pub intempestives

karine8674 · le 6 octobre 2008

Bonjour

j'ai installé récemment internet (neuf telecom) et lors de l'activation de mon compte, Avast a détecté un virus; je l'ai supprimé.

mais maintenant, des fenêtres de pub intempestives apparaissent sans raisons. j'ai essayé de bloquer les pop up mais les pubs apparaissement toujours.

j'ai fais un scan de mon pc avec avast qui a trouvé 3virus que j'ai également supprimé, mais rien à faire les pubs apparaissent toujours.

que dois-je faire car c'est très pénible. je ne peux même plus éteindre mon pc du premier coup car il me dit que le programme ne s'est pas éteint correctement.

merci d'avance

Falkra · le 6 octobre 2008

Bonjour, bienvenue.

Messages : 1

Si jamais tu as besoin de quelques infos :

Comment participer à un forum

Retrouver ses messages

Poste un rapport HijackThis dans ta prochaine réponse stp.

Clique sur ce lien pour télécharger HijackThis 2.0.2 :

http://www.trendsecure.com/portal/en-US/_d.../HiJackThis.exe

Cette version est sans installateur ou Zip à décompresser, choisis de l'enregistrer sur le bureau.

Double-clique sur l'icône HijackThis :

HijackThis démarre, c'est le premier bouton qui nous intéresse "Do a system scan and save a logfile" (le fichier "log" est le rapport).

Clique dessus.

Copie-colle le contenu du rapport qui va s'afficher dans le Bloc-notes dans ta prochaine réponse.

karine8674 · le 6 octobre 2008

j'ai oublié le rapport

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:38:34, on 06/10/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\TOSHIBA\Tvs\TvsTray.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Apoint2K\Apoint.exe

C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe

C:\Program Files\TOSHIBA\TouchPad\TPTray.exe

C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe

C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

C:\WINDOWS\system32\ZoomingHook.exe

C:\WINDOWS\system32\TCtrlIOHook.exe

C:\WINDOWS\system32\TPSMain.exe

C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe

C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

C:\Program Files\Apoint2K\Apntex.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\TPSBattM.exe

C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\mpm.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

C:\Program Files\Labtec\WebCam10\WebCam10.exe

C:\Program Files\ltmoh\Ltmoh.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\BitComet\BitComet.exe

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE

C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\Program Files\YourSiteBar\ysb.dll (file missing)

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe

O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe

O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe

O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe

O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe

O4 - HKLM\..\Run: [TPSMain] TPSMain.exe

O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

O4 - HKLM\..\Run: [TFncKy] TFncKy.exe

O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP

O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL

O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\jvcalomt.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [HPWS myPrintMileage Agent] C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\mpm.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Labtec\WebCam10\WebCam10.exe" /hide

O4 - HKLM\..\Run: [Option Bib Logo Log] C:\Documents and Settings\All Users\Application Data\LICENSE ADMIN OPTION BIB\Poke Dart.exe

O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx

O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe" /tray

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [mapi third] C:\DOCUME~1\CAILLE~1\APPLIC~1\GRAMPL~1\heart soap.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll

O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LVSrvLauncher - Labtec Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

--

End of file - 10825 bytes

Falkra · le 6 octobre 2008

Il y a un certain nombre de bestioles. On va nettoyer ça.

Désactive tes protections résidentes (Antivirus, ...) tu les réactivera après le scan

Télécharge Lop S&D < ici

Double-clique sur Lop S&D.exe présent sur ton bureau

Sélectionne la langue souhaitée, puis choisis l'Option 1 (Recherche)

Patiente jusqu'à la fin du scan

Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

karine8674 · le 8 octobre 2008

Merci pour tout!

j'espère que ça va marcher car c'est vraiment prénible lol

voici le nouveau rapport

--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2

X86-based PC ( Uniprocessor Free : Intel® Pentium® M processor 1.73GHz )

BIOS : Ver 1.00PARTTBLX

USER : Cailler Karine ( Administrator )

BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1229 [VPS 081008-0] 4.8.1229 (Not Activated)

C:\ (Local Disk) - NTFS - Total : 92 Go Free : 27 Go

D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )

