Aller au contenu
  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

demande d'aide pour analyse


Messages recommandés

bonjour à tous,

j'ai des pages internet qui s'ouvrent seules sur mon portable j'ai fais differents scan avant hjt ,ad aware ne m'a pas tous supprimer ,j'ai essayé bit defender online :il n'a pas voulu scanné mon pc ,donc voila mon scan hijackthis

merci d'avance pour votre aide!

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 07:42:36, on 01/10/2008

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16711)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Picasa2\PicasaMediaDetector.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE

C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Windows\system32\wuauclt.exe

C:\Program Files\AVG\AVG8\avgtray.exe

C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe

C:\Program Files\Internet Explorer\IEUser.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Users\acer\Desktop\HiJackThis.exe

 

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

 

--

End of file - 2625 bytes

Lien vers le commentaire
Partager sur d’autres sites

voila !ca a l'air mieux là!

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:59:48, on 01/10/2008

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16711)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\AVG\AVG8\avgtray.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Picasa2\PicasaMediaDetector.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE

C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\system32\wuauclt.exe

C:\Users\acer\Desktop\HiJackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezoBHO.dll (file missing)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKCU\..\Run: [?????????] ??????????????e

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe

O4 - HKCU\..\Run: [iSO CLOCK] "C:\ProgramData\Play Thunk Thunk.ter4ez"

O4 - HKCU\..\Run: [1 mags 16 more] "C:\ProgramData\skip bin mail.7c6uu"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O13 - Gopher Prefix:

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab

O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab

O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.otoy.com/download/CAB/OTOYAX.cab

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jin...ows-i586-jc.cab

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll eNetHook.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

 

--

End of file - 8341 bytes

Lien vers le commentaire
Partager sur d’autres sites

voila le rapport lop s&d

 

 

--------------------\\ Lop S&D 4.2.4-4 XP/Vista

 

Microsoft® Windows Vista Édition Familiale Basique ( v6.0.6000 )

X86-based PC ( Multiprocessor Free : Mobile AMD Sempron Processor 3500+ )

BIOS : Ver 1.00PARTTBL

USER : acer ( Administrator )

BOOT : Normal boot

Antivirus : AVG Anti-Virus Free 8.0 (Activated)

C:\ (Local Disk) - NTFS - Total : 33 Go Free : 10 Go

D:\ (Local Disk) - NTFS - Total : 32 Go Free : 27 Go

E:\ (CD or DVD)

 

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )

Option : [1] ( 01/10/2008|20:35 )

 

[ UAC => 1 ]

 

--------------------\\ Listing des dossiers dans Local

 

[03/01/2008|19:58] C:\Users\acer\AppData\Local\Acer Arcade

[11/07/2007|14:36] C:\Users\acer\AppData\Local\acer eNM

[28/02/2008|10:32] C:\Users\acer\AppData\Local\Adobe

[31/07/2007|22:05] C:\Users\acer\AppData\Local\Apple

[31/07/2007|22:09] C:\Users\acer\AppData\Local\Apple Computer

[11/07/2007|14:33] C:\Users\acer\AppData\Local\Application Data

[11/07/2007|14:36] C:\Users\acer\AppData\Local\ATI

[12/09/2008|10:32] C:\Users\acer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[15/11/2007|22:56] C:\Users\acer\AppData\Local\Editeur Foto.com

[06/12/2007|19:14] C:\Users\acer\AppData\Local\eMule

[04/09/2007|13:06] C:\Users\acer\AppData\Local\GDIPFONTCACHEV1.DAT

[20/10/2007|22:12] C:\Users\acer\AppData\Local\Google

[11/07/2007|14:33] C:\Users\acer\AppData\Local\Historique

[01/10/2008|17:42] C:\Users\acer\AppData\Local\IconCache.db

[05/07/2008|12:30] C:\Users\acer\AppData\Local\Microsoft

[08/06/2008|11:11] C:\Users\acer\AppData\Local\Mozilla

[01/10/2008|20:32] C:\Users\acer\AppData\Local\Temp

[11/07/2007|14:33] C:\Users\acer\AppData\Local\Temporary Internet Files

[14/07/2007|12:43] C:\Users\acer\AppData\Local\VirtualStore

 

