Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

ADS.NETBIOS-LOCAL.COM...qu'est-ce..? Help! [Résolu] =D

Peppitta
 Partager

Messages recommandés

Loup blanc Godlike Member

Loup blanc

Posté(e)
Posté(e)

Bonsoir Tout le monde,

 

Merci , Thanos

 

Peppitta, Pour le mode sans échec, il faut tapoter sur la touche F8 juste au moment ou le premier écran d'accueil de ton PC disparait mais avant que le chenillard de lancement de Windows apparaisse.

 

 

Pour la suite,

 

- Télécharge BTfix (Bibi26) sur ton bureau

- Fait un clic droit sur le fichier téléchargé, puis "extraire tout", et choisit ton bureau comme destination.

- Ouvre le dossier BTFix créé.

- Fait un double clic sur le fichier BTFix.exe.

- Clique sur Rechercher.

- Un rapport va s'ouvrir dans le bloc-note, copie/colle la totalité du rapport dans ton prochain message.

Loup blanc Godlike Member

Loup blanc

Posté(e)
Posté(e)

Peppitta, laisse tomber pour Btfix, je viens d'apprendre qu'il a été retiré par son auteur

 

Ouvre le panneau de configuration, Ajout/suppression de programmes, cherche "Ask toolbar" dans la liste et désinstalle le.

 

Ensuite,

1-

- Télécharge Smitfraudfix (S!ri)

- Double clic sur l'icône de Smitfraudfix

- Lance l'option 1 uniquement

- A la fin de la recherche, le rapport va s'ouvrir, copie/colle son contenu dans un message,

 

2-

Télécharge Lop S&D (Eric71, Angeldark ) sur ton bureau

Double-clique dessus pour lancer l'installation

Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau

Sélectionne la langue souhaitée , puis choisis l'option 1 (Recherche)

Patiente jusqu'à la fin du scan

Poste le rapport généré (C:\lopR.txt)

Peppitta Member

Peppitta

Posté(e)
  • Auteur
Posté(e)

rapport de SmitfraudFix:

 

SmitFraudFix v2.323

 

Rapport fait à 0:34:05,14, 01/06/2008

Executé à partir de C:\Documents and Settings\FarŠs\Bureau\SmitfraudFix

OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT

Le type du système de fichiers est NTFS

Fix executé en mode normal

 

»»»»»»»»»»»»»»»»»»»»»»»» Process

 

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

C:\PROGRA~1\SECURI~1\av_fw\backweb\7431218\Program\SERVIC~1.EXE

c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe

c:\APPS\Powercinema\Kernel\TV\CLSched.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe

C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe

C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE

C:\Program Files\Securitoo\av_fw\backweb\7431218\program\fsbwsys.exe

C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE

C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe

C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE

c:\APPS\HIDSERVICE\HIDSERVICE.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE

C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE

C:\Program Files\Securitoo\av_fw\Anti-Virus\fsqh.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Securitoo\av_fw\Anti-Virus\fsrw.exe

C:\Program Files\Securitoo\av_fw\FWES\Program\fsdfwd.exe

C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Apps\Powercinema\PCMService.exe

C:\apps\ABoard\ABoard.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\apps\ABoard\AOSD.exe

C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Securitoo\av_fw\FSGUI\ispnews.exe

C:\PROGRA~1\SECURI~1\av_fw\ANTI-S~1\fsaw.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe

C:\Program Files\Securitoo\av_fw\FSGUI\fsguidll.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Securitoo\av_fw\backweb\7431218\Program\fspex.exe

C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\OpenOffice.org 2.2\program\soffice.exe

C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN

C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Webroot\Spy Sweeper\SSU.EXE

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\cmd.exe

 

»»»»»»»»»»»»»»»»»»»»»»»» hosts

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FarŠs

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FarŠs\Application Data

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FARS~1\Favoris

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

 

 

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]

"Source"="file:///C:/Documents%20and%20Settings/Far%E8s/Mes%20documents/Mes%20images/Photos/irt_ayumi_hamasaki226.sized"

"SubscribedURL"="file:///C:/Documents%20and%20Settings/Far%E8s/Mes%20documents/Mes%20images/Photos/irt_ayumi_hamasaki226.sized"

"FriendlyName"=""

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1]

"Source"="About:Home"

"SubscribedURL"="About:Home"

"FriendlyName"="Ma page d'accueil"

 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

 

IEDFix

Credits: Malware Analysis & Diagnostic

Code: S!Ri

 

 

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

 

VACFix

Credits: Malware Analysis & Diagnostic

Code: S!Ri

 

 

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

 

404Fix

Credits: Malware Analysis & Diagnostic

Code: S!Ri

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

 

SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll

 

 

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=""

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

"System"=""

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Rustock

 

 

 

»»»»»»»»»»»»»»»»»»»»»»»» DNS

 

Description: Inventel Gateway - Miniport d'ordonnancement de paquets

DNS Server Search Order: 192.168.1.1

 

Description: Inventel Gateway - Miniport d'ordonnancement de paquets

DNS Server Search Order: 192.168.1.1

 

HKLM\SYSTEM\CCS\Services\Tcpip\..\{C7E1A3CD-E37E-4115-9341-C9E980A585B8}: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{DD5357C5-8563-4502-873F-D061244B45B5}: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CS1\Services\Tcpip\..\{C7E1A3CD-E37E-4115-9341-C9E980A585B8}: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CS1\Services\Tcpip\..\{DD5357C5-8563-4502-873F-D061244B45B5}: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CS3\Services\Tcpip\..\{C7E1A3CD-E37E-4115-9341-C9E980A585B8}: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CS3\Services\Tcpip\..\{DD5357C5-8563-4502-873F-D061244B45B5}: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

 

 

»»»»»»»»»»»»»»»»»»»»»»»» Fin

 

et ici, rapport de LOP S&D:

 

 

-----------------------[ Lop S&D 4.2.1-1 XP/Vista ]---------------------

 

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]

[ USER : FarŠs ] [ "C:\Lop SD" ] [ Selection : 1 ]

[ 01/06/2008 | 0:38:37,26 ] [ PC : CRAZYFARS ]

[ MAJ : 31-05-2008 | 14:12 ]

 

-------------[ Listing des dossiers dans Application Data ]------------

 

[17/02/2008|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[19/08/2005|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL

[17/03/2007|23:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[11/01/2006|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7

[27/05/2008|09:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast

[06/01/2007|15:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative

[21/09/2005|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink

[16/08/2004|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini

[14/11/2007|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure

[07/01/2007|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[09/01/2006|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft

[21/01/2007|22:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[31/05/2008|18:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[15/02/2006|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[21/01/2006|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[03/09/2005|09:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar

[15/06/2007|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA

[02/05/2006|20:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles

[18/12/2005|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2

[27/11/2005|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm

[06/04/2007|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache

[27/08/2005|03:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[16/02/2006|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteDartSlowOnce

[10/05/2008|08:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[16/10/2006|08:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

[28/08/2006|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Webroot

[01/10/2005|01:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[02/12/2007|08:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

 

[16/08/2004|17:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini

[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[28/07/2005|22:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia

[28/07/2005|22:32] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[28/07/2005|22:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[28/07/2005|22:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[28/07/2005|22:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

 

[11/04/2007|15:49] C:\DOCUME~1\FARS~2\APPLIC~1\Macromedia

 

