{RESOLU}Analyse HijackThis

Wisewise3

Posté(e) le 11 décembre 2008

- Signaler

Posté(e) le 11 décembre 2008 (modifié)

Bonjour,

pouvez-vous vérifier le rapport et me dire s'il contient des traces de virus ou autres.

J'ai passé Malwarebyte (rien trouvé), msnfix (infection absente), lop S&d(trouvé quelques fichiers).

Merci.

PS: l'utilisateur ayant acheté la licence de Norton, je ne peux le désinstaller... pour placer Antivir.

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:10, on 2008-12-11

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\Program Files\LogMeIn\x86\RaMaint.exe

C:\Program Files\LogMeIn\x86\LogMeIn.exe

C:\Program Files\LogMeIn\x86\LMIGuardian.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\LogMeIn\x86\LogMeInSystray.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\LogMeIn\x86\LMIGuardian.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe

C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\DAEMON Tools Lite\daemon.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

C:\PROGRA~1\INCRED~1\bin\IMApp.exe

C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\PROGRA~1\INCRED~1\bin\ImNotfy.exe

C:\Program Files\LogMeIn\x86\LogMeIn.exe

C:\Program Files\LogMeIn\x86\LMIGuardian.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Documents and Settings\Me Beauraind\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - (no file)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll

O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"

O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe

O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020

O4 - HKCU\..\Run: [incrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKUS\S-1-5-21-1583244945-2734619735-2947400508-1008\..\Run: [sonic RecordNow!] (User 'LogMeInRemoteUser')

O4 - HKUS\S-1-5-21-1583244945-2734619735-2947400508-1008\..\RunOnce: [NeroHomeFirstStart] "C:\Program Files\Fichiers communs\Nero\Lib\NMFirstStart.exe" (User 'LogMeInRemoteUser')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\office10\OSA.EXE

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O14 - IERESET.INF: START_PAGE_URL=http://www.belgacom.net

O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab

O16 - DPF: {4F5E4276-C120-11D6-A1FD-00508B9D48EA} (dldisplay Class) - http://www.gamehouse.com/ghdlctl.cab

O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game18.zylomgames.com/activex/zylomgamesplayer.cab

O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://game14.zylomgames.com/activex/zylomloader.cab

O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe

O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: PLFlash DeviceIoControl Service - Unknown owner - C:\WINDOWS\system32\IoctlSvc.exe (file missing)

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

--

End of file - 10053 bytes

Modifié le 21 décembre 2008 par Wisewise3

Citer

Falkra

Posté(e) le 12 décembre 2008

- Signaler

Posté(e) le 12 décembre 2008

Bonsoir, le rapport ne montre rien d'anormal.

Poste le rapport de Lop S&D stp, et efface MSNFix, non requis ici.

Citer

Wisewise3

Posté(e) le 13 décembre 2008

Auteur

- Signaler

Posté(e) le 13 décembre 2008

Bonjour,

voici le rapport lop S&D. Par contre msnfix s'install? ou ce n'est qu'un exécutable. Je ne comprends pas quand vous dites "efface msnfix"

MErci et bien à vous,

WiseWise3

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

X86-based PC ( Uniprocessor Free : AMD Athlon XP 3000+ )

BIOS : Phoenix - AwardBIOS v6.00PG

USER : Me Beauraind ( Administrator )

BOOT : Normal boot

Antivirus : Norton 360 2007 (Not Activated)

Firewall : Norton 360 2007 (Not Activated)

C:\ (Local Disk) - NTFS - Total:142 Go (Free:123 Go)

D:\ (CD or DVD)

E:\ (CD or DVD)

F:\ (CD or DVD)

I:\ (USB)

J:\ (USB)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )

Option : [2] ( 2008-12-11|22:54 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\MEBEAU~1\Cookies\me_beauraind@advertising[1].txt

Supprime! - C:\DOCUME~1\MEBEAU~1\Cookies\me_beauraind@bigpoint[1].txt

Supprime! - C:\DOCUME~1\MEBEAU~1\Cookies\me_beauraind@fr.seafight.bigpoint[2].txt

Supprime! - C:\DOCUME~1\MEBEAU~1\Cookies\me_beauraind@fr.thepimps.bigpoint[2].txt

