Faire un don
ANNONCES

Bienvenue sur notre forum d'entraide informatique :youpie:
Notre équipe est là pour vous aider à régler vos problèmes informatiques.
Postez un message sur le forum pour expliquer votre problème,
vous obtiendrez une assistance efficace, gratuite et rapide (si les délais sont parfois un peu plus longs, c'est que nous avons beaucoup de demandes :ooops: ).

Si devenir "helper" vous tente, les inscriptions à notre école de formation sont ouvertes par intermittence. Suivez les instructions données sur cette page
NB : nous sommes en ce moment victimes d'une vague d'inscriptions malveillantes. Si vous rencontrez des problèmes de connexion, envoyez nous un mel sur la boite des admins. Merci de votre compréhension

administrateurs(arobase)helper-formation.fr

N'hésitez pas à rendre une petite visite à nos partenaires, ça leur fera plaisir, et à nous aussi :D

fenêtres publicitaires intempestives, ralentissement...

La première étape avant de poster dans ce forum est >>ICI<<
( Aucune aide ne sera apportée sur une version illégale de Windows ) :!:

fenêtres publicitaires intempestives, ralentissement....

Messagepar amyag » Mar 4 Aoû 2009 13:33

Bonjour,
J'ai réussi à nettoyer mon ordi grâce à votre aide et je reviens aujourd'hui pour un autre ordi qui a les même problèmes: fenêtres publicitaires intempestives, ralentissement...
Merci de votre aide à l'avance.
Modifié en dernier par amyag le Dim 9 Aoû 2009 14:00, modifié 1 fois.
amyag
Membre
Membre
 
Messages: 46
Enregistré le: Sam 11 Juil 2009 00:43

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar geoffrey5 » Mar 4 Aoû 2009 13:57

Bonjour,

Fais un rapport hijackthis pour que je puisse vérifier les infections de ton PC stp

  • Télécharge hijackthis sur mon site web.
  • Tout est expliqué pour bien l installer et savoir l'utiliser.


Comment copier/coller le rapport :


Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

Ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.


Une explication des raccourcis clavier sont illustrés sur mon site web à cette adresse :

http://forum-aide-contre-virus.be/divers.html
geoffrey5
Contributeur
Contributeur
 
Messages: 677
Enregistré le: Jeu 2 Juil 2009 00:59
Localisation: Liège - Belgique

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar amyag » Mar 4 Aoû 2009 14:25

Merci Geoffrey,
voici le rapport:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:24:44, on 04/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsqh.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Securitoo\av_fw\FSAUA\program\fsaua.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\Program Files\Securitoo\av_fw\FWES\Program\fsdfwd.exe
C:\Program Files\Securitoo\av_fw\FSAUA\program\fsus.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\vVX6000.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Securitoo\av_fw\FSGUI\fsguidll.exe
C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\ALLOCA~1\allocam.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Belkin\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Documents and Settings\christian martinello\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\documents and settings\christian martinello\local settings\application data\gsyci.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.plusnetwork.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453929 14
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Totocam] C:\PROGRA~1\ALLOCA~1\allocam.exe 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [pamela.exe] "C:\Program Files\Pamela\Pamela.exe"
O4 - HKCU\..\Run: [gsyci] "c:\documents and settings\christian martinello\local settings\application data\gsyci.exe" gsyci
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\christian martinello\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (HKCU)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (HKCU)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\ORSP Client\fsorsp.exe
O23 - Service: Service Google Update (gupdate1c9c50a81dba8) (gupdate1c9c50a81dba8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 13611 bytes
amyag
Membre
Membre
 
Messages: 46
Enregistré le: Sam 11 Juil 2009 00:43

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar geoffrey5 » Mar 4 Aoû 2009 14:44

Ton PC est infecté par l'ad-aware Navipromo/Magic Control qui affiche des publicités intempestives.
Il s'installe via certains programmes, dont ceux-ci :
  • Funky Emoticons
  • go-astro
  • GoRecord
  • HotTVPlayer / HotTVPlayer & Paris Hilton
  • Live-Player
  • MailSkinner
  • Messenger Skinner
  • Instant Access
  • InternetGameBox
  • Officiale Emule (Version d'Emule modifiée)
  • Original Solitaire
  • SuperSexPlayer
  • Speed Downloading
  • Sudoplanet
  • Webmediaplayer

Fais attention de ne pas faire la même erreur, donc évite ces programmes

  • Télécharge sur le bureau Navilog1

    (c est le numéro 1) :
  • Si ton antivirus s'affole , le désactiver
  • sous vista : Clic-droit sur le raccourci Navilog1 présent sur le bureau et choisis "Exécuter en tant qu'administrateur
  • sous XP : double-clic dessus pour le lancer
  • taper F
  • Appuyer sur une touche jusqu' arriver aux options
  • Choisir Recherche/désinfection automatique ( = taper 1 )
  • un rapport : fixnavi.txt dans ==> C :
  • le copier et le coller dans la réponse

Je dois m'absenter quelques heures, nous continuerons dès mon retour ;)

@+
geoffrey5
Contributeur
Contributeur
 
Messages: 677
Enregistré le: Jeu 2 Juil 2009 00:59
Localisation: Liège - Belgique

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar amyag » Mar 4 Aoû 2009 20:12

ok, merci.
Voici le rapport:

Fix Navipromo version 4.0.1 commencé le 04/08/2009 19:48:14,31

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 18.07.2009 à 11h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 01/03/06 16:40:56 Ver: 08.00.10
USER : christian martinello ( Administrator )
BOOT : Normal boot

Antivirus : AntiVirus Firewall 8.01 8.01 (Activated)
Firewall : AntiVirus Firewall 8.01 8.01 (Activated)

C:\ (Local Disk) - NTFS - Total:232 Go (Free:164 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)


Recherche executée en mode normal

Nettoyage exécuté au redémarrage de l'ordinateur


C:\Program Files\Live-Player supprimé !
C:\Documents and Settings\All Users\menudm~1\progra~1\Live-Player supprimé !
C:\Documents and Settings\christian martinello\applic~1\Live-Player supprimé !
C:\WINDOWS\prefetch\gsyci*.pf supprimé !
C:\Documents and Settings\christian martinello\locals~1\applic~1\gsyci.exe supprimé !
C:\Documents and Settings\christian martinello\locals~1\applic~1\gsyci.dat supprimé !
C:\Documents and Settings\christian martinello\locals~1\applic~1\gsyci_nav.dat supprimé !
C:\Documents and Settings\christian martinello\locals~1\applic~1\gsyci_navps.dat supprimé !


Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\christian martinello\locals~1\Temp effectué !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok



C:\WINDOWS\Tasks\B3C6FF1191856BED.job trouvé ! Infection Lop possible non traitée par cet outil !


*** Scan terminé 04/08/2009 20:06:58,40 ***
amyag
Membre
Membre
 
Messages: 46
Enregistré le: Sam 11 Juil 2009 00:43

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar geoffrey5 » Mar 4 Aoû 2009 20:54

Re,

très bien, maintenant fais ceci stp :

Il y a des infections LOP dans ton PC.
Elles s'installe via certains programmes, dont ceux-ci :

  • Le sponsor de Messenger Plus!
  • Bittorent
  • BitDownload
  • BitGrabber
  • NetPumper
  • BitRoll
  • TorrentQ
  • Torrent101

Fais attention de ne pas faire la même erreur, donc évite ces programmes

  • Sous VISTA : Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection)
  • Télécharger et enregistrer lopSD sur ton bureau

    (c est le numéro 4) :
  • Double-clic Lop S&D
  • Faire l'installation
  • Fermer toutes les applications
  • Le lancer par un double-clic sur le raccourci qui est sur le bureau

    * Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
  • Taper F pour français , puis presser entrée
  • Taper 1
  • Presser Entrée
  • Le PC va redémarrer

    * Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
  • Attendre l'apparition du rapport
  • Copier le rapport et le coller dans la réponse

* le rapport se trouve aussi à C:\lopR
geoffrey5
Contributeur
Contributeur
 
Messages: 677
Enregistré le: Jeu 2 Juil 2009 00:59
Localisation: Liège - Belgique

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar amyag » Mar 4 Aoû 2009 21:18

le voici:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 01/03/06 16:40:56 Ver: 08.00.10
USER : christian martinello ( Administrator )
BOOT : Normal boot
Antivirus : AntiVirus Firewall 8.01 8.01 (Activated)
Firewall : AntiVirus Firewall 8.01 8.01 (Activated)
C:\ (Local Disk) - NTFS - Total:232 Go (Free:164 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 04/08/2009|21:02 )

--------------------\\ Listing des dossiers dans APPLIC~1

[09/04/2009|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[06/03/2006|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/09/2007|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[06/09/2007|18:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[08/02/2009|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[08/02/2009|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[26/06/2009|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[26/06/2009|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[22/08/2008|22:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GARMIN
[04/01/2009|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/08/2009|11:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[13/07/2006|10:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[31/12/2008|21:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant
[09/01/2008|03:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Jump Poll Poke Mp3
[01/01/2009|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/09/2007|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LogiShrd
[08/01/2007|01:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[16/02/2009|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Megaupload
[21/06/2007|20:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[06/06/2007|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[03/08/2006|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[01/06/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[01/06/2008|15:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[06/03/2006|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[30/06/2009|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[13/07/2006|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[17/01/2008|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Starware370
[31/12/2008|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[02/09/2006|02:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/09/2006|09:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[07/02/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wmp

[17/06/2008|15:49] C:\DOCUME~1\ANETAB~1\APPLIC~1\Adobe
[06/03/2006|16:19] C:\DOCUME~1\ANETAB~1\APPLIC~1\ATI
[17/02/2009|19:00] C:\DOCUME~1\ANETAB~1\APPLIC~1\DivX
[17/02/2009|18:29] C:\DOCUME~1\ANETAB~1\APPLIC~1\EmailNotifier
[29/05/2009|18:11] C:\DOCUME~1\ANETAB~1\APPLIC~1\F-Secure
[11/08/2008|17:56] C:\DOCUME~1\ANETAB~1\APPLIC~1\Google
[06/03/2006|15:28] C:\DOCUME~1\ANETAB~1\APPLIC~1\Identities
[17/02/2009|19:00] C:\DOCUME~1\ANETAB~1\APPLIC~1\InterVideo
[06/06/2008|00:02] C:\DOCUME~1\ANETAB~1\APPLIC~1\ispnews
[11/08/2008|17:57] C:\DOCUME~1\ANETAB~1\APPLIC~1\Macromedia
[17/02/2009|21:31] C:\DOCUME~1\ANETAB~1\APPLIC~1\MEGAUPLOADTOOLBAR
[05/11/2008|12:37] C:\DOCUME~1\ANETAB~1\APPLIC~1\Microsoft
[29/05/2009|18:07] C:\DOCUME~1\ANETAB~1\APPLIC~1\Mozilla
[06/06/2008|00:02] C:\DOCUME~1\ANETAB~1\APPLIC~1\Nokia
[06/06/2008|00:01] C:\DOCUME~1\ANETAB~1\APPLIC~1\PC Suite
[18/08/2008|23:16] C:\DOCUME~1\ANETAB~1\APPLIC~1\Real
[01/06/2009|11:38] C:\DOCUME~1\ANETAB~1\APPLIC~1\Skype
[01/06/2009|11:15] C:\DOCUME~1\ANETAB~1\APPLIC~1\skypePM

