Virus Antivirus XP 2008

Lens-Mania · le 4 septembre 2008

Bonsoir,

j'ai une fenêtre bleus avec le message suivant:

Windows Warning Message
Warning

Spyware detected on your computer

Install an antivirus or spyware remover to claen your computer

Warning! Win32/Adware.Virtumonde

Detected on your computer

Warning!Win32/PrivacyRemover.M64

Detected on your computer

Donc je suis entrain de faire un scan avec le log(Malwaresbytes' Anti-Malwares) et je poste le rapport sur cette page!!!Pouvez vous m'aidé s'il vous plait!!merci....

Rapport(Malwaresbytes' Anti-Malwares):

Malwarebytes' Anti-Malware 1.26

Version de la base de données: 1103

Windows 5.1.2600 Service Pack 2

05/09/2008 08:45:42

mbam-log-2008-09-05 (08-45-35).txt

Type de recherche: Examen complet (C:\|D:\|)

Eléments examinés: 265226

Temps écoulé: 4 hour(s), 33 minute(s), 50 second(s)

Processus mémoire infecté(s): 1

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 6

Valeur(s) du Registre infectée(s): 3

Elément(s) de données du Registre infecté(s): 2

Dossier(s) infecté(s): 12

Fichier(s) infecté(s): 23

Processus mémoire infecté(s):

C:\WINDOWS\system32\lphcp1jj0ev05.exe (Trojan.FakeAlert) -> No action taken.

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\rhct1jj0ev05 (Rogue.Multiple) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdssserv (Rootkit.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Adware) -> No action taken.

Valeur(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smrhct1jj0ev05 (Rogue.Multiple) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphcp1jj0ev05 (Trojan.FakeAlert) -> No action taken.

HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> No action taken.

Elément(s) de données du Registre infecté(s):

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):

C:\Program Files\rhct1jj0ev05 (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05 (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Application Data\rhct1jj0ev05\Quarantine\Packages (Rogue.Multiple) -> No action taken.

Fichier(s) infecté(s):

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP912\A0226587.exe (Spyware.OnlineGames) -> No action taken.

C:\WINDOWS\system32\1156411337.exe (Trojan.Downloader) -> No action taken.

C:\Program Files\rhct1jj0ev05\database.dat (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\license.txt (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\MFC71.dll (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\MFC71ENU.DLL (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\msvcp71.dll (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\msvcr71.dll (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\rhct1jj0ev05.exe (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\rhct1jj0ev05.exe.local (Rogue.Multiple) -> No action taken.

C:\Program Files\rhct1jj0ev05\Uninstall.exe (Rogue.Multiple) -> No action taken.

C:\WINDOWS\hosts (Trojan.Agent) -> No action taken.

C:\WINDOWS\system32\hosts (Trojan.Agent) -> No action taken.

C:\WINDOWS\system32\lphcp1jj0ev05.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\system32\phcp1jj0ev05.bmp (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\system32\eibcnvu_navps.dat (Adware.NaviPromo) -> No action taken.

C:\WINDOWS\system32\eibcnvu_nav.dat (Adware.NaviPromo) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\.tt1.tmp (Trojan.Downloader) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\.tt2.tmp (Trojan.Downloader) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\.tt3.tmp (Trojan.Downloader) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\.tt5.tmp (Trojan.Downloader) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\.tt6.tmp (Trojan.Downloader) -> No action taken.

C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\.ttE.tmp (Trojan.Downloader) -> No action taken.

Rapport(HijackThis):

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 08:56:45, on 05/09/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\LEXPPS.EXE

C:\WINDOWS\SYSTEM32\GEARSEC.EXE

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\Program Files\MioNet\MioNetManager.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\MioNet\jvm\bin\MioNet.exe

C:\windows\system\hpsysdrv.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\HP\KBD\KBD.EXE

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\ALCXMNTR.EXE

C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

C:\WINDOWS\VM_STI.EXE

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Lexmark 3400 Series\lxcymon.exe

C:\Program Files\Lexmark 3400 Series\ezprint.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe

C:\Program Files\Clock Tray Skins\ClockTraySkins.exe

C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\system32\lxcycoms.exe

C:\WINDOWS\System32\svchost.exe

C:\Documents and Settings\HP_Propriétaire\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll

O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll

O2 - BHO: (no name) - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - (no file)

O3 - Toolbar: (no name) - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - (no file)

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll

O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll

O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe

O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe

O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [bigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"

O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"

O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s

O4 - HKLM\..\Run: [ctfmon] C:\WINDOWS\system32\dlg\ctfmon.exe

O4 - HKLM\..\Run: [Eggs 1 Save Readme] C:\Documents and Settings\All Users\Application Data\List bias eggs 1\curbbody.exe

O4 - HKLM\..\Run: [bonyumerc] c:\windows\system32\bonyumerc.exe bonyumerc

O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [bfyhnjd] c:\windows\system32\bfyhnjd.exe bfyhnjd

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [eibcnvu] c:\windows\system32\eibcnvu.exe eibcnvu

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [Winlogin] C:\WINDOWS\system32\winlogin.exe

O4 - HKCU\..\Run: [skinClock] C:\Program Files\Clock Tray Skins\ClockTraySkins.exe

O4 - HKCU\..\Run: [puremeow] C:\DOCUME~1\HP_PRO~1\APPLIC~1\THIRDF~1\platformthis.exe

O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - .DEFAULT User Startup: CamTrack.lnk = C:\Program Files\DigitalPeers\CamTrack\camtrack.exe (User 'Default user')

O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?

O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html

O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab

O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab55762.cab

O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab55668.cab

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game10.zylom.com/activex/zylomgamesplayer.cab

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} -

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Droppix Service - Droppix - C:\Program Files\Fichiers communs\Droppix\DxService.exe

O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe

O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe

O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2

--

End of file - 10425 bytes

Modifié le 5 septembre 2008 par Lens-Mania

Falkra · le 4 septembre 2008

Bonsoir,

MBAM, c'est ce qu'il faut. Poste le raport quand il sera disponible, suivi d'un rapport HijackThis stp.

A ne faire qu'une fois que MBAM aura fini son travail.

Clique sur ce lien pour télécharger HijackThis 2.0.2 :

http://www.trendsecure.com/portal/en-US/_d.../HiJackThis.exe

Cette version est sans installateur ou Zip à décompresser, choisis de l'enregistrer sur le bureau.

Double-clique sur l'icône HijackThis :

HijackThis démarre, c'est le premier bouton qui nous intéresse "Do a system scan and save a logfile" (le fichier "log" est le rapport).

