME~1\-MARIE~1\APPLIC~1\Identities [18/01/2009|16:38] C:\DOCUME~1\-MARIE~1\APPLIC~1\Microsoft [15/08/2006|10:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [15/03/2009|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3} [08/04/2009|10:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [25/06/2007|09:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [29/12/2008|14:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [29/12/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [30/12/2006|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother [15/04/2009|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters [01/08/2008|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo [14/03/2009|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [30/12/2006|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [20/09/2007|19:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier [22/12/2008|01:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [12/05/2008|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [16/03/2009|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [26/11/2006|17:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles [03/11/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst [25/03/2007|16:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime [30/12/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft [30/05/2009|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [18/12/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com [03/11/2008|14:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP [15/08/2006|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [06/01/2007|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar [01/03/2008|12:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [29/12/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion [15/12/2007|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom [15/08/2006|10:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [18/05/2007|14:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [31/01/2009|10:58] C:\DOCUME~1\M@rTin\APPLIC~1\Adobe [14/03/2009|12:46] C:\DOCUME~1\M@rTin\APPLIC~1\Apple Computer [14/03/2009|12:42] C:\DOCUME~1\M@rTin\APPLIC~1\Google [18/01/2009|16:28] C:\DOCUME~1\M@rTin\APPLIC~1\Identities [31/01/2009|10:58] C:\DOCUME~1\M@rTin\APPLIC~1\Macromedia [28/03/2009|12:18] C:\DOCUME~1\M@rTin\APPLIC~1\Microsoft [25/02/2009|15:40] C:\DOCUME~1\M@rTin\APPLIC~1\ScanSoft [31/01/2009|11:03] C:\DOCUME~1\M@rTin\APPLIC~1\WinRAR [07/02/2007|18:40] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [23/06/2008|20:12] C:\DOCUME~1\User\APPLIC~1\Adobe [28/08/2007|17:31] C:\DOCUME~1\User\APPLIC~1\AdobeUM [23/03/2009|16:58] C:\DOCUME~1\User\APPLIC~1\Apple Computer [04/01/2007|12:30] C:\DOCUME~1\User\APPLIC~1\Brother [26/11/2006|17:20] C:\DOCUME~1\User\APPLIC~1\CyberLink [24/12/2006|14:44] C:\DOCUME~1\User\APPLIC~1\DIMAGE [30/07/2008|17:04] C:\DOCUME~1\User\APPLIC~1\dvdcss [23/03/2009|18:24] C:\DOCUME~1\User\APPLIC~1\FUJIFILM [07/09/2008|16:33] C:\DOCUME~1\User\APPLIC~1\Gamelab [18/12/2006|11:22] C:\DOCUME~1\User\APPLIC~1\Google [17/02/2007|22:58] C:\DOCUME~1\User\APPLIC~1\Help [24/05/2008|19:17] C:\DOCUME~1\User\APPLIC~1\Identities [03/05/2009|16:59] C:\DOCUME~1\User\APPLIC~1\LimeWire [23/12/2006|20:08] C:\DOCUME~1\User\APPLIC~1\Macromedia [22/12/2008|01:44] C:\DOCUME~1\User\APPLIC~1\Malwarebytes [04/06/2007|10:25] C:\DOCUME~1\User\APPLIC~1\Media Player Classic [17/03/2009|09:31] C:\DOCUME~1\User\APPLIC~1\Microsoft [06/01/2007|18:11] C:\DOCUME~1\User\APPLIC~1\Microsoft Web Folders [06/01/2007|18:26] C:\DOCUME~1\User\APPLIC~1\MSNInstaller [03/11/2008|14:24] C:\DOCUME~1\User\APPLIC~1\PlayFirst [18/05/2008|12:16] C:\DOCUME~1\User\APPLIC~1\ScanSoft [03/06/2008|18:37] C:\DOCUME~1\User\APPLIC~1\Sun [26/10/2008|16:08] C:\DOCUME~1\User\APPLIC~1\Uniblue [13/03/2007|21:46] C:\DOCUME~1\User\APPLIC~1\vlc [06/06/2008|20:00] C:\DOCUME~1\User\APPLIC~1\WinRAR [26/10/2008|13:15] C:\DOCUME~1\User\APPLIC~1\Zylom --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [12/05/2009 18:19][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [07/06/2009 13:00][--a------] C:\WINDOWS\tasks\xzbzzezc.job [07/06/2009 12:41][--ah-----] C:\WINDOWS\tasks\SA.DAT [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [25/06/2007|09:41] C:\Program Files\Adobe [07/02/2007|19:48] C:\Program Files\Alwil Software [15/08/2006|11:05] C:\Program Files\AMD [29/12/2008|14:56] C:\Program Files\Apple Software Update [15/03/2009|10:22] C:\Program Files\Bonjour [30/12/2006|14:34] C:\Program Files\Brother [17/06/2008|17:50] C:\Program Files\capb2i [22/12/2008|00:21] C:\Program Files\CCleaner [03/11/2008|18:55] C:\Program Files\Circle Developement [30/12/2006|14:34] C:\Program Files\Common Files [15/08/2006|10:46] C:\Program Files\ComPlus Applications [28/04/2007|17:49] C:\Program Files\Controle Parental [13/03/2007|21:56] C:\Program Files\CyberLink [23/02/2007|19:25] C:\Program Files\DiMAGE Viewer [13/03/2007|21:48] C:\Program Files\DivX [22/05/2009|20:32] C:\Program Files\Dofus [16/03/2009|20:39] C:\Program Files\Fichiers communs [22/05/2009|17:57] C:\Program Files\Fighters [03/11/2008|20:19] C:\Program Files\Gamenext [31/10/2008|11:35] C:\Program Files\GamesBar [25/01/2009|19:21] C:\Program Files\GeoplanGeospace [17/03/2009|20:40] C:\Program Files\Google [10/04/2009|17:42] C:\Program Files\Iminent [21/04/2009|20:21] C:\Program Files\InstallShield Installation Information [16/03/2009|20:59] C:\Program Files\Internet Explorer [08/04/2009|10:14] C:\Program Files\iPod [08/04/2009|10:16] C:\Program Files\iTunes [22/02/2009|13:37] C:\Program Files\Java [04/06/2007|10:24] C:\Program Files\K-Lite Codec Pack [12/03/2009|19:26] C:\Program Files\LimeWire [16/04/2007|15:24] C:\Program Files\LucasArts [06/05/2009|20:50] C:\Program Files\Malwarebytes' Anti-Malware [24/08/2008|11:15] C:\Program Files\Messenger [03/11/2008|18:55] C:\Program Files\Messenger Plus! Live [16/03/2009|20:53] C:\Program Files\Microsoft [06/01/2007|18:11] C:\Program Files\microsoft frontpage [06/01/2007|18:11] C:\Program Files\Microsoft Office [17/03/2009|09:12] C:\Program Files\Microsoft Silverlight [16/03/2009|20:56] C:\Program Files\Microsoft SQL Server Compact Edition [16/03/2009|20:57] C:\Program Files\Microsoft Sync Framework [08/06/2008|15:15] C:\Program Files\Movie Maker [09/07/2007|21:08] C:\Program Files\MSN [19/01/2007|19:32] C:\Program Files\MSN Apps [15/08/2006|10:46] C:\Program Files\MSN Gaming Zone [19/01/2007|20:03] C:\Program Files\MSN Toolbar [07/12/2008|19:55] C:\Program Files\MSXML 4.0 [15/08/2006|11:09] C:\Program Files\Multimedia