lien search conduit en page d'accueil

jer33.2

Posté(e) le 13 mai 2010

- Signaler

Posté(e) le 13 mai 2010

Bonjour,

Depuis quelques temps j'ai l'adresse du moteur de recherche Messenger Plus Live en page d'accueil et je souhaiterai supprimé cela.

Voici un rapport avec Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:05:26, on 13/05/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\PnkBstrB.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2567681

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\famille\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O8 - Extra context menu item: Ajouter au fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm

O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1215705658937

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flas...ent/swflash.cab

O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photo...ol/MSNPUpld.cab

O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--

End of file - 9273 bytes

Bien cordialement

Citer

Thanos

Posté(e) le 13 mai 2010

- Signaler

Posté(e) le 13 mai 2010

salut

Poste le rapport suivant stp =>

Désactive tes protections résidentes (Antivirus, ...) tu les réactivera après le scan

Télécharge Lop S&D < ici

Double-clique sur Lop S&D.exe présent sur ton bureau
Séléctionne la langue souhaitée, puis choisis l'Option 1 (Recherche)
Patiente jusqu'à la fin du scan
Poste le rapport généré. Si tu ne le vois pas, tu le trouveras dans le répertoire (C\) et il se nomme lopR.txt

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Citer

jer33.2

Posté(e) le 14 mai 2010

Auteur

- Signaler

Posté(e) le 14 mai 2010

Voici le rapport avec LopSD :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : Intel® Pentium® Dual CPU E2160 @ 1.80GHz )

BIOS : BIOS Date: 10/14/08 13:59:09 Ver: 08.00.12

USER : famille ( Administrator )

BOOT : Normal boot

Antivirus : Kaspersky Internet Security 8.0.0.506 (Not Activated)

Firewall : Kaspersky Internet Security 8.0.0.506 (Not Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:149 Go (Free:28 Go)

D:\ (Local Disk) - NTFS - Total:149 Go (Free:108 Go)

E:\ (CD or DVD)

F:\ (CD or DVD)

H:\ (USB) - FAT32 - Total:7723 Mo (Free:2 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )

Option : [1] ( 14/05/2010|17:55 )

--------------------\\ Listing des dossiers dans APPLIC~1

[08/02/2009|17:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\HP

[10/07/2008|12:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[21/03/2009|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}

[20/12/2009|11:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{4E1B117F-A681-406A-88B5-AF868CF9CB04}

[20/12/2009|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{5E267FB6-2CB9-4677-A53F-58B022B7B66D}

[07/11/2009|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}

[15/05/2009|22:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

[20/12/2009|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8E4DC1D0-364F-4942-85CD-BCD7298D633E}

[19/12/2009|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[31/08/2008|12:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems

[11/07/2008|15:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM

[27/06/2009|22:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple

[12/07/2008|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[19/04/2010|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI

[24/12/2009|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Codemasters

[11/07/2008|15:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet

[13/07/2008|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP

[24/02/2009|01:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant

[18/12/2009|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations

[14/05/2010|11:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab

[10/07/2008|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files

[21/02/2009|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI

[27/12/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com

[26/05/2009|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[13/05/2010|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[07/11/2009|20:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[08/11/2009|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help

[20/12/2009|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Native Instruments

[02/07/2009|21:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia

[10/10/2009|09:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage

[18/12/2009|15:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OviInstallerCache

[15/03/2009|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite

[07/11/2009|19:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PreEmptive Solutions

[13/08/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Saitek

[11/05/2010|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM

[13/07/2008|18:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic

[27/05/2009|03:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[11/05/2010|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[10/07/2008|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[10/07/2008|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[10/07/2008|12:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[25/05/2009|23:57] C:\DOCUME~1\famille\APPLIC~1\Adobe

