|
| |||||||
| S'inscrire | Site Spy | Liste des membres | Faire un don | Recherche | Aujourd'hui, les postes | Marquer les forums comme lus | Forum Rules |
 |
 |
| | Thread Tools |
|
#1
10e octobre 2008, 19:08
| |||
| |||
| Iexplore.exe nouveau virus! Salut je crois que j'ai aussi le virus iexplore et ont essayé de nombreux programmes visant à se débarrasser de lui, mais aucun travail! J'ai vu que votre site est d'aider beaucoup de ppl alors peut-être que moi aussi? Voici mon hijack ce journal: Logfile de Trend Micro HijackThis v2.0.2 Scan sauvé à 1:01:32 PM, le 11.10.2008 Plate-forme: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ acs.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ windows \ system \ hpsysdrv.exe C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ WINDOWS \ system32 \ taskmgr.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP & osv = 5,1 R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Settings, ProxyOverride = *. local O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file missing) O2 - BHO: Malicious Scripts Scanner - (55EA1964-F5E4-4D6A-B9B2-125B37655FCB) - C: \ Documents and Settings \ All Users \ Application Data \ Prevx \ pxbho.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe" nogui O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [EPSON Stylus CX3700 Series] C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ TEMP \ E_SC4.tmp" / EF "HKLM" O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / STARTUP O4 - HKLM \ .. \ Run: [Flag Owns Live Grim] C: \ Documents and Settings \ All Users \ Application Data \ Software règle du pavillon possède \ Première obj.exe O4 - HKLM \ .. \ Run: [PrevxOne] "C: \ Program Files \ Prevx2 \ PXConsole.exe" O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe" O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe O8 - Extra du menu contextuel: & Clean Traces - C: \ Program Files \ DAP \ Privacy Package \ dapcleanerie.htm O8 - Extra du menu contextuel: & Download with & DAP - C: \ Program Files \ DAP \ dapextie.htm O8 - Extra du menu contextuel: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html O8 - Extra du menu contextuel: Backward Links - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html O8 - Extra du menu contextuel: Cached Snapshot of Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html O8 - Extra du menu contextuel: Télécharger tout avec & DAP - C: \ Program Files \ DAP \ dapextie2.htm O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL.EXE/3000 O8 - Extra du menu contextuel: Pages similaires - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html O8 - Extra du menu contextuel: Traduire en anglais - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL O9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL O9 - Extra button: Connection Help - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HelpCtr \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra 'Tools' menuitem: Connection Help - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HelpCtr \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Photo Uploader 5) -- http://upload.facebook.com/controls/...oUploader5.cab O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab O16 - DPF: (96EEC7FF-106A-47F3-90D6-B4BB754AA40E) (POLI payés en ligne) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C: \ WINDOWS \ system32 \ acs.exe O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Fichiers communs \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: PREVXAgent - Prevx - C: \ Program Files \ Prevx2 \ PXAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe -- Fin de fichier - 10,831 octets |
|
#2
10e octobre 2008, 23:12
| |||
| |||
| Iexplore.exe nouveau virus! Télécharger Lop S & D par Eric_71 et de l'enregistrer sur votre bureau. Lop S & D ne fonctionnera que sur Windows XP et Windows Vista Désactivez votre antivirus et antimalware les programmes de façon à ne pas interférer avec le fonctionnement de Lop S & D. Pour voir comment désactiver les programmes de sécurité de ce tutoriel: Comment désactiver temporairement votre anti-virus, firewall et anti-malware Programmes
__________________  |
|
#3
11 octobre 2008, 00:15
| |||
| |||
| Iexplore.exe nouveau virus! Voici les résultats de l'lop s & d de recherche: -------------------- \ \ Lop S & D 4.2.4-5 XP / Vista Microsoft Windows XP Home Edition (v5.1.2600) Service Pack 3 X86 à base de PC (monoprocesseur Free: AMD Sempron (tm) Processor 3200 +) BIOS: Phoenix - Award BIOS v6.00PG UTILISATEUR: Compaq_Owner (Administrateur) BOOT: Normal boot Antivirus: AVG 7.5.524 7.5.524 (non activé) Firewall: ZoneAlarm Firewall 7.0.483.000 (non activé) C: \ (Local Disk) - NTFS - Total: 68 Go Free: 10 Go D: \ (Local Disk) - FAT32 - Total: 5 Go Free: 1 Go E: \ (CD ou DVD) F: \ (CD ou DVD) G: \ (USB) H: \ (USB) I: \ (USB) J: \ (USB) "C: \ Lop SD" (MAJ: 02.10.2008 | 23:42) Option: [1] (samedi 11.10.2008 | 18:11) -------------------- \ \ Listing des dossiers dans APPLIC ~ 1 [11.10.2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Adobe <DIR> [03.10.2007 | 01:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Apple [12.09.2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Apple Computer <DIR> [28/08/2007 | 04:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Autodesk <DIR> [03.09.2008 | 10:46] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> AVG7 [10.06.2008 | 12:37] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Avg8 [02.07.2006 | 01:52] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> DVD Shrink [15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> EnterNHelp [27/03/2007 | 10:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Google [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Grisoft <DIR> [23/10/2007 | 12:15] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Installations [12.09.2005 | 09:21] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ InstallShield <DIR> [11.10.2008 | 12:29] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> MailFrontier [18/08/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> [10.09.2008 | 07:07] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> Aide [10.09.2007 | 04:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Nero <DIR> [11.10.2008 | 03:51] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> NOS [21/05/2008 | 12:55] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> PC Pilotes HeadQuarters [12.09.2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ QuickTime <DIR> [24/11/2007 | 02:56] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Real <DIR> [12.09.2005 | 09:04] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ SBSI <DIR> [02.02.2008 | 05:17] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Seagate [09.10.2008 | 11:53] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software <DIR> règle pavillon possède [01.11.2006 | 01:13] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Sophos [14/09/2008 | 02:08] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Spybot - Search & Destroy [19/05/2008 | 07:41] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Symantec <DIR> [11.10.2008 | 06:00] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ TEMP <DIR> [15/02/2006 | 01:11] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ UDL <DIR> [15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Ultima_T15 [08.04.2006 | 02:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Windows Genuine Advantage <DIR> [22/06/2008 | 11:01] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> WLInstaller [17/03/2008 | 09:32] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Adobe <DIR> [11.10.2008 | 03:55] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> AdobeUM [13/09/2007 | 05:26] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Ahead <DIR> [13/06/2008 | 07:29] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Apple Computer <DIR> [02.10.2007 | 12:55] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ ArcSoft <DIR> [18/06/2006 | 11:34] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Atari [21/05/2007 | 07:47] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Autodesk <DIR> [11.10.2008 | 11:11] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> AVG7 [19/05/2008 | 02:40] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> AVGTOOLBAR [08.10.2008 | 01:29] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> BitTorrent [21/05/2007 | 12:09] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Command & Conquer 3 Tiberium Wars [01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Datalayer [28/05/2007 | 02:25] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> dvdcss [13/08/2007 | 03:00] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ EPSON <DIR> [03/05/2007 | 02:12] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Google [07/09/2006 | 02:08] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Aide [26/06/2008 | 12:16] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ HPQ <DIR> [16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Identities <DIR> [19/02/2006 | 05:44] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ InterVideo <DIR> [23/04/2008 | 11:49] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> iWIN [03.05.2008 | 03:20] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Joost [28/01/2006 | 03:15] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Leadertech [13/09/2008 | 08:45] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ LimeWire <DIR> [14/02/2006 | 05:22] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Macromedia <DIR> [24/11/2007 | 03:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Media Player Classic [19/05/2008 | 06:44] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> [09.04.2008 | 06:13] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Mozilla <DIR> [15/07/2006 | 12:31] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Nikon [01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Nokia [01/09/2006 | 