[13/02/2008|15:35] C:\DOCUME~1\CHRIST~1\APPLIC~1\Adobe
[28/10/2006|17:02] C:\DOCUME~1\CHRIST~1\APPLIC~1\AdobeUM
[06/09/2007|11:21] C:\DOCUME~1\CHRIST~1\APPLIC~1\Apple Computer
[06/03/2006|16:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\ATI
[08/02/2009|23:09] C:\DOCUME~1\CHRIST~1\APPLIC~1\AVS4YOU
[06/09/2007|11:18] C:\DOCUME~1\CHRIST~1\APPLIC~1\CopyTrans
[08/02/2009|23:09] C:\DOCUME~1\CHRIST~1\APPLIC~1\DivX
[24/01/2007|04:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\DriveCleaner 2006 Free
[07/03/2009|22:10] C:\DOCUME~1\CHRIST~1\APPLIC~1\dvdcss
[20/10/2006|21:11] C:\DOCUME~1\CHRIST~1\APPLIC~1\eConf
[09/02/2009|14:28] C:\DOCUME~1\CHRIST~1\APPLIC~1\EmailNotifier
[12/07/2006|22:03] C:\DOCUME~1\CHRIST~1\APPLIC~1\F-Secure
[22/08/2008|22:46] C:\DOCUME~1\CHRIST~1\APPLIC~1\GARMIN
[27/07/2006|19:25] C:\DOCUME~1\CHRIST~1\APPLIC~1\Google
[13/07/2006|11:35] C:\DOCUME~1\CHRIST~1\APPLIC~1\HP
[22/08/2008|18:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\htm readme save
[06/03/2006|15:28] C:\DOCUME~1\CHRIST~1\APPLIC~1\Identities
[17/06/2009|13:23] C:\DOCUME~1\CHRIST~1\APPLIC~1\Image Zone Express
[08/02/2009|22:57] C:\DOCUME~1\CHRIST~1\APPLIC~1\InstallShield
[01/10/2006|23:07] C:\DOCUME~1\CHRIST~1\APPLIC~1\InterVideo
[12/07/2006|21:21] C:\DOCUME~1\CHRIST~1\APPLIC~1\ispnews
[29/10/2007|12:27] C:\DOCUME~1\CHRIST~1\APPLIC~1\Lavasoft
[01/06/2008|22:51] C:\DOCUME~1\CHRIST~1\APPLIC~1\Leadertech
[06/09/2007|11:54] C:\DOCUME~1\CHRIST~1\APPLIC~1\LimeWire
[12/07/2006|21:02] C:\DOCUME~1\CHRIST~1\APPLIC~1\Macromedia
[08/02/2009|22:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\Megaupload
[29/05/2009|17:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\MegauploadToolbar
[01/04/2009|13:52] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft
[10/02/2009|17:21] C:\DOCUME~1\CHRIST~1\APPLIC~1\Mozilla
[13/07/2006|14:14] C:\DOCUME~1\CHRIST~1\APPLIC~1\MSNInstaller
[01/06/2008|15:43] C:\DOCUME~1\CHRIST~1\APPLIC~1\Nokia
[08/02/2009|11:23] C:\DOCUME~1\CHRIST~1\APPLIC~1\Nokia Multimedia Player
[26/07/2008|11:15] C:\DOCUME~1\CHRIST~1\APPLIC~1\NSeries
[30/06/2009|00:28] C:\DOCUME~1\CHRIST~1\APPLIC~1\Pamela
[26/07/2008|11:17] C:\DOCUME~1\CHRIST~1\APPLIC~1\PC Suite
[02/04/2008|23:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\Real
[04/08/2009|20:49] C:\DOCUME~1\CHRIST~1\APPLIC~1\Skype
[04/08/2009|16:04] C:\DOCUME~1\CHRIST~1\APPLIC~1\skypePM
[21/01/2007|22:07] C:\DOCUME~1\CHRIST~1\APPLIC~1\Sun
[28/06/2007|22:35] C:\DOCUME~1\CHRIST~1\APPLIC~1\teamspeak2
[14/06/2009|14:13] C:\DOCUME~1\CHRIST~1\APPLIC~1\Template
[07/07/2007|23:45] C:\DOCUME~1\CHRIST~1\APPLIC~1\vlc
[03/08/2007|01:14] C:\DOCUME~1\CHRIST~1\APPLIC~1\WinRAR
[10/07/2007|15:36] C:\DOCUME~1\CHRIST~1\APPLIC~1\Yahoo!