[09/11/2006|11:22] C:\DOCUME~1\FARS~1\APPLIC~1\Ableton

[01/03/2008|08:29] C:\DOCUME~1\FARS~1\APPLIC~1\Adobe

[18/02/2008|17:27] C:\DOCUME~1\FARS~1\APPLIC~1\AdobeUM

[06/10/2006|10:31] C:\DOCUME~1\FARS~1\APPLIC~1\Ahead

[16/03/2007|23:02] C:\DOCUME~1\FARS~1\APPLIC~1\Apple Computer

[28/01/2006|23:00] C:\DOCUME~1\FARS~1\APPLIC~1\ArcSoft

[02/07/2007|21:03] C:\DOCUME~1\FARS~1\APPLIC~1\Creative

[22/08/2005|22:04] C:\DOCUME~1\FARS~1\APPLIC~1\CyberLink

[27/05/2008|09:19] C:\DOCUME~1\FARS~1\APPLIC~1\Dash safe wipe

[16/08/2004|17:55] C:\DOCUME~1\FARS~1\APPLIC~1\desktop.ini

[02/12/2007|08:47] C:\DOCUME~1\FARS~1\APPLIC~1\F-Secure

[08/01/2007|00:19] C:\DOCUME~1\FARS~1\APPLIC~1\Google

[16/10/2005|21:14] C:\DOCUME~1\FARS~1\APPLIC~1\Help

[16/08/2004|18:19] C:\DOCUME~1\FARS~1\APPLIC~1\Identities

[14/11/2007|19:15] C:\DOCUME~1\FARS~1\APPLIC~1\ispnews

[21/01/2007|22:23] C:\DOCUME~1\FARS~1\APPLIC~1\Jasc Software Inc

[17/02/2006|13:11] C:\DOCUME~1\FARS~1\APPLIC~1\Lavasoft

[19/08/2005|15:15] C:\DOCUME~1\FARS~1\APPLIC~1\Leadertech

[28/08/2005|13:11] C:\DOCUME~1\FARS~1\APPLIC~1\Macromedia

[31/05/2008|18:40] C:\DOCUME~1\FARS~1\APPLIC~1\Malwarebytes

[29/08/2007|18:54] C:\DOCUME~1\FARS~1\APPLIC~1\Microsoft

[14/01/2006|15:03] C:\DOCUME~1\FARS~1\APPLIC~1\Mozilla

[03/09/2005|09:14] C:\DOCUME~1\FARS~1\APPLIC~1\MSN Search Toolbar

[29/08/2005|16:58] C:\DOCUME~1\FARS~1\APPLIC~1\MSNInstaller

[01/02/2006|23:20] C:\DOCUME~1\FARS~1\APPLIC~1\Musicmatch

[19/08/2005|15:09] C:\DOCUME~1\FARS~1\APPLIC~1\OD2

[31/05/2008|22:31] C:\DOCUME~1\FARS~1\APPLIC~1\OpenOffice.org2

[14/11/2007|19:19] C:\DOCUME~1\FARS~1\APPLIC~1\PEX

[21/08/2005|09:41] C:\DOCUME~1\FARS~1\APPLIC~1\Real

[08/04/2007|00:54] C:\DOCUME~1\FARS~1\APPLIC~1\Screenshot Sender

[28/05/2008|21:15] C:\DOCUME~1\FARS~1\APPLIC~1\Skype

[28/05/2008|19:49] C:\DOCUME~1\FARS~1\APPLIC~1\skypePM

[19/08/2005|15:19] C:\DOCUME~1\FARS~1\APPLIC~1\Sonic

[28/07/2005|22:06] C:\DOCUME~1\FARS~1\APPLIC~1\Sun

[19/08/2005|14:30] C:\DOCUME~1\FARS~1\APPLIC~1\Symantec

[28/08/2005|16:11] C:\DOCUME~1\FARS~1\APPLIC~1\Talkback

[15/04/2007|16:46] C:\DOCUME~1\FARS~1\APPLIC~1\teamspeak2

[03/09/2006|19:44] C:\DOCUME~1\FARS~1\APPLIC~1\Template

[26/08/2005|01:02] C:\DOCUME~1\FARS~1\APPLIC~1\vlc

[16/02/2006|19:43] C:\DOCUME~1\FARS~1\APPLIC~1\Webroot

[03/09/2006|19:57] C:\DOCUME~1\FARS~1\APPLIC~1\wklnhst.dat

[28/07/2005|22:20] C:\DOCUME~1\FARS~1\APPLIC~1\You've Got Pictures Screensaver

 

[11/01/2006|20:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/10/2007|19:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[16/02/2006|20:32] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

 

 

[16/08/2004|17:55] C:\DOCUME~1\Maman\APPLIC~1\desktop.ini

[16/08/2004|18:19] C:\DOCUME~1\Maman\APPLIC~1\Identities

[28/07/2005|22:13] C:\DOCUME~1\Maman\APPLIC~1\Macromedia

[11/01/2006|20:23] C:\DOCUME~1\Maman\APPLIC~1\Microsoft

[28/07/2005|22:13] C:\DOCUME~1\Maman\APPLIC~1\Real

[28/07/2005|22:06] C:\DOCUME~1\Maman\APPLIC~1\Sun

[28/07/2005|22:14] C:\DOCUME~1\Maman\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\Maman\APPLIC~1\You've Got Pictures Screensaver

 

[11/01/2006|20:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[28/08/2005|13:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

 

[20/08/2005|01:15] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

 

[16/08/2004|17:55] C:\DOCUME~1\Sabrina\APPLIC~1\desktop.ini

[16/08/2004|18:19] C:\DOCUME~1\Sabrina\APPLIC~1\Identities

[28/07/2005|22:13] C:\DOCUME~1\Sabrina\APPLIC~1\Macromedia

[11/01/2006|20:23] C:\DOCUME~1\Sabrina\APPLIC~1\Microsoft

[28/07/2005|22:13] C:\DOCUME~1\Sabrina\APPLIC~1\Real

[20/08/2005|02:16] C:\DOCUME~1\Sabrina\APPLIC~1\Skype

[28/07/2005|22:06] C:\DOCUME~1\Sabrina\APPLIC~1\Sun

[28/07/2005|22:14] C:\DOCUME~1\Sabrina\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\Sabrina\APPLIC~1\You've Got Pictures Screensaver

 

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

 

[01/06/2008 00:00][--ah-----] C:\WINDOWS\tasks\B17EAA04918959D4.job

[31/05/2008 09:02][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job

[31/05/2008 19:30][--a------] C:\WINDOWS\tasks\Configurer mon PC.job

[31/05/2008 22:27][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

 

B17EAA04918959D4.job <--> c:\docume~1\fars~1\applic~1\dashsa~1\ErrorRoamMp3.exe

 

---------------[ Listing des dossiers dans C:\Program Files ]--------------

 

[11/05/2007|14:24] C:\Program Files\3D-RPG Builder 2005

[09/11/2006|11:20] C:\Program Files\Ableton

[16/05/2007|19:33] C:\Program Files\Adobe

[28/08/2005|23:42] C:\Program Files\Ahead

[19/08/2005|14:29] C:\Program Files\AOL 9.0

[28/07/2005|22:20] C:\Program Files\AOL Compagnon

[18/03/2007|01:29] C:\Program Files\Apple Software Update

[28/01/2006|23:03] C:\Program Files\ArcSoft

[01/06/2008|00:32] C:\Program Files\AskSBar

[07/01/2007|02:37] C:\Program Files\Audible

[28/07/2005|22:05] C:\Program Files\AvRack

[28/08/2005|23:32] C:\Program Files\Bethesda Softworks

[19/08/2005|16:49] C:\Program Files\Black Isle

[30/06/2006|08:47] C:\Program Files\bleucanard

[11/05/2007|14:28] C:\Program Files\Bodom-Child - RaBBi

[17/09/2005|20:05] C:\Program Files\Cheating-Death

[26/05/2008|14:41] C:\Program Files\Circle Developement

[06/01/2007|15:27] C:\Program Files\Creative

[06/01/2007|15:22] C:\Program Files\Creative Installation Information

[17/02/2006|12:42] C:\Program Files\Creatures 2

[28/07/2005|22:20] C:\Program Files\CyberLink

[27/05/2008|09:16] C:\Program Files\Dash safe wipe

[01/06/2006|02:19] C:\Program Files\DIFX

[28/01/2006|22:19] C:\Program Files\directx

[03/09/2005|12:11] C:\Program Files\Eidos Interactive

[18/04/2008|17:40] C:\Program Files\eMule

[10/05/2008|08:28] C:\Program Files\Fichiers communs

[11/05/2007|13:49] C:\Program Files\Game_Maker7

[28/06/2006|21:05] C:\Program Files\GMixon

[26/01/2006|00:32] C:\Program Files\GoldWave

[31/01/2007|10:28] C:\Program Files\Google

[09/01/2006|18:11] C:\Program Files\Grisoft

[17/10/2006|20:00] C:\Program Files\Half Life 2 Fr No Steam - Le Seul Qui Fonctionne- Test‚ Par Vince

