Virus inconnu - Besoin d'aide • page 2

[needhelpguys]

Sur un site seulement
Voici le highjackthis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:25:18, on 01/05/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Noguska\NolaProERP\Apache\bin\Apache.exe
C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\runservice.exe
C:\Program Files\Noguska\NolaProERP\Apache\mysql\bin\mysqld-nt.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Noguska\NolaProERP\Apache\bin\Apache.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\EeePC\ACPI\AsTray.exe
C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
C:\Program Files\EeePC\ACPI\AsEPCMon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://webmail.msstate.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Plugin Class - {56CD20F0-7C09-11D5-A768-0050042307CE} - C:\PlayerIE\playerIE.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103470 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.zebest-3000.com/jeux/jeu-159.html"
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Poker Bodog\BPGame.exe
O9 - Extra button: PokerTime - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\PokerTimeMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: BigBetPoker.com - {1ca24684-a693-418e-a430-79d070271843} - C:\Documents and Settings\FM\Menu Démarrer\Programmes\BigBetPoker.com\BigBetPoker.com.lnk (file missing) (HKCU)
O9 - Extra button: UB - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Documents and Settings\FM\Menu Démarrer\Programmes\UB\UB.lnk (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: UB - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Documents and Settings\FM\Menu Démarrer\Programmes\UB\UB.lnk (file missing) (HKCU)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {997C5A94-77F6-427D-A388-AC2B6ECF0F7C} - http://mediaplus.grenoble-em.com/downlo ... taller.ocx
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Game ... meHost.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player ... taller.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/ph ... NPUpld.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ApacheNoguskaNolaPro - Apache Software Foundation - C:\Program Files\Noguska\NolaProERP\Apache\bin\Apache.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: MySQLNoguskaNolaPro - Unknown owner - C:\Program Files\Noguska\NolaProERP\Apache\mysql\bin\mysqld-nt.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 10946 bytes

[Jypalou]

Non,rien de spécial,tu peut donner l'adresse du site,que je vérifie si le probleme est chez moi, si ce n'est pas indiscret
A+

[Jypalou]

Est ce que tu connais ce site qui ne me parait pas tres net
A+

[needhelpguys]

MP

[Jypalou]

Ok,pour moi pas de probleme avec ton site.
Ferme toutes les applications actives et relance HijackThis

Clique sur

Coche les lignes suivantes :
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll (file missing)
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe (file missing)
O9 - Extra button: PokerTime - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\PokerTimeMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: BigBetPoker.com - {1ca24684-a693-418e-a430-79d070271843} - C:\Documents and Settings\FM\Menu Démarrer\Programmes\BigBetPoker.com\BigBetPoker.com.lnk (file missing) (HKCU)
O9 - Extra button: UB - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Documents and Settings\FM\Menu Démarrer\Programmes\UB\UB.lnk (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: UB - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Documents and Settings\FM\Menu Démarrer\Programmes\UB\UB.lnk (file missing) (HKCU)
Clique sur

Valide par Oui (Yes) au message qui va s'afficher.
A+

[needhelpguys]

Good news, les liens internet sur lesquels je clique me donnent les bonnes pages.
Ca semble bon thx
Tu penses que je devrais faire qqchose d'autre?

Toujours cette histoire de touche qui déconnent et qui me bouffent des frappes, super bizarre ça, tu penses que ça vient d'où??

[Jypalou]

Non,plus rien a faire,car au niveau infection c'est bon ,si ton pc tourne bien et que tu n'as plus de probleme ,pour les touches là je ne peut pas te dire.
A+

[needhelpguys]

Fausse joie, après avoir rebooté les sites internet redéconnent...
On fait quoi

[needhelpguys]

Si ça peut donner une indication, je fais ma rechherche google, je clic sur le lien en onglet et pendant le chargement de la page c'est tout le temp adwords qui est écrit puis ça m'envoie sur des sites illogiques ou sur google

[NEO HYUGA]

repete les memes operations en mode sans echec

[Jypalou]

Bonjour,tu as peut etre installé AdWords Editor ,regarde sur ce lien
http://www.google.com/support/adwordsed ... swer=30515
Puis relance hijackThis et supprime cette ligne,qui m'a echappé
O1 - Hosts: ::1 localhost
A+

[jeanmimigab]

Oui. Il n'y avait pas de rapport de MyHosts juste que ça a été fait.