--------------------\\ Tâches planifiées dans C:\Windows\tasks

 

[01/10/2008 17:45][--ah-----] C:\Windows\tasks\SA.DAT

[01/10/2008 17:43][--a------] C:\Windows\tasks\SCHEDLGU.TXT

 

--------------------\\ Listing des dossiers dans C:\ProgramData

 

[25/09/2007|10:30] C:\ProgramData\addr_file.html

[19/09/2008|21:08] C:\ProgramData\Admin Inter 1 Mags

[28/02/2008|10:30] C:\ProgramData\Adobe

[31/07/2007|22:04] C:\ProgramData\Apple

[31/07/2007|22:06] C:\ProgramData\Apple Computer

[02/11/2006|14:59] C:\ProgramData\Application Data

[11/07/2007|14:06] C:\ProgramData\Atheros

[05/07/2008|12:32] C:\ProgramData\avg8

[03/05/2008|12:50] C:\ProgramData\Avira

[11/07/2007|14:29] C:\ProgramData\Bureau

[23/01/2007|18:49] C:\ProgramData\CyberLink

[02/11/2006|14:59] C:\ProgramData\Desktop

[02/11/2006|14:59] C:\ProgramData\Documents

[06/12/2007|19:14] C:\ProgramData\eMule

[11/07/2007|14:29] C:\ProgramData\Favoris

[02/11/2006|14:59] C:\ProgramData\Favorites

[11/07/2007|14:34] C:\ProgramData\InstallShield

[30/09/2008|22:34] C:\ProgramData\Lavasoft

[11/07/2007|14:29] C:\ProgramData\Menu D‚marrer

[14/07/2007|12:41] C:\ProgramData\Messenger Plus!

[13/07/2007|12:33] C:\ProgramData\Microsoft

[11/07/2007|14:29] C:\ProgramData\ModŠles

[19/09/2008|21:08] C:\ProgramData\Mp3 meta

[17/05/2008|18:25] C:\ProgramData\phenomedia

[19/09/2008|21:07] C:\ProgramData\Play Thunk Thunk.g5uambz

[19/09/2008|21:07] C:\ProgramData\Play Thunk Thunk.ter4ez

[19/09/2008|21:08] C:\ProgramData\skip bin mail.7c6uu

[02/11/2006|14:59] C:\ProgramData\Start Menu

[25/09/2007|10:21] C:\ProgramData\Symantec

[02/11/2006|14:59] C:\ProgramData\Templates

[13/07/2007|14:28] C:\ProgramData\Yahoo! Companion

 

--------------------\\ Listing des dossiers dans C:\Program Files

 

[23/01/2007|18:49] C:\Program Files\Acer

[11/07/2007|14:45] C:\Program Files\Acer Inc

[06/07/2008|21:54] C:\Program Files\Adobe

[31/07/2007|22:04] C:\Program Files\Apple Software Update

[11/07/2007|14:06] C:\Program Files\Atheros

[23/01/2007|18:25] C:\Program Files\ATI

[23/01/2007|18:26] C:\Program Files\ATI Technologies

[05/07/2008|12:32] C:\Program Files\AVG

[19/09/2008|21:07] C:\Program Files\Circle Developement

[11/09/2008|21:29] C:\Program Files\Common Files

[23/01/2007|18:36] C:\Program Files\CONEXANT

[23/01/2007|18:49] C:\Program Files\CyberLink

[28/07/2008|12:20] C:\Program Files\eChanblard

[14/08/2007|23:46] C:\Program Files\eoRezo

[11/07/2007|14:29] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]

