Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

rapport hijacktis

so72

Par so72
dans Analyses et éradication malwares

 Partager

Messages recommandés

so72 Junior Member

so72

Posté(e)
Posté(e)

bonjour ,

 

est ce que quelq'un peu analyser mon rapport suite a des ralentissement de mon pc

g des probleme du as des pub ,

 

 

 

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:24:28, on 11/08/2008

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Spyware Doctor\pctsTray.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Multimedia Mouse Driver\V5\StartAutorun.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Multimedia Mouse Driver\V5\KMConfig.exe

C:\Windows\System32\spool\drivers\w32x86\3\E_FATICAE.EXE

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Windows\System32\rundll32.exe

C:\Windows\ehome\ehmsas.exe

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Program Files\Multimedia Mouse Driver\V5\KMProcess.exe

C:\Program Files\Windows Live\Mail\wlmail.exe

C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

C:\Users\fabrice\HiJackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll

O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange Toolbar FR\ToolbarContainer250.dll

O4 - HKLM\..\Run: [iSTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\V5\StartAutorun.exe" KMConfig.exe

O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [RegistryBooster 2 d’Uniblue ] c:\program files\uniblue\registrybooster 2\StartRegistryBooster.exe

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [LSA Shellu] C:\Users\fabrice\lsass.exe

O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_SD48D.tmp" /EF "HKCU"

O4 - HKCU\..\Run: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.18\AMVConverter\grab.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab

O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-e924eade5fb12671.spaces.live.co...nPUpldfr-fr.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe

O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

 

--

End of file - 10291 bytes

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

Cet outil est conçu pour traiter les infections de type "Lop , Cid, Trojan Swizzor" , il peut indiquer des Fichiers / Dossiers légitimes !

 

Désactiver les protections résidentes ( Antivirus, etc...), vous les réactiverez ensuite,

http://eric.71.mespages.googlepages.com/LopSD.exe Télécharger Lop S&D de Eric71

sur le bureau,

 

* Double-cliquer dessus pour lancer l'installation

* Puis double-cliquer sur le raccourci Lop S&D présent sur le bureau

* Séléctionner la langue souhaitée , puis choisir l'Option 1 (Recherche)

* Patienter jusqu'à la fin du scan

* Poster le rapport généré (C:\lopR.txt)

 

( Si le Bureau ne réapparait pas presser Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , taper explorer.exe et valider )

 

Relancer Lop S&D

 

* Choisir l'Option 2 (Suppression)

* Ne fermez pas la fenêtre lors de la suppression !

* Poster le rapport généré (C:\lopR.txt)

 

 

(Si le Bureau ne réapparaît pas presser Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , taper explorer.exe et valider)

so72 Junior Member

so72

Posté(e)
  • Auteur
Posté(e)

--------------------\\ Lop S&D 4.2.2-7 XP / Vista

 

[ Windows VISTA (NT 6.0) Workstation Build 6001, Service Pack 1 ]

[ USER : fabrice ] [ "C:\Lop SD" ] [ Selection : 1 ]

[ 12/08/2008 | 18:58:14 ] [ PC : PC-DE-FABRICE (Proc:x86)]

[ MAJ : 12-08-2008 | 17:58 ]

[ UAC => 0 ]

 

--------------------\\ Listing des dossiers dans Local

 

[20/07/2008|19:58] C:\Users\fabrice\AppData\Local\ABBYY

[27/05/2008|14:07] C:\Users\fabrice\AppData\Local\Adobe

[30/07/2008|11:25] C:\Users\fabrice\AppData\Local\Ahead

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\Application Data

[11/08/2008|20:06] C:\Users\fabrice\AppData\Local\d3d9caps.dat

[10/08/2008|02:18] C:\Users\fabrice\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[27/05/2008|13:07] C:\Users\fabrice\AppData\Local\eMule