Clique dessus.

Copie-colle le contenu du rapport qui va s'afficher dans le Bloc-notes dans ta prochaine réponse.

Lens-Mania · le 5 septembre 2008

Rapport disponible!!merci de m'aider.....

Falkra · le 5 septembre 2008

Il reste 2 infections. Je vais te demander 2 rapports de diagnostic puis on nettoie tout ça.

** 1 **

Clique sur ce lien de navilog1 de IL-MAFIOSO :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistre le fichier sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).
Laisse-toi guider. Au menu principal, choisis 1 et valide.
(ne fais pas le choix 2,3 ou 4 sans accord)
Cela dure un moment, attends le message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le Bloc-notes va s'ouvrir.
Copie-colle l'intégralité du rapport dans ton prochain post. Referme le bloc note.

Note :

Le rapport est aussi sauvegardé à la racine du disque (fixnavi.txt)

Si ton antivirus se plaint de fichiers de Navilog1, dis lui d'ignorer les fichiers.

** 2 **

Désactive tes protections résidentes (Antivirus, ...) tu les réactivera après le scan

Télécharge Lop S&D < ici

Double-clique sur Lop S&D.exe présent sur ton bureau

Séléctionne la langue souhaitée, puis choisis l'Option 1 (Recherche)

Patiente jusqu'à la fin du scan

Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Lens-Mania · le 6 septembre 2008

Rapport (navilog1):

Search Navipromo version 3.6.5 commencé le 06/09/2008 à 9:49:51,98

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!

!!! Postez ce rapport sur le forum pour le faire analyser !!!

!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Session actuelle : "HP_Propriétaire"

Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]

Internet Explorer : 6.0.2900.2180

Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***

pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***

!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!

!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

*** Module de Recherche complémentaire ***

(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

eibcnvu.dat trouvé !

* Dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup trouvé !

Certificat Electronic-Group trouvé !

Certificat Montorgueil absent !

Certificat OOO-Favorit trouvé !

Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

*** Analyse terminée le 06/09/2008 à 10:08:03,59 ***

Rapport (Lop S&D):

--------------------\\ Lop S&D 4.2.4-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2

X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3000+ )

BIOS : Phoenix - Award BIOS v6.00PG

USER : HP_Propriétaire ( Administrator )

BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1201 [VPS 080905-0] 4.8.1201 (Not Activated)

"C:\Lop SD" ( MAJ : 04-09-2008|09:55 )

Option : [1] ( 06/09/2008|10:12 )

--------------------\\ Listing des dossiers dans APPLIC~1

[17/08/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[20/10/2006|15:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems

[02/02/2007|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[21/06/2007|11:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software

[25/07/2007|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix

[13/06/2008|17:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink

[12/03/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr

[20/08/2006|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP

[03/01/2005|06:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[25/07/2007|23:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe

[25/09/2007|14:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia

[24/09/2006|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision

[04/09/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[27/09/2007|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[04/05/2007|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[12/01/2006|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies

[19/02/2007|00:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm

[07/02/2006|17:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic

[25/01/2007|16:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[09/08/2006|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[25/12/2006|14:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[13/11/2006|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia

[02/02/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks

[01/12/2006|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems

[25/08/2006|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[19/02/2007|22:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[03/01/2005|06:43] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer

[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[03/01/2005|07:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[03/01/2005|06:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView

[03/01/2005|07:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[17/08/2008|14:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe

[12/01/2006|21:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM

[23/01/2007|12:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead

[25/02/2007|01:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer

[15/01/2006|00:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft

[03/09/2008|15:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus

[24/02/2007|03:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\BitDownload

[12/11/2006|12:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Briquolo

[12/08/2006|16:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CamfrogWEB

[03/11/2006|21:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CamTrack

[18/02/2007|17:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Canon

[19/10/2007|23:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Carnival Software

[01/10/2006|16:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ContactMusic

[13/03/2007|02:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner

[25/07/2007|23:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Droppix

[24/02/2008|21:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Faces

[19/02/2008|18:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FaxCtr

[20/08/2006|20:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google

[15/01/2006|00:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help

[31/03/2006|11:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP

[12/01/2006|22:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ

[25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities

[26/08/2008|12:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield

[12/01/2006|19:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo

[16/12/2006|21:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Jasc

[12/01/2006|20:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech

[20/04/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia

[04/09/2008|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes

[12/08/2006|15:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Media Player Classic

[27/09/2007|01:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft

[19/11/2006|22:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla

[03/08/2007|21:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller

[12/01/2006|20:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies

[24/05/2007|18:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PE Explorer

[03/11/2006|16:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Publish Providers

[11/08/2008|21:57] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real

[01/08/2007|01:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Resource Tuner

[03/01/2005|06:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView

[07/02/2006|15:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Serif

[12/01/2006|20:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic

[22/08/2006|16:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic Foundry

[22/08/2006|16:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sony

[23/02/2008|17:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SopCast

[30/01/2008|13:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sports Interactive

[26/01/2006|22:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun

[12/01/2006|22:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec

[12/01/2006|20:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template

[21/07/2008|12:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Thinstall

[02/02/2008|22:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TVU networks

[22/09/2006|13:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ulead Systems

[23/02/2008|13:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\uTorrent

[24/01/2008|12:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc

[15/04/2006|18:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help

[12/04/2006|07:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[20/01/2006|20:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[29/09/2006 11:10][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job

[05/09/2008 08:49][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ MsgPlus SPONSOR INSTALLED !

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]