Salut vous deux,

petite incrust...

MyHosts t'as bien indiqué que la "restauration du fichier hosts réussi..." ?
comme ce rapport ..

** Rapport MyHosts.txt **

MyHosts V.1.0.0.2 de jeanmimigab

Merci à la team MH, W-T ,C_XX, Laddy et à Batch_man pour leurs aides

Résultat de l'opération:restauration du fichier hosts réussi...

** Fin du rapport **

bon dimanche

[needhelpguys]

Salut les chefs,
Désolé j'étais en exams.
Bon c'est la marde des fenêtres de partout, PC très lent, il se fige en moyenne au bout de 20 minutes, je peux plus ouvrir les docs et les pages internet sont fake.

J'ai suivis ce que vous m'avez dis de faire:
- Adworks je l'ai retiré il y a quelques jours
- J'ai fixé la ligne que tu as cité
- MyHost, je l'ai refais j'ai bien le message dont tu parles

- Voici le rapport HijackThis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:25:30, on 06/05/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://webmail.msstate.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Plugin Class - {56CD20F0-7C09-11D5-A768-0050042307CE} - C:\PlayerIE\playerIE.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [sydovicq] C:\Documents and Settings\FM\Local Settings\Application Data\dshcuqfyg\rqwhtpltssd.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [sydovicq] C:\Documents and Settings\FM\Local Settings\Application Data\dshcuqfyg\rqwhtpltssd.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103470 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.zebest-3000.com/jeux/jeu-159.html"
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Poker Bodog\BPGame.exe (file missing)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {997C5A94-77F6-427D-A388-AC2B6ECF0F7C} - http://mediaplus.grenoble-em.com/downlo ... taller.ocx
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Game ... meHost.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player ... taller.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/ph ... NPUpld.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ApacheNoguskaNolaPro - Apache Software Foundation - C:\Program Files\Noguska\NolaProERP\Apache\bin\Apache.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: MySQLNoguskaNolaPro - Unknown owner - C:\Program Files\Noguska\NolaProERP\Apache\mysql\bin\mysqld-nt.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 8792 bytes

[Jypalou]

Bonjour,peut etre du lop:
Télécharge LopS&D.exe ICI sur ton bureau , pour cela clic droit sur LopS&D et choisie "enregister la cible du lien sous" ton bureau comme destination.

Désactive ton antivirus,tu pourras le réactiver après la fin du scan.

Sur le bureau fait un double clic sur " LopS&D " pour l'installer.

Double clic sur le raccourci Lop S&D present sur ton bureau pour lancer le programme.

Sélèctionnes la langue en tapant "f" , puis choisis l'option 1 recherche

Si LopS&D te demande de redémarrer ,accepte et au redemarage du pc si ton anti virus bloque l'exécution de LopS&D "ignore" les alertes en choisissant " Ignorer' ou "ne rien faire " ect... aux propositions de ton anti virus.
Ne te sert pas du PC pendant la durée du scan

Attends la fin du scan et poste le rapport.

Au cas ou tu l'aurais fermer, il se trouve à cet l'emplacement C:\LopR.txt
A+

[needhelpguys]

Le rapport fait en sans échec:




--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Atom(TM) CPU N270 @ 1.60GHz )
BIOS : BIOS Date: 08/01/08 15:27:54 Ver: 08.00.12
USER : F M( Administrator )
BOOT : Fail-safe boot
Antivirus : AntiVir Desktop 10.0.1.44 (Activated)
C:\ (Local Disk) - NTFS - Total:80 Go (Free:52 Go)
D:\ (Local Disk) - NTFS - Total:68 Go (Free:68 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 06/05/2010|12:24 )