[07/08/2008|18:40] C:\Users\fabrice\AppData\Local\GDIPFONTCACHEV1.DAT

[27/05/2008|08:56] C:\Users\fabrice\AppData\Local\Google

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\Historique

[12/08/2008|18:16] C:\Users\fabrice\AppData\Local\IconCache.db

[11/08/2008|13:04] C:\Users\fabrice\AppData\Local\Microsoft

[29/06/2008|01:19] C:\Users\fabrice\AppData\Local\Microsoft Games

[11/07/2008|10:46] C:\Users\fabrice\AppData\Local\Microsoft Help

[26/05/2008|23:59] C:\Users\fabrice\AppData\Local\Mozilla

[11/06/2008|23:10] C:\Users\fabrice\AppData\Local\Multi_Media_France

[14/06/2008|10:59] C:\Users\fabrice\AppData\Local\Orange

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\PlayMovie

[26/05/2008|11:22] C:\Users\fabrice\AppData\Local\PowerCinema

[12/08/2008|18:57] C:\Users\fabrice\AppData\Local\Temp

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\Temporary Internet Files

[27/05/2008|00:34] C:\Users\fabrice\AppData\Local\VirtualStore

[27/05/2008|00:42] C:\Users\fabrice\AppData\Local\Windows Live Writer

 

--------------------\\ Tâches planifiées dans C:\Windows\tasks

 

[12/08/2008 18:17][--ah-----] C:\Windows\tasks\SA.DAT

[12/08/2008 18:16][--a------] C:\Windows\tasks\SCHEDLGU.TXT

 

--------------------\\ Listing des dossiers dans C:\ProgramData

 

[03/12/2007|10:42] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

[27/05/2008|14:19] C:\ProgramData\Adobe

[02/11/2006|15:02] C:\ProgramData\Application Data

[26/05/2008|11:17] C:\ProgramData\Bureau

[26/05/2008|11:21] C:\ProgramData\CyberLink

[02/11/2006|15:02] C:\ProgramData\Desktop

[02/11/2006|15:02] C:\ProgramData\Documents

[29/05/2008|16:28] C:\ProgramData\Downloaded Installations

[27/05/2008|13:07] C:\ProgramData\eMule

[18/07/2008|17:44] C:\ProgramData\EPSON

[02/06/2008|15:58] C:\ProgramData\eSobi

[26/05/2008|11:17] C:\ProgramData\Favoris

[02/11/2006|15:02] C:\ProgramData\Favorites

[27/05/2008|08:53] C:\ProgramData\Google

[30/07/2008|11:31] C:\ProgramData\LightScribe

[11/08/2008|20:04] C:\ProgramData\LUUnInstall.LiveUpdate

[26/05/2008|11:17] C:\ProgramData\Menu D‚marrer

[28/05/2008|18:06] C:\ProgramData\Messenger Plus!

[11/08/2008|12:42] C:\ProgramData\Microsoft

[08/08/2008|12:38] C:\ProgramData\Microsoft Help

[26/05/2008|11:17] C:\ProgramData\ModŠles

[11/06/2008|12:52] C:\ProgramData\MumboJumbo

[04/08/2008|20:52] C:\ProgramData\MythPeople

[30/07/2008|11:42] C:\ProgramData\Nero

[12/08/2008|17:56] C:\ProgramData\ntuser.pol

[20/07/2008|12:17] C:\ProgramData\NVIDIA

[12/07/2008|15:33] C:\ProgramData\PlayFirst

[11/08/2008|13:42] C:\ProgramData\Prevx

[12/08/2008|02:38] C:\ProgramData\Spybot - Search & Destroy

[02/11/2006|15:02] C:\ProgramData\Start Menu

[11/08/2008|20:04] C:\ProgramData\Symantec

[12/08/2008|18:18] C:\ProgramData\TEMP

[02/11/2006|15:02] C:\ProgramData\Templates

[18/07/2008|17:58] C:\ProgramData\UDL

[12/06/2008|10:52] C:\ProgramData\WinZip

[11/08/2008|17:27] C:\ProgramData\WLInstaller

[27/05/2008|07:59] C:\ProgramData\Yahoo! Companion

 