"SponsorInstalled"=dword:00000001

--------------------\\ Listing des dossiers dans C:\Program Files

[30/05/2007|11:29] C:\Program Files\Adobe

[06/01/2008|11:18] C:\Program Files\AFSExplorer_3_7

[12/03/2007|13:52] C:\Program Files\Ahead

[01/11/2006|10:54] C:\Program Files\Alcohol Soft

[21/05/2008|17:20] C:\Program Files\Alfascript V2.56

[09/08/2006|16:20] C:\Program Files\Alwil Software

[14/05/2007|19:53] C:\Program Files\AmitySource

[25/12/2006|11:58] C:\Program Files\AnMing

[28/08/2006|11:58] C:\Program Files\Ant Movie Catalog

[15/01/2006|00:13] C:\Program Files\ArcSoft

[19/03/2007|14:12] C:\Program Files\Ashampoo

[03/01/2005|06:18] C:\Program Files\ATI Technologies

[30/06/2007|11:18] C:\Program Files\Audacity

[19/09/2006|17:49] C:\Program Files\AviSynth 2.5

[27/02/2008|10:04] C:\Program Files\Azureus

[25/08/2008|09:24] C:\Program Files\Bejeweled 2 Deluxe

[22/03/2008|00:24] C:\Program Files\Bit Che

[30/05/2007|11:07] C:\Program Files\CCleaner

[12/08/2006|16:05] C:\Program Files\CFWebAdvancedU_BOBTV.FR

[25/12/2006|17:04] C:\Program Files\Clock Tray Skins

[16/02/2008|20:41] C:\Program Files\Cryptenarval

[27/05/2007|23:12] C:\Program Files\DaViDeo3

[03/11/2006|20:03] C:\Program Files\DigitalPeers

[11/04/2006|15:16] C:\Program Files\directx

[25/09/2007|14:01] C:\Program Files\DivX

[03/01/2008|12:45] C:\Program Files\DkZ Studio

[25/07/2007|23:21] C:\Program Files\Droppix

[31/07/2007|10:34] C:\Program Files\DVDVIDEOSOFT

[03/08/2007|12:55] C:\Program Files\Easy GIF Animator

[31/07/2006|11:40] C:\Program Files\Easy Internet signup

[31/08/2006|12:37] C:\Program Files\Elaborate Bytes

[25/09/2007|14:52] C:\Program Files\Emoticons-plus.com

[11/08/2008|15:50] C:\Program Files\eMule

[29/01/2007|23:22] C:\Program Files\eRightSoft

[26/08/2008|12:16] C:\Program Files\Fichiers communs

[29/01/2006|10:25] C:\Program Files\Formosoft

[06/01/2008|11:08] C:\Program Files\Game Graphic Studio

[30/01/2007|14:46] C:\Program Files\Google

[03/01/2005|06:38] C:\Program Files\Hewlett-Packard

[03/01/2005|06:25] C:\Program Files\HP

[25/07/2007|23:24] C:\Program Files\illiminable

[30/10/2006|16:10] C:\Program Files\Illustrate

[21/08/2008|09:44] C:\Program Files\InstallShield Installation Information

[06/01/2007|17:08] C:\Program Files\Internet Explorer

[17/05/2006|18:29] C:\Program Files\InterVideo

[03/01/2005|06:42] C:\Program Files\iPod

[03/01/2005|06:42] C:\Program Files\iTunes

[10/02/2007|04:04] C:\Program Files\Jasc Software Inc

[02/02/2008|22:55] C:\Program Files\Java

[08/02/2007|15:24] C:\Program Files\K-Lite Codec Pack

[22/09/2006|13:38] C:\Program Files\KMaestro

[25/10/2007|12:17] C:\Program Files\KONAMI

[16/11/2006|23:07] C:\Program Files\Kwyshell

[04/07/2006|19:48] C:\Program Files\langart

[01/11/2007|17:28] C:\Program Files\Lavalys

[24/07/2007|09:26] C:\Program Files\Lexmark 3400 Series

[01/04/2007|14:52] C:\Program Files\Lexmark Fax Solutions

[01/04/2007|14:58] C:\Program Files\Lexmark Toolbar

[20/01/2006|18:43] C:\Program Files\Ligos

[05/09/2008|08:54] C:\Program Files\LimeWire

[05/09/2008|08:52] C:\Program Files\lx_cats

[22/03/2008|12:09] C:\Program Files\Magic Swf2Gif

[04/09/2008|21:56] C:\Program Files\Malwarebytes' Anti-Malware

[21/03/2008|00:35] C:\Program Files\MessengerPlus! 3

[25/09/2007|15:22] C:\Program Files\Micro Application

[25/11/2004|05:27] C:\Program Files\microsoft frontpage

[20/05/2007|19:22] C:\Program Files\Microsoft Games

[03/01/2005|06:42] C:\Program Files\Microsoft Office

[05/09/2008|08:54] C:\Program Files\Microsoft Works

[08/08/2007|21:58] C:\Program Files\Mindscape

[05/09/2008|08:54] C:\Program Files\MioNet

[25/11/2004|05:27] C:\Program Files\Movie Maker

[06/09/2008|09:09] C:\Program Files\Mozilla Firefox

[25/03/2007|19:31] C:\Program Files\mp3DirectCut

[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone

[20/06/2008|11:15] C:\Program Files\MSN Messenger

[19/10/2007|11:10] C:\Program Files\MSN Pictures Displayer

[03/01/2005|06:46] C:\Program Files\muvee Technologies

[06/09/2008|10:09] C:\Program Files\Navilog1

[01/02/2005|11:24] C:\Program Files\NetMeeting

[25/09/2007|14:37] C:\Program Files\NetUno

[25/11/2004|05:27] C:\Program Files\Online Services

[20/01/2006|22:09] C:\Program Files\OpenOffice.org1.0.1

[26/08/2008|12:27] C:\Program Files\Orange

[06/01/2007|17:08] C:\Program Files\Outlook Express

[05/03/2007|00:53] C:\Program Files\Pando Networks

[03/01/2005|06:58] C:\Program Files\PC-Doctor 5 for Windows

[20/08/2006|18:50] C:\Program Files\PDFCreator

[17/07/2006|13:03] C:\Program Files\Philips

[01/10/2007|13:00] C:\Program Files\Photo filtre

[02/12/2006|01:30] C:\Program Files\PIXELA

[05/09/2006|18:07] C:\Program Files\Player Video TF1

[10/11/2006|22:51] C:\Program Files\quickSkin

[02/02/2007|20:24] C:\Program Files\QuickTime

[30/12/2007|15:40] C:\Program Files\ReflexiveArcade

[04/09/2008|21:35] C:\Program Files\RogueRemover FREE

[24/08/2008|17:05] C:\Program Files\SAGEM

[24/08/2008|17:05] C:\Program Files\SAGEM WiFi manager

[24/08/2008|17:05] C:\Program Files\SAGEM(2)

[28/07/2006|14:19] C:\Program Files\Securitoo

[03/01/2005|06:56] C:\Program Files\Services en ligne

[13/03/2007|01:31] C:\Program Files\SlySoft

[22/12/2007|11:19] C:\Program Files\solarus

[03/01/2005|06:37] C:\Program Files\Sonic

[22/08/2006|16:43] C:\Program Files\Sonic Foundry Setup

[12/11/2006|23:10] C:\Program Files\Sony

[09/11/2006|15:09] C:\Program Files\Sony Setup

[17/08/2008|14:38] C:\Program Files\SopCast

[25/09/2007|14:02] C:\Program Files\SoundSpectrum

[30/01/2008|13:52] C:\Program Files\Sports Interactive

[05/11/2007|20:14] C:\Program Files\Spybot - Search & Destroy

[09/08/2006|18:13] C:\Program Files\Symantec

[04/09/2008|21:15] C:\Program Files\TeaTimer (Spybot - Search & Destroy)

