

Fidiou
Membres-
Compteur de contenus
8 -
Inscription
-
Dernière visite
Fidiou's Achievements

Junior Member (3/12)
0
Réputation sur la communauté
-
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
Ok mais je pensais pas qui y'avait des virus dans les codecs franchement... Encore une fois merci à toi et sinon c quoi un log RSIT lol? -
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
RE, ça y est y m'a tout viré même si c'était super long lol. Un grand thanks à toi^^. Je t'envoi le rapport quand même, c'est super long donc j'envoie le lien au lieu de coller: Cijoint.fr - Service gratuit de dépôt de fichiers -
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
Re salut, je pensais pas que quand je téléchargé des brushes pour photoshop c'était des crack! Enfin, voilà le deuxième rapport: --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3500+ ) BIOS : Phoenix - Award BIOS v6.00PG USER : Compaq_Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1368 [VPS 100831-1] 4.8.1368 (Activated) C:\ (Local Disk) - NTFS - Total:180 Go (Free:10 Go) D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go) E:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go) F:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 30/09/2010|22:16 ) \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\BitDownload\Data Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertstream[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@d2.advertserve[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@imagevenue.advertserve[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adultfriendfinder[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertising[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@booking.db.advertising[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@bigpoint[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.darkorbit.bigpoint[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.deepolis.bigpoint[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.seafight.bigpoint[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@seafight.bigpoint[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.cotedazurpalace[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cotedazurpalace[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adopt.euroclick[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.pacificpoker[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@pacificpoker[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partygaming.122.2o7[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partypoker[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partypoker[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.32vegas[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@serve.32vegas[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@vegas-millions[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@www.32vegas[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@2xmoinscher[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cc.2xmoinscher[1].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@888poker[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@888[2].txt Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\Bitdownload Supprime! - C:\Program Files\Adverts - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans APPLIC~1 [13/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} [29/01/2010|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [28/01/2010|21:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM [06/12/2009|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [13/05/2007|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [09/11/2008|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk [01/06/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU [24/06/2009|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Boss Media [17/06/2008|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother [11/10/2006|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink [16/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Dillie-O Digital [19/04/2009|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier [09/09/2007|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Empyre Group [29/10/2009|11:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet [31/03/2010|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreeTest [06/10/2008|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [28/12/2007|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations [03/01/2005|06:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [10/09/2007|18:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak [23/09/2010|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [01/02/2010|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee [19/04/2009|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Megaupload [07/03/2010|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [30/01/2009|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application [06/06/2010|05:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [16/09/2010|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help [17/10/2007|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia [22/09/2010|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS [24/03/2010|22:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA Corporation [11/03/2007|03:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage [04/12/2006|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite [03/01/2005|05:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI [22/11/2008|21:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sports Interactive [10/05/2010|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sun [27/01/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec [24/02/2008|02:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\T6 [11/05/2008|15:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks [14/12/2006|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL [17/02/2009|05:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Video Converter Studio [01/10/2006|02:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [14/09/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar [06/11/2009|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller [14/03/2008|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [18/04/2010|16:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe [23/06/2009|16:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM [15/10/2006|13:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Ahead [13/11/2008|22:07] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer [21/01/2010|22:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ATI [13/01/2009|03:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Autodesk [01/06/2008|23:04] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AVS4YOU [26/11/2009|01:25] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Azureus [15/11/2009|19:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Bamboo Explore [22/11/2009|02:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Bamboo Scribe [18/04/2010|16:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\com.adobe.ExMan [26/03/2008|16:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ConvertTemp [11/10/2006|20:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\CyberLink [24/08/2008|17:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Datalayer [12/08/2007|19:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\DivX [24/01/2010|16:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Download Manager [19/04/2009|22:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EmailNotifier [23/12/2006|14:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EPSON [17/12/2009|21:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FFSJ [06/10/2008|12:06] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FileZilla [13/08/2009|20:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FotoWire [10/08/2008|07:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google [27/05/2009|17:45] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Graphisoft [01/10/2006|01:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HPQ [25/11/2004|05:26] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities [11/06/2008|13:58] C:\DOCUME~1\COMPAQ~1\APPLIC~1\InstallShield [07/10/2006|16:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\InterVideo [01/10/2006|11:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Jasc Software Inc [07/04/2007|11:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Leadertech [11/06/2008|14:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\LG Electronics [01/10/2006|00:07] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia [23/09/2010|19:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Malwarebytes [19/04/2009|22:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Megaupload [28/10/2008|14:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft [26/08/2008|10:26] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Mozilla [24/06/2007|19:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\NCH Swift Sound [04/12/2006|17:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Nokia [06/09/2007|20:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Notepad++ [02/10/2006|18:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Nullriver [04/12/2006|17:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PC Suite [01/10/2006|14:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Real [10/03/2010|23:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Samsung [02/07/2009|22:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Screenshot Sender [30/10/2007|22:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SecuROM [07/04/2007|11:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic [22/11/2008|21:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sports Interactive [07/10/2006|02:10] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun [18/11/2006|19:43] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Symantec [24/03/2010|23:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SystemRequirementsLab [25/08/2008|16:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SYSTRAN [05/10/2006|17:40] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Template [22/09/2010|17:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Temporary [22/04/2007|19:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TransRender [16/02/2008|18:37] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TVU networks [27/05/2008|22:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\vlc [19/11/2008|13:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\VoipBuster [15/11/2009|18:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Wacom [15/11/2009|18:56] C:\DOCUME~1\COMPAQ~1\APPLIC~1\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1 [30/09/2010|19:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\WTablet [14/11/2009|23:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\WTouch [25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities [15/11/2009|18:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia [16/03/2008|04:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [03/01/2005|06:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real [03/01/2005|06:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec [10/02/2010|19:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee [01/01/2008|19:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [24/09/2009|20:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla [06/10/2006|21:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec [10/06/2010|04:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\WTablet [03/01/2005|05:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [30/09/2010 21:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3922666444-2157879779-492519215-1008UA.job [30/09/2010 01:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3922666444-2157879779-492519215-1008Core.job [28/09/2010 10:01][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [30/09/2010 21:26][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job [30/09/2010 19:28][--ah-----] C:\WINDOWS\tasks\SA.DAT [05/08/2004 20:00][-rah-c---] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [01/09/2010|16:18] C:\Program Files\7-Zip [04/11/2007|19:29] C:\Program Files\ABBYY FineReader 6.0 Sprint [28/01/2010|21:46] C:\Program Files\Adobe [27/03/2010|18:11] C:\Program Files\Adobe CS4 [29/10/2009|11:07] C:\Program Files\Adobe Media Player [22/09/2010|23:26] C:\Program Files\Ad-Remover [30/09/2006|21:26] C:\Program Files\Ahead [02/01/2007|07:04] C:\Program Files\Alcohol Soft [09/02/2008|14:49] C:\Program Files\Alwil Software [24/08/2008|06:47] C:\Program Files\Anuman Interactive [13/11/2008|21:21] C:\Program Files\Apple Software Update [27/05/2009|16:20] C:\Program Files\ArchiCAD 10 nath [30/10/2008|01:17] C:\Program Files\AutoCAD 2008 [30/10/2008|00:20] C:\Program Files\Autodesk [06/02/2007|19:34] C:\Program Files\AviSynth 2.5 [06/10/2008|12:01] C:\Program Files\AVS4YOU [18/09/2008|18:04] C:\Program Files\Azureus [15/11/2009|18:55] C:\Program Files\Bamboo Dock [15/11/2009|19:21] C:\Program Files\Bamboo Explore [15/11/2009|19:24] C:\Program Files\Bamboo Scribe [23/09/2010|17:15] C:\Program Files\Betclic Poker.fr [17/06/2008|11:23] C:\Program Files\Brother [24/11/2004|03:37] C:\Program Files\ComPlus Applications [01/10/2006|15:53] C:\Program Files\CSO-DAX COMPILATOR [11/10/2006|21:27] C:\Program Files\CyberLink [04/12/2006|17:39] C:\Program Files\DIFX [03/02/2009|03:18] C:\Program Files\Dillie-O Digital [07/04/2009|16:26] C:\Program Files\DivX [10/03/2010|22:55] C:\Program Files\Dofus [20/11/2009|08:03] C:\Program Files\Driver-Soft [18/10/2007|21:33] C:\Program Files\EdenSoftware [06/03/2007|18:12] C:\Program Files\Elaborate Bytes [09/09/2007|12:47] C:\Program Files\Empyre Group [15/10/2009|05:58] C:\Program Files\eMule [10/03/2007|10:25] C:\Program Files\Enterbrain [24/07/2010|20:20] C:\Program Files\epson [16/10/2006|19:37] C:\Program Files\Escntl [30/04/2007|20:05] C:\Program Files\ffdshow [24/01/2010|16:47] C:\Program Files\Fichiers communs [11/06/2007|22:56] C:\Program Files\Free [16/09/2007|23:16] C:\Program Files\Free iPod Video Converter [11/10/2006|21:14] C:\Program Files\Free(2).fr [27/05/2008|22:13] C:\Program Files\Freeplayer [07/10/2008|13:07] C:\Program Files\Google [06/10/2008|12:08] C:\Program Files\GrabIt [29/12/2009|23:22] C:\Program Files\HandyBits [03/01/2005|06:14] C:\Program Files\Hewlett-Packard [10/12/2009|00:22] C:\Program Files\HomePlayer [03/01/2005|06:04] C:\Program Files\Hp [02/12/2006|17:45] C:\Program Files\Illustrate [10/03/2010|23:13] C:\Program Files\InstallShield Installation Information [13/08/2010|03:11] C:\Program Files\Internet Explorer [03/01/2005|06:04] C:\Program Files\InterVideo [13/11/2008|21:29] C:\Program Files\iPod [13/11/2008|21:30] C:\Program Files\iTunes [01/10/2006|11:27] C:\Program Files\Jasc Software Inc [08/09/2010|17:33] C:\Program Files\Java [09/05/2009|04:59] C:\Program Files\K-Lite Codec Pack [25/12/2006|18:05] C:\Program Files\KONAMI [07/12/2006|22:52] C:\Program Files\Konvertor [15/03/2010|20:40] C:\Program Files\Lavalys [23/01/2009|18:42] C:\Program Files\Lexmark 2600 Series [23/01/2009|18:01] C:\Program Files\Lexmark Toolbar [11/06/2008|14:01] C:\Program Files\LG Electronics [11/06/2008|14:00] C:\Program Files\LG PC Suite 2 [19/03/2010|18:15] C:\Program Files\LibUSB-Win32-0.1.10.1 [10/10/2008|13:34] C:\Program Files\LimeWire [13/08/2009|20:40] C:\Program Files\Logitech [17/07/2007|17:55] C:\Program Files\M3 GAME Manager [23/09/2010|19:12] C:\Program Files\Malwarebytes' Anti-Malware [02/01/2010|17:30] C:\Program Files\Megaupload [28/01/2010|08:21] C:\Program Files\Messenger [07/03/2010|00:18] C:\Program Files\Messenger Plus! Live [07/10/2006|16:39] C:\Program Files\MessengerPlus! 3 [07/04/2009|16:21] C:\Program Files\MeuhMeuhTV [06/11/2009|12:23] C:\Program Files\Microsoft [25/01/2007|08:35] C:\Program Files\Microsoft ActiveSync [18/11/2007|04:28] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [25/11/2004|05:27] C:\Program Files\microsoft frontpage [07/03/2007|13:29] C:\Program Files\Microsoft Office [30/09/2010|17:20] C:\Program Files\Microsoft Silverlight [14/03/2008|21:28] C:\Program Files\Microsoft SQL Server Compact Edition [25/01/2007|08:34] C:\Program Files\Microsoft Visual Studio [07/03/2007|13:22] C:\Program Files\Microsoft Visual Studio 8 [13/10/2009|03:11] C:\Program Files\Microsoft Works [07/03/2007|13:28] C:\Program Files\Microsoft.NET [08/02/2010|18:43] C:\Program Files\MicroStar [10/04/2009|21:31] C:\Program Files\MicroStar(2) [07/10/2006|12:07] C:\Program Files\Mirage-Team Decoder Pack [24/06/2007|20:09] C:\Program Files\mIRC [13/08/2010|03:05] C:\Program Files\Movie Maker [18/09/2010|17:21] C:\Program Files\Mozilla Firefox [02/12/2006|17:21] C:\Program Files\MP3 WAV Converter [11/11/2007|01:20] C:\Program Files\MSBuild [27/01/2010|23:36] C:\Program Files\msn [25/11/2004|05:27] C:\Program Files\MSN Gaming Zone [19/09/2007|19:29] C:\Program Files\MSN Messenger [18/11/2007|04:07] C:\Program Files\MSXML 4.0 [18/11/2007|04:27] C:\Program Files\MSXML 6.0 [07/04/2009|16:26] C:\Program Files\NCH Swift Sound [27/01/2010|23:28] C:\Program Files\NetMeeting [07/04/2009|16:19] C:\Program Files\Nokia [22/09/2010|18:44] C:\Program Files\NOS [31/08/2007|11:31] C:\Program Files\Notepad++ [28/12/2007|15:50] C:\Program Files\NSS [24/03/2010|23:26] C:\Program Files\NVIDIA Corporation [25/11/2004|05:27] C:\Program Files\Online Services [13/05/2010|04:42] C:\Program Files\Outlook Express [07/10/2007|15:11] C:\Program Files\PC-Doctor 5 for Windows [01/10/2006|20:57] C:\Program Files\Pinnacle [08/12/2009|14:39] C:\Program Files\PokerStars.NET [03/02/2007|17:28] C:\Program Files\PSP Brew [07/10/2007|15:11] C:\Program Files\pspvideo9 [18/10/2007|01:37] C:\Program Files\PSPWare [13/11/2008|21:25] C:\Program Files\QuickTime [03/01/2005|06:01] C:\Program Files\Real [04/10/2008|22:00] C:\Program Files\Red Kawa [11/11/2007|01:15] C:\Program Files\Reference Assemblies [16/12/2006|22:56] C:\Program Files\Samsung [03/01/2005|06:15] C:\Program Files\Services en ligne [19/03/2010|18:04] C:\Program Files\SixaxisDriver [10/08/2007|22:55] C:\Program Files\SlySoft [09/05/2009|04:56] C:\Program Files\Sonic [29/08/2009|14:41] C:\Program Files\SopCast [09/10/2008|17:32] C:\Program Files\Sun [27/01/2008|21:32] C:\Program Files\Symantec [24/03/2010|23:13] C:\Program Files\SystemRequirementsLab [17/06/2008|10:45] C:\Program Files\SYSTRAN [14/11/2009|23:53] C:\Program Files\Tablet [01/10/2006|00:03] C:\Program Files\TGTSoft [22/10/2008|14:41] C:\Program Files\themexp [24/09/2010|14:38] C:\Program Files\trend micro [16/02/2008|18:40] C:\Program Files\TVAnts [11/05/2008|15:06] C:\Program Files\TVUPlayer [24/11/2004|03:37] C:\Program Files\Uninstall Information [22/10/2008|14:42] C:\Program Files\vdownloader [01/10/2006|02:17] C:\Program Files\VideoLAN [12/08/2007|16:14] C:\Program Files\VirtualDub [15/09/2007|11:44] C:\Program Files\VoipBuster.com [09/06/2007|14:28] C:\Program Files\Warcraft III [05/06/2010|16:55] C:\Program Files\WinamaxPoker [28/09/2008|00:57] C:\Program Files\WinAVI MP4 Converter [06/10/2006|22:22] C:\Program Files\WinAVI Video Converter [06/11/2009|12:22] C:\Program Files\Windows Live [01/08/2009|23:41] C:\Program Files\Windows Live Safety Center [06/11/2009|12:17] C:\Program Files\Windows Live