Card Reader [08/06/2008|15:12] C:\Program Files\NetMeeting [03/11/2008|14:22] C:\Program Files\Oberon Media [15/08/2006|10:46] C:\Program Files\Online Services [01/08/2008|14:51] C:\Program Files\orange [08/06/2008|15:12] C:\Program Files\Outlook Express [15/03/2009|10:21] C:\Program Files\QuickTime [15/08/2006|11:03] C:\Program Files\Realtek [19/07/2007|18:35] C:\Program Files\SAGEM [30/12/2006|14:32] C:\Program Files\ScanSoft [23/02/2007|21:23] C:\Program Files\Services en ligne [22/06/2007|22:57] C:\Program Files\Sierra On-Line [11/04/2009|10:52] C:\Program Files\Spybot - Search & Destroy [20/12/2008|14:17] C:\Program Files\SUPERAntiSpyware [02/03/2007|12:38] C:\Program Files\test [07/06/2009|17:18] C:\Program Files\trend micro [15/08/2006|10:56] C:\Program Files\Uninstall Information [22/04/2007|15:07] C:\Program Files\VideoLAN [11/01/2009|19:29] C:\Program Files\Wakfu [07/06/2009|16:33] C:\Program Files\Wanadoo [13/03/2007|22:13] C:\Program Files\Webteh [24/03/2009|20:32] C:\Program Files\Windows Live [16/03/2009|20:53] C:\Program Files\Windows Live SkyDrive [07/01/2007|13:56] C:\Program Files\Windows Live Toolbar [03/05/2007|17:42] C:\Program Files\Windows Media Connect 2 [08/06/2008|15:12] C:\Program Files\Windows Media Player [08/06/2008|15:12] C:\Program Files\Windows NT [15/08/2006|10:48] C:\Program Files\WindowsUpdate [05/06/2008|17:39] C:\Program Files\WinRAR [15/08/2006|10:50] C:\Program Files\xerox [22/12/2008|00:22] C:\Program Files\Yahoo! [18/12/2008|18:53] C:\Program Files\Zone Labs [27/10/2008|08:55] C:\Program Files\Zylom Games --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [25/06/2007|09:43] C:\Program Files\Fichiers communs\Adobe [08/04/2009|10:14] C:\Program Files\Fichiers communs\Apple [06/01/2007|18:13] C:\Program Files\Fichiers communs\Designer [30/12/2006|14:32] C:\Program Files\Fichiers communs\InstallShield [17/12/2007|11:09] C:\Program Files\Fichiers communs\Java [25/03/2007|17:09] C:\Program Files\Fichiers communs\Logitech [05/03/2009|20:01] C:\Program Files\Fichiers communs\Microsoft Shared [15/08/2006|10:47] C:\Program Files\Fichiers communs\MSSoap [17/04/2008|19:02] C:\Program Files\Fichiers communs\Oberon Media [15/08/2006|12:40] C:\Program Files\Fichiers communs\ODBC [30/12/2006|14:32] C:\Program Files\Fichiers communs\ScanSoft Shared [15/08/2006|10:47] C:\Program Files\Fichiers communs\Services [15/08/2006|12:40] C:\Program Files\Fichiers communs\SpeechEngines [08/06/2008|15:12] C:\Program Files\Fichiers communs\System [16/03/2009|20:39] C:\Program Files\Fichiers communs\Windows Live [01/03/2008|12:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller --------------------\\ Process ( 50 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop C:\Program Files\Circle Developement C:\DOCUME~1\User\Cookies\user@advertising[1].txt --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-07 17:35:42 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 20 --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [F:40][D:4]-> C:\DOCUME~1\User\LOCALS~1\Temp [F:81][D:0]-> C:\DOCUME~1\User\Cookies [F:4065][D:8]-> C:\DOCUME~1\User\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 07/06/2009|17:37 - Option : [1] --------------------\\ Fin du rapport a 17:37:16

JE PEUX SUPPRIMER LES AUTRES RAPPORTS?

