Virus bloque antivirus / resolu

Apollo · le 22 janvier 2009

QUI t'a demandé de passer l'option 2 de SmitfraudFix? De plus ce n'est pas la bonne manière de procéder.

J'ai demandé da faire l'option 2 de Toolbar S &D et rien d'autre.

Si tu prends encore des initiatives, tu pourrais être responsable de problèmes... et toi seul.

vcanta · le 22 janvier 2009

bah écoute je me suis trompée j'ai tellement de pgm sur le bureau

vcanta · le 22 janvier 2009

je suis encore désolé de t'avoir vexer, mais je te remercie car je viens de réussir à me connecté à la version évaluation de kaspersky.

Apollo · le 22 janvier 2009

Je ne suis pas vexé holala!

Je disais ça dans ton intérêt

L'option 2 de toolbar s&d a été faite? Donne le rapport stp.

Puis refais un log Hijackthis.

@++

vcanta · le 23 janvier 2009

option 2 de toolbar

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3

X86-based PC ( Uniprocessor Free : AMD Athlon XP 2500+ )

BIOS : Version 1.00

USER : Admin ( Administrator )

BOOT : Normal boot

Antivirus : Kaspersky Anti-Virus 8.0.0.506 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:24 Go (Free:12 Go)

D:\ (Local Disk) - NTFS - Total:4 Go (Free:4 Go)

E:\ (Local Disk) - NTFS - Total:42 Go (Free:6 Go)

F:\ (Local Disk) - NTFS - Total:42 Go (Free:0 Go)

G:\ (CD or DVD)

H:\ (CD or DVD)

I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [2] ( 23/01/2009| 8:22 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\AskTBar\bar

Supprime! - C:\DOCUME~1\Admin\APPLIC~1\Dcads Advanced Toolbar\advertbuttons.xml

Supprime! - C:\DOCUME~1\Admin\APPLIC~1\Dcads Advanced Toolbar\selected.xml

Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG

Supprime! - C:\Program Files\AskTBar

Supprime! - C:\DOCUME~1\Admin\APPLIC~1\Dcads Advanced Toolbar

Supprime! - C:\Program Files\Multi_Media_France

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(Admin) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Admin) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.neuf.fr/"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://www.msn.com/"

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Admin\Application Data\Microsoft\Office\Récent\Patch No Cd Call Of Duty 2 Cle Key Code Crack.rtf.lnk

1 - "C:\ToolBar SD\TB_1.txt" - 22/01/2009|21:49 - Option : [1]

2 - "C:\ToolBar SD\TB_2.txt" - 23/01/2009| 8:24 - Option : [2]

log Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 08:26:04, on 23/01/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\RunDLL32.exe

C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe

C:\Program Files\Defenza\pcd-as.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Veoh Networks\Veoh\VeohClient.exe

C:\Program Files\Free Download Manager\fdm.exe

C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe

C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\devldr32.exe

C:\Program Files\Fighters\configservice.exe

C:\Program Files\WinZip\WZQKPICK.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fighters\licenseservice.exe

C:\Program Files\Fighters\updateservice.exe

C:\Program Files\Fighters\ScannerService.exe

c:\program files\fighters\spywarefighter\SPYWAREfighterTray.exe

C:\Documents and Settings\Admin\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neuf.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - Default URLSearchHook is missing

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: XBTB03021 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)

O3 - Toolbar: (no name) - {B7D3E479-CC68-42B5-A338-938ECE35F419} - (no file)

O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [spywarefighterguard] C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe

O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"

O4 - HKLM\..\Run: [PCDAS] C:\Program Files\Defenza\pcd-as.exe /10003

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide

O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9

O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun

O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO

O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')

O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe

O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE

O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm

O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm

O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm

O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab

O23 - Service: Kaspersky Anti-Virus (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe

O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PTK License-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\licenseservice.exe

O23 - Service: PTK Live Update-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\updateservice.exe

O23 - Service: PTK Scanner-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\ScannerService.exe

O23 - Service: PTK SharedAccess-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\configservice.exe

O24 - Desktop Component 0: (no name) - http://img.hebus.com/2006/05/22/060522110009_14.jpg

O24 - Desktop Component 1: (no name) - http://viphttp.yacast.net/b2l/www.emag.peu...8/FE_908RC3.jpg

--

End of file - 8162 bytes

Apollo · le 23 janvier 2009

Bonjour.