--------------------\\ Listing des dossiers dans C:\Program Files

 

[20/07/2008|19:57] C:\Program Files\ABBYY FineReader 6.0 Sprint

[26/05/2008|11:21] C:\Program Files\Acer Arcade Live

[03/12/2007|11:08] C:\Program Files\Acer GameZone

[26/05/2008|11:26] C:\Program Files\Acer Inc

[03/12/2007|10:42] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

[12/07/2008|14:44] C:\Program Files\Adobe

[08/07/2008|10:58] C:\Program Files\Alhademic Balls

[11/08/2008|19:36] C:\Program Files\Alwil Software

[06/06/2008|17:42] C:\Program Files\ArcSoft

[26/05/2008|11:23] C:\Program Files\ATI

[27/05/2008|14:31] C:\Program Files\bfgclient

[27/05/2008|14:39] C:\Program Files\Big Kahuna Reef 2 - Chain Reaction

[11/08/2008|20:04] C:\Program Files\Common Files

[11/06/2008|23:10] C:\Program Files\Conduit

[03/12/2007|10:59] C:\Program Files\CyberLink

[20/07/2008|12:14] C:\Program Files\desktop.ini

[05/07/2008|16:19] C:\Program Files\DivX

[27/05/2008|14:51] C:\Program Files\Dream Chronicles

[02/06/2008|11:04] C:\Program Files\eMule

[12/06/2008|23:27] C:\Program Files\EoRezo

[18/07/2008|18:07] C:\Program Files\epson

[03/12/2007|11:08] C:\Program Files\eSobi

[04/08/2008|18:45] C:\Program Files\Farm Frenzy

[26/05/2008|11:17] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]