[06/03/2006|16:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[06/03/2006|16:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[06/03/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/08/2008|21:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[06/03/2006|16:32] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[06/03/2006|15:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[06/03/2006|15:28] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[04/08/2009 20:31][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[04/08/2009 20:05][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[04/08/2009 20:05][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[24/07/2009 15:00][--a------] C:\WINDOWS\tasks\Norton Security Scan for christian martinello.job
[04/08/2009 00:05][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
[04/08/2009 21:00][--ah-----] C:\WINDOWS\tasks\B3C6FF1191856BED.job
[28/12/2008 20:31][--ah-----] C:\WINDOWS\tasks\Microsoft_Hardware_Launch_LifeExp_exe.job
[04/08/2009 12:25][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[04/08/2009 20:00][--a------] C:\WINDOWS\tasks\HPpromotions journeysoftware.job
[04/08/2009 20:05][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( B3C6FF1191856BED.job )=( c:\docume~1\christ~1\applic~1\htmrea~1\fourdashrect.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[19/11/2008|21:13] C:\Program Files\Adobe
[06/03/2006|16:12] C:\Program Files\Ahead
[30/05/2009|10:04] C:\Program Files\Allocam Multi Visio
[18/08/2007|13:21] C:\Program Files\Analog Devices
[11/10/2008|22:13] C:\Program Files\Apple Software Update
[26/04/2009|13:23] C:\Program Files\Ask Search Assistant
[06/03/2006|16:09] C:\Program Files\ATI Technologies
[08/02/2009|23:08] C:\Program Files\AVS4YOU
[08/06/2007|20:38] C:\Program Files\Belkin
[06/09/2007|15:55] C:\Program Files\BitComet
[04/12/2006|19:12] C:\Program Files\CAM2CAM
[31/12/2008|16:21] C:\Program Files\CCleaner
[14/03/2008|16:31] C:\Program Files\Circle Developement
[06/03/2006|15:24] C:\Program Files\ComPlus Applications
[01/06/2008|15:39] C:\Program Files\DIFX
[08/02/2009|22:56] C:\Program Files\DivX
[24/11/2007|19:55] C:\Program Files\DorcelMessenger
[10/06/2008|12:15] C:\Program Files\eMule
[30/06/2009|00:25] C:\Program Files\Fichiers communs
[27/12/2007|03:45] C:\Program Files\FoxTarot4
[23/08/2008|00:22] C:\Program Files\Garmin
[24/04/2009|20:25] C:\Program Files\Google
[31/12/2008|21:41] C:\Program Files\HP
[03/01/2008|06:10] C:\Program Files\htm readme save
[21/10/2006|05:44] C:\Program Files\ICom Plugins
[08/02/2009|22:58] C:\Program Files\InstallShield Installation Information
[26/11/2008|20:48] C:\Program Files\InterActual
[04/08/2009|02:16] C:\Program Files\Internet Explorer
[06/03/2006|16:15] C:\Program Files\InterVideo
[02/06/2009|09:22] C:\Program Files\Java
[06/09/2007|18:57] C:\Program Files\LimeWire
[28/11/2007|17:33] C:\Program Files\Logitech
[08/02/2009|22:58] C:\Program Files\Megaupload
[08/02/2009|22:58] C:\Program Files\MegauploadToolbar
[05/10/2008|12:00] C:\Program Files\Messenger
[26/04/2009|13:23] C:\Program Files\Messenger Plus! Live
[10/05/2007|03:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[06/03/2006|15:26] C:\Program Files\microsoft frontpage
[28/12/2008|20:29] C:\Program Files\Microsoft LifeCam
[07/12/2007|23:53] C:\Program Files\Microsoft Office
[04/08/2009|09:19] C:\Program Files\Microsoft Silverlight
[06/03/2006|16:13] C:\Program Files\Microsoft Visual Studio
[11/06/2009|03:04] C:\Program Files\Microsoft Works
[06/03/2006|16:13] C:\Program Files\Microsoft.NET
[04/10/2008|10:55] C:\Program Files\Movie Maker
[04/08/2009|20:10] C:\Program Files\Mozilla Firefox
[03/04/2009|11:54] C:\Program Files\MSBuild
[07/12/2007|23:53] C:\Program Files\MSECache
[12/07/2006|22:30] C:\Program Files\MSN
[06/03/2006|15:24] C:\Program Files\MSN Gaming Zone
[26/04/2009|13:23] C:\Program Files\MSN Messenger
[15/10/2006|03:01] C:\Program Files\MSXML 4.0
[04/08/2009|20:08] C:\Program Files\Navilog1
[04/10/2008|10:52] C:\Program Files\NetMeeting
[01/06/2008|15:43] C:\Program Files\Nokia
[27/02/2009|16:00] C:\Program Files\Norton Security Scan
[04/10/2008|11:17] C:\Program Files\Outlook Express
[30/06/2009|00:27] C:\Program Files\Pamela
[01/06/2008|15:39] C:\Program Files\PC Connectivity Solution
[05/10/2008|11:43] C:\Program Files\Picasa2
[12/07/2006|19:07] C:\Program Files\Raccourcis de programmes
[13/03/2008|14:16] C:\Program Files\Real
[03/04/2009|11:54] C:\Program Files\Reference Assemblies
[10/06/2008|12:18] C:\Program Files\RO
[12/07/2006|19:41] C:\Program Files\Securitoo
[20/08/2007|23:51] C:\Program Files\SEGA
[06/03/2006|15:25] C:\Program Files\Services en ligne
[30/06/2009|00:25] C:\Program Files\Skype
[09/08/2008|21:19] C:\Program Files\SpeedFan
[17/01/2008|00:01] C:\Program Files\Starware370
[14/08/2008|11:46] C:\Program Files\Sun
[28/06/2007|22:35] C:\Program Files\Teamspeak2_RC2
[20/08/2007|21:05] C:\Program Files\THQ
[04/08/2009|14:20] C:\Program Files\Trend Micro
[06/03/2006|15:28] C:\Program Files\Uninstall Information
[07/07/2007|23:00] C:\Program Files\VideoLAN
[16/06/2007|19:02] C:\Program Files\Windows Live
[28/11/2007|17:29] C:\Program Files\Windows Live Toolbar
[08/01/2007|21:19] C:\Program Files\Windows Media Connect 2
[04/10/2008|10:52] C:\Program Files\Windows Media Player
[04/10/2008|10:52] C:\Program Files\Windows NT
[06/03/2006|15:25] C:\Program Files\WindowsUpdate
[03/08/2007|01:13] C:\Program Files\WinRAR
[06/03/2006|15:26] C:\Program Files\xerox
[25/08/2007|13:08] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[09/04/2009|23:02] C:\Program Files\Fichiers communs\Adobe
[06/03/2006|16:11] C:\Program Files\Fichiers communs\Ahead
[17/07/2006|19:11] C:\Program Files\Fichiers communs\AOL
[02/09/2007|22:02] C:\Program Files\Fichiers communs\Apple
[08/02/2009|23:08] C:\Program Files\Fichiers communs\AVSMedia
[06/03/2006|16:13] C:\Program Files\Fichiers communs\DESIGNER
[13/07/2006|10:26] C:\Program Files\Fichiers communs\Hewlett-Packard
[13/07/2006|10:29] C:\Program Files\Fichiers communs\HP
[06/03/2006|16:15] C:\Program Files\Fichiers communs\InstallShield
[14/01/2007|06:59] C:\Program Files\Fichiers communs\Java
[25/11/2007|18:14] C:\Program Files\Fichiers communs\LogiShrd
[08/01/2007|01:49] C:\Program Files\Fichiers communs\Logitech
[08/07/2008|11:08] C:\Program Files\Fichiers communs\Microsoft Shared
[06/03/2006|15:25] C:\Program Files\Fichiers communs\MSSoap
[01/06/2008|15:43] C:\Program Files\Fichiers communs\Nokia
[06/03/2006|16:21] C:\Program Files\Fichiers communs\ODBC
[01/06/2008|15:40] C:\Program Files\Fichiers communs\PCSuite
[19/06/2009|20:59] C:\Program Files\Fichiers communs\Real
[06/03/2006|15:25] C:\Program Files\Fichiers communs\Services
[30/06/2009|00:25] C:\Program Files\Fichiers communs\Skype
[13/07/2006|10:30] C:\Program Files\Fichiers communs\Sonic Shared
[06/03/2006|16:21] C:\Program Files\Fichiers communs\SpeechEngines
[16/02/2009|20:11] C:\Program Files\Fichiers communs\Symantec Shared
[04/10/2008|10:52] C:\Program Files\Fichiers communs\System
[19/06/2009|20:59] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 79 Processes )