--------------------\\ Listing des dossiers dans APPLIC~1

[20/12/2009|15:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[10/09/2009|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[10/09/2009|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
[10/09/2009|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
[28/04/2010|18:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avG
[04/04/2010|17:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/01/2010|00:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[27/12/2009|22:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Boss Media
[09/05/2009|11:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[02/10/2008|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ECAP
[27/01/2010|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FileOpen
[23/07/2008|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[29/04/2010|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[28/04/2010|18:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/04/2010|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[16/11/2009|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[14/12/2009|23:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickMediaConverter
[07/07/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[10/09/2009|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[27/03/2010|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[07/07/2008|09:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[07/02/2010|20:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
[21/11/2008|15:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[07/07/2008|08:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[07/07/2008|09:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InstallShield
[07/07/2008|10:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[07/07/2008|10:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[30/12/2009|16:43] C:\DOCUME~1\FRANOI~1\APPLIC~1\Absolute Poker
[10/09/2009|21:30] C:\DOCUME~1\FRANOI~1\APPLIC~1\acccore
[14/12/2009|23:29] C:\DOCUME~1\FRANOI~1\APPLIC~1\Actecom
[20/12/2009|15:27] C:\DOCUME~1\FRANOI~1\APPLIC~1\Adobe
[12/04/2010|19:31] C:\DOCUME~1\FRANOI~1\APPLIC~1\Avira
[09/05/2009|11:49] C:\DOCUME~1\FRANOI~1\APPLIC~1\DAEMON Tools Lite
[27/04/2010|09:36] C:\DOCUME~1\FRANOI~1\APPLIC~1\dvdcss
[27/01/2010|17:13] C:\DOCUME~1\FRANOI~1\APPLIC~1\FileOpen
[11/10/2008|13:26] C:\DOCUME~1\FRANOI~1\APPLIC~1\funkitron
[18/04/2010|21:56] C:\DOCUME~1\FRANOI~1\APPLIC~1\Google
[21/11/2008|15:58] C:\DOCUME~1\FRANOI~1\APPLIC~1\Help
[25/04/2010|13:50] C:\DOCUME~1\FRANOI~1\APPLIC~1\HorizonWimba
[07/07/2008|08:57] C:\DOCUME~1\FRANOI~1\APPLIC~1\Identities
[07/07/2008|09:18] C:\DOCUME~1\FRANOI~1\APPLIC~1\InstallShield
[02/10/2008|17:58] C:\DOCUME~1\FRANOI~1\APPLIC~1\Macromedia
[29/04/2010|11:42] C:\DOCUME~1\FRANOI~1\APPLIC~1\Malwarebytes
[20/12/2009|16:38] C:\DOCUME~1\FRANOI~1\APPLIC~1\Microgaming
[27/01/2010|17:12] C:\DOCUME~1\FRANOI~1\APPLIC~1\Microsoft
[26/04/2010|17:00] C:\DOCUME~1\FRANOI~1\APPLIC~1\Mozilla
[26/01/2010|23:38] C:\DOCUME~1\FRANOI~1\APPLIC~1\Partouche
[01/05/2009|09:37] C:\DOCUME~1\FRANOI~1\APPLIC~1\ScummVM
[30/04/2010|10:49] C:\DOCUME~1\FRANOI~1\APPLIC~1\Skype
[30/04/2010|10:49] C:\DOCUME~1\FRANOI~1\APPLIC~1\skypePM
[26/10/2008|11:12] C:\DOCUME~1\FRANOI~1\APPLIC~1\StarOffice8
[07/07/2008|10:18] C:\DOCUME~1\FRANOI~1\APPLIC~1\Sun
[05/06/2009|07:22] C:\DOCUME~1\FRANOI~1\APPLIC~1\tazebama
[04/10/2008|06:30] C:\DOCUME~1\FRANOI~1\APPLIC~1\Template
[04/03/2009|13:33] C:\DOCUME~1\FRANOI~1\APPLIC~1\Thunderbird
[29/04/2010|14:56] C:\DOCUME~1\FRANOI~1\APPLIC~1\U3
[16/01/2010|20:47] C:\DOCUME~1\FRANOI~1\APPLIC~1\UB
[10/10/2008|07:42] C:\DOCUME~1\FRANOI~1\APPLIC~1\vlc