voice les rapports RSIT 1ER RAPPORT info.txt logfile of random's system information tool 1.06 2009-06-07 17:18:39 ======Uninstall list====== -->MsiExec.exe /I{8A42F680-2DD6-11D4-9A8C-0040F6982C20} -->MsiExec.exe /I{A2529672-574A-4A99-86A5-C1770A0E31FE} -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7646-A70000000000} Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2} Athlon 64 Processor Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup Barre d'outils MSN-->C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\mtbs.exe c Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B} Brother MFL-Pro Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BB9AC6BF-71B6-42A4-9689-C17D9F44E79A}\Setup.exe" -l0x40c Brunin03.dllBrunin03.dll Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} Contrôle Parental-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{93094D10-9388-11D4-9886-0000B43F396D}\Setup.exe" -l0x40c DiMAGE Viewer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{976EA7B1-7562-483D-88DA-4323D263B7CD}\Setup.exe" -l0x40c anything Dofus 1.26.0-->C:\Program Files\Dofus\uninstall.exe Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF} GeoplanGeospace-->C:\Program Files\GeoplanGeospace\uninst.exe Gestionnaire Internet-->C:\PROGRA~1\Wanadoo\uninstall.exe Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D} iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3} Java 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF} Java 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050} Java 6 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060} Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3} K-Lite Codec Pack 3.1.0 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe" Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe" livebox-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17342E3B-0818-4A6F-BFF8-99476605ADD6}\Setup.exe" -l0x40c Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe" Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Office 2000 Professional-->MsiExec.exe /I{0001040C-78E1-11D2-B60F-006097C998E7} Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5} Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Multimedia Card Reader-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{07B02BD4-E799-4945-B240-166CA9A9BE2D} /l1036 Navigateur Orange-->C:\PROGRA~1\Wanadoo\Shell.exe inst\uninst_FTBrowser.shl NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} PaperPort-->MsiExec.exe /I{A17EABB6-D0C6-44E5-820C-72DC7F495064} PhotoFiltre-->"C:\Mes documents\Mes images\Mari£\PhotoFiltre\Uninst.exe" Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe" Pilote Webcam pour DiMAGE KONICA_MINOLTA-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99E67091-D392-4031-AD2A-E9547F3615F8}\setup.exe" -l0x40c Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F} Realtek High Definition Audio Driver-->RtlUpd.exe -r -m Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" Ultra Defragmenter-->"C:\WINDOWS\UltraDefrag\uninstall.exe" Utilitaires Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe Wakfu-->C:\Program Files\Wakfu\uninstall.exe Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52} Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919} Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657} Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C} Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353} Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe ======Hosts File====== 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com ======Security center information====== AV: avast! antivirus 4.8.1335 [VPS 090415-0] (disabled) (outdated) FW: ZoneAlarm Firewall (disabled) ======System event log====== Computer Name: USER-960DE02D0A Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant. Record Number: 7469 Source Name: Service Control Manager Time Written: 20090415183657.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: USER-960DE02D0A Event Code: 7036 Message: Le service Téléphonie est entré dans l'état : en cours d'exécution. Record Number: 7468 Source Name: Service Control Manager Time Written: 20090415183657.000000+120 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 6005 Message: Le service d'Enregistrement d'événement a démarré. Record Number: 7467 Source Name: EventLog Time Written: 20090415183343.000000+120 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 6009 Message: Microsoft ® Windows ® 5.01. 2600 Service Pack 3 Uniprocessor Free. Record Number: 7466 Source Name: EventLog Time Written: 20090415183343.000000+120 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 6006 Message: Le service d'Enregistrement d'événement a été arrêté. Record Number: 7465 Source Name: EventLog Time Written: 20090415172833.000000+120 Event Type: Informations User: =====Application event log===== Computer Name: USER-960DE02D0A Event Code: 103 Message: msnmsgr (2532) \\.\C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Messenger\larousse_marie@hotmail.fr\SharingMetadata\Working\database_72A0_1633_A015_FDF3\dfsr.db: Le moteur de base de données a arrêté une instance (0). Record Number: 1239 Source Name: ESENT Time Written: 20090221135747.000000+060 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 102 Message: msnmsgr (2532) \\.