Relance Hijackthis avec Do a system scan only et coche les cases devant les lignes suivantes: SOUS VISTA: Clic droit sur Hijackthis/exécuter en temps qu'administrateur!

R3 - Default URLSearchHook is missing

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: XBTB03021 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)

O3 - Toolbar: (no name) - {B7D3E479-CC68-42B5-A338-938ECE35F419} - (no file)

O4 - HKLM\..\Run: [PCDAS] C:\Program Files\Defenza\pcd-as.exe /10003

Ferme toutes les applications ouvertes et les navigateurs et clique sur Fix Checked

Télécharge Lop S&D.exe sur ton Bureau.

http://eric.71.mespages.googlepages.com/LopSD.exe

Lance Lop S&D et choisis l'option 4.

Une page va s'ouvrir.

Copie/colle ce qui se trouve dans l'espace code ci-dessous puis ferme la page:

Il va y avoir une demande pour enregistrer les fichiers, clique sur Enregistrer.

C:\Program Files\Defenza
C:\DOCUME~1\Admin\Application Data\Microsoft\Office\Récent\Patch No Cd Call Of Duty 2 Cle Key Code Crack.rtf.lnk

L'outil va travailler, supprimer les dossiers ou fichiers infectés et générer un rapport.

Ne ferme pas la fenêtre pendant la suppression!

Copie/colle le contenu de ce rapport dans ta prochaine réponse.

Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide

Fais alors un nouveau log Hijackthis stp.

Lance une analyse complète du pc avec Kaspersky à jour et poste le rapport stp.

Bonne journée.

Modifié le 23 janvier 2009 par Apollo

vcanta · le 23 janvier 2009

le bloc note reste vide

c'est bizare non ?

j'ai mal lu, je recommence

vcanta · le 23 janvier 2009

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3

X86-based PC ( Uniprocessor Free : AMD Athlon XP 2500+ )

BIOS : Version 1.00

USER : Admin ( Administrator )

BOOT : Normal boot

Antivirus : Kaspersky Anti-Virus 8.0.0.506 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:24 Go (Free:12 Go)

D:\ (Local Disk) - NTFS - Total:4 Go (Free:4 Go)

E:\ (Local Disk) - NTFS - Total:42 Go (Free:6 Go)

F:\ (Local Disk) - NTFS - Total:42 Go (Free:0 Go)

G:\ (CD or DVD)

H:\ (CD or DVD)

I:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )

Option : [4] ( 23/01/2009|10:04 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Lop Script

C:\Program Files\Defenza

C:\DOCUME~1\Admin\Application Data\Microsoft\Office\Récent\Patch No Cd Call Of Duty 2 Cle Key Code Crack.rtf.lnk

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\Admin\Application Data\Microsoft\Office\Récent\Patch No Cd Call Of Duty 2 Cle Key Code Crack.rtf.lnk

Supprime! - C:\Program Files\Defenza

Supprime! - C:\Program Files\3wPlayer

Supprime! - C:\DOCUME~1\Admin\APPLIC~1\GPLDAR~1

Supprime! - C:\Program Files\GPLDAR~1

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[08/01/2008|21:54] C:\DOCUME~1\Admin\APPLIC~1\Adobe