SkyDrive [07/10/2007|15:11] C:\Program Files\Windows Live Toolbar [15/12/2007|17:34] C:\Program Files\Windows Media Connect 2 [27/01/2010|23:28] C:\Program Files\Windows Media Player [27/01/2010|23:28] C:\Program Files\Windows NT [24/11/2004|03:37] C:\Program Files\WindowsUpdate [09/05/2009|04:55] C:\Program Files\Winnydows [05/10/2006|09:49] C:\Program Files\WinRAR [14/11/2009|23:53] C:\Program Files\WTouch [25/11/2004|05:28] C:\Program Files\xerox [30/03/2010|18:12] C:\Program Files\Yu-Gi-Oh Virtual Battle 5 [30/10/2007|22:38] C:\Program Files\Zero G Registry [29/09/2010|20:27] C:\Program Files\Zoom Player --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [27/03/2010|19:02] C:\Program Files\Fichiers communs\Adobe [15/11/2009|18:58] C:\Program Files\Fichiers communs\Adobe AIR [30/09/2006|21:26] C:\Program Files\Fichiers communs\Ahead [30/09/2010|21:28] C:\Program Files\Fichiers communs\Akamai [13/11/2008|21:24] C:\Program Files\Fichiers communs\Apple [30/10/2008|01:17] C:\Program Files\Fichiers communs\Autodesk Shared [01/06/2008|23:03] C:\Program Files\Fichiers communs\AVSMedia [30/10/2008|00:19] C:\Program Files\Fichiers communs\Designer [13/08/2009|20:30] C:\Program Files\Fichiers communs\FotoWire [17/06/2008|11:22] C:\Program Files\Fichiers communs\InstallShield [01/10/2006|11:27] C:\Program Files\Fichiers communs\Jasc Software Inc [08/09/2010|17:34] C:\Program Files\Fichiers communs\Java [25/01/2007|08:33] C:\Program Files\Fichiers communs\L&H [11/10/2006|21:23] C:\Program Files\Fichiers communs\Logitech [29/10/2009|10:43] C:\Program Files\Fichiers communs\Macrovision Shared [13/10/2009|03:13] C:\Program Files\Fichiers communs\Microsoft Shared [25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap [09/08/2007|05:30] C:\Program Files\Fichiers communs\Nullsoft [25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC [06/09/2008|22:31] C:\Program Files\Fichiers communs\Real [03/01/2005|06:03] C:\Program Files\Fichiers communs\Roxio Shared [01/02/2005|10:01] C:\Program Files\Fichiers communs\Services [03/01/2005|06:02] C:\Program Files\Fichiers communs\Sonic Shared [25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines [17/05/2007|00:48] C:\Program Files\Fichiers communs\SWF Studio [27/01/2008|21:34] C:\Program Files\Fichiers communs\Symantec Shared [27/01/2010|23:28] C:\Program Files\Fichiers communs\System [30/05/2007|14:47] C:\Program Files\Fichiers communs\Teknum Systems [03/01/2005|06:03] C:\Program Files\Fichiers communs\TiVo Shared [06/11/2009|12:10] C:\Program Files\Fichiers communs\Windows Live [14/03/2008|21:19] C:\Program Files\Fichiers communs\WindowsLiveInstaller [06/09/2008|22:32] C:\Program Files\Fichiers communs\xing shared --------------------\\ Process ( 77 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-09-30 22:17:37 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 253 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\COMPAQ~1\Application Data\Azureus\torrents\Football_Manager_2009_Crack_Patch_(Multi_language)-_Demonoid.com_-_5870895.6322 [mininova].torrent C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack01.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack02.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack03.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack04.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack05.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack06.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay001.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay002.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay003.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay004.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay005.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay006.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay007.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay008.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay009.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crackeffect_preview.png C:\DOCUME~1\COMPAQ~1\Bureau\Master collection CS4\CS4 KeyGen.exe C:\DOCUME~1\COMPAQ~1\Bureau\Nouveau dossier\CS4 KeyGen.exe C:\DOCUME~1\COMPAQ~1\Bureau\son wave\programme de base\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack C:\DOCUME~1\COMPAQ~1\Bureau\son wave\programme de base\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack\serial.txt C:\DOCUME~1\COMPAQ~1\Bureau\tout pour la psp\mp3willy\Kanye West-Late Registration-2005-Rns\Kanye_West-Late_Registration-2005-RNS\08-kanye_west-crack_music_(feat_the_game).mp3 C:\DOCUME~1\COMPAQ~1\Mes documents\Ma musique\DJ Khaled - Listennn... The Album - 2006\VA-Terror_Squad_Presents_DJ_Khaled-Listennn_(The_Album)-2006-GT4-(HHKingz.com)\-(HHKingz.com)--ITS THAT CRACK SON.nfo C:\DOCUME~1\COMPAQ~1\Mes documents\Ma musique\Kanye West-Late Registration-2005-Rns\Kanye_West-Late_Registration-2005-RNS\08-kanye_west-crack_music_(feat_the_game).mp3 [F:56][D:6]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp [F:1426][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies [F:194][D:4]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 30/09/2010|19:53 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 30/09/2010|22:39 - Option : [2] --------------------\\ Fin du rapport a 22:39:08 -
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
Re, voici les rapports: All processes killed Error: Unable to interpret <Go> in the current context! ========== FILES ========== c:\windows\system32\hoster folder moved successfully. File/Folder c:\windows\system32\rlvknlg.exe not found. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HKCU deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\Policies deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Compaq_Propriétaire ->Temp folder emptied: 3417818 bytes ->Temporary Internet Files folder emptied: 345618975 bytes ->Java cache emptied: 95971605 bytes ->FireFox cache emptied: 354782149 bytes ->Google Chrome cache emptied: 594288 bytes ->Flash cache emptied: 15090827 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->Flash cache emptied: 41044 bytes User: LocalService ->Temp folder emptied: 115884 bytes ->Temporary Internet Files folder emptied: 423280 bytes ->FireFox cache emptied: 1685718 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 2213764 bytes %systemdrive% .tmp files removed: 220172 bytes %systemroot% .tmp files removed: 39138 bytes %systemroot%\System32 .tmp files removed: 42767360 bytes %systemroot%\System32\dllcache .tmp files removed: 1197294 bytes %systemroot%\System32\drivers .tmp files removed: 8944 bytes Windows Temp folder emptied: 2174650 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 77572804 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 900,00 mb OTM by OldTimer - Version 3.1.16.1 log created on 09302010_191540 Files moved on Reboot... C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temp\IadHide4.dll moved successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Mozilla\Firefox\Profiles\6tspsivx.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Mozilla\Firefox\Profiles\6tspsivx.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Mozilla\Firefox\Profiles\6tspsivx.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Mozilla\Firefox\Profiles\6tspsivx.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Mozilla\Firefox\Profiles\6tspsivx.default\urlclassifier3.sqlite moved successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Mozilla\Firefox\Profiles\6tspsivx.default\XUL.mfl moved successfully. File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot. C:\WINDOWS\temp\Perflib_Perfdata_11c.dat moved successfully. File C:\WINDOWS\temp\Perflib_Perfdata_c88.dat not found! Registry entries deleted on Reboot... Et voici l'autre: --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3500+ ) BIOS : Phoenix - Award BIOS v6.00PG USER : Compaq_Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1368 [VPS 100831-1] 4.8.1368 (Activated) C:\ (Local Disk) - NTFS - Total:180 Go (Free:11 Go) D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go) E:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go) F:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 30/09/2010|19:34 ) --------------------\\ Listing des dossiers dans APPLIC~1 [13/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} [29/01/2010|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [28/01/2010|21:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM [06/12/2009|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [13/05/2007|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [09/11/2008|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk [01/06/2008|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU [24/06/2009|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Boss Media [17/06/2008|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother [11/10/2006|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink [16/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Dillie-O Digital [19/04/2009|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier [09/09/2007|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Empyre Group [29/10/2009|11:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet [31/03/2010|21:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreeTest [06/10/2008|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [28/12/2007|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations [03/01/2005|06:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [10/09/2007|18:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak [23/09/2010|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [01/02/2010|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee [19/04/2009|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Megaupload [07/03/2010|00:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [30/01/2009|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application [06/06/2010|05:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [16/09/2010|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help [17/10/2007|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia [22/09/2010|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS [24/03/2010|22:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA Corporation [11/03/2007|03:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage [04/12/2006|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite [03/01/2005|05:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI [22/11/2008|21:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sports Interactive [10/05/2010|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sun [27/01/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec [24/02/2008|02:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\T6 [11/05/2008|15:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks [14/12/2006|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL [17/02/2009|05:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Video Converter Studio [01/10/2006|02:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [14/09/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar [06/11/2009|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller [14/03/2008|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [18/04/2010|16:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe [23/06/2009|16:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM [15/10/2006|13:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Ahead [13/11/2008|22:07] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer [21/01/2010|22:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ATI [13/01/2009|03:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Autodesk [01/06/2008|23:04] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AVS4YOU [26/11/2009|01:25] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Azureus [15/11/2009|19:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Bamboo Explore [22/11/2009|02:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Bamboo Scribe [07/03/2007|00:02] C:\DOCUME~1\COMPAQ~1\APPLIC~1\BitDownload [18/04/2010|16:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\com.adobe.ExMan [26/03/2008|16:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ConvertTemp [11/10/2006|20:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\CyberLink [24/08/2008|17:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Datalayer [12/08/2007|19:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\DivX [24/01/2010|16:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Download Manager [19/04/2009|22:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EmailNotifier [23/12/2006|14:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\EPSON [17/12/2009|21:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FFSJ [06/10/2008|12:06] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FileZilla [13/08/2009|20:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FotoWire [10/08/2008|07:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google [27/05/2009|17:45] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Graphisoft [01/10/2006|01:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\HPQ [25/11/2004|05:26] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities [11/06/2008|13:58] C:\DOCUME~1\COMPAQ~1\APPLIC~1\InstallShield [07/10/2006|16:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\InterVideo [01/10/2006|11:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Jasc Software Inc [07/04/2007|11:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Leadertech [11/06/2008|14:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\LG Electronics [01/10/2006|00:07] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia [23/09/2010|19:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Malwarebytes [19/04/2009|22:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Megaupload [28/10/2008|14:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft [26/08/2008|10:26] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Mozilla [24/06/2007|19:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\NCH Swift Sound [04/12/2006|17:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Nokia [06/09/2007|20:22] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Notepad++ [02/10/2006|18:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Nullriver [04/12/2006|17:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\PC Suite [01/10/2006|14:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Real [10/03/2010|23:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Samsung [02/07/2009|22:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Screenshot Sender [30/10/2007|22:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SecuROM [07/04/2007|11:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic [22/11/2008|21:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sports Interactive [07/10/2006|02:10] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun [18/11/2006|19:43] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Symantec [24/03/2010|23:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SystemRequirementsLab [25/08/2008|16:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SYSTRAN [05/10/2006|17:40] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Template [22/09/2010|17:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Temporary [22/04/2007|19:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TransRender [16/02/2008|18:37] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TVU networks [27/05/2008|22:13] C:\DOCUME~1\COMPAQ~1\APPLIC~1\vlc [19/11/2008|13:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\VoipBuster [15/11/2009|18:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Wacom [15/11/2009|18:56] C:\DOCUME~1\COMPAQ~1\APPLIC~1\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1 [30/09/2010|19:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\WTablet [14/11/2009|23:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\WTouch [25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities [15/11/2009|18:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia [16/03/2008|04:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [03/01/2005|06:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real [03/01/2005|06:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec [10/02/2010|19:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee [01/01/2008|19:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [24/09/2009|20:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla [06/10/2006|21:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec [10/06/2010|04:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\WTablet [03/01/2005|05:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [30/09/2010 19:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3922666444-2157879779-492519215-1008UA.job [30/09/2010 01:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3922666444-2157879779-492519215-1008Core.job [28/09/2010 10:01][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [30/09/2010 19:26][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job [30/09/2010 19:28][--ah-----] C:\WINDOWS\tasks\SA.DAT [05/08/2004 20:00][-rah-c---] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [01/09/2010|16:18] C:\Program Files\7-Zip [04/11/2007|19:29] C:\Program Files\ABBYY FineReader 6.0 Sprint [28/01/2010|21:46] C:\Program Files\Adobe [27/03/2010|18:11] C:\Program Files\Adobe CS4 [29/10/2009|11:07] C:\Program Files\Adobe Media Player [22/09/2010|23:26] C:\Program Files\Ad-Remover [16/11/2007|16:07] C:\Program Files\Adverts [30/09/2006|21:26] C:\Program Files\Ahead [02/01/2007|07:04] C:\Program Files\Alcohol Soft [09/02/2008|14:49] C:\Program Files\Alwil Software [24/08/2008|06:47] C:\Program Files\Anuman Interactive [13/11/2008|21:21] C:\Program Files\Apple Software Update [27/05/2009|16:20] C:\Program Files\ArchiCAD 10 nath [30/10/2008|01:17] C:\Program Files\AutoCAD 2008 [30/10/2008|00:20] C:\Program Files\Autodesk [06/02/2007|19:34] C:\Program Files\AviSynth 2.5 [06/10/2008|12:01] C:\Program Files\AVS4YOU [18/09/2008|18:04] C:\Program Files\Azureus [15/11/2009|18:55] C:\Program Files\Bamboo Dock [15/11/2009|19:21] C:\Program Files\Bamboo Explore [15/11/2009|19:24] C:\Program Files\Bamboo Scribe [23/09/2010|17:15] C:\Program Files\Betclic Poker.fr [17/06/2008|11:23] C:\Program Files\Brother [24/11/2004|03:37] C:\Program Files\ComPlus Applications [01/10/2006|15:53] C:\Program Files\CSO-DAX COMPILATOR [11/10/2006|21:27] C:\Program Files\CyberLink [04/12/2006|17:39] C:\Program Files\DIFX [03/02/2009|03:18] C:\Program Files\Dillie-O Digital [07/04/2009|16:26] C:\Program Files\DivX [10/03/2010|22:55] C:\Program Files\Dofus [20/11/2009|08:03] C:\Program Files\Driver-Soft [18/10/2007|21:33] C:\Program Files\EdenSoftware [06/03/2007|18:12] C:\Program Files\Elaborate Bytes [09/09/2007|12:47] C:\Program Files\Empyre Group [15/10/2009|05:58] C:\Program Files\eMule [10/03/2007|10:25] C:\Program Files\Enterbrain [24/07/2010|20:20] C:\Program Files\epson [16/10/2006|19:37] C:\Program Files\Escntl [30/04/2007|20:05] C:\Program Files\ffdshow [24/01/2010|16:47] C:\Program Files\Fichiers communs [11/06/2007|22:56] C:\Program Files\Free [16/09/2007|23:16] C:\Program Files\Free iPod Video Converter [11/10/2006|21:14] C:\Program Files\Free(2).fr [27/05/2008|22:13] C:\Program Files\Freeplayer [07/10/2008|13:07] C:\Program Files\Google [06/10/2008|12:08] C:\Program