[25/05/2007|11:45] C:\Program Files\themexp

[29/04/2006|16:15] C:\Program Files\Trust

[22/12/2007|11:20] C:\Program Files\Tuning Car Studio

[04/02/2008|11:32] C:\Program Files\TVAnts

[25/01/2007|04:15] C:\Program Files\Ulead Systems

[18/12/2006|22:23] C:\Program Files\UltraISO

[02/12/2006|00:45] C:\Program Files\Uninstall Information

[26/12/2007|21:19] C:\Program Files\Utorrent

[17/05/2006|17:33] C:\Program Files\Video Capturix Suite

[24/01/2008|12:23] C:\Program Files\VideoLAN

[03/10/2006|12:56] C:\Program Files\Visicom Media

[18/11/2007|21:11] C:\Program Files\vso

[03/11/2006|16:11] C:\Program Files\VSTplugins

[20/10/2006|14:37] C:\Program Files\vv

[18/05/2007|12:35] C:\Program Files\Wanadoo

[04/01/2008|00:24] C:\Program Files\Winamp

[26/05/2007|01:35] C:\Program Files\WinASPI

[13/02/2008|23:34] C:\Program Files\WinAVI MP4 Converter

[02/11/2006|15:40] C:\Program Files\Windows Media Connect 2

[06/01/2007|17:08] C:\Program Files\Windows Media Player

[01/02/2005|11:24] C:\Program Files\Windows NT

[09/08/2006|16:27] C:\Program Files\WindowsUpdate

[21/03/2008|00:09] C:\Program Files\WinRAR

[25/11/2004|05:28] C:\Program Files\xerox

[13/01/2007|07:02] C:\Program Files\Xi

[26/05/2007|01:35] C:\Program Files\XviD

[14/05/2007|19:38] C:\Program Files\Yahoo!

[30/01/2008|13:56] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/05/2007|11:31] C:\Program Files\Fichiers communs\Adobe

[20/10/2006|15:25] C:\Program Files\Fichiers communs\Adobe Systems Shared

[12/03/2007|13:52] C:\Program Files\Fichiers communs\Ahead

[03/02/2006|22:55] C:\Program Files\Fichiers communs\AOL

[25/07/2007|23:25] C:\Program Files\Fichiers communs\Droppix

[31/07/2007|10:34] C:\Program Files\Fichiers communs\DVDVIDEOSOFT

[18/12/2006|22:23] C:\Program Files\Fichiers communs\EZB Systems

[26/08/2008|12:16] C:\Program Files\Fichiers communs\France Telecom

[03/01/2005|06:32] C:\Program Files\Fichiers communs\Hewlett-Packard

[03/01/2005|06:29] C:\Program Files\Fichiers communs\HP

[03/01/2005|06:45] C:\Program Files\Fichiers communs\InstallShield

[03/01/2005|06:11] C:\Program Files\Fichiers communs\Java

[25/07/2007|23:23] C:\Program Files\Fichiers communs\LightScribe

[17/02/2007|20:23] C:\Program Files\Fichiers communs\Macromedia Shared

[15/02/2006|21:44] C:\Program Files\Fichiers communs\Micro Application Shared

[23/10/2007|07:17] C:\Program Files\Fichiers communs\Microsoft Shared

[01/04/2006|20:09] C:\Program Files\Fichiers communs\MimarSinan

[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap

[03/01/2005|06:46] C:\Program Files\Fichiers communs\muvee Technologies

[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC

[11/08/2008|21:57] C:\Program Files\Fichiers communs\Real

[15/02/2006|16:16] C:\Program Files\Fichiers communs\Services

[03/01/2005|06:36] C:\Program Files\Fichiers communs\Sonic Shared

[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines

[03/01/2005|06:36] C:\Program Files\Fichiers communs\SureThing Shared

[23/01/2007|21:56] C:\Program Files\Fichiers communs\SWF Studio

[14/08/2006|01:17] C:\Program Files\Fichiers communs\System

[03/01/2005|06:37] C:\Program Files\Fichiers communs\TiVo Shared

--------------------\\ Process

( 53 Processes )

MsgPlus.exe ~ [PID:2876]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\msgpl_1d56.exe