[28/04/2010|16:50] C:\DOCUME~1\HELPAS~1\APPLIC~1\Absolute Poker
[28/04/2010|16:50] C:\DOCUME~1\HELPAS~1\APPLIC~1\acccore
[28/04/2010|16:50] C:\DOCUME~1\HELPAS~1\APPLIC~1\Adobe
[28/04/2010|16:40] C:\DOCUME~1\HELPAS~1\APPLIC~1\BitDefender
[28/04/2010|16:50] C:\DOCUME~1\HELPAS~1\APPLIC~1\FileOpen
[28/04/2010|16:40] C:\DOCUME~1\HELPAS~1\APPLIC~1\Google
[28/04/2010|16:40] C:\DOCUME~1\HELPAS~1\APPLIC~1\HorizonWimba
[28/04/2010|16:41] C:\DOCUME~1\HELPAS~1\APPLIC~1\Macromedia
[28/04/2010|16:41] C:\DOCUME~1\HELPAS~1\APPLIC~1\Microgaming
[28/04/2010|16:50] C:\DOCUME~1\HELPAS~1\APPLIC~1\Microsoft
[28/04/2010|16:49] C:\DOCUME~1\HELPAS~1\APPLIC~1\Mozilla
[28/04/2010|16:49] C:\DOCUME~1\HELPAS~1\APPLIC~1\Skype
[28/04/2010|16:41] C:\DOCUME~1\HELPAS~1\APPLIC~1\skypePM
[28/04/2010|16:41] C:\DOCUME~1\HELPAS~1\APPLIC~1\StarOffice8
[07/07/2008|10:18] C:\DOCUME~1\HELPAS~1\APPLIC~1\Sun
[28/04/2010|16:41] C:\DOCUME~1\HELPAS~1\APPLIC~1\Template
[28/04/2010|16:49] C:\DOCUME~1\HELPAS~1\APPLIC~1\Thunderbird
[28/04/2010|16:49] C:\DOCUME~1\HELPAS~1\APPLIC~1\U3
[28/04/2010|16:49] C:\DOCUME~1\HELPAS~1\APPLIC~1\UB
[28/04/2010|16:49] C:\DOCUME~1\HELPAS~1\APPLIC~1\vlc

[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Absolute Poker
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\acccore
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Actecom
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Adobe
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Avira
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\DAEMON Tools Lite
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\dvdcss
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\FileOpen
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\funkitron
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Google
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Help
[28/04/2010|17:02] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\HorizonWimba
[07/07/2008|08:57] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Identities
[07/07/2008|09:18] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\InstallShield
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Macromedia
[29/04/2010|13:14] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Malwarebytes
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Microgaming
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Microsoft
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Mozilla
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Partouche
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\ScummVM
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Skype
[30/04/2010|10:58] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\skypePM
[28/04/2010|17:03] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\StarOffice8
[07/07/2008|10:18] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Sun
[28/04/2010|17:04] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\tazebama
[28/04/2010|17:04] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Template
[28/04/2010|17:04] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\Thunderbird
[28/04/2010|17:04] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\U3
[28/04/2010|17:04] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\UB
[28/04/2010|17:04] C:\DOCUME~1\HELPAS~1.EEE\APPLIC~1\vlc