Files\GrabIt [29/12/2009|23:22] C:\Program Files\HandyBits [03/01/2005|06:14] C:\Program Files\Hewlett-Packard [10/12/2009|00:22] C:\Program Files\HomePlayer [03/01/2005|06:04] C:\Program Files\Hp [02/12/2006|17:45] C:\Program Files\Illustrate [10/03/2010|23:13] C:\Program Files\InstallShield Installation Information [13/08/2010|03:11] C:\Program Files\Internet Explorer [03/01/2005|06:04] C:\Program Files\InterVideo [13/11/2008|21:29] C:\Program Files\iPod [13/11/2008|21:30] C:\Program Files\iTunes [01/10/2006|11:27] C:\Program Files\Jasc Software Inc [08/09/2010|17:33] C:\Program Files\Java [09/05/2009|04:59] C:\Program Files\K-Lite Codec Pack [25/12/2006|18:05] C:\Program Files\KONAMI [07/12/2006|22:52] C:\Program Files\Konvertor [15/03/2010|20:40] C:\Program Files\Lavalys [23/01/2009|18:42] C:\Program Files\Lexmark 2600 Series [23/01/2009|18:01] C:\Program Files\Lexmark Toolbar [11/06/2008|14:01] C:\Program Files\LG Electronics [11/06/2008|14:00] C:\Program Files\LG PC Suite 2 [19/03/2010|18:15] C:\Program Files\LibUSB-Win32-0.1.10.1 [10/10/2008|13:34] C:\Program Files\LimeWire [13/08/2009|20:40] C:\Program Files\Logitech [17/07/2007|17:55] C:\Program Files\M3 GAME Manager [23/09/2010|19:12] C:\Program Files\Malwarebytes' Anti-Malware [02/01/2010|17:30] C:\Program Files\Megaupload [28/01/2010|08:21] C:\Program Files\Messenger [07/03/2010|00:18] C:\Program Files\Messenger Plus! Live [07/10/2006|16:39] C:\Program Files\MessengerPlus! 3 [07/04/2009|16:21] C:\Program Files\MeuhMeuhTV [06/11/2009|12:23] C:\Program Files\Microsoft [25/01/2007|08:35] C:\Program Files\Microsoft ActiveSync [18/11/2007|04:28] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [25/11/2004|05:27] C:\Program Files\microsoft frontpage [07/03/2007|13:29] C:\Program Files\Microsoft Office [30/09/2010|17:20] C:\Program Files\Microsoft Silverlight [14/03/2008|21:28] C:\Program Files\Microsoft SQL Server Compact Edition [25/01/2007|08:34] C:\Program Files\Microsoft Visual Studio [07/03/2007|13:22] C:\Program Files\Microsoft Visual Studio 8 [13/10/2009|03:11] C:\Program Files\Microsoft Works [07/03/2007|13:28] C:\Program Files\Microsoft.NET [08/02/2010|18:43] C:\Program Files\MicroStar [10/04/2009|21:31] C:\Program Files\MicroStar(2) [07/10/2006|12:07] C:\Program Files\Mirage-Team Decoder Pack [24/06/2007|20:09] C:\Program Files\mIRC [13/08/2010|03:05] C:\Program Files\Movie Maker [18/09/2010|17:21] C:\Program Files\Mozilla Firefox [02/12/2006|17:21] C:\Program Files\MP3 WAV Converter [11/11/2007|01:20] C:\Program Files\MSBuild [27/01/2010|23:36] C:\Program Files\msn [25/11/2004|05:27] C:\Program Files\MSN Gaming Zone [19/09/2007|19:29] C:\Program Files\MSN Messenger [18/11/2007|04:07] C:\Program Files\MSXML 4.0 [18/11/2007|04:27] C:\Program Files\MSXML 6.0 [07/04/2009|16:26] C:\Program Files\NCH Swift Sound [27/01/2010|23:28] C:\Program Files\NetMeeting [07/04/2009|16:19] C:\Program Files\Nokia [22/09/2010|18:44] C:\Program Files\NOS [31/08/2007|11:31] C:\Program Files\Notepad++ [28/12/2007|15:50] C:\Program Files\NSS [24/03/2010|23:26] C:\Program Files\NVIDIA Corporation [25/11/2004|05:27] C:\Program Files\Online Services [13/05/2010|04:42] C:\Program Files\Outlook Express [07/10/2007|15:11] C:\Program Files\PC-Doctor 5 for Windows [01/10/2006|20:57] C:\Program Files\Pinnacle [08/12/2009|14:39] C:\Program Files\PokerStars.NET [03/02/2007|17:28] C:\Program Files\PSP Brew [07/10/2007|15:11] C:\Program Files\pspvideo9 [18/10/2007|01:37] C:\Program Files\PSPWare [13/11/2008|21:25] C:\Program Files\QuickTime [03/01/2005|06:01] C:\Program Files\Real [04/10/2008|22:00] C:\Program Files\Red Kawa [11/11/2007|01:15] C:\Program Files\Reference Assemblies [16/12/2006|22:56] C:\Program Files\Samsung [03/01/2005|06:15] C:\Program Files\Services en ligne [19/03/2010|18:04] C:\Program Files\SixaxisDriver [10/08/2007|22:55] C:\Program Files\SlySoft [09/05/2009|04:56] C:\Program Files\Sonic [29/08/2009|14:41] C:\Program Files\SopCast [09/10/2008|17:32] C:\Program Files\Sun [27/01/2008|21:32] C:\Program Files\Symantec [24/03/2010|23:13] C:\Program Files\SystemRequirementsLab [17/06/2008|10:45] C:\Program Files\SYSTRAN [14/11/2009|23:53] C:\Program Files\Tablet [01/10/2006|00:03] C:\Program Files\TGTSoft [22/10/2008|14:41] C:\Program Files\themexp [24/09/2010|14:38] C:\Program Files\trend micro [16/02/2008|18:40] C:\Program Files\TVAnts [11/05/2008|15:06] C:\Program Files\TVUPlayer [24/11/2004|03:37] C:\Program Files\Uninstall Information [22/10/2008|14:42] C:\Program Files\vdownloader [01/10/2006|02:17] C:\Program Files\VideoLAN [12/08/2007|16:14] C:\Program Files\VirtualDub [15/09/2007|11:44] C:\Program Files\VoipBuster.com [09/06/2007|14:28] C:\Program Files\Warcraft III [05/06/2010|16:55] C:\Program Files\WinamaxPoker [28/09/2008|00:57] C:\Program Files\WinAVI MP4 Converter [06/10/2006|22:22] C:\Program Files\WinAVI Video Converter [06/11/2009|12:22] C:\Program Files\Windows Live [01/08/2009|23:41] C:\Program Files\Windows Live Safety Center [06/11/2009|12:17] C:\Program Files\Windows Live SkyDrive [07/10/2007|15:11] C:\Program Files\Windows Live Toolbar [15/12/2007|17:34] C:\Program Files\Windows Media Connect 2 [27/01/2010|23:28] C:\Program Files\Windows Media Player [27/01/2010|23:28] C:\Program Files\Windows NT [24/11/2004|03:37] C:\Program Files\WindowsUpdate [09/05/2009|04:55] C:\Program Files\Winnydows [05/10/2006|09:49] C:\Program Files\WinRAR [14/11/2009|23:53] C:\Program Files\WTouch [25/11/2004|05:28] C:\Program Files\xerox [30/03/2010|18:12] C:\Program Files\Yu-Gi-Oh Virtual Battle 5 [30/10/2007|22:38] C:\Program Files\Zero G Registry [29/09/2010|20:27] C:\Program Files\Zoom Player --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [27/03/2010|19:02] C:\Program Files\Fichiers communs\Adobe [15/11/2009|18:58] C:\Program Files\Fichiers communs\Adobe AIR [30/09/2006|21:26] C:\Program Files\Fichiers communs\Ahead [30/09/2010|19:28] C:\Program Files\Fichiers communs\Akamai [13/11/2008|21:24] C:\Program Files\Fichiers communs\Apple [30/10/2008|01:17] C:\Program Files\Fichiers communs\Autodesk Shared [01/06/2008|23:03] C:\Program Files\Fichiers communs\AVSMedia [30/10/2008|00:19] C:\Program Files\Fichiers communs\Designer [13/08/2009|20:30] C:\Program Files\Fichiers communs\FotoWire [17/06/2008|11:22] C:\Program Files\Fichiers communs\InstallShield [01/10/2006|11:27] C:\Program Files\Fichiers communs\Jasc Software Inc [08/09/2010|17:34] C:\Program Files\Fichiers communs\Java [25/01/2007|08:33] C:\Program Files\Fichiers communs\L&H [11/10/2006|21:23] C:\Program Files\Fichiers communs\Logitech [29/10/2009|10:43] C:\Program Files\Fichiers communs\Macrovision Shared [13/10/2009|03:13] C:\Program Files\Fichiers communs\Microsoft Shared [25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap [09/08/2007|05:30] C:\Program Files\Fichiers communs\Nullsoft [25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC [06/09/2008|22:31] C:\Program Files\Fichiers communs\Real [03/01/2005|06:03] C:\Program Files\Fichiers communs\Roxio Shared [01/02/2005|10:01] C:\Program Files\Fichiers communs\Services [03/01/2005|06:02] C:\Program Files\Fichiers communs\Sonic Shared [25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines [17/05/2007|00:48] C:\Program Files\Fichiers communs\SWF Studio [27/01/2008|21:34] C:\Program Files\Fichiers communs\Symantec Shared [27/01/2010|23:28] C:\Program Files\Fichiers communs\System [30/05/2007|14:47] C:\Program Files\Fichiers communs\Teknum Systems [03/01/2005|06:03] C:\Program Files\Fichiers communs\TiVo Shared [06/11/2009|12:10] C:\Program Files\Fichiers communs\Windows Live [14/03/2008|21:19] C:\Program Files\Fichiers communs\WindowsLiveInstaller [06/09/2008|22:32] C:\Program Files\Fichiers communs\xing shared --------------------\\ Process ( 75 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop C:\DOCUME~1\COMPAQ~1\APPLIC~1\Bitdownload C:\Program Files\Adverts C:\DOCUME~1\COMPAQ~1\APPLIC~1\BitDownload C:\DOCUME~1\COMPAQ~1\APPLIC~1\BitDownload\Data C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertstream[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@d2.advertserve[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@imagevenue.advertserve[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adultfriendfinder[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@advertising[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@booking.db.advertising[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@bigpoint[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.darkorbit.bigpoint[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.deepolis.bigpoint[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.seafight.bigpoint[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@seafight.bigpoint[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.cotedazurpalace[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cotedazurpalace[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@adopt.euroclick[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.pacificpoker[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@pacificpoker[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partygaming.122.2o7[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partypoker[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@partypoker[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@fr.seafight.bigpoint[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@seafight.bigpoint[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.32vegas[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@serve.32vegas[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@vegas-millions[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@www.32vegas[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@2xmoinscher[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cc.2xmoinscher[1].