Option : [1] ( 08/10/2008|22:00 )

--------------------\\ Listing des dossiers dans APPLIC~1

[09/08/2007|09:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[12/02/2007|20:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[31/03/2008|20:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk

[23/12/2007|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7

[30/05/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink

[05/05/2007|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[05/10/2006|19:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP

[01/10/2006|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[04/10/2008|09:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB

[02/11/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[31/08/2008|19:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[14/10/2006|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[23/05/2005|13:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[09/08/2008|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[05/10/2006|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic

[24/02/2007|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[29/09/2007|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[31/08/2008|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[08/09/2008|15:03] C:\DOCUME~1\CAILLE~1\APPLIC~1\Adobe

[13/05/2008|20:03] C:\DOCUME~1\CAILLE~1\APPLIC~1\AdobeUM

[26/04/2007|19:53] C:\DOCUME~1\CAILLE~1\APPLIC~1\Apple Computer

[31/03/2008|20:54] C:\DOCUME~1\CAILLE~1\APPLIC~1\Autodesk

[23/12/2007|20:45] C:\DOCUME~1\CAILLE~1\APPLIC~1\AVG7

[18/12/2006|19:56] C:\DOCUME~1\CAILLE~1\APPLIC~1\DivX

[01/11/2007|17:17] C:\DOCUME~1\CAILLE~1\APPLIC~1\Google

[04/10/2008|09:51] C:\DOCUME~1\CAILLE~1\APPLIC~1\GramPlatform

[18/03/2007|22:27] C:\DOCUME~1\CAILLE~1\APPLIC~1\Graphisoft

[04/10/2006|13:38] C:\DOCUME~1\CAILLE~1\APPLIC~1\Help

[05/10/2006|20:08] C:\DOCUME~1\CAILLE~1\APPLIC~1\HP

[02/10/2006|12:22] C:\DOCUME~1\CAILLE~1\APPLIC~1\Identities

[16/11/2007|12:57] C:\DOCUME~1\CAILLE~1\APPLIC~1\InterVideo

[26/08/2006|10:17] C:\DOCUME~1\CAILLE~1\APPLIC~1\Leadertech

[11/10/2007|21:45] C:\DOCUME~1\CAILLE~1\APPLIC~1\Macromedia

[23/05/2008|12:20] C:\DOCUME~1\CAILLE~1\APPLIC~1\Media Player Classic

[30/08/2008|10:44] C:\DOCUME~1\CAILLE~1\APPLIC~1\Microsoft

[31/10/2006|21:35] C:\DOCUME~1\CAILLE~1\APPLIC~1\Mozilla

[16/08/2008|00:29] C:\DOCUME~1\CAILLE~1\APPLIC~1\Real

[24/05/2008|17:02] C:\DOCUME~1\CAILLE~1\APPLIC~1\Shareaza

[01/09/2008|23:00] C:\DOCUME~1\CAILLE~1\APPLIC~1\Skype

[01/09/2008|22:00] C:\DOCUME~1\CAILLE~1\APPLIC~1\skypePM

[24/05/2005|08:48] C:\DOCUME~1\CAILLE~1\APPLIC~1\Sonic

[03/12/2006|22:02] C:\DOCUME~1\CAILLE~1\APPLIC~1\Sun

[24/05/2005|08:56] C:\DOCUME~1\CAILLE~1\APPLIC~1\Symantec

[31/10/2006|21:35] C:\DOCUME~1\CAILLE~1\APPLIC~1\Talkback

[06/08/2006|13:17] C:\DOCUME~1\CAILLE~1\APPLIC~1\Template

[23/05/2005|16:44] C:\DOCUME~1\CAILLE~1\APPLIC~1\toshiba

[10/09/2008|19:46] C:\DOCUME~1\CAILLE~1\APPLIC~1\U3

[02/05/2008|13:52] C:\DOCUME~1\CAILLE~1\APPLIC~1\vlc

[12/01/2008|00:28] C:\DOCUME~1\CAILLE~1\APPLIC~1\WinRAR

[24/05/2005|08:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe

[23/05/2005|13:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[10/08/2005|10:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[24/05/2005|08:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic

[24/05/2005|08:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[23/05/2005|16:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\toshiba

[23/12/2007|20:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7

[01/10/2007|17:11] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help

[23/12/2007|20:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[23/12/2007|20:46] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[08/10/2008 22:00][--ah-----] C:\WINDOWS\tasks\AF767AD69185EB3E.job

[05/08/2006 17:06][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 2.job

[05/08/2006 17:06][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 1.job

[08/10/2008 19:46][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( AF767AD69185EB3E.job )=( c:\docume~1\caille~1\applic~1\grampl~1\binarmymeet.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[26/08/2006|18:35] C:\Program Files\@Last Software

[17/02/2008|16:48] C:\Program Files\Adobe

[26/08/2006|10:19] C:\Program Files\Ahead

[24/02/2007|16:09] C:\Program Files\Alwil Software

[23/05/2005|16:02] C:\Program Files\Apoint2K

[23/05/2005|14:49] C:\Program Files\ATI Technologies

[27/03/2008|18:24] C:\Program Files\AutoCAD 2008

[20/04/2007|22:50] C:\Program Files\Autocad 2008 fra

[27/03/2008|18:16] C:\Program Files\Autodesk

[09/11/2007|21:36] C:\Program Files\BitComet

[23/05/2008|12:07] C:\Program Files\Catalencoder

[13/09/2008|14:16] C:\Program Files\Circle Developement

[24/05/2008|12:35] C:\Program Files\Combined Community Codec Pack

[23/05/2005|13:13] C:\Program Files\ComPlus Applications

[23/05/2008|12:06] C:\Program Files\DivX

[30/05/2008|15:35] C:\Program Files\DVD Shrink

[18/05/2008|22:59] C:\Program Files\dvdshrink_dvdshrink_3.2.0.16_vf_francais_11021

[05/10/2008|11:18] C:\Program Files\eMule

[01/12/2006|16:00] C:\Program Files\EPSON

[26/08/2006|10:16] C:\Program Files\Executive Software

[24/08/2008|20:10] C:\Program Files\Fichiers communs

[01/11/2007|17:17] C:\Program Files\Google

[04/10/2008|09:50] C:\Program Files\GramPlatform

[12/02/2007|20:25] C:\Program Files\Graphisoft

[23/12/2007|20:43] C:\Program Files\Grisoft

[01/07/2008|10:43] C:\Program Files\Hewlett-Packard

[05/10/2006|19:53] C:\Program Files\HP

[13/08/2006|14:46] C:\Program Files\hp deskjet 920c series

[05/10/2008|13:28] C:\Program Files\InstallShield Installation Information

[05/08/2006|17:06] C:\Program Files\Intel

[12/08/2008|22:57] C:\Program Files\Internet Explorer

[24/05/2005|07:49] C:\Program Files\InterVideo

[01/10/2006|20:12] C:\Program Files\Jasc Software Inc

[23/05/2005|13:28] C:\Program Files\Java

[23/05/2008|12:08] C:\Program Files\KC Softwares

[19/05/2007|17:27] C:\Program Files\Kodak

[24/08/2008|20:09] C:\Program Files\Labtec

[23/05/2005|16:00] C:\Program Files\ltmoh

[24/05/2008|14:27] C:\Program Files\Matroska Pack

[12/08/2008|22:58] C:\Program Files\Messenger

[13/09/2008|14:16] C:\Program Files\Messenger Plus! Live

[13/08/2006|10:11] C:\Program Files\Micro Application

[01/03/2008|00:43] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[23/05/2005|13:16] C:\Program Files\microsoft frontpage