[25/07/2008|14:40] C:\Program Files\Fishdom

[04/08/2008|19:14] C:\Program Files\Flip Words

[27/05/2008|20:10] C:\Program Files\Google

[04/06/2008|12:02] C:\Program Files\Gran Paradiso

[12/08/2008|03:45] C:\Program Files\Hitman Pro

[28/07/2008|19:35] C:\Program Files\InstallShield Installation Information

[09/07/2008|16:14] C:\Program Files\Intel

[20/07/2008|12:04] C:\Program Files\Internet Explorer

[27/05/2008|00:40] C:\Program Files\Java

[18/07/2008|20:27] C:\Program Files\JL2005C

[11/08/2008|13:45] C:\Program Files\Lavasoft

[03/06/2008|23:25] C:\Program Files\LimeWire

[11/06/2008|12:52] C:\Program Files\Luxor 2

[12/06/2008|21:01] C:\Program Files\MediaCoder Audio Edition

[27/05/2008|13:25] C:\Program Files\Messenger Plus! Live

[09/07/2008|16:27] C:\Program Files\Micro Application

[02/11/2006|14:37] C:\Program Files\Microsoft Games

[07/08/2008|10:29] C:\Program Files\Microsoft Office

[27/05/2008|00:38] C:\Program Files\Microsoft SQL Server Compact Edition

[07/08/2008|10:30] C:\Program Files\Microsoft Visual Studio

[12/06/2008|13:25] C:\Program Files\Microsoft Works

[03/12/2007|10:39] C:\Program Files\Microsoft.NET

[20/07/2008|12:04] C:\Program Files\Movie Maker

[16/07/2008|13:52] C:\Program Files\Mozilla Firefox

[05/07/2008|19:02] C:\Program Files\MP3 Player Utilities 4.18

[02/11/2006|14:37] C:\Program Files\MSBuild

[03/12/2007|10:06] C:\Program Files\MSXML 4.0

[11/06/2008|23:10] C:\Program Files\Multi_Media_France

[28/07/2008|19:34] C:\Program Files\Multimedia Mouse Driver

[27/05/2008|14:50] C:\Program Files\Mystere a Londres

[26/06/2008|10:27] C:\Program Files\Natalie Brooks - Secrets of Treasure House

[03/12/2007|10:47] C:\Program Files\NewTech Infosystems

[28/05/2008|16:43] C:\Program Files\OpenOffice.org 2.4

[25/06/2008|10:02] C:\Program Files\Orange Toolbar FR

[03/12/2007|10:34] C:\Program Files\Realtek

[02/11/2006|14:37] C:\Program Files\Reference Assemblies

[27/05/2008|13:42] C:\Program Files\Samsung

[27/05/2008|15:46] C:\Program Files\Sherlock Holmes - Le Mystere De La Momie

[09/07/2008|16:13] C:\Program Files\Sierra On-Line

[18/07/2008|17:35] C:\Program Files\Smart Panel

[04/08/2008|19:13] C:\Program Files\Sparkle

[11/08/2008|13:47] C:\Program Files\Spybot - Search & Destroy

[12/08/2008|17:58] C:\Program Files\Spyware Doctor

[12/08/2008|00:19] C:\Program Files\SpywareBlaster

[11/08/2008|20:04] C:\Program Files\Symantec

[27/05/2008|14:35] C:\Program Files\The Stone of Destiny

[27/05/2008|12:15] C:\Program Files\Uniblue

[02/11/2006|15:01] C:\Program Files\Uninstall Information

[29/05/2008|16:30] C:\Program Files\VirginMega

[26/07/2008|15:31] C:\Program Files\Voyage au Centre de la Terre

[20/07/2008|12:04] C:\Program Files\Windows Calendar

[20/07/2008|12:04] C:\Program Files\Windows Collaboration

[20/07/2008|12:04] C:\Program Files\Windows Defender

[20/07/2008|12:04] C:\Program Files\Windows Journal

[08/08/2008|12:51] C:\Program Files\Windows Live

[08/08/2008|12:50] C:\Program Files\Windows Live Toolbar

[20/07/2008|12:04] C:\Program Files\Windows Mail

[20/07/2008|12:04] C:\Program Files\Windows Media Player

[26/05/2008|11:17] C:\Program Files\Windows NT

[20/07/2008|12:04] C:\Program Files\Windows Photo Gallery

[20/07/2008|12:04] C:\Program Files\Windows Sidebar

[11/08/2008|19:03] C:\Program Files\WinRAR

[26/05/2008|11:21] C:\Program Files\Yahoo!

 

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

 

[27/05/2008|14:19] C:\Program Files\Common Files\Adobe

[08/07/2008|10:58] C:\Program Files\Common Files\Alhademic Group

[03/12/2007|10:39] C:\Program Files\Common Files\DESIGNER

[18/07/2008|18:00] C:\Program Files\Common Files\InstallShield

[27/05/2008|00:39] C:\Program Files\Common Files\Java

[03/12/2007|10:47] C:\Program Files\Common Files\LightScribe

[07/08/2008|10:29] C:\Program Files\Common Files\microsoft shared

[03/12/2007|10:46] C:\Program Files\Common Files\muvee Technologies

[30/07/2008|11:42] C:\Program Files\Common Files\Nero

[03/12/2007|10:47] C:\Program Files\Common Files\NewTech Infosystems

[03/12/2007|11:03] C:\Program Files\Common Files\Oberon Media

[27/05/2008|00:27] C:\Program Files\Common Files\PX Storage Engine

[02/11/2006|13:18] C:\Program Files\Common Files\Services

[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines

[11/08/2008|20:05] C:\Program Files\Common Files\Symantec Shared

[07/08/2008|10:26] C:\Program Files\Common Files\System

[27/05/2008|00:32] C:\Program Files\Common Files\WindowsLiveInstaller

 

--------------------\\ Process

 

( 67 Processus )

 

... OK !

 

--------------------\\ Recherche avec S_Lop

 

Aucun fichier / dossier Lop trouvé !