08:54] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Nokia Multimedia Player [01/09/2006 | 08:41] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> PC Suite [19/05/2008 | 07:32] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Real <DIR> [12.09.2005 | 09:30] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> SampleView [21/05/2007 | 12:07] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Securom [09.10.2008 | 11:54] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Soap <DIR> se trouve l'amour [28/01/2006 | 03:16] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Sonic [23/04/2008 | 11:45] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> SpinTop [14/09/2008 | 06:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> SPORE [15/04/2008 | 05:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> Spybot - Search & Destroy [14/02/2006 | 05:49] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> dimanche [12.09.2005 | 09:41] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ Symantec <DIR> [16/04/2008 | 06:42] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> U3 [26/05/2008 | 11:14] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ uTorrent <DIR> [27/05/2006 | 09:46] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ vlc <DIR> [20/05/2008 | 10:26] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ <DIR> WinBatch [12.09.2005 | 09:27] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ Apple Computer <DIR> [16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ Identities <DIR> [12.09.2005 | 09:51] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> [12.09.2005 | 09:21] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ Real <DIR> [12.09.2005 | 09:30] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ <DIR> SampleView [12.09.2005 | 09:41] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ Symantec <DIR> [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ LOCALS ~ 1 \ APPLIC ~ 1 \ <DIR> AVG7 [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ LOCALS ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ Networ ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> -------------------- \ \ Tâches planifiées dans C: \ WINDOWS \ Tasks [11/10/2008 06:00 PM] [- ah -----] C: \ WINDOWS \ Tasks \ A396018B9185B27B.job [11/10/2008 06:11 PM] [- a ------] C: \ WINDOWS \ Tasks \ Symantec NetDetect.job [11/10/2008 05:00 PM] [- a ------] C: \ WINDOWS \ Tasks \ RegCure Programme Check.job [28/08/2008 04:00 AM] [- a ------] C: \ WINDOWS \ Tasks \ RegCure.job [11/10/2008 04:07 PM] [- ah -----] C: \ WINDOWS \ Tasks \ SA.DAT [05/08/2004 05:00 AM] [-rah -----] C: \ WINDOWS \ Tasks \ desktop.ini (A396018B9185B27B.job) = (c: \ DOCUME ~ 1 \ compaq ~ 1 \ applic ~ 1 \ soapli ~ 1 \ Axisgreatex tra.exe) -------------------- \ \ Listing des dossiers dans C: \ Program Files [27/07/2008 | 05:02] C: \ Program Files \ Activision <DIR> [11.10.2008 | 04:05] C: \ Program Files \ Adobe <DIR> [15/06/2008 | 12:20] C: \ Program Files \ Ahead <DIR> [20/05/2007 | 11:20] C: \ Program Files \ Alcohol Soft <DIR> [03.06.2008 | 09:01] C: \ Program Files \ Apple Software Update <DIR> [15/07/2006 | 12:27] C: \ Program Files \ ArcSoft <DIR> [12.09.2005 | 09:13] C: \ Program Files \ ATI Technologies <DIR> [21/05/2007 | 07:36] C: \ Program Files \ Autodesk <DIR> [27/05/2008 | 04:42] C: \ Program Files \ AVG <DIR> [20/06/2008 | 04:54] C: \ Program Files \ BitTorrent <DIR> [11.10.2008 | 04:05] C: \ Program Files \ Fichiers communs <DIR> [24/11/2004 | 01:06] C: \ Program Files \ ComPlus Applications <DIR> [21/05/2008 | 12:51] C: \ Program Files \ DAP <DIR> [08/11/2006 | 02:07] C: \ Program Files \ DivX <DIR> [30/09/2008 | 09:12] C: \ Program Files \ <DIR> DominateGame [21/05/2007 | 10:35] C: \ Program Files \ <DIR> Drug Lord 2 [18/08/2008 | 03:56] C: \ Program Files \ D-Tools <DIR> [08/11/2006 | 12:56] C: \ Program Files \ <DIR> DVD Shrink [19/05/2008 | 07:12] C: \ Program Files \ Easy Internet signup <DIR> [14/09/2008 | 06:02] C: \ Program Files \ <DIR> Electronic Arts [15/02/2006 | 01:11] C: \ Program Files \ <DIR> epson [26/05/2008 | 11:15] C: \ Program Files \ <DIR> eToro [30/09/2008 | 09:12] C: \ Program Files \ <DIR> EV Nova [13/11/2006 | 09:39] C: \ Program Files \ <DIR> FLVPlayer [26/06/2008 | 12:13] C: \ Program Files \ <DIR> GameSpy Arcade [12.09.2005 | 09:37] C: \ Program Files \ Google <DIR> [27/11/2006 | 10:19] C: \ Program Files \ <DIR> Graphique [08.11.2007 | 06:44] C: \ Program Files \ <DIR> Griffin Technology [18/08/2008 | 07:44] C: \ Program Files \ Grisoft <DIR> [27/03/2006 | 09:17] C: \ Program Files \ <DIR> GustoSoft [29/09/2008 | 04:41] C: \ Program Files \ <DIR> Hp [05.12.2007 | 01:09] C: \ Program Files \ <DIR> Infogrames Interactive [14/09/2008 | 06:03] C: \ Program Files \ InstallShield Installation Information <DIR> [17/08/2008 | 09:45] C: \ Program Files \ Internet Explorer <DIR> [12.09.2005 | 09:23] C: \ Program Files \ InterVideo <DIR> [03.06.2008 | 09:04] C: \ Program Files \ iPod <DIR> [14/02/2006 | 05:20] C: \ Program Files \ <DIR> iPrimus [03.06.2008 | 09:05] C: \ Program Files \ iTunes <DIR> [30/09/2008 | 08:51] C: \ Program Files \ Java <DIR> [14/09/2008 | 05:43] C: \ Program Files \ <DIR> John Deere American Farmer Deluxe [09.04.2008 | 06:13] C: \ Program Files \ <DIR> Joost [24/11/2007 | 02:56] C: \ Program Files \ <DIR> K-Lite Codec Pack [20/03/2008 | 05:13] C: \ Program Files \ LimeWire <DIR> [31/08/2008 | 05:28] C: \ Program Files \ <DIR> Maxis [18/08/2008 | 02:14] C: \ Program Files \ Messenger <DIR> [15/05/2007 | 11:48] C: \ Program Files \ Microsoft CAPICOM 2.1.0.2 <DIR> [12.09.2005 | 09:19] C: \ Program Files \ Microsoft Encarta <DIR> [16/12/2004 | 04:23] C: \ Program Files \ microsoft frontpage <DIR> [26/06/2008 | 12:17] C: \ Program Files \ Microsoft Games <DIR> [12.09.2005 | 09:25] C: \ Program Files \ Microsoft Money 2005 <DIR> [29/06/2008 | 10:10] C: \ Program Files \ Microsoft Office <DIR> [15/02/2006 | 12:29] C: \ Program Files \ Microsoft Visual Studio <DIR> [03.06.2008 | 03:51] C: \ Program Files \ Microsoft Works <DIR> [14/02/2008 | 10:22] C: \ Program Files \ Microsoft.NET <DIR> [14/03/2008 | 09:22] C: \ Program Files \ <DIR> MindArk [18/08/2008 | 02:11] C: \ Program Files \ <DIR> Movie Maker [11.10.2008 | 11:09] C: \ Program Files \ Mozilla Firefox <DIR> [16/12/2004 | 04:23] C: \ Program Files \ <DIR> MSN [16/12/2004 | 04:23] C: \ Program Files \ <DIR> MSN Gaming Zone [18/10/2006 | 01:19] C: \ Program Files \ MSXML 4.0 <DIR> [02.02.2008 | 05:16] C: \ Program Files \ MSXML 6.0 <DIR> [10.09.2007 | 04:25] C: \ Program Files \ Nero <DIR> [18/08/2008 | 02:10] C: \ Program Files \ NetMeeting <DIR> [15/07/2006 | 12:30] C: \ Program Files \ <DIR> Nikon [11.10.2008 | 03:51] C: \ Program Files \ NOS <DIR> [15/02/2006 | 12:42] C: \ Program Files \ <DIR> OfficeUpdate11 [14/09/2008 | 02:59] C: \ Program Files \ <DIR> Services en ligne [18/08/2008 | 02:10] C: \ Program Files \ Outlook Express <DIR> [26/06/2007 | 09:29] C: \ Program Files \ PartyGaming <DIR> [12.09.2005 | 09:34] C: \ Program Files \ <DIR> PC-Doctor pour DOS [17/06/2007 | 08:43] C: \ Program Files \ <DIR> PokerRoom.com [31/05/2007 | 01:55] C: \ Program Files \ <DIR> PokerStars [03.06.2008 | 09:04] C: \ Program Files \ QuickTime <DIR> [21/04/2008 | 08:30] C: \ Program Files \ <DIR> RegCure [02.02.2008 | 05:17] C: \ Program Files \ Seagate <DIR> [23/04/2008 | 01:20] C: \ Program Files \ <DIR> Sean O'Connor's Windows Games [24/07/2008 | 06:08] C: \ Program Files \ <DIR> SEGA [18/08/2008 | 03:56] C: \ Program Files \ <DIR> Sierra Entertainment [08.02.2007 | 11:24] C: \ Program Files \ <DIR> SLD Codec Pack [09.10.2008 | 11:53] C: \ Program Files \ <DIR> Soap est amour [14/03/2008 | 06:16] C: \ Program Files \ Sophos <DIR> [15/04/2008 | 09:22] C: \ Program Files \ <DIR> Spybot - Search & Destroy [24/11/2007 | 02:59] C: \ Program Files \ <DIR> StrongDC + + [19/05/2008 | 07:41] C: \ Program Files \ Symantec <DIR> [13/09/2008 | 10:03] C: \ Program Files \ <DIR> TeaTimer (Spybot - Search & Destroy) [14/02/2006 | 05:39] C: \ Program Files \ <DIR> Telstra [19/06/2007 | 09:45] C: \ Program Files \ <DIR> TexasCalculatem [30/05/2008 | 01:43] C: \ Program Files \ <DIR> Theorica Divx ;-) Codecs [29/02/2008 | 06:25] C: \ Program Files \ <DIR> TP-LINK [11.10.2008 | 12:33] C: \ Program Files \ Trend Micro <DIR> [03.04.2008 | 12:17] C: \ Program Files \ Trymedia <DIR> [24/11/2004 | 01:07] C: \ Program Files \ Uninstall Information <DIR> [27/05/2006 | 08:19] C: \ Program Files \ VideoLAN <DIR> [10.09.2008 | 01:44] C: \ Program Files \ <DIR> VUGames [11.10.2008 | 05:57] C: \ Program Files \ <DIR> Warcraft III [05.06.2008 | 01:07] C: \ Program Files \ <DIR> Weatherzone Tracker [13/09/2006 | 12:25] C: \ Program Files \ WinAVI <DIR> VideoConverter [14/03/2008 | 06:35] C: \ Program Files \ Windows Live <DIR> [10/10/2007 | 11:18] C: \ Program Files \ <DIR> Windows Media Connect 2 [25/08/2008 | 06:37] C: \ Program Files \ <DIR> Windows Media Player [14/09/2008 | 02:59] C: \ Program Files \ Windows NT <DIR> [03.10.2007 | 03:00] C: \ Program Files \ <DIR> Windows XP Fun Pack [24/11/2004 | 01:07] C: \ Program Files \ WindowsUpdate <DIR> [14/09/2008 | 05:41] C: \ Program Files \ WinRAR <DIR> [16/12/2004 | 04:24] C: \ Program Files \ <DIR> xerox [11.10.2008 | 12:29] C: \ Program Files \ Zone Labs <DIR> [11.10.2008 | 12:31] C: \ Program Files \ <DIR> ZoneAlarmSB -------------------- \ \ Listing des dossiers dans C: \ Program Files \ Common Files [11.10.2008 | 04:05] C: \ Program Files \ Fichiers communs \ Adobe <DIR> [11.10.2008 | 04:05] C: \ Program Files \ Fichiers communs \ Adobe AIR <DIR> [10.09.2007 | 04:28] C: \ Program Files \ Common Files \ Ahead <DIR> [03.10.2007 | 01:28] C: \ Program Files \ Common Files \ Apple <DIR> [28/08/2007 | 04:28] C: \ Program Files \ Fichiers communs \ Autodesk Shared <DIR> [03.06.2008 | 03:50] C: \ Program Files \ Common Files \ <DIR> DESIGNER [12.09.2005 | 09:27] C: \ Program Files \ Fichiers communs \ InstallShield <DIR> [12.09.2005 | 09:06] C: \ Program Files \ Common Files \ Java <DIR> [19/05/2008 | 07:25] C: \ Program Files \ Fichiers communs \ Microsoft Shared <DIR> [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ MSSoap <DIR> [15/07/2006 | 12:30] C: \ Program Files \ Common Files \ <DIR> Muvee Technologies [15/07/2006 | 12:31] C: \ Program Files \ Common Files \ <DIR> Nikon [16/12/2004 | 04:23] C: \ Program Files \ Fichiers communs \ ODBC <DIR> [19/05/2008 | 07:32] C: \ Program Files \ Fichiers communs \ Real <DIR> [20/05/2008 | 11:24] C: \ Program Files \ Common Files \ Services <DIR> [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ SpeechEngines <DIR> [19/05/2008 | 07:41] C: \ Program Files \ Common Files \ Symantec Shared <DIR> [18/08/2008 | 02:10] C: \ Program Files \ Common Files \ System <DIR> [11.03.2007 | 11:10] C: \ Program Files \ Common Files \ <DIR> Thraex Software [14/03/2008 | 06:34] C: \ Program Files \ Common Files \ WindowsLiveInstaller <DIR> -------------------- \ \ Process (41 Processes) IEXPLORE.EXE ~ [PID: 2612] IEXPLORE.EXE ~ [PID: 2640] iexplore.exe ~ [PID: 3160] IEXPLORE.EXE ~ [PID: 2940] -------------------- \ \ Recherche avec S_Lop C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp \ bis9A.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ Axis grand extra.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ilouimpk.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ jvuyskje.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ lfbsabiw.ex e -------------------- \ \ Recherche de Lop Files - Dossiers C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software règle du pavillon possède C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software règle du pavillon possède \ Première obj.exe C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software règle du pavillon possède \ Skip proc.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ ATOM DASH.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ Axis grand extra.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ ilouimpk.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ jvuyskje.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ lfbsabiw.ex e C: \ Program Files \ soapli ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp \ TorrentSpeeder. zip C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ adultfri endfinder [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ tion publicité [2]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ ero-advertising [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner@adopt.eu roclick [2]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ partypok er [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ 888 [2]. Txt C: \ WINDOWS \ Tasks \ A396018B9185B27B.job -------------------- \ \ Recherche dans le Registre [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curré ntVersion \ Uninstall \ Hold wma ref] "DisplayName" = "CID Help" "UninstallString" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ APPLIC ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe-uninstall" [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curré ntVersion \ Run] "MODE REEL" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ APPLIC ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe" "MODE REEL" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ APPLIC ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe" [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run] "Flag Owns Live Grim" = "C: \ \ Documents and Settings \ \ All Users \ \ Application Data \ \ Software règle du pavillon possède \ \ Première obj.exe" -------------------- \ \ Vérifier le fichier Hosts Fichier Hosts CLEAN -------------------- \ \ Recherche de fichiers cachés avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit / stealth malware detector par Gmer, http://www.gmer.net Rootkit scan 2008-10-11 18:12:47 Windows 5.1.2600 Service Pack 3 NTFS scanning processus cachés ... de balayage des fichiers cachés ... scan effectué avec succès processus cachés: 0 les fichiers cachés: 0 -------------------- \ \ Recherche d'autres infections -------------------- \ \ Cracks & Keygens .. C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ rld-spor.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ SporeApp.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Recent \ Spore.GENERIC_KEYGEN-FFF.lnk [F: 343] [D: 29] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp [F: 200] [D: 0] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies [F: 18285] [D: 24] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ tempor ~ 1 \ Content.IE5 1 - "C: \ Lop SD \ LopR_1.txt" - samedi 11.10.2008 | 18:07 - Option: [1] 2 - "C: \ Lop SD \ LopR_2.txt" - samedi 11.10.2008 | 18:14 - Option: [1] -------------------- \ \ Scan terminé à 18:14:22 |
|
#4
11 octobre 2008, 22:29
| |||
| |||
| Iexplore.exe nouveau virus! Télécharger NoLop à votre bureau. NoLop.exe
Aussi lancer un nouveau HijackThis scan et après le journal.