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[2008-07-25|20:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe

[2004-06-22|23:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities

[2008-07-25|20:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia

[2008-07-25|20:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[2008-07-25|20:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real

[2008-10-07|11:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

[2008-07-19|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Absolutist

[2004-06-22|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[2008-09-05|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AlawarGameBox

[2008-09-23|08:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AlawarWrapper

[2007-10-27|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Aliasworlds

[2008-05-23|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astar Games

[2008-04-13|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem

[2008-06-25|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFish

[2008-06-09|12:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache

[2005-05-03|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY

[2008-05-30|11:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\cerasus.media

[2006-03-05|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Chasing Dogs Studios

[2007-11-30|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Christmasville

[2007-10-26|16:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Dekovir

[2008-03-13|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DivoGames

[2008-05-31|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Enkord

[2008-03-15|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EscapeTheMuseum

[2008-03-09|12:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy

[2008-05-23|18:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fashion Solitaire 1.2

[2008-08-22|16:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games

[2007-06-15|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames

[2007-06-26|16:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Forge of Games

[2008-03-06|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Friends Games

[2008-01-09|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo

[2005-09-24|16:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameBlend

[2008-09-27|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse

[2008-02-07|16:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Go Go Gourmet

[2008-03-25|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii

[2006-09-13|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[2008-01-31|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grey Alien Games

[2008-05-05|10:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft

[2006-10-09|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin

[2008-02-09|12:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear

[2008-07-25|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LogMeIn

[2004-11-11|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision

[2008-12-04|23:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[2008-08-19|21:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[2005-04-07|14:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6

[2008-01-14|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo

[2008-03-01|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\My Games

[2008-02-25|16:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople

[2008-02-19|17:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania

[2007-11-24|15:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NeptunesAdve

[2008-08-02|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero

[2008-06-20|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games

[2008-09-30|16:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst

[2008-05-04|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayPond

[2008-02-04|12:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QB9 S.R.L

[2004-06-22|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[2008-06-22|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games

[2004-06-22|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[2008-03-20|17:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScreenSeven

[2008-03-29|13:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games

[2008-12-04|23:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[2008-05-06|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SugarGames

[2008-11-28|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[2008-10-01|14:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[2007-09-28|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio

[2005-02-13|13:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia

[2008-03-25|16:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ValuSoft

[2008-06-20|17:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VirtualFarm

[2006-09-26|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[2008-08-19|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[2007-03-04|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[2004-06-22|23:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[2004-06-22|23:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[2004-06-22|23:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[2004-06-22|23:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2004-06-22|23:38] C:\DOCUME~1\LOGMEI~1\APPLIC~1\Identities

[2004-06-22|23:38] C:\DOCUME~1\LOGMEI~1\APPLIC~1\Microsoft

[2004-06-22|23:38] C:\DOCUME~1\LOGMEI~1\APPLIC~1\Real

[2006-02-25|16:16] C:\DOCUME~1\MEBEAU~1\APPLIC~1\7Wonders

[2007-11-15|12:20] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Abra Academy2

[2006-09-29|20:07] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Absolutist.com

[2007-12-13|07:59] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Adobe

[2004-06-22|21:02] C:\DOCUME~1\MEBEAU~1\APPLIC~1\AdobeUM

[2008-06-12|15:18] C:\DOCUME~1\MEBEAU~1\APPLIC~1\alawar

[2007-07-27|16:18] C:\DOCUME~1\MEBEAU~1\APPLIC~1\AlawarGameBox

[2008-03-17|16:40] C:\DOCUME~1\MEBEAU~1\APPLIC~1\AlwaysNeat

[2006-05-14|15:28] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Balloon Express

[2008-09-03|12:31] C:\DOCUME~1\MEBEAU~1\APPLIC~1\BeachPartyCraze

[2007-01-22|17:13] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Beep Industries

[2008-01-28|16:01] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Big Fish Games

[2008-06-25|16:08] C:\DOCUME~1\MEBEAU~1\APPLIC~1\BigFish

[2006-03-11|16:55] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Blippy Games