 

--------------------\\ Recherche de Fichiers / Dossiers Lop

 

C:\Users\fabrice\AppData\Local\Temp\nse3A4D.tmp

C:\Users\fabrice\AppData\Local\Temp\nse3A4D.tmp.xml

C:\Program Files\Multi_Media_France

C:\Program Files\Multi_Media_France\INSTALL.LOG

C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe

C:\Program Files\Multi_Media_France\tbMult.dll

C:\Program Files\Multi_Media_France\toolbar.cfg

C:\Program Files\Multi_Media_France\UNWISE.EXE

C:\Program Files\Multi_Media_France\UNWISE.INI

C:\Program Files\Multi_Media_France

C:\Program Files\Multi_Media_France\INSTALL.LOG

C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe

C:\Program Files\Multi_Media_France\tbMult.dll

C:\Program Files\Multi_Media_France\toolbar.cfg

C:\Program Files\Multi_Media_France\UNWISE.EXE

C:\Program Files\Multi_Media_France\UNWISE.INI

 

--------------------\\ Verification du Registre

 

..... OK !

 

--------------------\\ Verification du fichier Hosts

 

Fichier Hosts PROPRE

 

 

--------------------\\ Recherche de fichiers avec Catchme

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-12 18:58:21

Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 3

 

--------------------\\ Recherche d'autres infections

 

 

Aucune autre infection trouvée !

 

[F:5515][D:101]-> C:\Users\fabrice\AppData\Local\Temp

[F:64][D:1]-> C:\Users\fabrice\AppData\Roaming\MICROS~1\Windows\Cookies

[F:823][D:4]-> C:\Users\fabrice\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

[F:11][D:1]-> C:\$Recycle.Bin

 

--------------------\\ Fin du rapport a 18:59:28,09

[ UAC => 1 ]

so72 Junior Member

so72

Posté(e)
  • Auteur
Posté(e)

voici ci dessous mon dernier rapport

y a t'il autre chose a faire merci de ton aide

--------------------\\ Lop S&D 4.2.2-7 XP / Vista

 

[ Windows VISTA (NT 6.0) Workstation Build 6001, Service Pack 1 ]

[ USER : fabrice ] [ "C:\Lop SD" ] [ Selection : 2 ]

[ 12/08/2008 | 19:14:23 ] [ PC : PC-DE-FABRICE (Proc:x86)]

[ MAJ : 12-08-2008 | 17:58 ]

[ UAC => 0 ]

 

 

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

 

Supprime! - C:\Users\fabrice\AppData\Local\Temp\nse3A4D.tmp

Supprime! - C:\Users\fabrice\AppData\Local\Temp\nse3A4D.tmp.xml

Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG

Supprime! - C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe

Supprime! - C:\Program Files\Multi_Media_France\tbMult.dll

Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg

Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE

Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI

Supprime! - C:\Program Files\Multi_Media_France

[ Fichier Hosts ]

 

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

 

 

--------------------\\ Listing des dossiers dans Local

 

[20/07/2008|19:58] C:\Users\fabrice\AppData\Local\ABBYY

[27/05/2008|14:07] C:\Users\fabrice\AppData\Local\Adobe

[30/07/2008|11:25] C:\Users\fabrice\AppData\Local\Ahead

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\Application Data

[11/08/2008|20:06] C:\Users\fabrice\AppData\Local\d3d9caps.dat

[10/08/2008|02:18] C:\Users\fabrice\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[27/05/2008|13:07] C:\Users\fabrice\AppData\Local\eMule

[07/08/2008|18:40] C:\Users\fabrice\AppData\Local\GDIPFONTCACHEV1.DAT

[27/05/2008|08:56] C:\Users\fabrice\AppData\Local\Google

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\Historique

[12/08/2008|19:12] C:\Users\fabrice\AppData\Local\IconCache.db

[11/08/2008|13:04] C:\Users\fabrice\AppData\Local\Microsoft

[29/06/2008|01:19] C:\Users\fabrice\AppData\Local\Microsoft Games

[11/07/2008|10:46] C:\Users\fabrice\AppData\Local\Microsoft Help

[26/05/2008|23:59] C:\Users\fabrice\AppData\Local\Mozilla

[11/06/2008|23:10] C:\Users\fabrice\AppData\Local\Multi_Media_France

[14/06/2008|10:59] C:\Users\fabrice\AppData\Local\Orange

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\PlayMovie

[26/05/2008|11:22] C:\Users\fabrice\AppData\Local\PowerCinema

[12/08/2008|19:14] C:\Users\fabrice\AppData\Local\Temp

[26/05/2008|11:21] C:\Users\fabrice\AppData\Local\Temporary Internet Files

[27/05/2008|00:34] C:\Users\fabrice\AppData\Local\VirtualStore

[27/05/2008|00:42] C:\Users\fabrice\AppData\Local\Windows Live Writer

 

