Aide probleme CID

le 29 avril 2008

Bonsoir,

Voilà, j'ai un petit probleme, je suis envahi de spam CiD... j'ai parcouru les forums d'aide mais étant vraiment très nul en informatique j'y comprend pas grand chose..

Donc si quelqu'un est patient et veut bien m'aider cela serait avec plaisir parceque je commence vraiment à m'énerver des que je vais sur internet!!

Merci d'avance

Louise

pear · le 29 avril 2008

Bonsoir,

Désactiver les protections résidentes ( Antivirus, etc...), vous les réactiverez ensuite,

* Télécharger Lop S&D de Eric71 sur le bureau,

http://eric.71.mespages.googlepages.com/LopSD.exe

* Double-cliquer dessus pour lancer l'installation

* Puis double-cliquer sur le raccourci Lop S&D présent sur le bureau

* Séléctionner la langue souhaitée , puis choisir l'Option 1 (Recherche)

* Patienter jusqu'à la fin du scan

* Poster le rapport généré (C:\lopR.txt)

( Si le Bureau ne réapparait pas presser Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , taper explorer.exe et valider )

Relancer Lop S&D

* Choisir l'Option 2 (Suppression)

* Ne fermez pas la fenêtre lors de la suppression !

* Poster le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas presser Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , taper explorer.exe et valider)

[/color]

*

Téléchargez Hijackthis de TrendMicro.

* Décompressez le dans un dossier à la racine du disque dur

renommer ce dossier par exemple Karcher

Sous Vista,,il faut faire clic-droit >> "Exécuter en tant qu'Administrateur" sur Hijackthis.exe sinon HJT tourne mais ne fixe rien.

* Lancer le fichier Hijackthis.exe

* Cliquer sur Do a system scan and save a log file

* Copier-coller le rapport dans un nouveau message ici

le 30 avril 2008

Voila le premier rapport avec l'option 1

-----------------------[ Lop S&D 4.2.0-2 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]

[ USER : Clara ] [ "C:\Lop SD" ] [ Selection : 1 ]

[ 30/04/2008 | 12:38:35,89 ] [ PC : PC-CLARA ]

[ MAJ : 27-04-2008 | 11:15 ]

[ UAC => 0 ]

-------------[ Listing des dossiers dans Application Data ]------------

[06/04/2008|08:44] C:\Users\Clara\AppData\Roaming\Adobe\Flash Player

[21/03/2008|20:53] C:\Users\Clara\AppData\Roaming\Adobe\Linguistics

[23/02/2008|19:45] C:\Users\Clara\AppData\Roaming\Adobe\Acrobat

[29/04/2008|21:11] C:\Users\Clara\AppData\Roaming\Apple Computer\iTunes

[23/02/2008|19:52] C:\Users\Clara\AppData\Roaming\CyberLink\PowerDVD

[23/02/2008|19:52] C:\Users\Clara\AppData\Roaming\CyberLink\PowerCinema

[23/02/2008|19:45] C:\Users\Clara\AppData\Roaming\CyberLink\MediaCache

[23/02/2008|19:45] C:\Users\Clara\AppData\Roaming\CyberLink\MagicSports

[21/03/2008|18:40] C:\Users\Clara\AppData\Roaming\DivX\DivX Codec

[06/04/2008|18:15] C:\Users\Clara\AppData\Roaming\Google\Local Search History

[24/03/2008|20:55] C:\Users\Clara\AppData\Roaming\Google\GoogleEarth

[23/02/2008|19:44] C:\Users\Clara\AppData\Roaming\Identities\{2A7ABF83-DE9F-4E32-8879-80329CBF9F3E}

[23/02/2008|21:27] C:\Users\Clara\AppData\Roaming\Macromedia\Flash Player

[27/04/2008|19:01] C:\Users\Clara\AppData\Roaming\Microsoft\Templates

[17/04/2008|19:42] C:\Users\Clara\AppData\Roaming\Microsoft\MSN Messenger

[13/04/2008|19:49] C:\Users\Clara\AppData\Roaming\Microsoft\HTML Help

[12/04/2008|16:07] C:\Users\Clara\AppData\Roaming\Microsoft\UProof

[12/04/2008|16:06] C:\Users\Clara\AppData\Roaming\Microsoft\Office

[08/04/2008|20:55] C:\Users\Clara\AppData\Roaming\Microsoft\OIS

[03/04/2008|19:28] C:\Users\Clara\AppData\Roaming\Microsoft\Word

[24/03/2008|21:24] C:\Users\Clara\AppData\Roaming\Microsoft\Excel

[22/03/2008|18:37] C:\Users\Clara\AppData\Roaming\Microsoft\Windows Photo Gallery