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\NSIS

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsj21A.tmp

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsm24F.tmp

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsn31F.tmp

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsq1341.tmp

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nstmp

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsuCD6.tmp

C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\nsz47E.tmp

C:\DOCUME~1\HP_PRO~1\APPLIC~1\BitDownload

C:\DOCUME~1\HP_PRO~1\APPLIC~1\BitDownload\Data

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD

127.0.0.1 br.errorsafe.com ## added by CiD

127.0.0.1 br.winantivirus.com ## added by CiD

127.0.0.1 br.winfixer.com ## added by CiD

127.0.0.1 cdn.drivecleaner.com ## added by CiD

127.0.0.1 cdn.errorsafe.com ## added by CiD

127.0.0.1 cdn.winsoftware.com ## added by CiD

127.0.0.1 de.errorsafe.com ## added by CiD

127.0.0.1 de.winantivirus.com ## added by CiD

127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

127.0.0.1 download.cdn.errorsafe.com ## added by CiD

127.0.0.1 download.cdn.winsoftware.com ## added by CiD

127.0.0.1 download.errorsafe.com ## added by CiD

127.0.0.1 download.systemdoctor.com ## added by CiD

127.0.0.1 download.winantispyware.com ## added by CiD

127.0.0.1 download.windrivecleaner.com ## added by CiD

127.0.0.1 download.winfixer.com ## added by CiD

127.0.0.1 drivecleaner.com ## added by CiD

127.0.0.1 dynamique.drivecleaner.com ## added by CiD

127.0.0.1 errorprotector.com ## added by CiD

127.0.0.1 errorsafe.com ## added by CiD

127.0.0.1 es.winantivirus.com ## added by CiD

127.0.0.1 fr.winantivirus.com ## added by CiD

127.0.0.1 fr.winfixer.com ## added by CiD

127.0.0.1 go.drivecleaner.com ## added by CiD

127.0.0.1 go.errorsafe.com ## added by CiD

127.0.0.1 go.winantispyware.com ## added by CiD

127.0.0.1 go.winantivirus.com ## added by CiD

127.0.0.1 hk.winantivirus.com ## added by CiD

127.0.0.1 instlog.errorsafe.com ## added by CiD

127.0.0.1 instlog.winantivirus.com ## added by CiD

127.0.0.1 instlog.winfixer.com ## added by CiD

127.0.0.1 jsp.drivecleaner.com ## added by CiD

127.0.0.1 kb.errorsafe.com ## added by CiD

127.0.0.1 kb.winantivirus.com ## added by CiD

127.0.0.1 nl.errorsafe.com ## added by CiD

127.0.0.1 se.errorsafe.com ## added by CiD

127.0.0.1 secure.drivecleaner.com ## added by CiD

127.0.0.1 secure.errorsafe.com ## added by CiD

127.0.0.1 secure.winantispam.com ## added by CiD

127.0.0.1 secure.winantispy.com ## added by CiD

127.0.0.1 secure.winantivirus.com ## added by CiD

127.0.0.1 support.winantivirus.com ## added by CiD

127.0.0.1 trial.updates.winsoftware.com ## added by CiD

127.0.0.1 ulog.winantivirus.com ## added by CiD

127.0.0.1 utils.errorsafe.com ## added by CiD

127.0.0.1 utils.winantivirus.com ## added by CiD

127.0.0.1 utils.winfixer.com ## added by CiD

127.0.0.1 winantispyware.com ## added by CiD

127.0.0.1 winantivirus.com ## added by CiD

127.0.0.1 winfixer.com ## added by CiD

127.0.0.1 winfixer2006.com ## added by CiD

127.0.0.1 winsoftware.com ## added by CiD

127.0.0.1 www.drivecleaner.com ## added by CiD

127.0.0.1 www.errorprotector.com ## added by CiD

127.0.0.1 www.errorsafe.com ## added by CiD

127.0.0.1 www.systemdoctor.com ## added by CiD

127.0.0.1 www.utils.winfixer.com ## added by CiD

127.0.0.1 www.win-anti-virus-pro.com ## added by CiD

127.0.0.1 www.win-virus-pro.com ## added by CiD

127.0.0.1 www.winantispam.com ## added by CiD

127.0.0.1 www.winantispy.com ## added by CiD

127.0.0.1 www.winantispyware.com ## added by CiD

127.0.0.1 www.winantivirus.com ## added by CiD

127.0.0.1 www.winantiviruspro.com ## added by CiD

127.0.0.1 www.windrivecleaner.com ## added by CiD

127.0.0.1 www.windrivesafe.com ## added by CiD

127.0.0.1 www.winfixer.com ## added by CiD

127.0.0.1 www.winfixer2006.com ## added by CiD

127.0.0.1 www.winsoftware.com ## added by CiD

-> 189 [ 70 ## added by CiD ]

/!\ 68 Not 127.0.0.1 !!

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-09-06 10:14:14

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 0

--------------------\\ Recherche d'autres infections

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"bonyumerc"="c:\\windows\\system32\\bonyumerc.exe bonyumerc"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"bfyhnjd"="c:\\windows\\system32\\bfyhnjd.exe bfyhnjd"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"eibcnvu"="c:\\windows\\system32\\eibcnvu.exe eibcnvu"

==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly Bob l'‚ponge Edition + Crack

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Les Sims\crack sims

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Les Sims\crack sims\Sims.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly 2008 (English)\2 - Crack No-Cd

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly 2008 (English)\2 - Crack No-Cd\Look install !!!.txt

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly 2008 (English)\2 - Crack No-Cd\MonopolyPB.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly Bob l'‚ponge Edition + Crack\Monopoly Bob l'‚ponge Edition + Crack.rar

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly Bob l'‚ponge Edition + Crack\Monopoly Bob lï‚ponge.jpg

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Monopoly Bob l'‚ponge Edition + Crack\Thumbs.db

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\crack

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\description.txt

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\install.TXT

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\PokerAcademyPro2-setup.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\crack\A.class

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\crack\aquila.jar

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\crack\exe4jlib.jar

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\crack\meerkatRun.jar

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Poker Academy Pro 2.5 French + crack\crack\PokerAcademyPro.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD\Extra

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD\protect.dll

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD\Pure Pinball.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD\SetupReg.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD\Extra\Trainer FairLight 1.0.exe

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Pure Pinball\Crack noCD\Extra\Trainer FairLight 1.0.nfo

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Zuma 7 wonders\graphics\bricks\brickcrack01.gif

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Zuma 7 wonders\graphics\bricks\brickcrack02.gif

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Zuma 7 wonders\graphics\bricks\brickcrack03.gif

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\Jeux 2008\Zuma 7 wonders\graphics\bricks\brickcrack04.gif

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\PES 2008 +Patch\PES 2008 (Ok)\Crack ViTALiTY(Ne Pas Sen Servir)

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\PES 2008 +Patch\PES 2008 (Ok)\Crack ViTALiTY(Ne Pas Sen Servir)\memory.JPG

C:\DOCUME~1\HP_PRO~1\Bureau\Progs Divers\PES 2008 +Patch\PES 2008 (Ok)\Crack ViTALiTY(Ne Pas Sen Servir)\PES2008.exe

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\CRACK SEARCH ENGINE - crack , serial, keygens, patches..url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\Crack.MS.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\CRACKFOUND - SERIALS - CRACKS - KEYS - KEYGENS - ALL THE UNDERGROUND IS HERE.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\CRACKS.AM - Page T5.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\LimeWire Full Warez Downloads - LimeWire serial, LimeWire crack, LimeWire full torrent, LimeWire+searial+crack.rar.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\PhazeDDL.com - LimeWire Pro 4.12.6 - Full Downloads, Games, Movies & Warez.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\Serial Gamer Liste de jeux - Lettre a.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\Serials & keys - unlocks the world.url

C:\DOCUME~1\HP_PRO~1\Favoris\crack-serials-keygen\SuperSerials! - superserials.com serial crack serials serialkey cracks keygen download free software unlock pda mac crack codes.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\CRACK SEARCH ENGINE - crack , serial, keygens, patches..url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\Crack.MS.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\CRACKFOUND - SERIALS - CRACKS - KEYS - KEYGENS - ALL THE UNDERGROUND IS HERE.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\CRACKS.AM - Page T5.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\LimeWire Full Warez Downloads - LimeWire serial, LimeWire crack, LimeWire full torrent, LimeWire+searial+crack.rar.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\PhazeDDL.com - LimeWire Pro 4.12.6 - Full Downloads, Games, Movies & Warez.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\Serial Gamer Liste de jeux - Lettre a.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\Serials & keys - unlocks the world.url