[15/11/2007|22:55] C:\Program Files\Foto.com

[20/10/2007|22:11] C:\Program Files\Google

[11/09/2008|21:30] C:\Program Files\IKEA HomePlanner

[17/05/2008|18:25] C:\Program Files\InstallShield Installation Information

[14/08/2008|09:50] C:\Program Files\Internet Explorer

[14/08/2007|23:47] C:\Program Files\ItsLabel

[09/08/2007|20:18] C:\Program Files\Java

[11/07/2007|14:37] C:\Program Files\Launch Manager

[30/09/2008|22:32] C:\Program Files\Lavasoft

[19/09/2008|21:07] C:\Program Files\Messenger Plus! Live

[27/08/2007|17:40] C:\Program Files\Micro Application

[02/11/2006|14:35] C:\Program Files\Microsoft Games

[02/11/2006|14:40] C:\Program Files\Movie Maker

[30/09/2008|22:25] C:\Program Files\Mozilla Firefox

[02/11/2006|14:35] C:\Program Files\MSBuild

[02/11/2006|14:35] C:\Program Files\MSN

[19/09/2008|21:07] C:\Program Files\MSN Messenger

[14/07/2007|12:49] C:\Program Files\MSXML 4.0

[23/01/2007|18:38] C:\Program Files\NewTech Infosystems

[13/07/2007|16:05] C:\Program Files\OpenOffice.org 2.0

[17/05/2008|18:25] C:\Program Files\phenomedia

[20/10/2007|22:11] C:\Program Files\Picasa2

[31/07/2007|22:07] C:\Program Files\QuickTime

[23/01/2007|18:32] C:\Program Files\Realtek

[02/11/2006|14:35] C:\Program Files\Reference Assemblies

[23/01/2007|18:34] C:\Program Files\Synaptics

[02/11/2006|14:58] C:\Program Files\Uninstall Information

[29/08/2007|15:14] C:\Program Files\VideoLAN

[29/08/2007|20:41] C:\Program Files\Windows Calendar

[02/11/2006|14:40] C:\Program Files\Windows Collaboration

[14/07/2007|13:40] C:\Program Files\Windows Defender

[13/07/2007|15:57] C:\Program Files\Windows Live

[14/08/2008|09:50] C:\Program Files\Windows Mail

[12/10/2007|15:31] C:\Program Files\Windows Media Player

[11/07/2007|14:29] C:\Program Files\Windows NT

[02/11/2006|14:40] C:\Program Files\Windows Photo Gallery

[10/01/2008|12:31] C:\Program Files\Windows Sidebar

[14/08/2007|23:34] C:\Program Files\WinRAR

[11/07/2007|14:33] C:\Program Files\Yahoo!

 

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

 

[28/02/2008|10:30] C:\Program Files\Common Files\Adobe

[11/07/2007|14:34] C:\Program Files\Common Files\InstallShield

[09/08/2007|20:16] C:\Program Files\Common Files\Java

[23/01/2007|18:37] C:\Program Files\Common Files\LightScribe

[27/08/2007|17:40] C:\Program Files\Common Files\Micro Application Shared

[05/07/2008|12:31] C:\Program Files\Common Files\microsoft shared

[23/01/2007|18:37] C:\Program Files\Common Files\muvee Technologies

[23/01/2007|18:38] C:\Program Files\Common Files\NewTech Infosystems

[02/11/2006|13:18] C:\Program Files\Common Files\Services

[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines

[25/09/2007|10:21] C:\Program Files\Common Files\Symantec Shared

[14/07/2007|13:40] C:\Program Files\Common Files\System

[30/09/2008|22:30] C:\Program Files\Common Files\Wise Installation Wizard

 

--------------------\\ Process

 

( 69 Processes )

 

iexplore.exe ~ [PID:2492]

iexplore.exe ~ [PID:3832]

 

--------------------\\ Recherche avec S_Lop

 

C:\ProgramData\skip bin mail.7c6uu

C:\ProgramData\Play Thunk Thunk.ter4ez

C:\ProgramData\Play Thunk Thunk.g5uambz

C:\Users\acer\AppData\Local\Temp\bis56A3.exe

 