[16/03/2008|17:01] C:\Users\Clara\AppData\Roaming\Microsoft\Network

[15/03/2008|14:41] C:\Users\Clara\AppData\Roaming\Microsoft\Proof

[15/03/2008|14:41] C:\Users\Clara\AppData\Roaming\Microsoft\Document Building Blocks

[15/03/2008|14:41] C:\Users\Clara\AppData\Roaming\Microsoft\AddIns

[01/03/2008|11:20] C:\Users\Clara\AppData\Roaming\Microsoft\MMC

[29/02/2008|21:56] C:\Users\Clara\AppData\Roaming\Microsoft\IdentityCRL

[28/02/2008|20:53] C:\Users\Clara\AppData\Roaming\Microsoft\Internet Explorer

[24/02/2008|14:37] C:\Users\Clara\AppData\Roaming\Microsoft\Crypto

[24/02/2008|14:37] C:\Users\Clara\AppData\Roaming\Microsoft\eHome

[23/02/2008|23:23] C:\Users\Clara\AppData\Roaming\Microsoft\Works

[23/02/2008|20:03] C:\Users\Clara\AppData\Roaming\Microsoft\Windows

[23/02/2008|19:45] C:\Users\Clara\AppData\Roaming\Microsoft\CLR Security Config

[23/02/2008|19:45] C:\Users\Clara\AppData\Roaming\Microsoft\SystemCertificates

[23/02/2008|19:44] C:\Users\Clara\AppData\Roaming\Microsoft\Protect

[23/02/2008|19:33] C:\Users\Clara\AppData\Roaming\Microsoft\Credentials

[16/04/2008|10:50] C:\Users\Clara\AppData\Roaming\Mozilla\Firefox

[30/04/2008|12:38] C:\Users\Clara\AppData\Roaming\nvModes.001\nvModes.001

[16/04/2008|11:01] C:\Users\Clara\AppData\Roaming\nvModes.dat\nvModes.dat

[30/04/2008|12:38] C:\Users\Clara\AppData\Roaming\Packard Bell\Setup my PC

[20/03/2008|15:54] C:\Users\Clara\AppData\Roaming\Packard Bell\iUpdator

[20/03/2008|15:52] C:\Users\Clara\AppData\Roaming\Packard Bell\IDCard

[29/02/2008|22:13] C:\Users\Clara\AppData\Roaming\Packard Bell\Smart Restore

[24/02/2008|14:28] C:\Users\Clara\AppData\Roaming\Packard Bell\InfoCentre

[17/04/2008|11:08] C:\Users\Clara\AppData\Roaming\Roxio\MediaManager9

[23/02/2008|20:01] C:\Users\Clara\AppData\Roaming\Talkback\MozillaOrg

[24/01/2007|05:02] C:\Users\Clara\AppData\Roaming\Template\Normal.wpt

[01/03/2008|11:18] C:\Users\Clara\AppData\Roaming\UserTile.png\UserTile.png

[28/04/2008|18:35] C:\Users\Clara\AppData\Roaming\wklnhst.dat\wklnhst.dat

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[29/04/2008 19:31][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{B8D67D34-D14F-4195-B2CF-1A296C07F01E}.job

[30/04/2008 12:30][--a------] C:\Windows\tasks\Extension de garantie.job

[30/04/2008 12:30][--a------] C:\Windows\tasks\Recovery DVD Creator.job

[30/04/2008 12:38][--ah-----] C:\Windows\tasks\SA.DAT

[30/04/2008 12:37][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[08/04/2007|05:11] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