C:\DOCUME~1\HP_PRO~1\Mes documents\Mes Favoris\crack-serials-keygen\SuperSerials! - superserials.com serial crack serials serialkey cracks keygen download free software unlock pda mac crack codes.url

C:\DOCUME~1\HP_PRO~1\Recent\Adobe Photoshop Pro CS2 v9.0 Full ISO + WORKING Keygen.lnk

C:\DOCUME~1\HP_PRO~1\Recent\crack.lnk

C:\DOCUME~1\HP_PRO~1\Recent\crack.txt.lnk

C:\DOCUME~1\HP_PRO~1\Recent\Monopoly Bob l'‚ponge Edition + Crack.lnk

C:\DOCUME~1\HP_PRO~1\Recent\Monopoly Bob lï‚ponge Edition + Crack[www.reload-paradise.net].torrent.lnk

C:\DOCUME~1\HP_PRO~1\Recent\reflexive keygen.torrent.lnk

[F:14756][D:753]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp

[F:18][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies

[F:611][D:10]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 06/09/2008|10:18 - Option : [1]

--------------------\\ Fin du rapport a 10:18:59

Modifié le 6 septembre 2008 par Lens-Mania

Falkra · le 6 septembre 2008

C'est bourré de cracks, pas étonnant que ça soit infecté jusqu'à la moelle...

voici la suite des opérations, dans l'ordre. (inutile de me MP, je surveille les sujets)

** 1 **

Double-clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
Au menu principal, choisis 2 et valide.
Le programme va t'informer qu'il va alors redémarrer ton PC.
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts.
Appuie sur une touche comme demandé. Le pc va redémarrer.
Au redémarrage de ton PC, choisis ta session habituelle. Attends le message :
*** Nettoyage Termine le ..... ***
Le Bloc-notes va s'ouvrir : sauvegarde le rapport de manière à le retrouver.
Referme le Bloc-notes. Ton bureau va réapparaitre

PS: Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.

Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"

Tape explorer.exe et valide. Cela fera revenir ton bureau.

Note:

Si tu ne trouves pas le rapport, il se nomme cleannavi.txt et se trouve dans C:\

** 2 **

Relance Lop S&D

Choisis cette fois ci l'Option 2 (Suppression)

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Lens-Mania · le 6 septembre 2008

Rapport (Navilog1):

Clean Navipromo version 3.6.5 commencé le 06/09/2008 à 18:35:50,26

Outil exécuté depuis C:\Program Files\navilog1

Session actuelle : "HP_Propriétaire"

Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]

Internet Explorer : 6.0.2900.2180

Système de fichiers : NTFS

Mode suppression automatique

avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** fsbl1.txt non trouvé ***

(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\HP_Propriétaire\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\HP_Propriétaire\menudm~1\progra~1" ***

*** Suppression fichiers ***

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !

Nettoyage contenu C:\Documents and Settings\HP_Propri‚taire\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***

(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

eibcnvu.dat trouvé !

Copie eibcnvu.dat réalisée avec succès !

eibcnvu.dat supprimé !

* Dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup supprimé !

Certificat Electronic-Group supprimé !

Certificat Montorgueil absent !

Certificat OOO-Favorit supprimé !

Certificat Sunny-Day-Design-Ltdt absent !

*** Clés RUN orphelines Navipromo ***

!! Résultats temporairement non pris en charge !!

!! Les clés trouvées ne sont pas forcément infectées !!

Clés trouvés :

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"bonyumerc"="c:\\windows\\system32\\bonyumerc.exe bonyumerc"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"bfyhnjd"="c:\\windows\\system32\\bfyhnjd.exe bfyhnjd"

*** Nettoyage terminé le 06/09/2008 à 18:44:16,79 ***

Rapports (Lop S&D):

--------------------\\ Lop S&D 4.2.4-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2

X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3000+ )

BIOS : Phoenix - Award BIOS v6.00PG

USER : HP_Propriétaire ( Administrator )

BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1201 [VPS 080906-0] 4.8.1201 (Activated)

"C:\Lop SD" ( MAJ : 04-09-2008|09:55 )

Option : [2] ( 06/09/2008|18:50 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\BitDownload\Data

Supprime! - C:\DOCUME~1\HP_PRO~1\APPLIC~1\BitDownload

-

[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[17/08/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[20/10/2006|15:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems

[02/02/2007|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[21/06/2007|11:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software

[25/07/2007|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix

[13/06/2008|17:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink

[12/03/2007|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr

[20/08/2006|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP

[03/01/2005|06:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[25/07/2007|23:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe

[25/09/2007|14:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia

[24/09/2006|16:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision

[04/09/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[27/09/2007|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[04/05/2007|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[12/01/2006|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies

[19/02/2007|00:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm

[07/02/2006|17:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[03/01/2005|06:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[03/01/2005|06:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic

[25/01/2007|16:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[09/08/2006|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[25/12/2006|14:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[13/11/2006|19:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia

[02/02/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks

[01/12/2006|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems

[25/08/2006|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[19/02/2007|22:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[03/01/2005|06:43] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer

[25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[03/01/2005|07:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[03/01/2005|06:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView

[03/01/2005|07:00] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[17/08/2008|14:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe

[12/01/2006|21:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM

[23/01/2007|12:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead

[25/02/2007|01:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer

[15/01/2006|00:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft

[03/09/2008|15:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Azureus

[12/11/2006|12:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Briquolo

[12/08/2006|16:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CamfrogWEB

[03/11/2006|21:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CamTrack

[18/02/2007|17:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Canon

[19/10/2007|23:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Carnival Software

[01/10/2006|16:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ContactMusic

[13/03/2007|02:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DeepBurner

[25/07/2007|23:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Droppix

[24/02/2008|21:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Faces

[19/02/2008|18:51] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FaxCtr

[20/08/2006|20:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google

[15/01/2006|00:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help

[31/03/2006|11:43] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP

[12/01/2006|22:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ

[25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities

[26/08/2008|12:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield

[12/01/2006|19:55] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo

[16/12/2006|21:42] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Jasc

[12/01/2006|20:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech

[20/04/2007|10:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia

[04/09/2008|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Malwarebytes

[12/08/2006|15:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Media Player Classic

[27/09/2007|01:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft

[19/11/2006|22:30] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla

[03/08/2007|21:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller

[12/01/2006|20:50] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies

[24/05/2007|18:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PE Explorer

[03/11/2006|16:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Publish Providers