[23/09/2008|22:00] C:\Program Files\Microsoft Office

[10/08/2005|10:48] C:\Program Files\Microsoft Works

[24/05/2005|08:53] C:\Program Files\Microsoft.NET

[23/05/2005|13:14] C:\Program Files\Movie Maker

[24/05/2008|17:01] C:\Program Files\Mozilla Firefox

[23/09/2008|22:00] C:\Program Files\MSECache

[31/10/2006|21:33] C:\Program Files\MSN

[23/05/2005|13:13] C:\Program Files\MSN Gaming Zone

[05/03/2007|00:40] C:\Program Files\MSXML 4.0

[29/03/2008|09:43] C:\Program Files\MSXML 6.0

[23/05/2005|13:14] C:\Program Files\NetMeeting

[23/05/2005|13:13] C:\Program Files\Online Services

[13/06/2007|11:48] C:\Program Files\Outlook Express

[03/10/2008|19:43] C:\Program Files\PCFriendly

[12/02/2007|22:11] C:\Program Files\QuickTime

[16/08/2008|00:26] C:\Program Files\Real

[26/09/2007|17:55] C:\Program Files\Securitoo

[23/05/2005|13:14] C:\Program Files\Services en ligne

[09/08/2008|18:17] C:\Program Files\Skype

[23/06/2008|17:02] C:\Program Files\SurfAccuracy

[25/02/2007|09:52] C:\Program Files\Symantec

[24/05/2005|09:14] C:\Program Files\TOSHIBA

[10/08/2005|10:47] C:\Program Files\Uninstall Information

[23/05/2008|12:05] C:\Program Files\VDCodecPack1.7

[02/05/2008|13:50] C:\Program Files\VideoLAN

[01/07/2008|10:41] C:\Program Files\Wanadoo

[23/05/2008|12:08] C:\Program Files\Webteh

[29/02/2008|15:49] C:\Program Files\Windows Live

[29/09/2007|11:32] C:\Program Files\Windows Media Connect 2

[29/09/2007|11:32] C:\Program Files\Windows Media Player

[23/05/2005|13:13] C:\Program Files\Windows NT

[23/05/2005|13:14] C:\Program Files\WindowsUpdate

[29/02/2008|14:27] C:\Program Files\WinRAR

[23/05/2005|13:16] C:\Program Files\xerox

[24/02/2007|16:47] C:\Program Files\YourSiteBar

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[01/10/2006|20:03] C:\Program Files\Fichiers communs\Adobe

[26/08/2006|10:19] C:\Program Files\Fichiers communs\Ahead

[27/03/2008|18:47] C:\Program Files\Fichiers communs\Autodesk Shared

[01/10/2006|20:26] C:\Program Files\Fichiers communs\DESIGNER

[05/10/2006|19:54] C:\Program Files\Fichiers communs\Hewlett-Packard

[05/10/2006|19:57] C:\Program Files\Fichiers communs\HP

[01/10/2006|19:53] C:\Program Files\Fichiers communs\InstallShield

[23/05/2005|13:28] C:\Program Files\Fichiers communs\Java

[19/05/2007|17:28] C:\Program Files\Fichiers communs\KODAK

[24/08/2008|20:10] C:\Program Files\Fichiers communs\Labtec

[24/08/2008|20:10] C:\Program Files\Fichiers communs\LogiShrd

[23/09/2008|22:00] C:\Program Files\Fichiers communs\Microsoft Shared

[23/05/2005|13:14] C:\Program Files\Fichiers communs\MSSoap

[23/05/2005|15:09] C:\Program Files\Fichiers communs\ODBC

[16/08/2008|00:26] C:\Program Files\Fichiers communs\Real

[23/05/2005|13:14] C:\Program Files\Fichiers communs\Services

[09/08/2008|18:17] C:\Program Files\Fichiers communs\Skype

[05/10/2006|19:57] C:\Program Files\Fichiers communs\Sonic Shared

[23/05/2005|15:09] C:\Program Files\Fichiers communs\SpeechEngines

[24/02/2007|17:08] C:\Program Files\Fichiers communs\Symantec Shared

[13/06/2007|11:48] C:\Program Files\Fichiers communs\System

[01/10/2006|20:04] C:\Program Files\Fichiers communs\Vbox

[29/02/2008|15:49] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[07/12/2006|19:41] C:\Program Files\Fichiers communs\Wise Installation Wizard

[16/08/2008|00:26] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 65 Processes )

iexplore.exe ~ [PID:2056]

iexplore.exe ~ [PID:2588]

IEXPLORE.EXE ~ [PID:3588]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\bis2.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB

C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\Poke Dart.exe

C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\roam title.exe

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\akacmrzy.exe

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\binarmymeet.exe

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\heart soap.exe

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\mail type bags ford.exe

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\oadhcaaj.exe

C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\xwluwfnd.exe

C:\Program Files\grampl~1

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsd54.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsd55.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsd56.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nse59.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nse5A.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsg47.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp66.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp67.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp6B.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp6C.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nss51.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nss52.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nss57.tmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nstmp

C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsw40.tmp

C:\Program Files\Circle Developement

C:\Program Files\Circle Developement\Uninstall.exe

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@d2.advertserve[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@advertising[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@bigpoint[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@fr.thepimps.bigpoint[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@fr.xblaster.bigpoint[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@fr1.darkorbit.bigpoint[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@banner.casinoking[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@casinoking[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@banner.cotedazurpalace[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@cotedazurpalace[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@www.cotedazurpalace[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@adopt.euroclick[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@pacificpoker[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@32vegas[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@banner.32vegas[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@2xmoinscher[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@www.2xmoinscher[2].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@888[1].txt

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@888[2].txt

C:\WINDOWS\Tasks\AF767AD69185EB3E.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"mapi third"="C:\\DOCUME~1\\CAILLE~1\\APPLIC~1\\GRAMPL~1\\heart soap.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Option Bib Logo Log"="C:\\Documents and Settings\\All Users\\Application Data\\LICENSE ADMIN OPTION BIB\\Poke Dart.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-10-08 22:01:11

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 63

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 1 pour WinRar.v3.61.FR.Incl-Crack.zip

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 2 pour WinRar.v3.61.FR.Incl-Crack.zip

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 3 pour WinRar.v3.61.FR.Incl-Crack.zip

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 4 pour WinRar.v3.61.FR.Incl-Crack.zip

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 1 pour WinRar.v3.61.FR.Incl-Crack.zip\Crack

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 2 pour WinRar.v3.61.FR.Incl-Crack.zip\Crack

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 3 pour WinRar.v3.61.FR.Incl-Crack.zip\Crack

C:\DOCUME~1\CAILLE~1\Local Settings\Temp\R‚pertoire temporaire 4 pour WinRar.v3.61.FR.Incl-Crack.zip\Crack

[F:4486][D:106]-> C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp

[F:2199][D:0]-> C:\DOCUME~1\CAILLE~1\Cookies

[F:2949][D:7]-> C:\DOCUME~1\CAILLE~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 08/10/2008|22:02 - Option : [1]

--------------------\\ Fin du rapport a 22:02:55

Falkra · le 8 octobre 2008

On va s'en débarrasser.

Relance Lop S&D

Choisis cette fois ci l'Option 2 (Suppression)

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Après ce rapport refais un nouveau rapport HijackThis stp, deux rapports en tout donc.

karine8674 · le 9 octobre 2008

voilà le rapport avec Lop S&D

et le nouveau avec Hijackthis

--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2

X86-based PC ( Uniprocessor Free : Intel® Pentium® M processor 1.73GHz )

BIOS : Ver 1.00PARTTBLX

USER : Cailler Karine ( Administrator )

BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1229 [VPS 081009-0] 4.8.1229 (Activated)

C:\ (Local Disk) - NTFS - Total : 92 Go Free : 27 Go

D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )

Option : [2] ( 09/10/2008|19:03 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\Poke Dart.exe

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB\roam title.exe

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\akacmrzy.exe

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\binarmymeet.exe

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\heart soap.exe

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\mail type bags ford.exe

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\oadhcaaj.exe

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1\xwluwfnd.exe

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsd54.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsd55.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsd56.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nse59.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nse5A.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsg47.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp66.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp67.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp6B.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsp6C.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nss51.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nss52.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nss57.tmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nstmp

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\nsw40.tmp

Supprime! - C:\Program Files\Circle Developement\Uninstall.exe

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@d2.advertserve[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@advertising[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@bigpoint[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@fr.thepimps.bigpoint[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@fr.xblaster.bigpoint[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@fr1.darkorbit.bigpoint[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@banner.casinoking[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@casinoking[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@banner.cotedazurpalace[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@cotedazurpalace[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@www.cotedazurpalace[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@adopt.euroclick[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@32vegas[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@banner.32vegas[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@2xmoinscher[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@www.2xmoinscher[2].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@888[1].txt