[29/02/2008|22:59] C:\ProgramData\Active the bore sect

[21/03/2008|21:11] C:\ProgramData\Adobe

[23/03/2008|14:51] C:\ProgramData\Apple

[25/04/2008|17:09] C:\ProgramData\Apple Computer

[02/11/2006|15:02] C:\ProgramData\Application Data

[23/02/2008|19:30] C:\ProgramData\Bureau

[29/02/2008|21:58] C:\ProgramData\CyberLink

[02/11/2006|15:02] C:\ProgramData\Desktop

[02/11/2006|15:02] C:\ProgramData\Documents

[29/02/2008|22:59] C:\ProgramData\dumb ace ace.d7wdr

[29/02/2008|22:59] C:\ProgramData\dumb ace ace.n17ceg

[23/02/2008|19:30] C:\ProgramData\Favoris

[02/11/2006|15:02] C:\ProgramData\Favorites

[08/04/2007|04:58] C:\ProgramData\Google

[08/04/2007|04:56] C:\ProgramData\InstallShield

[29/02/2008|22:59] C:\ProgramData\loud love kind.xffpa

[23/02/2008|19:30] C:\ProgramData\Menu D‚marrer

[01/03/2008|13:59] C:\ProgramData\Messenger Plus!

[13/04/2008|19:49] C:\ProgramData\Microsoft

[08/04/2008|21:07] C:\ProgramData\Microsoft Help

[23/02/2008|19:30] C:\ProgramData\ModŠles

[08/04/2007|05:18] C:\ProgramData\NVIDIA

[29/02/2008|22:59] C:\ProgramData\OnlinePop

[08/04/2007|05:16] C:\ProgramData\Roxio

[08/04/2007|05:12] C:\ProgramData\Skype

[01/03/2008|09:34] C:\ProgramData\Sonic

[16/04/2008|10:59] C:\ProgramData\Spybot - Search & Destroy

[02/11/2006|15:02] C:\ProgramData\Start Menu

[15/03/2008|15:51] C:\ProgramData\Symantec

[02/11/2006|15:02] C:\ProgramData\Templates

[28/02/2008|20:07] C:\ProgramData\WLInstaller

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[08/04/2007|05:11] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

[21/03/2008|21:10] C:\Program Files\Adobe

[28/02/2008|20:11] C:\Program Files\Alwil Software

[25/04/2008|16:45] C:\Program Files\Apple Software Update

[23/03/2008|14:54] C:\Program Files\Bonjour

[29/02/2008|22:58] C:\Program Files\Circle Developement

[23/03/2008|14:51] C:\Program Files\Common Files

[08/04/2007|04:39] C:\Program Files\CONEXANT

[08/04/2007|04:58] C:\Program Files\CyberLink

[08/04/2007|04:27] C:\Program Files\desktop.ini

[14/03/2008|22:05] C:\Program Files\DivX

[23/02/2008|19:30] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]

[08/04/2007|04:40] C:\Program Files\ForceHCResetOnResume

[24/03/2008|20:51] C:\Program Files\Google

[08/04/2007|04:48] C:\Program Files\HDReg

[24/02/2008|14:53] C:\Program Files\InstallShield Installation Information

[08/04/2008|21:23] C:\Program Files\Internet Explorer

[25/04/2008|17:09] C:\Program Files\iPod

[25/04/2008|17:09] C:\Program Files\iTunes

[29/03/2008|16:04] C:\Program Files\Messenger Plus! Live

[28/02/2008|21:10] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[02/11/2006|14:37] C:\Program Files\Microsoft Games