[31/05/2008|21:47] C:\Program Files\HiJackthis

[12/12/2004|21:22] C:\Program Files\HL2

[12/12/2004|21:22] C:\Program Files\Installations d'half life 2.txt

[28/11/2007|18:43] C:\Program Files\InstallShield Installation Information

[09/04/2008|16:34] C:\Program Files\Internet Explorer

[23/06/2007|15:37] C:\Program Files\Inventel

[16/05/2007|07:19] C:\Program Files\Jasc Software Inc

[14/03/2008|10:01] C:\Program Files\Java

[28/10/2005|19:44] C:\Program Files\JeffProd

[28/03/2006|18:49] C:\Program Files\JVTorrent

[28/07/2005|22:20] C:\Program Files\Learn2.com

[02/07/2006|04:04] C:\Program Files\LimeWire

[31/05/2008|18:40] C:\Program Files\Malwarebytes' Anti-Malware

[16/08/2004|18:03] C:\Program Files\Messenger

[22/03/2008|11:03] C:\Program Files\Messenger Plus! Live

[19/04/2006|02:12] C:\Program Files\MessengerPlus! 3

[03/12/2007|16:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[16/08/2004|18:11] C:\Program Files\microsoft frontpage

[28/07/2005|22:23] C:\Program Files\Microsoft Office

[02/12/2007|08:58] C:\Program Files\Microsoft SQL Server Compact Edition

[28/07/2005|22:22] C:\Program Files\Microsoft Works

[28/07/2005|22:23] C:\Program Files\Microsoft.NET

[21/02/2007|00:33] C:\Program Files\MixScreen

[16/08/2004|18:06] C:\Program Files\Movie Maker

[31/05/2008|23:04] C:\Program Files\Mozilla Firefox

[23/04/2008|20:12] C:\Program Files\MSBuild

[29/08/2005|16:57] C:\Program Files\MSN

[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone

[03/09/2005|09:05] C:\Program Files\MSN Toolbar Suite

[15/11/2006|16:02] C:\Program Files\MSXML 4.0

[23/04/2008|20:04] C:\Program Files\MSXML 6.0

[01/02/2006|22:19] C:\Program Files\Musicmatch

[13/04/2007|17:50] C:\Program Files\Native Instruments

[16/09/2006|09:11] C:\Program Files\Nero

[27/11/2005|14:50] C:\Program Files\NetMeeting

[14/01/2006|14:56] C:\Program Files\Netscape

[16/08/2004|18:03] C:\Program Files\Online Services

[29/08/2007|18:28] C:\Program Files\OpenOffice.org 2.2

[03/07/2007|23:26] C:\Program Files\Outlook Express

[03/11/2007|20:21] C:\Program Files\Player Tool

[30/03/2006|00:19] C:\Program Files\PlayOnline

[16/03/2007|22:59] C:\Program Files\QuickTime

[28/07/2005|22:13] C:\Program Files\Real

[28/07/2005|22:05] C:\Program Files\Realtek Sound Manager

[23/04/2008|20:12] C:\Program Files\Reference Assemblies

[28/08/2005|13:39] C:\Program Files\Securitoo

[20/08/2005|17:09] C:\Program Files\Sierra On-Line

[28/07/2005|22:24] C:\Program Files\Sonic

[24/03/2006|15:34] C:\Program Files\Soulseek-Test

[12/04/2007|19:23] C:\Program Files\Trillian

[03/11/2007|20:37] C:\Program Files\Uninstall Ask Toolbar.dll

[03/09/2005|12:12] C:\Program Files\Uninstall Information

[28/03/2006|22:23] C:\Program Files\Valve

[06/02/2006|14:24] C:\Program Files\VGA USB Camera

[25/08/2005|21:31] C:\Program Files\VideoLAN

[28/07/2005|22:20] C:\Program Files\Viewpoint

[15/02/2007|12:47] C:\Program Files\VIRTUA~1

[23/06/2007|15:09] C:\Program Files\Wanadoo

[02/01/2006|20:08] C:\Program Files\Wanadoo Messager

[16/02/2006|19:43] C:\Program Files\Webroot

[17/08/2006|10:00] C:\Program Files\Western Digital Technologies

[24/04/2008|16:12] C:\Program Files\Windower-3.3

[27/02/2008|16:03] C:\Program Files\Windows Live

[11/12/2006|13:22] C:\Program Files\Windows Media Connect 2

[11/12/2006|13:23] C:\Program Files\Windows Media Player

[16/08/2004|18:03] C:\Program Files\Windows NT

[16/08/2004|18:07] C:\Program Files\WindowsUpdate

[15/09/2006|03:10] C:\Program Files\WinRAR

[27/08/2005|22:15] C:\Program Files\WON

[26/02/2007|03:58] C:\Program Files\WS_FTP

[16/08/2004|18:11] C:\Program Files\xerox

 

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

 

[16/05/2007|19:35] C:\Program Files\Fichiers communs\Adobe

[10/12/2006|20:01] C:\Program Files\Fichiers communs\Ahead

[28/07/2005|22:20] C:\Program Files\Fichiers communs\AOL

[28/07/2005|22:20] C:\Program Files\Fichiers communs\aolshare

[06/01/2007|15:19] C:\Program Files\Fichiers communs\Creative

[28/07/2005|22:23] C:\Program Files\Fichiers communs\DESIGNER

[24/06/2007|13:05] C:\Program Files\Fichiers communs\FDEUnInstaller.exe

[21/01/2007|22:24] C:\Program Files\Fichiers communs\InstallShield

[21/01/2007|22:25] C:\Program Files\Fichiers communs\Jasc Software Inc

[23/03/2006|23:39] C:\Program Files\Fichiers communs\Java

[02/12/2007|08:54] C:\Program Files\Fichiers communs\Microsoft Shared

[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap

[28/07/2005|22:19] C:\Program Files\Fichiers communs\Nullsoft

[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC

[30/03/2006|00:19] C:\Program Files\Fichiers communs\PlayOnline

[14/01/2006|15:03] C:\Program Files\Fichiers communs\Real

[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services

[10/05/2008|08:28] C:\Program Files\Fichiers communs\Skype

[28/07/2005|22:24] C:\Program Files\Fichiers communs\Sonic Shared

[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines

[28/07/2005|22:12] C:\Program Files\Fichiers communs\SureThing Shared

[16/10/2006|08:49] C:\Program Files\Fichiers communs\Symantec Shared

[03/07/2007|23:26] C:\Program Files\Fichiers communs\System

[16/05/2007|19:35] C:\Program Files\Fichiers communs\Vbox

[02/12/2007|08:52] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[14/01/2006|15:03] C:\Program Files\Fichiers communs\xing shared

 

---------------------------[ Process ]--------------------------

 

... 69

 

iexplore.exe ~ [1040]

iexplore.exe ~ [1108]

 

----------------------[ Recherche avec S_Lop ]---------------------

 

Aucun fichier / dossier Lop trouvé !