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@888poker[2].txt C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@888[2].txt --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts MODIFIE 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 127.0.0.1 cdn.errorsafe.com ## added by CiD 127.0.0.1 cdn.winsoftware.com ## added by CiD 127.0.0.1 de.errorsafe.com ## added by CiD 127.0.0.1 de.winantivirus.com ## added by CiD 127.0.0.1 download.cdn.drivecleaner.com ## added by CiD 127.0.0.1 download.cdn.errorsafe.com ## added by CiD 127.0.0.1 download.cdn.winsoftware.com ## added by CiD 127.0.0.1 download.errorsafe.com ## added by CiD 127.0.0.1 download.systemdoctor.com ## added by CiD 127.0.0.1 download.winantispyware.com ## added by CiD 127.0.0.1 download.windrivecleaner.com ## added by CiD 127.0.0.1 download.winfixer.com ## added by CiD 127.0.0.1 drivecleaner.com ## added by CiD 127.0.0.1 dynamique.drivecleaner.com ## added by CiD 127.0.0.1 errorprotector.com ## added by CiD 127.0.0.1 errorsafe.com ## added by CiD 127.0.0.1 es.winantivirus.com ## added by CiD 127.0.0.1 fr.winantivirus.com ## added by CiD 127.0.0.1 fr.winfixer.com ## added by CiD 127.0.0.1 go.drivecleaner.com ## added by CiD 127.0.0.1 go.errorsafe.com ## added by CiD 127.0.0.1 go.winantispyware.com ## added by CiD 127.0.0.1 go.winantivirus.com ## added by CiD 127.0.0.1 hk.winantivirus.com ## added by CiD 127.0.0.1 instlog.errorsafe.com ## added by CiD 127.0.0.1 instlog.winantivirus.com ## added by CiD 127.0.0.1 instlog.winfixer.com ## added by CiD 127.0.0.1 jsp.drivecleaner.com ## added by CiD 127.0.0.1 kb.errorsafe.com ## added by CiD 127.0.0.1 kb.winantivirus.com ## added by CiD 127.0.0.1 nl.errorsafe.com ## added by CiD 127.0.0.1 se.errorsafe.com ## added by CiD 127.0.0.1 secure.drivecleaner.com ## added by CiD 127.0.0.1 secure.errorsafe.com ## added by CiD 127.0.0.1 secure.winantispam.com ## added by CiD 127.0.0.1 secure.winantispy.com ## added by CiD 127.0.0.1 secure.winantivirus.com ## added by CiD 127.0.0.1 support.winantivirus.com ## added by CiD 127.0.0.1 trial.updates.winsoftware.com ## added by CiD 127.0.0.1 ulog.winantivirus.com ## added by CiD 127.0.0.1 utils.errorsafe.com ## added by CiD 127.0.0.1 utils.winantivirus.com ## added by CiD 127.0.0.1 utils.winfixer.com ## added by CiD 127.0.0.1 winantispyware.com ## added by CiD 127.0.0.1 winantivirus.com ## added by CiD 127.0.0.1 winfixer.com ## added by CiD 127.0.0.1 winfixer2006.com ## added by CiD 127.0.0.1 winsoftware.com ## added by CiD 127.0.0.1 www.drivecleaner.com ## added by CiD 127.0.0.1 www.errorprotector.com ## added by CiD 127.0.0.1 www.errorsafe.com ## added by CiD 127.0.0.1 www.systemdoctor.com ## added by CiD 127.0.0.1 www.utils.winfixer.com ## added by CiD 127.0.0.1 www.win-anti-virus-pro.com ## added by CiD 127.0.0.1 www.win-virus-pro.com ## added by CiD 127.0.0.1 www.winantispam.com ## added by CiD 127.0.0.1 www.winantispy.com ## added by CiD 127.0.0.1 www.winantispyware.com ## added by CiD 127.0.0.1 www.winantivirus.com ## added by CiD 127.0.0.1 www.winantiviruspro.com ## added by CiD 127.0.0.1 www.windrivecleaner.com ## added by CiD 127.0.0.1 www.windrivesafe.com ## added by CiD 127.0.0.1 www.winfixer.com ## added by CiD 127.0.0.1 www.winfixer2006.com ## added by CiD 127.0.0.1 www.winsoftware.com ## added by CiD -> 73 [ 70 ## added by CiD ] --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-09-30 19:36:03 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 253 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\COMPAQ~1\Application Data\Azureus\torrents\Football_Manager_2009_Crack_Patch_(Multi_language)-_Demonoid.com_-_5870895.6322 [mininova].torrent C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack01.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack02.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack03.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack04.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack05.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crack06.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay001.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay002.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay003.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay004.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay005.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay006.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay007.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay008.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\CrackDecay009.jpg C:\DOCUME~1\COMPAQ~1\Bureau\brushes\crackeffect_preview.png C:\DOCUME~1\COMPAQ~1\Bureau\Master collection CS4\CS4 KeyGen.exe C:\DOCUME~1\COMPAQ~1\Bureau\Nouveau dossier\CS4 KeyGen.exe C:\DOCUME~1\COMPAQ~1\Bureau\son wave\programme de base\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack C:\DOCUME~1\COMPAQ~1\Bureau\son wave\programme de base\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack\serial.txt C:\DOCUME~1\COMPAQ~1\Bureau\tout pour la psp\mp3willy\Kanye West-Late Registration-2005-Rns\Kanye_West-Late_Registration-2005-RNS\08-kanye_west-crack_music_(feat_the_game).mp3 C:\DOCUME~1\COMPAQ~1\Mes documents\Ma musique\DJ Khaled - Listennn... The Album - 2006\VA-Terror_Squad_Presents_DJ_Khaled-Listennn_(The_Album)-2006-GT4-(HHKingz.com)\-(HHKingz.com)--ITS THAT CRACK SON.nfo C:\DOCUME~1\COMPAQ~1\Mes documents\Ma musique\Kanye West-Late Registration-2005-Rns\Kanye_West-Late_Registration-2005-RNS\08-kanye_west-crack_music_(feat_the_game).mp3 [F:25][D:4]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp [F:1452][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies [F:9][D:4]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 30/09/2010|19:53 - Option : [1] --------------------\\ Fin du rapport a 19:53:50 -
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
Re, bin même si j'avais rien de bien méchant, j'ai l'impression que l'ordi est plus rapide qu'avant sur certaines opérations et notamment au démarrage donc thanks^^. Sinon pour les cracks c'est étonnant car j'en utilise pas tant que ça, juste deux 3 programmes pas plus, donc je trouve ça bizzard. Merci de ton aide, voilà les 2 lien: Cijoint.fr - Service gratuit de dépôt de fichiers Cijoint.fr - Service gratuit de dépôt de fichiers -
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
This log file is located at C:\rkill.log. Please post this only if requested to by the person helping you. Otherwise you can close this log when you wish. Ran as Compaq_Propri‚taire on 23/09/2010 at 19:02:29. Services Stopped: Processes terminated by Rkill or while it was running: C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\Documents and Settings\Compaq_Propriétaire\Bureau\rkill.exe Rkill completed on 23/09/2010 at 19:02:32. 2ème: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4676 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 23/09/2010 23:59:52 mbam-log-2010-09-23 (23-59-52).txt Type d'examen: Examen complet (C:\|D:\|K:\|) Elément(s) analysé(s): 588027 Temps écoulé: 4 heure(s), 41 minute(s), 9 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 6 Valeur(s) du Registre infectée(s): 3 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 11 Fichier(s) infecté(s): 9 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{10e0obo6-5ux8-70e2-lt0b-tb0nq1340ix4} (Backdoor.Bot) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntiVirus) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\new.net (Adware.NewDotNet) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenU) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\IST (Adware.ISTBar) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE (Adware.OneStepSearch) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\mysearchnow.com (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\www.mysearchnow.com (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tok-cirrhatus (Worm.Brontok) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): C:\Program Files\NewDotNet (Adware.NewDotNet) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-19 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-20 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-21 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-23 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-24 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-25 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-26 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-27 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-8 (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Bron.tok-17-9 (Worm.Brontok) -> Quarantined and deleted successfully. Fichier(s) infecté(s): C:\Program Files\eMule\Incoming\Clone CD & DVD versions + Serials + Keygens\CloneCD 4.4.3.1.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1040\A0312435.exe (Worm.Brontok) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1059\A0317606.exe (Worm.Brontok) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Bureau\Master collection CS4\PhotoShopCS4_X32_Crk.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Bureau\Master collection CS4\PhotoShopCS4_X64_Crk.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\NewDotNet\readme.html (Adware.NewDotNet) -> Quarantined and deleted successfully. C:\Program Files\NewDotNet\uninstall.exe (Adware.NewDotNet) -> Quarantined and deleted successfully. C:\Documents and Settings\Compaq_Propriétaire\Application Data\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\myalbum2007.zip (Backdoor.Bot) -> Quarantined and deleted successfully. -
Help, virus Win32:SkiMorph [Cryp] !