[2008-02-16|16:05] C:\DOCUME~1\MEBEAU~1\APPLIC~1\BloodTies

[2007-02-01|12:37] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Boomzap

[2007-01-28|13:25] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Canvas Multi-Media

[2008-06-12|10:53] C:\DOCUME~1\MEBEAU~1\APPLIC~1\cerasus.media

[2006-03-05|15:10] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Chasing Dogs Studios

[2004-06-23|09:34] C:\DOCUME~1\MEBEAU~1\APPLIC~1\CyberLink

[2008-08-03|09:16] C:\DOCUME~1\MEBEAU~1\APPLIC~1\DAEMON Tools

[2006-05-21|18:16] C:\DOCUME~1\MEBEAU~1\APPLIC~1\EA

[2008-05-10|15:05] C:\DOCUME~1\MEBEAU~1\APPLIC~1\EleFun Games

[2008-08-22|16:45] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Flood Light Games

[2007-06-15|18:50] C:\DOCUME~1\MEBEAU~1\APPLIC~1\FloodLightGames

[2007-10-20|13:55] C:\DOCUME~1\MEBEAU~1\APPLIC~1\ForgottenRiddles

[2008-07-20|15:08] C:\DOCUME~1\MEBEAU~1\APPLIC~1\ForgottenRiddles2

[2008-07-20|16:36] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Friday's games

[2006-05-12|07:03] C:\DOCUME~1\MEBEAU~1\APPLIC~1\funkitron

[2008-02-17|16:24] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Fuzzy Games

[2008-07-06|14:46] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Gaijin Ent

[2005-09-24|16:41] C:\DOCUME~1\MEBEAU~1\APPLIC~1\GameBlend

[2006-07-16|16:20] C:\DOCUME~1\MEBEAU~1\APPLIC~1\GameHouse

[2008-08-31|12:12] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Gamelab

[2008-05-26|14:30] C:\DOCUME~1\MEBEAU~1\APPLIC~1\GamesCafe

[2006-09-26|15:22] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Google

[2004-06-22|20:46] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Help

[2008-09-07|15:54] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Home Sweet Home 2

[2008-10-17|15:29] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Identities

[2008-09-06|10:36] C:\DOCUME~1\MEBEAU~1\APPLIC~1\ITTNord

[2008-05-19|10:57] C:\DOCUME~1\MEBEAU~1\APPLIC~1\iWin

[2008-03-02|17:00] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Jane s Hotel

[2008-05-08|16:44] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Jane s Hotel Family Hero

[2007-10-14|17:38] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Land Of Runes

[2004-06-23|09:39] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Leadertech

[2005-06-08|08:47] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Macromedia

[2007-09-02|16:02] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Magic Academy

[2005-12-07|17:32] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Magic Match

[2008-12-04|23:58] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Malwarebytes

[2008-07-04|16:47] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Meridian93

[2007-09-16|08:43] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Microsoft

[2005-04-20|14:14] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Mind Control Software

[2008-08-18|21:57] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Mozilla

[2008-12-08|17:50] C:\DOCUME~1\MEBEAU~1\APPLIC~1\MSN6

[2007-08-09|16:21] C:\DOCUME~1\MEBEAU~1\APPLIC~1\My Games

[2008-05-14|16:11] C:\DOCUME~1\MEBEAU~1\APPLIC~1\MysteryStudio

[2008-02-25|12:22] C:\DOCUME~1\MEBEAU~1\APPLIC~1\MythicPearls

[2008-07-30|08:59] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Nero

[2005-01-25|16:37] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Nology

[2008-02-02|11:42] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Oberon Games

[2008-09-23|08:40] C:\DOCUME~1\MEBEAU~1\APPLIC~1\PetShowCraze

[2008-03-15|16:11] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Pirateville