 

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

 

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast\Great knob.exe

C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1

C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\bluemultidebugbird.exe

C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\Error Roam Mp3.exe

C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\Tray Sect.exe

C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\vzbpsjaw.exe

C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\yngbdhdf.exe

C:\Program Files\dashsa~1

C:\Program Files\Circle Developement

C:\WINDOWS\Prefetch\GREAT KNOB.EXE-1CCA74FD.pf

C:\WINDOWS\Prefetch\ERROR ROAM MP3.EXE-211AEBD3.pf

C:\WINDOWS\Prefetch\TRAY SECT.EXE-2E9FC16A.pf

C:\DOCUME~1\FARS~1\Cookies\farŠs@adex.bigpoint[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@adin.bigpoint[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@bigpoint[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@fr1.seafight.bigpoint[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@banner.cotedazurpalace[2].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@cotedazurpalace[2].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@fr1.seafight.bigpoint[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@32vegas[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@banner.32vegas[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@2xmoinscher[2].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@www.2xmoinscher[1].txt

C:\DOCUME~1\FARS~1\Cookies\farŠs@chinese888azn.skyrock[1].txt

C:\WINDOWS\Tasks\B17EAA04918959D4.job

 

----------------------[ Verification du Registre ]----------------------

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"bits bat"="\"C:\\DOCUME~1\\FARS~1\\APPLIC~1\\DASHSA~1\\Tray Sect.exe\""

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ante cast ooze tray"="\"C:\\Documents and Settings\\All Users\\Application Data\\Bin Wait Ante Cast\\Great knob.exe\""

 

--------------------[ Verification du fichier Hosts ]---------------------

 

Fichier Hosts MODIFIE

 

127.0.0.1 bin.errorprotector.com ## added by CiD

127.0.0.1 br.errorsafe.com ## added by CiD

127.0.0.1 br.winantivirus.com ## added by CiD

127.0.0.1 br.winfixer.com ## added by CiD

127.0.0.1 cdn.drivecleaner.com ## added by CiD

127.0.0.1 cdn.errorsafe.com ## added by CiD

127.0.0.1 cdn.winsoftware.com ## added by CiD

127.0.0.1 de.errorsafe.com ## added by CiD

127.0.0.1 de.winantivirus.com ## added by CiD

127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

127.0.0.1 download.cdn.errorsafe.com ## added by CiD

127.0.0.1 download.cdn.winsoftware.com ## added by CiD

127.0.0.1 download.errorsafe.com ## added by CiD

127.0.0.1 download.systemdoctor.com ## added by CiD

127.0.0.1 download.winantispyware.com ## added by CiD

127.0.0.1 download.windrivecleaner.com ## added by CiD

127.0.0.1 download.winfixer.com ## added by CiD

127.0.0.1 drivecleaner.com ## added by CiD

127.0.0.1 dynamique.drivecleaner.com ## added by CiD

127.0.0.1 errorprotector.com ## added by CiD

127.0.0.1 errorsafe.com ## added by CiD

127.0.0.1 es.winantivirus.com ## added by CiD

127.0.0.1 fr.winantivirus.com ## added by CiD

127.0.0.1 fr.winfixer.com ## added by CiD

127.0.0.1 go.drivecleaner.com ## added by CiD

127.0.0.1 go.errorsafe.com ## added by CiD

127.0.0.1 go.winantispyware.com ## added by CiD

127.0.0.1 go.winantivirus.com ## added by CiD

127.0.0.1 hk.winantivirus.com ## added by CiD

127.0.0.1 instlog.errorsafe.com ## added by CiD

127.0.0.1 instlog.winantivirus.com ## added by CiD

127.0.0.1 instlog.winfixer.com ## added by CiD

127.0.0.1 jsp.drivecleaner.com ## added by CiD

127.0.0.1 kb.errorsafe.com ## added by CiD

127.0.0.1 kb.winantivirus.com ## added by CiD

127.0.0.1 nl.errorsafe.com ## added by CiD

127.0.0.1 se.errorsafe.com ## added by CiD

127.0.0.1 secure.drivecleaner.com ## added by CiD

127.0.0.1 secure.errorsafe.com ## added by CiD

127.0.0.1 secure.winantispam.com ## added by CiD

127.0.0.1 secure.winantispy.com ## added by CiD

127.0.0.1 secure.winantivirus.com ## added by CiD

127.0.0.1 support.winantivirus.com ## added by CiD

127.0.0.1 trial.updates.winsoftware.com ## added by CiD

127.0.0.1 ulog.winantivirus.com ## added by CiD

127.0.0.1 utils.errorsafe.com ## added by CiD

127.0.0.1 utils.winantivirus.com ## added by CiD

127.0.0.1 utils.winfixer.com ## added by CiD

127.0.0.1 winantispyware.com ## added by CiD

127.0.0.1 winantivirus.com ## added by CiD

127.0.0.1 winfixer.com ## added by CiD

127.0.0.1 winfixer2006.com ## added by CiD

127.0.0.1 winsoftware.com ## added by CiD

127.0.0.1 www.drivecleaner.com ## added by CiD

127.0.0.1 www.errorprotector.com ## added by CiD

127.0.0.1 www.errorsafe.com ## added by CiD

127.0.0.1 www.systemdoctor.com ## added by CiD

127.0.0.1 www.utils.winfixer.com ## added by CiD

127.0.0.1 www.win-anti-virus-pro.com ## added by CiD

127.0.0.1 www.win-virus-pro.com ## added by CiD

127.0.0.1 www.winantispam.com ## added by CiD

127.0.0.1 www.winantispy.com ## added by CiD

127.0.0.1 www.winantispyware.com ## added by CiD

127.0.0.1 www.winantivirus.com ## added by CiD

127.0.0.1 www.winantiviruspro.com ## added by CiD

127.0.0.1 www.windrivecleaner.com ## added by CiD

127.0.0.1 www.windrivesafe.com ## added by CiD

127.0.0.1 www.winfixer.com ## added by CiD

127.0.0.1 www.winfixer2006.com ## added by CiD

127.0.0.1 www.winsoftware.com ## added by CiD

 

-> 72 ( 70 ## added by CiD )

 

/!\ 1 Not 127.0.0.1 !!

 

----------------[ Recherche de fichiers avec Catchme ]-----------------

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-06-01 00:40:58

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 0

 

--------------------[ Recherche d'autres infections ]---------------------

 

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\(Children Of E) Crack It.lnk

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\02-hacker_vs_kat_dj-techno_crack__kat....lnk

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\Brain Cracking.lnk

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\Cracked.lnk

=> C:\Documents and Settings\FarŠs\Cookies\farŠs@www.crackpassword[1].txt

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\install.txt

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\Jasc Paint Shop Pro 9.0 Trial - Bidjan

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\PSP900frTR.exe

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\Jasc Paint Shop Pro 9.0 Trial - Bidjan\JASCPA~1.EXE

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Les sons\Rock\Hard-Rock\Boucing Souls\bouncing.souls.-.self-titled.1997\bouncing souls - 01 - cracked.mp3

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Les sons\Rock\Hard-Rock\Brand New\Brand New-Deja Entendu-2003-Fnt\11-brand_new-play_crack_the_sky-fnt.mp3

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Les sons\Rock\Ind‚pendants\Nada Surf\The Proximity Effect\ 11 - Nada Surf - Firecracker.mp3

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Presets\Audio Effects\Vinyl Distortion\Crack.adv