--------------------\\ Tâches planifiées dans C:\Windows\tasks

 

[12/08/2008 19:13][--ah-----] C:\Windows\tasks\SA.DAT

[12/08/2008 19:12][--a------] C:\Windows\tasks\SCHEDLGU.TXT

 

--------------------\\ Listing des dossiers dans C:\ProgramData

 

[03/12/2007|10:42] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

[27/05/2008|14:19] C:\ProgramData\Adobe

[02/11/2006|15:02] C:\ProgramData\Application Data

[26/05/2008|11:17] C:\ProgramData\Bureau

[26/05/2008|11:21] C:\ProgramData\CyberLink

[02/11/2006|15:02] C:\ProgramData\Desktop

[02/11/2006|15:02] C:\ProgramData\Documents

[29/05/2008|16:28] C:\ProgramData\Downloaded Installations

[27/05/2008|13:07] C:\ProgramData\eMule

[18/07/2008|17:44] C:\ProgramData\EPSON

[02/06/2008|15:58] C:\ProgramData\eSobi

[26/05/2008|11:17] C:\ProgramData\Favoris

[02/11/2006|15:02] C:\ProgramData\Favorites

[27/05/2008|08:53] C:\ProgramData\Google

[30/07/2008|11:31] C:\ProgramData\LightScribe

[11/08/2008|20:04] C:\ProgramData\LUUnInstall.LiveUpdate

[26/05/2008|11:17] C:\ProgramData\Menu D‚marrer

[28/05/2008|18:06] C:\ProgramData\Messenger Plus!

[11/08/2008|12:42] C:\ProgramData\Microsoft

[08/08/2008|12:38] C:\ProgramData\Microsoft Help

[26/05/2008|11:17] C:\ProgramData\ModŠles

[11/06/2008|12:52] C:\ProgramData\MumboJumbo

[04/08/2008|20:52] C:\ProgramData\MythPeople

[30/07/2008|11:42] C:\ProgramData\Nero

[12/08/2008|17:56] C:\ProgramData\ntuser.pol

[20/07/2008|12:17] C:\ProgramData\NVIDIA

[12/07/2008|15:33] C:\ProgramData\PlayFirst

[11/08/2008|13:42] C:\ProgramData\Prevx

[12/08/2008|02:38] C:\ProgramData\Spybot - Search & Destroy

[02/11/2006|15:02] C:\ProgramData\Start Menu

[11/08/2008|20:04] C:\ProgramData\Symantec

[12/08/2008|19:13] C:\ProgramData\TEMP

[02/11/2006|15:02] C:\ProgramData\Templates

[18/07/2008|17:58] C:\ProgramData\UDL

[12/06/2008|10:52] C:\ProgramData\WinZip

[11/08/2008|17:27] C:\ProgramData\WLInstaller

[27/05/2008|07:59] C:\ProgramData\Yahoo! Companion

 

--------------------\\ Listing des dossiers dans C:\Program Files

 