[2006-06-24|11:07] C:\DOCUME~1\MEBEAU~1\APPLIC~1\pixelStorm

[2008-09-30|16:32] C:\DOCUME~1\MEBEAU~1\APPLIC~1\PlayFirst

[2005-07-29|14:44] C:\DOCUME~1\MEBEAU~1\APPLIC~1\PTV Game

[2005-07-30|10:49] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Real

[2008-05-09|06:50] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Restorer

[2004-06-23|09:39] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Sonic

[2008-02-25|12:55] C:\DOCUME~1\MEBEAU~1\APPLIC~1\SprillBermudeEng

[2008-07-16|14:53] C:\DOCUME~1\MEBEAU~1\APPLIC~1\SulusGames

[2008-06-15|09:46] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Symantec

[2008-04-06|13:00] C:\DOCUME~1\MEBEAU~1\APPLIC~1\TheScruffs

[2008-08-03|09:44] C:\DOCUME~1\MEBEAU~1\APPLIC~1\ubi.com

[2008-03-25|16:31] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Valusoft

[2007-09-02|12:28] C:\DOCUME~1\MEBEAU~1\APPLIC~1\VeniceMysteryData

[2008-06-09|14:07] C:\DOCUME~1\MEBEAU~1\APPLIC~1\ViquaSoft

[2005-10-23|08:15] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Wildfire

[2008-07-30|08:42] C:\DOCUME~1\MEBEAU~1\APPLIC~1\WinRAR

[2008-03-21|12:10] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Yatec Games

[2008-10-17|15:29] C:\DOCUME~1\MEBEAU~1\APPLIC~1\Zylom

[2005-03-01|11:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia

[2005-03-01|10:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[2005-06-03|14:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2008-12-11 17:16][--ah-----] C:\WINDOWS\tasks\SA.DAT

[2002-08-30 12:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-01-24|12:41] C:\Program Files\2004 Mahjongg Lite 3r