Fidiou a répondu à un(e) sujet de Fidiou dans Analyses et éradication malwares
Merci l'ami pour ta réponse rapide et efficace^^. Je poste le rapport Navilog: Fix Navipromo version 4.0.9 commencé le 22/09/2010 21:24:26,67 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! Outil exécuté depuis C:\navilog1 Mise à jour le 17.09.2010 à 16h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3500+ ) BIOS : Phoenix - Award BIOS v6.00PG USER : Compaq_Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1368 [VPS 100831-1] 4.8.1368 (Activated) C:\ (Local Disk) - NTFS - Total:180 Go (Free:16 Go) D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go) E:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go) F:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) K:\ (Local Disk) - NTFS - Total:931 Go (Free:873 Go) Recherche executée en mode normal Nettoyage exécuté au redémarrage de l'ordinateur C:\WINDOWS\pack.epk supprimé ! C:\WINDOWS\prefetch\cwlivqfz*.pf supprimé ! C:\WINDOWS\system32\daokhty.dat supprimé ! C:\WINDOWS\system32\daokhty_nav.dat supprimé ! C:\WINDOWS\system32\daokhty_navps.dat supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\bbhbo.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\bbwbfxdd.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\bpeketbo.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\bvrlfdw.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cfcfernj.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cfwspebf.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cmelcra.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cnans.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\csixmcyo.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cwlivqfz.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cwlivqfz.dat supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cwlivqfz_nav.dat supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cwlivqfz_navps.dat supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cxbqe.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\cxuqfbet.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\daihc.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\dbsqhf.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\dhdiej.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\dtksjah.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\eddzrp.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\faabu.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\fvmfnfu.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\hcuoq.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\jfjnq.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\jtormxsu.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\kavzpej.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\mffunt.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\pablgx.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\psbepy.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\sfaflhd.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\sqccxdb.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\swagdpt.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\ucdry.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\usbyglr.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\vetbdca.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\vldjaofu.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\vvvde.exe supprimé ! c:\docume~1\compaq~1\locals~1\applic~1\xizcdedh.exe supprimé ! Nettoyage contenu C:\WINDOWS\Temp effectué ! Nettoyage contenu C:\Documents and Settings\Compaq_Propri‚taire\locals~1\Temp effectué ! *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok Certificat Egroup supprimé ! Certificat Electronic-Group supprimé ! Certificat OOO-Favorit supprimé ! *** Scan terminé 22/09/2010 22:58:54,23 *** Puis les deux autres: 1er ======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 16/09/10 à 13:30 Contact: AdRemover.contact[AT]gmail.com Site web: TEAM X SCRIPT : UsbFix - AD-Remover - FindyKill C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 23:04:13 le 22/09/2010, Mode normal Microsoft Windows XP Édition familiale Service Pack 3 (X86) Compaq_Propriétaire@DACOSTA-SENSHU ( ) ============== RECHERCHE ============== 0,Dossier trouvé: C:\Program Files\Mozilla FireFox\extensions\{C7E0B063-1DC2-4DD0-A502-1D67957B9ADE} 0,Dossier trouvé: C:\Documents and Settings\Compaq_Propriétaire\Mes documents\PacificPoker 0,Dossier trouvé: C:\Documents and Settings\Compaq_Propriétaire\Menu Démarrer\Programmes\Casino-On-Net 0,Dossier trouvé: C:\Program Files\OneStepSearch 0,Dossier trouvé: C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport 0,Dossier trouvé: C:\Program Files\ShoppingReport 0,Fichier trouvé: C:\Program Files\Mozilla FireFox\searchplugins\onestep.xml 1,Clé trouvée: HKLM\Software\Classes\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465} 1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465} 1,Clé trouvée: HKLM\Software\Classes\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC} 1,Clé trouvée: HKLM\Software\Classes\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842} 1,Clé trouvée: HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} 1,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} 1,Clé trouvée: HKLM\Software\Classes\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116} 1,Clé trouvée: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB} 1,Clé trouvée: HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0} 1,Clé trouvée: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082} 1,Clé trouvée: HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2} 1,Clé trouvée: HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF} 1,Clé trouvée: HKLM\Software\Classes\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80} 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.HbAx 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.HbAx.1 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.HbInfoBand 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.HbInfoBand.1 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.IEButton 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.IEButton.1 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.IEButtonA 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.IEButtonA.1 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.RprtCtrl 0,Clé trouvée: HKLM\Software\Classes\ShoppingReport.RprtCtrl.1 0,Clé trouvée: HKLM\Software\New.net 0,Clé trouvée: HKLM\Software\OneStepSearch 0,Clé trouvée: HKLM\Software\ShoppingReport 0,Clé trouvée: HKLM\Software\Titan Poker 0,Clé trouvée: HKCU\Software\CasinonetInstaller 0,Clé trouvée: HKCU\Software\casinoonnet 0,Clé trouvée: HKCU\Software\Grand Virtual 0,Clé trouvée: HKCU\Software\pacificpoker 0,Clé trouvée: HKCU\Software\pokerinstaller 0,Clé trouvée: HKCU\Software\ShoppingReport 0,Clé trouvée: HKCU\Software\Titan Poker 0,Clé trouvée: HKU\.DEFAULT\Software\New.net 0,Clé trouvée: HKU\S-1-5-18\Software\New.net 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Casino-On-Net 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Pacific Poker 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Seekmo 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Titan Poker 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\WhenU 3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5B4C3B43-49B6-42A7-A602-F7ACDCA0D409} 3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{5B4C3B43-49B6-42A7-A602-F7ACDCA0D409} 0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneStepSearch 0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport 0,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465} 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B2} 0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B3} 0,Valeur trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo jimddp 0,Valeur trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp 0,Valeur trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc 0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping|{c5428486-50a0-4a02-9d20-520b59a9f9b2} 0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping|{c5428486-50a0-4a02-9d20-520b59a9f9b3} 0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|RelevantKnowledge 0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{07AA283A-43D7-4CBE-A064-32A21112D94D} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.10 (fr)] ** -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\FireFox\Profiles\6tspsivx.default\Prefs.js -- browser.download.dir, C:\\Documents and Settings\\Compaq_Propriétaire\\Bureau browser.download.lastDir, C:\\Documents and Settings\\Compaq_Propriétaire\\Bureau\\Fidiou browser.search.defaultenginename, Yahoo browser.search.selectedEngine, Yahoo browser.startup.homepage_override.mstone, rv:1.9.2.10 keyword.URL, hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=megaup&p= ======================================== ** Internet Explorer Version [8.0.6001.18702] ** [HKCU\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\WINDOWS\system32\blank.