[08/04/2007|05:09] C:\Program Files\Microsoft Office

[08/04/2007|05:09] C:\Program Files\Microsoft Works

[08/04/2007|05:08] C:\Program Files\Microsoft.NET

[08/04/2007|13:41] C:\Program Files\Movie Maker

[08/04/2007|04:57] C:\Program Files\Mozilla Firefox

[02/11/2006|14:37] C:\Program Files\MSBuild

[02/11/2006|14:37] C:\Program Files\MSN

[28/02/2008|21:09] C:\Program Files\MSXML 4.0

[15/03/2008|15:49] C:\Program Files\Norton 360

[29/02/2008|22:13] C:\Program Files\Packard Bell

[28/02/2008|20:30] C:\Program Files\Picasa2

[25/04/2008|17:07] C:\Program Files\QuickTime

[08/04/2007|04:44] C:\Program Files\Realtek Semiconductor Corp

[02/11/2006|14:37] C:\Program Files\Reference Assemblies

[08/04/2007|04:56] C:\Program Files\Roxio

[24/02/2008|14:53] C:\Program Files\SAGEM

[08/04/2007|05:12] C:\Program Files\Skype

[16/04/2008|10:34] C:\Program Files\Spybot - Search & Destroy

[08/04/2007|04:41] C:\Program Files\Synaptics

[02/11/2006|15:01] C:\Program Files\Uninstall Information

[08/04/2007|13:49] C:\Program Files\Windows Calendar

[08/04/2007|13:41] C:\Program Files\Windows Collaboration

[08/04/2007|14:03] C:\Program Files\Windows Defender

[08/04/2007|13:41] C:\Program Files\Windows Journal

[28/02/2008|20:19] C:\Program Files\Windows Live

[08/04/2008|21:23] C:\Program Files\Windows Mail

[01/03/2008|09:32] C:\Program Files\Windows Media Player

[23/02/2008|19:30] C:\Program Files\Windows NT

[08/04/2007|13:41] C:\Program Files\Windows Photo Gallery

[01/03/2008|09:32] C:\Program Files\Windows Sidebar

[14/03/2008|21:59] C:\Program Files\Xvid

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[21/03/2008|21:11] C:\Program Files\Common Files\Adobe

[23/03/2008|14:51] C:\Program Files\Common Files\Apple

[08/04/2007|05:09] C:\Program Files\Common Files\DESIGNER

[08/04/2007|04:58] C:\Program Files\Common Files\InstallShield

[28/02/2008|20:20] C:\Program Files\Common Files\microsoft shared

[08/04/2007|04:56] C:\Program Files\Common Files\Roxio Shared

[02/11/2006|13:18] C:\Program Files\Common Files\Services

[08/04/2007|05:12] C:\Program Files\Common Files\Skype

[08/04/2007|04:56] C:\Program Files\Common Files\Sonic Shared

[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines

[08/04/2007|04:56] C:\Program Files\Common Files\SureThing Shared

[15/03/2008|15:51] C:\Program Files\Common Files\Symantec Shared

[08/04/2007|13:42] C:\Program Files\Common Files\System

[28/02/2008|20:19] C:\Program Files\Common Files\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 72

iexplore.exe ~ [3484]

iexplore.exe ~ [3660]

----------------------[ Recherche avec S_Lop ]---------------------

C:\ProgramData\dumb ace ace.d7wdr

C:\ProgramData\dumb ace ace.n17ceg

C:\ProgramData\loud love kind.xffpa

C:\ProgramData\dumb ace ace.d7wdr

C:\ProgramData\dumb ace ace.n17ceg

C:\ProgramData\loud love kind.xffpa

C:\Users\Clara\AppData\Local\Temp\bis9179.exe

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\ProgramData\Active the bore sect

C:\ProgramData\Active the bore sect\meet wave.exe

C:\Program Files\Circle Developement

C:\Program Files\Circle Developement\Uninstall.exe

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-04-30 12:39:36

Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Aucune autre infection trouvée !

/!\ [Fich:736][Doss:34] C:\Users\Clara\AppData\Local\Temp

/!\ [Fich:341][Doss:1] C:\Users\Clara\AppData\Roaming\MICROS~1\Windows\Cookies

/!\ [Fich:84][Doss:6] C:\Users\Clara\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

[ UAC => 1 ]

--------------------[ Fin du rapport a 12:41:43,21 ]----------------------

pear · le 30 avril 2008

Bonjour,

Lancez l'option 2.

Postez le rapport et celui d'Hijackthis, svp.

le 30 avril 2008

deuxieme rapport

-----------------------[ Lop S&D 4.2.0-2 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]

[ USER : Clara ] [ "C:\Lop SD" ] [ Selection : 2 ]

[ 30/04/2008 | 12:47:39,71 ] [ PC : PC-CLARA ]

[ MAJ : 27-04-2008 | 11:15 ]

[ UAC => 0 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprimé! - C:\Program Files\Circle Developement\Uninstall.exe

Supprimé! - C:\ProgramData\dumb ace ace.d7wdr

Supprimé! - C:\Users\Clara\AppData\Local\Temp\bis9179.exe

Supprimé! - C:\ProgramData\Active the bore sect

Supprimé! - C:\Program Files\Circle Developement

Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\