=> C:\Documents and Settings\FarŠs\Recent\a1-dj_coone_-_cracked-hb.lnk

=> C:\Documents and Settings\FarŠs\Recent\DJ_Coone_-_Cracked-_DWX001_-Vinyl-2006-HB.lnk

=> C:\Documents and Settings\FarŠs\Recent\Virtual.DJ.Studio.v3.0.Incl.Crack.[L!(o)Network.Net].lnk

=> C:\Documents and Settings\FarŠs\Recent\Native.Instruments.Traktor.DJ.Studio.3.Keygen.Only-DELiRiUM.lnk

 

 

[F:11003][D:169]-> C:\DOCUME~1\FARS~1\LOCALS~1\Temp

[F:916][D:0]-> C:\DOCUME~1\FARS~1\Cookies

[F:2501][D:14]-> C:\DOCUME~1\FARS~1\LOCALS~1\TEMPOR~1\content.IE5

 

--------------------[ Fin du rapport a 0:43:51,73 ]----------------------

Loup blanc Godlike Member

Loup blanc

Posté(e)
Posté(e) (modifié)

1-

- Ferme toutes les fenêtre ouvertes

- Relance LopS&D et choisis l'option 2 (Suppression +Host)

- Ne touche à rien pendant la suppression

- si le bureau ne réapparait pas à la fin du nettoyage, appuie sur Ctrl + Alt + Suppr, menu «fichier», «Nouvelle tâche» et tu tapes « explorer.exe » et valide avec « OK »,

- Poste le rapport qui s'ouvrira en fin de nettoyage

 

2-

Maintenant, redémarre en mode sans échec (impératif pour faire la suite)

Si tu n'arrives vraiment pas à accéder à ce mode, dit le, je t'indiquerais une méthode un peu "bourrin" pour y arriver (je préfère l'éviter si possible).

 

Quand tu seras en mode sans echec,

 

Relance Smitfraudfix et choisis l'option 2

A la fin du fix, enregistre le rapport qui s'ouvrira sur ton bureau (pour le retrouver plus tard).

 

Redémarre ton PC en mode normal puis poste le rapport de Smitfraudfix.

 

3-

Relance Hijackthis et clique sur "Do a system scan only" puis coche les lignes suivantes (si elle sont présentes):

 

O2 - BHO: Microsoft Configuration - {40205287-E793-41AC-B95C-D8D064BA33CA} - C:\WINDOWS\system32\mscfg.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: (no name) - {964012F9-B2BD-64D2-97F0-6FD80F6C7ABB} - C:\DOCUME~1\FARS~1\APPLIC~1\AXISRO~1\DVDSOFT.exe (file missing)

O3 - Toolbar: (no name) - {EA0D26BD-9029-431A-86E0-83152D67828A} - (no file)

O4 - HKLM\..\Run: [slowoncestorepoll] C:\Documents and Settings\All Users\Application Data\SiteDartSlowOnce\delete blah.exe

O4 - HKCU\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\uwfx5.exe /scan

O4 - HKLM\..\Run: [ante cast ooze tray] "C:\Documents and Settings\All Users\Application Data\Bin Wait Ante Cast\Great knob.exe"

O4 - HKCU\..\Run: [bits bat] "C:\DOCUME~1\FARS~1\APPLIC~1\DASHSA~1\Tray Sect.exe"

O16 - DPF: {86EEF11E-FF16-48CE-B1A2-474B663041A9} -htt p://kit.carpediem.fr/39252/CD/StarsDuPorn.exe

O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} - http://acces.blonde.com/package/op/PackageHtmlCab.CAB

O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_fr_dl.cab

 

Clique ensuite sur "Fix checked".

 

4-

- Télécharge OTmoveit2 (Old timer) sur ton bureau.

- Fait un double clic sur le fichier OTMoveIt2.exe

- Assure toi que « Unregister Dll's and Ocx's » soit bien cochée,

- Copie puis colle le texte en rouge ci-dessous dans la fenêtre bleue de gauche en haut (Paste standard list of files/Folders to move) :

C:\WINDOWS\system32\mscfg.dll

C:\Documents and Settings\All Users\Application Data\SiteDartSlowOnce\

C:\Program Files\WinIFixer\

C:\Program Files\AskSBar

- Ensuite clique sur "Move IT", le résultat apparaît dans la fenêtre de droite.

- Clique sur "Exit" pour fermer le programme.

- Un rapport sera crée dans C:\_OTMoveIt\MovedFiles\xxxxxxxx .log (les xxxxx représente la date et l'heure de l'utilisation de OTmoveIt), ouvre le avec le bloc-note puis poste son contenu.

 

5-

Redémarre ton PC et poste un nouveau rapport Hijackthis

Modifié par Desch
Loup blanc Godlike Member

Loup blanc

Posté(e)
Posté(e)

Hello,

Comme tu ne semble pas avoir commencé la procédure, j'ai rajouté dans mon message précédant quelques lignes à fixer avec Hijackthis et un répertoire à virer avec Otmoveit.

 

Si tu as déjà commencé, ce n'est pas grave, elles pourront être faites ensuite

Peppitta Member

Peppitta

Posté(e)
  • Auteur
Posté(e)

Dac' j'ai seulement fait le rapport LOP S&D:

 

 

-----------------------[ Lop S&D 4.2.1-1 XP/Vista ]---------------------

 

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]

[ USER : FarŠs ] [ "C:\Lop SD" ] [ Selection : 2 ]

[ 01/06/2008 | 12:26:05,21 ] [ PC : CRAZYFARS ]

[ MAJ : 31-05-2008 | 14:12 ]

 

 

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

 

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast\Great knob.exe

Supprimé! - C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\bluemultidebugbird.exe

Supprimé! - C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\Error Roam Mp3.exe

Supprimé! - C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\Tray Sect.exe

Supprimé! - C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\vzbpsjaw.exe

Supprimé! - C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1\yngbdhdf.exe

Supprimé! - C:\WINDOWS\Prefetch\GREAT KNOB.EXE-1CCA74FD.pf

Supprimé! - C:\WINDOWS\Prefetch\ERROR ROAM MP3.EXE-211AEBD3.pf

Supprimé! - C:\WINDOWS\Prefetch\TRAY SECT.EXE-2E9FC16A.pf

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@adex.bigpoint[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@adin.bigpoint[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@bigpoint[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@fr1.seafight.bigpoint[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@banner.cotedazurpalace[2].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@cotedazurpalace[2].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@32vegas[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@banner.32vegas[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@2xmoinscher[2].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@www.2xmoinscher[1].txt

Supprimé! - C:\DOCUME~1\FARS~1\Cookies\farŠs@chinese888azn.skyrock[1].txt

Supprimé! - C:\WINDOWS\Tasks\B17EAA04918959D4.job

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast

Supprimé! - C:\DOCUME~1\FARS~1\APPLIC~1\dashsa~1

Supprimé! - C:\Program Files\dashsa~1

Supprimé! - C:\Program Files\Circle Developement

Restauré! - Fichier Hosts

 

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

 

Supprimé! - C:\Program Files\Viewpoint

Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

 

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

 

 

-------------[ Listing des dossiers dans Application Data ]------------

 

[17/02/2008|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[19/08/2005|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL

[17/03/2007|23:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[11/01/2006|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7

[06/01/2007|15:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative

[21/09/2005|20:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink

[16/08/2004|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini

[14/11/2007|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure

[07/01/2007|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[09/01/2006|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft

[21/01/2007|22:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[31/05/2008|18:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[15/02/2006|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[21/01/2006|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[03/09/2005|09:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar

[15/06/2007|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA

[02/05/2006|20:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles

[18/12/2005|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2

[27/11/2005|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm

[06/04/2007|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache

[27/08/2005|03:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[16/02/2006|16:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteDartSlowOnce

[10/05/2008|08:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[16/10/2006|08:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[28/08/2006|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Webroot