[11/07/2008|14:38] C:\DOCUME~1\famille\APPLIC~1\Ahead

[07/11/2009|22:35] C:\DOCUME~1\famille\APPLIC~1\Apple Computer

[21/08/2008|17:49] C:\DOCUME~1\famille\APPLIC~1\ATI

[13/07/2008|21:41] C:\DOCUME~1\famille\APPLIC~1\DAEMON Tools

[10/08/2008|15:56] C:\DOCUME~1\famille\APPLIC~1\DivX

[20/12/2008|17:52] C:\DOCUME~1\famille\APPLIC~1\Folding@home-gpu

[17/08/2008|11:46] C:\DOCUME~1\famille\APPLIC~1\GARMIN

[12/07/2008|15:53] C:\DOCUME~1\famille\APPLIC~1\Google

[24/07/2008|13:49] C:\DOCUME~1\famille\APPLIC~1\Help

[27/07/2008|19:12] C:\DOCUME~1\famille\APPLIC~1\HLSW

[13/07/2008|18:54] C:\DOCUME~1\famille\APPLIC~1\HP

[10/07/2008|13:30] C:\DOCUME~1\famille\APPLIC~1\Identities

[30/12/2008|18:49] C:\DOCUME~1\famille\APPLIC~1\InstallShield

[31/10/2008|10:35] C:\DOCUME~1\famille\APPLIC~1\Intelliremote

[14/11/2009|21:14] C:\DOCUME~1\famille\APPLIC~1\LimeWire

[07/05/2009|10:09] C:\DOCUME~1\famille\APPLIC~1\Macromedia

[26/05/2009|16:43] C:\DOCUME~1\famille\APPLIC~1\Malwarebytes

[13/07/2008|17:55] C:\DOCUME~1\famille\APPLIC~1\Media Player Classic

[16/01/2010|13:58] C:\DOCUME~1\famille\APPLIC~1\Microsoft

[10/07/2008|17:43] C:\DOCUME~1\famille\APPLIC~1\Mozilla

[18/12/2009|15:36] C:\DOCUME~1\famille\APPLIC~1\Nokia

[18/12/2009|15:35] C:\DOCUME~1\famille\APPLIC~1\Nokia Ovi Suite

[18/11/2009|15:31] C:\DOCUME~1\famille\APPLIC~1\PC Suite

[12/07/2008|18:56] C:\DOCUME~1\famille\APPLIC~1\Quark

[22/12/2008|00:25] C:\DOCUME~1\famille\APPLIC~1\Samsung

[28/10/2008|20:32] C:\DOCUME~1\famille\APPLIC~1\SecuROM

[17/01/2010|12:27] C:\DOCUME~1\famille\APPLIC~1\Steinberg

[26/08/2008|17:40] C:\DOCUME~1\famille\APPLIC~1\Sun

[27/07/2008|19:14] C:\DOCUME~1\famille\APPLIC~1\teamspeak2

[14/02/2010|00:03] C:\DOCUME~1\famille\APPLIC~1\uTorrent

[24/09/2008|18:49] C:\DOCUME~1\famille\APPLIC~1\vlc

[14/08/2008|17:19] C:\DOCUME~1\famille\APPLIC~1\Windows Desktop Search

[14/08/2008|17:29] C:\DOCUME~1\famille\APPLIC~1\Windows Search

[12/07/2008|11:53] C:\DOCUME~1\famille\APPLIC~1\WinRAR

[10/07/2008|17:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[26/05/2009|18:34] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe

[26/05/2009|23:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia

[10/07/2008|12:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[14/05/2010 17:21][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1801674531-1085031214-839522115-1003UA.job

[14/05/2010 15:21][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1801674531-1085031214-839522115-1003Core.job

[14/05/2010 17:44][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[14/05/2010 11:12][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[14/05/2010 17:49][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{373129D0-A291-4D80-8276-3E7CE758084D}.job

[01/05/2010 19:11][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[14/05/2010 11:12][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[21/03/2010|11:52] C:\Program Files\Acer Inc