iexplore.exe ~ [PID:4272]
iexplore.exe ~ [PID:6188]
iexplore.exe ~ [PID:1608]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Jump Poll Poke Mp3
C:\DOCUME~1\CHRIST~1\APPLIC~1\htmrea~1
C:\Program Files\htmrea~1
C:\Program Files\Circle Developement
C:\WINDOWS\Tasks\B3C6FF1191856BED.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 72 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-04 21:05:46
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 140

--------------------\\ Recherche d'autres infections

--------------------\\ ROGUES ..

C:\DOCUME~1\CHRIST~1\APPLIC~1\DriveCleaner 2006 Free
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Starware370
C:\PROGRA~1\Starware370

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\CHRIST~1\Bureau\GarminMobile\Garmin City Navigator 2008\Garmin City Navigator 2008\garmin_keygen.exe
C:\DOCUME~1\CHRIST~1\Bureau\GarminMobile\Ga_rm_in_Ke_yg_e_n_v1.3\keygen.exe
C:\DOCUME~1\CHRIST~1\Mes documents\Games\www.bitreactor.to_Condemned.Criminal.Origins-RELOADED\rld-cond\rld-cond\Crack
C:\DOCUME~1\CHRIST~1\Mes documents\Games\www.bitreactor.to_Condemned.Criminal.Origins-RELOADED\rld-cond\rld-cond\Crack\condemned.exe


[F:35][D:2]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp
[F:18][D:0]-> C:\DOCUME~1\CHRIST~1\Cookies
[F:615][D:4]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 04/08/2009|21:07 - Option : [1]

--------------------\\ Fin du rapport a 21:07:30
amyag
Membre
Membre
 
Messages: 46
Enregistré le: Sam 11 Juil 2009 00:43

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar geoffrey5 » Mar 4 Aoû 2009 21:20

Y a encore du boulot...

  • Relance Lop S&D
  • Choisis cette fois-ci l'option 3 (Suppression -hosts)
  • Ne ferme pas la fenêtre lors de la suppression !
  • Poste le rapport généré (C:\lopR.txt)
* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
geoffrey5
Contributeur
Contributeur
 
Messages: 677
Enregistré le: Jeu 2 Juil 2009 00:59
Localisation: Liège - Belgique

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar amyag » Mar 4 Aoû 2009 21:38

re, le voici:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 01/03/06 16:40:56 Ver: 08.00.10
USER : christian martinello ( Administrator )
BOOT : Normal boot
Antivirus : AntiVirus Firewall 8.01 8.01 (Activated)
Firewall : AntiVirus Firewall 8.01 8.01 (Activated)
C:\ (Local Disk) - NTFS - Total:232 Go (Free:164 Go)
D:\ (CD or DVD)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [3] ( 04/08/2009|21:24 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\WINDOWS\Tasks\B3C6FF1191856BED.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Jump Poll Poke Mp3
Supprime! - C:\DOCUME~1\CHRIST~1\APPLIC~1\htmrea~1
Supprime! - C:\Program Files\htmrea~1
Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[09/04/2009|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[06/03/2006|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/09/2007|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[06/09/2007|18:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[08/02/2009|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[08/02/2009|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[26/06/2009|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[26/06/2009|20:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[22/08/2008|22:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GARMIN
[04/01/2009|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/08/2009|11:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[13/07/2006|10:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[31/12/2008|21:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP Product Assistant
[01/01/2009|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[17/09/2007|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LogiShrd
[08/01/2007|01:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[16/02/2009|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Megaupload
[21/06/2007|20:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[06/06/2007|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[03/08/2006|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSScanAppDataDir
[01/06/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[01/06/2008|15:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[06/03/2006|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[30/06/2009|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[13/07/2006|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[17/01/2008|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Starware370
[31/12/2008|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[02/09/2006|02:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/09/2006|09:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[07/02/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wmp