[17/06/2008|06:05] C:\DOCUME~1\Admin\APPLIC~1\AdobeUM

[10/09/2006|09:06] C:\DOCUME~1\Admin\APPLIC~1\Ahead

[16/12/2006|15:51] C:\DOCUME~1\Admin\APPLIC~1\Apple Computer

[27/10/2006|17:38] C:\DOCUME~1\Admin\APPLIC~1\BitTorrent

[04/04/2007|19:23] C:\DOCUME~1\Admin\APPLIC~1\DivX

[12/08/2007|12:05] C:\DOCUME~1\Admin\APPLIC~1\EoRezo

[23/01/2009|10:06] C:\DOCUME~1\Admin\APPLIC~1\Free Download Manager

[12/11/2007|22:26] C:\DOCUME~1\Admin\APPLIC~1\Généatique2007

[10/03/2007|08:55] C:\DOCUME~1\Admin\APPLIC~1\Google

[22/10/2006|16:11] C:\DOCUME~1\Admin\APPLIC~1\Help

[13/08/2007|17:01] C:\DOCUME~1\Admin\APPLIC~1\Identities

[31/03/2007|10:06] C:\DOCUME~1\Admin\APPLIC~1\ItsLabel

[15/11/2007|18:54] C:\DOCUME~1\Admin\APPLIC~1\LimeWire

[27/10/2006|15:49] C:\DOCUME~1\Admin\APPLIC~1\Macromedia

[07/12/2007|21:48] C:\DOCUME~1\Admin\APPLIC~1\Media Player Classic

[15/01/2009|21:56] C:\DOCUME~1\Admin\APPLIC~1\Microsoft

[08/01/2008|21:48] C:\DOCUME~1\Admin\APPLIC~1\Mozilla

[03/06/2007|18:52] C:\DOCUME~1\Admin\APPLIC~1\Skype

[02/03/2008|13:34] C:\DOCUME~1\Admin\APPLIC~1\SoundSpectrum

[26/04/2007|18:14] C:\DOCUME~1\Admin\APPLIC~1\Sun

[21/12/2007|20:45] C:\DOCUME~1\Admin\APPLIC~1\vlc

[18/12/2007|19:08] C:\DOCUME~1\Admin\APPLIC~1\WinRAR

[01/10/2006|19:25] C:\DOCUME~1\Admin\APPLIC~1\Xerox

[28/02/2008|20:43] C:\DOCUME~1\Admin\APPLIC~1\Yahoo!

[13/08/2007|17:01] C:\DOCUME~1\Admin\APPLIC~1\Zylom

[12/08/2007|13:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[12/03/2007|13:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[05/09/2008|22:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple

[05/09/2008|22:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[18/10/2008|22:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth

[16/01/2009|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters

[20/11/2007|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure

[20/11/2007|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg

[15/01/2009|22:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[23/01/2009|08:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab

[02/12/2007|14:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee

[26/01/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com

[08/04/2007|21:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[14/01/2009|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help

[19/08/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA

[24/12/2007|19:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles

[26/05/2007|18:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pokeremotebeepsecond

[16/12/2006|15:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[21/06/2007|19:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Softdisk LLC

[16/01/2009|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[23/09/2006|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WhiteCap (Holiday Edition)

[08/09/2006|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[15/03/2008|12:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Winferno

[12/08/2007|14:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[08/09/2006|20:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[08/09/2006|20:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[08/04/2007|21:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[27/12/2008 09:00][--a--c---] C:\WINDOWS\tasks\rpc.job

[19/01/2009 18:36][--a--c---] C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[23/01/2009 08:14][--ah-c---] C:\WINDOWS\tasks\SA.DAT

[02/10/2001 17:16][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[10/09/2006|12:49] C:\Program Files\Adobe