\C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Messenger\larousse_marie@hotmail.fr\SharingMetadata\Working\database_72A0_1633_A015_FDF3\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0). Record Number: 1238 Source Name: ESENT Time Written: 20090221135745.000000+060 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 100 Message: msnmsgr (2532) Le moteur de base de données 5.01.2600.5512 est démarré. Record Number: 1237 Source Name: ESENT Time Written: 20090221135745.000000+060 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 101 Message: msnmsgr (2532) Le moteur de base de données est arrêté. Record Number: 1236 Source Name: ESENT Time Written: 20090221134944.000000+060 Event Type: Informations User: Computer Name: USER-960DE02D0A Event Code: 103 Message: msnmsgr (2532) \\.\C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Messenger\larousse_marie@hotmail.fr\SharingMetadata\Working\database_72A0_1633_A015_FDF3\dfsr.db: Le moteur de base de données a arrêté une instance (0). Record Number: 1235 Source Name: ESENT Time Written: 20090221134944.000000+060 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;%NpmLib% "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 79 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=4f02 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "tvdumpflags"=8 "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip "NpmLib"=C:\VIRUSfighter\Bin -----------------EOF----------------- 2D RAPPORT Logfile of random's system information tool 1.06 (written by random/random) Run by User at 2009-06-07 17:18:12 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 115 GB (75%) free of 153 GB Total RAM: 447 MB (37% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:18:34, on 07/06/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Multimedia Card Reader\shwicon2k.exe C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe C:\Program Files\Brother\ControlCenter2\brctrcen.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\VIRUSfighter\Bin\Zanda.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\VIRUSfighter\Bin\ZLH.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Controle Parental\bin\optproxy.exe C:\PROGRA~1\Wanadoo\TaskBarIcon.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Wanadoo\GestionnaireInternet.exe C:\Program Files\Wanadoo\ComComp.exe C:\PROGRA~1\Wanadoo\Toaster.exe C:\PROGRA~1\Wanadoo\Inactivity.exe C:\PROGRA~1\Wanadoo\PollingModule.exe C:\Program Files\Wanadoo\Watch.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\Documents and Settings\User\Bureau\rsit.exe C:\Program Files\trend micro\User.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe O4 - HKLM\..\Run: [indexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Norman ZANDA] C:\VIRUSfighter\Bin\ZLH.EXE /LOAD /SPLASH O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU) O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/ O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clien...1.0/Rawflow.cab O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/a...gnerADP-1.0.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {C1029C96-C060-44EA-9752-502B62E6C8C4} (PGLoader Class) - http://www.myprogression.com/lms/501b2i/plugins/pgldr.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Norman ZANDA - Norman ASA - C:\VIRUSfighter\Bin\Zanda.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 12237 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\xzbzzezc.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}] Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-02-22 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-03-14 251504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-03-14 657904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}] MSNToolBandBHO - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}] Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2009-03-14 522224] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-02-22 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-02-22 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - MSN - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-03-14 251504] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-10-10 7286784] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-10-10 86016] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-04-17 16143872] "Sunkist2k"=C:\Program Files\Multimedia Card Reader\shwicon2k.exe [2005-08-25 139264] "SSBkgdUpdate"=C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2003-10-14 155648] "PaperPort PTD"=C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [2005-03-17 57393] "IndexSearch"=C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2005-03-17 40960] "ControlCenter2.0"=C:\Program Files\Brother\ControlCenter2\brctrcen.exe [2005-05-17 933888] "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000] "LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2005-07-19 221184] "WOOWATCH"=C:\PROGRA~1\Wanadoo\Watch.exe [2004-08-23 20480] "WOOTASKBARICON"=C:\PROGRA~1\Wanadoo\GestMaj.exe [2004-10-14 32768] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-02-22 136600] "ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-07-09 919016] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312] "Norman ZANDA"=C:\VIRUSfighter\Bin\ZLH.EXE [2008-06-02 273520] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "WOOKIT"=C:\PROGRA~1\Wanadoo\Shell.exe [2004-08-23 