[01/10/2005|01:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[02/12/2007|08:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

 

[16/08/2004|17:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini

[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[28/07/2005|22:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia

[28/07/2005|22:32] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[28/07/2005|22:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[28/07/2005|22:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[28/07/2005|22:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

 

[11/04/2007|15:49] C:\DOCUME~1\FARS~2\APPLIC~1\Macromedia

 

[09/11/2006|11:22] C:\DOCUME~1\FARS~1\APPLIC~1\Ableton

[01/03/2008|08:29] C:\DOCUME~1\FARS~1\APPLIC~1\Adobe

[18/02/2008|17:27] C:\DOCUME~1\FARS~1\APPLIC~1\AdobeUM

[06/10/2006|10:31] C:\DOCUME~1\FARS~1\APPLIC~1\Ahead

[16/03/2007|23:02] C:\DOCUME~1\FARS~1\APPLIC~1\Apple Computer

[28/01/2006|23:00] C:\DOCUME~1\FARS~1\APPLIC~1\ArcSoft

[02/07/2007|21:03] C:\DOCUME~1\FARS~1\APPLIC~1\Creative

[22/08/2005|22:04] C:\DOCUME~1\FARS~1\APPLIC~1\CyberLink

[16/08/2004|17:55] C:\DOCUME~1\FARS~1\APPLIC~1\desktop.ini

[02/12/2007|08:47] C:\DOCUME~1\FARS~1\APPLIC~1\F-Secure

[08/01/2007|00:19] C:\DOCUME~1\FARS~1\APPLIC~1\Google

[16/10/2005|21:14] C:\DOCUME~1\FARS~1\APPLIC~1\Help

[16/08/2004|18:19] C:\DOCUME~1\FARS~1\APPLIC~1\Identities

[14/11/2007|19:15] C:\DOCUME~1\FARS~1\APPLIC~1\ispnews

[21/01/2007|22:23] C:\DOCUME~1\FARS~1\APPLIC~1\Jasc Software Inc

[17/02/2006|13:11] C:\DOCUME~1\FARS~1\APPLIC~1\Lavasoft

[19/08/2005|15:15] C:\DOCUME~1\FARS~1\APPLIC~1\Leadertech

[28/08/2005|13:11] C:\DOCUME~1\FARS~1\APPLIC~1\Macromedia

[31/05/2008|18:40] C:\DOCUME~1\FARS~1\APPLIC~1\Malwarebytes

[29/08/2007|18:54] C:\DOCUME~1\FARS~1\APPLIC~1\Microsoft

[14/01/2006|15:03] C:\DOCUME~1\FARS~1\APPLIC~1\Mozilla

[03/09/2005|09:14] C:\DOCUME~1\FARS~1\APPLIC~1\MSN Search Toolbar

[29/08/2005|16:58] C:\DOCUME~1\FARS~1\APPLIC~1\MSNInstaller

[01/02/2006|23:20] C:\DOCUME~1\FARS~1\APPLIC~1\Musicmatch

[19/08/2005|15:09] C:\DOCUME~1\FARS~1\APPLIC~1\OD2

[01/06/2008|07:46] C:\DOCUME~1\FARS~1\APPLIC~1\OpenOffice.org2

[14/11/2007|19:19] C:\DOCUME~1\FARS~1\APPLIC~1\PEX

[21/08/2005|09:41] C:\DOCUME~1\FARS~1\APPLIC~1\Real

[08/04/2007|00:54] C:\DOCUME~1\FARS~1\APPLIC~1\Screenshot Sender

[28/05/2008|21:15] C:\DOCUME~1\FARS~1\APPLIC~1\Skype

[28/05/2008|19:49] C:\DOCUME~1\FARS~1\APPLIC~1\skypePM

[19/08/2005|15:19] C:\DOCUME~1\FARS~1\APPLIC~1\Sonic

[28/07/2005|22:06] C:\DOCUME~1\FARS~1\APPLIC~1\Sun

[19/08/2005|14:30] C:\DOCUME~1\FARS~1\APPLIC~1\Symantec

[28/08/2005|16:11] C:\DOCUME~1\FARS~1\APPLIC~1\Talkback

[15/04/2007|16:46] C:\DOCUME~1\FARS~1\APPLIC~1\teamspeak2

[03/09/2006|19:44] C:\DOCUME~1\FARS~1\APPLIC~1\Template

[26/08/2005|01:02] C:\DOCUME~1\FARS~1\APPLIC~1\vlc

[16/02/2006|19:43] C:\DOCUME~1\FARS~1\APPLIC~1\Webroot

[03/09/2006|19:57] C:\DOCUME~1\FARS~1\APPLIC~1\wklnhst.dat

[28/07/2005|22:20] C:\DOCUME~1\FARS~1\APPLIC~1\You've Got Pictures Screensaver

 

[11/01/2006|20:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/10/2007|19:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

[16/02/2006|20:32] C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot

 

 

[16/08/2004|17:55] C:\DOCUME~1\Maman\APPLIC~1\desktop.ini

[16/08/2004|18:19] C:\DOCUME~1\Maman\APPLIC~1\Identities

[28/07/2005|22:13] C:\DOCUME~1\Maman\APPLIC~1\Macromedia

[11/01/2006|20:23] C:\DOCUME~1\Maman\APPLIC~1\Microsoft

[28/07/2005|22:13] C:\DOCUME~1\Maman\APPLIC~1\Real

[28/07/2005|22:06] C:\DOCUME~1\Maman\APPLIC~1\Sun

[28/07/2005|22:14] C:\DOCUME~1\Maman\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\Maman\APPLIC~1\You've Got Pictures Screensaver

 

[11/01/2006|20:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[28/08/2005|13:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

 

[20/08/2005|01:15] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

 

[16/08/2004|17:55] C:\DOCUME~1\Sabrina\APPLIC~1\desktop.ini

[16/08/2004|18:19] C:\DOCUME~1\Sabrina\APPLIC~1\Identities

[28/07/2005|22:13] C:\DOCUME~1\Sabrina\APPLIC~1\Macromedia

[11/01/2006|20:23] C:\DOCUME~1\Sabrina\APPLIC~1\Microsoft

[28/07/2005|22:13] C:\DOCUME~1\Sabrina\APPLIC~1\Real

[20/08/2005|02:16] C:\DOCUME~1\Sabrina\APPLIC~1\Skype

[28/07/2005|22:06] C:\DOCUME~1\Sabrina\APPLIC~1\Sun

[28/07/2005|22:14] C:\DOCUME~1\Sabrina\APPLIC~1\Symantec

[28/07/2005|22:20] C:\DOCUME~1\Sabrina\APPLIC~1\You've Got Pictures Screensaver

 

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

 

[01/06/2008 07:09][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job

[01/06/2008 12:00][--a------] C:\WINDOWS\tasks\Configurer mon PC.job

[01/06/2008 07:43][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

 

---------------[ Listing des dossiers dans C:\Program Files ]--------------

 