__________________ |
|
#5
11 octobre 2008, 22:46
| |||
| |||
| Iexplore.exe nouveau virus! Ok, voici les logs: Nolop NoLop! Connexion par Skate_Punk_21 Fix courir à partir de: C: \ Documents and Settings \ Compaq_Owner \ Desktop [12.10.2008] [4:33:52 PM] --- Infection Files Found/Removed--- C: \ WINDOWS \ Tasks \ A396018B9185B27B.job Début de déménagement ... Redémarrage ... Suppression de Lop's Leftover Files / Dossiers ... Modification de registre ... ** Fix Complete! ** --- Listing AppData sub directories --- C: \ Documents and Settings \ All Users \ Application Data \ Adobe C: \ Documents and Settings \ All Users \ Application Data \ Apple C: \ Documents and Settings \ All Users \ Application Data \ Apple Computer C: \ Documents and Settings \ All Users \ Application Data \ Autodesk C: \ Documents and Settings \ All Users \ Application Data \ AVG7 C: \ Documents and Settings \ All Users \ Application Data \ Avg8 - EMPTY Directory C: \ Documents and Settings \ All Users \ Application Data \ DVD Shrink C: \ Documents and Settings \ All Users \ Application Data \ Enternhelp C: \ Documents and Settings \ All Users \ Application Data \ Google C: \ Documents and Settings \ All Users \ Application Data \ Grisoft C: \ Documents and Settings \ All Users \ Application Data \ Installations C: \ Documents and Settings \ All Users \ Application Data \ Installshield C: \ Documents and Settings \ All Users \ Application Data \ Mailfrontier - EMPTY Directory C: \ Documents and Settings \ All Users \ Application Data \ Microsoft C: \ Documents and Settings \ All Users \ Application Data \ Microsoft Aide C: \ Documents and Settings \ All Users \ Application Data \ Nero C: \ Documents and Settings \ All Users \ Application Data \ n C: \ Documents and Settings \ All Users \ Application Data \ Drivers Pc Siège C: \ Documents and Settings \ All Users \ Application Data \ Quicktime C: \ Documents and Settings \ All Users \ Application Data \ Real - EMPTY Directory C: \ Documents and Settings \ All Users \ Application Data \ SBSI C: \ Documents and Settings \ All Users \ Application Data \ Seagate C: \ Documents and Settings \ All Users \ Application Data \ Software règle Flag Owns C: \ Documents and Settings \ All Users \ Application Data \ Sophos C: \ Documents and Settings \ All Users \ Application Data \ Spybot - Search & Destroy C: \ Documents and Settings \ All Users \ Application Data \ Symantec C: \ Documents and Settings \ All Users \ Application Data \ Temp - EMPTY Directory C: \ Documents and Settings \ All Users \ Application Data \ UdL C: \ Documents and Settings \ All Users \ Application Data \ Ultima_t15 C: \ Documents and Settings \ All Users \ Application Data \ Windows Genuine Advantage C: \ Documents and Settings \ All Users \ Application Data \ Wlinstaller C: \ Documents and Settings \ Compaq_owner \ Application Data \ Adobe C: \ Documents and Settings \ Compaq_owner \ Application Data \ Adobeum C: \ Documents and Settings \ Compaq_owner \ Application Data \ Ahead C: \ Documents and Settings \ Compaq_owner \ Application Data \ Apple Computer C: \ Documents and Settings \ Compaq_owner \ Application Data \ Arcsoft C: \ Documents and Settings \ Compaq_owner \ Application Data \ Atari C: \ Documents and Settings \ Compaq_owner \ Application Data \ Autodesk C: \ Documents and Settings \ Compaq_owner \ Application Data \ AVG7 C: \ Documents and Settings \ Compaq_owner \ Application Data \ Avgtoolbar C: \ Documents and Settings \ Compaq_owner \ Application Data \ Bittorrent C: \ Documents and Settings \ Compaq_owner \ Application Data \ Command & Conquer 3 Tiberium Wars C: \ Documents and Settings \ Compaq_owner \ Application Data \ Datalayer C: \ Documents and Settings \ Compaq_owner \ Application Data \ Dvdcss C: \ Documents and Settings \ Compaq_owner \ Application Data \ Epson C: \ Documents and Settings \ Compaq_owner \ Application Data \ Google C: \ Documents and Settings \ Compaq_owner \ Application Data \ Help - EMPTY Directory C: \ Documents and Settings \ Compaq_owner \ Application Data \ HPQ C: \ Documents and Settings \ Compaq_owner \ Application Data \ Identities C: \ Documents and Settings \ Compaq_owner \ Application Data \ Intervideo C: \ Documents and Settings \ Compaq_owner \ Application Data \ iWIN C: \ Documents and Settings \ Compaq_owner \ Application Data \ Joost C: \ Documents and Settings \ Compaq_owner \ Application Data \ Leadertech C: \ Documents and Settings \ Compaq_owner \ Application Data \ Limewire C: \ Documents and Settings \ Compaq_owner \ Application Data \ Macromedia C: \ Documents and Settings \ Compaq_owner \ Application Data \ Media Player Classic C: \ Documents and Settings \ Compaq_owner \ Application Data \ Microsoft