[2005-02-24|17:53] C:\Program Files\3D Magic Mahjongg

[2004-06-22|23:39] C:\Program Files\Adobe

[2008-01-23|16:26] C:\Program Files\Adventure Inlay

[2008-09-23|08:50] C:\Program Files\Alawar

[2005-11-16|17:47] C:\Program Files\Ancient TriJong

[2006-11-27|16:32] C:\Program Files\Aveyond

[2006-01-26|10:24] C:\Program Files\BFG

[2008-06-09|12:32] C:\Program Files\bfgclient

[2005-03-17|18:18] C:\Program Files\Big Fish Games

[2008-12-11|09:17] C:\Program Files\Big Kahuna Reef

[2008-03-03|16:45] C:\Program Files\BigFishGames

[2006-07-14|16:37] C:\Program Files\Boonty

[2008-09-30|14:43] C:\Program Files\BoontyGames

[2004-07-01|16:19] C:\Program Files\Borland

[2004-06-23|14:33] C:\Program Files\Broderbund

[2008-06-27|17:49] C:\Program Files\Cafe Games

[2008-01-08|20:55] C:\Program Files\CCleaner

[2004-06-23|07:59] C:\Program Files\Common Files

[2004-06-22|23:39] C:\Program Files\ComPlus Applications

[2005-03-22|17:16] C:\Program Files\Cosmic Bugs

[2005-11-09|15:55] C:\Program Files\Crystal Path

[2005-03-04|14:58] C:\Program Files\Cubis Gold

[2004-06-22|23:39] C:\Program Files\CyberLink

[2004-06-29|17:54] C:\Program Files\CycleMan

[2008-08-03|09:33] C:\Program Files\DAEMON Tools Lite

[2008-08-03|09:33] C:\Program Files\DAEMON Tools Toolbar

[2005-02-13|15:59] C:\Program Files\Dekovir

[2008-01-17|17:12] C:\Program Files\Delicious Deluxe

[2006-11-30|16:58] C:\Program Files\Diner Dash 2

[2005-10-25|16:11] C:\Program Files\Electrotank

[2005-03-01|17:00] C:\Program Files\Emperor's Mahjong

[2008-01-22|17:19] C:\Program Files\Encore

[2008-08-17|11:11] C:\Program Files\Fichiers communs

[2005-06-16|15:18] C:\Program Files\GameBubbles

[2008-01-25|19:09] C:\Program Files\GameHouse

[2005-03-01|16:59] C:\Program Files\Gekko Mahjongg

[2008-08-02|06:24] C:\Program Files\Google

[2004-06-22|22:17] C:\Program Files\Hewlett-Packard

[2004-06-22|22:21] C:\Program Files\ImageServer

[2008-10-01|14:14] C:\Program Files\Incredijeux

[2004-06-23|08:00] C:\Program Files\IncrediMail

[2008-08-03|09:44] C:\Program Files\InstallShield Installation Information

[2008-10-25|07:49] C:\Program Files\Internet Explorer

[2008-04-13|12:44] C:\Program Files\iWin

[2007-07-13|13:12] C:\Program Files\Jewel Quest

[2006-07-31|14:23] C:\Program Files\kedamonoware

[2005-02-13|16:00] C:\Program Files\Kyodai Mahjongg

[2008-12-11|09:23] C:\Program Files\LogMeIn

[2005-09-07|14:34] C:\Program Files\Magic Inlay

[2008-12-06|09:19] C:\Program Files\Magic Solitaire

[2005-11-09|15:54] C:\Program Files\Mah Jong Quest

[2008-12-04|23:58] C:\Program Files\Malwarebytes' Anti-Malware

[2008-09-30|14:43] C:\Program Files\Mes Jeux T‚l‚charg‚s

[2008-08-13|06:20] C:\Program Files\Messenger

[2004-06-27|10:59] C:\Program Files\Micro Application

[2008-05-07|17:13] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[2004-06-22|23:39] C:\Program Files\microsoft frontpage

[2004-06-22|23:40] C:\Program Files\microsoft office

[2004-06-22|23:40] C:\Program Files\Microsoft Visual Studio

[2008-08-02|07:57] C:\Program Files\Movie Maker

[2008-08-20|22:33] C:\Program Files\Mozilla Firefox

[2005-12-10|11:44] C:\Program Files\MSN

[2004-06-22|23:40] C:\Program Files\MSN Gaming Zone

[2008-08-02|08:18] C:\Program Files\MSN Messenger

[2008-07-31|07:52] C:\Program Files\MSXML 4.0

[2008-08-18|21:10] C:\Program Files\Navilog1

[2008-08-02|10:13] C:\Program Files\Nero

[2008-08-02|10:23] C:\Program Files\NeroInstall.bak

[2008-08-02|07:52] C:\Program Files\NetMeeting

[2008-11-06|08:16] C:\Program Files\Norton 360

[2008-02-05|16:37] C:\Program Files\Oberon Media

[2008-08-02|07:52] C:\Program Files\Outlook Express

[2008-06-08|16:00] C:\Program Files\PlayFirst

[2005-03-10|16:53] C:\Program Files\PopCap Games

[2005-02-28|16:09] C:\Program Files\Puzzle Railway

[2008-02-07|16:43] C:\Program Files\Q-bert

[2004-06-22|23:40] C:\Program Files\QuickTime

[2005-10-27|11:32] C:\Program Files\Real

[2005-02-03|15:03] C:\Program Files\ReflexiveArcade

[2004-06-23|14:35] C:\Program Files\Serif

[2004-06-22|23:40] C:\Program Files\Services en ligne

[2007-12-05|08:36] C:\Program Files\Six-Trix

[2004-06-22|23:40] C:\Program Files\Sonic

[2008-12-04|23:50] C:\Program Files\Spybot - Search & Destroy

[2008-06-20|07:43] C:\Program Files\Symantec

[2004-06-22|21:08] C:\Program Files\Terayon

[2004-06-29|13:51] C:\Program Files\TFC

[2005-02-24|17:34] C:\Program Files\TryMedia

[2008-08-03|09:56] C:\Program Files\ubi.com

[2008-08-03|09:41] C:\Program Files\UBISOFT

[2004-07-15|07:50] C:\Program Files\Uninstall Information

[2004-06-22|23:40] C:\Program Files\Virtual CD v4 SDK

[2004-06-23|09:55] C:\Program Files\Web Publish

[2008-08-19|21:03] C:\Program Files\Windows Live Toolbar

[2008-12-08|17:47] C:\Program Files\Windows Media Connect 2

[2008-12-08|17:47] C:\Program Files\Windows Media Player

[2008-08-02|07:52] C:\Program Files\Windows NT

[2008-06-15|08:12] C:\Program Files\Windows Sidebar

[2004-08-15|07:29] C:\Program Files\WindowsUpdate

[2008-07-30|08:42] C:\Program Files\WinRAR

[2004-06-22|23:40] C:\Program Files\xerox

[2004-09-30|08:52] C:\Program Files\Yahoo!