122880] C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Disabled:VLC media player" "C:\Program Files\Sierra On-Line\SIGSPat.exe"="C:\Program Files\Sierra On-Line\SIGSPat.exe:*:Enabled:SIGSPat" "C:\Program Files\Wanadoo\WOOBrowser\WOOBrowser.exe"="C:\Program Files\Wanadoo\WOOBrowser\WOOBrowser.exe:*:Enabled:Internet Explorer" "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\WINDOWS\system32\logonui.exe"="C:\WINDOWS\system32\logonui.exe:*:Enabled:logonui" "C:\WINDOWS\system32\winlogon.exe"="C:\WINDOWS\system32\winlogon.exe:*:Enabled:winlogon" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1947a0af-f298-11dc-a078-00138fc7be85}] shell\AutoRun\command - F:\launcher.exe ======List of files/folders created in the last 1 months====== 2009-06-07 17:18:13 ----D---- C:\Program Files\trend micro 2009-06-07 17:18:12 ----D---- C:\rsit 2009-06-07 12:41:36 ----A---- C:\ComboFix.txt 2009-06-07 12:35:57 ----A---- C:\Boot.bak 2009-06-07 12:35:50 ----RASHD---- C:\cmdcons ======List of files/folders modified in the last 1 months====== 2009-06-07 17:18:25 ----D---- C:\WINDOWS\Prefetch 2009-06-07 17:18:13 ----RD---- C:\Program Files 2009-06-07 16:41:36 ----D---- C:\WINDOWS 2009-06-07 16:33:54 ----D---- C:\Program Files\Wanadoo 2009-06-07 15:05:31 ----RD---- C:\Mes documents 2009-06-07 12:41:51 ----D---- C:\WINDOWS\Temp 2009-06-07 12:41:45 ----D---- C:\WINDOWS\system32 2009-06-07 12:41:45 ----D---- C:\Qoobox 2009-06-07 12:41:44 ----D---- C:\WINDOWS\system32\drivers 2009-06-07 12:38:53 ----A---- C:\WINDOWS\system.ini 2009-06-07 12:38:01 ----D---- C:\WINDOWS\system32\CatRoot2 2009-06-07 12:35:57 ----RASH---- C:\boot.ini 2009-06-07 12:35:21 ----D---- C:\WINDOWS\system32\LogFiles 2009-06-07 12:34:00 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-06-07 12:05:49 ----D---- C:\WINDOWS\Internet Logs 2009-05-30 22:33:25 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2009-05-28 19:54:47 ----SHD---- C:\WINDOWS\Installer 2009-05-22 20:32:49 ----D---- C:\Program Files\Dofus 2009-05-22 18:55:53 ----D---- C:\WINDOWS\Minidump 2009-05-22 18:55:53 ----D---- C:\WINDOWS\Debug 2009-05-22 17:57:19 ----D---- C:\Program Files\Fighters ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944] R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008] R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768] R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376] R1 KLIF;KLIF; C:\WINDOWS\system32\DRIVERS\klif.sys [2007-07-19 127768] R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2008-07-09 394952] R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560] R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032] R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152] R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192] R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-04-17 4262912] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-10-10 3530432] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-07-29 34048] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-07-29 12928] R3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS [] R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] R3 SunkFilt;Alcor Micro Corp Reader; \??\C:\WINDOWS\System32\Drivers\sunkfilt.sys [] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152] R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R4 catchme;catchme; \??\C:\DOCUME~1\User\LOCALS~1\Temp\catchme.sys [] S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\System32\Drivers\BrScnUsb.sys [2004-10-15 15295] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] S3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688] S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-01-31 22016] S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128] S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] S3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS [] S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2005-01-31 211712] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 ultradfg;ultradfg; C:\WINDOWS\System32\DRIVERS\ultradfg.sys [2008-11-13 24576] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-03-06 36864] S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424] R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680] R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888] R2 FTRTSVC;France Telecom Routing Table Service; C:\WINDOWS\System32\FTRTSVC.exe [2004-08-23 40960] R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-02-22 152984] R2 Norman ZANDA;Norman ZANDA; C:\VIRUSfighter\Bin\Zanda.exe [2008-04-23 408696] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-10-10 131139] R2 OPTENET_FILTER;Control Parental; C:\Program Files\Controle Parental\bin\optproxy.exe [2006-03-02 564400] R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512] R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168] S2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-12 57344] S2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-07-09 75304] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896] S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040] S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240] S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-14 137200] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] -----------------EOF-----------------

on désintalle ComboFix si c'est une version Obsolete?