[16/07/2008|14:04] C:\Program Files\Activision

[31/08/2008|12:00] C:\Program Files\Adobe

[27/08/2008|11:27] C:\Program Files\Apple Software Update

[12/07/2008|11:29] C:\Program Files\ASUS

[19/04/2010|18:59] C:\Program Files\ATI

[19/04/2010|19:08] C:\Program Files\ATI Technologies

[08/08/2008|17:53] C:\Program Files\Attansic

[10/08/2008|16:10] C:\Program Files\Bethesda Softworks

[20/12/2008|20:50] C:\Program Files\Bonjour

[24/12/2009|19:45] C:\Program Files\BRS

[13/05/2010|11:41] C:\Program Files\CCleaner

[07/11/2009|19:50] C:\Program Files\CE Remote Tools

[24/12/2009|19:29] C:\Program Files\Codemasters

[10/07/2008|12:48] C:\Program Files\ComPlus Applications

[30/04/2010|10:44] C:\Program Files\Conduit

[31/07/2008|12:12] C:\Program Files\DAEMON Tools Lite

[21/03/2010|11:53] C:\Program Files\DIFX

[06/11/2008|20:51] C:\Program Files\DivX

[28/10/2008|20:20] C:\Program Files\Electronic Arts

[14/05/2010|13:26] C:\Program Files\eMule

[19/04/2010|19:17] C:\Program Files\Fichiers communs

[14/07/2008|14:28] C:\Program Files\Futuremark

[17/08/2008|11:46] C:\Program Files\Garmin

[06/08/2008|19:50] C:\Program Files\Geekbench 2

[11/04/2010|15:50] C:\Program Files\Google

[11/07/2008|14:59] C:\Program Files\Guitar Pro 5

[24/02/2009|01:00] C:\Program Files\Hewlett-Packard

[24/02/2009|01:17] C:\Program Files\HP

[07/11/2009|20:44] C:\Program Files\HTML Help Workshop

[11/05/2010|11:39] C:\Program Files\InstallShield Installation Information

[10/07/2008|15:33] C:\Program Files\Intel

[24/07/2008|13:53] C:\Program Files\Intel Corporation

[03/04/2010|15:13] C:\Program Files\Internet Explorer

[20/02/2010|13:16] C:\Program Files\iPod

[20/02/2010|13:17] C:\Program Files\iTunes

[27/05/2009|22:22] C:\Program Files\Java

[18/01/2009|13:44] C:\Program Files\Kaspersky Lab

[21/02/2009|18:59] C:\Program Files\KONAMI

[13/07/2008|21:28] C:\Program Files\Lavalys

[14/11/2009|21:01] C:\Program Files\LimeWire

[27/12/2008|18:43] C:\Program Files\ma-config.com

[13/08/2008|12:38] C:\Program Files\MagicKey

[30/04/2010|12:41] C:\Program Files\Malwarebytes' Anti-Malware

[22/11/2009|15:05] C:\Program Files\M-Audio

[13/07/2008|17:55] C:\Program Files\Media Player Classic

[14/08/2008|17:22] C:\Program Files\Messenger

[13/05/2010|11:51] C:\Program Files\Messenger Plus! Live

[06/11/2009|17:22] C:\Program Files\Microsoft

[14/07/2008|14:11] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[07/11/2009|20:06] C:\Program Files\Microsoft Device Emulator