C: \ Documents and Settings \ Compaq_owner \ Application Data \ Mozilla C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nikon C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nokia C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nokia Multimedia Player C: \ Documents and Settings \ Compaq_owner \ Application Data \ PC Suite C: \ Documents and Settings \ Compaq_owner \ Application Data \ Real C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sampleview - EMPTY Directory C: \ Documents and Settings \ Compaq_owner \ Application Data \ Securom C: \ Documents and Settings \ Compaq_owner \ Application Data \ Soap Love Lies C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sonic C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spintop C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spore C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spybot - Search & Destroy C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sun C: \ Documents and Settings \ Compaq_owner \ Application Data \ Symantec - EMPTY Directory C: \ Documents and Settings \ Compaq_owner \ Application Data \ U3 C: \ Documents and Settings \ Compaq_owner \ Application Data \ uTorrent C: \ Documents and Settings \ Compaq_owner \ Application Data \ Vlc C: \ Documents and Settings \ Compaq_owner \ Application Data \ Winbatch C: \ Documents and Settings \ Default User \ Application Data \ Apple Computer C: \ Documents and Settings \ Default User \ Application Data \ Identities C: \ Documents and Settings \ Default User \ Application Data \ Microsoft C: \ Documents and Settings \ Default User \ Application Data \ Real C: \ Documents and Settings \ Default User \ Application Data \ Sampleview - EMPTY Directory C: \ Documents and Settings \ Default User \ Application Data \ Symantec - EMPTY Directory C: \ Documents and Settings \ LocalService \ Application Data \ AVG7 - EMPTY Directory C: \ Documents and Settings \ LocalService \ Application Data \ Microsoft C: \ Documents and Settings \ NetworkService \ Application Data \ Microsoft HijackThis: Logfile de Trend Micro HijackThis v2.0.2 Scan sauvé à 4:44:14 PM, le 12.10.2008 Plate-forme: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ acs.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ Wuauclt.exe C: \ windows \ system \ hpsysdrv.exe C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP & osv = 5,1 O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file missing) O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe" nogui O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [EPSON Stylus CX3700 Series] C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ TEMP \ E_SC4.tmp" / EF "HKLM" O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / STARTUP O4 - HKLM \ .. \ Run: [Flag Owns Live Grim] C: \ Documents and Settings \ All Users \ Application Data \ Software règle du pavillon possède \ Première obj.exe O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe" O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe" O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [updateMgr] "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ AdobeUpdateManager.exe" AcRdB7_1_0-reboot 1 O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'LOCAL SERVICE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user') O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe O8 - Extra du menu contextuel: & Clean Traces - C: \ Program Files \ DAP \ Privacy Package \ dapcleanerie.htm O8 - Extra du menu contextuel: & Download with & DAP - C: \ Program Files \ DAP \ dapextie.htm O8 - Extra du menu contextuel: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html O8 - Extra du menu contextuel: Backward Links - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html O8 - Extra du menu contextuel: Cached Snapshot of Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html O8 - Extra du menu contextuel: Télécharger tout avec & DAP - C: \ Program Files \ DAP \ dapextie2.htm O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL.EXE/3000 O8 - Extra du menu contextuel: Pages similaires - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html O8 - Extra du menu contextuel: Traduire en anglais - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL O9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL O9 - Extra button: Connection Help - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HelpCtr \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra 'Tools' menuitem: Connection Help - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HelpCtr \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Photo Uploader 5) -- http://upload.facebook.com/controls/...oUploader5.cab O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab O16 - DPF: (96EEC7FF-106A-47F3-90D6-B4BB754AA40E) (POLI payés en ligne) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab O16 - DPF: (CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7) (get_atlcom Class) -- http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C: \ WINDOWS \ system32 \ acs.exe O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe O23 - Service: getPlus (R) Helper - NOS Microsystems Ltd - C: \ Program Files \ NOS \ bin \ getPlus_HelperSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Fichiers communs \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe -- Fin de fichier - 10,505 octets |