J'ai bien lu les instruction de ComboFix, mais j'ai essayé d'autres solutions avant comme Malawares..mais comme je ne suis pas un spécialiste, je n'ai pas réussi à dévérouiller cette saleté de virus...habituellement, malheuresement peut être, je reformate mon disque dur... aujourd'hui, on essai une nouvelle méthode...c'est la premiere fois que je passe par un Forum..merci d'avance de ton aide, voici mon rapport: ComboFix 09-05-05.05 - User 07/06/2009 12:37.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.447.99 [GMT 2:00] Lancé depuis: c:\documents and settings\User\Bureau\combofix.exe AV: avast! antivirus 4.8.1335 [VPS 090415-0] *On-access scanning disabled* (Outdated) FW: ZoneAlarm Firewall *disabled* . - Mode FONCTIONNALITES REDUITES - . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\c.cgm . ((((((((((((((((((((((((((((( Fichiers créés du 2009-05-07 au 2009-06-07 )))))))))))))))))))))))))))))))))))) . Pas de nouveau fichier créé dans ce laps de temps . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-06-07 10:38 . 2008-12-18 17:07 18825248 --sha-w c:\windows\system32\drivers\fidbox.dat 2009-06-07 10:35 . 2007-04-28 15:58 -------- d-----w c:\program files\Wanadoo 2009-06-06 17:51 . 2008-12-18 17:07 220676 --sha-w c:\windows\system32\drivers\fidbox.idx 2009-05-22 18:32 . 2009-01-10 10:22 -------- d-----w c:\program files\Dofus 2009-05-22 15:57 . 2009-04-15 17:23 -------- d-----w c:\program files\Fighters 2009-05-11 16:10 . 2009-05-11 16:12 1772032 ----a-w c:\windows\Internet Logs\xDBA.tmp 2009-05-06 18:50 . 2008-12-21 23:44 -------- d-----w c:\program files\Malwarebytes' Anti-Malware 2009-04-25 18:00 . 2004-08-05 12:00 458980 ----a-w c:\windows\system32\perfh00C.dat 2009-04-25 18:00 . 2004-08-05 12:00 71836 ----a-w c:\windows\system32\perfc00C.dat 2009-04-21 18:21 . 2006-08-15 09:03 -------- d--h--w c:\program files\InstallShield Installation Information 2009-04-21 09:07 . 2009-04-21 15:46 1726464 ----a-w c:\windows\Internet Logs\xDB9.tmp 2009-04-17 17:53 . 2009-02-21 17:52 4189272 ----a-w c:\windows\Internet Logs\tvDebug.zip 2009-04-11 08:52 . 2008-05-01 10:26 -------- d-----w c:\program files\Spybot - Search & Destroy 2009-04-10 15:42 . 2009-03-20 18:00 -------- d-----w c:\program files\Iminent 2009-04-09 06:33 . 2009-04-09 15:34 421888 ----a-w c:\windows\Internet Logs\xDB8.tmp 2009-04-08 13:44 . 2009-04-08 18:35 1686016 ----a-w c:\windows\Internet Logs\xDB7.tmp 2009-04-06 13:32 . 2008-12-21 23:44 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys 2009-04-06 13:32 . 2008-12-21 23:44 15504 ----a-w c:\windows\system32\drivers\mbam.sys 2009-03-28 09:46 . 2009-02-25 13:39 21032 ----a-w c:\documents and settings\M@rTin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-03-21 10:55 . 2009-03-23 13:30 1653248 ----a-w c:\windows\Internet Logs\xDB6.tmp 2009-03-21 10:42 . 2009-03-23 13:30 1834496 ----a-w c:\windows\Internet Logs\xDB5.tmp 2009-03-19 14:32 . 2008-12-29 12:58 23400 ----a-w c:\windows\system32\drivers\GEARAspiWDM.sys 2009-03-16 19:25 . 2006-09-23 18:36 21032 ----a-w c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "WOOKIT"="c:\progra~1\Wanadoo\Shell.exe" [2004-08-23 122880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016] "Sunkist2k"="c:\program files\Multimedia Card Reader\shwicon2k.exe" [2005-08-25 139264] "SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648] "PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 57393] "IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 40960] "ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 933888] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000] "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184] "WOOWATCH"="c:\progra~1\Wanadoo\Watch.exe" [2004-08-23 20480] "WOOTASKBARICON"="c:\progra~1\Wanadoo\GestMaj.exe" [2004-10-14 32768] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-22 136600] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] "Norman ZANDA"="c:\virusfighter\Bin\ZLH.EXE" [2008-06-02 273520] "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2005-10-10 1519616] "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-04-17 16143872] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588] HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32 "wave1"= serwvdrv.