[11/05/2007|14:24] C:\Program Files\3D-RPG Builder 2005

[09/11/2006|11:20] C:\Program Files\Ableton

[16/05/2007|19:33] C:\Program Files\Adobe

[28/08/2005|23:42] C:\Program Files\Ahead

[19/08/2005|14:29] C:\Program Files\AOL 9.0

[28/07/2005|22:20] C:\Program Files\AOL Compagnon

[18/03/2007|01:29] C:\Program Files\Apple Software Update

[28/01/2006|23:03] C:\Program Files\ArcSoft

[07/01/2007|02:37] C:\Program Files\Audible

[28/07/2005|22:05] C:\Program Files\AvRack

[28/08/2005|23:32] C:\Program Files\Bethesda Softworks

[19/08/2005|16:49] C:\Program Files\Black Isle

[30/06/2006|08:47] C:\Program Files\bleucanard

[11/05/2007|14:28] C:\Program Files\Bodom-Child - RaBBi

[17/09/2005|20:05] C:\Program Files\Cheating-Death

[06/01/2007|15:27] C:\Program Files\Creative

[06/01/2007|15:22] C:\Program Files\Creative Installation Information

[17/02/2006|12:42] C:\Program Files\Creatures 2

[28/07/2005|22:20] C:\Program Files\CyberLink

[01/06/2006|02:19] C:\Program Files\DIFX

[28/01/2006|22:19] C:\Program Files\directx

[03/09/2005|12:11] C:\Program Files\Eidos Interactive

[18/04/2008|17:40] C:\Program Files\eMule

[10/05/2008|08:28] C:\Program Files\Fichiers communs

[11/05/2007|13:49] C:\Program Files\Game_Maker7

[28/06/2006|21:05] C:\Program Files\GMixon

[26/01/2006|00:32] C:\Program Files\GoldWave

[31/01/2007|10:28] C:\Program Files\Google

[09/01/2006|18:11] C:\Program Files\Grisoft

[17/10/2006|20:00] C:\Program Files\Half Life 2 Fr No Steam - Le Seul Qui Fonctionne- Test‚ Par Vince

[31/05/2008|21:47] C:\Program Files\HiJackthis

[12/12/2004|21:22] C:\Program Files\HL2

[12/12/2004|21:22] C:\Program Files\Installations d'half life 2.txt

[28/11/2007|18:43] C:\Program Files\InstallShield Installation Information

[09/04/2008|16:34] C:\Program Files\Internet Explorer

[23/06/2007|15:37] C:\Program Files\Inventel

[16/05/2007|07:19] C:\Program Files\Jasc Software Inc

[14/03/2008|10:01] C:\Program Files\Java

[28/10/2005|19:44] C:\Program Files\JeffProd

[28/03/2006|18:49] C:\Program Files\JVTorrent

[28/07/2005|22:20] C:\Program Files\Learn2.com

[02/07/2006|04:04] C:\Program Files\LimeWire

[31/05/2008|18:40] C:\Program Files\Malwarebytes' Anti-Malware

[16/08/2004|18:03] C:\Program Files\Messenger

[22/03/2008|11:03] C:\Program Files\Messenger Plus! Live

[19/04/2006|02:12] C:\Program Files\MessengerPlus! 3

[03/12/2007|16:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[16/08/2004|18:11] C:\Program Files\microsoft frontpage

[28/07/2005|22:23] C:\Program Files\Microsoft Office

[02/12/2007|08:58] C:\Program Files\Microsoft SQL Server Compact Edition

[28/07/2005|22:22] C:\Program Files\Microsoft Works

[28/07/2005|22:23] C:\Program Files\Microsoft.NET

[21/02/2007|00:33] C:\Program Files\MixScreen

[16/08/2004|18:06] C:\Program Files\Movie Maker

[01/06/2008|10:19] C:\Program Files\Mozilla Firefox

[23/04/2008|20:12] C:\Program Files\MSBuild

[29/08/2005|16:57] C:\Program Files\MSN

[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone

[03/09/2005|09:05] C:\Program Files\MSN Toolbar Suite

[15/11/2006|16:02] C:\Program Files\MSXML 4.0

[23/04/2008|20:04] C:\Program Files\MSXML 6.0

[01/02/2006|22:19] C:\Program Files\Musicmatch

[13/04/2007|17:50] C:\Program Files\Native Instruments

[16/09/2006|09:11] C:\Program Files\Nero

[27/11/2005|14:50] C:\Program Files\NetMeeting

[14/01/2006|14:56] C:\Program Files\Netscape

[16/08/2004|18:03] C:\Program Files\Online Services

[29/08/2007|18:28] C:\Program Files\OpenOffice.org 2.2

[03/07/2007|23:26] C:\Program Files\Outlook Express

[03/11/2007|20:21] C:\Program Files\Player Tool

[30/03/2006|00:19] C:\Program Files\PlayOnline

[16/03/2007|22:59] C:\Program Files\QuickTime

[28/07/2005|22:13] C:\Program Files\Real

[28/07/2005|22:05] C:\Program Files\Realtek Sound Manager

[23/04/2008|20:12] C:\Program Files\Reference Assemblies

[28/08/2005|13:39] C:\Program Files\Securitoo

[20/08/2005|17:09] C:\Program Files\Sierra On-Line

[28/07/2005|22:24] C:\Program Files\Sonic

[24/03/2006|15:34] C:\Program Files\Soulseek-Test

[12/04/2007|19:23] C:\Program Files\Trillian

[03/09/2005|12:12] C:\Program Files\Uninstall Information

[28/03/2006|22:23] C:\Program Files\Valve

[06/02/2006|14:24] C:\Program Files\VGA USB Camera

[25/08/2005|21:31] C:\Program Files\VideoLAN

[15/02/2007|12:47] C:\Program Files\VIRTUA~1

[23/06/2007|15:09] C:\Program Files\Wanadoo

[02/01/2006|20:08] C:\Program Files\Wanadoo Messager

[16/02/2006|19:43] C:\Program Files\Webroot

[17/08/2006|10:00] C:\Program Files\Western Digital Technologies

[24/04/2008|16:12] C:\Program Files\Windower-3.3

[27/02/2008|16:03] C:\Program Files\Windows Live

[11/12/2006|13:22] C:\Program Files\Windows Media Connect 2

[11/12/2006|13:23] C:\Program Files\Windows Media Player

[16/08/2004|18:03] C:\Program Files\Windows NT

[16/08/2004|18:07] C:\Program Files\WindowsUpdate

[15/09/2006|03:10] C:\Program Files\WinRAR

[27/08/2005|22:15] C:\Program Files\WON

[26/02/2007|03:58] C:\Program Files\WS_FTP

[16/08/2004|18:11] C:\Program Files\xerox

 

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

 

[16/05/2007|19:35] C:\Program Files\Fichiers communs\Adobe

[10/12/2006|20:01] C:\Program Files\Fichiers communs\Ahead

[28/07/2005|22:20] C:\Program Files\Fichiers communs\AOL

[28/07/2005|22:20] C:\Program Files\Fichiers communs\aolshare

[06/01/2007|15:19] C:\Program Files\Fichiers communs\Creative

[28/07/2005|22:23] C:\Program Files\Fichiers communs\DESIGNER

[24/06/2007|13:05] C:\Program Files\Fichiers communs\FDEUnInstaller.exe

[21/01/2007|22:24] C:\Program Files\Fichiers communs\InstallShield

[21/01/2007|22:25] C:\Program Files\Fichiers communs\Jasc Software Inc

[23/03/2006|23:39] C:\Program Files\Fichiers communs\Java

[02/12/2007|08:54] C:\Program Files\Fichiers communs\Microsoft Shared

[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap

[28/07/2005|22:19] C:\Program Files\Fichiers communs\Nullsoft

[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC

[30/03/2006|00:19] C:\Program Files\Fichiers communs\PlayOnline

[14/01/2006|15:03] C:\Program Files\Fichiers communs\Real

[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services

[10/05/2008|08:28] C:\Program Files\Fichiers communs\Skype

[28/07/2005|22:24] C:\Program Files\Fichiers communs\Sonic Shared

[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines

[28/07/2005|22:12] C:\Program Files\Fichiers communs\SureThing Shared

[16/10/2006|08:49] C:\Program Files\Fichiers communs\Symantec Shared

[03/07/2007|23:26] C:\Program Files\Fichiers communs\System

[16/05/2007|19:35] C:\Program Files\Fichiers communs\Vbox

[02/12/2007|08:52] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[14/01/2006|15:03] C:\Program Files\Fichiers communs\xing shared

 

---------------------------[ Process ]--------------------------

 

... 65

 

... OK !