--------------------\\ Recherche de Fichiers / Dossiers Lop

 

C:\ProgramData\Admin Inter 1 Mags

C:\ProgramData\Admin Inter 1 Mags\Flap Free.exe

C:\Users\acer\AppData\Local\Temp\nsc8DB8.tmp

C:\Program Files\Circle Developement

C:\Program Files\Circle Developement\Uninstall.exe

C:\Users\acer\AppData\Roaming\MICROS~1\Windows\Cookies\[email protected][1].txt

 

--------------------\\ Verification du Registre

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"1 mags 16 more"="\"C:\\ProgramData\\skip bin mail.7c6uu\""

"ISO CLOCK"="\"C:\\ProgramData\\Play Thunk Thunk.ter4ez\""

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

 

--------------------\\ Verification du fichier Hosts

 

Fichier Hosts PROPRE

 

 

--------------------\\ Recherche de fichiers avec Catchme

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-10-01 20:35:37

Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 107

 

--------------------\\ Recherche d'autres infections

 

 

Aucune autre infection trouvée !

 

[F:1052][D:41]-> C:\Users\acer\AppData\Local\Temp

[F:83][D:1]-> C:\Users\acer\AppData\Roaming\MICROS~1\Windows\Cookies

[F:32][D:4]-> C:\Users\acer\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

[F:950][D:12]-> C:\$Recycle.Bin

 

1 - "C:\Lop SD\LopR_1.txt" - 01/10/2008|20:37 - Option : [1]

 

--------------------\\ Fin du rapport a 20:37:15

[ UAC => 1 ]

Lien vers le commentaire
Partager sur d’autres sites

voila d'abord le rapport lop s&d apres option 2

 

 

--------------------\\ Lop S&D 4.2.4-4 XP/Vista

 

Microsoft® Windows Vista Édition Familiale Basique ( v6.0.6000 )

X86-based PC ( Multiprocessor Free : Mobile AMD Sempron Processor 3500+ )

BIOS : Ver 1.00PARTTBL

USER : acer ( Administrator )

BOOT : Normal boot

Antivirus : AVG Anti-Virus Free 8.0 (Activated)

C:\ (Local Disk) - NTFS - Total : 33 Go Free : 10 Go

D:\ (Local Disk) - NTFS - Total : 32 Go Free : 27 Go

E:\ (CD or DVD)

 

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )

Option : [2] ( 01/10/2008|23:22 )

 

[ UAC => 1 ]

 

 

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

 

Supprime! - C:\ProgramData\Admin Inter 1 Mags\Flap Free.exe

Supprime! - C:\Users\acer\AppData\Local\Temp\nsc8DB8.tmp

Supprime! - C:\Program Files\Circle Developement\Uninstall.exe

Supprime! - C:\Users\acer\AppData\Roaming\MICROS~1\Windows\Cookies\[email protected][1].txt

Supprime! - C:\ProgramData\skip bin mail.7c6uu

Supprime! - C:\ProgramData\Play Thunk Thunk.ter4ez

Supprime! - C:\ProgramData\Play Thunk Thunk.g5uambz

Supprime! - C:\Users\acer\AppData\Local\Temp\bis56A3.exe

Supprime! - C:\ProgramData\Admin Inter 1 Mags

Supprime! - C:\Program Files\Circle Developement

-

[ Fichier Hosts ] .. Restaure!

 

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

 

 

--------------------\\ Listing des dossiers dans Local

 

[03/01/2008|19:58] C:\Users\acer\AppData\Local\Acer Arcade

[11/07/2007|14:36] C:\Users\acer\AppData\Local\acer eNM

[28/02/2008|10:32] C:\Users\acer\AppData\Local\Adobe

[31/07/2007|22:05] C:\Users\acer\AppData\Local\Apple

[31/07/2007|22:09] C:\Users\acer\AppData\Local\Apple Computer

[11/07/2007|14:33] C:\Users\acer\AppData\Local\Application Data

[11/07/2007|14:36] C:\Users\acer\AppData\Local\ATI

[12/09/2008|10:32] C:\Users\acer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[15/11/2007|22:56] C:\Users\acer\AppData\Local\Editeur Foto.com