[11/08/2008|21:57] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real

[01/08/2007|01:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Resource Tuner

[03/01/2005|06:47] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView

[07/02/2006|15:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Serif

[12/01/2006|20:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic

[22/08/2006|16:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic Foundry

[22/08/2006|16:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sony

[23/02/2008|17:31] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SopCast

[30/01/2008|13:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sports Interactive

[26/01/2006|22:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun

[12/01/2006|22:32] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec

[12/01/2006|20:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template

[21/07/2008|12:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Thinstall

[02/02/2008|22:11] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TVU networks

[22/09/2006|13:28] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ulead Systems

[23/02/2008|13:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\uTorrent

[24/01/2008|12:25] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc

[15/04/2006|18:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help

[12/04/2006|07:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[20/01/2006|20:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[29/09/2006 11:10][--a------] C:\WINDOWS\tasks\Connexion facile … Internet.job

[06/09/2008 18:39][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 20:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[30/05/2007|11:29] C:\Program Files\Adobe

[06/01/2008|11:18] C:\Program Files\AFSExplorer_3_7

[12/03/2007|13:52] C:\Program Files\Ahead

[01/11/2006|10:54] C:\Program Files\Alcohol Soft

[21/05/2008|17:20] C:\Program Files\Alfascript V2.56

[09/08/2006|16:20] C:\Program Files\Alwil Software

[14/05/2007|19:53] C:\Program Files\AmitySource

[25/12/2006|11:58] C:\Program Files\AnMing

[28/08/2006|11:58] C:\Program Files\Ant Movie Catalog

[15/01/2006|00:13] C:\Program Files\ArcSoft

[19/03/2007|14:12] C:\Program Files\Ashampoo

[03/01/2005|06:18] C:\Program Files\ATI Technologies

[30/06/2007|11:18] C:\Program Files\Audacity

[19/09/2006|17:49] C:\Program Files\AviSynth 2.5

[27/02/2008|10:04] C:\Program Files\Azureus

[25/08/2008|09:24] C:\Program Files\Bejeweled 2 Deluxe

[22/03/2008|00:24] C:\Program Files\Bit Che

[30/05/2007|11:07] C:\Program Files\CCleaner

[12/08/2006|16:05] C:\Program Files\CFWebAdvancedU_BOBTV.FR

[25/12/2006|17:04] C:\Program Files\Clock Tray Skins

[16/02/2008|20:41] C:\Program Files\Cryptenarval

[27/05/2007|23:12] C:\Program Files\DaViDeo3

[03/11/2006|20:03] C:\Program Files\DigitalPeers

[11/04/2006|15:16] C:\Program Files\directx

[25/09/2007|14:01] C:\Program Files\DivX

[03/01/2008|12:45] C:\Program Files\DkZ Studio

[25/07/2007|23:21] C:\Program Files\Droppix

[31/07/2007|10:34] C:\Program Files\DVDVIDEOSOFT

[03/08/2007|12:55] C:\Program Files\Easy GIF Animator

[31/07/2006|11:40] C:\Program Files\Easy Internet signup

[31/08/2006|12:37] C:\Program Files\Elaborate Bytes

[25/09/2007|14:52] C:\Program Files\Emoticons-plus.com

[11/08/2008|15:50] C:\Program Files\eMule

[29/01/2007|23:22] C:\Program Files\eRightSoft

[26/08/2008|12:16] C:\Program Files\Fichiers communs

[29/01/2006|10:25] C:\Program Files\Formosoft

[06/01/2008|11:08] C:\Program Files\Game Graphic Studio

[30/01/2007|14:46] C:\Program Files\Google

[03/01/2005|06:38] C:\Program Files\Hewlett-Packard

[03/01/2005|06:25] C:\Program Files\HP

[25/07/2007|23:24] C:\Program Files\illiminable

[30/10/2006|16:10] C:\Program Files\Illustrate

[21/08/2008|09:44] C:\Program Files\InstallShield Installation Information

[06/01/2007|17:08] C:\Program Files\Internet Explorer

[17/05/2006|18:29] C:\Program Files\InterVideo

[03/01/2005|06:42] C:\Program Files\iPod

[03/01/2005|06:42] C:\Program Files\iTunes

[10/02/2007|04:04] C:\Program Files\Jasc Software Inc

[02/02/2008|22:55] C:\Program Files\Java

[08/02/2007|15:24] C:\Program Files\K-Lite Codec Pack

[22/09/2006|13:38] C:\Program Files\KMaestro

[25/10/2007|12:17] C:\Program Files\KONAMI

[16/11/2006|23:07] C:\Program Files\Kwyshell

[04/07/2006|19:48] C:\Program Files\langart

[01/11/2007|17:28] C:\Program Files\Lavalys

[24/07/2007|09:26] C:\Program Files\Lexmark 3400 Series

[01/04/2007|14:52] C:\Program Files\Lexmark Fax Solutions

[01/04/2007|14:58] C:\Program Files\Lexmark Toolbar

[20/01/2006|18:43] C:\Program Files\Ligos

[05/09/2008|08:54] C:\Program Files\LimeWire

[06/09/2008|18:45] C:\Program Files\lx_cats

[22/03/2008|12:09] C:\Program Files\Magic Swf2Gif

[04/09/2008|21:56] C:\Program Files\Malwarebytes' Anti-Malware

[21/03/2008|00:35] C:\Program Files\MessengerPlus! 3

[25/09/2007|15:22] C:\Program Files\Micro Application

[25/11/2004|05:27] C:\Program Files\microsoft frontpage

[20/05/2007|19:22] C:\Program Files\Microsoft Games

[03/01/2005|06:42] C:\Program Files\Microsoft Office

[05/09/2008|08:54] C:\Program Files\Microsoft Works

[08/08/2007|21:58] C:\Program Files\Mindscape

[05/09/2008|08:54] C:\Program Files\MioNet

[25/11/2004|05:27] C:\Program Files\Movie Maker

[06/09/2008|18:47] C:\Program Files\Mozilla Firefox