 

----------------------[ Recherche avec S_Lop ]---------------------

 

Aucun fichier / dossier Lop trouvé !

 

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

 

Aucun fichier / dossier Lop trouvé !

 

----------------------[ Verification du Registre ]----------------------

 

..... OK !

 

--------------------[ Verification du fichier Hosts ]---------------------

 

Fichier Hosts MODIFIE

 

127.0.0.1 bin.errorprotector.com ## added by CiD

127.0.0.1 br.errorsafe.com ## added by CiD

127.0.0.1 br.winantivirus.com ## added by CiD

127.0.0.1 br.winfixer.com ## added by CiD

127.0.0.1 cdn.drivecleaner.com ## added by CiD

127.0.0.1 cdn.errorsafe.com ## added by CiD

127.0.0.1 cdn.winsoftware.com ## added by CiD

127.0.0.1 de.errorsafe.com ## added by CiD

127.0.0.1 de.winantivirus.com ## added by CiD

127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

127.0.0.1 download.cdn.errorsafe.com ## added by CiD

127.0.0.1 download.cdn.winsoftware.com ## added by CiD

127.0.0.1 download.errorsafe.com ## added by CiD

127.0.0.1 download.systemdoctor.com ## added by CiD

127.0.0.1 download.winantispyware.com ## added by CiD

127.0.0.1 download.windrivecleaner.com ## added by CiD

127.0.0.1 download.winfixer.com ## added by CiD

127.0.0.1 drivecleaner.com ## added by CiD

127.0.0.1 dynamique.drivecleaner.com ## added by CiD

127.0.0.1 errorprotector.com ## added by CiD

127.0.0.1 errorsafe.com ## added by CiD

127.0.0.1 es.winantivirus.com ## added by CiD

127.0.0.1 fr.winantivirus.com ## added by CiD

127.0.0.1 fr.winfixer.com ## added by CiD

127.0.0.1 go.drivecleaner.com ## added by CiD

127.0.0.1 go.errorsafe.com ## added by CiD

127.0.0.1 go.winantispyware.com ## added by CiD

127.0.0.1 go.winantivirus.com ## added by CiD

127.0.0.1 hk.winantivirus.com ## added by CiD

127.0.0.1 instlog.errorsafe.com ## added by CiD

127.0.0.1 instlog.winantivirus.com ## added by CiD

127.0.0.1 instlog.winfixer.com ## added by CiD

127.0.0.1 jsp.drivecleaner.com ## added by CiD

127.0.0.1 kb.errorsafe.com ## added by CiD

127.0.0.1 kb.winantivirus.com ## added by CiD

127.0.0.1 nl.errorsafe.com ## added by CiD

127.0.0.1 se.errorsafe.com ## added by CiD

127.0.0.1 secure.drivecleaner.com ## added by CiD

127.0.0.1 secure.errorsafe.com ## added by CiD

127.0.0.1 secure.winantispam.com ## added by CiD

127.0.0.1 secure.winantispy.com ## added by CiD

127.0.0.1 secure.winantivirus.com ## added by CiD

127.0.0.1 support.winantivirus.com ## added by CiD

127.0.0.1 trial.updates.winsoftware.com ## added by CiD

127.0.0.1 ulog.winantivirus.com ## added by CiD

127.0.0.1 utils.errorsafe.com ## added by CiD

127.0.0.1 utils.winantivirus.com ## added by CiD

127.0.0.1 utils.winfixer.com ## added by CiD

127.0.0.1 winantispyware.com ## added by CiD

127.0.0.1 winantivirus.com ## added by CiD

127.0.0.1 winfixer.com ## added by CiD

127.0.0.1 winfixer2006.com ## added by CiD

127.0.0.1 winsoftware.com ## added by CiD

127.0.0.1 www.drivecleaner.com ## added by CiD

127.0.0.1 www.errorprotector.com ## added by CiD

127.0.0.1 www.errorsafe.com ## added by CiD

127.0.0.1 www.systemdoctor.com ## added by CiD

127.0.0.1 www.utils.winfixer.com ## added by CiD

127.0.0.1 www.win-anti-virus-pro.com ## added by CiD

127.0.0.1 www.win-virus-pro.com ## added by CiD

127.0.0.1 www.winantispam.com ## added by CiD

127.0.0.1 www.winantispy.com ## added by CiD

127.0.0.1 www.winantispyware.com ## added by CiD

127.0.0.1 www.winantivirus.com ## added by CiD

127.0.0.1 www.winantiviruspro.com ## added by CiD

127.0.0.1 www.windrivecleaner.com ## added by CiD

127.0.0.1 www.windrivesafe.com ## added by CiD

127.0.0.1 www.winfixer.com ## added by CiD

127.0.0.1 www.winfixer2006.com ## added by CiD

127.0.0.1 www.winsoftware.com ## added by CiD

 

-> 72 ( 70 ## added by CiD )

 

/!\ 1 Not 127.0.0.1 !!

 

----------------[ Recherche de fichiers avec Catchme ]-----------------

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-06-01 12:29:06

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 0

 

--------------------[ Recherche d'autres infections ]---------------------

 

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\(Children Of E) Crack It.lnk

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\02-hacker_vs_kat_dj-techno_crack__kat....lnk

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\Brain Cracking.lnk

=> C:\Documents and Settings\FarŠs\Application Data\Real\RealPlayer\History\Cracked.lnk

=> C:\Documents and Settings\FarŠs\Cookies\farŠs@www.crackpassword[1].txt

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\install.txt

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\Jasc Paint Shop Pro 9.0 Trial - Bidjan

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\PSP900frTR.exe

=> C:\Documents and Settings\FarŠs\Local Settings\Application Data\Microsoft\Messenger\crazyfars@hotmail.com\Sharing Folders\juliedu094@hotmail.com\Paint Shop Pro v9 Fran‡ais Crack\Jasc_Paint_Shop_Pro_v9 FR\Jasc Paint Shop Pro 9.0 Trial - Bidjan\JASCPA~1.EXE

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Les sons\Rock\Hard-Rock\Boucing Souls\bouncing.souls.-.self-titled.1997\bouncing souls - 01 - cracked.mp3

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Les sons\Rock\Hard-Rock\Brand New\Brand New-Deja Entendu-2003-Fnt\11-brand_new-play_crack_the_sky-fnt.mp3

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Les sons\Rock\Ind‚pendants\Nada Surf\The Proximity Effect\ 11 - Nada Surf - Firecracker.mp3

=> C:\Documents and Settings\FarŠs\Mes documents\Ma musique\Presets\Audio Effects\Vinyl Distortion\Crack.adv

=> C:\Documents and Settings\FarŠs\Recent\a1-dj_coone_-_cracked-hb.lnk

=> C:\Documents and Settings\FarŠs\Recent\DJ_Coone_-_Cracked-_DWX001_-Vinyl-2006-HB.lnk

=> C:\Documents and Settings\FarŠs\Recent\Virtual.DJ.Studio.v3.0.Incl.Crack.[L!(o)Network.Net].lnk

=> C:\Documents and Settings\FarŠs\Recent\Native.Instruments.Traktor.DJ.Studio.3.Keygen.Only-DELiRiUM.lnk

 

 

[F:10999][D:169]-> C:\DOCUME~1\FARS~1\LOCALS~1\Temp

[F:905][D:0]-> C:\DOCUME~1\FARS~1\Cookies

[F:2502][D:14]-> C:\DOCUME~1\FARS~1\LOCALS~1\TEMPOR~1\content.IE5

 

--------------------[ Fin du rapport a 12:31:40,93 ]----------------------

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...