Supprime! - C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@888[2].txt

Supprime! - C:\WINDOWS\Tasks\AF767AD69185EB3E.job

Supprime! - C:\DOCUME~1\CAILLE~1\LOCALS~1\Temp\bis2.exe

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\LICENSE ADMIN OPTION BIB

Supprime! - C:\DOCUME~1\CAILLE~1\APPLIC~1\grampl~1

Supprime! - C:\Program Files\grampl~1

Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[09/08/2007|09:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[12/02/2007|20:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[31/03/2008|20:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk

[23/12/2007|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7

[30/05/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink

[05/05/2007|19:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[05/10/2006|19:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP

[01/10/2006|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[02/11/2007|21:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[31/08/2008|19:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[14/10/2006|10:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[23/05/2005|13:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[09/08/2008|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[05/10/2006|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic

[24/02/2007|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[29/09/2007|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[31/08/2008|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[08/09/2008|15:03] C:\DOCUME~1\CAILLE~1\APPLIC~1\Adobe

[13/05/2008|20:03] C:\DOCUME~1\CAILLE~1\APPLIC~1\AdobeUM

[26/04/2007|19:53] C:\DOCUME~1\CAILLE~1\APPLIC~1\Apple Computer

[31/03/2008|20:54] C:\DOCUME~1\CAILLE~1\APPLIC~1\Autodesk

[23/12/2007|20:45] C:\DOCUME~1\CAILLE~1\APPLIC~1\AVG7

[18/12/2006|19:56] C:\DOCUME~1\CAILLE~1\APPLIC~1\DivX

[01/11/2007|17:17] C:\DOCUME~1\CAILLE~1\APPLIC~1\Google

[18/03/2007|22:27] C:\DOCUME~1\CAILLE~1\APPLIC~1\Graphisoft

[04/10/2006|13:38] C:\DOCUME~1\CAILLE~1\APPLIC~1\Help

[05/10/2006|20:08] C:\DOCUME~1\CAILLE~1\APPLIC~1\HP

[02/10/2006|12:22] C:\DOCUME~1\CAILLE~1\APPLIC~1\Identities

[16/11/2007|12:57] C:\DOCUME~1\CAILLE~1\APPLIC~1\InterVideo

[26/08/2006|10:17] C:\DOCUME~1\CAILLE~1\APPLIC~1\Leadertech

[11/10/2007|21:45] C:\DOCUME~1\CAILLE~1\APPLIC~1\Macromedia

[23/05/2008|12:20] C:\DOCUME~1\CAILLE~1\APPLIC~1\Media Player Classic

[30/08/2008|10:44] C:\DOCUME~1\CAILLE~1\APPLIC~1\Microsoft

[31/10/2006|21:35] C:\DOCUME~1\CAILLE~1\APPLIC~1\Mozilla

[16/08/2008|00:29] C:\DOCUME~1\CAILLE~1\APPLIC~1\Real

[24/05/2008|17:02] C:\DOCUME~1\CAILLE~1\APPLIC~1\Shareaza

[01/09/2008|23:00] C:\DOCUME~1\CAILLE~1\APPLIC~1\Skype

[01/09/2008|22:00] C:\DOCUME~1\CAILLE~1\APPLIC~1\skypePM

[24/05/2005|08:48] C:\DOCUME~1\CAILLE~1\APPLIC~1\Sonic

[03/12/2006|22:02] C:\DOCUME~1\CAILLE~1\APPLIC~1\Sun

[24/05/2005|08:56] C:\DOCUME~1\CAILLE~1\APPLIC~1\Symantec

[31/10/2006|21:35] C:\DOCUME~1\CAILLE~1\APPLIC~1\Talkback

[06/08/2006|13:17] C:\DOCUME~1\CAILLE~1\APPLIC~1\Template

[23/05/2005|16:44] C:\DOCUME~1\CAILLE~1\APPLIC~1\toshiba

[10/09/2008|19:46] C:\DOCUME~1\CAILLE~1\APPLIC~1\U3

[02/05/2008|13:52] C:\DOCUME~1\CAILLE~1\APPLIC~1\vlc

[12/01/2008|00:28] C:\DOCUME~1\CAILLE~1\APPLIC~1\WinRAR

[24/05/2005|08:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe

[23/05/2005|13:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[10/08/2005|10:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[24/05/2005|08:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic

[24/05/2005|08:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[23/05/2005|16:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\toshiba

[23/12/2007|20:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7

[01/10/2007|17:11] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help

[23/12/2007|20:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[23/12/2007|20:46] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[05/08/2006 17:06][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 2.job

[05/08/2006 17:06][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 1.job

[09/10/2008 18:51][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 12:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[26/08/2006|18:35] C:\Program Files\@Last Software

[17/02/2008|16:48] C:\Program Files\Adobe

[26/08/2006|10:19] C:\Program Files\Ahead

[24/02/2007|16:09] C:\Program Files\Alwil Software

[23/05/2005|16:02] C:\Program Files\Apoint2K

[23/05/2005|14:49] C:\Program Files\ATI Technologies

[27/03/2008|18:24] C:\Program Files\AutoCAD 2008

[20/04/2007|22:50] C:\Program Files\Autocad 2008 fra

[27/03/2008|18:16] C:\Program Files\Autodesk

[09/11/2007|21:36] C:\Program Files\BitComet

[23/05/2008|12:07] C:\Program Files\Catalencoder

[24/05/2008|12:35] C:\Program Files\Combined Community Codec Pack

[23/05/2005|13:13] C:\Program Files\ComPlus Applications

[23/05/2008|12:06] C:\Program Files\DivX

[30/05/2008|15:35] C:\Program Files\DVD Shrink

[18/05/2008|22:59] C:\Program Files\dvdshrink_dvdshrink_3.2.0.16_vf_francais_11021

[05/10/2008|11:18] C:\Program Files\eMule

[01/12/2006|16:00] C:\Program Files\EPSON

[26/08/2006|10:16] C:\Program Files\Executive Software

[24/08/2008|20:10] C:\Program Files\Fichiers communs

[01/11/2007|17:17] C:\Program Files\Google

[12/02/2007|20:25] C:\Program Files\Graphisoft

[23/12/2007|20:43] C:\Program Files\Grisoft

[01/07/2008|10:43] C:\Program Files\Hewlett-Packard

[05/10/2006|19:53] C:\Program Files\HP

[13/08/2006|14:46] C:\Program Files\hp deskjet 920c series

[05/10/2008|13:28] C:\Program Files\InstallShield Installation Information

[05/08/2006|17:06] C:\Program Files\Intel

[12/08/2008|22:57] C:\Program Files\Internet Explorer

[24/05/2005|07:49] C:\Program Files\InterVideo

[01/10/2006|20:12] C:\Program Files\Jasc Software Inc

[23/05/2005|13:28] C:\Program Files\Java

[23/05/2008|12:08] C:\Program Files\KC Softwares

[19/05/2007|17:27] C:\Program Files\Kodak

[24/08/2008|20:09] C:\Program Files\Labtec

[23/05/2005|16:00] C:\Program Files\ltmoh

[24/05/2008|14:27] C:\Program Files\Matroska Pack

[12/08/2008|22:58] C:\Program Files\Messenger

[13/09/2008|14:16] C:\Program Files\Messenger Plus! Live

[13/08/2006|10:11] C:\Program Files\Micro Application

[01/03/2008|00:43] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[23/05/2005|13:16] C:\Program Files\microsoft frontpage