[06/12/2007|19:14] C:\Users\acer\AppData\Local\eMule

[04/09/2007|13:06] C:\Users\acer\AppData\Local\GDIPFONTCACHEV1.DAT

[20/10/2007|22:12] C:\Users\acer\AppData\Local\Google

[11/07/2007|14:33] C:\Users\acer\AppData\Local\Historique

[01/10/2008|17:42] C:\Users\acer\AppData\Local\IconCache.db

[05/07/2008|12:30] C:\Users\acer\AppData\Local\Microsoft

[08/06/2008|11:11] C:\Users\acer\AppData\Local\Mozilla

[01/10/2008|23:22] C:\Users\acer\AppData\Local\Temp

[11/07/2007|14:33] C:\Users\acer\AppData\Local\Temporary Internet Files

[14/07/2007|12:43] C:\Users\acer\AppData\Local\VirtualStore

 

--------------------\\ Tâches planifiées dans C:\Windows\tasks

 

[01/10/2008 17:45][--ah-----] C:\Windows\tasks\SA.DAT

[01/10/2008 17:43][--a------] C:\Windows\tasks\SCHEDLGU.TXT

 

--------------------\\ Listing des dossiers dans C:\ProgramData

 

[25/09/2007|10:30] C:\ProgramData\addr_file.html

[28/02/2008|10:30] C:\ProgramData\Adobe

[31/07/2007|22:04] C:\ProgramData\Apple

[31/07/2007|22:06] C:\ProgramData\Apple Computer

[02/11/2006|14:59] C:\ProgramData\Application Data

[11/07/2007|14:06] C:\ProgramData\Atheros

[05/07/2008|12:32] C:\ProgramData\avg8

[03/05/2008|12:50] C:\ProgramData\Avira

[11/07/2007|14:29] C:\ProgramData\Bureau

[23/01/2007|18:49] C:\ProgramData\CyberLink

[02/11/2006|14:59] C:\ProgramData\Desktop

[02/11/2006|14:59] C:\ProgramData\Documents

[06/12/2007|19:14] C:\ProgramData\eMule

[11/07/2007|14:29] C:\ProgramData\Favoris

[02/11/2006|14:59] C:\ProgramData\Favorites

[11/07/2007|14:34] C:\ProgramData\InstallShield

[30/09/2008|22:34] C:\ProgramData\Lavasoft

[11/07/2007|14:29] C:\ProgramData\Menu D‚marrer

[14/07/2007|12:41] C:\ProgramData\Messenger Plus!

[13/07/2007|12:33] C:\ProgramData\Microsoft

[11/07/2007|14:29] C:\ProgramData\ModŠles

[19/09/2008|21:08] C:\ProgramData\Mp3 meta

[17/05/2008|18:25] C:\ProgramData\phenomedia

[02/11/2006|14:59] C:\ProgramData\Start Menu

[25/09/2007|10:21] C:\ProgramData\Symantec

[02/11/2006|14:59] C:\ProgramData\Templates

[13/07/2007|14:28] C:\ProgramData\Yahoo! Companion

 

--------------------\\ Listing des dossiers dans C:\Program Files

 

[23/01/2007|18:49] C:\Program Files\Acer

[11/07/2007|14:45] C:\Program Files\Acer Inc

[06/07/2008|21:54] C:\Program Files\Adobe

[31/07/2007|22:04] C:\Program Files\Apple Software Update

[11/07/2007|14:06] C:\Program Files\Atheros

[23/01/2007|18:25] C:\Program Files\ATI

[23/01/2007|18:26] C:\Program Files\ATI Technologies

[05/07/2008|12:32] C:\Program Files\AVG

[11/09/2008|21:29] C:\Program Files\Common Files

[23/01/2007|18:36] C:\Program Files\CONEXANT

[23/01/2007|18:49] C:\Program Files\CyberLink

[28/07/2008|12:20] C:\Program Files\eChanblard

[14/08/2007|23:46] C:\Program Files\eoRezo

[11/07/2007|14:29] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]