[20/07/2008|19:57] C:\Program Files\ABBYY FineReader 6.0 Sprint

[26/05/2008|11:21] C:\Program Files\Acer Arcade Live

[03/12/2007|11:08] C:\Program Files\Acer GameZone

[26/05/2008|11:26] C:\Program Files\Acer Inc

[03/12/2007|10:42] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

[12/07/2008|14:44] C:\Program Files\Adobe

[08/07/2008|10:58] C:\Program Files\Alhademic Balls

[11/08/2008|19:36] C:\Program Files\Alwil Software

[06/06/2008|17:42] C:\Program Files\ArcSoft

[26/05/2008|11:23] C:\Program Files\ATI

[27/05/2008|14:31] C:\Program Files\bfgclient

[27/05/2008|14:39] C:\Program Files\Big Kahuna Reef 2 - Chain Reaction

[11/08/2008|20:04] C:\Program Files\Common Files

[11/06/2008|23:10] C:\Program Files\Conduit

[03/12/2007|10:59] C:\Program Files\CyberLink

[20/07/2008|12:14] C:\Program Files\desktop.ini

[05/07/2008|16:19] C:\Program Files\DivX

[27/05/2008|14:51] C:\Program Files\Dream Chronicles

[02/06/2008|11:04] C:\Program Files\eMule

[12/06/2008|23:27] C:\Program Files\EoRezo

[18/07/2008|18:07] C:\Program Files\epson

[03/12/2007|11:08] C:\Program Files\eSobi

[04/08/2008|18:45] C:\Program Files\Farm Frenzy

[26/05/2008|11:17] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]