[07/07/2008|08:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/07/2008|08:57] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[27/04/2010 01:20][--a------] C:\WINDOWS\tasks\Dodo eeePC.job
[06/05/2010 11:40][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[06/05/2010 11:28][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[06/05/2010 12:13][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{82E995D1-7831-4359-A145-5BF11C3BA9A6}.job
[14/04/2008 07:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
[06/05/2010 11:28][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[30/12/2009|16:39] C:\Program Files\_uninstallation_info
[09/05/2009|10:56] C:\Program Files\7-Zip
[18/02/2010|21:30] C:\Program Files\Absolute Poker
[07/12/2008|05:39] C:\Program Files\Adobe
[10/09/2009|21:26] C:\Program Files\AIM6
[12/05/2009|17:05] C:\Program Files\Alcohol Soft
[13/11/2009|23:30] C:\Program Files\ASIO4ALL v2
[07/07/2008|09:22] C:\Program Files\Asus
[04/04/2010|17:29] C:\Program Files\Avira
[20/02/2010|10:23] C:\Program Files\BetClic Poker
[06/07/2009|17:12] C:\Program Files\BitDefender
[01/11/2008|10:23] C:\Program Files\Bobble Puzzle
[30/01/2010|00:09] C:\Program Files\Boonty
[30/01/2010|00:28] C:\Program Files\BoontyGames
[22/01/2010|19:54] C:\Program Files\Cake Poker
[28/04/2010|17:32] C:\Program Files\CCleaner
[07/07/2008|08:51] C:\Program Files\ComPlus Applications
[12/05/2009|17:05] C:\Program Files\Conduit
[02/07/2009|06:58] C:\Program Files\DivX
[02/07/2009|06:58] C:\Program Files\DivXLecteurWeb
[04/03/2010|17:59] C:\Program Files\DOSBox-0.63
[23/07/2008|13:02] C:\Program Files\ECAP
[25/02/2009|08:24] C:\Program Files\Editions ENI
[23/07/2008|13:01] C:\Program Files\Eee Storage
[07/07/2008|09:18] C:\Program Files\EeePC
[17/12/2009|18:17] C:\Program Files\eMule
[28/04/2010|17:41] C:\Program Files\ESET
[30/01/2010|00:28] C:\Program Files\Fichiers communs
[27/01/2010|17:12] C:\Program Files\FileOpen
[14/12/2009|18:13] C:\Program Files\Free M4a to MP3 Converter
[01/05/2010|16:00] C:\Program Files\Full Tilt Poker
[18/04/2010|21:40] C:\Program Files\Google
[13/11/2009|23:30] C:\Program Files\Image-Line
[25/02/2009|08:25] C:\Program Files\InstallShield Installation Information
[07/07/2008|09:16] C:\Program Files\Intel
[31/03/2010|01:15] C:\Program Files\Internet Explorer
[07/07/2008|10:28] C:\Program Files\InterVideo
[30/11/2008|14:36] C:\Program Files\iPuissance 4D
[14/02/2010|01:56] C:\Program Files\Java
[01/03/2009|13:20] C:\Program Files\MadTracker
[29/04/2010|11:42] C:\Program Files\Malwarebytes' Anti-Malware
[05/10/2008|02:57] C:\Program Files\Messenger
[21/03/2009|12:29] C:\Program Files\Microsoft
[07/07/2008|08:54] C:\Program Files\microsoft frontpage
[26/10/2008|11:21] C:\Program Files\Microsoft Office
[19/01/2010|17:08] C:\Program Files\Microsoft Silverlight
[07/07/2008|09:09] C:\Program Files\Microsoft SQL Server Compact Edition
[21/03/2009|12:32] C:\Program Files\Microsoft Sync Framework
[09/12/2008|09:53] C:\Program Files\Microsoft Works
[26/10/2008|11:20] C:\Program Files\Microsoft.NET
[01/05/2009|10:46] C:\Program Files\MKY2
[01/05/2009|09:39] C:\Program Files\monkey2fr
[11/03/2010|04:07] C:\Program Files\Movie Maker
[28/04/2010|13:30] C:\Program Files\Mozilla Firefox
[18/05/2009|14:35] C:\Program Files\Mozilla Thunderbird
[16/08/2009|20:49] C:\Program Files\MSBuild
[07/07/2008|08:50] C:\Program Files\MSN Gaming Zone
[05/06/2009|08:52] C:\Program Files\NetMeeting
[01/08/2009|12:29] C:\Program Files\Noguska
[16/11/2009|22:20] C:\Program Files\NOS
[13/08/2009|05:12] C:\Program Files\Outlook Express
[13/11/2009|23:29] C:\Program Files\Outsim