[17/06/2008|15:49] C:\DOCUME~1\ANETAB~1\APPLIC~1\Adobe
[06/03/2006|16:19] C:\DOCUME~1\ANETAB~1\APPLIC~1\ATI
[17/02/2009|19:00] C:\DOCUME~1\ANETAB~1\APPLIC~1\DivX
[17/02/2009|18:29] C:\DOCUME~1\ANETAB~1\APPLIC~1\EmailNotifier
[29/05/2009|18:11] C:\DOCUME~1\ANETAB~1\APPLIC~1\F-Secure
[11/08/2008|17:56] C:\DOCUME~1\ANETAB~1\APPLIC~1\Google
[06/03/2006|15:28] C:\DOCUME~1\ANETAB~1\APPLIC~1\Identities
[17/02/2009|19:00] C:\DOCUME~1\ANETAB~1\APPLIC~1\InterVideo
[06/06/2008|00:02] C:\DOCUME~1\ANETAB~1\APPLIC~1\ispnews
[11/08/2008|17:57] C:\DOCUME~1\ANETAB~1\APPLIC~1\Macromedia
[17/02/2009|21:31] C:\DOCUME~1\ANETAB~1\APPLIC~1\MEGAUPLOADTOOLBAR
[05/11/2008|12:37] C:\DOCUME~1\ANETAB~1\APPLIC~1\Microsoft
[29/05/2009|18:07] C:\DOCUME~1\ANETAB~1\APPLIC~1\Mozilla
[06/06/2008|00:02] C:\DOCUME~1\ANETAB~1\APPLIC~1\Nokia
[06/06/2008|00:01] C:\DOCUME~1\ANETAB~1\APPLIC~1\PC Suite
[18/08/2008|23:16] C:\DOCUME~1\ANETAB~1\APPLIC~1\Real
[01/06/2009|11:38] C:\DOCUME~1\ANETAB~1\APPLIC~1\Skype
[01/06/2009|11:15] C:\DOCUME~1\ANETAB~1\APPLIC~1\skypePM

[13/02/2008|15:35] C:\DOCUME~1\CHRIST~1\APPLIC~1\Adobe
[28/10/2006|17:02] C:\DOCUME~1\CHRIST~1\APPLIC~1\AdobeUM
[06/09/2007|11:21] C:\DOCUME~1\CHRIST~1\APPLIC~1\Apple Computer
[06/03/2006|16:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\ATI
[08/02/2009|23:09] C:\DOCUME~1\CHRIST~1\APPLIC~1\AVS4YOU
[06/09/2007|11:18] C:\DOCUME~1\CHRIST~1\APPLIC~1\CopyTrans
[08/02/2009|23:09] C:\DOCUME~1\CHRIST~1\APPLIC~1\DivX
[24/01/2007|04:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\DriveCleaner 2006 Free
[07/03/2009|22:10] C:\DOCUME~1\CHRIST~1\APPLIC~1\dvdcss
[20/10/2006|21:11] C:\DOCUME~1\CHRIST~1\APPLIC~1\eConf
[09/02/2009|14:28] C:\DOCUME~1\CHRIST~1\APPLIC~1\EmailNotifier
[12/07/2006|22:03] C:\DOCUME~1\CHRIST~1\APPLIC~1\F-Secure
[22/08/2008|22:46] C:\DOCUME~1\CHRIST~1\APPLIC~1\GARMIN
[27/07/2006|19:25] C:\DOCUME~1\CHRIST~1\APPLIC~1\Google
[13/07/2006|11:35] C:\DOCUME~1\CHRIST~1\APPLIC~1\HP
[06/03/2006|15:28] C:\DOCUME~1\CHRIST~1\APPLIC~1\Identities
[17/06/2009|13:23] C:\DOCUME~1\CHRIST~1\APPLIC~1\Image Zone Express
[08/02/2009|22:57] C:\DOCUME~1\CHRIST~1\APPLIC~1\InstallShield
[01/10/2006|23:07] C:\DOCUME~1\CHRIST~1\APPLIC~1\InterVideo
[12/07/2006|21:21] C:\DOCUME~1\CHRIST~1\APPLIC~1\ispnews
[29/10/2007|12:27] C:\DOCUME~1\CHRIST~1\APPLIC~1\Lavasoft
[01/06/2008|22:51] C:\DOCUME~1\CHRIST~1\APPLIC~1\Leadertech
[06/09/2007|11:54] C:\DOCUME~1\CHRIST~1\APPLIC~1\LimeWire
[12/07/2006|21:02] C:\DOCUME~1\CHRIST~1\APPLIC~1\Macromedia
[08/02/2009|22:59] C:\DOCUME~1\CHRIST~1\APPLIC~1\Megaupload
[29/05/2009|17:38] C:\DOCUME~1\CHRIST~1\APPLIC~1\MegauploadToolbar
[01/04/2009|13:52] C:\DOCUME~1\CHRIST~1\APPLIC~1\Microsoft
[10/02/2009|17:21] C:\DOCUME~1\CHRIST~1\APPLIC~1\Mozilla
[13/07/2006|14:14] C:\DOCUME~1\CHRIST~1\APPLIC~1\MSNInstaller
[01/06/2008|15:43] C:\DOCUME~1\CHRIST~1\APPLIC~1\Nokia
[08/02/2009|11:23] C:\DOCUME~1\CHRIST~1\APPLIC~1\Nokia Multimedia Player
[26/07/2008|11:15] C:\DOCUME~1\CHRIST~1\APPLIC~1\NSeries
[30/06/2009|00:28] C:\DOCUME~1\CHRIST~1\APPLIC~1\Pamela
[26/07/2008|11:17] C:\DOCUME~1\CHRIST~1\APPLIC~1\PC Suite
[02/04/2008|23:19] C:\DOCUME~1\CHRIST~1\APPLIC~1\Real
[04/08/2009|21:10] C:\DOCUME~1\CHRIST~1\APPLIC~1\Skype
[04/08/2009|16:04] C:\DOCUME~1\CHRIST~1\APPLIC~1\skypePM
[21/01/2007|22:07] C:\DOCUME~1\CHRIST~1\APPLIC~1\Sun
[28/06/2007|22:35] C:\DOCUME~1\CHRIST~1\APPLIC~1\teamspeak2
[14/06/2009|14:13] C:\DOCUME~1\CHRIST~1\APPLIC~1\Template
[07/07/2007|23:45] C:\DOCUME~1\CHRIST~1\APPLIC~1\vlc
[03/08/2007|01:14] C:\DOCUME~1\CHRIST~1\APPLIC~1\WinRAR
[10/07/2007|15:36] C:\DOCUME~1\CHRIST~1\APPLIC~1\Yahoo!