[25/07/2008|14:40] C:\Program Files\Fishdom

[04/08/2008|19:14] C:\Program Files\Flip Words

[27/05/2008|20:10] C:\Program Files\Google

[04/06/2008|12:02] C:\Program Files\Gran Paradiso

[12/08/2008|03:45] C:\Program Files\Hitman Pro

[28/07/2008|19:35] C:\Program Files\InstallShield Installation Information

[09/07/2008|16:14] C:\Program Files\Intel

[20/07/2008|12:04] C:\Program Files\Internet Explorer

[27/05/2008|00:40] C:\Program Files\Java

[18/07/2008|20:27] C:\Program Files\JL2005C

[11/08/2008|13:45] C:\Program Files\Lavasoft

[03/06/2008|23:25] C:\Program Files\LimeWire

[11/06/2008|12:52] C:\Program Files\Luxor 2

[12/06/2008|21:01] C:\Program Files\MediaCoder Audio Edition

[27/05/2008|13:25] C:\Program Files\Messenger Plus! Live

[09/07/2008|16:27] C:\Program Files\Micro Application

[02/11/2006|14:37] C:\Program Files\Microsoft Games

[07/08/2008|10:29] C:\Program Files\Microsoft Office

[27/05/2008|00:38] C:\Program Files\Microsoft SQL Server Compact Edition

[07/08/2008|10:30] C:\Program Files\Microsoft Visual Studio

[12/06/2008|13:25] C:\Program Files\Microsoft Works

[03/12/2007|10:39] C:\Program Files\Microsoft.NET

[20/07/2008|12:04] C:\Program Files\Movie Maker

[16/07/2008|13:52] C:\Program Files\Mozilla Firefox

[05/07/2008|19:02] C:\Program Files\MP3 Player Utilities 4.18

[02/11/2006|14:37] C:\Program Files\MSBuild

[03/12/2007|10:06] C:\Program Files\MSXML 4.0

[28/07/2008|19:34] C:\Program Files\Multimedia Mouse Driver

[27/05/2008|14:50] C:\Program Files\Mystere a Londres

[26/06/2008|10:27] C:\Program Files\Natalie Brooks - Secrets of Treasure House

[03/12/2007|10:47] C:\Program Files\NewTech Infosystems

[28/05/2008|16:43] C:\Program Files\OpenOffice.org 2.4

[25/06/2008|10:02] C:\Program Files\Orange Toolbar FR

[03/12/2007|10:34] C:\Program Files\Realtek

[02/11/2006|14:37] C:\Program Files\Reference Assemblies

[27/05/2008|13:42] C:\Program Files\Samsung

[27/05/2008|15:46] C:\Program Files\Sherlock Holmes - Le Mystere De La Momie

[09/07/2008|16:13] C:\Program Files\Sierra On-Line

[18/07/2008|17:35] C:\Program Files\Smart Panel

[04/08/2008|19:13] C:\Program Files\Sparkle

[11/08/2008|13:47] C:\Program Files\Spybot - Search & Destroy

[12/08/2008|17:58] C:\Program Files\Spyware Doctor

[12/08/2008|00:19] C:\Program Files\SpywareBlaster

[11/08/2008|20:04] C:\Program Files\Symantec

[27/05/2008|14:35] C:\Program Files\The Stone of Destiny

[27/05/2008|12:15] C:\Program Files\Uniblue

[02/11/2006|15:01] C:\Program Files\Uninstall Information

[29/05/2008|16:30] C:\Program Files\VirginMega

[26/07/2008|15:31] C:\Program Files\Voyage au Centre de la Terre

[20/07/2008|12:04] C:\Program Files\Windows Calendar

[20/07/2008|12:04] C:\Program Files\Windows Collaboration

[20/07/2008|12:04] C:\Program Files\Windows Defender

[20/07/2008|12:04] C:\Program Files\Windows Journal

[08/08/2008|12:51] C:\Program Files\Windows Live

[08/08/2008|12:50] C:\Program Files\Windows Live Toolbar

[20/07/2008|12:04] C:\Program Files\Windows Mail

[20/07/2008|12:04] C:\Program Files\Windows Media Player

[26/05/2008|11:17] C:\Program Files\Windows NT

[20/07/2008|12:04] C:\Program Files\Windows Photo Gallery

[20/07/2008|12:04] C:\Program Files\Windows Sidebar

[11/08/2008|19:03] C:\Program Files\WinRAR

[26/05/2008|11:21] C:\Program Files\Yahoo!

 

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

 

[27/05/2008|14:19] C:\Program Files\Common Files\Adobe

[08/07/2008|10:58] C:\Program Files\Common Files\Alhademic Group

[03/12/2007|10:39] C:\Program Files\Common Files\DESIGNER

[18/07/2008|18:00] C:\Program Files\Common Files\InstallShield

[27/05/2008|00:39] C:\Program Files\Common Files\Java

[03/12/2007|10:47] C:\Program Files\Common Files\LightScribe

[07/08/2008|10:29] C:\Program Files\Common Files\microsoft shared

[03/12/2007|10:46] C:\Program Files\Common Files\muvee Technologies

[30/07/2008|11:42] C:\Program Files\Common Files\Nero

[03/12/2007|10:47] C:\Program Files\Common Files\NewTech Infosystems

[03/12/2007|11:03] C:\Program Files\Common Files\Oberon Media

[27/05/2008|00:27] C:\Program Files\Common Files\PX Storage Engine

[02/11/2006|13:18] C:\Program Files\Common Files\Services

[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines

[11/08/2008|20:05] C:\Program Files\Common Files\Symantec Shared

[07/08/2008|10:26] C:\Program Files\Common Files\System

[27/05/2008|00:32] C:\Program Files\Common Files\WindowsLiveInstaller

 

--------------------\\ Process

 

( 65 Processus )

 

... OK !

 

--------------------\\ Recherche avec S_Lop

 

Aucun fichier / dossier Lop trouvé !

 

--------------------\\ Recherche de Fichiers / Dossiers Lop

 

Aucun fichier / dossier Lop trouvé !

 

--------------------\\ Verification du Registre

 

..... OK !

 

--------------------\\ Verification du fichier Hosts

 

Fichier Hosts PROPRE

 

 

--------------------\\ Recherche de fichiers avec Catchme

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-12 19:14:43

Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 3

 

--------------------\\ Recherche d'autres infections

 

 

Aucune autre infection trouvée !

 

[F:5581][D:101]-> C:\Users\fabrice\AppData\Local\Temp

[F:64][D:1]-> C:\Users\fabrice\AppData\Roaming\MICROS~1\Windows\Cookies

[F:830][D:4]-> C:\Users\fabrice\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

[F:11][D:1]-> C:\$Recycle.Bin

 

--------------------\\ Fin du rapport a 19:17:47,52

[ UAC => 1 ]

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...