[23/09/2008|22:00] C:\Program Files\Microsoft Office

[10/08/2005|10:48] C:\Program Files\Microsoft Works

[24/05/2005|08:53] C:\Program Files\Microsoft.NET

[23/05/2005|13:14] C:\Program Files\Movie Maker

[24/05/2008|17:01] C:\Program Files\Mozilla Firefox

[23/09/2008|22:00] C:\Program Files\MSECache

[31/10/2006|21:33] C:\Program Files\MSN

[23/05/2005|13:13] C:\Program Files\MSN Gaming Zone

[05/03/2007|00:40] C:\Program Files\MSXML 4.0

[29/03/2008|09:43] C:\Program Files\MSXML 6.0

[23/05/2005|13:14] C:\Program Files\NetMeeting

[23/05/2005|13:13] C:\Program Files\Online Services

[13/06/2007|11:48] C:\Program Files\Outlook Express

[03/10/2008|19:43] C:\Program Files\PCFriendly

[12/02/2007|22:11] C:\Program Files\QuickTime

[16/08/2008|00:26] C:\Program Files\Real

[26/09/2007|17:55] C:\Program Files\Securitoo

[23/05/2005|13:14] C:\Program Files\Services en ligne

[09/08/2008|18:17] C:\Program Files\Skype

[23/06/2008|17:02] C:\Program Files\SurfAccuracy

[25/02/2007|09:52] C:\Program Files\Symantec

[24/05/2005|09:14] C:\Program Files\TOSHIBA

[10/08/2005|10:47] C:\Program Files\Uninstall Information

[23/05/2008|12:05] C:\Program Files\VDCodecPack1.7

[02/05/2008|13:50] C:\Program Files\VideoLAN

[01/07/2008|10:41] C:\Program Files\Wanadoo

[23/05/2008|12:08] C:\Program Files\Webteh

[29/02/2008|15:49] C:\Program Files\Windows Live

[29/09/2007|11:32] C:\Program Files\Windows Media Connect 2

[29/09/2007|11:32] C:\Program Files\Windows Media Player

[23/05/2005|13:13] C:\Program Files\Windows NT

[23/05/2005|13:14] C:\Program Files\WindowsUpdate

[29/02/2008|14:27] C:\Program Files\WinRAR

[23/05/2005|13:16] C:\Program Files\xerox

[24/02/2007|16:47] C:\Program Files\YourSiteBar

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[01/10/2006|20:03] C:\Program Files\Fichiers communs\Adobe

[26/08/2006|10:19] C:\Program Files\Fichiers communs\Ahead

[27/03/2008|18:47] C:\Program Files\Fichiers communs\Autodesk Shared

[01/10/2006|20:26] C:\Program Files\Fichiers communs\DESIGNER

[05/10/2006|19:54] C:\Program Files\Fichiers communs\Hewlett-Packard

[05/10/2006|19:57] C:\Program Files\Fichiers communs\HP

[01/10/2006|19:53] C:\Program Files\Fichiers communs\InstallShield

[23/05/2005|13:28] C:\Program Files\Fichiers communs\Java

[19/05/2007|17:28] C:\Program Files\Fichiers communs\KODAK

[24/08/2008|20:10] C:\Program Files\Fichiers communs\Labtec

[24/08/2008|20:10] C:\Program Files\Fichiers communs\LogiShrd

[23/09/2008|22:00] C:\Program Files\Fichiers communs\Microsoft Shared

[23/05/2005|13:14] C:\Program Files\Fichiers communs\MSSoap

[23/05/2005|15:09] C:\Program Files\Fichiers communs\ODBC

[16/08/2008|00:26] C:\Program Files\Fichiers communs\Real

[23/05/2005|13:14] C:\Program Files\Fichiers communs\Services

[09/08/2008|18:17] C:\Program Files\Fichiers communs\Skype

[05/10/2006|19:57] C:\Program Files\Fichiers communs\Sonic Shared

[23/05/2005|15:09] C:\Program Files\Fichiers communs\SpeechEngines

[24/02/2007|17:08] C:\Program Files\Fichiers communs\Symantec Shared

[13/06/2007|11:48] C:\Program Files\Fichiers communs\System

[01/10/2006|20:04] C:\Program Files\Fichiers communs\Vbox

[29/02/2008|15:49] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[07/12/2006|19:41] C:\Program Files\Fichiers communs\Wise Installation Wizard

[16/08/2008|00:26] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 61 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\CAILLE~1\Cookies\cailler karine@pacificpoker[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-10-09 19:04:43