[09/09/2006|00:11] C:\Program Files\Ahead

[16/10/2006|13:45] C:\Program Files\All Systems

[09/01/2009|21:02] C:\Program Files\Alwil Software

[16/10/2006|19:41] C:\Program Files\Anuman Interactive

[05/09/2008|22:35] C:\Program Files\Apple Software Update

[06/12/2006|16:20] C:\Program Files\AviSynth 2.5

[12/08/2007|13:09] C:\Program Files\Azureus

[28/12/2008|15:54] C:\Program Files\Bejeweled 2 Deluxe

[08/09/2006|23:09] C:\Program Files\BeWAN ADSL V1.9.0.10

[08/09/2006|21:05] C:\Program Files\BeWAN ADSL V1.9.0.3

[23/09/2006|12:54] C:\Program Files\BitSpirit

[25/09/2006|18:41] C:\Program Files\Boonty

[25/09/2006|18:41] C:\Program Files\BoontyGames

[15/01/2009|21:18] C:\Program Files\CCleaner

[07/12/2007|21:41] C:\Program Files\Combined Community Codec Pack

[08/09/2006|20:51] C:\Program Files\ComPlus Applications

[12/08/2007|12:02] C:\Program Files\Creative

[03/11/2006|16:56] C:\Program Files\CSO-DAX COMPILATOR

[05/01/2007|02:55] C:\Program Files\DAEMON Tools

[27/09/2006|17:23] C:\Program Files\DesignSoft

[16/10/2006|19:44] C:\Program Files\directx

[27/11/2008|20:47] C:\Program Files\DivX

[05/10/2007|22:07] C:\Program Files\DVD Audio Extractor

[29/12/2006|15:32] C:\Program Files\EA GAMES

[13/01/2009|00:23] C:\Program Files\eMule

[12/08/2007|12:33] C:\Program Files\eoRezo

[18/12/2006|20:06] C:\Program Files\EphPod

[12/09/2006|20:29] C:\Program Files\EPSON

[22/01/2009|21:09] C:\Program Files\Fichiers communs

[16/01/2009|08:03] C:\Program Files\Fighters

[09/01/2009|20:59] C:\Program Files\Free Download Manager

[15/03/2008|11:34] C:\Program Files\Free Offers from Freeze.com

[22/11/2008|14:54] C:\Program Files\Generalia Multimedia

[16/01/2009|07:28] C:\Program Files\Google

[20/01/2009|20:50] C:\Program Files\InstallShield Installation Information

[17/01/2009|11:37] C:\Program Files\Internet Explorer

[18/10/2008|22:42] C:\Program Files\IVT Corporation

[26/04/2007|18:14] C:\Program Files\Java

[18/12/2007|19:03] C:\Program Files\Jewel Match

[16/01/2009|20:28] C:\Program Files\Kaspersky Lab

[15/03/2008|11:40] C:\Program Files\LimeWire

[18/10/2006|10:50] C:\Program Files\MaxSoftware

[18/10/2006|10:50] C:\Program Files\MaxTV Online

[05/10/2008|19:01] C:\Program Files\Messenger

[05/01/2007|02:47] C:\Program Files\Micro Application

[22/12/2008|20:56] C:\Program Files\Microsoft ActiveSync

[15/03/2008|14:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[08/09/2006|20:54] C:\Program Files\microsoft frontpage