[06/03/2006|16:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[06/03/2006|16:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI
[06/03/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/08/2008|21:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[06/03/2006|16:32] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[06/03/2006|15:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[06/03/2006|15:28] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[04/08/2009 20:31][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[04/08/2009 20:05][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[04/08/2009 20:05][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[24/07/2009 15:00][--a------] C:\WINDOWS\tasks\Norton Security Scan for christian martinello.job
[04/08/2009 00:05][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
[28/12/2008 20:31][--ah-----] C:\WINDOWS\tasks\Microsoft_Hardware_Launch_LifeExp_exe.job
[04/08/2009 12:25][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[04/08/2009 20:00][--a------] C:\WINDOWS\tasks\HPpromotions journeysoftware.job
[04/08/2009 20:05][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[19/11/2008|21:13] C:\Program Files\Adobe
[06/03/2006|16:12] C:\Program Files\Ahead
[30/05/2009|10:04] C:\Program Files\Allocam Multi Visio
[18/08/2007|13:21] C:\Program Files\Analog Devices
[11/10/2008|22:13] C:\Program Files\Apple Software Update
[26/04/2009|13:23] C:\Program Files\Ask Search Assistant
[06/03/2006|16:09] C:\Program Files\ATI Technologies
[08/02/2009|23:08] C:\Program Files\AVS4YOU
[08/06/2007|20:38] C:\Program Files\Belkin
[06/09/2007|15:55] C:\Program Files\BitComet
[04/12/2006|19:12] C:\Program Files\CAM2CAM
[31/12/2008|16:21] C:\Program Files\CCleaner
[06/03/2006|15:24] C:\Program Files\ComPlus Applications
[01/06/2008|15:39] C:\Program Files\DIFX
[08/02/2009|22:56] C:\Program Files\DivX
[24/11/2007|19:55] C:\Program Files\DorcelMessenger
[10/06/2008|12:15] C:\Program Files\eMule
[30/06/2009|00:25] C:\Program Files\Fichiers communs
[27/12/2007|03:45] C:\Program Files\FoxTarot4
[23/08/2008|00:22] C:\Program Files\Garmin
[24/04/2009|20:25] C:\Program Files\Google
[31/12/2008|21:41] C:\Program Files\HP
[21/10/2006|05:44] C:\Program Files\ICom Plugins
[08/02/2009|22:58] C:\Program Files\InstallShield Installation Information
[26/11/2008|20:48] C:\Program Files\InterActual
[04/08/2009|02:16] C:\Program Files\Internet Explorer
[06/03/2006|16:15] C:\Program Files\InterVideo
[02/06/2009|09:22] C:\Program Files\Java
[06/09/2007|18:57] C:\Program Files\LimeWire
[28/11/2007|17:33] C:\Program Files\Logitech
[08/02/2009|22:58] C:\Program Files\Megaupload
[08/02/2009|22:58] C:\Program Files\MegauploadToolbar
[05/10/2008|12:00] C:\Program Files\Messenger
[26/04/2009|13:23] C:\Program Files\Messenger Plus! Live
[10/05/2007|03:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[06/03/2006|15:26] C:\Program Files\microsoft frontpage
[28/12/2008|20:29] C:\Program Files\Microsoft LifeCam
[07/12/2007|23:53] C:\Program Files\Microsoft Office
[04/08/2009|09:19] C:\Program Files\Microsoft Silverlight
[06/03/2006|16:13] C:\Program Files\Microsoft Visual Studio
[11/06/2009|03:04] C:\Program Files\Microsoft Works
[06/03/2006|16:13] C:\Program Files\Microsoft.NET
[04/10/2008|10:55] C:\Program Files\Movie Maker
[04/08/2009|20:10] C:\Program Files\Mozilla Firefox
[03/04/2009|11:54] C:\Program Files\MSBuild
[07/12/2007|23:53] C:\Program Files\MSECache
[12/07/2006|22:30] C:\Program Files\MSN
[06/03/2006|15:24] C:\Program Files\MSN Gaming Zone
[26/04/2009|13:23] C:\Program Files\MSN Messenger
[15/10/2006|03:01] C:\Program Files\MSXML 4.0
[04/08/2009|20:08] C:\Program Files\Navilog1
[04/10/2008|10:52] C:\Program Files\NetMeeting
[01/06/2008|15:43] C:\Program Files\Nokia
[27/02/2009|16:00] C:\Program Files\Norton Security Scan
[04/10/2008|11:17] C:\Program Files\Outlook Express
[30/06/2009|00:27] C:\Program Files\Pamela
[01/06/2008|15:39] C:\Program Files\PC Connectivity Solution
[05/10/2008|11:43] C:\Program Files\Picasa2
[12/07/2006|19:07] C:\Program Files\Raccourcis de programmes
[13/03/2008|14:16] C:\Program Files\Real
[03/04/2009|11:54] C:\Program Files\Reference Assemblies
[10/06/2008|12:18] C:\Program Files\RO
[12/07/2006|19:41] C:\Program Files\Securitoo
[20/08/2007|23:51] C:\Program Files\SEGA
[06/03/2006|15:25] C:\Program Files\Services en ligne
[30/06/2009|00:25] C:\Program Files\Skype
[09/08/2008|21:19] C:\Program Files\SpeedFan
[17/01/2008|00:01] C:\Program Files\Starware370
[14/08/2008|11:46] C:\Program Files\Sun
[28/06/2007|22:35] C:\Program Files\Teamspeak2_RC2
[20/08/2007|21:05] C:\Program Files\THQ
[04/08/2009|14:20] C:\Program Files\Trend Micro
[06/03/2006|15:28] C:\Program Files\Uninstall Information
[07/07/2007|23:00] C:\Program Files\VideoLAN
[16/06/2007|19:02] C:\Program Files\Windows Live
[28/11/2007|17:29] C:\Program Files\Windows Live Toolbar
[08/01/2007|21:19] C:\Program Files\Windows Media Connect 2
[04/10/2008|10:52] C:\Program Files\Windows Media Player
[04/10/2008|10:52] C:\Program Files\Windows NT
[06/03/2006|15:25] C:\Program Files\WindowsUpdate
[03/08/2007|01:13] C:\Program Files\WinRAR
[06/03/2006|15:26] C:\Program Files\xerox
[25/08/2007|13:08] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[09/04/2009|23:02] C:\Program Files\Fichiers communs\Adobe
[06/03/2006|16:11] C:\Program Files\Fichiers communs\Ahead
[17/07/2006|19:11] C:\Program Files\Fichiers communs\AOL
[02/09/2007|22:02] C:\Program Files\Fichiers communs\Apple
[08/02/2009|23:08] C:\Program Files\Fichiers communs\AVSMedia
[06/03/2006|16:13] C:\Program Files\Fichiers communs\DESIGNER
[13/07/2006|10:26] C:\Program Files\Fichiers communs\Hewlett-Packard
[13/07/2006|10:29] C:\Program Files\Fichiers communs\HP
[06/03/2006|16:15] C:\Program Files\Fichiers communs\InstallShield
[14/01/2007|06:59] C:\Program Files\Fichiers communs\Java
[25/11/2007|18:14] C:\Program Files\Fichiers communs\LogiShrd
[08/01/2007|01:49] C:\Program Files\Fichiers communs\Logitech
[08/07/2008|11:08] C:\Program Files\Fichiers communs\Microsoft Shared
[06/03/2006|15:25] C:\Program Files\Fichiers communs\MSSoap
[01/06/2008|15:43] C:\Program Files\Fichiers communs\Nokia
[06/03/2006|16:21] C:\Program Files\Fichiers communs\ODBC
[01/06/2008|15:40] C:\Program Files\Fichiers communs\PCSuite
[19/06/2009|20:59] C:\Program Files\Fichiers communs\Real
[06/03/2006|15:25] C:\Program Files\Fichiers communs\Services
[30/06/2009|00:25] C:\Program Files\Fichiers communs\Skype
[13/07/2006|10:30] C:\Program Files\Fichiers communs\Sonic Shared
[06/03/2006|16:21] C:\Program Files\Fichiers communs\SpeechEngines
[16/02/2009|20:11] C:\Program Files\Fichiers communs\Symantec Shared
[04/10/2008|10:52] C:\Program Files\Fichiers communs\System
[19/06/2009|20:59] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 75 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD

-> 72 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-04 21:27:42
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 140

--------------------\\ Recherche d'autres infections

--------------------\\ ROGUES ..

C:\DOCUME~1\CHRIST~1\APPLIC~1\DriveCleaner 2006 Free
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Starware370
C:\PROGRA~1\Starware370

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\CHRIST~1\Bureau\GarminMobile\Garmin City Navigator 2008\Garmin City Navigator 2008\garmin_keygen.exe
C:\DOCUME~1\CHRIST~1\Bureau\GarminMobile\Ga_rm_in_Ke_yg_e_n_v1.3\keygen.exe
C:\DOCUME~1\CHRIST~1\Mes documents\Games\www.bitreactor.to_Condemned.Criminal.Origins-RELOADED\rld-cond\rld-cond\Crack
C:\DOCUME~1\CHRIST~1\Mes documents\Games\www.bitreactor.to_Condemned.Criminal.Origins-RELOADED\rld-cond\rld-cond\Crack\condemned.exe


[F:14][D:2]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp
[F:18][D:0]-> C:\DOCUME~1\CHRIST~1\Cookies
[F:618][D:4]-> C:\DOCUME~1\CHRIST~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 04/08/2009|21:07 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 04/08/2009|21:29 - Option : [3]

--------------------\\ Fin du rapport a 21:29:10
amyag
Membre
Membre
 
Messages: 46
Enregistré le: Sam 11 Juil 2009 00:43

Re : fenêtres publicitaires intempestives, ralentissement....

Messagepar geoffrey5 » Mar 4 Aoû 2009 22:24

Ok maintenant fais ceci stp :

  • Télécharge Smitfraudfix et enregistre le sur le bureau
  • (c est le numéro 2)
  • Ensuite double clique sur smitfraudfix puis exécuter
  • Sous Vista : clic droit sur SmitfraudFix et sélectionner "Exécuter en tant qu'administrateur"
  • Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.
  • (attention : N utilises pas l option 2 si je ne te l ai pas demandé !!)
  • copier/coller le rapport dans la réponse.

Voici un tutoriel sonore et animé en cas de problème d'utilisation

(Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool".
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains,
cet utilitaire pourrait arrêter des logiciels de sécurité.)
geoffrey5
Contributeur
Contributeur
 
Messages: 677
Enregistré le: Jeu 2 Juil 2009 00:59
Localisation: Liège - Belgique

Suivante

Retourner vers Virus / Sécurité

 


  • Articles en relation
    Réponses
    Vues
    Dernier message

Qui est en ligne

Utilisateurs parcourant ce forum : Aucun utilisateur enregistré et 13 invités