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= "c:\\Program Files\\Sierra On-Line\\SIGSPat.exe"= "c:\\Program Files\\Wanadoo\\WOOBrowser\\WOOBrowser.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\WINDOWS\\system32\\logonui.exe"= "c:\\WINDOWS\\system32\\winlogon.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [11/04/2008 09:45 114768] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11/04/2008 09:45 20560] R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [16/03/2009 21:19 55152] R2 OPTENET_FILTER;Control Parental;c:\program files\Controle Parental\bin\optproxy.exe [28/04/2007 17:49 564400] R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [19/05/2009 11:36 240512] S3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360] S3 ultradfg;ultradfg;c:\windows\system32\drivers\ultradfg.sys [13/11/2008 11:52 24576] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1947a0af-f298-11dc-a078-00138fc7be85}] \Shell\AutoRun\command - F:\launcher.exe . Contenu du dossier 'Tâches planifiées' 2009-05-12 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{1D2244ED-BDAD-48E5-A183-3F00967DFE72} - (no file) BHO-{39445731-27D1-452E-8A4B-18C940187269} - (no file) BHO-{4584539e-2572-4460-bed5-2e8346f530d8} - (no file) BHO-{4DD61A7A-2FC2-4E82-92B1-B3B00DBC0F07} - (no file) BHO-{62F7A71B-FC67-4822-A684-FA4E271B565D} - (no file) BHO-{BD0DCA9A-9FE8-44F0-83DA-F3AFF22B6CE1} - (no file) BHO-{EF77C536-F484-46AA-B537-99BB47748CED} - (no file) BHO-{F21E5D7B-515D-4779-8746-90971ABFB812} - (no file) HKLM-Run-Secure System Restore - sysrest32.exe Notify-urqOFxXn - urqOFxXn.dll Notify-urqPgffd - (no file) SafeBoot-ati7owxx.sys . ------- Examen supplémentaire ------- . uDefault_Search_URL = hxxp://www.google.com/ie uInternet Connection Wizard,ShellNext = iexplore uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: { - c:\program files\Messenger\msmsgs.exe DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game03.zylom.com/activex/zylomgamesplayer.cab DPF: {C1029C96-C060-44EA-9752-502B62E6C8C4} - hxxp://www.myprogression.com/lms/501b2i/plugins/pgldr.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-07 12:38 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}\InprocServer32] @DACL=(02 0000) @="c:\\WINDOWS\\system32\\urqPgffd.dll" "ThreadingModel"="Both" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6DB063F1-DE9D-4C84-8620-23B0AFEEB39D}\InprocServer32] @DACL=(02 0000) @="c:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Internet Explorer\\DLLs\\ieModule.dll" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\Root\LEGACY_ATI7OWXX\0000] @DACL=(02 0000) "Service"="ati7owxx" "Legacy"=dword:00000001 "ConfigFlags"=dword:00000000 "Class"="LegacyDriver" "ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}" "DeviceDesc"="ati7owxx" "Capabilities"=dword:00000000 . Heure de fin: 2009-06-07 12:41 ComboFix-quarantined-files.txt 2009-06-07 10:41 Avant-CF: 120 033 599 488 octets libres Après-CF: 120 123 428 864 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect 175 --- E O F --- 2009-05-28 17:54

recherche un assistant qui puisse analyser mon rapport ComboFix je suis victime du virus Virtumonde depuis qque temps et je n'arrive pas à m'en débarasser.. si qqun peut m'aider, merci d'avance