[10/07/2008|12:51] C:\Program Files\microsoft frontpage

[07/12/2008|18:07] C:\Program Files\Microsoft Games for Windows - LIVE

[03/12/2008|01:03] C:\Program Files\Microsoft Office

[23/01/2010|10:15] C:\Program Files\Microsoft Silverlight

[07/11/2009|20:06] C:\Program Files\Microsoft SQL Server

[07/11/2009|20:05] C:\Program Files\Microsoft SQL Server 2005 Mobile Edition

[07/11/2009|21:36] C:\Program Files\Microsoft Visual Studio 8

[07/02/2009|21:21] C:\Program Files\Microsoft Xbox 360 Accessories

[10/07/2008|18:26] C:\Program Files\Microsoft.NET

[12/03/2010|23:07] C:\Program Files\Movie Maker

[14/05/2010|16:38] C:\Program Files\Mozilla Firefox

[07/12/2008|16:58] C:\Program Files\MSBuild

[03/12/2008|01:03] C:\Program Files\MSECache

[10/07/2008|12:47] C:\Program Files\MSN

[10/07/2008|12:48] C:\Program Files\MSN Gaming Zone

[14/07/2008|14:11] C:\Program Files\MSXML 4.0

[30/12/2008|18:49] C:\Program Files\MultiScreen

[17/01/2010|12:26] C:\Program Files\Native Instruments

[11/07/2008|14:50] C:\Program Files\Nero

[10/07/2008|15:10] C:\Program Files\NetMeeting

[18/12/2009|15:17] C:\Program Files\Nokia

[13/11/2009|18:15] C:\Program Files\Numark Cue

[18/07/2008|14:46] C:\Program Files\OCCT

[18/12/2009|16:12] C:\Program Files\ODEON

[10/07/2008|12:48] C:\Program Files\Online Services

[24/12/2009|19:33] C:\Program Files\OpenAL

[12/05/2010|22:32] C:\Program Files\Outlook Express

[18/12/2009|15:17] C:\Program Files\PC Connectivity Solution

[28/07/2008|15:39] C:\Program Files\PGameScan

[07/03/2009|20:22] C:\Program Files\PhotoFiltre

[31/12/2008|17:27] C:\Program Files\Pro Imaging Powertoys

[21/03/2010|12:32] C:\Program Files\QCNFILES

[12/07/2008|18:54] C:\Program Files\Quark

[20/02/2010|13:11] C:\Program Files\QuickTime

[08/08/2008|17:48] C:\Program Files\Realtek

[07/12/2008|16:56] C:\Program Files\Reference Assemblies

[11/05/2010|11:39] C:\Program Files\Rockstar Games

[13/08/2008|12:03] C:\Program Files\Saitek

[22/12/2008|00:16] C:\Program Files\Samsung

[10/07/2008|12:50] C:\Program Files\Services en ligne

[10/08/2008|13:03] C:\Program Files\Sibelius Software

[07/03/2009|18:45] C:\Program Files\SoftChris

[27/05/2009|03:06] C:\Program Files\Spybot - Search & Destroy

[27/02/2010|22:51] C:\Program Files\Steam

[17/01/2010|13:20] C:\Program Files\Steinberg

[21/02/2010|18:32] C:\Program Files\Sun

[17/01/2010|13:18] C:\Program Files\Syncrosoft

[13/05/2010|12:04] C:\Program Files\Trend Micro

[31/12/2008|18:15] C:\Program Files\Ubisoft

[07/06/2009|17:15] C:\Program Files\UltraMixer

[10/07/2008|13:30] C:\Program Files\Uninstall Information

[13/08/2008|12:14] C:\Program Files\USB Vibration

[13/07/2008|18:28] C:\Program Files\uTorrent

[24/09/2008|18:20] C:\Program Files\VideoLAN

[04/04/2009|13:06] C:\Program Files\VirtualDJ

[11/06/2009|16:53] C:\Program Files\Windows Desktop Search

[16/01/2010|13:58] C:\Program Files\Windows Live

[06/11/2009|17:22] C:\Program Files\Windows Live SkyDrive

[10/07/2008|17:25] C:\Program Files\Windows Media Connect 2

[10/07/2008|17:27] C:\Program Files\Windows Media Player

[10/07/2008|15:10] C:\Program Files\Windows NT

[10/07/2008|12:50] C:\Program Files\WindowsUpdate

[12/07/2008|12:07] C:\Program Files\WinRAR

[10/07/2008|12:51] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[19/12/2009|12:12] C:\Program Files\Fichiers communs\Adobe

[31/08/2008|12:01] C:\Program Files\Fichiers communs\Adobe Systems Shared

[11/07/2008|14:51] C:\Program Files\Fichiers communs\Ahead

[20/02/2010|13:16] C:\Program Files\Fichiers communs\Apple

[19/04/2010|19:17] C:\Program Files\Fichiers communs\ATI Technologies

[07/11/2009|19:51] C:\Program Files\Fichiers communs\Business Objects

[11/07/2008|15:24] C:\Program Files\Fichiers communs\Control Panels

[07/11/2009|20:25] C:\Program Files\Fichiers communs\Designer

[17/01/2010|12:25] C:\Program Files\Fichiers communs\Digidesign

[29/11/2008|16:07] C:\Program Files\Fichiers communs\Futuremark Shared

[24/02/2009|00:58] C:\Program Files\Fichiers communs\Hewlett-Packard

[24/02/2009|01:02] C:\Program Files\Fichiers communs\HP

[10/07/2008|15:43] C:\Program Files\Fichiers communs\InstallShield

[26/08/2008|17:37] C:\Program Files\Fichiers communs\Java

[11/07/2008|15:07] C:\Program Files\Fichiers communs\Macrovision Shared

[08/11/2009|15:56] C:\Program Files\Fichiers communs\Merge Modules

[07/11/2009|21:38] C:\Program Files\Fichiers communs\Microsoft Shared

[10/07/2008|12:49] C:\Program Files\Fichiers communs\MSSoap

[17/01/2010|12:25] C:\Program Files\Fichiers communs\Native Instruments

[18/12/2009|15:18] C:\Program Files\Fichiers communs\Nokia

[10/07/2008|14:40] C:\Program Files\Fichiers communs\ODBC

[18/12/2009|15:06] C:\Program Files\Fichiers communs\PCSuite

[10/07/2008|12:49] C:\Program Files\Fichiers communs\Services

[24/02/2009|01:02] C:\Program Files\Fichiers communs\Sonic Shared

[10/07/2008|14:40] C:\Program Files\Fichiers communs\SpeechEngines

[10/07/2008|18:27] C:\Program Files\Fichiers communs\System

[06/11/2009|17:20] C:\Program Files\Fichiers communs\Windows Live

[10/07/2008|17:50] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 46 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-05-14 17:57:20