[25/03/2007|19:31] C:\Program Files\mp3DirectCut

[25/11/2004|05:27] C:\Program Files\MSN Gaming Zone

[20/06/2008|11:15] C:\Program Files\MSN Messenger

[19/10/2007|11:10] C:\Program Files\MSN Pictures Displayer

[03/01/2005|06:46] C:\Program Files\muvee Technologies

[06/09/2008|18:44] C:\Program Files\Navilog1

[01/02/2005|11:24] C:\Program Files\NetMeeting

[25/09/2007|14:37] C:\Program Files\NetUno

[25/11/2004|05:27] C:\Program Files\Online Services

[20/01/2006|22:09] C:\Program Files\OpenOffice.org1.0.1

[26/08/2008|12:27] C:\Program Files\Orange

[06/01/2007|17:08] C:\Program Files\Outlook Express

[05/03/2007|00:53] C:\Program Files\Pando Networks

[03/01/2005|06:58] C:\Program Files\PC-Doctor 5 for Windows

[20/08/2006|18:50] C:\Program Files\PDFCreator

[17/07/2006|13:03] C:\Program Files\Philips

[01/10/2007|13:00] C:\Program Files\Photo filtre

[02/12/2006|01:30] C:\Program Files\PIXELA

[05/09/2006|18:07] C:\Program Files\Player Video TF1

[10/11/2006|22:51] C:\Program Files\quickSkin

[02/02/2007|20:24] C:\Program Files\QuickTime

[30/12/2007|15:40] C:\Program Files\ReflexiveArcade

[04/09/2008|21:35] C:\Program Files\RogueRemover FREE

[24/08/2008|17:05] C:\Program Files\SAGEM

[24/08/2008|17:05] C:\Program Files\SAGEM WiFi manager

[24/08/2008|17:05] C:\Program Files\SAGEM(2)

[28/07/2006|14:19] C:\Program Files\Securitoo

[03/01/2005|06:56] C:\Program Files\Services en ligne

[13/03/2007|01:31] C:\Program Files\SlySoft

[22/12/2007|11:19] C:\Program Files\solarus

[03/01/2005|06:37] C:\Program Files\Sonic

[22/08/2006|16:43] C:\Program Files\Sonic Foundry Setup

[12/11/2006|23:10] C:\Program Files\Sony

[09/11/2006|15:09] C:\Program Files\Sony Setup

[17/08/2008|14:38] C:\Program Files\SopCast

[25/09/2007|14:02] C:\Program Files\SoundSpectrum

[30/01/2008|13:52] C:\Program Files\Sports Interactive

[05/11/2007|20:14] C:\Program Files\Spybot - Search & Destroy

[09/08/2006|18:13] C:\Program Files\Symantec

[04/09/2008|21:15] C:\Program Files\TeaTimer (Spybot - Search & Destroy)

[25/05/2007|11:45] C:\Program Files\themexp

[29/04/2006|16:15] C:\Program Files\Trust

[22/12/2007|11:20] C:\Program Files\Tuning Car Studio

[04/02/2008|11:32] C:\Program Files\TVAnts

[25/01/2007|04:15] C:\Program Files\Ulead Systems

[18/12/2006|22:23] C:\Program Files\UltraISO

[02/12/2006|00:45] C:\Program Files\Uninstall Information

[26/12/2007|21:19] C:\Program Files\Utorrent

[17/05/2006|17:33] C:\Program Files\Video Capturix Suite

[24/01/2008|12:23] C:\Program Files\VideoLAN

[03/10/2006|12:56] C:\Program Files\Visicom Media

[18/11/2007|21:11] C:\Program Files\vso

[03/11/2006|16:11] C:\Program Files\VSTplugins

[20/10/2006|14:37] C:\Program Files\vv

[18/05/2007|12:35] C:\Program Files\Wanadoo

[04/01/2008|00:24] C:\Program Files\Winamp

[26/05/2007|01:35] C:\Program Files\WinASPI

[13/02/2008|23:34] C:\Program Files\WinAVI MP4 Converter

[02/11/2006|15:40] C:\Program Files\Windows Media Connect 2

[06/01/2007|17:08] C:\Program Files\Windows Media Player

[01/02/2005|11:24] C:\Program Files\Windows NT

[09/08/2006|16:27] C:\Program Files\WindowsUpdate

[21/03/2008|00:09] C:\Program Files\WinRAR

[25/11/2004|05:28] C:\Program Files\xerox

[13/01/2007|07:02] C:\Program Files\Xi

[26/05/2007|01:35] C:\Program Files\XviD

[14/05/2007|19:38] C:\Program Files\Yahoo!

[30/01/2008|13:56] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/05/2007|11:31] C:\Program Files\Fichiers communs\Adobe

[20/10/2006|15:25] C:\Program Files\Fichiers communs\Adobe Systems Shared

[12/03/2007|13:52] C:\Program Files\Fichiers communs\Ahead

[03/02/2006|22:55] C:\Program Files\Fichiers communs\AOL

[25/07/2007|23:25] C:\Program Files\Fichiers communs\Droppix

[31/07/2007|10:34] C:\Program Files\Fichiers communs\DVDVIDEOSOFT

[18/12/2006|22:23] C:\Program Files\Fichiers communs\EZB Systems

[26/08/2008|12:16] C:\Program Files\Fichiers communs\France Telecom

[03/01/2005|06:32] C:\Program Files\Fichiers communs\Hewlett-Packard

[03/01/2005|06:29] C:\Program Files\Fichiers communs\HP

[03/01/2005|06:45] C:\Program Files\Fichiers communs\InstallShield

[03/01/2005|06:11] C:\Program Files\Fichiers communs\Java

[25/07/2007|23:23] C:\Program Files\Fichiers communs\LightScribe

[17/02/2007|20:23] C:\Program Files\Fichiers communs\Macromedia Shared

[15/02/2006|21:44] C:\Program Files\Fichiers communs\Micro Application Shared

[23/10/2007|07:17] C:\Program Files\Fichiers communs\Microsoft Shared

[01/04/2006|20:09] C:\Program Files\Fichiers communs\MimarSinan

[25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap

[03/01/2005|06:46] C:\Program Files\Fichiers communs\muvee Technologies

[25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC

[11/08/2008|21:57] C:\Program Files\Fichiers communs\Real

[15/02/2006|16:16] C:\Program Files\Fichiers communs\Services

[03/01/2005|06:36] C:\Program Files\Fichiers communs\Sonic Shared

[25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines

[03/01/2005|06:36] C:\Program Files\Fichiers communs\SureThing Shared

[23/01/2007|21:56] C:\Program Files\Fichiers communs\SWF Studio

[14/08/2006|01:17] C:\Program Files\Fichiers communs\System

[03/01/2005|06:37] C:\Program Files\Fichiers communs\TiVo Shared

--------------------\\ Process

( 55 Processes )

MsgPlus.exe ~ [PID:3356]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-09-06 18:51:55