[2008-10-17|18:25] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2004-06-22|21:02] C:\Program Files\Fichiers communs\Adobe

[2005-05-03|15:14] C:\Program Files\Fichiers communs\BOONTY Shared

[2004-06-22|23:39] C:\Program Files\Fichiers communs\Designer

[2008-08-03|09:40] C:\Program Files\Fichiers communs\InstallShield

[2004-06-22|22:21] C:\Program Files\Fichiers communs\Kodak

[2004-11-11|12:07] C:\Program Files\Fichiers communs\Macrovision Shared

[2008-06-13|15:36] C:\Program Files\Fichiers communs\Microsoft Shared

[2004-06-22|23:39] C:\Program Files\Fichiers communs\MSSoap

[2008-08-02|10:16] C:\Program Files\Fichiers communs\Nero

[2008-05-04|11:29] C:\Program Files\Fichiers communs\Oberon Media

[2004-06-22|23:39] C:\Program Files\Fichiers communs\ODBC

[2008-08-03|09:44] C:\Program Files\Fichiers communs\PocketSoft

[2005-10-27|11:32] C:\Program Files\Fichiers communs\Real

[2006-03-31|16:06] C:\Program Files\Fichiers communs\Sandlot Shared

[2005-04-09|12:39] C:\Program Files\Fichiers communs\scanner

[2004-06-22|23:39] C:\Program Files\Fichiers communs\Services

[2004-06-22|23:39] C:\Program Files\Fichiers communs\SpeechEngines

[2004-06-22|23:39] C:\Program Files\Fichiers communs\SureThing Shared

[2008-12-11|22:48] C:\Program Files\Fichiers communs\Symantec Shared

[2008-08-02|07:52] C:\Program Files\Fichiers communs\System

[2004-06-22|23:39] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared

[2008-08-19|21:43] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[2004-06-22|23:39] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 48 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-12-11 22:56:32

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 1

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\MEBEAU~1\Bureau\Drivers\Nero 8321 Fr + serial\keygen Nero-8.3.2.1.exe

C:\DOCUME~1\MEBEAU~1\Bureau\Jeux\Dream Chronicles 2\crack dream chronicles 2

C:\DOCUME~1\MEBEAU~1\Bureau\Jeux\Dream Chronicles 2\crack dream chronicles 2\dream2.exe

C:\DOCUME~1\MEBEAU~1\Bureau\Jeux\Dream Chronicles 2\crack dream chronicles 2\snd.nfo

[F:127][D:7]-> C:\DOCUME~1\MEBEAU~1\LOCALS~1\Temp

[F:351][D:0]-> C:\DOCUME~1\MEBEAU~1\Cookies

[F:2817][D:18]-> C:\DOCUME~1\MEBEAU~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2008-12-11|22:53 - Option : [1]

2 - "C:\Lop SD\LopR_2.txt" - 2008-12-11|22:57 - Option : [2]

--------------------\\ Fin du rapport a 22:57:45

Citer

Falkra

Posté(e) le 13 décembre 2008

- Signaler

Posté(e) le 13 décembre 2008

Des cracks, ça n'aide pas, côté infections...

Télécharge Malwarebytes' Anti-Malware (MBAM)

Double clique sur le fichier téléchargé pour lancer le processus d'installation.
Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
Sélectionne "Exécuter un examen rapide"
Clique sur "Rechercher"
L'analyse démarre, le scan est relativement long, c'est normal.
A la fin de l'analyse, un message s'affiche :
L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés.
Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.

NB : Si MBAM te demande à redémarrer, fais-le.

Citer

Wisewise3

Posté(e) le 13 décembre 2008

Auteur

- Signaler

Posté(e) le 13 décembre 2008

Re Falkra,

voici le rapport demandé.

Bien à toi,

WiseWise3

Malwarebytes' Anti-Malware 1.31

Version de la base de données: 1496

Windows 5.1.2600 Service Pack 3

2008-12-13 13:54:16

mbam-log-2008-12-13 (13-54-16).txt

Type de recherche: Examen rapide

Eléments examinés: 56923

Temps écoulé: 5 minute(s), 53 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

Processus mémoire infecté(s):