[15/11/2007|22:55] C:\Program Files\Foto.com

[20/10/2007|22:11] C:\Program Files\Google

[11/09/2008|21:30] C:\Program Files\IKEA HomePlanner

[17/05/2008|18:25] C:\Program Files\InstallShield Installation Information

[14/08/2008|09:50] C:\Program Files\Internet Explorer

[14/08/2007|23:47] C:\Program Files\ItsLabel

[09/08/2007|20:18] C:\Program Files\Java

[11/07/2007|14:37] C:\Program Files\Launch Manager

[30/09/2008|22:32] C:\Program Files\Lavasoft

[19/09/2008|21:07] C:\Program Files\Messenger Plus! Live

[27/08/2007|17:40] C:\Program Files\Micro Application

[02/11/2006|14:35] C:\Program Files\Microsoft Games

[02/11/2006|14:40] C:\Program Files\Movie Maker

[30/09/2008|22:25] C:\Program Files\Mozilla Firefox

[02/11/2006|14:35] C:\Program Files\MSBuild

[02/11/2006|14:35] C:\Program Files\MSN

[19/09/2008|21:07] C:\Program Files\MSN Messenger

[14/07/2007|12:49] C:\Program Files\MSXML 4.0

[23/01/2007|18:38] C:\Program Files\NewTech Infosystems

[13/07/2007|16:05] C:\Program Files\OpenOffice.org 2.0

[17/05/2008|18:25] C:\Program Files\phenomedia

[20/10/2007|22:11] C:\Program Files\Picasa2

[31/07/2007|22:07] C:\Program Files\QuickTime

[23/01/2007|18:32] C:\Program Files\Realtek

[02/11/2006|14:35] C:\Program Files\Reference Assemblies

[23/01/2007|18:34] C:\Program Files\Synaptics

[02/11/2006|14:58] C:\Program Files\Uninstall Information

[29/08/2007|15:14] C:\Program Files\VideoLAN

[29/08/2007|20:41] C:\Program Files\Windows Calendar

[02/11/2006|14:40] C:\Program Files\Windows Collaboration

[14/07/2007|13:40] C:\Program Files\Windows Defender

[13/07/2007|15:57] C:\Program Files\Windows Live

[14/08/2008|09:50] C:\Program Files\Windows Mail

[12/10/2007|15:31] C:\Program Files\Windows Media Player

[11/07/2007|14:29] C:\Program Files\Windows NT

[02/11/2006|14:40] C:\Program Files\Windows Photo Gallery

[10/01/2008|12:31] C:\Program Files\Windows Sidebar

[14/08/2007|23:34] C:\Program Files\WinRAR

[11/07/2007|14:33] C:\Program Files\Yahoo!

 

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

 

[28/02/2008|10:30] C:\Program Files\Common Files\Adobe

[11/07/2007|14:34] C:\Program Files\Common Files\InstallShield

[09/08/2007|20:16] C:\Program Files\Common Files\Java

[23/01/2007|18:37] C:\Program Files\Common Files\LightScribe

[27/08/2007|17:40] C:\Program Files\Common Files\Micro Application Shared

[05/07/2008|12:31] C:\Program Files\Common Files\microsoft shared

[23/01/2007|18:37] C:\Program Files\Common Files\muvee Technologies

[23/01/2007|18:38] C:\Program Files\Common Files\NewTech Infosystems

[02/11/2006|13:18] C:\Program Files\Common Files\Services

[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines

[25/09/2007|10:21] C:\Program Files\Common Files\Symantec Shared

[14/07/2007|13:40] C:\Program Files\Common Files\System

[30/09/2008|22:30] C:\Program Files\Common Files\Wise Installation Wizard

 

--------------------\\ Process

 

( 70 Processes )

 

... OK !