[28/12/2006|15:53] C:\Program Files\Microsoft Games

[26/01/2007|22:49] C:\Program Files\Microsoft Office

[08/09/2006|23:25] C:\Program Files\Microsoft Visual Studio

[26/01/2007|22:43] C:\Program Files\Microsoft Visual Studio 8

[26/01/2007|22:50] C:\Program Files\Microsoft Works

[26/01/2007|22:48] C:\Program Files\Microsoft.NET

[19/10/2006|17:52] C:\Program Files\MIKSOFT

[05/01/2007|02:55] C:\Program Files\MioNet

[04/10/2008|21:55] C:\Program Files\movie maker

[23/01/2009|08:26] C:\Program Files\Mozilla Firefox

[16/09/2006|12:08] C:\Program Files\mp3DirectCut

[26/01/2007|22:50] C:\Program Files\MSBuild

[04/10/2008|21:55] C:\Program Files\msn

[08/09/2006|20:54] C:\Program Files\msn gaming zone

[16/11/2006|12:09] C:\Program Files\MSXML 4.0

[22/01/2009|20:18] C:\Program Files\Navilog1

[09/09/2006|00:12] C:\Program Files\Nero

[04/10/2008|21:51] C:\Program Files\NetMeeting

[08/03/2007|18:54] C:\Program Files\Neuf

[10/09/2006|11:20] C:\Program Files\OfficeUpdate11

[23/04/2007|18:38] C:\Program Files\Online_TV

[04/10/2008|21:51] C:\Program Files\Outlook Express

[05/09/2008|22:38] C:\Program Files\QuickTime

[15/03/2008|11:40] C:\Program Files\Real

[14/08/2007|17:54] C:\Program Files\ReflexiveArcade

[27/12/2008|19:01] C:\Program Files\Resco

[12/08/2007|13:09] C:\Program Files\SAMSUNG

[08/09/2006|20:52] C:\Program Files\Services en ligne

[28/07/2007|21:45] C:\Program Files\SHARE 1.0 EX2

[12/11/2006|12:26] C:\Program Files\sisagp

[12/08/2007|12:33] C:\Program Files\Skype

[26/11/2007|21:29] C:\Program Files\Smart Projects

[10/01/2009|10:30] C:\Program Files\SoundSpectrum

[15/03/2008|17:29] C:\Program Files\Stardock

[28/11/2007|20:05] C:\Program Files\Tele2

[12/11/2007|22:25] C:\Program Files\Tracker Software

[12/09/2006|08:09] C:\Program Files\Uninstall Information

[05/01/2007|02:55] C:\Program Files\USBToolbox

[15/03/2008|12:01] C:\Program Files\Veoh Networks

[06/10/2007|18:07] C:\Program Files\VideoLAN

[25/03/2007|17:29] C:\Program Files\Web Media Player

[12/09/2006|10:31] C:\Program Files\WinAVI MP4 Converter

[06/12/2006|16:11] C:\Program Files\WinAVI Video Converter

[26/01/2007|21:40] C:\Program Files\Windows Media Connect 2

[15/01/2009|21:56] C:\Program Files\Windows Media Player

[08/09/2006|20:54] C:\Program Files\Windows NT

[08/09/2006|20:52] C:\Program Files\WindowsUpdate

[03/02/2008|21:57] C:\Program Files\WinRAR

[09/01/2009|22:33] C:\Program Files\WinZip

[08/09/2006|20:54] C:\Program Files\xerox

[15/03/2008|11:41] C:\Program Files\Yahoo!

[15/08/2007|18:39] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[12/03/2007|13:18] C:\Program Files\Fichiers communs\Adobe

[22/11/2008|14:56] C:\Program Files\Fichiers communs\Ahead

[26/01/2007|22:49] C:\Program Files\Fichiers communs\DESIGNER

[10/09/2006|10:30] C:\Program Files\Fichiers communs\EPSON

[30/09/2006|12:26] C:\Program Files\Fichiers communs\InstallShield

[26/04/2007|18:13] C:\Program Files\Fichiers communs\Java

[25/07/2008|06:59] C:\Program Files\Fichiers communs\Microsoft Shared

[08/09/2006|20:52] C:\Program Files\Fichiers communs\MSSoap

[08/09/2006|22:45] C:\Program Files\Fichiers communs\ODBC

[10/01/2009|10:29] C:\Program Files\Fichiers communs\Real

[08/09/2006|20:52] C:\Program Files\Fichiers communs\Services

[08/09/2006|22:45] C:\Program Files\Fichiers communs\SpeechEngines

[15/03/2008|17:29] C:\Program Files\Fichiers communs\Stardock

[04/10/2008|21:51] C:\Program Files\Fichiers communs\System

--------------------\\ Process

( 34 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-01-23 10:09:58

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 1

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:5][D:0]-> C:\DOCUME~1\Admin\LOCALS~1\Temp

[F:3][D:0]-> C:\DOCUME~1\Admin\Cookies

[F:51][D:4]-> C:\DOCUME~1\Admin\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 23/01/2009|10:11 - Option : [4]

--------------------\\ Fin du rapport a 10:11:19

voila le 1er

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:13:42, on 23/01/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\RunDLL32.exe

C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Veoh Networks\Veoh\VeohClient.exe

C:\Program Files\Free Download Manager\fdm.exe

C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe

C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\devldr32.exe

C:\Program Files\Fighters\configservice.exe

C:\Program Files\WinZip\WZQKPICK.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fighters\licenseservice.exe

C:\Program Files\Fighters\updateservice.exe

C:\Program Files\Fighters\ScannerService.exe

c:\program files\fighters\spywarefighter\SPYWAREfighterTray.exe

C:\Program Files\Mozilla Firefox\firefox.exe