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Show_ToolBar: yes Start Page: hxxp://www.tropal.net/ Use Search Asst: no [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157 Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Start Page: hxxp://www.tropal.net/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 22/09/2010 (1019 Octet(s)) Fin à: 23:15:27, 22/09/2010 ============== E.O.F ============== Et 2ème: ======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 16/09/10 à 13:30 Contact: AdRemover.contact[AT]gmail.com Site web: TEAM X SCRIPT : UsbFix - AD-Remover - FindyKill C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 23:18:44 le 22/09/2010, Mode normal Microsoft Windows XP Édition familiale Service Pack 3 (X86) Compaq_Propriétaire@DACOSTA-SENSHU ( ) ============== ACTION(S) ============== 0,Dossier supprimé: C:\Program Files\Mozilla FireFox\extensions\{C7E0B063-1DC2-4DD0-A502-1D67957B9ADE} 0,Dossier supprimé: C:\Documents and Settings\Compaq_Propriétaire\Mes documents\PacificPoker 0,Dossier supprimé: C:\Documents and Settings\Compaq_Propriétaire\Menu Démarrer\Programmes\Casino-On-Net 0,Dossier supprimé: C:\Program Files\OneStepSearch 0,Dossier supprimé: C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport 0,Dossier supprimé: C:\Program Files\ShoppingReport 0,Fichier supprimé: C:\Program Files\Mozilla FireFox\searchplugins\onestep.xml (!) -- Fichiers temporaires supprimés. 1,Clé supprimée: HKLM\Software\Classes\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465} 1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465} 1,Clé supprimée: HKLM\Software\Classes\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC} 1,Clé supprimée: HKLM\Software\Classes\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842} 1,Clé supprimée: HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} 1,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} 1,Clé supprimée: HKLM\Software\Classes\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116} 1,Clé supprimée: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB} 1,Clé supprimée: HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0} 1,Clé supprimée: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082} 1,Clé supprimée: HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2} 1,Clé supprimée: HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF} 1,Clé supprimée: HKLM\Software\Classes\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80} 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.HbAx 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.HbAx.1 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.HbInfoBand 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.HbInfoBand.1 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.IEButton 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.IEButton.1 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.IEButtonA 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.IEButtonA.1 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.RprtCtrl 0,Clé supprimée: HKLM\Software\Classes\ShoppingReport.RprtCtrl.1 0,Clé supprimée: HKLM\Software\New.net 0,Clé supprimée: HKLM\Software\OneStepSearch 0,Clé supprimée: HKLM\Software\ShoppingReport 0,Clé supprimée: HKLM\Software\Titan Poker 0,Clé supprimée: HKCU\Software\CasinonetInstaller 0,Clé supprimée: HKCU\Software\casinoonnet 0,Clé supprimée: HKCU\Software\Grand Virtual 0,Clé supprimée: HKCU\Software\pacificpoker 0,Clé supprimée: HKCU\Software\pokerinstaller 0,Clé supprimée: HKCU\Software\ShoppingReport 0,Clé supprimée: HKCU\Software\Titan Poker 0,Clé supprimée: HKU\.DEFAULT\Software\New.net 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Casino-On-Net 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Pacific Poker 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Seekmo 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Titan Poker 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\WhenU 3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5B4C3B43-49B6-42A7-A602-F7ACDCA0D409} 3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{5B4C3B43-49B6-42A7-A602-F7ACDCA0D409} 0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneStepSearch 0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B2} 0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B3} 0,Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo jimddp 0,Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp 0,Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc 0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping|{c5428486-50a0-4a02-9d20-520b59a9f9b2} 0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping|{c5428486-50a0-4a02-9d20-520b59a9f9b3} 0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|RelevantKnowledge 0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{07AA283A-43D7-4CBE-A064-32A21112D94D} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.10 (fr)] ** -- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\FireFox\Profiles\6tspsivx.default\Prefs.js -- browser.download.dir, C:\\Documents and Settings\\Compaq_Propriétaire\\Bureau browser.download.lastDir, C:\\Documents and Settings\\Compaq_Propriétaire\\Bureau\\Fidiou browser.search.defaultenginename, Yahoo browser.search.selectedEngine, Yahoo browser.startup.homepage_override.mstone, rv:1.9.2.10 keyword.URL, hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=megaup&p= ======================================== ** Internet Explorer Version [8.0.6001.18702] ** [HKCU\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ Use Search Asst: no [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 20 Fichier(s) C:\Program Files\Ad-Remover\Backup: 14 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 22/09/2010 (1078 Octet(s)) C:\Ad-Report-SCAN[1].txt - 22/09/2010 (7571 Octet(s)) Fin à: 23:27:03, 22/09/2010 ============== E.O.F ============== Voilà voilà et encore merci pour ton aide^^. -
Bonjour à tous, je suis nouveau ici, et je m'inscrit car on m'a dit que je pourrait trouver de l'aide ici^^. Comme mentionner dans mon sujet j'ai le virus/ver Win32:SkiMorph [Cryp] qui est détecté par Avast et quand j'essai de le supprimer, ça me crée plein d'autres programme avec des noms bizzard dans mon local setting. On m'a dit de lancer HijackThis, ce que j'ai fait, et voici les résultats du rapport: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:19:02, on 22/09/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\Program Files\WTouch\WTouchService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\WTouch\WTouchUser.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdnserv.exe C:\WINDOWS\system32\lxdncoms.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Pen_Tablet.exe C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe C:\WINDOWS\system32\Pen_Tablet.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\windows\system\hpsysdrv.exe C:\WINDOWS\ALCXMNTR.EXE C:\HP\KBD\KBD.EXE C:\Program Files\HP\HP Software Update\HPwuSchd2.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Brother\ControlCenter3\brccMCtl.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lexmark 2600 Series\lxdnmon.exe C:\Program Files\Lexmark 2600 Series\ezprint.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Bamboo Dock\BambooCore.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\documents and settings\compaq_propriétaire\local settings\application data\cwlivqfz.exe C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Tropal.net R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Tropal.net R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by Godzilla R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: SYSTRAN Web Translator 5.0 - {A5899B52-3AF9-4F56-85FE-AD7B3BE8490F} - C:\Program Files\SYSTRAN\5.0\Personal\IEPlugIn.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [RelevantKnowledge] c:\windows\system32\rlvknlg.exe -boot O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [brMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN O4 - HKLM\..\Run: [setDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [lxdnmon.exe] "C:\Program Files\Lexmark 2600 Series\lxdnmon.exe" O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2600 Series\ezprint.exe" O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [bambooCore] C:\Program Files\Bamboo Dock\BambooCore.exe O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [cwlivqfz] "c:\documents and settings\compaq_propriétaire\local settings\application data\cwlivqfz.exe" cwlivqfz O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\hoster\host.exe O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\hoster\host.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by117w.bay117.mail.live.com/mail/resources/MsnPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{06759D9C-0E42-421F-9A66-8984C0467625}: NameServer = 212.27.40.241,212.27.40.240 O17 - HKLM\System\CCS\Services\Tcpip\..\{A5291418-FE73-45A2-83EE-BD8FF32144C3}: NameServer = 212.27.54.252,212.27.53.252 O17 - HKLM\System\CCS\Services\Tcpip\..\{DFF012F2-E3CD-4659-B204-4CE6DA617B0E}: NameServer = 212.27.40.241,212.27.40.240 O17 - HKLM\System\CS1\Services\Tcpip\..\{06759D9C-0E42-421F-9A66-8984C0467625}: NameServer = 212.27.40.241,212.27.40.240 O17 - HKLM\System\CS2\Services\Tcpip\..\{06759D9C-0E42-421F-9A66-8984C0467625}: NameServer = 212.27.40.241,212.27.40.240 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe O23 - Service: lxdnCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdnserv.exe O23 - Service: lxdn_device - - C:\WINDOWS\system32\lxdncoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe O23 - Service: WTouch Service (WTouchService) - Wacom Technology, Corp. - C:\Program Files\WTouch\WTouchService.exe -- End of file - 16286 bytes Je ne sais pas quoi en faire et surtout, je ne sais pas comment ça va m'aider à enlever ce fichu Win32:SkiMorph [Cryp] donc je vous passe la main, et merci d'avance bien sur^^.