[24/12/2009|15:26] C:\Program Files\PartyPoker
[12/02/2010|13:18] C:\Program Files\PayNoRake
[17/11/2008|16:50] C:\Program Files\PDFCreator
[22/01/2010|20:04] C:\Program Files\Poker
[01/05/2010|15:27] C:\Program Files\PokerPayNoRake
[01/05/2010|15:46] C:\Program Files\PokerStars
[21/12/2009|20:03] C:\Program Files\PokerStove
[29/12/2009|14:14] C:\Program Files\PokRVG Software
[30/12/2009|16:27] C:\Program Files\PokUB
[14/12/2009|23:29] C:\Program Files\QuickMediaConverter
[07/07/2008|09:19] C:\Program Files\RALINK
[23/07/2008|12:59] C:\Program Files\Realtek
[17/01/2010|18:23] C:\Program Files\RedStarPoker
[16/08/2009|20:48] C:\Program Files\Reference Assemblies
[11/10/2008|08:09] C:\Program Files\ReflexiveArcade
[07/07/2008|08:52] C:\Program Files\Services en ligne
[07/07/2008|10:25] C:\Program Files\Skype
[27/02/2009|07:54] C:\Program Files\StepMania
[07/07/2008|10:18] C:\Program Files\Sun
[06/11/2009|18:29] C:\Program Files\Trend Micro
[28/04/2010|18:02] C:\Program Files\UltimaBet
[07/07/2008|08:57] C:\Program Files\Uninstall Information
[10/10/2008|07:41] C:\Program Files\VideoLAN
[10/09/2009|21:26] C:\Program Files\Viewpoint
[18/04/2010|10:01] C:\Program Files\Virtools
[13/11/2009|23:30] C:\Program Files\VstPlugins
[07/07/2008|09:19] C:\Program Files\WIDCOMM
[09/11/2009|22:57] C:\Program Files\Windows Live
[21/03/2009|12:28] C:\Program Files\Windows Live SkyDrive
[05/06/2009|08:52] C:\Program Files\Windows Media Player
[05/06/2009|08:52] C:\Program Files\Windows NT
[07/07/2008|08:52] C:\Program Files\WindowsUpdate
[02/10/2008|17:24] C:\Program Files\WinLemm
[27/03/2010|21:45] C:\Program Files\WinZip
[07/07/2008|08:54] C:\Program Files\xerox
[07/02/2010|20:20] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[07/12/2008|05:39] C:\Program Files\Fichiers communs\Adobe
[20/12/2009|15:26] C:\Program Files\Fichiers communs\Adobe AIR
[10/09/2009|21:25] C:\Program Files\Fichiers communs\AOL
[28/04/2010|17:49] C:\Program Files\Fichiers communs\BitDefender
[30/01/2010|00:28] C:\Program Files\Fichiers communs\BOONTY Shared
[26/10/2008|11:21] C:\Program Files\Fichiers communs\DESIGNER
[18/05/2009|14:35] C:\Program Files\Fichiers communs\DivX Shared
[25/02/2009|08:24] C:\Program Files\Fichiers communs\Editions ENI
[23/07/2008|13:02] C:\Program Files\Fichiers communs\InstallShield
[07/07/2008|10:27] C:\Program Files\Fichiers communs\InterVideo
[07/07/2008|10:18] C:\Program Files\Fichiers communs\Java
[04/04/2010|17:21] C:\Program Files\Fichiers communs\Microsoft Shared
[07/07/2008|08:52] C:\Program Files\Fichiers communs\MSSoap
[07/07/2008|10:46] C:\Program Files\Fichiers communs\ODBC
[07/07/2008|08:52] C:\Program Files\Fichiers communs\Services
[07/07/2008|10:25] C:\Program Files\Fichiers communs\Skype
[07/07/2008|10:46] C:\Program Files\Fichiers communs\SpeechEngines
[07/07/2008|08:52] C:\Program Files\Fichiers communs\System
[21/03/2009|12:21] C:\Program Files\Fichiers communs\Windows Live
[07/07/2008|09:14] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 14 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\FRANOI~1\Cookies\f_m@advertising[1].txt
C:\DOCUME~1\FRANOI~1\Cookies\f_m@advertising[2].txt
C:\DOCUME~1\FRANOI~1\Cookies\f_m@advertising[3].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-06 12:26:03
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:344][D:42]-> C:\DOCUME~1\FRANOI~1\LOCALS~1\Temp
[F:639][D:0]-> C:\DOCUME~1\FRANOI~1\Cookies
[F:14851][D:9]-> C:\DOCUME~1\FRANOI~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 06/05/2010|12:29 - Option : [1]

--------------------\\ Fin du rapport a 12:29:17