 

--------------------\\ Recherche avec S_Lop

 

Aucun fichier / dossier Lop trouvé !

 

--------------------\\ Recherche de Fichiers / Dossiers Lop

 

Aucun fichier / dossier Lop trouvé !

 

--------------------\\ Verification du Registre

 

..... OK !

 

--------------------\\ Verification du fichier Hosts

 

Fichier Hosts PROPRE

 

 

--------------------\\ Recherche de fichiers avec Catchme

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-10-01 23:22:24

Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 107

 

--------------------\\ Recherche d'autres infections

 

 

Aucune autre infection trouvée !

 

[F:1053][D:41]-> C:\Users\acer\AppData\Local\Temp

[F:112][D:1]-> C:\Users\acer\AppData\Roaming\MICROS~1\Windows\Cookies

[F:242][D:4]-> C:\Users\acer\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5

[F:950][D:12]-> C:\$Recycle.Bin

 

1 - "C:\Lop SD\LopR_1.txt" - 01/10/2008|20:37 - Option : [1]

2 - "C:\Lop SD\LopR_2.txt" - 01/10/2008|23:24 - Option : [2]

 

--------------------\\ Fin du rapport a 23:24:06

[ UAC => 1 ]

 

 

 

et ensuite le rapport hijackthis

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:27:38, on 01/10/2008

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16711)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\AVG\AVG8\avgtray.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Picasa2\PicasaMediaDetector.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE

C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\acer\Desktop\HiJackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezoBHO.dll (file missing)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKCU\..\Run: [?????????] ??????????????e

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O13 - Gopher Prefix:

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab

O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab

O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.otoy.com/download/CAB/OTOYAX.cab

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jin...ows-i586-jc.cab

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll eNetHook.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

 

--

End of file - 8224 bytes

Lien vers le commentaire
Partager sur d’autres sites

il reste encore quelque chose...

Télécharge MSNFix.zip (de !aur3n7 et Regis59) sur le Bureau :

http://sosvirus.changelog.fr/MSNFix.zip

 

un tutoriel pour l'utiliser

http://sosvirus.changelog.fr/

 

Conseil : il faut toujours télécharger avant utilisation pour profiter des dernières mises à jour.

 

Remarque 1: Il est possible que l'antivirus détecte un virus au téléchargement, il s'agit de Process.exe.

Process.exe est un programme légitime mais potentiellement dangereux, et il est normal qu'un antivirus/antispyware digne de ce nom le détecte.

Remarque 2: MSNFix peut parfois rencontrer des problèmes avec les sessions comportant des caractères spéciaux. Si un message d'erreur s'affiche il conviendra donc de déplacer le dossier complet à la racine du disque dur (généralement c:\)

 

Décompresse-le (clic droit : Extraire ici).

 

Ouvre MSNFix et double clique sur le fichier MSNFix.bat (MSNFix)

Choisis l'option R

valide avec Entrée

 

L'analyse démarre, pendant ce temps, ne lancer aucune application afin de ne pas perturber son fonctionnement.

Si l'infection est détectée, il te suffit d'appuyer sur une touche du clavier. Un redémarrage du PC peut être demandé.

Le rapport est enregistré par défaut dans le dossier MSNFix et se présente sous la forme date_heure.txt.

Recommande à tes contacts d'appliquer la même procédure MSNFix, pour freiner la propagation et indique si l'éradication est réussie. S'ils ont le moindre souci, ils viennent sur le forum et postent leur rapport pour lecture et conseils...

A l'échelle mondiale, chaque jour, des milliers de personnes sont infectées. Pour apporter des solutions rapides contre ce fléau, veuillez s'il vous plaît faire parvenir l'adresse contenue dans le message MSN que vous avez reçu.

Pour cela, cliquez ici:

http://secubox.gateweb.org/notify/

Saisissez le lien contenu dans les messages MSN puis cliquez sur [Notifier]. Merci.

poste le rapport obtenu et un nouveau rapport hijack this

Lien vers le commentaire
Partager sur d’autres sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

 Share

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...