|
#6
11 octobre 2008, 22:53
| |||
| |||
| Iexplore.exe nouveau virus! HijackThis et sélectionnez Ouvrir Est-ce que seulement un système de balayage. Placez une coche à côté de l'entrée suivante: (s'il ya)
Quitter HijackThis. ---------- Note: les instructions ci-dessous ont été créées spécifiquement pour cet utilisateur. Si vous n'êtes pas cet utilisateur, NE PAS suivre ces instructions, sous peine d'endommager le fonctionnement de votre système Aller à Démarrer> Exécuter et le type notepad.exe puis cliquez sur OK Copiez et collez le dans le Bloc-notes ci-dessous et de mettre en fixme.reg à votre Desktop Code: REGEDIT4 [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run] "AlcxMonitor" =- "Flag Owns Live Grim" =- [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] "MODE REEL" =- Assurez-vous que vous me dire si vous recevez un message de réussite sur l'ajout de ce qui précède à la base de registre. Si vous ne recevez pas un message de réussite, cela n'a pas fonctionné. Supprimer les fixme.reg du Desktop. Redémarrez l'ordinateur ---------- Télécharger CCleaner Slim et de l'enregistrer sur votre bureau. Lorsque le fichier a été sauvegardé, allez sur votre bureau et double-cliquez sur ccsetupxxx_slim.exe Suivez les instructions pour installer le programme. Terminez l'installation puis:
---------- Télécharger Malwarebytes' Anti-Malware (MBAM)
Note supplémentaire: Si MBAM rencontre un fichier qui est difficile à enlever, il vous sera présenté avec 1 de 2 messages, cliquez sur OK à deux et laissez-passer MBAM avec le processus de désinfection, en cas de demande de redémarrer l'ordinateur, s'il vous plaît le faire immédiatement.
__________________ |
|
#7
11 octobre 2008, 23:26
| |||
| |||
| Iexplore.exe nouveau virus! J'ai reçu le message de réussite de la fixme.reg fichier et voici le log MBAM: Malwarebytes' Anti-Malware 1.28 Version de base de données: 1259 Windows 5.1.2600 Service Pack 3 12/10/2008 5:24:27 PM Mbam-log-2008-10-12 (17-24-27). txt Scan type: Quick Scan Objects scanned: 45849 Temps écoulé: 2 minute (s), 43 second (s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Fichiers infectés: 0 Memory Processes Infected: (Articles n ° malveillants détectés) Memory Modules Infected: (Articles n ° malveillants détectés) Registry Keys Infected: (Articles n ° malveillants détectés) Registry Values Infected: (Articles n ° malveillants détectés) Registry Data Items Infected: (Articles n ° malveillants détectés) Folders Infected: (Articles n ° malveillants détectés) Fichiers infectés: (Articles n ° malveillants détectés) |
|
#8
11 octobre 2008, 23:29
| |||
| |||
| Iexplore.exe nouveau virus! Comment tout est maintenant?
__________________ |
|
#9
11 octobre 2008, 23:33
| |||
| |||
| Iexplore.exe nouveau virus! Courir plus vite, mais dans le Gestionnaire des tâches dans des processus iexplore.exe est encore là et quand je le faire, il lui revient. Pour environ 5 minutes, elle utilise près de 99% cpu puis après un certain temps, il descend à 0, mais les membres d'utilisation des séjours autour de 100.000 K. |
|
#10
12 octobre 2008, 11:41
| |||
| |||
| Iexplore.exe nouveau virus! Télécharger ComboFix par SUBS de l'un des liens ci-dessous. Assurez-vous haut mettre à la Desktop. Lien # 1 Link # 2 ** Note: Il est important de le sauvegarder directement sur votre bureau Fermez tous les navigateurs Web. (Firefox, Internet Explorer, etc) avant de lancer ComboFix. Momentanément désactiver ton antivirus, Et tout antispyware protection en temps réel avant effectuer une analyse. Cliquez sur ce lien pour voir la liste des programmes de sécurité qui doit être désactivé et comment les désactiver. Double-cliquez sur combofix.exe et suivre les instructions. Lorsque vous avez terminé ComboFix va produire un journal pour vous. Publier le ComboFix log et un nouveau HijackThis log dans votre prochaine réponse. Important: Ne pas ComboFix clic de souris, la fenêtre en cours d'exécution. Cela mai à cause de décrochage. N'oubliez pas de réactiver votre antivirus et antispyware protection ComboFix est terminée.
__________________ |