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 183

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\famille\Application Data\uTorrent\Keygen.GTA.IV.Team-FFF.rar.torrent

C:\DOCUME~1\famille\Bureau\Crack gta4.v2 + fichier original @sysy@.rar

C:\DOCUME~1\famille\Local Settings\Application Data\Microsoft\Messenger\y@hotmail.fr\Sharing Folders\v33@hotmail.com\Keygen Adobe CS3.zip

C:\DOCUME~1\famille\Local Settings\Application Data\Microsoft\Messenger\y@hotmail.fr\Sharing Folders\z@hotmail.fr\patch traduction max payne 2\maxpayne2fr\data\database\levels\bitmaps\17_Crackhouse.dds

C:\DOCUME~1\famille\Local Settings\Application Data\Microsoft\Messenger\y@hotmail.fr\Sharing Folders\x33@hotmail.fr\patch traduction max payne 2\maxpayne2fr\data\database\subtitles\17_Crackhouse.h

C:\DOCUME~1\famille\Mes documents\Logiciels\CRACK CALL OF DUTY 4 patch 1.5 NO-CD DVD + crack on-line on line multiplayer + guida per giocare ONLINE + keygen serial + ase + server italiani.cod4.z

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4

C:\DOCUME~1\famille\Mes documents\Logiciels\QuarkXpress 7 crack‚

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\Call of Duty 4 Keygen.exe

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\CRACK MULTI PLAYER

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\CRACK SINGLE PLAYER

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\eula.txt

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\GUIDA PER GIOCARE ONLINE.txt

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\pbgame.htm

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\punk buster setup.exe

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\server italiani cracckati cod 4.txt

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\The All Steeing Eye_install.exe

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\[20 Gennaio 2008]-Metodo su come fare soldi in poco tempo - guadagnare - denaro - postepay - euro.doc

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\CRACK MULTI PLAYER\iw3mp.exe

C:\DOCUME~1\famille\Mes documents\Logiciels\crack COD 4\CRACK SINGLE PLAYER\iw3sp.exe

C:\DOCUME~1\famille\Mes documents\Logiciels\QuarkXpress 7 crack‚\[Quark.XPress.7.2.Passport].QuarkXPress.7.2.Passport + Crack.zip

[F:73][D:10]-> C:\DOCUME~1\famille\LOCALS~1\Temp

[F:15][D:0]-> C:\DOCUME~1\famille\Cookies

[F:26][D:4]-> C:\DOCUME~1\famille\LOCALS~1\TEMPOR~1\content.IE5

[F:1][D:1]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 14/05/2010|17:59 - Option : [1]

--------------------\\ Fin du rapport a 17:59:03

Citer

Thanos

Posté(e) le 14 mai 2010

- Signaler

Posté(e) le 14 mai 2010

salut

Pas d'infection LOP (CID). Effectue la manipulation suivante =>

Démarre Hijackthis, clique sur "Do a system scan only", et coche les lignes suivantes :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2567681

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

Ferme ton/tes navigateurs puis clique sur "Fix Checked"

Ensuite passe par les options d'Internet Explorer pour modifier ta page d'accueil => en vidéo ici: http://www.videotutorial.fr/tutorial/firefox-page-accueil-68

Citer

jer33.2

Posté(e) le 15 mai 2010

Auteur

- Signaler

Posté(e) le 15 mai 2010

Je vous remercie pour votre réponse et votre aide.

Je viens de faire la manipulation que vous m'avez demandé.

Je poste un nouveau rapport avec Hijackthis pour vérifier s'il ne reste pas des éléments douteux à éradiquer ou des infections qui peuvent traîner.

Bien cordialement

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:53:06, on 15/05/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PnkBstrB.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Windows Media Player\wmplayer.exe